anchor.diff:        };
       };
   
  -    makeLuksRootTest = name: luksFormatOpts: makeInstallerTest name
  -      { createPartitions = ''
  -          $machine->succeed(
  +    makeLuksRootTest = name: luksFormatOpts: makeInstallerTest name {
  +      createPartitions = ''
  +        machine.succeed(
               "flock /dev/vda parted --script /dev/vda -- mklabel msdos"
  -            . " mkpart primary ext2 1M 50MB" # /boot
  -            . " mkpart primary linux-swap 50M 1024M"
  -            . " mkpart primary 1024M -1s", # LUKS
  +            + " mkpart primary ext2 1M 50MB"  # /boot
  +            + " mkpart primary linux-swap 50M 1024M"
  +            + " mkpart primary 1024M -1s",  # LUKS
               "udevadm settle",
               "mkswap /dev/vda2 -L swap",
               "swapon -L swap",
  
positive.code:   pkgs ? import ../.. { inherit system config; }
  }:
  
  with import ../lib/testing.nix { inherit system pkgs; };
  with pkgs.lib;
  
  let
  
negative.code:   # Test whether opening encrypted filesystem with keyfile
    # Checks for regression of missing cryptsetup, when no luks device without
    # keyfile is configured
    encryptedFSWithKeyfile = makeInstallerTest "encryptedFSWithKeyfile" {
      createPartitions = ''
        machine.succeed(
            "flock /dev/vda parted --script /dev/vda -- mklabel msdos"
            + " mkpart primary ext2 1M 50MB"  # /boot
            + " mkpart primary linux-swap 50M 1024M"
            + " mkpart primary 1024M 1280M"  # LUKS with keyfile
            + " mkpart primary 1280M -1s",
            "udevadm settle",
            "mkswap /dev/vda2 -L swap",
            "swapon -L swap",
  