anchor.diff:  
     postInstall = ''
       make unbound-event-install
  +    wrapProgram $out/bin/unbound-control-setup \
  +      --prefix PATH : ${lib.makeBinPath [ openssl ]}
     '';
   
     preFixup = lib.optionalString (stdenv.isLinux && !stdenv.hostPlatform.isMusl) # XXX: revisit
  
positive.code: 
    outputs = [ "out" "lib" "man" ]; # "dev" would only split ~20 kB
  
    buildInputs = [ openssl nettle expat libevent ]
      ++ lib.optionals withSystemd [ pkg-config systemd ]
      ++ lib.optionals withDoH [ libnghttp2 ];
  
negative.code: , libevent
  , dns-root-data
  , pkg-config
  , makeWrapper
    #
    # By default unbound will not be built with systemd support. Unbound is a very
    # commmon dependency. The transitive dependency closure of systemd also
  