anchor.diff:      "GIT_PROXY_COMMAND" "SOCKS_SERVER"
     ];
   
  -  buildInputs = [ git gitRepo cacert ] ++ optional (gnupg != null) [ gnupg ];
  +  buildInputs = [ gitRepo cacert ];
   
     GIT_SSL_CAINFO = "${cacert}/etc/ssl/certs/ca-bundle.crt";
   
     buildCommand = ''
  +    # Path must be absolute (e.g. for GnuPG: ~/.repoconfig/gnupg/pubring.kbx)
  +    export HOME="$(pwd)"
  +
       mkdir .repo
       ${optionalString (local_manifests != []) ''
         mkdir .repo/local_manifests
  
positive.code: { stdenv, git, gitRepo, gnupg ? null, cacert, copyPathsToStore }:
  
  { name, manifest, rev ? "HEAD", sha256
  , repoRepoURL ? "", repoRepoRev ? "", referenceDir ? ""
  
negative.code:       done
      ''}
  
      repo init ${concatStringsSep " " repoInitFlags}
      repo sync --jobs=$NIX_BUILD_CORES --current-branch
      ${optionalString (!createMirror) "rm -rf $out/.repo"}
  