anchor.diff:  , withTimesyncd ? true
   , withTpm2Tss ? !stdenv.hostPlatform.isMusl
   , withUserDb ? !stdenv.hostPlatform.isMusl
  +, withUtmp ? !stdenv.hostPlatform.isMusl
     # tests assume too much system access for them to be feasible for us right now
   , withTests ? false
   
  
positive.code:     "-Dbpf-framework=true"
    ] ++ lib.optionals withTpm2Tss [
      "-Dtpm2=true"
    ] ++ lib.optionals stdenv.hostPlatform.isMusl [
      "-Dgshadow=false"
      "-Dutmp=false"
      "-Didn=false"
    ];
    preConfigure =
  
negative.code:     # runtime; otherwise we can't and we need to reboot.
      interfaceVersion = 2;
  
      inherit withCryptsetup withHostnamed withImportd withLocaled withMachined withTimedated withUtmp util-linux kmod kbd;
  
      tests = {
        inherit (nixosTests) switchTest;
  