Update CI images to Azure Linux 4.0

[am11]

See dotnet/dotnet-buildtools-prereqs-docker#1646.

[azure-pipelines]

Azure Pipelines:
Successfully started running 6 pipeline(s).
10 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

[dotnet-policy-service]

Tagging subscribers to this area: @dotnet/runtime-infrastructure
See info in area-owners.md if you want to be subscribed.

[am11]

Blocked on dotnet/dotnet-buildtools-prereqs-docker#1746.

[am11]

Next up dotnet/dotnet-buildtools-prereqs-docker#1748.

[am11]

All configs are passing now. win-86 System.Buffer test failure is unrelated to the unix-only change.

[akoeplinger]

there are some more references in eng/pipelines/libraries/helix-queues-setup.yml but I assume we want to keep them (for now?) since they're actually testing on AZL3 not just build.

I'll trigger a couple optional pipelines to be sure but overall LGTM

[akoeplinger]

/azp run runtime-community,runtime-sanitized,runtime-linuxbionic

[azure-pipelines]

Azure Pipelines:
Successfully started running 3 pipeline(s).

[am11]

there are some more references in eng/pipelines/libraries/helix-queues-setup.yml but I assume we want to keep them (for now?) since they're actually testing on AZL3 not just build.

That's right, we have azl3 and 4 coverage in those places. Perhaps we should just delete azl3 as usually we add "test coverage" for platform with high usage like Debian, Fedora etc. which I think azl3 does not qualify?

[am11]

Failures are unrelated. @jkoritzinsky, AddressSanitizer failure: https://helixr1107v0xdcypoyl9e7f.blob.core.windows.net/dotnet-runtime-refs-pull-134049-merge-d36df7f4c4a24199a6/nativeaot/1/console.dfa9ed91.log?helixlogtype=result

[akoeplinger]

/ba-g runtime-sanitized failures already exist on main and runtime ones are unrelated

[akoeplinger]

Perhaps we should just delete azl3 as usually we add "test coverage" for platform with high usage like Debian, Fedora etc. which I think azl3 does not qualify?

This is moslty to cover our internal usages which won't move to AZL4 for some time so keeping AZL3 testing is fine.

[akoeplinger]

we should do the same for the VMR

[am11]

we should do the same for the VMR

dotnet/dotnet#9686