anchor.diff:  # Those pieces of software we entirely ignore upstream's handling of, and just
   # make sure they're in the path if desired.
   let
  -  k3sVersion = "1.20.4+k3s1";     # k3s git tag
  +  k3sVersion = "1.20.5+k3s1";     # k3s git tag
     traefikChartVersion = "1.81.0"; # taken from ./scripts/download at the above k3s tag
     k3sRootVersion = "0.8.1";       # taken from ./scripts/download at the above k3s tag
     k3sCNIVersion = "0.8.6-k3s1";   # taken from ./scripts/version.sh at the above k3s tag
  
positive.code:     url = "https://github.com/k3s-io/k3s";
      rev = "v${k3sVersion}";
      leaveDotGit = true; # ./scripts/version.sh depends on git
      sha256 = "0rmn3nh8a94axv6lb2xjnn3gpq0scnvj69bvcs74azvw62fvq016";
    };
    # Stage 1 of the k3s build:
    # Let's talk about how k3s is structured.
  
negative.code:     iproute2
      bridge-utils
      ethtool
      util-linux # kubelet wants 'nsenter' from util-linux: https://github.com/kubernetes/kubernetes/issues/26093#issuecomment-705994388
      ipset
      conntrack-tools
    ];
  
    buildInputs = [
      k3sBin
    ] ++ k3sRuntimeDeps;
  
    nativeBuildInputs = [ makeWrapper ];
  
    unpackPhase = "true";
  
  