anchor.diff:      networking = {
         NET                = yes;
         IP_PNP             = no;
  -      IPV6_PRIVACY       = whenOlder "3.13" yes;
         NETFILTER          = yes;
         NETFILTER_ADVANCED = yes;
         IP_VS_PROTO_TCP    = yes;
  
positive.code:     virtualisation = {
        PARAVIRT = option yes;
  
        HYPERVISOR_GUEST = when (!grsecurity && versionAtLeast version "3.10") yes;
        PARAVIRT_GUEST   = option (when (!grsecurity && versionOlder   version "3.10") yes);
        PARAVIRT_SPINLOCKS  = option yes;
  
        KVM_APIC_ARCHITECTURE             = whenOlder "4.8" yes;
        KVM_ASYNC_PF                      = yes;
        KVM_CLOCK                         = option (whenOlder   "3.7"  yes);
        KVM_COMPAT                        = option (whenBetween "4.0" "4.12"  yes);
        KVM_DEVICE_ASSIGNMENT             = option (whenBetween "3.10" "4.12" yes);
        KVM_GENERIC_DIRTYLOG_READ_PROTECT = whenAtLeast "4.0"  yes;
        KVM_GUEST                         = when (!grsecurity) yes;
        KVM_MMIO                          = yes;
        KVM_VFIO                          = whenAtLeast "3.13" yes;
        KSM = yes;
        VIRT_DRIVERS = yes;
        # We nneed 64 GB (PAE) support for Xen guest support
        HIGHMEM64G = option (when (!stdenv.is64bit) yes);
  
        VFIO_PCI_VGA = when (versionAtLeast version "3.9" && stdenv.is64bit) yes;
  
      } // optionalAttrs (stdenv.isx86_64 || stdenv.isi686) ({
        XEN = option yes;
  
negative.code:       HOSTAP_FIRMWARE_NVRAM = option yes;
        ATH9K_PCI             = option yes; # Detect Atheros AR9xxx cards on PCI(e) bus
        ATH9K_AHB             = option yes; # Ditto, AHB bus
        B43_PHY_HT            = option yes;
        BCMA_HOST_PCI         = option yes;
      };
  
  