diff --git a/corepkgs/buildenv.nix b/corepkgs/buildenv.nix
index ab1ce13f2cf65da511b843a7f7df47987308c346..70981a752c3cdf921aad9caa4108b168e8effe3f 100644
--- a/corepkgs/buildenv.nix
+++ b/corepkgs/buildenv.nix
@@ -8,7 +8,7 @@ derivation {
   builder = perl;
   args = [ "-w" ./buildenv.pl ];
 
-  manifest = manifest;
+  inherit manifest;
 
   # !!! grmbl, need structured data for passing this in a clean way.
   derivations =
@@ -23,6 +23,9 @@ derivation {
   # network traffic, so don't do that.
   preferLocalBuild = true;
 
+  # Also don't bother substituting.
+  allowSubstitutes = false;
+
   __sandboxProfile = ''
     (allow sysctl-read)
     (allow file-read*