anchor.diff:    };
   
     security = {
  -    chromiumSuidSandbox.enable = false;
  +    chromiumSuidSandbox.enable = true;
   
       hideProcessInformation = true;
   
  
positive.code:       htop
        i3lock-fancy
        jq
        oh-my-zsh
        skopeo
        upower
  
negative.code:       "vm.swappiness" = 1;
      };
  
      kernelPackages = pkgs.linuxPackages_hardened_copperhead;
  
      loader = {
        efi.canTouchEfiVariables = true;
  