Add ec2_functests for further platforms test

- This commit adds EC2 functional tests for mldsa-native,
  similar to what we have in mlkem-native.

- Unlike other functional tests that run on GitHub runners, the EC2
  tests provide a bit more flexibility and control over the actual CPU
  architecture being tested.

- During this work, we found that the CI did not raise an error when
  specifying a config_variations value that does not exist.
  For example, In this commit, We passed several non-existent config
  headers from PR #607, which has not been merged yet. The CI silently
  accepted these missing configurations without any error.

- Since the configuration header from PR #607 is not yet merged,
  we temporarily comment out the config_variations parameter.
  Once PR #607 is ported, we will re-enable it.

- We also plan to add test ID validation,
  similar to mlkem-native PR #1291, to prevent false-positive test
  results caused by invalid configuration entries.

Signed-off-by: willieyz <[email protected]>

Author: willieyz

.github/workflows/ci.yml

@@ -450,6 +450,63 @@ jobs:
           kat: true
           acvp: true
           nix-shell: ${{ matrix.compiler.shell }}
+  ec2_functests:
+    strategy:
+      fail-fast: false
+      matrix:
+        target:
+          - name: AMD EPYC 4th gen (t3a)
+            ec2_instance_type: t3a.small
+            ec2_ami: ubuntu-latest (x86_64)
+            ec2_volume_size: 20
+            compile_mode: native
+            opt: all
+            # TODO: This config do not exist for now, will be available after PR #607 ("Add Runtime Dispatch") is merged.
+            # config_variations: 'native-cap-CPUID_AVX2'
+          - name: Intel Xeon 4th gen (t3)
+            ec2_instance_type: t3.small
+            ec2_ami: ubuntu-latest (x86_64)
+            ec2_volume_size: 20
+            compile_mode: native
+            opt: all
+            # TODO: This config do not exist for now, will be available after PR #607 ("Add Runtime Dispatch") is merged.
+            # config_variations: 'native-cap-CPUID_AVX2'
+          - name: Graviton2 (c6g.medium)
+            ec2_instance_type: c6g.medium
+            ec2_ami: ubuntu-latest (aarch64)
+            ec2_volume_size: 20
+            compile_mode: native
+            opt: all
+            # TODO: This config do not exist for now, will be available after PR #607 ("Add Runtime Dispatch") is merged.
+            # config_variations: 'native-cap-ON native-cap-OFF native-cap-ID_AA64PFR1_EL1'
+          - name: Graviton3 (c7g.medium)
+            ec2_instance_type: c7g.medium
+            ec2_ami: ubuntu-latest (aarch64)
+            ec2_volume_size: 20
+            compile_mode: native
+            opt: all
+            # TODO: This config do not exist for now, will be available after PR #607 ("Add Runtime Dispatch") is merged.
+            # config_variations: 'native-cap-ID_AA64PFR1_EL1'
+    name: Platform tests  (${{ matrix.target.name }})
+    permissions:
+      contents: 'read'
+      id-token: 'write'
+    if: github.repository_owner == 'pq-code-package' && !github.event.pull_request.head.repo.fork
+    uses: ./.github/workflows/ci_ec2_reusable.yml
+    with:
+      name: ${{ matrix.target.name }}
+      ec2_instance_type: ${{ matrix.target.ec2_instance_type }}
+      ec2_ami: ${{ matrix.target.ec2_ami }}
+      ec2_ami_id: ${{ matrix.target.ec2_ami_id }}
+      compile_mode: ${{ matrix.target.compile_mode }}
+      opt: ${{ matrix.target.opt }}
+      config_variations: ${{ matrix.target.config_variations || '' }}
+      functest: true
+      kattest: true
+      acvptest: true
+      lint: false
+      verbose: true
+    secrets: inherit
   check_autogenerated_files:
     strategy:
       fail-fast: false