anchor.diff:          TimeoutStartSec = "0";
           Restart = "on-abnormal";
         };
  +      restartTriggers = [ cfgFile ];
       };
     };
   }
  
positive.code: 
    crioPackage = (pkgs.cri-o.override { inherit (cfg) extraPackages; });
  
  in
  {
    imports = [
  
negative.code: 
      environment.etc."crictl.yaml".source = utils.copyFile "${pkgs.cri-o-unwrapped.src}/crictl.yaml";
  
      virtualisation.cri-o.settings.crio = {
        storage_driver = cfg.storageDriver;
  
        image = {
          pause_image = lib.mkIf (cfg.pauseImage != null) cfg.pauseImage;
          pause_command = lib.mkIf (cfg.pauseCommand != null) cfg.pauseCommand;
        };
  
        network = {
          plugin_dirs = [ "${pkgs.cni-plugins}/bin" ];
          network_dir = lib.mkIf (cfg.networkDir != null) cfg.networkDir;
        };
  
        runtime = {
          cgroup_manager = "systemd";
          log_level = cfg.logLevel;
          manage_ns_lifecycle = true;
          pinns_path = "${cfg.package}/bin/pinns";
          hooks_dir =
            optional (config.virtualisation.containers.ociSeccompBpfHook.enable)
              config.boot.kernelPackages.oci-seccomp-bpf-hook;
  
          default_runtime = lib.mkIf (cfg.runtime != null) cfg.runtime;
          runtimes = lib.mkIf (cfg.runtime != null) {
            "${cfg.runtime}" = { };
          };
        };
      };
  
      environment.etc."cni/net.d/10-crio-bridge.conf".source = utils.copyFile "${pkgs.cri-o-unwrapped.src}/contrib/cni/10-crio-bridge.conf";
      environment.etc."cni/net.d/99-loopback.conf".source = utils.copyFile "${pkgs.cri-o-unwrapped.src}/contrib/cni/99-loopback.conf";
      environment.etc."crio/crio.conf.d/00-default.conf".source = cfgFile;
  
      # Enable common /etc/containers configuration
      virtualisation.containers.enable = true;
  