Running containers within a (sandboxed) nix-build

[earvstedt]

As mentioned here, the uid issue is being worked on in this PR.