anchor.diff:    name = "openssh-${version}";
     version = "7.5p1";
   
  -  src = fetchurl {
  -    url = "mirror://openbsd/OpenSSH/portable/${name}.tar.gz";
  -    sha256 = "1w7rb5gbrikxdkp8w7zxnci4549gk4bw1lml01s59w5rzb2y6ilq";
  -  };
  -
  -  prePatch = optionalString hpnSupport
  -    ''
  -      gunzip -c ${hpnSrc} | patch -p1
  -      export NIX_LDFLAGS="$NIX_LDFLAGS -lgcc_s"
  -    '';
  +  src = if hpnSupport then
  +      fetchurl {
  +        url = "https://github.com/rapier1/openssh-portable/archive/hpn-KitchenSink-7_5_P1.tar.gz";
  +        sha256 = "1hasdcfjl6xf5nbbbvqyyq5v7ad10nywrq89j7naxz9wln58nhnn";
  +      }
  +    else
  +      fetchurl {
  +        url = "mirror://openbsd/OpenSSH/portable/${name}.tar.gz";
  +        sha256 = "1w7rb5gbrikxdkp8w7zxnci4549gk4bw1lml01s59w5rzb2y6ilq";
  +      };
   
     patches =
       [
  
positive.code: { stdenv, fetchurl, fetchpatch, zlib, openssl, perl, libedit, pkgconfig, pam
  , etcDir ? null
  , hpnSupport ? false
  , withKerberos ? false
  
negative.code:     ++ optional withGssapiPatches gssapiSrc;
  
    buildInputs = [ zlib openssl libedit pkgconfig pam ]
      ++ optional withKerberos kerberos
      ++ optional hpnSupport autoreconfHook;
  
    # I set --disable-strip because later we strip anyway. And it fails to strip
    # properly when cross building.
  