Using network in a nix build

You can not normally use network in a nix build, as it is not sandboxed and is therefore a source of non reproducibility. However, with lib.fetchers.withNormalizedHash you can use the network so long as you provide a hash A simplified (by me) example from: nixkpgs { addDockerImageToNixStore = let defaultArchitecture = pkgs . go . GOARCH ; in lib . fetchers . withNormalizedHash { } ( { imageName ,…