Build packages in a secure deterministic fashion inside a VM