anchor.diff:          ln -fs ${pkgs.ipsecTools}/bin/setkey ${runDir}/ipsec/usr/sbin/setkey
           ln -fs ${pkgs.writeScript "racoon-restart" ''
           #!${pkgs.runtimeShell}
  -        /var/run/current-system/sw/bin/systemctl $1 racoon
  +        /run/current-system/sw/bin/systemctl $1 racoon
           ''} ${runDir}/ipsec/etc/init.d/racoon
         '';
       };
  
positive.code:       serviceConfig = {
          ExecStart = ''
            ${cfg.package}/bin/ovs-vswitchd \
            --pidfile=/var/run/openvswitch/ovs-vswitchd.pid \
            --detach
          '';
          PIDFile = "/var/run/openvswitch/ovs-vswitchd.pid";
          # Use service type 'forking' to correctly determine when vswitchd is ready.
          Type = "forking";
        };
  
negative.code:   config = mkIf cfg.enable (let
  
      # Where the communication sockets live
      runDir = "/run/openvswitch";
  
      # The path to the an initialized version of the database
      db = pkgs.stdenv.mkDerivation {
  