anchor.diff:    configureFlags = [
       "--sysconfdir=/etc"
       "--localstatedir=/var"
  -    "--without-mini-gmp"
  -    "--with-cli"
  +    "--disable-man-doc"  # No asciidoc support
       "--with-xtables"
       "--with-json"
     ];
  
positive.code: }:
  
  stdenv.mkDerivation rec {
    name = "nftables-0.9.0";
  
    src = fetchurl {
      url = "http://netfilter.org/projects/nftables/files/${name}.tar.bz2";
      multihash = "QmVRkBjAnaDLBh56CGRGDEwdoaryZC9sajqXrjRyjH4X2A";
      hashOutput = false;
      sha256 = "ad8181b5fcb9ca572f444bed54018749588522ee97e4c21922648bb78d7e7e91";
    };
  
    nativeBuildInputs = [
      bison
      docbook2x
      docbook_xml_dtd_45
      flex
    ];
  
  
negative.code:   passthru = {
      srcVerification = fetchurl {
        failEarly = true;
        inherit (src)
          urls
          outputHash
          outputHashAlgo;
        fullOpts = {
          pgpsigUrl = map (n: "${n}.sig") src.urls;
          pgpKeyFingerprint = "C09D B206 3F1D 7034 BA61  52AD AB46 55A1 26D2 92E4";
        };
      };
    };
  
  