Copy dnsmasq NixNG image creation to here

Create GC roots for k8s manifests

modules/dnsmasq.nix

@@ -1,4 +1,20 @@
-{ globals, config, lib, ... }: {
+{ nixpkgs, pkgs, nixng, globals, config, lib, ... }:
+let
+  dnsmasqStream = (import ./dnsmasq-image.nix {
+    inherit nixpkgs nixng globals;
+    inherit (nixng) nglib;
+  }).config.system.build.ociImage.stream;
+
+  dnsmasqImage = pkgs.stdenv.mkDerivation {
+    name = "dnsmasq.tar";
+    src = dnsmasqStream;
+    dontUnpack = true;
+    buildPhase = ''
+      $src > $out
+    '';
+  };
+in
+{
   options.dnsmasq.enable = lib.mkEnableOption "dnsmasq";
 
   config = lib.mkIf config.dnsmasq.enable {
@@ -10,7 +26,7 @@
           metadata.labels.app = "dnsmasq";
 
           spec.containers.dnsmasq = {
-            image = "nix:0/var/container_images/dnsmasq.tar";
+            image = "nix:0${dnsmasqImage}";
             imagePullPolicy = "Always";
 
             ports.dns = {