anchor.diff:  , lib
   , stdenv
   , extraPackages ? []
  -, buildah
   , runc # Default container runtime
   , crun # Container runtime (default with cgroups v2 for podman/buildah)
   , conmon # Container runtime monitor
  
positive.code: }:
  
  let
    buildah = buildah-unwrapped;
  
    preferLocalBuild = true;
  
    binPath = lib.makeBinPath ([
    ] ++ lib.optionals stdenv.isLinux [
      runc
  
negative.code:     iptables
    ] ++ extraPackages);
  
  in runCommand buildah-unwrapped.name {
    name = "${buildah-unwrapped.pname}-wrapper-${buildah-unwrapped.version}";
    inherit (buildah-unwrapped) pname version;
  
    preferLocalBuild = true;
  
    meta = builtins.removeAttrs buildah-unwrapped.meta [ "outputsToInstall" ];
  
    outputs = [
      "out"
  