anchor.diff:      # container so that container@.target can get the container
       # configuration.
       environment.etc =
  -      let mkPortStr = p: p.protocol + ":" + (toString p.hostPort) + ":" + (if p.containerPort == null then toString p.hostPort else toString p.containerPort); 
  +      let mkPortStr = p: p.protocol + ":" + (toString p.hostPort) + ":" + (if p.containerPort == null then toString p.hostPort else toString p.containerPort);
         in mapAttrs' (name: cfg: nameValuePair "containers/${name}.conf"
         { text =
             ''
  
positive.code:       cp --remove-destination /etc/resolv.conf "$root/etc/resolv.conf"
  
        if [ "$PRIVATE_NETWORK" = 1 ]; then
          extraFlags+=" --network-veth"
          if [ -n "$HOST_BRIDGE" ]; then
            extraFlags+=" --network-bridge=$HOST_BRIDGE"
  
negative.code:       # Clean up existing machined registration and interfaces.
        machinectl terminate "$INSTANCE" 2> /dev/null || true
  
        if [ -n "$HOST_ADDRESS" ] || [ -n "$LOCAL_ADDRESS" ]; then
          ip link del dev "ve-$INSTANCE" 2> /dev/null || true
          ip link del dev "vb-$INSTANCE" 2> /dev/null || true
        fi
  