anchor.diff:      "--enable-libiptc"
       "--enable-gnuefi"
       "--enable-manpages"
  -  ]) ++ optionals (!libOnly) [
  +    "--with-efi-libdir=${gnu-efi}/lib"
  +    "--with-efi-ldsdir=${gnu-efi}/lib"
  +    "--with-efi-includedir=${gnu-efi}/include"
       "--with-kbd-loadkeys=${kbd}/bin/loadkeys"
       "--with-kbd-setfont=${kbd}/bin/setfont"
  -  ];
  +  ]);
   
     PYTHON_BINARY = "${coreutils}/bin/env python"; # don't want a build time dependency on Python
   
  
positive.code:   
    installTargets = optionals libOnly [
      "install-includeHEADERS"
      "install-libLTLIBRARIES"
      "install-pkgconfigdataDATA"
    ];
  
    postInstall = ''
      mv $out/share/pkgconfig $out/lib
    '' + optionalString (!libOnly) ''
      # sysinit.target: Don't depend on
      # systemd-tmpfiles-setup.service. This interferes with NixOps's
      # send-keys feature (since sshd.service depends indirectly on
  
negative.code:   ] ++ (if libOnly then [
      "--without-python"
      "--disable-dbus"
      "--disable-kmod"
      "--disable-xkbcommon"
      "--disable-blkid"
      "--disable-seccomp"
      "--disable-ima"
      "--enable-xz"
      "--disable-zlib"
      "--disable-bzip2"
      "--enable-lz4"
      "--disable-pam"
      "--disable-acl"
      "--enable-gcrypt"
      "--enable-audit"
      "--disable-elfutils"
      "--disable-libcryptsetup"
      "--disable-qrencode"
      "--disable-gnutls"
      "--disable-microhttpd"
      "--disable-libcurl"
      "--enable-libidn"
      "--disable-libiptc"
      "--disable-gnuefi"
      "--disable-manpages"
    ] else [
      "--with-python"
  