{
  stdenv,
  lib,
  coreutils,
  bash,
  gnutar,
  writeText,
}:
let
  stripScheme =
    builtins.replaceStrings
      [
        "https://"
        "http://"
      ]
      [
        ""
        ""
      ];
  stripNixStore = s: lib.removePrefix "${builtins.storeDir}/" s;
in
{
  name,
  registry ? "https://registry-1.docker.io/v2/",
  repository ? "library",
  imageName,
  tag,
  imageLayers,
  imageConfig,
  image ? "${stripScheme registry}/${repository}/${imageName}:${tag}",
}:

# Make sure there are *no* slashes in the repository or container
# names since we use these to make the output derivation name for the
# nix-store path.
assert null == lib.findFirst (c: "/" == c) null (lib.stringToCharacters repository);
assert null == lib.findFirst (c: "/" == c) null (lib.stringToCharacters imageName);

let
  # Abuse paths to collapse possible double slashes
  repoTag0 = builtins.toString (/. + "/${stripScheme registry}/${repository}/${imageName}");
  repoTag1 = lib.removePrefix "/" repoTag0;

  layers = builtins.map stripNixStore imageLayers;

  manifest = writeText "manifest.json" (
    builtins.toJSON [
      {
        Config = stripNixStore imageConfig;
        Layers = layers;
        RepoTags = [ "${repoTag1}:${tag}" ];
      }
    ]
  );

  repositories = writeText "repositories" (
    builtins.toJSON {
      ${repoTag1} = {
        ${tag} = lib.last layers;
      };
    }
  );

  imageFileStorePaths = writeText "imageFileStorePaths.txt" (
    lib.concatStringsSep "\n" ((lib.unique imageLayers) ++ [ imageConfig ])
  );
in
stdenv.mkDerivation {
  builder = ./fetchdocker-builder.sh;
  buildInputs = [ coreutils ];
  preferLocalBuild = true;

  inherit
    name
    imageName
    repository
    tag
    ;
  inherit
    bash
    gnutar
    manifest
    repositories
    ;
  inherit imageFileStorePaths;

  passthru = {
    inherit image;
  };
}