anchor.diff:  
               Note that this is a list of <literal>"src:dst"</literal> strings to
               allow for <literal>src</literal> to refer to
  -            <literal>/nix/store</literal> paths, which would difficult with an
  +            <literal>/nix/store</literal> paths, which would be difficult with an
               attribute set.  There are also a variety of mount options available
               as a third field; please refer to the
               <link xlink:href="https://docs.docker.com/engine/reference/run/#volume-shared-filesystems">
  
positive.code:         ++ map escapeShellArg container.cmd
        );
  
        ExecStartPre = ["-${pkgs.docker}/bin/docker rm -f ${name}"
                        "-${pkgs.docker}/bin/docker image prune -f"] ++
          (optional (container.imageFile != null)
                  ["${pkgs.docker}/bin/docker load -i ${container.imageFile}"]);
  
        ExecStop = ''${pkgs.bash}/bin/sh -c "[ $SERVICE_RESULT = success ] || ${pkgs.docker}/bin/docker stop ${name}"'';
        ExecStopPost = "-${pkgs.docker}/bin/docker rm -f ${name}";
  
negative.code: 
          entrypoint = mkOption {
            type = with types; nullOr str;
            description = "Override the default entrypoint of the image.";
            default = null;
            example = "/bin/my-app";
          };
  