anchor.diff:    # runtime; otherwise we can't and we need to reboot.
     passthru.interfaceVersion = 2;
   
  -  meta = with stdenv.lib; {
  +  meta = with lib; {
       homepage = "https://www.freedesktop.org/wiki/Software/systemd/";
       description = "A system and service manager for Linux";
       license = licenses.lgpl21Plus;
  
positive.code:     "-Dsetfont-path=${kbd}/bin/setfont"
      "-Dtty-gid=3" # tty in NixOS has gid 3
      "-Ddebug-shell=${bashInteractive}/bin/bash"
      "-Dglib=${stdenv.lib.boolToString (glib != null)}"
      # while we do not run tests we should also not build them. Removes about 600 targets
      "-Dtests=false"
      "-Dimportd=${stdenv.lib.boolToString withImportd}"
      "-Dlz4=true"
      "-Dhomed=false"
      "-Dlogind=${stdenv.lib.boolToString withLogind}"
      "-Dlocaled=${stdenv.lib.boolToString withLocaled}"
      "-Dhostnamed=${stdenv.lib.boolToString withHostnamed}"
      "-Dnetworkd=${stdenv.lib.boolToString withNetworkd}"
      "-Dcryptsetup=${stdenv.lib.boolToString withCryptsetup}"
      "-Dportabled=false"
      "-Dhwdb=${stdenv.lib.boolToString withHwdb}"
      "-Dremote=false"
      "-Dsysusers=false"
      "-Dtimedated=${stdenv.lib.boolToString withTimedated}"
      "-Dtimesyncd=${stdenv.lib.boolToString withTimesyncd}"
      "-Dfirstboot=false"
      "-Dlocaled=true"
      "-Dresolve=${stdenv.lib.boolToString withResolved}"
      "-Dsplit-usr=false"
      "-Dlibcurl=true"
      "-Dlibidn=false"
  
negative.code:     [ linuxHeaders libcap curl.dev kmod xz pam acl
        cryptsetup libuuid glib libgcrypt libgpgerror libidn2
        pcre2 ] ++
        lib.optional withKexectools kexectools ++
        lib.optional withLibseccomp libseccomp ++
        [ libffi audit lz4 bzip2 libapparmor iptables ] ++
        lib.optional withEfi gnu-efi ++
        lib.optional withSelinux libselinux ++
        lib.optional withCryptsetup cryptsetup.dev;
  
    #dontAddPrefix = true;
  
  