anchor.diff:      export KERNELDIR="${kernel.dev}/lib/modules/${kernel.modDirVersion}/build"
     '';
   
  -  preBuild = ''
  -    mkdir -p jq-prefix/src
  -    cp ${jq-prefix} jq-prefix/src/jq-1.5.tar.gz
  -  '';
  +  libPath = stdenv.lib.makeLibraryPath [
  +    zlib
  +    luajit
  +    ncurses
  +    jsoncpp
  +    curl
  +    jq
  +    openssl
  +    libb64
  +    gcc
  +    stdenv.cc.cc
  +  ];
   
  -  postInstall = optionalString (kernel != null) ''
  +  postInstall = ''
  +    patchelf --set-rpath "$libPath" "$out/bin/sysdig"
  +    patchelf --set-rpath "$libPath" "$out/bin/csysdig"
  +  '' + optionalString (kernel != null) ''
       make install_driver
       kernel_dev=${kernel.dev}
       kernel_dev=''${kernel_dev#/nix/store/}
  
positive.code: {stdenv, fetchurl, fetchFromGitHub, cmake, luajit, kernel, zlib, ncurses, perl, jsoncpp, libb64, openssl, curl}:
  let
    inherit (stdenv.lib) optional optionalString;
    baseName = "sysdig";
    version = "0.10.0";
    # sysdig-0.11.0 depends on some headers from jq which are not
    # installed by default.
    # Relevant sysdig issue: https://github.com/draios/sysdig/issues/626
    jq-prefix = fetchurl {
      url="https://github.com/stedolan/jq/releases/download/jq-1.5/jq-1.5.tar.gz";
      sha256="0g29kyz4ykasdcrb0zmbrp2jqs9kv1wz9swx849i2d1ncknbzln4";
    };
  in
  stdenv.mkDerivation {
    name = "${baseName}-${version}";
  
    src = fetchurl {
      url = "https://github.com/draios/sysdig/archive/${version}.tar.gz";
      sha256 = "0hs0r9z9j7padqdcj69bwx52iw6gvdl0w322qwivpv12j3prcpsj";
    };
  
    buildInputs = [
      cmake zlib luajit ncurses perl jsoncpp libb64 openssl curl
    ];
  
    hardeningDisable = [ "pic" ];
  
negative.code: 
    cmakeFlags = [
      "-DUSE_BUNDLED_DEPS=OFF"
      "-DSYSDIG_VERSION=${version}"
    ] ++ optional (kernel == null) "-DBUILD_DRIVER=OFF";
  
  