anchor.diff:    NIX_CFLAGS_COMPILE = "-DluaL_reg=luaL_Reg -DluaL_getn(L,i)=((int)lua_objlen(L,i))";
   
     preConfigure = ''
  +    if ! grep -q "${libsRev}" cmake/modules/falcosecurity-libs.cmake; then
  +      echo "falcosecurity-libs checksum needs to be updated!"
  +      exit 1
  +    fi
       cmakeFlagsArray+=(-DCMAKE_EXE_LINKER_FLAGS="-ltbb -lcurl -labsl_synchronization")
     '' + optionalString (kernel != null) ''
       export INSTALL_MOD_PATH="$out"
  
positive.code: { lib, stdenv, fetchFromGitHub, fetchpatch, cmake, kernel, installShellFiles, pkg-config
  , luajit, ncurses, perl, jsoncpp, libb64, openssl, curl, jq, gcc, elfutils, tbb, protobuf, grpc
  }:
  
  with lib;
  let
    # Compare with https://github.com/draios/sysdig/blob/dev/cmake/modules/falcosecurity-libs.cmake
    libsRev = "2160111cd088aea9ae2235d3385ecb0b1ab6623c";
    libsSha256 = "sha256-TOuxXtrxujyAjzAtlX3/eCfM16mwxnmZ6Wg44SG0dTs=";
  in
  stdenv.mkDerivation rec {
    pname = "sysdig";
    version = "0.28.0";
  
    src = fetchFromGitHub {
      owner = "draios";
      repo = "sysdig";
      rev = version;
      sha256 = "sha256-oE3vCmOw+gcmvGqj7Xk5injpNC/YThckJMNg5XRFhME=";
    };
  
    nativeBuildInputs = [ cmake perl installShellFiles pkg-config ];
    buildInputs = [
      luajit ncurses jsoncpp libb64 openssl curl jq gcc elfutils tbb protobuf grpc
    ] ++ optionals (kernel != null) kernel.moduleBuildDependencies;
  
    hardeningDisable = [ "pic" ];
  
negative.code:       sha256 = libsSha256;
      }} libs
      chmod -R +w libs
      cmakeFlagsArray+=("-DFALCOSECURITY_LIBS_SOURCE_DIR=$(pwd)/libs" "-DVALIJSON_INCLUDE=${valijson}/include")
    '';
  
    cmakeFlags = [
  