anchor.diff:        let
   
           deviceDependency = dev:
  -          if (config.boot.isContainer == false)
  -          then
  -            # Trust udev when not in the container
  -            optional (dev != null) (subsystemDevice dev)
  -          else
  -            # When in the container, check whether the interface is built from other definitions
  -            if (hasAttr dev cfg.bridges) ||
  -               (hasAttr dev cfg.bonds) ||
  -               (hasAttr dev cfg.macvlans) ||
  -               (hasAttr dev cfg.sits) ||
  -               (hasAttr dev cfg.vlans) ||
  -               (hasAttr dev cfg.vswitches) ||
  -               (hasAttr dev cfg.wlanInterfaces)
  -            then [ "${dev}-netdev.service" ]
  -            else [];
  +          # Use systemd service if we manage device creation, else
  +          # trust udev when not in a container
  +          if (hasAttr dev cfg.bridges) ||
  +             (hasAttr dev cfg.bonds) ||
  +             (hasAttr dev cfg.macvlans) ||
  +             (hasAttr dev cfg.sits) ||
  +             (hasAttr dev cfg.vlans) ||
  +             (hasAttr dev cfg.vswitches) ||
  +             (hasAttr dev cfg.wlanInterfaces)
  +          then [ "${dev}-netdev.service" ]
  +          else optional (dev != null && !config.boot.isContainer) (subsystemDevice dev);
   
           networkLocalCommands = {
             after = [ "network-setup.service" ];
  
positive.code:               ip link set "${n}" up
              '';
              postStop = ''
                ip link delete "${n}"
              '';
            });
  
  
negative.code:               ip link set "${n}" up
              '';
              postStop = ''
                ip link delete "${n}" || true
              '';
            });
  
  