test: Add test for kernel build

Adding a new integration test to assert that the kernel build script
will succeed.

Signed-off-by: Jack Thomson <[email protected]>

Author: JackThomson2

.buildkite/pipeline_pr.py

@@ -68,6 +68,15 @@
     for step in kani_grp["steps"]:
         step["label"] = "🔍 Kani"
 
+if any(x.parent.name == "hiding_ci" for x in changed_files):
+    pipeline.build_group_per_arch(
+        "🕵️ Build Secret Hiding Kernel",
+        pipeline.devtool_test(
+            pytest_opts="-m nonci integration_tests/build/test_hiding_kernel.py",
+        ),
+        depends_on_build=False,
+    )
+
 if run_all_tests(changed_files):
     pipeline.build_group(
         "📦 Build",

resources/hiding_ci/build_and_install_kernel.sh

@@ -69,7 +69,7 @@ apply_series_mbox() {
 apply_series_link() {
   patch_url=$(cat $1)
   echo "Fetching mbox from:" $patch_url
-  wget -O lore.mbox.gz "$patch_url/t.mbox.gz"
+  curl --output lore.mbox.gz "$patch_url/t.mbox.gz"
   gunzip lore.mbox
   apply_series_mbox lore.mbox
   rm lore.mbox

tests/integration_tests/build/test_hiding_kernel.py

@@ -0,0 +1,29 @@
+# Copyright 2025 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+# SPDX-License-Identifier: Apache-2.0
+"""A test which checks that the secret hiding enable kernel builds successfully."""
+
+import pytest
+
+from framework import utils
+
+
+@pytest.mark.timeout(600)
+@pytest.mark.nonci
+def test_build_hiding_kernel():
+    """
+    In the test we will run our kernel build script to check it succeeds an builds the hidden kernel
+    """
+
+    # We have some extra deps for building the kernel that are not in the dev contaner
+    utils.check_output(
+        "apt install -y build-essential libncurses-dev bison flex libssl-dev libelf-dev bc dwarves libncurses5-dev kmod fakeroot"
+    )
+
+    # We have to configure git otherwise patch application fails
+    # the git log still credits the original author
+    utils.check_output('git config --global user.name "Firecracker CI"')
+    utils.check_output('git config --global user.email "[email protected]"')
+
+    utils.check_output(
+        "cd ../resources/hiding_ci; ./build_and_install_kernel.sh --no-install --tidy"
+    )