anchor.diff:    IPV6_MROUTE_MULTIPLE_TABLES y
     IPV6_MROUTE y
     IPV6_PIMSM_V2 y
  +  ${optionalString (versionAtLeast version "4.10") ''
  +    IPV6_SEG6_LWTUNNEL y
  +    IPV6_SEG6_HMAC y
  +  ''}
     NETWORK_PHY_TIMESTAMPING y
     NETFILTER_ADVANCED y
     IP_VS_PROTO_TCP y
  
positive.code:   MEDIA_CAMERA_SUPPORT y
    MEDIA_RC_SUPPORT y
    MEDIA_USB_SUPPORT y
  
    # Our initrd init uses shebang scripts, so can't be modular.
    BINFMT_SCRIPT y
  
negative.code:   NAMESPACES y #  Required by 'unshare' used by 'nixos-install'
    RT_GROUP_SCHED y
    CGROUP_DEVICE y
    ${optionalString (versionAtLeast version "4.10") ''
      CGROUP_BPF y
    ''}
    MEMCG y
    MEMCG_SWAP y
    CGROUP_PIDS y
  