anchor.diff:        mkdir -p $out/nix-support
         printWords ${setJavaClassPath} > $out/nix-support/propagated-build-inputs
   
  -      install_name_tool -change /usr/X11/lib/libfreetype.6.dylib ${freetype}/lib/libfreetype.6.dylib $out/lib/libfontmanager.dylib
  -
         # Set JAVA_HOME automatically.
         cat <<EOF >> $out/nix-support/setup-hook
         if [ -z "\''${JAVA_HOME-}" ]; then export JAVA_HOME=$out; fi
  
positive.code: { lib, stdenv, fetchurl, unzip, setJavaClassPath, freetype }:
  let
    jce-policies = fetchurl {
      # Ugh, unversioned URLs... I hope this doesn't change often enough to cause pain before we move to a Darwin source build of OpenJDK!
      url    = "http://cdn.azul.com/zcek/bin/ZuluJCEPolicies.zip";
  
negative.code:   };
  
    jdk = stdenv.mkDerivation rec {
      pname = "zulu${dist.zuluVersion}-ca-jdk";
      version = dist.jdkVersion;
  
      src = fetchurl {
        url = "https://cdn.azul.com/zulu/bin/zulu${dist.zuluVersion}-ca-jdk${dist.jdkVersion}-macosx_${dist.arch}.tar.gz";
        inherit (dist) sha256;
        curlOpts = "-H Referer:https://www.azul.com/downloads/zulu/";
      };
  
      nativeBuildInputs = [ unzip ];
  
      installPhase = ''
        mkdir -p $out
  