anchor.diff:  , zlib, xz, pam, acl, cryptsetup, libuuid, m4, utillinux, libffi
   , glib, kbd, libxslt, coreutils, libgcrypt, libgpgerror, libapparmor, audit, lz4
   , kexectools, libmicrohttpd, linuxHeaders ? stdenv.cc.libc.linuxHeaders, libseccomp
  -, iptables
  +, iptables, gnu-efi
   , autoreconfHook, gettext, docbook_xsl, docbook_xml_dtd_42, docbook_xml_dtd_45
   , enableKDbus ? false
   }:
  
positive.code:     [ linuxHeaders pkgconfig intltool gperf libcap kmod xz pam acl
        /* cryptsetup */ libuuid m4 glib libxslt libgcrypt libgpgerror
        libmicrohttpd kexectools libseccomp libffi audit lz4 libapparmor
        iptables
        /* FIXME: we may be able to prevent the following dependencies
           by generating an autoconf'd tarball, but that's probably not
           worth it. */
  
negative.code:       "--disable-ldconfig"
        "--disable-smack"
  
        "--enable-gnuefi"
        "--with-efi-libdir=${gnu-efi}/lib"
        "--with-efi-includedir=${gnu-efi}/include"
        "--with-efi-ldsdir=${gnu-efi}/lib"
  
        "--with-sysvinit-path="
        "--with-sysvrcnd-path="
        "--with-rc-local-script-path-stop=/etc/halt.local"
  