anchor.diff:  { stdenv, fetchFromGitHub, pkgconfig, intltool, gperf, libcap, dbus, kmod
   , xz, pam, acl, cryptsetup, libuuid, m4, utillinux
  -, glib, kbd, libxslt, coreutils, libgcrypt
  +, glib, kbd, libxslt, coreutils, libgcrypt, libapparmor, audit, lz4
   , kexectools, libmicrohttpd, linuxHeaders, libseccomp
   , autoreconfHook, gettext, docbook_xsl, docbook_xml_dtd_42, docbook_xml_dtd_45
   , enableKDbus ? false
  
positive.code:       "--enable-compat-libs" # get rid of this eventually
        "--disable-tests"
  
        "--enable-hostnamed"
        "--enable-networkd"
        "--disable-sysusers"
  
negative.code:   buildInputs =
      [ linuxHeaders pkgconfig intltool gperf libcap kmod xz pam acl
        /* cryptsetup */ libuuid m4 glib libxslt libgcrypt
        libmicrohttpd kexectools libseccomp audit lz4 libapparmor
        /* FIXME: we may be able to prevent the following dependencies
           by generating an autoconf'd tarball, but that's probably not
           worth it. */
  