tests: add tests for KMU and keys provisioning

[gchwier]

Add two test applications with test scenarios automated with pytest.
Frist: verify_west_ncs_provision - application with hardcoded keys only to check if command west ncs-provission writes proper keys.
Second: hello_for_kmu - hello_world based app with MCUboot, keys are uploaded with west command and application is flashed. Checked if app is booted when using correct keys and not booted with wrong keys.

To test one can use command:
${ZEPHYR_BASE}/scripts/twister --device-testing -p nrf54l15dk/nrf54l15/cpuapp --device-serial /dev/ttyACM1 --west-flash="--erase" -T tests/subsys/kmu -vv --no-clean

[NordicBuilder]

CI Information

^{To view the history of this post, clich the 'edited' button above}
Build number: 5

Inputs:

Sources:

sdk-nrf: PR head: 843da3edd796a38053cb5e53abe5bfa5b0293b5f

more details

sdk-nrf:

PR head: 843da3edd796a38053cb5e53abe5bfa5b0293b5f
merge base: 32c41c59d57a77e919a55932433a5f52e2278df2
target head (main): 70c22253fb6a8b5e02f61c4de165843a875e0a21
Diff

Github labels

Enabled	Name	Description
	ci-disabled	Disable the ci execution
	ci-all-test	Run all of ci, no test spec filtering will be done
	ci-force-downstream	Force execution of downstream even if twister fails
	ci-run-twister	Force run twister
	ci-run-zephyr-twister	Force run zephyr twister

List of changed files detected by CI (20)

CODEOWNERS
tests
│  ├── subsys
│  │  ├── kmu
│  │  │  ├── hello_for_kmu
│  │  │  │  ├── CMakeLists.txt
│  │  │  │  ├── prj.conf
│  │  │  │  ├── sb_secondary_key.conf
│  │  │  │  ├── sb_wrong_key.conf
│  │  │  │  ├── src
│  │  │  │  │  │ main.c
│  │  │  │  ├── sysbuild.conf
│  │  │  │  ├── sysbuild
│  │  │  │  │  │ mcuboot.conf
│  │  │  │  │ testcase.yaml
│  │  │  ├── keys
│  │  │  │  ├── root-ed25519-1.pem
│  │  │  │  ├── root-ed25519-2.pem
│  │  │  │  │ root-ed25519-w.pem
│  │  │  ├── pytest
│  │  │  │  ├── common.py
│  │  │  │  ├── conftest.py
│  │  │  │  ├── test_kmu_key_provision.py
│  │  │  │  │ test_kmu_with_mcuboot.py
│  │  │  ├── verify_west_ncs_provision
│  │  │  │  ├── CMakeLists.txt
│  │  │  │  ├── prj.conf
│  │  │  │  ├── src
│  │  │  │  │  │ main.c
│  │  │  │  │ testcase.yaml

Outputs:

Toolchain

Version: b44b7a08c9
Build docker image: docker-dtr.nordicsemi.no/sw-production/ncs-build:b44b7a08c9_912848a074

Test Spec & Results: ✅ Success; ❌ Failure; 🟠 Queued; 🟡 Progress; ◻️ Skipped; ⚠️ Quarantine

• ◻️ Toolchain - Skipped: existing toolchain is used
• ✅ Build twister
  • sdk-nrf test count: 40
• ✅ Integration tests

Disabled integration tests

• • desktop52_verification
  • doc-internal
  • test-fw-nrfconnect-apps
  • test-fw-nrfconnect-ble_mesh
  • test-fw-nrfconnect-ble_samples
  • test-fw-nrfconnect-boot
  • test-fw-nrfconnect-chip
  • test-fw-nrfconnect-fem
  • test-fw-nrfconnect-nfc
  • test-fw-nrfconnect-nrf-iot_cloud
  • test-fw-nrfconnect-nrf-iot_libmodem-nrf
  • test-fw-nrfconnect-nrf-iot_lwm2m
  • test-fw-nrfconnect-nrf-iot_mosh
  • test-fw-nrfconnect-nrf-iot_nrf_provisioning
  • test-fw-nrfconnect-nrf-iot_positioning
  • test-fw-nrfconnect-nrf-iot_samples
  • test-fw-nrfconnect-nrf-iot_thingy91
  • test-fw-nrfconnect-nrf-iot_zephyr_lwm2m
  • test-fw-nrfconnect-nrf_crypto
  • test-fw-nrfconnect-proprietary_esb
  • test-fw-nrfconnect-rpc
  • test-fw-nrfconnect-rs
  • test-fw-nrfconnect-tfm
  • test-fw-nrfconnect-thread
  • test-fw-nrfconnect-zigbee
  • test-low-level
  • test-sdk-audio
  • test-sdk-dfu
  • test-sdk-find-my
  • test-sdk-mcuboot
  • test-sdk-pmic-samples
  • test-sdk-sidewalk
  • test-sdk-wifi

Note: This message is automatically posted and updated by the CI

[gchwier]

failed after rebasing to #18366,
received build error:
west build -p -b nrf54l15dk/nrf54l15/cpuapp tests/subsys/kmu/hello_for_kmu

modules/nrf/subsys/nrf_security/src/libmbedcrypto_base.a(threading_alt.c.obj): in function `k_mutex_lock':
ncs/nrf/build/mcuboot/zephyr/include/generated/zephyr/syscalls/kernel.h:986: undefined reference to `z_impl_k_mutex_lock'

[Vge0rge]

failed after rebasing to #18366, received build error: west build -p -b nrf54l15dk/nrf54l15/cpuapp tests/subsys/kmu/hello_for_kmu

modules/nrf/subsys/nrf_security/src/libmbedcrypto_base.a(threading_alt.c.obj): in function `k_mutex_lock':
ncs/nrf/build/mcuboot/zephyr/include/generated/zephyr/syscalls/kernel.h:986: undefined reference to `z_impl_k_mutex_lock'

Hey, can you try to rebase on this and see if it fixes your build issue?
#18487

[gchwier]

Hey, can you try to rebase on this and see if it fixes your build issue? #18487

works with that change, thank you!