Also, the nix expression you build an image with is deterministic, unlike Dockerfiles, which by-design aren't.

(Dockerfiles are not the only way to build images, of course, but they are a common one).