anchor.diff:  
     buildInputs = [ openssl expat libevent python ];
   
  -  postPatch = ''substituteInPlace Makefile.in \
  -    --replace "\$(DESTDIR)\$(PYTHON_SITE_PKG)" "$out/${python.sitePackages}" \
  -    --replace "\$(LIBTOOL) --mode=install cp _unbound.la" "cp _unbound.la"
  +  postPatch = ''
  +    substituteInPlace Makefile.in \
  +      --replace "\$(DESTDIR)\$(PYTHON_SITE_PKG)" "$out/${python.sitePackages}" \
  +      --replace "\$(LIBTOOL) --mode=install cp _unbound.la" "cp _unbound.la"
     '';
   
     preConfigure = "export PYTHON_VERSION=${python.pythonVersion}";
  
positive.code:   meta = with lib; {
      description = "Python library for Unbound, the validating, recursive, and caching DNS resolver";
      license = licenses.bsd3;
      homepage = "http://www.unbound.net";
      maintainers = with maintainers; [ leenaars ];
      platforms = lib.platforms.unix;
    };
  }
  
negative.code:     $out/bin/unbound-anchor -l | head -1 > $out/etc/${pname}/root.anchor
      $out/bin/unbound-anchor -l | tail --lines=+2 - > $out/etc/${pname}/root.key
      # We don't need anything else
      rm -r $out/bin $out/share $out/include $out/etc/unbound
    ''
    # patchelf is only available on Linux and no patching is needed on darwin
    + lib.optionalString stdenv.isLinux ''
  