anchor.diff:  
   let
     cfg = config.virtualisation.cri-o;
  +
  +  # Copy configuration files to avoid having the entire sources in the system closure
  +  copyFile = filePath: pkgs.runCommandNoCC (builtins.unsafeDiscardStringContext (builtins.baseNameOf filePath)) {} ''
  +    cp ${filePath} $out
  +  '';
   in
   {
     imports = [
  
positive.code:   config = mkIf cfg.enable {
      environment.systemPackages = with pkgs;
        [ cri-o cri-tools conmon iptables runc utillinux ];
      environment.etc."crictl.yaml".text = ''
        runtime-endpoint: unix:///var/run/crio/crio.sock
      '';
      environment.etc."crio/crio.conf".text = ''
        [crio]
        storage_driver = "${cfg.storageDriver}"
  
negative.code:       manage_network_ns_lifecycle = true
      '';
  
      environment.etc."cni/net.d/10-crio-bridge.conf".source = copyFile "${pkgs.cri-o.src}/contrib/cni/10-crio-bridge.conf";
  
      # Enable common /etc/containers configuration
      virtualisation.containers.enable = true;
  