anchor.diff:      sha256 = "1wk1aanzfln88min29p5av2j8gd8vj5afbs2gvarv7lvx1vi7kh1";
     };
   
  +  buildInputs = [ zsh pinentry ];
  +
     nativeBuildInputs = [ makeWrapper ];
   
     postPatch = ''
  
positive.code: { stdenv, lib, fetchFromGitHub, gettext, zsh, pinentry, cryptsetup, gnupg, makeWrapper }:
  
  stdenv.mkDerivation rec {
    name = "tomb-${version}";
  
negative.code:       --replace 'TOMBEXEC=$0' 'TOMBEXEC=tomb'
    '';
  
    doInstallCheck = true;
    installCheckPhase = "$out/bin/tomb -h 2>/dev/null";
  
    installPhase = ''
      install -Dm755 tomb       $out/bin/tomb
      install -Dm644 doc/tomb.1 $out/share/man/man1/tomb.1
  
      wrapProgram $out/bin/tomb \
        --prefix PATH : $out/bin:${lib.makeBinPath [ cryptsetup gettext gnupg pinentry utillinux e2fsprogs ]}
    '';
  
    meta = with stdenv.lib; {
  