flowey: disable unused dev kernel IGVM variants

[benhillis]

Motivation

OpenHCL retains separate dev Linux kernel IGVM recipe variants, but the dev branch no longer represents long-lived feature work that needs a permanently separate set of OpenVMM artifacts. Kernel changes are promoted to main, and the current VMM test pipelines do not consume the dev-kernel IGVM artifacts.

The check-in pipelines nevertheless build and publish dev variants for standard x64, Linux-direct, CVM, and aarch64 configurations. These builds add cost without providing distinct test coverage.

Changes

• Make the configured dev-kernel version optional and disable it by default.
• Omit dev-kernel recipes from the OSS check-in pipeline matrices while disabled.
• Stop exposing dev-kernel packages and build arguments from the Nix shell.
• Keep the existing kernel kinds, recipes, CLI values, resolver routing, and Petri artifact identities so the variants can be restored without reconstructing their plumbing.
• Return a clear error when a published dev kernel is explicitly requested while no dev version is configured. Custom local kernel packages continue to work.
• Regenerate the affected CI workflows.

Re-enabling the dev variants

1. Set OPENHCL_KERNEL_DEV_VERSION to Some("<VERSION>").
2. Set enableDevKernel in shell.nix to true and update the dev version and hashes in nix/openhcl_kernel.nix.
3. Regenerate the Flowey pipelines.
4. Restore or add targeted dev-kernel test coverage that justifies the separate variants.

Validation

• cargo clippy --all-targets -p flowey_lib_hvlite -p flowey_hvlite
• cargo doc --no-deps -p flowey_lib_hvlite -p flowey_hvlite
• cargo xtask fmt --fix

[Copilot]

Pull request overview

This PR reduces CI and developer-environment cost by disabling the unused OpenHCL “dev kernel” build lanes by default, while keeping the dev-kernel plumbing intact so it can be re-enabled later without rework.

Changes:

• Make the dev-kernel version optional (OPENHCL_KERNEL_DEV_VERSION: Option<&str> = None) and only configure dev versions when set.
• Remove dev-kernel IGVM recipes from the OSS check-in gate matrices when the dev version is unset.
• Stop exposing dev-kernel build args and kernel paths in the Nix dev shell unless explicitly enabled.

Reviewed changes

Copilot reviewed 9 out of 9 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
shell.nix	Gates dev-kernel env vars/build args behind an explicit enableDevKernel toggle (default off).
flowey/flowey_lib_hvlite/src/resolve_openhcl_kernel_package.rs	Adds an explicit error when a dev kernel is requested but no dev version is configured.
flowey/flowey_lib_hvlite/src/build_openhcl_igvm_from_recipe.rs	Adds uses_dev_kernel() helper to identify dev-kernel recipes for filtering.
flowey/flowey_lib_hvlite/src/_jobs/cfg_versions.rs	Makes dev kernel version optional and conditionally injects dev versions into the resolver config.
flowey/flowey_hvlite/src/pipelines/checkin_gates.rs	Filters dev-kernel recipes out of check-in gates when dev version is unset.
ci-flowey/openvmm-pr.yaml	Regenerated pipeline YAML removing dev-kernel artifact publication and updating node indices.
.github/workflows/openvmm-pr.yaml	Regenerated GitHub Actions workflow removing dev-kernel artifacts/steps and updating step ordering.
.github/workflows/openvmm-pr-release.yaml	Regenerated PR-release workflow removing dev-kernel artifacts/steps and updating step ordering.
.github/workflows/openvmm-ci.yaml	Regenerated CI workflow removing dev-kernel artifacts/steps and updating step ordering.

[Copilot]

Pull request overview

Copilot reviewed 9 out of 9 changed files in this pull request and generated 1 comment.

[github-actions]

1 Petri tests failed (1 unstable)

[Copilot]

Pull request overview

Copilot reviewed 9 out of 9 changed files in this pull request and generated no new comments.

Comments suppressed due to low confidence (1)

flowey/flowey_lib_hvlite/src/resolve_openhcl_kernel_package.rs:144

• The error text says "dev kernel support is disabled", but this branch still supports dev-kernel builds when callers provide local kernel paths. Consider clarifying that only published dev-kernel packages are disabled (i.e., no dev version is configured), and that supplying local paths is the workaround.

                    anyhow::bail!(
                        "OpenHCL dev kernel support is disabled; provide local kernel paths for \
                         {:?} to enable {:?}",
                        arch,
                        kind,

[github-actions]

1 Petri tests failed (1 unstable)

[Copilot]

Pull request overview

Copilot reviewed 9 out of 9 changed files in this pull request and generated no new comments.

[github-actions]

5 Petri tests failed (3 unstable)

[Copilot]

Pull request overview

Copilot reviewed 9 out of 9 changed files in this pull request and generated no new comments.

Comments suppressed due to low confidence (1)

flowey/flowey_lib_hvlite/src/resolve_openhcl_kernel_package.rs:147

• The dev-kernel error path reports that support is disabled, but it doesn’t tell the user what to change to re-enable published dev-kernel downloads (vs. providing local overrides). Making the message explicit about the missing dev version should reduce confusion when someone selects a dev recipe from the CLI/pipeline.

                    anyhow::bail!(
                        "OpenHCL dev kernel support is disabled; provide local kernel paths for \
                         {:?} to enable {:?}",
                        arch,
                        kind,

[github-actions]

1 Petri tests failed (1 unstable)

[Copilot]

Pull request overview

Copilot reviewed 11 out of 11 changed files in this pull request and generated no new comments.

Comments suppressed due to low confidence (1)

flowey/flowey_lib_hvlite/src/resolve_openhcl_kernel_package.rs:148

• The new dev-kernel-disabled error is a bit misleading: it suggests providing local kernel paths is the way to “enable” a dev kind, but doesn’t mention that a dev kernel version can be configured (SetVersion / OPENHCL_KERNEL_DEV_VERSION). Also, local resolution requires both kernel and modules paths, which the message doesn’t mention. Consider rewording to explicitly list the two supported ways to satisfy a dev-kernel request (local paths vs configuring a dev version).

                if kind.is_dev() {
                    anyhow::bail!(
                        "OpenHCL dev kernel support is disabled; provide local kernel paths for \
                         {:?} to enable {:?}",
                        arch,
                        kind,
                    );

[Copilot]

Pull request overview

Copilot reviewed 11 out of 11 changed files in this pull request and generated 1 comment.

[github-actions]

1 Petri tests failed (1 unstable)

[Copilot]

Pull request overview

Copilot reviewed 11 out of 11 changed files in this pull request and generated no new comments.

[github-actions]

1 Petri tests failed (1 unstable)