anchor.diff:  # Those pieces of software we entirely ignore upstream's handling of, and just
   # make sure they're in the path if desired.
   let
  -  k3sVersion = "1.21.2+k3s1";     # k3s git tag
  -  k3sCommit = "5a67e8dc473f8945e8e181f6f0b0dbbc387f6fca"; # k3s git commit at the above version
  +  k3sVersion = "1.21.3+k3s1";     # k3s git tag
  +  k3sCommit = "1d1f220fbee9cdeb5416b76b707dde8c231121f2"; # k3s git commit at the above version
   
     traefikChartVersion = "9.18.2"; # taken from ./scripts/download at TRAEFIK_VERSION
  -  k3sRootVersion = "0.8.1";       # taken from ./scripts/download at ROOT_VERSION
  +  k3sRootVersion = "0.9.1";       # taken from ./scripts/download at ROOT_VERSION
     k3sCNIVersion = "0.8.6-k3s1";   # taken from ./scripts/version.sh at VERSION_CNIPLUGINS
  +
  +  baseMeta = {
  +    description = "A lightweight Kubernetes distribution";
  +    license = licenses.asl20;
  +    homepage = "https://k3s.io";
  +    maintainers = with maintainers; [ euank superherointj ];
  +    platforms = platforms.linux;
  +  };
  +
     # bundled into the k3s binary
     traefikChart = fetchurl {
       url = "https://helm.traefik.io/traefik/traefik-${traefikChartVersion}.tgz";
  
positive.code:       popd
      '';
  
      meta = {
        description = "The various binaries that get packaged into the final k3s binary";
        license = licenses.asl20;
        homepage = "https://k3s.io";
        maintainers = [ maintainers.euank ];
        platforms = platforms.linux;
      };
    };
    k3sBin = buildGoPackage rec {
  
negative.code:     runHook postInstall
    '';
  
    doInstallCheck = true;
    installCheckPhase = ''
      $out/bin/k3s --version | grep v${k3sVersion} > /dev/null
    '';
  
    meta = baseMeta;
  }
  