anchor.diff:      runCommand "${name}-shell-env" {
         shellHook = ''
           export CHROOTENV_EXTRA_BINDS="${lib.concatStringsSep ":" extraBindMounts}:$CHROOTENV_EXTRA_BINDS"
  -        exec ${chroot-user}/bin/chroot-user ${env} ${bash'} -l ${init bash'} "$(pwd)"
  +        exec ${chroot-user}/bin/chroot-user ${env} bash -l ${init "bash"} "$(pwd)"
         '';
       } ''
         echo >&2 ""
  
positive.code:   cat <<EOF >$out/bin/${name}
    #! ${stdenv.shell}
    export CHROOTENV_EXTRA_BINDS="${lib.concatStringsSep ":" extraBindMounts}:\$CHROOTENV_EXTRA_BINDS"
    exec ${chroot-user}/bin/chroot-user ${env} ${bash'} ${init runScript} "\$(pwd)" "\$@"
    EOF
    chmod +x $out/bin/${name}
    ${extraInstallCommands}
  
negative.code: { runCommand, lib, writeText, writeScriptBin, stdenv, ruby } :
  { env, runScript ? "bash", extraBindMounts ? [], extraInstallCommands ? "", importMeta ? {} } :
  
  let
    name = env.pname;
  
    # Sandboxing script
    chroot-user = writeScriptBin "chroot-user" ''
  