anchor.diff:  
           postStart =
             ''
  -            # This blocks until the container-startup-done service
  -            # writes something to this pipe.  FIXME: it also hangs
  -            # until the start timeout expires if systemd-nspawn exits.
  -            read x < $root/var/lib/startup-done
  -            rm -f $root/var/lib/startup-done
  -
               if [ "$PRIVATE_NETWORK" = 1 ]; then
                 ifaceHost=ve-$INSTANCE
                 ip link set dev $ifaceHost up
  
positive.code:           SyslogIdentifier = "container %i";
  
            EnvironmentFile = "-/etc/containers/%i.conf";
  
            # Note that on reboot, systemd-nspawn returns 10, so this
            # unit will be restarted. On poweroff, it returns 0, so the
  
negative.code:                 ip route add $LOCAL_ADDRESS dev $ifaceHost
                fi
              fi
  
              # This blocks until the container-startup-done service
              # writes something to this pipe.  FIXME: it also hangs
              # until the start timeout expires if systemd-nspawn exits.
              read x < $root/var/lib/startup-done
              rm -f $root/var/lib/startup-done
            '';
  
          preStop =
  