anchor.diff:    buildInputs = [
       apt
       audit_lib
  +    augeas
       aws-sdk-cpp
       beecrypt
       boost
  
positive.code:       -e 's,boost_\(.*\)-mt,boost_\1,g' \
        -e 's,rocksdb_lite,rocksdb,g' \
        -i osquery/CMakeLists.txt
    '';
  
    OSQUERY_PLATFORM = "Linux;NixOS";
  
negative.code:     iptables
      libgcrypt
      libgpg-error
      libxml2
      linenoise-ng
      lvm2
      lz4
      ncurses
  