anchor.diff:        ''
           #! ${pkgs.runtimeShell} -e
   
  +        # Exit early if we're asked to shut down.
  +        trap "exit 0" SIGRTMIN+3
  +
           # Initialise the container side of the veth pair.
           if [ -n "$HOST_ADDRESS" ]   || [ -n "$HOST_ADDRESS6" ]  ||
              [ -n "$LOCAL_ADDRESS" ]  || [ -n "$LOCAL_ADDRESS6" ] ||
  
positive.code:       script = startScript dummyConfig;
  
        postStart = postStartScript dummyConfig;
  
        preStop = "machinectl poweroff $INSTANCE";
  
        restartIfChanged = false;
  
  
negative.code:       ''}
  
        # Run systemd-nspawn without startup notification (we'll
        # wait for the container systemd to signal readiness)
        # Kill signal handling means systemd-nspawn will pass a system-halt signal
        # to the container systemd when it receives SIGTERM for container shutdown;
        # containerInit and stage2 have to handle this as well.
        exec ${config.systemd.package}/bin/systemd-nspawn \
          --keep-unit \
          -M "$INSTANCE" -D "$root" $extraFlags \
          $EXTRA_NSPAWN_FLAGS \
          --notify-ready=yes \
          --kill-signal=SIGRTMIN+3 \
          --bind-ro=/nix/store \
          --bind-ro=/nix/var/nix/db \
          --bind-ro=/nix/var/nix/daemon-socket \
  