[ric-oliv]

Part 5 of 6 for #5806, based on #5810. The two Unsupported AOT jobs check that Sentry turns SentryNative off on runtimes without a native SDK, linux-arm and win-x86. They waited for the whole build matrix to test the macOS packages, and then added their own minutes after it. Any leg's packages work, though, and every leg already packs its own. So linux-arm now runs in the linux-arm64 leg and win-x86 in the win-x64 leg, and the two jobs are gone.

The linux-arm job was also flaky. 4 of 57 attempts failed, and the one log left showed "Exec format error", because some arm64 hosts can't run 32-bit ARM binaries.

• The leg registers QEMU for 32-bit ARM with docker/setup-qemu-action, pinned as in alpine.yml.
• Its binfmt_misc handler comes before the kernel's own loader, so QEMU runs the test app on every host, even where the host could run it natively. In ci: test unsupported AOT runtimes in the build legs #5791 a small uname program confirmed that, reporting armv7l on such a host.
• The leg now checks only that the handler is enabled.

This adds one dependency: setup-qemu-action pulls tonistiigi/binfmt from Docker Hub on every linux-arm64 run, as alpine.yml already does. If Docker Hub is down, that leg fails at that step. The action runs that image privileged, so it's pinned by digest, here and in alpine.yml, the way the action itself is pinned.

In #5791 the tail after the matrix was gone. On linux-arm64 the new steps took about a minute, and the AOT and container cases passed under QEMU.

On this PR's own CI

3 runs. On linux-arm64 the four new steps took 1.0 minute each time, 0.6 of it the linux-arm AOT case, and the handler check passed every time. On win-x64 the win-x86 case took 0.5 to 0.8. No job waits for every leg anymore. On main, the two AOT jobs ran 1.7 minutes past the last leg. The whole stack's numbers are in #5806.

#skip-changelog

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 76.13%. Comparing base (3db1268) to head (44331a8).

Additional details and impacted files

@@                               Coverage Diff                               @@
##           ci/run-device-integration-tests-in-own-jobs    #5811      +/-   ##
===============================================================================
+ Coverage                                        76.12%   76.13%   +0.01%     
===============================================================================
  Files                                              528      528              
  Lines                                            19579    19579              
  Branches                                          3829     3829              
===============================================================================
+ Hits                                             14904    14906       +2     
+ Misses                                            3792     3791       -1     
+ Partials                                           883      882       -1     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[jamescrosswell]

aot.Tests.ps1 checks that against this leg's own packages

Similar issue to https://github.com/getsentry/sentry-dotnet/pull/5809/changes#r4383085676 but probably not as much of a concern here as I think AOT builds/tests for non-mobile code are less sensitive to changes to the runners. So OK to do it in this case - just worth noting we'd be breaking an otherwise long held and inflexible rule that we only/always test the same thing that we ship.