diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index aca1f9c..51f9c02 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -27,7 +27,7 @@ permissions: {}
 jobs:
   lint:
     name: Lint
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
     steps:
@@ -49,7 +49,7 @@ jobs:
           - ubuntu-20.04
           - ubuntu-24.04
           - ubuntu-26.04
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
       packages: write
@@ -61,8 +61,14 @@ jobs:
       # the host's IPv6 capability and then requires IPv6 NAT to create networks
       # for kind. So we load it here.
       # Ref: https://github.com/moby/moby/pull/47062
-      - name: Load kernel module IPv6 NAT
-        run: sudo modprobe ip6table_nat
+      # On Ubuntu 26.04 runners, legacy iptables modules are not loaded by default,
+      # which are required by docker daemon in older container environments (e.g. ubuntu-20.04).
+      - name: Load kernel modules for NAT and iptables
+        run: |
+          sudo modprobe iptable_nat
+          sudo modprobe iptable_filter
+          sudo modprobe ip6table_nat
+          sudo modprobe ip6table_filter
       - name: Set up Docker Hub mirrors
         run: |
           sudo mkdir -p /etc/docker
@@ -71,8 +77,7 @@ jobs:
       - name: Set up QEMU
         run: |
           sudo apt-get update
-          sudo apt-get install -y qemu-user-static binfmt-support
-          sudo update-binfmts --display
+          sudo apt-get install -y qemu-user-binfmt
       - uses: earthbuild/actions-setup@f4d20223e70dbb43b5fc08c4d857ab9cf0dbf3ae # v2.2.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/dockerhub-description.yml b/.github/workflows/dockerhub-description.yml
index db84c1b..b5ebc80 100644
--- a/.github/workflows/dockerhub-description.yml
+++ b/.github/workflows/dockerhub-description.yml
@@ -9,7 +9,7 @@ permissions: {}
 
 jobs:
   docker-hub-description:
-    runs-on: ubuntu-24.04-arm
+    runs-on: ubuntu-26.04-arm
     permissions:
       contents: read
     steps:
diff --git a/.github/workflows/earthly-count.yml b/.github/workflows/earthly-count.yml
index dfe9740..d61fd86 100644
--- a/.github/workflows/earthly-count.yml
+++ b/.github/workflows/earthly-count.yml
@@ -8,7 +8,7 @@ permissions: {}
 
 jobs:
   count-earthly:
-    runs-on: ubuntu-24.04-arm
+    runs-on: ubuntu-26.04-arm
     permissions:
       contents: read
       pull-requests: write