Crash and leak tests; platform matrix; ppc64 via cross; CI runs builds under qemu

Co-Authored-By: Claude <noreply@anthropic.com>

.github/workflows/ci.yml

@@ -51,6 +51,10 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v5
+      - uses: actions/setup-go@v6
+        with:
+          go-version: "1.26.x"
+          cache-dependency-path: oracle/go/go.sum
       - run: rustup show active-toolchain || rustup toolchain install
       - name: zig and cargo-zigbuild
         run: |
@@ -59,22 +63,28 @@ jobs:
           mkdir -p "$HOME/zig" && tar -xJf zig.tar.xz -C "$HOME/zig" --strip-components=1
           echo "$HOME/zig" >>"$GITHUB_PATH"
           cargo install cargo-zigbuild --version 0.23.4 --locked
+          cargo install cross --version 0.2.5 --locked
       - name: targets
         run: |
           rustup target add x86_64-unknown-linux-musl aarch64-unknown-linux-musl i686-unknown-linux-musl \
             arm-unknown-linux-musleabihf armv7-unknown-linux-musleabihf riscv64gc-unknown-linux-musl \
             loongarch64-unknown-linux-musl powerpc64le-unknown-linux-musl powerpc64-unknown-linux-gnu \
-            s390x-unknown-linux-gnu x86_64-pc-windows-gnu i686-pc-windows-gnu aarch64-pc-windows-gnullvm wasm32-wasip1
+            s390x-unknown-linux-gnu x86_64-pc-windows-gnu i686-pc-windows-gnu aarch64-pc-windows-gnullvm wasm32-wasip1 \
+            x86_64-unknown-freebsd i686-unknown-freebsd x86_64-unknown-netbsd x86_64-unknown-illumos x86_64-pc-solaris
       - name: build
         run: |
+          # Everything but macOS, which the test job builds on a Mac.
           TARGETS="linux/amd64 linux/arm64 linux/386 linux/armv6 linux/armv7 linux/riscv64 linux/loong64 \
-            linux/ppc64le linux/ppc64 linux/s390x windows/amd64 windows/386 windows/arm64 wasip1/wasm" ./build.sh
-      - name: run the arm64 and big-endian s390x builds under qemu
+            linux/ppc64le linux/ppc64 linux/s390x android/arm64 windows/amd64 windows/386 windows/arm64 \
+            freebsd/amd64 freebsd/386 netbsd/amd64 illumos/amd64 solaris/amd64 wasip1/wasm" ./build.sh
+      - name: run builds under qemu, cross-checked with the Go oracle
         run: |
-          sudo apt-get update -q && sudo apt-get install -yq qemu-user
-          cargo build --locked --release
-          EMU=qemu-aarch64 scripts/smoke.sh dist/vault-linux-arm64 target/release/vault
-          EMU="qemu-s390x -L /usr/s390x-linux-gnu" scripts/smoke.sh dist/vault-linux-s390x target/release/vault || echo "s390x needs a glibc sysroot; build-only"
+          sudo apt-get update -q && sudo apt-get install -yq qemu-user libc6-s390x-cross libc6-ppc64-cross
+          (cd oracle/go && go build -o ../../target/vault-go .)
+          for t in "arm64 qemu-aarch64" "armv7 qemu-arm" "riscv64 qemu-riscv64" "ppc64le qemu-ppc64le" \
+                   "s390x qemu-s390x -L /usr/s390x-linux-gnu" "ppc64 qemu-ppc64 -L /usr/powerpc64-linux-gnu"; do
+            EMU="${t#* }" scripts/smoke.sh "dist/vault-linux-${t%% *}" target/vault-go
+          done
       - uses: actions/upload-artifact@v4
         with:
           name: dist