Add hostapd hwsim test workflow

[ksperling-apple]

• Add hostapd-hwsim-runner container. This has all the hostapd build dependencies as well as a qemu-based setup for running the hwsim tests inside a nested VM (due to the need for the mac80211_hwsim kernel module).
• Add hostapd-hwsim-tests workflow and necessary patches for compiling ubus / ucode support out of an OpenWrt-patched hostapd.
• Use the new openwrt-version action from the other build jobs. This means the base OpenWrt version now only lives in the matter-openwrt-build Dockerfile rather than separately in each workflow file as well.
• Add wpad (hostapd) packages to the main CI config.

[ksperling-apple]

/gemini review

[Copilot]

Pull request overview

Adds automated hostapd hwsim testing to CI by introducing a dedicated runner container and a new workflow that prepares an OpenWrt-patched hostapd source tree and executes hwsim tests inside a nested QEMU VM. It also centralizes OpenWrt version selection into a composite action and expands CI package builds to include wpad variants.

Changes:

• Add a hostapd-hwsim-tests workflow to prepare OpenWrt-patched hostapd sources and run hwsim tests under QEMU with selectable TLS backends.
• Add a hostapd-hwsim-runner container (Dockerfile + qemu-run) to support nested VM execution required for mac80211_hwsim.
• Introduce a reusable openwrt-version composite action and use it from existing container/package build workflows; add wpad variants to CI config.

Reviewed changes

Copilot reviewed 10 out of 10 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
overlay/hostapd/patches/o110-tests-force-tls-config.patch	Adjusts hwsim build/test scripts to allow forcing TLS backend configs and disables DPP under wolfSSL.
overlay/hostapd/patches/o002-compile-guards.patch	Adds compile guards to allow building hostapd/wpa_supplicant without ubus/ucode dependencies.
.github/workflows/hostapd-hwsim-tests.yaml	New workflow to build patched hostapd sources and run hwsim tests in QEMU.
.github/workflows/build-packages.yaml	Switches to centralized OpenWrt version selection and adds workflow_dispatch override input.
.github/workflows/build-matter-openwrt-build.yaml	Replaces inline version-detection with the new composite openwrt-version action.
.github/workflows/build-hostapd-hwsim-runner.yaml	Adds workflow to build/push the new hwsim runner container image.
.github/actions/openwrt-version/action.yaml	New composite action to derive OPENWRT_VERSION from an override or the Dockerfile.
.containers/hostapd-hwsim-runner/qemu-run	New helper script to run commands inside a QEMU VM with virtiofs.
.containers/hostapd-hwsim-runner/Dockerfile	New container image that installs build deps, QEMU tooling, kernel/modules, and wolfSSL built from source.
.config.ci	Adds wpad (hostapd) package variants to the main CI build set.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request