Tiny enhancements for CI tests

tests/integration_tests/security/test_vulnerabilities.py

@@ -280,6 +280,20 @@ def get_vuln_files_exception_dict(template):
     return exception_dict
 
 
+@pytest.mark.no_block_pr
+def test_vulnerabilities_on_host():
+    """
+    Test vulnerabilities files on host.
+    """
+    vuln_dir = "/sys/devices/system/cpu/vulnerabilities"
+
+    # `grep` returns 1 if no lines were selected.
+    ecode, stdout, stderr = utils.run_cmd(
+        f"grep -r Vulnerable {vuln_dir}", ignore_return_code=True
+    )
+    assert ecode == 1, f"stdout:\n{stdout}\nstderr:\n{stderr}\n"
+
+
 @pytest.mark.no_block_pr
 def check_vulnerabilities_files_on_guest(microvm, template=None):
     """

tools/devtool

@@ -556,6 +556,9 @@ cmd_test() {
 
     # If we got to here, we've got all we need to continue.
     say "Kernel version: $(uname -r)"
+    if [ "$(uname --machine)" = "x86_64" ]; then
+        say "Microcode version: $(sudo cat /sys/devices/system/cpu/cpu0/microcode/version)"
+    fi
     say "$(lscpu)"
     say "Starting test run ..."