anchor.diff: -{ runCommand, lib, writeText, writeScriptBin, stdenv, bash, ruby } :
  -{ env, runScript ? "${bash}/bin/bash", extraBindMounts ? [], extraInstallCommands ? "", importMeta ? {} } :
  +{ runCommand, lib, writeText, writeScriptBin, stdenv, ruby } :
  +{ env, runScript ? "bash", extraBindMounts ? [], extraInstallCommands ? "", importMeta ? {} } :
   
   let
     name = env.pname;
  -  bash' = "${bash}/bin/bash";
   
     # Sandboxing script
     chroot-user = writeScriptBin "chroot-user" ''
  
positive.code:   cat <<EOF >$out/bin/${name}
    #! ${stdenv.shell}
    export CHROOTENV_EXTRA_BINDS="${lib.concatStringsSep ":" extraBindMounts}:\$CHROOTENV_EXTRA_BINDS"
    exec ${chroot-user}/bin/chroot-user ${env} ${bash'} ${init runScript} "\$(pwd)" "\$@"
    EOF
    chmod +x $out/bin/${name}
    ${extraInstallCommands}
  
negative.code:     runCommand "${name}-shell-env" {
        shellHook = ''
          export CHROOTENV_EXTRA_BINDS="${lib.concatStringsSep ":" extraBindMounts}:$CHROOTENV_EXTRA_BINDS"
          exec ${chroot-user}/bin/chroot-user ${env} bash -l ${init "bash"} "$(pwd)"
        '';
      } ''
        echo >&2 ""
  