anchor.diff:          ExecStart = ''
             ${cfg.package}/bin/ovs-monitor-ipsec \
               --root-prefix ${runDir}/ipsec \
  -            --pidfile /var/run/openvswitch/ovs-monitor-ipsec.pid \
  +            --pidfile /run/openvswitch/ovs-monitor-ipsec.pid \
               --monitor --detach \
  -            unix:/var/run/openvswitch/db.sock
  +            unix:/run/openvswitch/db.sock
           '';
  -        PIDFile = "/var/run/openvswitch/ovs-monitor-ipsec.pid";
  +        PIDFile = "/run/openvswitch/ovs-monitor-ipsec.pid";
           # Use service type 'forking' to correctly determine when ovs-monitor-ipsec is ready.
           Type = "forking";
         };
  
positive.code:             --certificate=db:Open_vSwitch,SSL,certificate \
              --bootstrap-ca-cert=db:Open_vSwitch,SSL,ca_cert \
              --unixctl=ovsdb.ctl.sock \
              --pidfile=/var/run/openvswitch/ovsdb.pid \
              --detach \
              /var/db/openvswitch/conf.db
            '';
          Restart = "always";
          RestartSec = 3;
          PIDFile = "/var/run/openvswitch/ovsdb.pid";
          # Use service type 'forking' to correctly determine when ovsdb-server is ready.
          Type = "forking";
        };
  
negative.code:       serviceConfig = {
          ExecStart = ''
            ${cfg.package}/bin/ovs-vswitchd \
            --pidfile=/run/openvswitch/ovs-vswitchd.pid \
            --detach
          '';
          PIDFile = "/run/openvswitch/ovs-vswitchd.pid";
          # Use service type 'forking' to correctly determine when vswitchd is ready.
          Type = "forking";
        };
  