anchor.diff:  
   let
     luks = config.boot.initrd.luks;
  +  kernelPackages = config.boot.kernelPackages;
   
     commonFunctions = ''
       die() {
  
positive.code:     open_with_hardware() {
        local passsphrase
  
        if wait_fido2key ${toString fido2.gracePeriod}; then
            ${if fido2.passwordLess then ''
              export passphrase=""
            '' else ''
              echo -n "FIDO2 salt for ${device}: "
              read -rs passphrase
              echo
            ''}
              echo "Waiting for your FIDO2 device..."
              fido2luks -i open ${device} ${name} ${fido2.credential} --salt string:$passphrase
          else
              echo "No FIDO2 key found, falling back to normal open procedure"
              open_normally
          fi
      }
      ''}
  
negative.code:                 echo -n .
                  sleep 1
                  gpg --card-status > /dev/null 2> /dev/null
                  if [ $? == 0 ]; then
                      success=true
                      break
  