anchor.diff:  
       wrapProgram $out/bin/lxd --prefix PATH : ${lib.makeBinPath (
         networkPkgs
  -      ++ [ acl rsync gnutar xz btrfs-progs gzip dnsmasq squashfsTools iproute2 bash criu ]
  +      ++ [ acl rsync gnutar xz btrfs-progs gzip dnsmasq squashfsTools iproute2 bash criu attr ]
         ++ [ (writeShellScriptBin "apparmor_parser" ''
                exec '${apparmor-parser}/bin/apparmor_parser' -I '${apparmor-profiles}/etc/apparmor.d' "$@"
              '') ]
  
positive.code: { lib, hwdata, pkg-config, lxc, buildGoPackage, fetchurl
  , makeWrapper, acl, rsync, gnutar, xz, btrfs-progs, gzip, dnsmasq
  , squashfsTools, iproute2, iptables, ebtables, iptables-nftables-compat, libcap
  , dqlite, raft-canonical, sqlite-replication, udev
  , writeShellScriptBin, apparmor-profiles, apparmor-parser
  
negative.code: in
  buildGoPackage rec {
    pname = "lxd";
    version = "4.18";
  
    goPackagePath = "github.com/lxc/lxd";
  
    src = fetchurl {
      url = "https://linuxcontainers.org/downloads/lxd/lxd-${version}.tar.gz";
      sha256 = "19gkllahfd2fgz6vng5lrqx3bdrzaf9s874gzznvzvj9sgj0j3mn";
    };
  
    postPatch = ''
  