anchor.diff:      url = "https://github.com/rancher/k3s";
       rev = "v${k3sVersion}";
       leaveDotGit = true; # ./scripts/version.sh depends on git
  -    sha256 = "01ww3d71mlri2fk6z54rbd697aqwj942kbg323k0hfsnx7flkhps";
  +    sha256 = "17qsvbj1lvgxqdkxayyqnjwsjs3cx06nfv2hqvixjszn4vf30qlg";
     };
     # Stage 1 of the k3s build:
     # Let's talk about how k3s is structured.
  
positive.code:   k3sRoot = fetchzip {
      # Note: marked as apache 2.0 license
      url = "https://github.com/rancher/k3s-root/releases/download/v${k3sRootVersion}/k3s-root-amd64.tar";
      sha256 = "12xafn5jivl8lqdcs25b28xrc4mf7yf1xif5np169nvvxgvmpdxp";
      stripRoot = false;
    };
    k3sPlugins = buildGoPackage rec {
      name = "k3s-cni-plugins";
      version = "0.7.6-k3s1"; # from ./scripts/version.sh 'VERSION_CNIPLUGINS'; update when k3s's repo is updated.
  
      goPackagePath = "github.com/containernetworking/plugins";
      subPackages = [ "." ];
  
negative.code:       owner = "rancher";
        repo = "plugins";
        rev = "v${version}";
        sha256 = "13kx9msn5y9rw8v1p717wx0wbjqln59g6y3qfb1760aiwknva35q";
      };
  
      meta = {
  