It uses docker based on alpine and the host nix store, so we can perform builds but isolate them from the system.
