diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 880dc00ac..738f668ab 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -13,7 +13,7 @@ concurrency:
 
 jobs:
   coverage:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     env:
       CODE_TYPE: stable
@@ -42,6 +42,8 @@ jobs:
       - name: 📊 Run Tests with Coverage enabled
         # 'set +e' and 'exit 0' - that means the workflow will not fail even the test failures are present. The failing tests are not directive for the code coverage reports itself
         run: |
+          # allow unprivileged user namespace
+          sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
           set +e
           xvfb-run --auto-servernum --server-args='-screen 0 1920x1080x24' npm run test:coverage
           exit 0
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 4bc9b3429..162154658 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -24,7 +24,7 @@ jobs:
 
   check:
     if: always()
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     name: 🚦 Status Check
     needs: [test]
     steps:
diff --git a/.github/workflows/template-main.yaml b/.github/workflows/template-main.yaml
index 16fd4aa18..468aa0a4c 100644
--- a/.github/workflows/template-main.yaml
+++ b/.github/workflows/template-main.yaml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
-        os: [ubuntu-latest, macos-latest, windows-latest]
+        os: [ubuntu-24.04, macos-latest, windows-latest]
       fail-fast: false
 
     env:
@@ -52,12 +52,15 @@ jobs:
         run: npm install --workspace=extester-test
 
       - name: 🔍 Run Tests (macOS, windows)
-        if: matrix.os != 'ubuntu-latest'
+        if: matrix.os != 'ubuntu-24.04'
         run: npm test
 
       - name: 🔍 Run Tests (linux)
-        if: matrix.os == 'ubuntu-latest'
-        run: xvfb-run --auto-servernum --server-args='-screen 0 1920x1080x24' npm test
+        if: matrix.os == 'ubuntu-24.04'
+        run: |
+          # allow unprivileged user namespace
+          sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0  
+          xvfb-run --auto-servernum --server-args='-screen 0 1920x1080x24' npm test
 
       - name: 💾 Upload Screenshots
         uses: actions/upload-artifact@v4