Bazel action_env gets lost somewhere

Bazel build error

$  sh invoke-build.sh kythe/cxx/extractor/...

...

SUBCOMMAND: # //kythe/cxx/extractor:index_pack [action 'Compiling kythe/cxx/extractor/index_pack.cc [for host]']
(cd /home/ron/.cache/bazel/_bazel_ron/084c77e61dfc73e2d0fc7fb1fb9a9252/execroot/io_kythe && \
  exec env - \
    PATH=/nix/store/vs6d2fjkl4kb3jb7rwibsd76k9v2n4xy-bash-4.4-p23/bin:/nix/store/lvhndwdy2q09fhwgzykjjigz7yxq5yiv-coreutils-8.30/bin:/nix/store/5c2428hk25dwsgnifcmn5dvgrwvvgvrx-findutils-4.6.0/bin:/nix/store/9jjxqhwak78zi94m7gvwdw3gqzd1hr1b-gawk-4.2.1/bin:/nix/store/f7c1ijdv5czqb0dxi4mi5wkfvi1pc7rn-gnugrep-3.3/bin:/nix/store/4lvbww6zrphadhcbqidx8qskc0rsblg6-gnused-4.7/bin:/nix/store/mwc5mwvw080nbahpdc0xr1rk3mhkcdp1-which-2.21/bin:/nix/store/c39nikyab2qfifbqzy7hqqkhvk7k05ca-unzip-6.0/bin \
    PWD=/proc/self/cwd \
  /nix/store/isg8rxaxkijl9x3hr2gzsf8pqfnqxg3k-gcc-wrapper-7.4.0/bin/gcc -U_FORTIFY_SOURCE -fstack-protector -Wall -B/nix/store/isg8rxaxkijl9x3hr2gzsf8pqfnqxg3k-gcc-wrapper-7.4.0/bin -B/usr/bin -Wunused-but-set-parameter -Wno-free-nonheap-object -fno-omit-frame-pointer -g0 -O2 '-D_FORTIFY_SOURCE=1' -DNDEBUG -ffunction-sections -fdata-sections -DGOOGLE_PROTOBUF_NO_RTTI '-std=c++11' -fno-rtti -MD -MF bazel-out/host/bin/kythe/cxx/extractor/_objs/index_pack/index_pack.d '-frandom-seed=bazel-out/host/bin/kythe/cxx/extractor/_objs/index_pack/index_pack.o' -D__CLANG_SUPPORT_DYN_ANNOTATION__ -D__STDC_LIMIT_MACROS -D__STDC_CONSTANT_MACROS -iquote . -iquote bazel-out/host/genfiles -iquote bazel-out/host/bin -iquote external/io_kythe -iquote bazel-out/host/genfiles/external/io_kythe -iquote bazel-out/host/bin/external/io_kythe -iquote external/net_zlib -iquote bazel-out/host/genfiles/external/net_zlib -iquote bazel-out/host/bin/external/net_zlib -iquote external/com_github_google_glog -iquote bazel-out/host/genfiles/external/com_github_google_glog -iquote bazel-out/host/bin/external/com_github_google_glog -iquote external/com_github_gflags_gflags -iquote bazel-out/host/genfiles/external/com_github_gflags_gflags -iquote bazel-out/host/bin/external/com_github_gflags_gflags -iquote external/com_google_absl -iquote bazel-out/host/genfiles/external/com_google_absl -iquote bazel-out/host/bin/external/com_google_absl -iquote external/com_github_tencent_rapidjson -iquote bazel-out/host/genfiles/external/com_github_tencent_rapidjson -iquote bazel-out/host/bin/external/com_github_tencent_rapidjson -iquote external/com_google_protobuf -iquote bazel-out/host/genfiles/external/com_google_protobuf -iquote bazel-out/host/bin/external/com_google_protobuf -iquote external/com_googlesource_code_re2 -iquote bazel-out/host/genfiles/external/com_googlesource_code_re2 -iquote bazel-out/host/bin/external/com_googlesource_code_re2 -iquote external/boringssl -iquote bazel-out/host/genfiles/external/boringssl -iquote bazel-out/host/bin/external/boringssl -Ibazel-out/host/bin/external/com_github_gflags_gflags/_virtual_includes/gflags -isystem external/net_zlib/zlib/include -isystem bazel-out/host/genfiles/external/net_zlib/zlib/include -isystem bazel-out/host/bin/external/net_zlib/zlib/include -isystem external/com_github_google_glog/include -isystem bazel-out/host/genfiles/external/com_github_google_glog/include -isystem bazel-out/host/bin/external/com_github_google_glog/include -isystem external/com_github_tencent_rapidjson/include -isystem bazel-out/host/genfiles/external/com_github_tencent_rapidjson/include -isystem bazel-out/host/bin/external/com_github_tencent_rapidjson/include -isystem external/com_google_protobuf/src -isystem bazel-out/host/genfiles/external/com_google_protobuf/src -isystem bazel-out/host/bin/external/com_google_protobuf/src -isystem third_party/llvm/llvm/build/include -isystem bazel-out/host/genfiles/third_party/llvm/llvm/build/include -isystem bazel-out/host/bin/third_party/llvm/llvm/build/include -isystem third_party/llvm/llvm/build/tools/clang/include -isystem bazel-out/host/genfiles/third_party/llvm/llvm/build/tools/clang/include -isystem bazel-out/host/bin/third_party/llvm/llvm/build/tools/clang/include -isystem third_party/llvm/llvm/include -isystem bazel-out/host/genfiles/third_party/llvm/llvm/include -isystem bazel-out/host/bin/third_party/llvm/llvm/include -isystem third_party/llvm/llvm/tools/clang/include -isystem bazel-out/host/genfiles/third_party/llvm/llvm/tools/clang/include -isystem bazel-out/host/bin/third_party/llvm/llvm/tools/clang/include -isystem external/boringssl/src/include -isystem bazel-out/host/genfiles/external/boringssl/src/include -isystem bazel-out/host/bin/external/boringssl/src/include -g0 -g0 -Wno-non-virtual-dtor -Wno-unused-variable -Wno-implicit-fallthrough -fno-canonical-system-headers -Wno-builtin-macro-redefined '-D__DATE__="redacted"' '-D__TIMESTAMP__="redacted"' '-D__TIME__="redacted"' -c kythe/cxx/extractor/index_pack.cc -o bazel-out/host/bin/kythe/cxx/extractor/_objs/index_pack/index_pack.o)
ERROR: /home/ron/dev/kythe/kythe/cxx/extractor/BUILD:5:1: C++ compilation of rule '//kythe/cxx/extractor:index_pack' failed (Exit 1) gcc failed: error executing command /nix/store/isg8rxaxkijl9x3hr2gzsf8pqfnqxg3k-gcc-wrapper-7.4.0/bin/gcc -U_FORTIFY_SOURCE -fstack-protector -Wall -B/nix/store/isg8rxaxkijl9x3hr2gzsf8pqfnqxg3k-gcc-wrapper-7.4.0/bin -B/usr/bin ... (remaining 148 argument(s) skipped)

Use --sandbox_debug to see verbose messages from the sandbox
kythe/cxx/extractor/index_pack.cc:20:10: fatal error: uuid/uuid.h: No such file or directory
 #include <uuid/uuid.h>
          ^~~~~~~~~~~~~
compilation terminated.
INFO: Elapsed time: 193.063s, Critical Path: 14.05s
INFO: 975 processes: 1 local, 974 processwrapper-sandbox.
FAILED: Build did NOT complete successfully

# Odd, since directly compiling that target succeeds. Where is the error coming from?