nixos docker container where a non-root user can install packages