Nix has been a very cool project to watch over the years. You can address part of the problem of picking up extra data in final images by declaring temporary b

Nix has been a very cool project to watch over the years. You can address part of the problem of picking up extra data in final images by declaring temporary build locations, such as `/var/lib/cache`, as a volume. Anything written to a volume won't be included in the final image.