anchor.diff:      ++ lib.optionals virglSupport [ virglrenderer ]
       ++ lib.optionals libiscsiSupport [ libiscsi ]
       ++ lib.optionals smbdSupport [ samba ]
  -    ++ lib.optionals uringSupport [ liburing ];
  +    ++ lib.optionals uringSupport [ liburing ]
  +    ++ lib.optionals canokeySupport [ canokey-qemu ];
   
     dontUseMesonConfigure = true; # meson's configurePhase isn't compatible with qemu build
   
  
positive.code:     ++ lib.optional tpmSupport "--enable-tpm"
      ++ lib.optional libiscsiSupport "--enable-libiscsi"
      ++ lib.optional smbdSupport "--smbd=${samba}/bin/smbd"
      ++ lib.optional uringSupport "--enable-linux-io-uring";
  
    dontWrapGApps = true;
  
  
negative.code: , smbdSupport ? false, samba
  , tpmSupport ? true
  , uringSupport ? stdenv.isLinux, liburing
  , canokeySupport ? false, canokey-qemu
  , hostCpuOnly ? false
  , hostCpuTargets ? (if hostCpuOnly
                      then (lib.optional stdenv.isx86_64 "i386-softmmu"
  