ci: Build and test OpenVMM runtime-rs on AKS

Build the pinned OpenVMM binary from source and package it in the Kata
payload. Wire the openvmm-azure-runtime-rs shim into kata-deploy and
Helm.

Add OpenVMM to the shared amd64 asset matrix and run small and normal
cbl-mariner AKS jobs. Select runtime-rs paths in test helpers and skip
the known unsupported BlockModern emptyDir path.

Signed-off-by: Aurélien Bombo <abombo@microsoft.com>
Generated-By: GitHub Copilot

tests/common.bash

@@ -789,7 +789,7 @@ function enabling_hypervisor() {
 	declare -r CONTAINERD_SHIM_KATA="/usr/local/bin/containerd-shim-kata-${KATA_HYPERVISOR}-v2"
 
 	case "${KATA_HYPERVISOR}" in
-		dragonball|clh-runtime-rs|clh-azure-runtime-rs|qemu-runtime-rs|qemu-se-runtime-rs)
+		dragonball|clh-runtime-rs|clh-azure-runtime-rs|openvmm-azure-runtime-rs|qemu-runtime-rs|qemu-se-runtime-rs)
 			sudo ln -sf "${KATA_DIR}/runtime-rs/bin/containerd-shim-kata-v2" "${CONTAINERD_SHIM_KATA}"
 			declare -r CONFIG_DIR="${KATA_DIR}/share/defaults/kata-containers/runtime-rs"
 			;;

tests/hypervisor_helpers.sh

@@ -18,6 +18,7 @@ ALL_HYPERVISORS=(
 	"clh-azure"
 	"clh-runtime-rs"
 	"clh-azure-runtime-rs"
+	"openvmm-azure-runtime-rs"
 	"dragonball"
 	"qemu"
 	"qemu-runtime-rs"

tests/integration/kubernetes/k8s-plain-ephemeral-data-storage.bats

@@ -18,7 +18,7 @@ skip_unsupported_runtime() {
 	# it never reached clh-runtime-rs or dragonball in CI; this generic
 	# block-plain test would, so skip those unsupported VMM paths explicitly.
 	case "${KATA_HYPERVISOR}" in
-		clh-runtime-rs|clh-azure-runtime-rs|dragonball)
+		clh-runtime-rs|clh-azure-runtime-rs|dragonball|openvmm-azure-runtime-rs)
 			skip "block-plain emptyDir uses runtime-rs BlockModern, whose VMM glue is missing for ${KATA_HYPERVISOR}"
 			;;
 	esac