try fixing gitea ci: v8

containers/server-n0/git.nix

@@ -104,10 +104,7 @@ in
       let
         runnerInstanceName = "ci-runner";
 
-        ciJobImage = pkgs.dockerTools.buildLayeredImage {
-          name = "ci-job-image";
-          tag = "latest";
-          contents = with pkgs; [
+        ciJobContents = with pkgs; [
           bashInteractive
           coreutils
           gitMinimal
@@ -115,6 +112,11 @@ in
           nodejs
           cacert
         ];
+
+        ciJobImage = pkgs.dockerTools.buildLayeredImage {
+          name = "ci-job-image";
+          tag = "latest";
+          contents = ciJobContents;
           config = {
             Cmd = [ "/bin/sh" ];
             Env = [
@@ -130,6 +132,10 @@ in
         boot.kernelModules = [ "kvm-intel" ];
         boot.extraModprobeConfig = "options kvm_intel nested=1";
 
+        # volume-mounted into CI containers; must be in VM's store so
+        # image symlinks (/bin/node etc.) resolve through the mount
+        system.extraDependencies = ciJobContents;
+
         microvm.writableStoreOverlay = "/nix/.rw-store";
 
         nix.settings = {