anchor.diff: -import ./make-test.nix ({pkgs, lib, ...}:
  +import ./make-test-python.nix ({pkgs, lib, ...}:
   let
     gpgKeyring = (pkgs.runCommand "gpg-keyring" { buildInputs = [ pkgs.gnupg ]; } ''
       mkdir -p $out
  
positive.code:   };
  
    testScript = ''
      startAll;
  
      $server->waitForUnit("nginx.service");
      $client->waitForUnit("network-online.target");
      $client->succeed("machinectl pull-raw --verify=signature http://server/testimage.raw");
      $client->succeed("cmp /var/lib/machines/testimage.raw ${nspawnImages}/testimage.raw");
    '';
  })
  
negative.code:     gpg --batch --sign --detach-sign --output SHA256SUMS.gpg SHA256SUMS
    '');
  in {
    name = "systemd-nspawn";
  
    nodes = {
      server = { pkgs, ... }: {
  