anchor.diff:        coreutils # meson calls date, stat etc.
         glibcLocales
         patchelf getent m4
  +
  +      (buildPackages.python3Packages.python.withPackages ( ps: with ps; [ python3Packages.lxml ]))
       ];
     buildInputs =
       [ linuxHeaders libcap kmod xz pam acl
  
positive.code:     "-Dquotacheck=false"
      "-Dldconfig=false"
      "-Dsmack=true"
      "-Dsystem-uid-max=499" #TODO: debug why awking around in /etc/login.defs doesn't work
      "-Dsystem-gid-max=499"
      # "-Dtime-epoch=1"
  
negative.code:       stdenv.lib.optional withLibseccomp libseccomp ++
      [ libffi audit lz4 bzip2 libapparmor
        iptables gnu-efi
      ] ++ stdenv.lib.optional withSelinux libselinux;
  
    #dontAddPrefix = true;
  
    mesonFlags = [
      "-Ddbuspolicydir=${placeholder "out"}/etc/dbus-1/system.d"
      "-Ddbussessionservicedir=${placeholder "out"}/share/dbus-1/services"
      "-Ddbussystemservicedir=${placeholder "out"}/share/dbus-1/system-services"
      "-Dpamconfdir=${placeholder "out"}/etc/pam.d"
      "-Drootprefix=${placeholder "out"}"
      "-Drootlibdir=${placeholder "lib"}/lib"
      "-Dpkgconfiglibdir=${placeholder "dev"}/lib/pkgconfig"
      "-Dpkgconfigdatadir=${placeholder "dev"}/share/pkgconfig"
      "-Dloadkeys-path=${kbd}/bin/loadkeys"
      "-Dsetfont-path=${kbd}/bin/setfont"
      "-Dtty-gid=3" # tty in NixOS has gid 3
  