CI-tests: STM32L4 and STM32WB using CubeMX SDK

Author: jackctj117

.github/workflows/test-build-stm32cube.yml

@@ -0,0 +1,104 @@
+name: Wolfboot Reusable Build Workflow for STM32Cube SDK
+
+on:
+
+  workflow_call:
+    inputs:
+      arch:
+        required: true
+        type: string
+      config-file:
+        required: true
+        type: string
+      cube-repo:
+        description: 'STM32Cube repository to clone (e.g., STMicroelectronics/STM32CubeL4)'
+        required: true
+        type: string
+      make-args:
+        required: false
+        type: string
+
+jobs:
+
+  build:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          submodules: true
+
+      - uses: actions/checkout@v4
+        with:
+          repository: ${{inputs.cube-repo}}
+          path: STM32Cube
+
+      - name: Workaround for sources.list
+        run: |
+            # Replace sources
+
+            set -euxo pipefail
+
+            # Peek (what repos are active now)
+            apt-cache policy
+            grep -RInE '^(deb|Types|URIs)' /etc/apt || true
+
+            # Enable nullglob so *.list/*.sources that don't exist don't break sed
+            shopt -s nullglob
+
+            echo "Replace sources.list (legacy)"
+            sudo sed -i \
+              -e "s|https\?://azure\.archive\.ubuntu\.com/ubuntu/?|http://mirror.arizona.edu/ubuntu/|g" \
+              /etc/apt/sources.list || true
+
+            echo "Replace sources.list.d/*.list (legacy)"
+            for f in /etc/apt/sources.list.d/*.list; do
+              sudo sed -i \
+                -e "s|https\?://azure\.archive\.ubuntu\.com/ubuntu/?|http://mirror.arizona.edu/ubuntu/|g" \
+                "$f"
+            done
+
+            echo "Replace sources.list.d/*.sources (deb822)"
+            for f in /etc/apt/sources.list.d/*.sources; do
+              sudo sed -i \
+                -e "s|https\?://azure\.archive\.ubuntu\.com/ubuntu/?|http://mirror.arizona.edu/ubuntu/|g" \
+                -e "s|https\?://azure\.archive\.ubuntu\.com|http://mirror.arizona.edu|g" \
+                "$f"
+            done
+
+            echo "Fix /etc/apt/apt-mirrors.txt (used by URIs: mirror+file:...)"
+            if grep -qE '^[[:space:]]*https?://azure\.archive\.ubuntu\.com/ubuntu/?' /etc/apt/apt-mirrors.txt; then
+              # Replace azure with our mirror (idempotent)
+              sudo sed -i 's|https\?://azure\.archive\.ubuntu\.com/ubuntu/|http://mirror.arizona.edu/ubuntu/|g' /etc/apt/apt-mirrors.txt
+            fi
+
+            # Peek (verify changes)
+            grep -RIn "azure.archive.ubuntu.com" /etc/apt || true
+            grep -RInE '^(deb|Types|URIs)' /etc/apt || true
+            echo "--- apt-mirrors.txt ---"
+            cat /etc/apt/apt-mirrors.txt || true
+
+      - name: Update repository
+        run: sudo apt-get update
+
+      - name: Install cross compilers
+        run: |
+          sudo apt-get install -y gcc-arm-none-eabi
+
+      - name: make distclean
+        run: |
+          make distclean
+
+      - name: Select config
+        run: |
+          cp ${{inputs.config-file}} .config && make include/target.h
+
+      - name: Build tools
+        run: |
+          make -C tools/keytools && make -C tools/bin-assemble
+
+      - name: Build wolfboot
+        run: |
+          make STM32CUBE="$GITHUB_WORKSPACE/STM32Cube" ${{inputs.make-args}} V=1
+

.github/workflows/test-configs.yml

@@ -375,12 +375,12 @@ jobs:
       arch: arm
       config-file: ./config/examples/stm32l0.config
 
-  # TODO: stm32l4-cube.config requires Cube HAL
-  # stm32l4_cube_test:
-  #   uses: ./.github/workflows/test-build.yml
-  #   with:
-  #     arch: arm
-  #     config-file: ./config/examples/stm32l4-cube.config
+  stm32l4_cube_test:
+    uses: ./.github/workflows/test-build-stm32cube.yml
+    with:
+      arch: arm
+      config-file: ./config/examples/stm32l4-cube.config
+      cube-repo: STMicroelectronics/STM32CubeL4
 
   stm32l5_nonsecure_dualbank_test:
     uses: ./.github/workflows/test-build.yml
@@ -436,12 +436,15 @@ jobs:
       arch: arm
       config-file: ./config/examples/stm32wb-delta.config
 
-  # TODO: stm32wb-pka-1mb.config requires STM32 HAL #include "stm32wbxx_hal.h
-  # stm32wb_pka_1mb_test:
-  #   uses: ./.github/workflows/test-build.yml
-  #   with:
-  #     arch: arm
-  #     config-file: ./config/examples/stm32wb-pka-1mb.config
+  # NOTE: PKA=1 test may fail until wolfSSL fix is merged:
+  # https://github.com/wolfSSL/wolfssl/pull/9446
+  stm32wb_pka_1mb_test:
+    uses: ./.github/workflows/test-build-stm32cube.yml
+    with:
+      arch: arm
+      config-file: ./config/examples/stm32wb-pka-1mb.config
+      cube-repo: STMicroelectronics/STM32CubeWB
+      make-args: PKA=1 NO_ARM_ASM=1
 
   stm32wb_tpm_test:
     uses: ./.github/workflows/test-build.yml