One (somewhat resource-intensive) way to check errors like this is to build the nixpkgs tarball job (`nix-build -A tarball '<nixpkgs/pkgs/top-level/release.nix>' --no-out-link`)