anchor.diff:      "-DQT_LUPDATE_EXECUTABLE=${qttools.dev}/bin/lupdate"
       "-DQT_LRELEASE_EXECUTABLE=${qttools.dev}/bin/lrelease"
     ];
  +  dontFixCmake = true;
   
     qtWrapperArgs =
       [ "--prefix" "PATH" ":" (lib.makeBinPath [ wireguard-tools ]) ];
  
positive.code: 
  let
    pname = "mozillavpn";
    version = "2.9.0";
    src = fetchFromGitHub {
      owner = "mozilla-mobile";
      repo = "mozilla-vpn-client";
      rev = "v${version}";
      fetchSubmodules = true;
      hash = "sha256-arz8hTgQfPFSZesSddcnZoyLfoLQsQT8LIsl+3ZfA0M=";
    };
  
    netfilter-go-modules = (buildGoModule {
      inherit pname version src;
      vendorSha256 = "KFYMim5U8WlJHValvIBQgEN+17SDv0JVbH03IiyfDc0=";
      modRoot = "linux/netfilter";
    }).go-modules;
  
    cargoRoot = "extension/bridge";
  
  in
  stdenv.mkDerivation {
    inherit pname version src cargoRoot;
  
    buildInputs = [
      polkit
  
negative.code:       --replace 'rcc = os.path.join(qtbinpath, rcc_bin)' 'rcc = "${qtbase.dev}/libexec/rcc"'
  
      substituteInPlace src/cmake/linux.cmake \
        --replace '/etc/xdg/autostart' "$out/etc/xdg/autostart" \
        --replace '${"$"}{POLKIT_POLICY_DIR}' "$out/share/polkit-1/actions" \
        --replace '/usr/share/dbus-1' "$out/share/dbus-1" \
        --replace '${"$"}{SYSTEMD_UNIT_DIR}' "$out/lib/systemd/system"
  
      substituteInPlace extension/CMakeLists.txt \
        --replace '/etc' "$out/etc"
  
      substituteInPlace src/connectionbenchmark/benchmarktaskdownload.cpp \
        --replace 'QT_VERSION >= 0x060400' 'false'
  
      ln -s '${netfilter-go-modules}' linux/netfilter/vendor
  
      pushd extension/bridge
      cargoDepsCopy="$extensionBridgeDepsCopy" cargoSetupPostPatchHook
      popd
  
      pushd signature
      cargoDepsCopy="$signatureDepsCopy" cargoSetupPostPatchHook
      popd
  
      cargoSetupPostPatchHook() { true; }
    '';
  
    cmakeFlags = [
  