anchor.diff:                  merge = loc: defs: (import "${toString config.nixpkgs}/nixos/lib/eval-config.nix" {
                     modules =
                       let
  -                      extraConfig = {
  +                      extraConfig = { options, ... }: {
                           _file = "module at ${__curPos.file}:${toString __curPos.line}";
                           config = {
  -                          nixpkgs = { inherit localSystem; };
  +                          nixpkgs = if options.nixpkgs?hostPlatform && host.options.nixpkgs.hostPlatform.isDefined
  +                                    then { inherit (host.config.nixpkgs) hostPlatform; }
  +                                    else { inherit (host.config.nixpkgs) localSystem; }
  +                          ;
                             boot.isContainer = true;
                             networking.hostName = mkDefault name;
                             networking.useDHCP = false;
  
positive.code: { config, lib, pkgs, ... }:
  
  with lib;
  
  
negative.code:     DeviceAllow = map (d: "${d.node} ${d.modifier}") cfg.allowedDevices;
    };
  
    kernelVersion = config.boot.kernelPackages.kernel.version;
  
    bindMountOpts = { name, ... }: {
  