anchor.diff:  , self
   , CF, configd
   , python-setup-hook
  +, nukeReferences
   # For the Python package set
   , packageOverrides ? (self: super: {})
   , buildPackages
  
positive.code:     # some $TMPDIR references to improve binary reproducibility.
      # Note that the .pyc file of _sysconfigdata.py should be regenerated!
      for i in $out/lib/python${majorVersion}/_sysconfigdata*.py $out/lib/python${majorVersion}/config-${majorVersion}m*/Makefile; do
        sed -i $i -e "s|-I/nix/store/[^ ']*||g" -e "s|-L/nix/store/[^ ']*||g" -e "s|$TMPDIR|/no-such-path|g"
      done
  
      # Determinism: rebuild all bytecode
      # We exclude lib2to3 because that's Python 2 code which fails
  
negative.code:     find $out -name "*.py" | ${pythonForBuild} -O  -m compileall -q -f -x "lib2to3" -i -
      find $out -name "*.py" | ${pythonForBuild} -OO -m compileall -q -f -x "lib2to3" -i -
    '';
  
    # Enforce that we don't have references to the OpenSSL -dev package, which we
    # explicitly specify in our configure flags above.
    disallowedReferences = [ openssl.dev ];
  
    passthru = let
      pythonPackages = callPackage ../../../../../top-level/python-packages.nix {
  