I try to use firejail on nixos when I can't do something in the build sandbox.

It's painful, and I'm always on the lookout for something better. I'd at least like a portal-ish system where I can easily add things to a sandbox while it's running.

Edit: if anyone has any issues or discussions about this I'd like to contribute.