anchor.diff:      '' + optionalString (!clientOnly) ''
         # symlink docker daemon to docker cli derivation
         ln -s ${moby}/bin/dockerd $out/bin/dockerd
  +      ln -s ${moby}/bin/dockerd-rootless $out/bin/dockerd-rootless
   
         # systemd
         mkdir -p $out/etc/systemd/system
  
positive.code:       buildInputs = [ sqlite lvm2 btrfs-progs systemd libseccomp ];
  
        extraPath = optionals (stdenv.isLinux) (makeBinPath [ iproute2 iptables e2fsprogs xz xfsprogs procps util-linux git ]);
  
        postPatch = ''
          patchShebangs hack/make.sh hack/make/
  
negative.code:         install -Dm644 ./contrib/init/systemd/docker.service $out/etc/systemd/system/docker.service
          substituteInPlace $out/etc/systemd/system/docker.service --replace /usr/bin/dockerd $out/bin/dockerd
          install -Dm644 ./contrib/init/systemd/docker.socket $out/etc/systemd/system/docker.socket
  
          # rootless Docker
          install -Dm755 ./contrib/dockerd-rootless.sh $out/libexec/docker/dockerd-rootless.sh
          makeWrapper $out/libexec/docker/dockerd-rootless.sh $out/bin/dockerd-rootless \
            --prefix PATH : "$out/libexec/docker:$extraPath:$extraUserPath"
        '';
  
        DOCKER_BUILDTAGS = []
  