anchor.diff:      # Nix operations.
       boot.initrd.postMountCommands =
         ''
  +        metaDir=$targetRoot/etc/ec2-metadata
  +        mkdir -m 0755 $targetRoot/etc
  +        mkdir -m 0700 -p "$metaDir"
  +
  +        echo "getting EC2 instance metadata..."
  +        ip link set eth0 up
  +        udhcpc --interface eth0 --quit --now --script ${udhcpcScript}
  +
  +        if ! [ -e "$metaDir/ami-manifest-path" ]; then
  +          wget -q -O "$metaDir/ami-manifest-path" http://169.254.169.254/1.0/meta-data/ami-manifest-path
  +        fi
  +
           diskNr=0
           diskForUnionfs=
           for device in /dev/xvd[abcde]*; do
  
positive.code:             mkdir -m 1777 -p $targetRoot/$diskForUnionfs/root/tmp $targetRoot/tmp
              mount --bind $targetRoot/$diskForUnionfs/root/tmp $targetRoot/tmp
  
              if [ ! -e $targetRoot/.ebs ]; then
                  mkdir -m 755 -p $targetRoot/$diskForUnionfs/root/var $targetRoot/var
                  mount --bind $targetRoot/$diskForUnionfs/root/var $targetRoot/var
  
  
negative.code:       autoResize = true;
      };
  
      boot.initrd.kernelModules =
        [ "xen-blkfront" "xen-netfront"
          "af_packet" # <- required by udhcpc
        ];
      boot.kernelParams = mkIf cfg.hvm [ "console=ttyS0" ];
  
      # Prevent the nouveau kernel module from being loaded, as it
  