anchor.diff:    # "#!/usr/bin/env executable" shebang.
     usrBinEnv = runCommand "usr-bin-env" { } ''
       mkdir -p $out/usr/bin
  -    ln -s ${pkgs.coreutils}/bin/env $out/usr/bin
  +    ln -s ${coreutils}/bin/env $out/usr/bin
     '';
   
     # This provides /bin/sh, pointing to bashInteractive.
  
positive.code: rec {
    examples = callPackage ./examples.nix {
      inherit buildImage buildLayeredImage fakeNss pullImage shadowSetup buildImageWithNixDb;
    };
  
    pullImage =
  
negative.code:         outputHashAlgo = "sha256";
          outputHash = sha256;
  
          nativeBuildInputs = [ skopeo ];
          SSL_CERT_FILE = "${cacert.out}/etc/ssl/certs/ca-bundle.crt";
  
          sourceURL = "docker://${imageName}@${imageDigest}";
  