Initial changes for the ICPC World Finals in Baku

* Install php-bcmath extension
* Copy the pc2packages key to the Ubuntu archive keyring
* Install openjdk 21
* Copy kotlin folder instead of using old apt package
* Use correct repo URL
* Do not use cgroupv1

Author: nickygerritsen

provision-contest/ansible/roles/base_packages/defaults/main.yml

@@ -42,6 +42,7 @@ INSTALLED_PACKAGES:
   - php-mysql
   - php-xml
   - php-zip
+  - php-bcmath
   - pv
   - python3-sphinx
   - python3-sphinx-rtd-theme

provision-contest/ansible/roles/judgedaemon/tasks/main.yml

@@ -33,26 +33,69 @@
     src: chroot-list
     dest: /tmp/dj_ansible/
 
+- name: Check if pc2packages key is already in ubuntu-archive-keyring.gpg
+  ansible.builtin.shell: |
+    gpg --no-default-keyring --keyring /usr/share/keyrings/ubuntu-archive-keyring.gpg --list-keys --with-colons | \
+    grep -q "$(gpg --show-keys --with-colons /etc/apt/trusted.gpg.d/pc2packages.asc | grep '^fpr:' | head -1 | cut -d: -f10)"
+  register: key_exists
+  failed_when: false
+  changed_when: false
+  check_mode: false
+  when: ICPC_IMAGE
+
+- name: Add pc2packages key to ubuntu-archive-keyring.gpg
+  ansible.builtin.shell: |
+    gpg --no-default-keyring --keyring /usr/share/keyrings/ubuntu-archive-keyring.gpg --import /etc/apt/trusted.gpg.d/pc2packages.asc
+  when:
+    - ICPC_IMAGE
+    - key_exists.rc != 0
+
 - name: Create chroot
   shell: "set -o pipefail &&
           {{ DJ_DIR }}/misc-tools/dj_make_chroot -y -H
-            -i icpc-kotlinc,openjdk-17-jdk-headless
+            -i openjdk-21-jdk-headless
             -l \"$(ls /tmp/dj_ansible/install-chroot/*.deb 2>/dev/null | tr '\n' ',')\"
             -s \"$(ls /tmp/dj_ansible/chroot-list/*.list 2>/dev/null | tr '\n' ',')\"
             2>&1 | tee /tmp/dj_make_chroot.log;
           grep '^Done building chroot in' /tmp/dj_make_chroot.log"
   environment:
-    DEBMIRROR: "{%- if WF_RESTRICTED_NETWORK and ICPC_IMAGE -%}https://packages/ubuntu
-                {%- elif ICPC_IMAGE -%}https://sysopspackages.icpc.global/ubuntu
+    DEBMIRROR: "{%- if WF_RESTRICTED_NETWORK and ICPC_IMAGE -%}https://packages/ubuntu-noble
+                {%- elif ICPC_IMAGE -%}https://sysopspackages.icpc.global/ubuntu-noble
                 {%- else -%}
                 {%- endif -%}"
   args:
     executable: /bin/bash
     creates: "/chroot/domjudge"
 
+- name: Create kotlinc directory in chroot
+  ansible.builtin.file:
+    path: /chroot/domjudge/usr/lib/kotlinc
+    state: directory
+    mode: '0755'
+  when: ICPC_IMAGE
+
+- name: Sync kotlinc folder to chroot
+  ansible.posix.synchronize:
+    src: /opt/kotlinc/
+    dest: /chroot/domjudge/usr/lib/kotlinc/
+    delete: false
+    recursive: true
+  delegate_to: "{{ inventory_hostname }}"
+  when: ICPC_IMAGE
+
+- name: Create symlinks for kotlin binaries in chroot
+  ansible.builtin.file:
+    src: ../../lib/kotlinc/bin/{{ item }}
+    dest: /chroot/domjudge/usr/local/bin/{{ item }}
+    state: link
+  loop:
+    - kotlin
+    - kotlinc
+  when: ICPC_IMAGE
+
 - name: Pre-generate the kernel flags for ansible usage
   set_fact:
-    procline: "apparmor=0 systemd.unified_cgroup_hierarchy=0 cgroup_enable=memory swapaccount=1 isolcpus={{ cpucore | join(',') }}"
+    procline: "apparmor=0 cgroup_enable=memory swapaccount=1 isolcpus={{ cpucore | join(',') }}"
 
 - name: Add cgroup kernel parameters
   lineinfile: