Create a dev env with the cheri llvm toolchain

flake.nix

@@ -114,6 +114,10 @@
             libffi
           ];
         };
+        llvm_cheri = pkgs.mkShell {
+          name = "llvm_cheri";
+          packages = with lowrisc_pkgs; [llvm_cheri];
+        };
       };
       formatter = pkgs.alejandra;
     });

lib/pyprojectOverrides.nix

@@ -55,7 +55,10 @@
       hatchling = [];
       hatch-fancy-pypi-readme = [];
     };
-    jsonschema2md.poetry-core = [];
+    jsonschema2md = {
+      poetry-core = [];
+      babel = [];
+    };
     libcst.setuptools = [];
     libcst.setuptools-rust = [];
     libusb1.setuptools = [];

pkgs/default.nix

@@ -24,6 +24,9 @@
 
   verilator_caliptra = pkgs.callPackage ./verilator_caliptra.nix {inherit inputs;};
 
+  # Cheri
+  llvm_cheri = pkgs.callPackage ./llvm_cheri.nix {};
+
   # IT packages
   gcsfuse = pkgs.callPackage ./gcsfuse {};
   gcs-fuse-csi-driver-sidecar-mounter = pkgs.callPackage ./gcs-fuse-csi-driver-sidecar-mounter.nix {inherit gcsfuse;};

pkgs/llvm_cheri.nix

@@ -0,0 +1,41 @@
+# Copyright lowRISC contributors.
+#
+# SPDX-License-Identifier: MIT
+{
+  fetchzip,
+  stdenv,
+  zlib,
+  zstd,
+  ncurses6,
+  autoPatchelfHook,
+}:
+stdenv.mkDerivation rec {
+  name = "cheri-llvm";
+  version = "17.0.1.r01";
+  src = fetchzip {
+    # We build the toolchain in another repository because derivations doesn't allow internet
+    # connection, which is required by cheribuild.
+    url = "https://github.com/engdoreis/cheribuild/releases/download/v${version}/cheri-std093-sdk.tar.gz";
+    hash = "sha256-/6FGm1Ot9sFZ71FIThtLV2KFjhSfnc5w32OucCZmDfc=";
+  };
+
+  dontConfigure = true;
+  dontBuild = true;
+
+  buildInputs = [
+    stdenv.cc.cc.lib
+    ncurses6
+    zlib
+    zstd
+  ];
+  nativeBuildInputs = [autoPatchelfHook];
+
+  installPhase = ''
+    mkdir -p $out
+    cp -R ./cheri-std093-sdk/* $out
+  '';
+
+  meta = {
+    platforms = ["x86_64-linux"];
+  };
+}