anchor.diff:      "test_pid_file.py"
       "test_preserve_fds.py"
       "test_resources"
  +    "test_seccomp"
       "test_start.py"
       "test_uid_gid.py"
       "test_update.py"
  
positive.code: , nixosTests
  , criu
  , system
  , fetchpatch
  }:
  
  let
  
negative.code: in
  stdenv.mkDerivation rec {
    pname = "crun";
    version = "0.19";
  
    src = fetchFromGitHub {
      owner = "containers";
      repo = pname;
      rev = version;
      sha256 = "sha256-G9asWedX03cP5Qg5HIzlSIwwqNL16kiyWairk+6Kabw=";
      fetchSubmodules = true;
    };
  
    nativeBuildInputs = [ autoreconfHook go-md2man pkg-config python3 ];
  
  