anchor.diff:  , gnupg
   , zlib
   , xz
  +, zstd
   , tpm2-tss
   , libuuid
   , libapparmor
  
positive.code: 
      ++ lib.optional withApparmor libapparmor
      ++ lib.optional wantCurl (lib.getDev curl)
      ++ lib.optionals withCompression [ bzip2 lz4 xz ]
      ++ lib.optional withCryptsetup (lib.getDev cryptsetup.dev)
      ++ lib.optional withEfi gnu-efi
      ++ lib.optional withKexectools kexec-tools
  
negative.code: 
  , withAnalyze ? true
  , withApparmor ? true
  , withCompression ? true  # adds bzip2, lz4, xz and zstd
  , withCoredump ? true
  , withCryptsetup ? true
  , withDocumentation ? true
  