nix-shell
/tmp/env-vars
$TMPDIR
allow-unsafe-native-code-during-evaluation
readLink
builtins.features