anchor.diff:  let
     luks = config.boot.initrd.luks;
   
  -  openCommand = { name, device }: ''
  +  openCommand = { name, device, ... }: ''
       # Wait for luksRoot to appear, e.g. if on a usb drive.
       # XXX: copied and adapted from stage-1-init.sh - should be
       # available as a function.
  
positive.code:       $out/bin/cryptsetup --version
      '';
  
      boot.initrd.preLVMCommands = concatMapStrings openCommand luks.devices;
    };
  }
  
negative.code: 
      boot.initrd.luks.devices = mkOption {
        default = [ ];
        example = [ { name = "luksroot"; device = "/dev/sda3"; preLVM = true; } ];
        description = '';
          The list of devices that should be decrypted using LUKS before trying to mount the
          root partition. This works for both LVM-over-LUKS and LUKS-over-LVM setups.
  