anchor.diff:    dummyConfig =
       {
         extraVeths = {};
  +      additionalCapabilities = [];
  +      allowedDevices = [];
         hostAddress = null;
         hostAddress6 = null;
         localAddress = null;
  
positive.code:       ''
    );
  
    system = config.nixpkgs.system;
  
    bindMountOpts = { name, config, ... }: {
  
negative.code:         --setenv HOST_ADDRESS6="$HOST_ADDRESS6" \
          --setenv LOCAL_ADDRESS6="$LOCAL_ADDRESS6" \
          --setenv PATH="$PATH" \
          ${if cfg.additionalCapabilities != null then
            ''--capability="${concatStringsSep " " cfg.additionalCapabilities}"'' else ""
          } \
          ${containerInit cfg} "''${SYSTEM_PATH:-/nix/var/nix/profiles/system}/init"
      '';
  
  