anchor.diff:        ''}
       '';
   
  -    boot.initrd.preLVMCommands = concatStrings (mapAttrsToList openCommand preLVM);
  -    boot.initrd.postDeviceCommands = concatStrings (mapAttrsToList openCommand postLVM);
  +    boot.initrd.preLVMCommands = commonFunctions + concatStrings (mapAttrsToList openCommand preLVM);
  +    boot.initrd.postDeviceCommands = commonFunctions + concatStrings (mapAttrsToList openCommand postLVM);
   
       environment.systemPackages = [ pkgs.cryptsetup ];
     };
  
positive.code:     }
  
      open_yubikey() {
  
          # Make all of these local to this function
          # to prevent their values being leaked
          local salt
  
negative.code:         response="$(ykchalresp -${toString yubikey.slot} -x $challenge 2>/dev/null)"
  
          for try in $(seq 3); do
              ${optionalString yubikey.twoFactor ''
              echo -n "Enter two-factor passphrase: "
              read -rs k_user
              echo
              ''}
  
  