Describe the bug

brief

Non fixed output derivation unexpectedly able to access network when within flake within dockerfile

security

I guess, derivation default to offline, is for security.

Thus unexpected online network, will break security.

Thus, mark it security related bug.

explain

Non fixed output derivation is usually not able to access network.

But when within flake within dockerfile, non fixed output derivation unexpectedly able to access network.

Is this a bug?

If not, how to make non fixed output derivation not able to access network when within flake within dockerfile?

Steps To Reproduce

https://github.com/loynoir/reproduce-nix-16186

Non fixed output derivation unexpectedly able to access network when within flake within dockerfile

Expected behavior

Non fixed output derivation not able to access network when within flake within dockerfile

Metadata

Additional context

Checklist

• checked latest Nix manual (source)
• checked open bug issues and pull requests for possible duplicates
• reviewed the contributing guide

Add 👍 to issues you find important.