It was trying to install /etc/ssl/cert/ca-certificates.pem See https://hydra.nixos.org/build/32167398/nixlog/1