Executing bazel test //examples/itf:test_docker yields an error:
error: command 'clang' failed: No such file or directory
Since I have no clang installed in my local system, it appears that it is not hermetic.
Which can also be seen in bazel-contrib/rules_python#2410.
This appears for netifaces dependency.