anchor.diff:        audit
         bzip2
         cryptsetup
  -      curl.dev
         glib
         kmod
         libapparmor
  
positive.code:       pcre2
        xz
      ]
      ++ lib.optional withNetworkd iptables
      ++ lib.optional withKexectools kexectools
      ++ lib.optional withLibseccomp libseccomp
  
negative.code:     "-Dlocaled=true"
      "-Dresolve=${lib.boolToString withResolved}"
      "-Dsplit-usr=false"
      "-Dlibcurl=${lib.boolToString wantCurl}"
      "-Dlibidn=false"
      "-Dlibidn2=true"
      "-Dquotacheck=false"
  