The Nix package manager is great for this - the package language was initially a bit more foreign to me than Dockerfile, but the package manager gives the same

The Nix package manager is great for this - the package language was initially a bit more foreign to me than Dockerfile, but the package manager gives the same reproduceability benefits, integrates well with the OS, and being purely functional/immutable let’s you roll the system state back at any time, like Git