test: Add test for kernel build

Adding a new integration test to assert that the kernel build script
will succeed.

Signed-off-by: Jack Thomson <[email protected]>

Author: JackThomson2

.buildkite/pipeline_pr.py

@@ -68,10 +68,19 @@
     for step in kani_grp["steps"]:
         step["label"] = "🔍 Kani"
 
+if any(x.parent.name == "hiding_ci" for x in changed_files):
+    pipeline.build_group_per_arch(
+        "🕵️ Build Secret Hiding Kernel",
+        pipeline.devtool_test(
+            pytest_opts="integration_tests/build/test_hiding_kernel.py",
+        ),
+        depends_on_build=False,
+    )
+
 if run_all_tests(changed_files):
     pipeline.build_group(
         "📦 Build",
-        pipeline.devtool_test(pytest_opts="integration_tests/build/"),
+        pipeline.devtool_test(pytest_opts="-m nonci integration_tests/build/"),
         depends_on_build=False,
     )
 

tests/integration_tests/build/test_hiding_kernel.py

@@ -0,0 +1,17 @@
+# Copyright 2025 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+# SPDX-License-Identifier: Apache-2.0
+"""A test which checks that the secret hiding enable kernel builds successfully."""
+
+import pytest
+
+from framework import utils
+
+
+@pytest.mark.nonci
+def test_build_hiding_kernel():
+    """
+    In the test we will run our kernel build script to check it succeeds an builds the hidden kernel
+    """
+    utils.check_output(
+        "../resources/hiding_ci/build_and_install_kernel.sh --no-install --tidy"
+    )