Fix build in CI

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>

Author: saschagrunert

dependencies.yaml

@@ -115,6 +115,12 @@ dependencies:
     - path: hack/install-libbpf.sh
       match: VERSION
 
+  - name: libelf
+    version: 0.193
+    refPaths:
+    - path: hack/install-libelf.sh
+      match: VERSION
+
   - name: debian-vmlinux
     version: trixie
     refPaths:
@@ -174,11 +180,6 @@ dependencies:
       match: llvmPackages_\d+.clang-unwrapped
     - path: nix/derivation-bpf.nix
       match: llvm_\d+
-
-  # TODO: update to the latest clang of debian 12 packages are available.
-  - name: clang-debian-12
-    version: 16
-    refPaths:
     - path: hack/pull-security-profiles-operator-verify
       match: CLANG_VERSION
 

hack/install-libelf.sh

@@ -0,0 +1,37 @@
+#!/usr/bin/env bash
+# Copyright 2025 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+set -euo pipefail
+
+# TODO: remove this script once the debian image (via golang:1.25 or higher) ships
+# the fixed libelf version.
+#
+apt-get install -y \
+    bzip2 \
+    m4 \
+    zlib1g-dev
+
+VERSION=0.193
+curl -sSfL --retry 5 --retry-delay 3 \
+    "https://sourceware.org/elfutils/ftp/$VERSION/elfutils-$VERSION.tar.bz2" -o- |
+    tar xfj -
+
+DIR="elfutils-$VERSION"
+trap 'rm -rf -- "$DIR"' EXIT
+
+pushd "$DIR"
+./configure
+make install -j8
+popd

hack/install-packages

@@ -5,8 +5,8 @@ set -euo pipefail
 apt-get update
 apt-get install -y \
     libapparmor-dev \
-    libelf-dev \
     libseccomp-dev \
     libzstd-dev
 
+./hack/install-libelf.sh
 ./hack/install-libbpf.sh

hack/pull-security-profiles-operator-verify

@@ -3,8 +3,8 @@ set -euo pipefail
 
 ./hack/install-packages
 
-CLANG_VERSION=16
-apt-get install -y software-properties-common
+CLANG_VERSION=18
+apt-get install -y lsb-release
 curl -sSfL --retry 5 --retry-delay 3 https://apt.llvm.org/llvm.sh | bash -s -- $CLANG_VERSION all
 ln -sf /usr/bin/clang-format-$CLANG_VERSION /usr/bin/clang-format