diff --git a/binary-tarball.nix b/binary-tarball.nix
index 1fa185519ca..0053abbcad2 100644
--- a/binary-tarball.nix
+++ b/binary-tarball.nix
@@ -1,8 +1,8 @@
 { runCommand
-, version
 , system
-, nix
+, buildPackages
 , cacert
+, nix
 }:
 
 let
@@ -11,6 +11,8 @@ let
     rootPaths = [ nix cacert ];
   };
 
+  inherit (nix) version;
+
   env = {
     meta.description = "Distribution-independent Nix bootstrap binaries for ${system}";
   };
diff --git a/coverage.nix b/coverage.nix
new file mode 100644
index 00000000000..2390ef52dd9
--- /dev/null
+++ b/coverage.nix
@@ -0,0 +1,35 @@
+{ lib
+, releaseTools
+, nix
+, stdenv
+}:
+
+let
+  inherit (nix) version;
+
+in
+
+releaseTools.coverageAnalysis {
+  name = "nix-coverage-${version}";
+
+  inherit (nix)
+    src
+    configureFlags
+    nativeBuildInputs
+    buildInputs
+    #checkInputs
+    ;
+
+  enableParallelBuilding = true;
+
+  dontInstall = false;
+
+  doInstallCheck = true;
+  installCheckTarget = "installcheck"; # work around buggy detection in stdenv
+
+  lcovFilter = [ "*/boost/*" "*-tab.*" ];
+
+  hardeningDisable = ["fortify"];
+
+  NIX_CFLAGS_COMPILE = "-DCOVERAGE=1";
+}
diff --git a/flake.nix b/flake.nix
index 544a07ba6ee..c0841a76d4a 100644
--- a/flake.nix
+++ b/flake.nix
@@ -479,60 +479,25 @@
         dockerImage = lib.genAttrs linux64BitSystems (system: self.packages.${system}.dockerImage);
 
         # Line coverage analysis.
-        coverage =
-          with nixpkgsFor.x86_64-linux.native;
-          with commonDeps { inherit pkgs; };
-
-          releaseTools.coverageAnalysis {
-            name = "nix-coverage-${version}";
-
-            src = nixSrc;
-
-            configureFlags = testConfigureFlags;
-
-            enableParallelBuilding = true;
-
-            nativeBuildInputs = nativeBuildDeps;
-            buildInputs = buildDeps ++ propagatedDeps ++ awsDeps ++ checkDeps;
-
-            dontInstall = false;
-
-            doInstallCheck = true;
-            installCheckTarget = "installcheck"; # work around buggy detection in stdenv
-
-            lcovFilter = [ "*/boost/*" "*-tab.*" ];
-
-            hardeningDisable = ["fortify"];
-
-            NIX_CFLAGS_COMPILE = "-DCOVERAGE=1";
-          };
+        coverage = nixpkgsFor.x86_64-linux.native.callPackage ./coverage.nix {};
 
         # API docs for Nix's unstable internal C++ interfaces.
-        internal-api-docs =
-          with nixpkgsFor.x86_64-linux.native;
-          with commonDeps { inherit pkgs; };
-
-          stdenv.mkDerivation {
-            pname = "nix-internal-api-docs";
-            inherit version;
-
-            src = nixSrc;
-
-            configureFlags = testConfigureFlags ++ internalApiDocsConfigureFlags;
+        internal-api-docs = nixpkgsFor.x86_64-linux.native.nix.overrideAttrs (old: {
+          pname = "nix-internal-api-docs";
 
-            nativeBuildInputs = nativeBuildDeps;
-            buildInputs = buildDeps ++ propagatedDeps
-              ++ awsDeps ++ checkDeps ++ internalApiDocsDeps;
+          configureFlags = old.configureFlags ++ [ "--enable-internal-api-docs" ];
+          nativeBuildInputs = old.nativeBuildInputs ++ [ nixpkgsFor.x86_64-linux.native.doxygen ];
 
-            dontBuild = true;
+          dontBuild = true;
+          doCheck = false;
 
-            installTargets = [ "internal-api-html" ];
+          installTargets = [ "internal-api-html" ];
 
-            postInstall = ''
-              mkdir -p $out/nix-support
-              echo "doc internal-api-docs $out/share/doc/nix/internal-api/html" >> $out/nix-support/hydra-build-products
-            '';
-          };
+          postInstall = ''
+            mkdir -p $out/nix-support
+            echo "doc internal-api-docs $out/share/doc/nix/internal-api/html" >> $out/nix-support/hydra-build-products
+          '';
+        });
 
         # System tests.
         tests = import ./tests/nixos { inherit lib nixpkgs nixpkgsFor; } // {
@@ -540,7 +505,9 @@
           # Make sure that nix-env still produces the exact same result
           # on a particular version of Nixpkgs.
           evalNixpkgs =
-            with nixpkgsFor.x86_64-linux.native;
+            let
+              inherit (nixpkgsFor.x86_64-linux.native) runCommand nix nixpkgs-regression;
+            in
             runCommand "eval-nixos" { buildInputs = [ nix ]; }
               ''
                 type -p nix-env
@@ -627,47 +594,17 @@
           stdenvs)));
 
       devShells = let
-        makeShell = pkgs: stdenv:
-          let
-            canRunInstalled = stdenv.buildPlatform.canExecute stdenv.hostPlatform;
-          in
-          with commonDeps { inherit pkgs; };
-          stdenv.mkDerivation {
-            name = "nix";
-
-            outputs = [ "out" "dev" "doc" ]
-              ++ lib.optional (stdenv.hostPlatform != stdenv.buildPlatform) "check";
-
-            nativeBuildInputs = nativeBuildDeps
-              ++ lib.optional stdenv.cc.isClang pkgs.buildPackages.bear
-              ++ lib.optional
-                (stdenv.cc.isClang && stdenv.hostPlatform == stdenv.buildPlatform)
-                pkgs.buildPackages.clang-tools
-              # We want changelog-d in the shell even if the current build doesn't need it
-              ++ lib.optional (officialRelease || ! buildUnreleasedNotes) changelog-d
-              ;
-
-            buildInputs = buildDeps ++ propagatedDeps
-              ++ awsDeps ++ checkDeps ++ internalApiDocsDeps;
-
-            configureFlags = configureFlags
-              ++ testConfigureFlags ++ internalApiDocsConfigureFlags
-              ++ lib.optional (!canRunInstalled) "--disable-doc-gen";
-
-            enableParallelBuilding = true;
-
-            installFlags = "sysconfdir=$(out)/etc";
-
-            shellHook =
-              ''
-                PATH=$prefix/bin:$PATH
-                unset PYTHONPATH
-                export MANPATH=$out/share/man:$MANPATH
-
-                # Make bash completion work.
-                XDG_DATA_DIRS+=:$out/share
-              '';
-          };
+        makeShell = pkgs: stdenv: (pkgs.nix.override { inherit stdenv; }).overrideAttrs (_: {
+          installFlags = "sysconfdir=$(out)/etc";
+          shellHook = ''
+            PATH=$prefix/bin:$PATH
+            unset PYTHONPATH
+            export MANPATH=$out/share/man:$MANPATH
+
+            # Make bash completion work.
+            XDG_DATA_DIRS+=:$out/share
+          '';
+        });
         in
         forAllSystems (system:
           let
diff --git a/package.nix b/package.nix
index 8d62120fb96..bed77ba3b99 100644
--- a/package.nix
+++ b/package.nix
@@ -41,16 +41,12 @@
 }:
 
 let
-
   version = lib.fileContents ./.version + versionSuffix;
-
-  inherit (stdenv.hostPlatform) isStatic;
-
   canRunInstalled = stdenv.buildPlatform.canExecute stdenv.hostPlatform;
 in
 
 stdenv.mkDerivation (finalAttrs: {
-  name = "nix-${version}";
+  pname = "nix";
   inherit version;
 
   src =
@@ -103,17 +99,12 @@ stdenv.mkDerivation (finalAttrs: {
     bison
     flex
     (lib.getBin lowdown)
+    jq # Also for custom mdBook preprocessor.
     mdbook
     mdbook-linkcheck
     autoconf-archive
     autoreconfHook
     pkg-config
-
-    # Tests
-    git
-    mercurial # FIXME: remove? only needed for tests
-    jq # Also for custom mdBook preprocessor.
-    openssh # only needed for tests (ssh-keygen)
   ]
   ++ lib.optional stdenv.hostPlatform.isLinux util-linux
   # Official releases don't have rl-next, so we don't need to compile a changelog
@@ -133,19 +124,29 @@ stdenv.mkDerivation (finalAttrs: {
     sqlite
     xz
   ]
-  ++ lib.optionals stdenv.isLinux [libseccomp]
+  ++ lib.optional stdenv.isLinux libseccomp
   ++ lib.optional stdenv.hostPlatform.isx86_64 libcpuid
   # There have been issues building these dependencies
-  ++ lib.optionals (stdenv.hostPlatform == stdenv.buildPlatform) (lib.optional (stdenv.isLinux || stdenv.isDarwin)
+  ++ lib.optional (stdenv.hostPlatform == stdenv.buildPlatform && (stdenv.isLinux || stdenv.isDarwin))
     (aws-sdk-cpp.override {
       apis = ["s3" "transfer"];
       customMemoryManagement = false;
-    }))
-  ++ lib.optionals finalAttrs.doCheck [
+    })
+  ;
+
+  doCheck = true;
+
+  checkInputs = [
     gtest
     rapidcheck
   ];
 
+  nativeCheckInputs = [
+    git
+    mercurial # FIXME: remove? only needed for tests
+    openssh # only needed for tests (ssh-keygen)
+  ];
+
   propagatedBuildInputs = [
     boehmgc
     nlohmann_json
@@ -153,52 +154,49 @@ stdenv.mkDerivation (finalAttrs: {
 
   disallowedReferences = [ boost ];
 
-  preConfigure = lib.optionalString (! stdenv.hostPlatform.isStatic)
-    ''
-      # Copy libboost_context so we don't get all of Boost in our closure.
-      # https://github.com/NixOS/nixpkgs/issues/45462
-      mkdir -p $out/lib
-      cp -pd ${boost}/lib/{libboost_context*,libboost_thread*,libboost_system*,libboost_regex*} $out/lib
-      rm -f $out/lib/*.a
-      ${lib.optionalString stdenv.hostPlatform.isLinux ''
-        chmod u+w $out/lib/*.so.*
-        patchelf --set-rpath $out/lib:${stdenv.cc.cc.lib}/lib $out/lib/libboost_thread.so.*
-      ''}
-      ${lib.optionalString stdenv.hostPlatform.isDarwin ''
-        for LIB in $out/lib/*.dylib; do
-          chmod u+w $LIB
-          install_name_tool -id $LIB $LIB
-          install_name_tool -delete_rpath ${boost}/lib/ $LIB || true
-        done
-        install_name_tool -change ${boost}/lib/libboost_system.dylib $out/lib/libboost_system.dylib $out/lib/libboost_thread.dylib
-      ''}
-    '';
+  preConfigure = lib.optionalString (! stdenv.hostPlatform.isStatic) ''
+    # Copy libboost_context so we don't get all of Boost in our closure.
+    # https://github.com/NixOS/nixpkgs/issues/45462
+    mkdir -p $out/lib
+    cp -pd ${boost}/lib/{libboost_context*,libboost_thread*,libboost_system*,libboost_regex*} $out/lib
+    rm -f $out/lib/*.a
+    ${lib.optionalString stdenv.hostPlatform.isLinux ''
+      chmod u+w $out/lib/*.so.*
+      patchelf --set-rpath $out/lib:${stdenv.cc.cc.lib}/lib $out/lib/libboost_thread.so.*
+    ''}
+    ${lib.optionalString stdenv.hostPlatform.isDarwin ''
+      for LIB in $out/lib/*.dylib; do
+        chmod u+w $LIB
+        install_name_tool -id $LIB $LIB
+        install_name_tool -delete_rpath ${boost}/lib/ $LIB || true
+      done
+      install_name_tool -change ${boost}/lib/libboost_system.dylib $out/lib/libboost_system.dylib $out/lib/libboost_thread.dylib
+    ''}
+  '';
 
   configureFlags =
     lib.optionals stdenv.isLinux [
       "--with-boost=${boost}/lib"
       "--with-sandbox-shell=${sh}/bin/busybox"
     ]
-    ++ lib.optionals (stdenv.isLinux && !(isStatic && stdenv.system == "aarch64-linux")) [
+    ++ lib.optional (stdenv.isLinux && !(stdenv.hostPlatform.isStatic && stdenv.system == "aarch64-linux"))
       "LDFLAGS=-fuse-ld=gold"
-    ]
     ++ [ "--sysconfdir=/etc" ]
     ++ lib.optional stdenv.hostPlatform.isStatic "--enable-embedded-sandbox-shell"
     ++ [ (lib.enableFeature finalAttrs.doCheck "tests") ]
-    ++ lib.optionals finalAttrs.doCheck ([ "RAPIDCHECK_HEADERS=${lib.getDev rapidcheck}/extras/gtest/include" ]
-    ++ lib.optionals (stdenv.hostPlatform != stdenv.buildPlatform) [
-      "--enable-install-unit-tests"
-      "--with-check-bin-dir=${builtins.placeholder "check"}/bin"
-      "--with-check-lib-dir=${builtins.placeholder "check"}/lib"
-    ])
+    ++ lib.optionals finalAttrs.doCheck (
+      [ "RAPIDCHECK_HEADERS=${lib.getDev rapidcheck}/extras/gtest/include" ]
+      ++ lib.optionals (stdenv.hostPlatform != stdenv.buildPlatform) [
+        "--enable-install-unit-tests"
+        "--with-check-bin-dir=${builtins.placeholder "check"}/bin"
+        "--with-check-lib-dir=${builtins.placeholder "check"}/lib"
+      ])
     ++ lib.optional (!canRunInstalled) "--disable-doc-gen";
 
   enableParallelBuilding = true;
 
   makeFlags = "profiledir=$(out)/etc/profile.d PRECOMPILE_HEADERS=1";
 
-  doCheck = true;
-
   installFlags = "sysconfdir=$(out)/etc";
 
   postInstall = ''