anchor.diff:          containers.  Each container appears as a service
           <literal>container-<replaceable>name</replaceable></literal>
           on the host system, allowing it to be started and stopped via
  -        <command>systemctl</command> .
  +        <command>systemctl</command>.
         '';
       };
   
  
positive.code:         fi
        fi
  
        ${if cfg . "extraVeths" or null != null then
          ''extraFlags+=" ${concatStringsSep " " (mapAttrsToList nspawnExtraVethArgs cfg . "extraVeths" or {})}"''
          else
            ''# No extra veth pairs to create''
        }
  
        for iface in $INTERFACES; do
          extraFlags+=" --network-interface=$iface"
  
negative.code:             ${ipcall cfg "ip route" "$LOCAL_ADDRESS" "localAddress"}
              ${ipcall cfg "ip -6 route" "$LOCAL_ADDRESS6" "localAddress6"}
            fi
            ${concatStringsSep "\n" (mapAttrsToList renderExtraVeth cfg.extraVeths)}
          fi
  
          # Get the leader PID so that we can signal it in
  