anchor.diff:  , lib
   , stdenv
   , extraPackages ? []
  -, buildah
   , runc # Default container runtime
   , crun # Container runtime (default with cgroups v2 for podman/buildah)
   , conmon # Container runtime monitor
  
positive.code:     iptables
    ] ++ extraPackages);
  
  in runCommand buildah.name {
    name = "${buildah.pname}-wrapper-${buildah.version}";
    inherit (buildah) pname version;
  
    meta = builtins.removeAttrs buildah.meta [ "outputsToInstall" ];
  
    outputs = [
      "out"
  
negative.code: }:
  
  let
    binPath = lib.makeBinPath ([
    ] ++ lib.optionals stdenv.isLinux [
      runc
  