anchor.diff:      ++ lib.optional smbdSupport "--smbd=${samba}/bin/smbd"
       ++ lib.optional uringSupport "--enable-linux-io-uring";
   
  -  doCheck = false; # tries to access /dev
     dontWrapGApps = true;
   
     # QEMU attaches entitlements with codesign and strip removes those,
  
positive.code: 
    passthru = {
      qemu-system-i386 = "bin/qemu-system-i386";
    };
  
    # Builds in ~3h with 2 cores, and ~20m with a big-parallel builder.
  
negative.code: , perl, pixman, vde2, alsa-lib, texinfo, flex
  , bison, lzo, snappy, libaio, libtasn1, gnutls, nettle, curl, ninja, meson, sigtool
  , makeWrapper, runtimeShell
  , attr, libcap, libcap_ng, socat
  , CoreServices, Cocoa, Hypervisor, rez, setfile
  , numaSupport ? stdenv.isLinux && !stdenv.isAarch32, numactl
  , seccompSupport ? stdenv.isLinux, libseccomp
  