only mount /nix, not the whole host-system