anchor.diff:            ${concatStringsSep "\n" (map (s: "MACVLAN=${s}") def.macvlan)}
             ${concatStringsSep "\n" (map (s: "VXLAN=${s}") def.vxlan)}
             ${concatStringsSep "\n" (map (s: "Tunnel=${s}") def.tunnel)}
  +          ${concatStringsSep "\n" (map (s: "Xfrm=${s}") def.xfrm)}
   
             ${optionalString (def.dhcpConfig != { }) ''
               [DHCP]
  
positive.code:     (assertValueOneOf "Kind" [
        "bond" "bridge" "dummy" "gre" "gretap" "ip6gre" "ip6tnl" "ip6gretap" "ipip"
        "ipvlan" "macvlan" "macvtap" "sit" "tap" "tun" "veth" "vlan" "vti" "vti6"
        "vxlan" "geneve" "vrf" "vcan" "vxcan" "wireguard" "netdevsim"
      ])
      (assertByteFormat "MTUBytes")
      (assertMacAddress "MACAddress")
  
negative.code:           ${optionalString (def.bondConfig != { }) ''
              [Bond]
              ${attrsToSection def.bondConfig}
  
            ''}
            ${optionalString (def.xfrmConfig != { }) ''
              [Xfrm]
              ${attrsToSection def.xfrmConfig}
  
            ''}
            ${optionalString (def.wireguardConfig != { }) ''
  