https://nixos.org/manual/nixos/stable/index.html#ch-containers