{ pkgs, ... }:
pkgs.dockerTools.buildLayeredImage {
  name = "nix-with-node";
  contents = with pkgs; [
    ./root
    bashInteractive
    cacert
    coreutils
    git
    gnutar
    gzip
    jq
    nix
    nodejs
    openssh
    shadow
    xz
  ];

  config = {
    Cmd = [ "/bin/bash" ];
    WorkingDir = "/home/nixbld1";
    Env = [
      "ENV=/etc/profile.d/nix.sh"
      "NIX_BUILD_SHELL=/bin/bash"
      "PATH=/usr/bin:/bin"
      "SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
      "USER=root"
    ];
  };

  fakeRootCommands = ''
    ${pkgs.dockerTools.shadowSetup}
    groupadd -r nixbld
    useradd -r -g nixbld nixbld1
  '';
  enableFakechroot = true;
}