build: Add SGX, VFIO and rate limit testing to MQ

Run these workflows as part of the merge queue to help improve testing
coverage.

Signed-off-by: Rob Bradford <rbradford@rivosinc.com>
(cherry picked from commit cdafe5344d)

.github/workflows/integration-rate-limiter.yaml

@@ -1,21 +1,23 @@
 name: Cloud Hypervisor Tests (Rate-Limiter)
-on:
+on: [merge_group, pull_request]
-  push:
-    branches:
-      - main
 
 jobs:
   build:
     name: Tests (Rate-Limiter)
-    runs-on: jammy-rate-limiter
+    runs-on: ${{ github.event_name == 'pull_request' && 'ubuntu-latest' || 'jammy-rate-limiter' }}
     steps:
       - name: Fix workspace permissions
         if: ${{ github.event_name != 'pull_request' }}
         run: sudo chown -R github-runner:github-runner ${GITHUB_WORKSPACE}
       - name: Code checkout
+        if: ${{ github.event_name != 'pull_request' }}
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Run rate-limiter integration tests
+        if: ${{ github.event_name != 'pull_request' }}
         timeout-minutes: 10
         run: scripts/dev_cli.sh tests --integration-rate-limiter
+      - name: Skipping build for PR
+        if: ${{ github.event_name == 'pull_request' }}
+        run: echo "Skipping build for PR"

.github/workflows/integration-sgx.yaml

@@ -1,24 +1,27 @@
 name: Cloud Hypervisor Tests (SGX)
-on:
+on: [merge_group, pull_request]
-  push:
-    branches:
-      - main
 
 jobs:
   build:
     name: Tests (SGX)
-    runs-on: jammy-sgx
+    runs-on: ${{ github.event_name == 'pull_request' && 'ubuntu-latest' || 'jammy-sgx' }}
     steps:
       - name: Fix workspace permissions
         if: ${{ github.event_name != 'pull_request' }}
         run: sudo chown -R github-runner:github-runner ${GITHUB_WORKSPACE}
       - name: Code checkout
+        if: ${{ github.event_name != 'pull_request' }}
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Run SGX integration tests
+        if: ${{ github.event_name != 'pull_request' }}
         timeout-minutes: 10
         run: scripts/dev_cli.sh tests --integration-sgx
       - name: Run SGX integration tests for musl
+        if: ${{ github.event_name != 'pull_request' }}
         timeout-minutes: 10
         run: scripts/dev_cli.sh tests --integration-sgx --libc musl
+      - name: Skipping build for PR
+        if: ${{ github.event_name == 'pull_request' }}
+        run: echo "Skipping build for PR"

.github/workflows/integration-vfio.yaml

@@ -1,24 +1,27 @@
 name: Cloud Hypervisor Tests (VFIO)
-on:
+on: [merge_group, pull_request]
-  push:
-    branches:
-      - main
 
 jobs:
   build:
     name: Tests (VFIO)
-    runs-on: jammy-vfio
+    runs-on: ${{ github.event_name == 'pull_request' && 'ubuntu-latest' || 'jammy-vfio' }}
     steps:
       - name: Fix workspace permissions
         if: ${{ github.event_name != 'pull_request' }}
         run: sudo chown -R github-runner:github-runner ${GITHUB_WORKSPACE}
       - name: Code checkout
+        if: ${{ github.event_name != 'pull_request' }}
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Run VFIO integration tests
+        if: ${{ github.event_name != 'pull_request' }}
         timeout-minutes: 15
         run: scripts/dev_cli.sh tests --integration-vfio
       - name: Run VFIO integration tests for musl
+        if: ${{ github.event_name != 'pull_request' }}
         timeout-minutes: 15
         run: scripts/dev_cli.sh tests --integration-vfio --libc musl
+      - name: Skipping build for PR
+        if: ${{ github.event_name == 'pull_request' }}
+        run: echo "Skipping build for PR"