anchor.diff:      sudo nixos-container run vpn -- protonvpn c -f
       sudo nixos-container run vpn -- start_xpra $@ &
   
  -    sleep 5
  +    while ! ${pkgs.socat}/bin/socat -u OPEN:/dev/null UNIX-CONNECT:/run/xpra-vpn/vpn-0
  +    do
  +      echo "Waiting for /run/xpra-vpn/vpn-0 ..."
  +      sleep 1
  +    done
   
  -    ${pkgs.xpra}/bin/xpra attach socket:///run/xpra-vpn/vpn-0
  +    ${xpra}/bin/xpra attach --opengl=yes --video-encoders=rgb24 socket:///run/xpra-vpn/vpn-0
   
       sudo nixos-container run vpn -- protonvpn d
     '';
  
positive.code:       hardware.opengl.enable = true;
        hardware.opengl.extraPackages = config.hardware.opengl.extraPackages;
        networking.firewall.enable = false;
        boot.kernelPackages = pkgs.linuxPackages_latest;
      };
    };
    system.activationScripts.container_vpn_startup = ''
  
negative.code: { outInterface, nameserver ? null }:
  { config, pkgs, lib, ... }:
  let
    xpra = pkgs.xpra.overrideDerivation (old: {
      propagatedBuildInputs = old.propagatedBuildInputs ++ [ pkgs.python3Packages.pyinotify ];
    });
    start_xpra = pkgs.writeScriptBin "start_xpra" ''
      #!${pkgs.stdenv.shell}
  
      set -e
  
      sudo -iu browser ${xpra}/bin/xpra start --daemon=no --exit-with-children=yes --start-child=$1 ''${@:2}
    '';
    start_vpn_container = pkgs.writeScriptBin "start_vpn_container" ''
      #!${pkgs.stdenv.shell}
  