anchor.diff:              fi
             ''}
   
  -          rm -f $root/var/lib/private/host-notify
  -
             # Run systemd-nspawn without startup notification (we'll
             # wait for the container systemd to signal readiness).
  -          EXIT_ON_REBOOT=1 NOTIFY_SOCKET= \
  +          EXIT_ON_REBOOT=1 \
             exec ${config.systemd.package}/bin/systemd-nspawn \
               --keep-unit \
               -M "$INSTANCE" -D "$root" $extraFlags \
               $EXTRA_NSPAWN_FLAGS \
  +            --notify-ready=yes \
               --bind-ro=/nix/store \
               --bind-ro=/nix/var/nix/db \
               --bind-ro=/nix/var/nix/daemon-socket \
  -            --bind=/run/systemd/notify:/var/lib/private/host-notify \
               --bind="/nix/var/nix/profiles/per-container/$INSTANCE:/nix/var/nix/profiles" \
               --bind="/nix/var/nix/gcroots/per-container/$INSTANCE:/nix/var/nix/gcroots" \
               --setenv PRIVATE_NETWORK="$PRIVATE_NETWORK" \
  
positive.code:         EnvironmentFile = "-/etc/containers/%i.conf";
  
          Type = "notify";
  
          NotifyAccess = "all";
  
          # Note that on reboot, systemd-nspawn returns 133, so this
          # unit will be restarted. On poweroff, it returns 0, so the
  
negative.code:         fi
        fi
  
        # Start the regular stage 1 script.
        exec "$1"
      '';
  
    system = config.nixpkgs.system;
  