anchor.diff:        networking.useNetworkd = true;
         networking.useDHCP = false;
   
  -      # open DHCP server on interface to container
  -      networking.firewall.trustedInterfaces = [ "ve-+" ];
  -
         # do not try to access cache.nixos.org
         nix.settings.substituters = lib.mkForce [ ];
  +
  +      # auto-start container
  +      systemd.targets.machines.wants = [ "systemd-nspawn@${containerName}.service" ];
   
         virtualisation.additionalPaths = [ containerSystem ];
       };
  
positive.code:       machine.succeed("machinectl start ${containerName}");
        machine.wait_until_succeeds("systemctl -M ${containerName} is-active default.target");
  
        # Test systemd-nspawn network configuration
        machine.succeed("ping -n -c 1 ${containerName}");
  
        # Test systemd-nspawn uses a user namespace
        machine.succeed("test $(machinectl status ${containerName} | grep 'UID Shift: ' | wc -l) = 1")
  
negative.code:       machine.succeed("machinectl reboot ${containerName}");
        machine.wait_until_succeeds("systemctl -M ${containerName} is-active default.target");
  
        # Restart machine
        machine.shutdown()
        machine.start()
        machine.wait_for_unit("default.target");
  
        # Test auto-start
        machine.succeed("machinectl show ${containerName}")
  
        # Test machinectl stop
        machine.succeed("machinectl stop ${containerName}");
        machine.wait_until_succeeds("test $(systemctl is-active systemd-nspawn@${containerName}) = inactive");
  