Nix does exactly what you want.