I meant with Nix you're comparing hashes. With Docker, you're using pinned versions