flake: build and export SAP cloud-hypervisor

This builds and exports the cloud-hypervisor build from
the Cyberus "gardenlinux[-dev]" branch.

On-behalf-of: SAP philipp.schuster@sap.com

Author: phip1611

chv.nix

@@ -0,0 +1,51 @@
+{
+  # from flake inputs
+  craneLib,
+  # from nixpkgs
+  openssl,
+  pkg-config,
+  # other
+  cloud-hypervisor-src,
+  rustToolchain,
+}:
+
+let
+  craneLib' = craneLib.overrideToolchain rustToolchain;
+
+  commonArgs = {
+    src = craneLib'.cleanCargoSource cloud-hypervisor-src;
+    nativeBuildInputs = [
+      pkg-config
+    ];
+    buildInputs = [
+      openssl
+    ];
+    # Fix build. Reference:
+    # - https://github.com/sfackler/rust-openssl/issues/1430
+    # - https://docs.rs/openssl/latest/openssl/
+    OPENSSL_NO_VENDOR = true;
+  };
+
+  # Downloaded and compiled dependencies.
+  cargoArtifacts = craneLib'.buildDepsOnly (
+    commonArgs
+    // {
+      pname = "cloud-hypervisor-deps";
+    }
+  );
+
+  cargoPackageKvm = craneLib'.buildPackage (
+    commonArgs
+    // {
+      inherit cargoArtifacts;
+      pname = "cloud-hypervisor";
+      # Don't execute tests here. We want this in a dedicated step.
+      doCheck = false;
+      cargoExtraArgs = "--features kvm";
+    }
+  );
+in
+{
+  default = cargoPackageKvm;
+  chvKvm = cargoPackageKvm;
+}

flake.lock

@@ -2,26 +2,32 @@
   description = "OpenStack Packages and Modules for NixOS";
 
   inputs = {
-    nixpkgs.url = "github:nixos/nixpkgs?ref=nixos-24.11";
+    nixpkgs.url = "github:nixos/nixpkgs/nixos-24.11";
+    nixpkgs-25-05.url = "github:nixos/nixpkgs/nixos-25.05";
     pre-commit-hooks-nix = {
       url = "github:cachix/pre-commit-hooks.nix";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    # Nix tooling to build cloud-hypervisor.
+    crane.url = "github:ipetkov/crane/master";
+    cloud-hypervisor-src.url = "github:cyberus-technology/cloud-hypervisor/gardenlinux-dev";
+    cloud-hypervisor-src.flake = false;
+    rust-overlay.url = "github:oxalica/rust-overlay";
+    rust-overlay.inputs.nixpkgs.follows = "nixpkgs-25-05";
   };
 
   outputs =
     {
       self,
       nixpkgs,
       flake-utils,
-      pre-commit-hooks-nix,
       ...
-    }:
+    }@inputs:
     flake-utils.lib.eachSystem [ "x86_64-linux" ] (
       system:
       let
         pkgs = import nixpkgs { inherit system; };
-        pre-commit-hooks-run = pre-commit-hooks-nix.lib.${system}.run;
+        pre-commit-hooks-run = inputs.pre-commit-hooks-nix.lib.${system}.run;
       in
       rec {
         formatter = pkgs.nixfmt-rfc-style;
@@ -44,7 +50,19 @@
             };
         };
 
-        packages = import ./packages { inherit (pkgs) callPackage python3Packages; };
+        packages = (import ./packages { inherit (pkgs) callPackage python3Packages; }) // {
+          cloud-hypervisor =
+            let
+              pkgs-25-05 = import inputs.nixpkgs-25-05 { inherit (pkgs) system; };
+              rust-bin = (inputs.rust-overlay.lib.mkRustBin { }) pkgs-25-05;
+              artifacts = pkgs.callPackage ./chv.nix {
+                inherit (inputs) cloud-hypervisor-src;
+                craneLib = inputs.crane.mkLib pkgs-25-05;
+                rustToolchain = rust-bin.stable.latest.default;
+              };
+            in
+            artifacts.default;
+        };
 
         checks = import ./checks { inherit pkgs pre-commit-hooks-run; };