anchor.diff:  
     FONTCONFIG_FILE = fontsConf; # Fontconfig error: Cannot load default config file
   
  +  # error: “PolicyKit files are missing”
  +  # https://github.com/NixOS/nixpkgs/pull/67625#issuecomment-525788428
  +  PKG_CONFIG_POLKIT_GOBJECT_1_ACTIONDIR = "/run/current-system/sw/share/polkit-1/actions";
  +
     # TODO: wrapGAppsHook wraps efi capsule even though it is not elf
     dontWrapGApps = true;
     # so we need to wrap the executables manually
  
positive.code: , efibootmgr
  , flashrom
  , tpm2-tools
  }:
  
  let
  
negative.code:   ];
  
    postPatch = ''
      patchShebangs \
        libfwupd/generate-version-script.py \
        meson_post_install.sh \
        po/make-images \
        po/make-images.sh \
        po/test-deps
  
      # we cannot use placeholder in substituteAll
      # https://github.com/NixOS/nix/issues/1846
  