So this is quite out there as far as yak shaving goes, but what I need is a way to create buildroot as part of a nix build. If a Debian chroot is part of that, then so be it. But first, check out how to do chrooted builds in nixos. That might actually be the hard part. If it is just about installing some links in fixed locations it can't be that hard.