anchor.diff:              exec ${config.systemd.package}/bin/systemd-nspawn \
                 --keep-unit \
                 -M "$INSTANCE" -D "$root" $extraFlags \
  -              $EXTRABINDS \
  +              $EXTRA_NSPAWN_FLAGS \
                 --bind-ro=/nix/store \
                 --bind-ro=/nix/var/nix/db \
                 --bind-ro=/nix/var/nix/daemon-socket \
  
positive.code:         description = "Location of the host path to be mounted";
        };
        isReadOnly = mkOption {
          default = false;
          example = true;
          type = types.bool;
          description = "Determine whether the mounted path will be accessed in read-only mode";
  
negative.code:       mountPoint = mkOption {
          example = "/mnt/usb";
          type = types.str;
          description = "Mount point on the container file system";
        };
        hostPath = mkOption {
          default = null;
  