Use our freshly-fetched nixpkgs checkout instead of the system one because it isn't available inside of nixos containers.
remove deprecated ensureDir
package updater: fix one potential source of breakage