ci: fix recipe filtering for COMPATIBLE_MACHINE restrictions (#15258)

The workflow was not properly filtering recipes that use the pattern:
  COMPATIBLE_MACHINE = "null"
  COMPATIBLE_MACHINE:aarch64 = "(.*)"
  COMPATIBLE_MACHINE:x86-64 = "(.*)"

This pattern sets a default of null (incompatible with all), then
overrides for specific architectures. The filter was only checking
for explicit COMPATIBLE_HOST:arch = "null" or COMPATIBLE_MACHINE:arch
= "null", missing the default null case.

Now the filter:
1. Checks COMPATIBLE_HOST:arch = "null" (existing)
2. Checks for COMPATIBLE_MACHINE = "null" and verifies there's an
   override for the current architecture
3. Checks explicit COMPATIBLE_MACHINE:arch = "null" (existing)

This prevents build failures on incompatible architectures for recipes
like firecracker-bin, jailer-bin, and aws-lc.

Fixes: #15249

Author: rpcme

.github/workflows/build-test-recipe.yml

@@ -140,29 +140,68 @@ jobs:
             echo THINGS_TO_EXCLUDE: $THINGS_TO_EXCLUDE
           fi
 
-          # Filter out recipes with COMPATIBLE_HOST:$ARCH = "null" or COMPATIBLE_MACHINE restrictions
+          # Filter out recipes with COMPATIBLE_HOST or COMPATIBLE_MACHINE restrictions
           FILTERED_RECIPES=""
           for recipe in $RECIPES; do
             SKIP_RECIPE=false
+            RECIPE_FILES=$(find meta-aws/ -name "${recipe}.bb" -o -name "${recipe}_*.bb" 2>/dev/null)
+            
+            if [ -z "$RECIPE_FILES" ]; then
+              continue
+            fi
 
-            # Check COMPATIBLE_HOST
-            if find meta-aws/ -name "${recipe}.bb" -o -name "${recipe}_*.bb" | xargs grep -q "COMPATIBLE_HOST:${ARCH}[[:space:]]*=[[:space:]]*\"null\"" 2>/dev/null; then
+            # Check COMPATIBLE_HOST:$ARCH = "null"
+            if echo "$RECIPE_FILES" | xargs grep -q "COMPATIBLE_HOST:${ARCH}[[:space:]]*=[[:space:]]*\"null\"" 2>/dev/null; then
+              echo "Skipping $recipe: COMPATIBLE_HOST:${ARCH} = null"
               SKIP_RECIPE=true
             fi
 
-            # Check COMPATIBLE_MACHINE for ARM32
-            if [ "${{ matrix.machine }}" == "qemuarm" ]; then
-              if find meta-aws/ -name "${recipe}.bb" -o -name "${recipe}_*.bb" | xargs grep -q "COMPATIBLE_MACHINE:armv7[av][[:space:]]*=[[:space:]]*\"null\"" 2>/dev/null; then
-                SKIP_RECIPE=true
-              fi
+            # Check for default COMPATIBLE_MACHINE = "null" without override for this arch
+            if echo "$RECIPE_FILES" | xargs grep -q "^COMPATIBLE_MACHINE[[:space:]]*=[[:space:]]*\"null\"" 2>/dev/null; then
+              # Check if there's an override for this specific architecture
+              case "${{ matrix.machine }}" in
+                qemuarm)
+                  if ! echo "$RECIPE_FILES" | xargs grep -q "COMPATIBLE_MACHINE:armv7[av][[:space:]]*=[[:space:]]*\"(.*)\"" 2>/dev/null; then
+                    echo "Skipping $recipe: COMPATIBLE_MACHINE = null (no armv7 override)"
+                    SKIP_RECIPE=true
+                  fi
+                  ;;
+                qemuarm64)
+                  if ! echo "$RECIPE_FILES" | xargs grep -q "COMPATIBLE_MACHINE:aarch64[[:space:]]*=[[:space:]]*\"(.*)\"" 2>/dev/null; then
+                    echo "Skipping $recipe: COMPATIBLE_MACHINE = null (no aarch64 override)"
+                    SKIP_RECIPE=true
+                  fi
+                  ;;
+                qemux86-64)
+                  if ! echo "$RECIPE_FILES" | xargs grep -q "COMPATIBLE_MACHINE:x86-64[[:space:]]*=[[:space:]]*\"(.*)\"" 2>/dev/null; then
+                    echo "Skipping $recipe: COMPATIBLE_MACHINE = null (no x86-64 override)"
+                    SKIP_RECIPE=true
+                  fi
+                  ;;
+                qemuriscv64)
+                  if ! echo "$RECIPE_FILES" | xargs grep -q "COMPATIBLE_MACHINE:riscv64[[:space:]]*=[[:space:]]*\"(.*)\"" 2>/dev/null; then
+                    echo "Skipping $recipe: COMPATIBLE_MACHINE = null (no riscv64 override)"
+                    SKIP_RECIPE=true
+                  fi
+                  ;;
+              esac
             fi
 
-            # Check COMPATIBLE_MACHINE for RISC-V
-            if [ "${{ matrix.machine }}" == "qemuriscv64" ]; then
-              if find meta-aws/ -name "${recipe}.bb" -o -name "${recipe}_*.bb" | xargs grep -q "COMPATIBLE_MACHINE:riscv64[[:space:]]*=[[:space:]]*\"null\"" 2>/dev/null; then
-                SKIP_RECIPE=true
-              fi
-            fi
+            # Check explicit COMPATIBLE_MACHINE:$ARCH = "null"
+            case "${{ matrix.machine }}" in
+              qemuarm)
+                if echo "$RECIPE_FILES" | xargs grep -q "COMPATIBLE_MACHINE:armv7[av][[:space:]]*=[[:space:]]*\"null\"" 2>/dev/null; then
+                  echo "Skipping $recipe: COMPATIBLE_MACHINE:armv7 = null"
+                  SKIP_RECIPE=true
+                fi
+                ;;
+              qemuriscv64)
+                if echo "$RECIPE_FILES" | xargs grep -q "COMPATIBLE_MACHINE:riscv64[[:space:]]*=[[:space:]]*\"null\"" 2>/dev/null; then
+                  echo "Skipping $recipe: COMPATIBLE_MACHINE:riscv64 = null"
+                  SKIP_RECIPE=true
+                fi
+                ;;
+            esac
 
             if [ "$SKIP_RECIPE" = "false" ]; then
               FILTERED_RECIPES+="$recipe "