Skip ACVP tests on Amazon Linux 2 containers

- Skip ACVP tests when Python on the container does not support
  hashlib sha512_224.

- In previous commit, when adding several containers to
  ec2_compatibilitytests, we found that three Amazon Linux 2 containers
  could not run ACVP tests correctly due to missing support for newer
  hashlib hash types:

    * `amazonlinux-2-aarch:base`
    * `amazonlinux-2-aarch:gcc-7x`
    * `amazonlinux-2-aarch:clang-7x`

- For these containers, we set `acvptest` to false. We also added a guard
  around `make quickcheck` in `ci_ec2_container.yml` and left a comment
  for future refinement.

Signed-off-by: willieyz <willie.zhao@chelpis.com>

Author: willieyz

.github/workflows/ci.yml

@@ -620,24 +620,45 @@ jobs:
       matrix:
         container:
           - id: amazonlinux-2-aarch:base
+            # TODO: Python 3.7 on Amazon Linux 2 lacks `sha512_224` in hashlib; set to false to skip acvp.
+            acvptest: false  
           - id: amazonlinux-2-aarch:gcc-7x
+            # TODO: Python 3.7 on Amazon Linux 2 lacks `sha512_224` in hashlib; set to false to skip acvp.
+            acvptest: false
           - id: amazonlinux-2-aarch:clang-7x
+            # TODO: Python 3.7 on Amazon Linux 2 lacks `sha512_224` in hashlib; set to false to skip acvp.
+            acvptest: false
           - id: amazonlinux-2023-aarch:base
+            acvptest: true
           - id: amazonlinux-2023-aarch:gcc-11x
+            acvptest: true
           - id: amazonlinux-2023-aarch:clang-15x
+            acvptest: true
           - id: amazonlinux-2023-aarch:clang-15x-sanitizer
+            acvptest: true
           # - id: amazonlinux-2023-aarch:cryptofuzz Not yet supported
           - id: ubuntu-22.04-aarch:gcc-12x
+            acvptest: true
           - id: ubuntu-22.04-aarch:gcc-11x
+            acvptest: true
           - id: ubuntu-20.04-aarch:gcc-8x
+            acvptest: true
           - id: ubuntu-20.04-aarch:gcc-7x
+            acvptest: true
           - id: ubuntu-20.04-aarch:clang-9x
+            acvptest: true
           - id: ubuntu-20.04-aarch:clang-8x
+            acvptest: true
           - id: ubuntu-20.04-aarch:clang-7x-bm-framework
+            acvptest: true
           - id: ubuntu-20.04-aarch:clang-7x
+            acvptest: true
           - id: ubuntu-20.04-aarch:clang-10x
+            acvptest: true
           - id: ubuntu-22.04-aarch:base
+            acvptest: true
           - id: ubuntu-20.04-aarch:base
+            acvptest: true
     name: Compatibility tests (${{ matrix.container.id }})
     permissions:
       contents: 'read'
@@ -654,7 +675,7 @@ jobs:
       opt: all
       functest: true
       kattest: true
-      acvptest: true
+      acvptest: ${{ matrix.container.acvptest }}
       lint: false
       verbose: true
       cflags: "-O0"

.github/workflows/ci_ec2_container.yml

@@ -169,6 +169,9 @@ jobs:
         with:
           sudo: ""
       - name: make quickcheck
+        # TODO: refine quickcheck conditions.
+        # For now, we run quickcheck only when all tests (func, kat, acvp, opt) are enabled.
+        if: ${{ inputs.functest && inputs.acvptest && inputs.kattest && inputs.opt == 'all' }}
         run: |
           OPT=0 make quickcheck
           make clean            >/dev/null