Add mbedtls4 CI coverage

Signed-off-by: Peter M <petermm@gmail.com>

Author: petermm

.github/workflows/build-and-test-on-freebsd.yaml

@@ -35,7 +35,7 @@ concurrency:
 jobs:
   build-and-test-on-freebsd:
     runs-on: ubuntu-24.04
-    name: Build and test AtomVM on FreeBSD
+    name: Build and test AtomVM on FreeBSD ${{ matrix.os_release }} (${{ matrix.mbedtls }})
     env:
       ATOMVM_EXAMPLE: "atomvm-example"
 
@@ -44,6 +44,10 @@ jobs:
 
       matrix:
         os_release: ["13.5", "14.3", "15.0"]
+        mbedtls: ["mbedtls@3"]
+        include:
+          - os_release: "14.3"
+            mbedtls: "mbedtls@4"
 
     steps:
 
@@ -62,8 +66,27 @@ jobs:
 
     - name: "Install deps"
       shell: freebsd {0}
+      env:
+        MBEDTLS_VARIANT: ${{ matrix.mbedtls }}
       run: |
-        pkg install -y curl cmake gperf erlang elixir rebar3 mbedtls3 ninja
+        pkg install -y curl cmake gperf erlang elixir rebar3 ninja
+        if [ "$MBEDTLS_VARIANT" = "mbedtls@3" ]; then
+          pkg install -y mbedtls3
+        fi
+        if [ "$MBEDTLS_VARIANT" = "mbedtls@4" ]; then
+          pkg install -y git
+        fi
+
+    - name: "Install specific MbedTLS version"
+      if: matrix.mbedtls == 'mbedtls@4'
+      shell: freebsd {0}
+      run: |
+        cd $GITHUB_WORKSPACE;
+        git clone --depth 1 --branch mbedtls-4.0.0 --recurse-submodules https://github.com/Mbed-TLS/mbedtls
+        cd mbedtls
+        cmake -S . -B build -DENABLE_TESTING=OFF -DUSE_SHARED_MBEDTLS_LIBRARY=On -DCMAKE_INSTALL_PREFIX=/usr/local
+        cmake --build build -j$(sysctl -n hw.ncpu)
+        cmake --install build
 
     - name: "Add hostname to /etc/hosts for distribution tests"
       shell: freebsd {0}
@@ -103,10 +126,16 @@ jobs:
 
     - name: "Build: run cmake"
       shell: freebsd {0}
+      env:
+        MBEDTLS_VARIANT: ${{ matrix.mbedtls }}
       run: |
         cd $GITHUB_WORKSPACE;
         cd build
-        cmake .. -DMBEDTLS_ROOT_DIR=/usr/local -DAVM_WARNINGS_ARE_ERRORS=ON
+        if [ "$MBEDTLS_VARIANT" = "mbedtls@4" ]; then
+          cmake .. -DMBEDTLS_ROOT_DIR=/usr/local -DAVM_WARNINGS_ARE_ERRORS=ON
+        else
+          cmake .. -DAVM_WARNINGS_ARE_ERRORS=ON
+        fi
 
     - name: "Build: compile"
       shell: freebsd {0}

.github/workflows/build-and-test.yaml

@@ -159,6 +159,12 @@ jobs:
           otp: "master"
           elixir_version: "main"
 
+        # Additional mbedtls@4 coverage with the default Linux toolchain
+        - cc: "cc"
+          cxx: "c++"
+          otp: "28"
+          mbedtls: "mbedtls@4"
+
         # Additional latest & -Os compiler builds
         - cc: "gcc-14"
           cxx: "g++-14"
@@ -495,12 +501,23 @@ jobs:
 
     - name: "Install deps"
       if: matrix.container != ''
-      run: sudo apt install -y ${{ matrix.compiler_pkgs}} cmake gperf zlib1g-dev doxygen valgrind libmbedtls-dev
+      env:
+        MBEDTLS_VARIANT: ${{ matrix.mbedtls || 'default' }}
+      run: |
+        sudo apt install -y ${{ matrix.compiler_pkgs}} cmake gperf zlib1g-dev doxygen valgrind
+        if [[ "$MBEDTLS_VARIANT" != "mbedtls@4" ]]; then
+          sudo apt install -y libmbedtls-dev
+        fi
 
     - name: "Install deps"
       if: matrix.container == ''
+      env:
+        MBEDTLS_VARIANT: ${{ matrix.mbedtls || 'default' }}
       run: |
-        sudo apt install -y ${{ matrix.compiler_pkgs}} cmake gperf zlib1g-dev doxygen libmbedtls-dev libc6-dbg
+        sudo apt install -y ${{ matrix.compiler_pkgs}} cmake gperf zlib1g-dev doxygen libc6-dbg
+        if [[ "$MBEDTLS_VARIANT" != "mbedtls@4" ]]; then
+          sudo apt install -y libmbedtls-dev
+        fi
         # Get a more recent valgrind
         sudo snap install valgrind --classic
 
@@ -536,6 +553,19 @@ jobs:
           https://repo.hex.pm
           https://cdn.jsdelivr.net/hex
 
+    - name: "Install specific MbedTLS version"
+      if: matrix.mbedtls == 'mbedtls@4'
+      run: |
+        git clone --depth 1 --branch mbedtls-4.0.0 --recurse-submodules https://github.com/Mbed-TLS/mbedtls
+        cd mbedtls
+        mkdir build
+        cd build
+        cmake -DENABLE_TESTING=OFF -DUSE_SHARED_MBEDTLS_LIBRARY=On -DCMAKE_INSTALL_PREFIX=/usr/local ..
+        make -j$(nproc)
+        sudo make install
+        sudo ldconfig
+        echo "MBEDTLS_ROOT_DIR=/usr/local" >> $GITHUB_ENV
+
     # Builder info
     - name: "System info"
       run: |
@@ -568,7 +598,7 @@ jobs:
     - name: "Build: run cmake"
       working-directory: build
       run: |
-        cmake ${{ matrix.cmake_opts_fp }} ${{ matrix.cmake_opts_smp }} ${{ matrix.cmake_opts_other || env.DEFAULT_CMAKE_OPTS_OTHER }} ..
+        cmake ${MBEDTLS_ROOT_DIR:+-DMBEDTLS_ROOT_DIR=$MBEDTLS_ROOT_DIR} ${{ matrix.cmake_opts_fp }} ${{ matrix.cmake_opts_smp }} ${{ matrix.cmake_opts_other || env.DEFAULT_CMAKE_OPTS_OTHER }} ..
         # git clone will use more recent timestamps than cached beam files
         # touch them so we can benefit from the cache and avoid costly beam file rebuild.
         find . -name '*.beam' -exec touch {} \;