Nix can generate fat binaries for you all by itself; you can just skip dockerc. It's a one-liner:

    # nix bundle nixpkgs#hello
    # ./hello
    Hello, world!

https://news.ycombinator.com/item?id=39632011