Introduce Nix development flake

.envrc

@@ -0,0 +1 @@
+use flake --impure

.github/workflows/nix.yaml

@@ -0,0 +1,57 @@
+---
+name: Nix
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+permissions: read-all
+
+jobs:
+  nix-bazel:
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3.5.3
+        with:
+          fetch-depth: 0
+      - name: Install Nix
+        uses: cachix/install-nix-action@v22
+        with:
+          nix_path: nixpkgs=channel:nixos-unstable
+      - name: Mount Nix cache
+        uses: actions/cache@v3.3.2
+        with:
+          key: ${{ runner.os }}-nix
+          path: ~/nix
+      - name: Mount bazel cache
+        uses: actions/cache@v3
+        with:
+          path: "~/.cache/bazel"
+          key: ${{ runner.os }}-bazel-nix
+      - name: Invoke Bazel build in Nix shell
+        run: >
+          nix --store ~/nix develop --impure --command
+          bash -c "bazel test ..."
+  nix-cargo:
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3.5.3
+        with:
+          fetch-depth: 0
+      - name: Install Nix
+        uses: cachix/install-nix-action@v22
+        with:
+          nix_path: nixpkgs=channel:nixos-unstable
+      - name: Mount Nix cache
+        uses: actions/cache@v3.3.2
+        with:
+          key: ${{ runner.os }}-nix
+          path: ~/nix
+      - name: Invoke Cargo build in Nix shell
+        run: >
+          nix --store ~/nix develop --impure --command
+          bash -c "cargo test --all"

.gitignore

@@ -6,3 +6,5 @@ target/
 terraform.tfstate*
 .update_scheduler_ips.zip
 __pycache__
+.devenv/
+.direnv/

CONTRIBUTING.md

@@ -15,6 +15,18 @@ Should you wish to work on an issue, please claim it first by commenting on
 the GitHub issue that you want to work on it. This is to prevent duplicated
 efforts from contributors on the same issue.
 
+## Nix development flake
+
+You can use the Nix development flake to automatically set up Bazel, Cargo and
+various Cloud CLIs for you:
+
+1. Install the [nix package manger](https://nixos.org/download.html) and enable
+   [flakes](https://nixos.wiki/wiki/Flakes).
+2. Optionally, install [direnv](https://direnv.net/docs/installation.html) and
+   hook it into your shell.
+3. We currently don't ship a C++ toolchain as part of the flake. Make sure to
+   install a recent version of Clang.
+
 ## Pull Request Checklist
 
 - Branch from the main branch and, if needed, rebase to the current main