Using Distrobox as a NixOS compatibility layer is the opposite of painless. If you need an OCI container as a compatibility shim, you're basically not even using NixOS anymore.