anchor.diff:  with lib;
   let
     stateDir = "/var/lib/chrony";
  -
  -  keyFile = "${stateDir}/chrony.keys";
   
     cfg = config.services.chrony;
   
  
positive.code: 
        preStart = ''
          mkdir -m 0755 -p ${stateDir}
          touch ${keyFile}
          chmod 0640 ${keyFile}
          chown chrony:chrony ${stateDir} ${keyFile}
        '';
  
        serviceConfig = {
  
negative.code:     "@${pkgs.chrony}/bin/chronyd" "chronyd"
      "-n"
      "-m"
      "-r"
      "-s"
      "-u" "chrony"
      "-f" cfgFile
    ] ++ cfg.extraCmdline;
  