Provision Docker images using Nix