anchor.diff:          containerd
           runc
           iptables
  -      ];
  +      ] ++ lib.optional config.boot.zfs.enabled config.boot.zfs.package;
         serviceConfig = {
           ExecStart = ''${pkgs.containerd}/bin/containerd ${lib.concatStringsSep " " (lib.cli.toGNUCommandLine {} cfg.args)}'';
           Delegate = "yes";
  
positive.code: { pkgs, lib, config, ... }:
  let
    cfg = config.virtualisation.containerd;
    containerdConfigChecked = pkgs.runCommand "containerd-config-checked.toml" { nativeBuildInputs = [pkgs.containerd]; } ''
      containerd -c ${cfg.configFile} config dump >/dev/null
      ln -s ${cfg.configFile} $out
    '';
  in
  {
  
  
negative.code: 
      configFile = lib.mkOption {
        default = null;
        description = ''
         Path to containerd config file.
         Setting this option will override any configuration applied by the settings option.
        '';
        type = nullOr path;
      };
  
      settings = lib.mkOption {
        type = settingsFormat.type;
        default = {};
        description = ''
          Verbatim lines to add to containerd.toml
        '';
      };
  
      args = lib.mkOption {
  