anchor.diff:    buildInputs =
       [ linuxHeaders pkgconfig intltool gperf libcap kmod xz pam acl
         /* cryptsetup */ libuuid m4 glib libxslt libgcrypt
  -      libmicrohttpd kexectools libseccomp
  +      libmicrohttpd kexectools libseccomp audit lz4 libapparmor
         /* FIXME: we may be able to prevent the following dependencies
            by generating an autoconf'd tarball, but that's probably not
            worth it. */
  
positive.code: { stdenv, fetchFromGitHub, pkgconfig, intltool, gperf, libcap, dbus, kmod
  , xz, pam, acl, cryptsetup, libuuid, m4, utillinux
  , glib, kbd, libxslt, coreutils, libgcrypt
  , kexectools, libmicrohttpd, linuxHeaders, libseccomp
  , autoreconfHook, gettext, docbook_xsl, docbook_xml_dtd_42, docbook_xml_dtd_45
  , enableKDbus ? false
  
negative.code:       "--enable-compat-libs" # get rid of this eventually
        "--disable-tests"
  
        "--enable-lz4"
        "--enable-hostnamed"
        "--enable-networkd"
        "--disable-sysusers"
  