refactor(ci): use nix for code generation

feat(nix): init nix flake for code generation

Signed-off-by: Francesco Noacco <francesco.noacco@secomind.com>

Author: noaccOS

.github/workflows/ci.yaml

@@ -18,6 +18,9 @@ concurrency:
 jobs:
   reuse:
     uses: ./.github/workflows/reuse-lint.yaml
+  nix-check:
+    needs: [ reuse ]
+    uses: ./.github/workflows/nix-check.yaml
   rust-codegen:
     needs: [ reuse ]
     uses: ./.github/workflows/rust-codegen.yaml

.github/workflows/nix-check.yaml

@@ -0,0 +1,24 @@
+# Copyright 2023 SECO Mind Srl
+# SPDX-License-Identifier: Apache-2.0
+
+name: nix-check
+
+permissions:
+  contents: read
+
+on:
+  workflow_call:
+
+jobs:
+  flake:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: DeterminateSystems/nix-installer-action@main
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+      - uses: DeterminateSystems/magic-nix-cache-action@main
+        with:
+          # Don't send the diagnostics automatically
+          diagnostic-endpoint: ""
+      - run: nix flake check

.github/workflows/rust-codegen.yaml

@@ -11,25 +11,23 @@ on:
 
 env:
   CARGO_TERM_COLOR: always
-  PB_REL: https://github.com/protocolbuffers/protobuf/releases
-  PB_VERSION: 24.3
 
 jobs:
   rust-build:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - name: Install protoc
-        run: |
-          curl -LO "$PB_REL/download/v$PB_VERSION/protoc-$PB_VERSION-linux-x86_64.zip"
-          unzip "protoc-$PB_VERSION-linux-x86_64.zip" -d "$HOME/.local"
-          echo "$HOME/.local/bin" >> "$GITHUB_PATH"
-      - name: Install rust toolchain
-        uses: dtolnay/rust-toolchain@stable
+      - uses: DeterminateSystems/nix-installer-action@main
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+      - uses: DeterminateSystems/magic-nix-cache-action@main
+        with:
+          # Don't send the diagnostics automatically
+          diagnostic-endpoint: ""
       - name: Generate Rust code
-        run: cargo r --manifest-path rust/Cargo.toml -p rust-codegen -- -w proto/ -o out/
+        run: nix build -L .#rust
       - name: Upload generated code
         uses: actions/upload-artifact@v3
         with:
           name: rust-proto
-          path: out/
+          path: result/

.gitignore

@@ -4,3 +4,6 @@
 .pre-commit-config.yaml
 /out
 .idea/
+
+# nix
+/result

.nix/codegen/rust.nix

@@ -0,0 +1,21 @@
+# Copyright 2023 SECO Mind Srl
+# SPDX-License-Identifier: Apache-2.0
+
+{ naereskBuilder, src, lib, protobuf, makeWrapper }:
+let
+  unwrapped =
+    naereskBuilder {
+      inherit src;
+      name = "rust-codegen-unwrapped";
+      pname = "rust-codegen";
+      cargoBuildOptions = (old: old ++ [ "--package=rust-codegen" ]);
+    };
+in
+unwrapped.overrideAttrs {
+  passthru = { inherit unwrapped; };
+  name = "rust-codegen";
+  buildInputs = [ makeWrapper ];
+  postInstall = ''
+    wrapProgram $out/bin/rust-codegen --set PATH ${lib.makeBinPath [protobuf]}
+  '';
+}

.nix/rust.nix

@@ -0,0 +1,13 @@
+# Copyright 2023 SECO Mind Srl
+# SPDX-License-Identifier: Apache-2.0
+
+{ rust-codegen, stdenvNoCC, protoSrc, protobuf }:
+stdenvNoCC.mkDerivation {
+  name = "rust-edgehog-device-forwarder-proto";
+  nativeBuildInputs = [ protobuf ];
+  src = protoSrc;
+  buildPhase = ''
+    mkdir -p $out
+    ${rust-codegen}/bin/rust-codegen -w . -o $out/
+  '';
+}

flake.lock

@@ -0,0 +1,2 @@
+Copyright 2023 SECO Mind Srl
+SPDX-License-Identifier: Apache-2.0

flake.lock.license

@@ -0,0 +1,31 @@
+# Copyright 2023 SECO Mind Srl
+# SPDX-License-Identifier: Apache-2.0
+
+{
+  inputs = {
+    nixpkgs.url = "nixpkgs/nixpkgs-unstable";
+    flake-utils.url = "github:numtide/flake-utils";
+
+    # rust
+    naeresk.url = "github:nix-community/naersk";
+    rust-overlay.url = "github:oxalica/rust-overlay";
+  };
+
+  outputs = { self, nixpkgs, flake-utils, naeresk, rust-overlay }:
+    flake-utils.lib.eachDefaultSystem (system:
+      let
+        pkgs = import nixpkgs { inherit system; overlays = [ rust-overlay.overlays.default ]; };
+        protobuf = pkgs.protobuf;
+        rustToolchain = pkgs.rust-bin.stable.latest.default;
+        naeresk' = pkgs.callPackage naeresk { cargo = rustToolchain; rustc = rustToolchain; };
+
+        protoSrc = ./proto;
+      in
+      {
+        packages = {
+          rustCodeGen = pkgs.callPackage ./.nix/codegen/rust.nix { naereskBuilder = naeresk'.buildPackage; src = ./rust; };
+          rust = pkgs.callPackage .nix/rust.nix { inherit protoSrc; rust-codegen = self.packages.${system}.rustCodeGen.unwrapped; };
+        };
+        formatter = pkgs.nixpkgs-fmt;
+      });
+}