diff --git a/.gitignore b/.gitignore
index 0d20b6487..60f51c838 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
 *.pyc
+/result
diff --git a/boot.nix b/boot.nix
new file mode 100644
index 000000000..044c59844
--- /dev/null
+++ b/boot.nix
@@ -0,0 +1,45 @@
+{ pkgs, vmrunner }:
+
+let
+  mk = chainloader: { name ? "unikernel", extraFlags ? [], kvm ? false, cfg }:
+    pkgs.symlinkJoin {
+      name = "boot-${name}";
+      paths = [ vmrunner ];
+      buildInputs = [ pkgs.makeWrapper ];
+
+      postBuild = ''
+        wrapProgram $out/bin/boot \
+          --set INCLUDEOS_CHAINLOADER ${chainloader}/bin/ \
+          --add-flags "${builtins.concatStringsSep " " cfg.vm.args}" \
+          ${pkgs.lib.optionalString kvm "--add-flags --kvm"} \
+          ${pkgs.lib.optionalString (extraFlags != []) (
+            "--add-flags \"" + builtins.concatStringsSep " " extraFlags + "\""
+          )}
+      '';
+    };
+
+  mkBoot = chainloader: cfg:
+    rec {
+      run = mk chainloader {
+        name = "${cfg.name or "unikernel"}-run";
+        inherit cfg;
+      };
+
+      debug = mk chainloader {
+        name = "${cfg.name or "unikernel"}-debug";
+        extraFlags = [ "-d" ];
+        inherit cfg;
+      };
+
+      kvm = mk chainloader {
+        name = "${cfg.name or "unikernel"}-kvm";
+        kvm = true;
+        inherit cfg;
+      };
+
+      default = run;
+    };
+in
+{
+  mkBoot = mkBoot;
+}
diff --git a/default.nix b/default.nix
index 926e059ab..72b45bedb 100644
--- a/default.nix
+++ b/default.nix
@@ -17,6 +17,11 @@ pkgs.python3.pkgs.buildPythonPackage rec {
     psutil
   ];
 
+  propagatedBuildInputs = [
+    pkgs.file
+    pkgs.qemu
+  ];
+
   create_bridge = ./vmrunner/bin/create_bridge.sh;
 
   passthru = {
diff --git a/flake.lock b/flake.lock
new file mode 100644
index 000000000..721737901
--- /dev/null
+++ b/flake.lock
@@ -0,0 +1,27 @@
+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1748026580,
+        "narHash": "sha256-rWtXrcIzU5wm/C8F9LWvUfBGu5U5E7cFzPYT1pHIJaQ=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "11cb3517b3af6af300dd6c055aeda73c9bf52c48",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "25.05",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
diff --git a/flake.nix b/flake.nix
new file mode 100644
index 000000000..a2e76993b
--- /dev/null
+++ b/flake.nix
@@ -0,0 +1,38 @@
+{
+  description = "A convenience wrapper around qemu for IncludeOS integration tests";
+
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/25.05";
+  };
+
+  outputs = { self, nixpkgs }:
+    let
+      system = "x86_64-linux";
+      pkgs = import nixpkgs { inherit system; };
+
+      vmrunner = pkgs.callPackage ./default.nix {};
+
+      vmconfig = import ./vmconfig.nix { inherit pkgs; };
+      boot = import ./boot.nix { inherit pkgs vmrunner; };
+
+      mkBoot = chainloader:
+      { mem ? "128m" }:
+        let
+          cfg = vmconfig.mkConfig { inherit mem; };
+        in
+          boot.mkBoot chainloader { vm = cfg; };
+
+    in {
+      packages.${system}.default = vmrunner;
+
+      devShells.${system}.default = import ./shell.nix { inherit pkgs; };
+
+      lib.${system}.mkBoot = mkBoot;
+
+      apps.${system}.default = {
+        type = "app";
+        program = "${vmrunner}/bin/boot";
+      };
+
+    };
+}
diff --git a/vmconfig.nix b/vmconfig.nix
new file mode 100644
index 000000000..6aa0a7f51
--- /dev/null
+++ b/vmconfig.nix
@@ -0,0 +1,23 @@
+{ pkgs }:
+
+let
+  memToMiB = mem:
+    let
+      g = builtins.match "^([0-9]+)[Gg]$" mem;
+      m = builtins.match "^([0-9]+)[Mm]$" mem;
+    in
+      if g != null then (builtins.fromJSON (builtins.head g)) * 1024
+      else if m != null then builtins.fromJSON (builtins.head m)
+      else throw "invalid mem: ${mem}";
+in
+{
+  mkConfig = { mem ? "128m" }:
+    let
+      memMiB = memToMiB mem;
+      vmJson = pkgs.writeText "vm.json"
+        (builtins.toJSON { inherit memMiB; });
+    in {
+      inherit memMiB vmJson;
+      args = [ "-j" vmJson ];
+    };
+}