[__MatrixMan__]

PSA: you can build OCI images with nix, then they'll be a pure function of their input like we've all wished was the case with Dockerfiles.

[Smaug123]

(And Nix derivations compose, whereas Dockerfiles entirely do not.)