* run the ./build after setting the NIX_PATH. Previously the images
were always generate with the system channel. Oops!
* pin the outer shell version to nixos-19.09. skopeo broke in unstable.
also we don't need to force the system here, technically this could
run on macOS.