Set up Nix flake build (#622)

* Initial draft of flake from previous PR

* Working flake

* Run Nix build in CI

* Set Version: 0.1.42

* Push to Cachix

* Update flake inputs with K

* Typo

* Formatting

* Fix test derivation

---------

Co-authored-by: devops <[email protected]>

Author: Baltoli

.github/workflows/master-push.yml

@@ -34,3 +34,47 @@ jobs:
             -H "X-GitHub-Api-Version: 2022-11-28"                              \
             https://api.github.com/repos/runtimeverification/devops/dispatches \
             -d '{"event_type":"on-demand-test","client_payload":{"repo":"runtimeverification/wasm-semantics","version":"'${version}'"}}'
+
+  nix-cache:
+    name: 'Populate Nix Cache'
+    strategy:
+      matrix:
+        include:
+          - runner: normal
+          - runner: macos-13
+          - runner: ARM64
+    runs-on: ${{ matrix.runner }}
+    steps:
+      - name: 'Check out code'
+        uses: actions/checkout@v3
+        with:
+          ref: ${{ github.event.push.head.sha }}
+          fetch-depth: 0
+      - name: 'Upgrade bash'
+        if: ${{ contains(matrix.os, 'macos') }}
+        run: brew install bash
+      - name: 'Install Nix'
+        if: ${{ matrix.runner == 'macos-13' }}
+        uses: cachix/install-nix-action@v19
+        with:
+          install_url: https://releases.nixos.org/nix/nix-2.13.3/install
+          extra_nix_config: |
+            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+      - name: 'Install Cachix'
+        if: ${{ matrix.runner == 'macos-13' }}
+        uses: cachix/cachix-action@v12
+        with:
+          name: k-framework
+          signingKey: ${{ secrets.CACHIX_SIGNING_KEY }}
+          skipPush: true
+      - name: 'Build and cache KWASM'
+        uses: workflow/[email protected]
+        env:
+          GC_DONT_GC: 1
+          CACHIX_AUTH_TOKEN: '${{ secrets.CACHIX_PUBLIC_TOKEN }}'
+        with:
+          packages: jq
+          script: |
+            kwasm=$(nix build --extra-experimental-features 'nix-command flakes' .#kwasm --json | jq -r '.[].outputs | to_entries[].value')
+            drv=$(nix-store --query --deriver ${kwasm})
+            nix-store --query --requisites --include-outputs ${drv} | cachix push k-framework

.github/workflows/test-pr.yml

@@ -107,3 +107,43 @@ jobs:
         if: always()
         run: |
           docker stop --time=0 kwasm-ci-prove-${GITHUB_SHA}
+
+  nix:
+    name: 'Nix'
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - runner: normal
+          - runner: macos-13
+          - runner: ARM64
+    needs: pykwasm-code-quality-checks
+    runs-on: ${{ matrix.runner }}
+    timeout-minutes: 60
+    steps:
+      - name: 'Check out code'
+        uses: actions/checkout@v3
+        with:
+          # Check out pull request HEAD instead of merge commit.
+          ref: ${{ github.event.pull_request.head.sha }}
+      - name: 'Install Nix'
+        if: ${{ matrix.runner == 'macos-13' }}
+        uses: cachix/install-nix-action@v25
+        with:
+          install_url: https://releases.nixos.org/nix/nix-2.19.3/install
+          extra_nix_config: |
+            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+            substituters = http://cache.nixos.org https://cache.iog.io
+            trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= hydra.iohk.io:f/Ea+s+dFdN+3Y/G+FDgSq+a5NEWhJGzdjvKNGv0/EQ=
+      - name: 'Install Cachix'
+        if: ${{ matrix.runner == 'macos-13' }}
+        uses: cachix/cachix-action@v14
+        with:
+          name: k-framework
+          authToken: ${{ secrets.CACHIX_PUBLIC_TOKEN }}
+      - name: 'Build KWASM'
+        run: GC_DONT_GC=1 nix build .#kwasm --extra-experimental-features 'nix-command flakes' --print-build-logs
+      - name: 'Build KWASM-Pyk'
+        run: GC_DONT_GC=1 nix build .#kwasm-pyk --extra-experimental-features 'nix-command flakes' --print-build-logs
+      - name: 'Test KWASM'
+        run: GC_DONT_GC=1 nix build .#kwasm-test --extra-experimental-features 'nix-command flakes' --print-build-logs

.github/workflows/update-version.yml

@@ -30,5 +30,12 @@ jobs:
           sed -i 's!pyk = { git = "https://github.com/runtimeverification/k.git", tag="[v0-9\.]*", subdirectory = "pyk" }!pyk = { git = "https://github.com/runtimeverification/k.git", tag="'${K_VERSION}'", subdirectory = "pyk" }!' pykwasm/pyproject.toml
           poetry -C pykwasm update
           git add pykwasm/ && git commit -m "pykwasm/: sync poetry files ${K_VERSION}" || true
+      - name: 'Update Nix flake inputs'
+        run: |
+          K_VERSION=v"$(cat deps/k_release)"
+          sed -i 's!    k-framework.url = "github:runtimeverification/k/v[[:digit:]]\+\.[[:digit:]]\+\.[[:digit:]]\+"!    k-framework.url = "github:runtimeverification/k/'"v${K_VERSION}"'"!' flake.nix
+          sed -i 's!    pyk.url = "github:runtimeverification/k/v[[:digit:]]\+\.[[:digit:]]\+\.[[:digit:]]\+?dir=pyk"!    pyk.url = "github:runtimeverification/k/'"v${K_VERSION}"'?dir=pyk"!' flake.nix
+          nix flake update
+          git add flake.nix flake.lock && git commit -m 'flake.{nix,lock}: update Nix derivations' || true
       - name: 'Push updates'
         run: git push

.gitignore

@@ -8,3 +8,5 @@
 .kprove*
 .kompile*
 
+.envrc
+result

Makefile

@@ -10,9 +10,11 @@ all: build
 # Building Definition
 # -------------------
 
+ifneq ($(NIX),1)
 POETRY     := poetry -C pykwasm
 POETRY_RUN := $(POETRY) run --
 KDIST      := $(POETRY_RUN) kdist
+endif
 
 .PHONY: pykwasm
 pykwasm: