The runner container is root with no `nixbld` group. The installer writes `build-users-group = nixbld` regardless and then fails on it: error: the group 'nixbld' specified in 'build-users-group' does not exist Writing the config first (and again after, in case the installer replaced it) clears that and enables flakes in the same place. Refs #98