anchor.diff:      "3.amazon.pool.ntp.org"
     ];
   
  -  nix.package = pkgs.nix;
  +  nix.package = sdk.nix;
     nix.readOnlyStore = true;
     nix.trustedBinaryCaches = [ "http://hydra.nixos.org" ];
   
  
positive.code: { config, pkgs, lib, ... }: with lib;
  let
    inherit (import <microgram/sdk.nix>) ugpkgs nixpkgs-config;
  
    cloudDefault = mkOverride 900;
  
  
negative.code: 
    boot.kernel.sysctl = {
      # allows control of core dumps with systemd-coredumpctl
      "kernel.core_pattern" = cloudDefault "|${systemd-pkg}/lib/systemd/systemd-coredump %p %u %g %s %t %e";
  
      "fs.file-max" = cloudDefault fd-limit.hard;
  
  