{ pkgs, ... }:
pkgs.dockerTools.buildImage {
  name = "base";

  copyToRoot = pkgs.buildEnv {
    name = "root";
    paths = with pkgs; [
      dockerTools.usrBinEnv
      dockerTools.binSh
      dockerTools.caCertificates
      bashInteractive
      busybox
    ];
    pathsToLink = [
      "/bin"
      "/lib"
      "/share"
      "/etc"
      "/usr"
    ];
  };

  runAsRoot = ''
    ${pkgs.dockerTools.shadowSetup}
    mkdir -p /tmp
  '';
}