Building aarch64-linux NixOS image from an aarch64 macOS?

Is it possible to build an aarch64-linux NixOS on an M4 (aarch64-darwin) macOS, completely within a flake?

I tried running nix run nixpkgs#darwin.linux-builder (per this guide: Nixpkgs Reference Manual), but it asked me for sudo password. I don’t want to set it up as a service in background - rather, I’d like to just have it spawn once, not asking for sudo password (i.e. “purely”, with no requirements for changes on the host machine), and just internally run a single build of a NixOS qcow2 image (for QEMU) based on a configuration.nix, and then save the image to my host machine.

Is that possible?