[catern]

If you can use it, https://github.com/lethalman/nix-user-chroot is the best way.

But, it depends on user namespaces being enabled on your system. That may not be the case.