the problem is docker builds aren't really reproducible; e.g. if you're using ubuntu, you have to do apt-get update or your apt-get installs will fail with 404s.

i also haven't used nix, but i hear it truly solves the problem.