use nix-shell