Add aarch64 native builds to CI

.github/workflows/ci.yml

@@ -272,9 +272,12 @@ jobs:
           - target: cross-arm32
             compiler: gcc
             host_os: ubuntu-24.04
-          - target: cross-arm64
+          - target: shared
             compiler: gcc
-            host_os: ubuntu-24.04
+            host_os: ubuntu-24.04-arm
+          - target: shared
+            compiler: clang
+            host_os: ubuntu-24.04-arm
           - target: cross-ppc64
             compiler: gcc
             host_os: ubuntu-24.04

.github/workflows/nightly.yml

@@ -100,9 +100,9 @@ jobs:
           - target: cross-android-arm64-amalgamation
             compiler: clang
             host_os: ubuntu-24.04
-          - target: cross-arm64-amalgamation
+          - target: amalgamation
             compiler: gcc
-            host_os: ubuntu-24.04
+            host_os: ubuntu-24.04-arm
           - target: emscripten
             compiler: emcc
             host_os: macos-14
@@ -170,22 +170,30 @@ jobs:
         compiler: ["clang", "gcc"]
         cxxflags: ["-O1", "-O2", "-O3"]
         target:   ["valgrind-ct-full"]
+        platform: ["ubuntu-24.04", "ubuntu-24.04-arm"]
+
+        exclude:
+          - platform: "ubuntu-24.04-arm"
+            cxxflags: "-O1"
 
         include:
           - compiler: clang
             cxxflags: ""              # default compilation flags
             target:   "valgrind-full" # memory bug detection
+            platform: "ubuntu-24.04"
           - compiler: clang
             cxxflags: "-Os"
             # Clang's -Os generated binary is fast enough to run the full test suite.
             target:   "valgrind-ct-full"
+            platform: "ubuntu-24.04"
           - compiler: gcc
             cxxflags: "-Os"
             # GCC with -Os generates a much slower binary, that won't finish
             # before timing out on GH Actions, so we run a reduced set of tests.
             target:   "valgrind-ct"
+            platform: "ubuntu-24.04"
 
-    runs-on: ubuntu-24.04
+    runs-on: ${{ matrix.platform }}
 
     steps:
       - uses: actions/checkout@v4
@@ -197,7 +205,7 @@ jobs:
         uses: ./.github/actions/setup-build-agent
         with:
           target: ${{ matrix.target }}
-          cache-key: linux-x86_64-${{ matrix.compiler }}-${{ matrix.target }}-${{ matrix.cxxflags }}
+          cache-key: ${{ matrix.platform }}-${{ matrix.compiler }}-${{ matrix.target }}-${{ matrix.cxxflags }}
 
       - name: Valgrind Checks
         run: python3 ./src/scripts/ci_build.py --make-tool=make --cc=${{ matrix.compiler }} --custom-optimization-flags="${{ matrix.cxxflags }}" ${{ matrix.target }}

src/scripts/ci/setup_gh_actions.sh

@@ -64,13 +64,8 @@ if type -p "apt-get"; then
         # (l)ist mode (avoiding https://github.com/actions/runner-images/issues/9996)
         sudo NEEDRESTART_MODE=l apt-get -qq install valgrind
 
-    elif [ "$TARGET" = "static" ]; then
-        sudo apt-get -qq install "${tpm2_specific_packages[@]}"
-        echo "BOTAN_TPM2_ENABLED=${ci_support_of_tpm2}" >> "$GITHUB_ENV"
-
     elif [ "$TARGET" = "shared" ]; then
-        sudo apt-get -qq install libboost-dev "${tpm2_specific_packages[@]}"
-        echo "BOTAN_TPM2_ENABLED=${ci_support_of_tpm2}" >> "$GITHUB_ENV"
+        sudo apt-get -qq install libboost-dev
 
     elif [ "$TARGET" = "examples" ] || [ "$TARGET" = "amalgamation" ] || [ "$TARGET" = "tlsanvil" ] || [ "$TARGET" = "clang-tidy" ] ; then
         sudo apt-get -qq install libboost-dev libtss2-dev

src/scripts/ci_build.py

@@ -248,7 +248,7 @@ def sanitize_kv(some_string):
     if target == 'coverage':
         flags += ['--with-coverage-info']
 
-    if target in ['coverage']:
+    if target in ['coverage', 'valgrind', 'valgrind-full', 'valgrind-ct', 'valgrind-ct-full']:
         flags += ['--with-debug-info']
 
     if target in ['coverage', 'sanitizer', 'fuzzers']: