anchor.diff:              if match[1] != str(bits):
                   raise Exception(f"bit size should be {bits} but it is {match[1]} instead.")
   
  -
  -    machine = generation1
  -
       machine.wait_for_unit("multi-user.target")
  +    ${switchToGeneration 1}
   
       with subtest("verify startup order"):
           machine.succeed("systemctl is-active foo.service")
   
       with subtest("check bit sizes of dhparam files"):
  -        assert_param_bits("${getParamPath 1 "foo"}", 16)
  -        assert_param_bits("${getParamPath 1 "bar"}", 17)
  +        assert_param_bits("${getParamPath 1 "foo"}", 1024)
  +        assert_param_bits("${getParamPath 1 "bar"}", 1025)
   
       ${switchToGeneration 2}
   
       with subtest("check whether bit size has changed"):
  -        assert_param_bits("${getParamPath 2 "foo"}", 18)
  +        assert_param_bits("${getParamPath 2 "foo"}", 1026)
   
       with subtest("ensure that dhparams file for 'bar' was deleted"):
           machine.fail("test -e ${getParamPath 1 "bar"}")
  
positive.code:     ${switchToGeneration 3}
  
      with subtest("ensure that 'security.dhparams.path' has been deleted"):
          machine.fail("test -e ${nodes.generation3.config.security.dhparams.path}")
  
      ${switchToGeneration 4}
  
      with subtest("check bit sizes dhparam files"):
          assert_param_bits(
              "${getParamPath 4 "foo2"}", 18
          )
          assert_param_bits(
              "${getParamPath 4 "bar2"}", 19
          )
  
      with subtest("check whether dhparam files are in the Nix store"):
  
negative.code:     ${switchToGeneration 5}
  
      with subtest("check whether defaultBitSize works as intended"):
          assert_param_bits("${getParamPath 5 "foo3"}", 1029)
          assert_param_bits("${getParamPath 5 "bar3"}", 1029)
    '';
  }
  