---
Function {
 argument: None,
 arguments: FunctionArguments {
  arguments: [
   FunctionArgument {
    identifier: "config",
    default: None,
   },
   FunctionArgument {
    identifier: "pkgs",
    default: None,
   },
   FunctionArgument {
    identifier: "lib",
    default: None,
   },
  ],
  ellipsis: true,
 },
 definition: LetIn {
  bindings: [
   KeyValue(
    AttributePath {
     attributes: [
      Raw {
       content: "cfg",
       position: (3, 3),
      },
     ],
    },
    PropertyAccess {
     expression: Variable {
      identifier: "config",
      position: (3, 9),
     },
     attribute_path: AttributePath {
      attributes: [
       Raw {
        content: "security",
        position: (3, 16),
       },
       Raw {
        content: "tpm2",
        position: (3, 25),
       },
      ],
     },
     default: None,
    },
   ),
   KeyValue(
    AttributePath {
     attributes: [
      Raw {
       content: "udevRules",
       position: (9, 3),
      },
     ],
    },
    Function {
     argument: Some(
      "tssUser",
     ),
     arguments: FunctionArguments {
      arguments: [],
      ellipsis: false,
     },
     definition: Function {
      argument: Some(
       "tssGroup",
      ),
      arguments: FunctionArguments {
       arguments: [],
       ellipsis: false,
      },
      definition: String {
       parts: [
        Raw {
         content: "",
         position: (10, 1),
        },
        Expression {
         expression: FunctionApplication {
          function: PropertyAccess {
           expression: Variable {
            identifier: "lib",
            position: (10, 7),
           },
           attribute_path: AttributePath {
            attributes: [
             Raw {
              content: "optionalString",
              position: (10, 11),
             },
            ],
           },
           default: None,
          },
          arguments: [
           BinaryOperation {
            operator: NotEqualTo,
            operands: [
             Variable {
              identifier: "tssUser",
              position: (10, 27),
             },
             Variable {
              identifier: "null",
              position: (10, 38),
             },
            ],
            position: (10, 35),
           },
           String {
            parts: [
             Raw {
              content: "KERNEL==\"tpm[0-9]*\", MODE=\"0660\", OWNER=\"",
              position: (10, 46),
             },
             Expression {
              expression: Variable {
               identifier: "tssUser",
               position: (10, 89),
              },
             },
             Raw {
              content: "\"",
              position: (10, 97),
             },
            ],
           },
          ],
         },
        },
        Raw {
         content: "\n",
         position: (10, 101),
        },
        Expression {
         expression: BinaryOperation {
          operator: Addition,
          operands: [
           BinaryOperation {
            operator: Addition,
            operands: [
             FunctionApplication {
              function: PropertyAccess {
               expression: Variable {
                identifier: "lib",
                position: (11, 7),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "optionalString",
                  position: (11, 11),
                 },
                ],
               },
               default: None,
              },
              arguments: [
               BinaryOperation {
                operator: LogicalOr,
                operands: [
                 BinaryOperation {
                  operator: NotEqualTo,
                  operands: [
                   Variable {
                    identifier: "tssUser",
                    position: (11, 27),
                   },
                   Variable {
                    identifier: "null",
                    position: (11, 38),
                   },
                  ],
                  position: (11, 35),
                 },
                 BinaryOperation {
                  operator: NotEqualTo,
                  operands: [
                   Variable {
                    identifier: "tssGroup",
                    position: (11, 46),
                   },
                   Variable {
                    identifier: "null",
                    position: (11, 58),
                   },
                  ],
                  position: (11, 55),
                 },
                ],
                position: (11, 43),
               },
               String {
                parts: [
                 Raw {
                  content: "KERNEL==\"tpmrm[0-9]*\", MODE=\"0660\"",
                  position: (12, 9),
                 },
                ],
               },
              ],
             },
             FunctionApplication {
              function: PropertyAccess {
               expression: Variable {
                identifier: "lib",
                position: (13, 9),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "optionalString",
                  position: (13, 13),
                 },
                ],
               },
               default: None,
              },
              arguments: [
               BinaryOperation {
                operator: NotEqualTo,
                operands: [
                 Variable {
                  identifier: "tssUser",
                  position: (13, 29),
                 },
                 Variable {
                  identifier: "null",
                  position: (13, 40),
                 },
                ],
                position: (13, 37),
               },
               String {
                parts: [
                 Raw {
                  content: ", OWNER=\"",
                  position: (13, 48),
                 },
                 Expression {
                  expression: Variable {
                   identifier: "tssUser",
                   position: (13, 59),
                  },
                 },
                 Raw {
                  content: "\"",
                  position: (13, 67),
                 },
                ],
               },
              ],
             },
            ],
            position: (13, 7),
           },
           FunctionApplication {
            function: PropertyAccess {
             expression: Variable {
              identifier: "lib",
              position: (14, 9),
             },
             attribute_path: AttributePath {
              attributes: [
               Raw {
                content: "optionalString",
                position: (14, 13),
               },
              ],
             },
             default: None,
            },
            arguments: [
             BinaryOperation {
              operator: NotEqualTo,
              operands: [
               Variable {
                identifier: "tssGroup",
                position: (14, 29),
               },
               Variable {
                identifier: "null",
                position: (14, 41),
               },
              ],
              position: (14, 38),
             },
             String {
              parts: [
               Raw {
                content: ", GROUP=\"",
                position: (14, 49),
               },
               Expression {
                expression: Variable {
                 identifier: "tssGroup",
                 position: (14, 60),
                },
               },
               Raw {
                content: "\"",
                position: (14, 69),
               },
              ],
             },
            ],
           },
          ],
          position: (14, 7),
         },
        },
        Raw {
         content: "\n",
         position: (15, 7),
        },
       ],
      },
      position: (9, 24),
     },
     position: (9, 15),
    },
   ),
  ],
  target: Map {
   bindings: [
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "options",
        position: (19, 3),
       },
       Raw {
        content: "security",
        position: (19, 11),
       },
       Raw {
        content: "tpm2",
        position: (19, 20),
       },
      ],
     },
     Map {
      bindings: [
       KeyValue(
        AttributePath {
         attributes: [
          Raw {
           content: "enable",
           position: (20, 5),
          },
         ],
        },
        FunctionApplication {
         function: PropertyAccess {
          expression: Variable {
           identifier: "lib",
           position: (20, 14),
          },
          attribute_path: AttributePath {
           attributes: [
            Raw {
             content: "mkEnableOption",
             position: (20, 18),
            },
           ],
          },
          default: None,
         },
         arguments: [
          String {
           parts: [
            Raw {
             content: "Trusted Platform Module 2 support",
             position: (20, 34),
            },
           ],
          },
         ],
        },
       ),
       KeyValue(
        AttributePath {
         attributes: [
          Raw {
           content: "tssUser",
           position: (22, 5),
          },
         ],
        },
        FunctionApplication {
         function: PropertyAccess {
          expression: Variable {
           identifier: "lib",
           position: (22, 15),
          },
          attribute_path: AttributePath {
           attributes: [
            Raw {
             content: "mkOption",
             position: (22, 19),
            },
           ],
          },
          default: None,
         },
         arguments: [
          Map {
           bindings: [
            KeyValue(
             AttributePath {
              attributes: [
               Raw {
                content: "description",
                position: (23, 7),
               },
              ],
             },
             String {
              parts: [
               Raw {
                content: "Name of the tpm device-owner and service user, set if applyUdevRules is\nset.\n",
                position: (24, 1),
               },
              ],
             },
            ),
            KeyValue(
             AttributePath {
              attributes: [
               Raw {
                content: "type",
                position: (27, 7),
               },
              ],
             },
             FunctionApplication {
              function: PropertyAccess {
               expression: Variable {
                identifier: "lib",
                position: (27, 14),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "types",
                  position: (27, 18),
                 },
                 Raw {
                  content: "nullOr",
                  position: (27, 24),
                 },
                ],
               },
               default: None,
              },
              arguments: [
               PropertyAccess {
                expression: Variable {
                 identifier: "lib",
                 position: (27, 31),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "types",
                   position: (27, 35),
                  },
                  Raw {
                   content: "str",
                   position: (27, 41),
                  },
                 ],
                },
                default: None,
               },
              ],
             },
            ),
            KeyValue(
             AttributePath {
              attributes: [
               Raw {
                content: "default",
                position: (28, 7),
               },
              ],
             },
             IfThenElse {
              predicate: PropertyAccess {
               expression: Variable {
                identifier: "cfg",
                position: (28, 20),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "abrmd",
                  position: (28, 24),
                 },
                 Raw {
                  content: "enable",
                  position: (28, 30),
                 },
                ],
               },
               default: None,
              },
              then: String {
               parts: [
                Raw {
                 content: "tss",
                 position: (28, 43),
                },
               ],
              },
              else_: String {
               parts: [
                Raw {
                 content: "root",
                 position: (28, 54),
                },
               ],
              },
              position: (28, 17),
             },
            ),
            KeyValue(
             AttributePath {
              attributes: [
               Raw {
                content: "defaultText",
                position: (29, 7),
               },
              ],
             },
             FunctionApplication {
              function: PropertyAccess {
               expression: Variable {
                identifier: "lib",
                position: (29, 21),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "literalExpression",
                  position: (29, 25),
                 },
                ],
               },
               default: None,
              },
              arguments: [
               String {
                parts: [
                 Raw {
                  content: "if config.security.tpm2.abrmd.enable then \"tss\" else \"root\"",
                  position: (29, 45),
                 },
                ],
               },
              ],
             },
            ),
           ],
           recursive: false,
           position: (22, 28),
          },
         ],
        },
       ),
       KeyValue(
        AttributePath {
         attributes: [
          Raw {
           content: "tssGroup",
           position: (32, 5),
          },
         ],
        },
        FunctionApplication {
         function: PropertyAccess {
          expression: Variable {
           identifier: "lib",
           position: (32, 16),
          },
          attribute_path: AttributePath {
           attributes: [
            Raw {
             content: "mkOption",
             position: (32, 20),
            },
           ],
          },
          default: None,
         },
         arguments: [
          Map {
           bindings: [
            KeyValue(
             AttributePath {
              attributes: [
               Raw {
                content: "description",
                position: (33, 7),
               },
              ],
             },
             String {
              parts: [
               Raw {
                content: "Group of the tpm kernel resource manager (tpmrm) device-group, set if\napplyUdevRules is set.\n",
                position: (34, 1),
               },
              ],
             },
            ),
            KeyValue(
             AttributePath {
              attributes: [
               Raw {
                content: "type",
                position: (37, 7),
               },
              ],
             },
             FunctionApplication {
              function: PropertyAccess {
               expression: Variable {
                identifier: "lib",
                position: (37, 14),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "types",
                  position: (37, 18),
                 },
                 Raw {
                  content: "nullOr",
                  position: (37, 24),
                 },
                ],
               },
               default: None,
              },
              arguments: [
               PropertyAccess {
                expression: Variable {
                 identifier: "lib",
                 position: (37, 31),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "types",
                   position: (37, 35),
                  },
                  Raw {
                   content: "str",
                   position: (37, 41),
                  },
                 ],
                },
                default: None,
               },
              ],
             },
            ),
            KeyValue(
             AttributePath {
              attributes: [
               Raw {
                content: "default",
                position: (38, 7),
               },
              ],
             },
             String {
              parts: [
               Raw {
                content: "tss",
                position: (38, 18),
               },
              ],
             },
            ),
           ],
           recursive: false,
           position: (32, 29),
          },
         ],
        },
       ),
       KeyValue(
        AttributePath {
         attributes: [
          Raw {
           content: "applyUdevRules",
           position: (41, 5),
          },
         ],
        },
        FunctionApplication {
         function: PropertyAccess {
          expression: Variable {
           identifier: "lib",
           position: (41, 22),
          },
          attribute_path: AttributePath {
           attributes: [
            Raw {
             content: "mkOption",
             position: (41, 26),
            },
           ],
          },
          default: None,
         },
         arguments: [
          Map {
           bindings: [
            KeyValue(
             AttributePath {
              attributes: [
               Raw {
                content: "description",
                position: (42, 7),
               },
              ],
             },
             String {
              parts: [
               Raw {
                content: "Whether to make the /dev/tpm[0-9] devices accessible by the tssUser, or\nthe /dev/tpmrm[0-9] by tssGroup respectively\n",
                position: (43, 1),
               },
              ],
             },
            ),
            KeyValue(
             AttributePath {
              attributes: [
               Raw {
                content: "type",
                position: (46, 7),
               },
              ],
             },
             PropertyAccess {
              expression: Variable {
               identifier: "lib",
               position: (46, 14),
              },
              attribute_path: AttributePath {
               attributes: [
                Raw {
                 content: "types",
                 position: (46, 18),
                },
                Raw {
                 content: "bool",
                 position: (46, 24),
                },
               ],
              },
              default: None,
             },
            ),
            KeyValue(
             AttributePath {
              attributes: [
               Raw {
                content: "default",
                position: (47, 7),
               },
              ],
             },
             Variable {
              identifier: "true",
              position: (47, 17),
             },
            ),
           ],
           recursive: false,
           position: (41, 35),
          },
         ],
        },
       ),
       KeyValue(
        AttributePath {
         attributes: [
          Raw {
           content: "abrmd",
           position: (50, 5),
          },
         ],
        },
        Map {
         bindings: [
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "enable",
              position: (51, 7),
             },
            ],
           },
           FunctionApplication {
            function: PropertyAccess {
             expression: Variable {
              identifier: "lib",
              position: (51, 16),
             },
             attribute_path: AttributePath {
              attributes: [
               Raw {
                content: "mkEnableOption",
                position: (51, 20),
               },
              ],
             },
             default: None,
            },
            arguments: [
             String {
              parts: [
               Raw {
                content: "Trusted Platform 2 userspace resource manager daemon\n",
                position: (52, 1),
               },
              ],
             },
            ],
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "package",
              position: (55, 7),
             },
            ],
           },
           FunctionApplication {
            function: PropertyAccess {
             expression: Variable {
              identifier: "lib",
              position: (55, 17),
             },
             attribute_path: AttributePath {
              attributes: [
               Raw {
                content: "mkOption",
                position: (55, 21),
               },
              ],
             },
             default: None,
            },
            arguments: [
             Map {
              bindings: [
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "description",
                   position: (56, 9),
                  },
                 ],
                },
                String {
                 parts: [
                  Raw {
                   content: "tpm2-abrmd package to use",
                   position: (56, 24),
                  },
                 ],
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "type",
                   position: (57, 9),
                  },
                 ],
                },
                PropertyAccess {
                 expression: Variable {
                  identifier: "lib",
                  position: (57, 16),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "types",
                    position: (57, 20),
                   },
                   Raw {
                    content: "package",
                    position: (57, 26),
                   },
                  ],
                 },
                 default: None,
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "default",
                   position: (58, 9),
                  },
                 ],
                },
                PropertyAccess {
                 expression: Variable {
                  identifier: "pkgs",
                  position: (58, 19),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "tpm2-abrmd",
                    position: (58, 24),
                   },
                  ],
                 },
                 default: None,
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "defaultText",
                   position: (59, 9),
                  },
                 ],
                },
                FunctionApplication {
                 function: PropertyAccess {
                  expression: Variable {
                   identifier: "lib",
                   position: (59, 23),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "literalExpression",
                     position: (59, 27),
                    },
                   ],
                  },
                  default: None,
                 },
                 arguments: [
                  String {
                   parts: [
                    Raw {
                     content: "pkgs.tpm2-abrmd",
                     position: (59, 46),
                    },
                   ],
                  },
                 ],
                },
               ),
              ],
              recursive: false,
              position: (55, 30),
             },
            ],
           },
          ),
         ],
         recursive: false,
         position: (50, 13),
        },
       ),
       KeyValue(
        AttributePath {
         attributes: [
          Raw {
           content: "pkcs11",
           position: (63, 5),
          },
         ],
        },
        Map {
         bindings: [
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "enable",
              position: (64, 7),
             },
            ],
           },
           FunctionApplication {
            function: PropertyAccess {
             expression: Variable {
              identifier: "lib",
              position: (64, 16),
             },
             attribute_path: AttributePath {
              attributes: [
               Raw {
                content: "mkEnableOption",
                position: (64, 20),
               },
              ],
             },
             default: None,
            },
            arguments: [
             String {
              parts: [
               Raw {
                content: "TPM2 PKCS#11 tool and shared library in system path\n(<literal>/run/current-system/sw/lib/libtpm2_pkcs11.so</literal>)\n",
                position: (65, 1),
               },
              ],
             },
            ],
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "package",
              position: (69, 7),
             },
            ],
           },
           FunctionApplication {
            function: PropertyAccess {
             expression: Variable {
              identifier: "lib",
              position: (69, 17),
             },
             attribute_path: AttributePath {
              attributes: [
               Raw {
                content: "mkOption",
                position: (69, 21),
               },
              ],
             },
             default: None,
            },
            arguments: [
             Map {
              bindings: [
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "description",
                   position: (70, 9),
                  },
                 ],
                },
                String {
                 parts: [
                  Raw {
                   content: "tpm2-pkcs11 package to use",
                   position: (70, 24),
                  },
                 ],
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "type",
                   position: (71, 9),
                  },
                 ],
                },
                PropertyAccess {
                 expression: Variable {
                  identifier: "lib",
                  position: (71, 16),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "types",
                    position: (71, 20),
                   },
                   Raw {
                    content: "package",
                    position: (71, 26),
                   },
                  ],
                 },
                 default: None,
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "default",
                   position: (72, 9),
                  },
                 ],
                },
                PropertyAccess {
                 expression: Variable {
                  identifier: "pkgs",
                  position: (72, 19),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "tpm2-pkcs11",
                    position: (72, 24),
                   },
                  ],
                 },
                 default: None,
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "defaultText",
                   position: (73, 9),
                  },
                 ],
                },
                FunctionApplication {
                 function: PropertyAccess {
                  expression: Variable {
                   identifier: "lib",
                   position: (73, 23),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "literalExpression",
                     position: (73, 27),
                    },
                   ],
                  },
                  default: None,
                 },
                 arguments: [
                  String {
                   parts: [
                    Raw {
                     content: "pkgs.tpm2-pkcs11",
                     position: (73, 46),
                    },
                   ],
                  },
                 ],
                },
               ),
              ],
              recursive: false,
              position: (69, 30),
             },
            ],
           },
          ),
         ],
         recursive: false,
         position: (63, 14),
        },
       ),
       KeyValue(
        AttributePath {
         attributes: [
          Raw {
           content: "tctiEnvironment",
           position: (77, 5),
          },
         ],
        },
        Map {
         bindings: [
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "enable",
              position: (78, 7),
             },
            ],
           },
           FunctionApplication {
            function: PropertyAccess {
             expression: Variable {
              identifier: "lib",
              position: (78, 16),
             },
             attribute_path: AttributePath {
              attributes: [
               Raw {
                content: "mkOption",
                position: (78, 20),
               },
              ],
             },
             default: None,
            },
            arguments: [
             Map {
              bindings: [
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "description",
                   position: (79, 9),
                  },
                 ],
                },
                String {
                 parts: [
                  Raw {
                   content: "Set common TCTI environment variables to the specified value.\nThe variables are\n<itemizedlist>\n  <listitem>\n    <para>\n      <literal>TPM2TOOLS_TCTI</literal>\n    </para>\n  </listitem>\n  <listitem>\n    <para>\n      <literal>TPM2_PKCS11_TCTI</literal>\n    </para>\n  </listitem>\n</itemizedlist>\n",
                   position: (80, 1),
                  },
                 ],
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "type",
                   position: (95, 9),
                  },
                 ],
                },
                PropertyAccess {
                 expression: Variable {
                  identifier: "lib",
                  position: (95, 16),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "types",
                    position: (95, 20),
                   },
                   Raw {
                    content: "bool",
                    position: (95, 26),
                   },
                  ],
                 },
                 default: None,
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "default",
                   position: (96, 9),
                  },
                 ],
                },
                Variable {
                 identifier: "false",
                 position: (96, 19),
                },
               ),
              ],
              recursive: false,
              position: (78, 29),
             },
            ],
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "interface",
              position: (99, 7),
             },
            ],
           },
           FunctionApplication {
            function: PropertyAccess {
             expression: Variable {
              identifier: "lib",
              position: (99, 19),
             },
             attribute_path: AttributePath {
              attributes: [
               Raw {
                content: "mkOption",
                position: (99, 23),
               },
              ],
             },
             default: None,
            },
            arguments: [
             Map {
              bindings: [
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "description",
                   position: (100, 9),
                  },
                 ],
                },
                String {
                 parts: [
                  Raw {
                   content: "The name of the TPM command transmission interface (TCTI) library to\nuse.\n",
                   position: (101, 1),
                  },
                 ],
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "type",
                   position: (104, 9),
                  },
                 ],
                },
                FunctionApplication {
                 function: PropertyAccess {
                  expression: Variable {
                   identifier: "lib",
                   position: (104, 16),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "types",
                     position: (104, 20),
                    },
                    Raw {
                     content: "enum",
                     position: (104, 26),
                    },
                   ],
                  },
                  default: None,
                 },
                 arguments: [
                  List {
                   elements: [
                    String {
                     parts: [
                      Raw {
                       content: "tabrmd",
                       position: (104, 34),
                      },
                     ],
                    },
                    String {
                     parts: [
                      Raw {
                       content: "device",
                       position: (104, 43),
                      },
                     ],
                    },
                   ],
                   position: (104, 31),
                  },
                 ],
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "default",
                   position: (105, 9),
                  },
                 ],
                },
                String {
                 parts: [
                  Raw {
                   content: "device",
                   position: (105, 20),
                  },
                 ],
                },
               ),
              ],
              recursive: false,
              position: (99, 32),
             },
            ],
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "deviceConf",
              position: (108, 7),
             },
            ],
           },
           FunctionApplication {
            function: PropertyAccess {
             expression: Variable {
              identifier: "lib",
              position: (108, 20),
             },
             attribute_path: AttributePath {
              attributes: [
               Raw {
                content: "mkOption",
                position: (108, 24),
               },
              ],
             },
             default: None,
            },
            arguments: [
             Map {
              bindings: [
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "description",
                   position: (109, 9),
                  },
                 ],
                },
                String {
                 parts: [
                  Raw {
                   content: "Configuration part of the device TCTI, e.g. the path to the TPM device.\nApplies if interface is set to \"device\".\nThe format is specified in the\n<link xlink:href=\"https://github.com/tpm2-software/tpm2-tools/blob/master/man/common/tcti.md#tcti-options\">\ntpm2-tools repository</link>.\n",
                   position: (110, 1),
                  },
                 ],
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "type",
                   position: (116, 9),
                  },
                 ],
                },
                PropertyAccess {
                 expression: Variable {
                  identifier: "lib",
                  position: (116, 16),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "types",
                    position: (116, 20),
                   },
                   Raw {
                    content: "str",
                    position: (116, 26),
                   },
                  ],
                 },
                 default: None,
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "default",
                   position: (117, 9),
                  },
                 ],
                },
                String {
                 parts: [
                  Raw {
                   content: "/dev/tpmrm0",
                   position: (117, 20),
                  },
                 ],
                },
               ),
              ],
              recursive: false,
              position: (108, 33),
             },
            ],
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "tabrmdConf",
              position: (120, 7),
             },
            ],
           },
           FunctionApplication {
            function: PropertyAccess {
             expression: Variable {
              identifier: "lib",
              position: (120, 20),
             },
             attribute_path: AttributePath {
              attributes: [
               Raw {
                content: "mkOption",
                position: (120, 24),
               },
              ],
             },
             default: None,
            },
            arguments: [
             Map {
              bindings: [
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "description",
                   position: (121, 9),
                  },
                 ],
                },
                String {
                 parts: [
                  Raw {
                   content: "Configuration part of the tabrmd TCTI, like the D-Bus bus name.\nApplies if interface is set to \"tabrmd\".\nThe format is specified in the\n<link xlink:href=\"https://github.com/tpm2-software/tpm2-tools/blob/master/man/common/tcti.md#tcti-options\">\ntpm2-tools repository</link>.\n",
                   position: (122, 1),
                  },
                 ],
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "type",
                   position: (128, 9),
                  },
                 ],
                },
                PropertyAccess {
                 expression: Variable {
                  identifier: "lib",
                  position: (128, 16),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "types",
                    position: (128, 20),
                   },
                   Raw {
                    content: "str",
                    position: (128, 26),
                   },
                  ],
                 },
                 default: None,
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "default",
                   position: (129, 9),
                  },
                 ],
                },
                String {
                 parts: [
                  Raw {
                   content: "bus_name=com.intel.tss2.Tabrmd",
                   position: (129, 20),
                  },
                 ],
                },
               ),
              ],
              recursive: false,
              position: (120, 33),
             },
            ],
           },
          ),
         ],
         recursive: false,
         position: (77, 23),
        },
       ),
      ],
      recursive: false,
      position: (19, 27),
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "config",
        position: (134, 3),
       },
      ],
     },
     FunctionApplication {
      function: PropertyAccess {
       expression: Variable {
        identifier: "lib",
        position: (134, 12),
       },
       attribute_path: AttributePath {
        attributes: [
         Raw {
          content: "mkIf",
          position: (134, 16),
         },
        ],
       },
       default: None,
      },
      arguments: [
       PropertyAccess {
        expression: Variable {
         identifier: "cfg",
         position: (134, 21),
        },
        attribute_path: AttributePath {
         attributes: [
          Raw {
           content: "enable",
           position: (134, 25),
          },
         ],
        },
        default: None,
       },
       FunctionApplication {
        function: PropertyAccess {
         expression: Variable {
          identifier: "lib",
          position: (134, 33),
         },
         attribute_path: AttributePath {
          attributes: [
           Raw {
            content: "mkMerge",
            position: (134, 37),
           },
          ],
         },
         default: None,
        },
        arguments: [
         List {
          elements: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "environment",
                 position: (137, 7),
                },
                Raw {
                 content: "systemPackages",
                 position: (137, 19),
                },
               ],
              },
              FunctionApplication {
               function: PropertyAccess {
                expression: Variable {
                 identifier: "lib",
                 position: (137, 36),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "mkIf",
                   position: (137, 40),
                  },
                 ],
                },
                default: None,
               },
               arguments: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "cfg",
                  position: (137, 45),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "pkcs11",
                    position: (137, 49),
                   },
                   Raw {
                    content: "enable",
                    position: (137, 56),
                   },
                  ],
                 },
                 default: None,
                },
                List {
                 elements: [
                  FunctionApplication {
                   function: PropertyAccess {
                    expression: Variable {
                     identifier: "lib",
                     position: (138, 10),
                    },
                    attribute_path: AttributePath {
                     attributes: [
                      Raw {
                       content: "getBin",
                       position: (138, 14),
                      },
                     ],
                    },
                    default: None,
                   },
                   arguments: [
                    PropertyAccess {
                     expression: Variable {
                      identifier: "cfg",
                      position: (138, 21),
                     },
                     attribute_path: AttributePath {
                      attributes: [
                       Raw {
                        content: "pkcs11",
                        position: (138, 25),
                       },
                       Raw {
                        content: "package",
                        position: (138, 32),
                       },
                      ],
                     },
                     default: None,
                    },
                   ],
                  },
                  FunctionApplication {
                   function: PropertyAccess {
                    expression: Variable {
                     identifier: "lib",
                     position: (139, 10),
                    },
                    attribute_path: AttributePath {
                     attributes: [
                      Raw {
                       content: "getLib",
                       position: (139, 14),
                      },
                     ],
                    },
                    default: None,
                   },
                   arguments: [
                    PropertyAccess {
                     expression: Variable {
                      identifier: "cfg",
                      position: (139, 21),
                     },
                     attribute_path: AttributePath {
                      attributes: [
                       Raw {
                        content: "pkcs11",
                        position: (139, 25),
                       },
                       Raw {
                        content: "package",
                        position: (139, 32),
                       },
                      ],
                     },
                     default: None,
                    },
                   ],
                  },
                 ],
                 position: (137, 63),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "services",
                 position: (142, 7),
                },
                Raw {
                 content: "udev",
                 position: (142, 16),
                },
                Raw {
                 content: "extraRules",
                 position: (142, 21),
                },
               ],
              },
              FunctionApplication {
               function: PropertyAccess {
                expression: Variable {
                 identifier: "lib",
                 position: (142, 34),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "mkIf",
                   position: (142, 38),
                  },
                 ],
                },
                default: None,
               },
               arguments: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "cfg",
                  position: (142, 43),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "applyUdevRules",
                    position: (142, 47),
                   },
                  ],
                 },
                 default: None,
                },
                FunctionApplication {
                 function: Variable {
                  identifier: "udevRules",
                  position: (143, 10),
                 },
                 arguments: [
                  PropertyAccess {
                   expression: Variable {
                    identifier: "cfg",
                    position: (143, 20),
                   },
                   attribute_path: AttributePath {
                    attributes: [
                     Raw {
                      content: "tssUser",
                      position: (143, 24),
                     },
                    ],
                   },
                   default: None,
                  },
                  PropertyAccess {
                   expression: Variable {
                    identifier: "cfg",
                    position: (143, 32),
                   },
                   attribute_path: AttributePath {
                    attributes: [
                     Raw {
                      content: "tssGroup",
                      position: (143, 36),
                     },
                    ],
                   },
                   default: None,
                  },
                 ],
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "users",
                 position: (146, 7),
                },
                Raw {
                 content: "users",
                 position: (146, 13),
                },
                Expression {
                 expression: PropertyAccess {
                  expression: Variable {
                   identifier: "cfg",
                   position: (146, 21),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "tssUser",
                     position: (146, 25),
                    },
                   ],
                  },
                  default: None,
                 },
                },
               ],
              },
              FunctionApplication {
               function: PropertyAccess {
                expression: Variable {
                 identifier: "lib",
                 position: (146, 36),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "mkIf",
                   position: (146, 40),
                  },
                 ],
                },
                default: None,
               },
               arguments: [
                BinaryOperation {
                 operator: EqualTo,
                 operands: [
                  PropertyAccess {
                   expression: Variable {
                    identifier: "cfg",
                    position: (146, 46),
                   },
                   attribute_path: AttributePath {
                    attributes: [
                     Raw {
                      content: "tssUser",
                      position: (146, 50),
                     },
                    ],
                   },
                   default: None,
                  },
                  String {
                   parts: [
                    Raw {
                     content: "tss",
                     position: (146, 62),
                    },
                   ],
                  },
                 ],
                 position: (146, 58),
                },
                Map {
                 bindings: [
                  KeyValue(
                   AttributePath {
                    attributes: [
                     Raw {
                      content: "isSystemUser",
                      position: (147, 9),
                     },
                    ],
                   },
                   Variable {
                    identifier: "true",
                    position: (147, 24),
                   },
                  ),
                  KeyValue(
                   AttributePath {
                    attributes: [
                     Raw {
                      content: "group",
                      position: (148, 9),
                     },
                    ],
                   },
                   String {
                    parts: [
                     Raw {
                      content: "tss",
                      position: (148, 18),
                     },
                    ],
                   },
                  ),
                 ],
                 recursive: false,
                 position: (146, 68),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "users",
                 position: (150, 7),
                },
                Raw {
                 content: "groups",
                 position: (150, 13),
                },
                Expression {
                 expression: PropertyAccess {
                  expression: Variable {
                   identifier: "cfg",
                   position: (150, 22),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "tssGroup",
                     position: (150, 26),
                    },
                   ],
                  },
                  default: None,
                 },
                },
               ],
              },
              FunctionApplication {
               function: PropertyAccess {
                expression: Variable {
                 identifier: "lib",
                 position: (150, 38),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "mkIf",
                   position: (150, 42),
                  },
                 ],
                },
                default: None,
               },
               arguments: [
                BinaryOperation {
                 operator: EqualTo,
                 operands: [
                  PropertyAccess {
                   expression: Variable {
                    identifier: "cfg",
                    position: (150, 48),
                   },
                   attribute_path: AttributePath {
                    attributes: [
                     Raw {
                      content: "tssGroup",
                      position: (150, 52),
                     },
                    ],
                   },
                   default: None,
                  },
                  String {
                   parts: [
                    Raw {
                     content: "tss",
                     position: (150, 65),
                    },
                   ],
                  },
                 ],
                 position: (150, 61),
                },
                Map {
                 bindings: [],
                 recursive: false,
                 position: (150, 71),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "environment",
                 position: (152, 7),
                },
                Raw {
                 content: "variables",
                 position: (152, 19),
                },
               ],
              },
              FunctionApplication {
               function: PropertyAccess {
                expression: Variable {
                 identifier: "lib",
                 position: (152, 31),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "mkIf",
                   position: (152, 35),
                  },
                 ],
                },
                default: None,
               },
               arguments: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "cfg",
                  position: (152, 40),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "tctiEnvironment",
                    position: (152, 44),
                   },
                   Raw {
                    content: "enable",
                    position: (152, 60),
                   },
                  ],
                 },
                 default: None,
                },
                FunctionApplication {
                 function: PropertyAccess {
                  expression: Variable {
                   identifier: "lib",
                   position: (153, 9),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "attrsets",
                     position: (153, 13),
                    },
                    Raw {
                     content: "genAttrs",
                     position: (153, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                 arguments: [
                  List {
                   elements: [
                    String {
                     parts: [
                      Raw {
                       content: "TPM2TOOLS_TCTI",
                       position: (154, 12),
                      },
                     ],
                    },
                    String {
                     parts: [
                      Raw {
                       content: "TPM2_PKCS11_TCTI",
                       position: (155, 12),
                      },
                     ],
                    },
                   ],
                   position: (153, 31),
                  },
                  Function {
                   argument: Some(
                    "_",
                   ),
                   arguments: FunctionArguments {
                    arguments: [],
                    ellipsis: false,
                   },
                   definition: String {
                    parts: [
                     Expression {
                      expression: PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (156, 19),
                       },
                       attribute_path: AttributePath {
                        attributes: [
                         Raw {
                          content: "tctiEnvironment",
                          position: (156, 23),
                         },
                         Raw {
                          content: "interface",
                          position: (156, 39),
                         },
                        ],
                       },
                       default: None,
                      },
                     },
                     Raw {
                      content: ":",
                      position: (156, 49),
                     },
                     Expression {
                      expression: IfThenElse {
                       predicate: BinaryOperation {
                        operator: EqualTo,
                        operands: [
                         PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (157, 14),
                          },
                          attribute_path: AttributePath {
                           attributes: [
                            Raw {
                             content: "tctiEnvironment",
                             position: (157, 18),
                            },
                            Raw {
                             content: "interface",
                             position: (157, 34),
                            },
                           ],
                          },
                          default: None,
                         },
                         String {
                          parts: [
                           Raw {
                            content: "tabrmd",
                            position: (157, 48),
                           },
                          ],
                         },
                        ],
                        position: (157, 44),
                       },
                       then: PropertyAccess {
                        expression: Variable {
                         identifier: "cfg",
                         position: (158, 13),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "tctiEnvironment",
                           position: (158, 17),
                          },
                          Raw {
                           content: "tabrmdConf",
                           position: (158, 33),
                          },
                         ],
                        },
                        default: None,
                       },
                       else_: PropertyAccess {
                        expression: Variable {
                         identifier: "cfg",
                         position: (160, 13),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "tctiEnvironment",
                           position: (160, 17),
                          },
                          Raw {
                           content: "deviceConf",
                           position: (160, 33),
                          },
                         ],
                        },
                        default: None,
                       },
                       position: (157, 11),
                      },
                     },
                    ],
                   },
                   position: (156, 12),
                  },
                 ],
                },
               ],
              },
             ),
            ],
            recursive: false,
            position: (135, 5),
           },
           FunctionApplication {
            function: PropertyAccess {
             expression: Variable {
              identifier: "lib",
              position: (165, 6),
             },
             attribute_path: AttributePath {
              attributes: [
               Raw {
                content: "mkIf",
                position: (165, 10),
               },
              ],
             },
             default: None,
            },
            arguments: [
             PropertyAccess {
              expression: Variable {
               identifier: "cfg",
               position: (165, 15),
              },
              attribute_path: AttributePath {
               attributes: [
                Raw {
                 content: "abrmd",
                 position: (165, 19),
                },
                Raw {
                 content: "enable",
                 position: (165, 25),
                },
               ],
              },
              default: None,
             },
             Map {
              bindings: [
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "systemd",
                   position: (166, 7),
                  },
                  Raw {
                   content: "services",
                   position: (166, 15),
                  },
                  Expression {
                   expression: String {
                    parts: [
                     Raw {
                      content: "tpm2-abrmd",
                      position: (166, 25),
                     },
                    ],
                   },
                  },
                 ],
                },
                Map {
                 bindings: [
                  KeyValue(
                   AttributePath {
                    attributes: [
                     Raw {
                      content: "wantedBy",
                      position: (167, 9),
                     },
                    ],
                   },
                   List {
                    elements: [
                     String {
                      parts: [
                       Raw {
                        content: "multi-user.target",
                        position: (167, 23),
                       },
                      ],
                     },
                    ],
                    position: (167, 20),
                   },
                  ),
                  KeyValue(
                   AttributePath {
                    attributes: [
                     Raw {
                      content: "serviceConfig",
                      position: (168, 9),
                     },
                    ],
                   },
                   Map {
                    bindings: [
                     KeyValue(
                      AttributePath {
                       attributes: [
                        Raw {
                         content: "Type",
                         position: (169, 11),
                        },
                       ],
                      },
                      String {
                       parts: [
                        Raw {
                         content: "dbus",
                         position: (169, 19),
                        },
                       ],
                      },
                     ),
                     KeyValue(
                      AttributePath {
                       attributes: [
                        Raw {
                         content: "Restart",
                         position: (170, 11),
                        },
                       ],
                      },
                      String {
                       parts: [
                        Raw {
                         content: "always",
                         position: (170, 22),
                        },
                       ],
                      },
                     ),
                     KeyValue(
                      AttributePath {
                       attributes: [
                        Raw {
                         content: "RestartSec",
                         position: (171, 11),
                        },
                       ],
                      },
                      Int {
                       value: 30,
                       position: (171, 24),
                      },
                     ),
                     KeyValue(
                      AttributePath {
                       attributes: [
                        Raw {
                         content: "BusName",
                         position: (172, 11),
                        },
                       ],
                      },
                      String {
                       parts: [
                        Raw {
                         content: "com.intel.tss2.Tabrmd",
                         position: (172, 22),
                        },
                       ],
                      },
                     ),
                     KeyValue(
                      AttributePath {
                       attributes: [
                        Raw {
                         content: "ExecStart",
                         position: (173, 11),
                        },
                       ],
                      },
                      String {
                       parts: [
                        Expression {
                         expression: PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (173, 26),
                          },
                          attribute_path: AttributePath {
                           attributes: [
                            Raw {
                             content: "abrmd",
                             position: (173, 30),
                            },
                            Raw {
                             content: "package",
                             position: (173, 36),
                            },
                           ],
                          },
                          default: None,
                         },
                        },
                        Raw {
                         content: "/bin/tpm2-abrmd",
                         position: (173, 44),
                        },
                       ],
                      },
                     ),
                     KeyValue(
                      AttributePath {
                       attributes: [
                        Raw {
                         content: "User",
                         position: (174, 11),
                        },
                       ],
                      },
                      String {
                       parts: [
                        Raw {
                         content: "tss",
                         position: (174, 19),
                        },
                       ],
                      },
                     ),
                     KeyValue(
                      AttributePath {
                       attributes: [
                        Raw {
                         content: "Group",
                         position: (175, 11),
                        },
                       ],
                      },
                      String {
                       parts: [
                        Raw {
                         content: "tss",
                         position: (175, 20),
                        },
                       ],
                      },
                     ),
                    ],
                    recursive: false,
                    position: (168, 25),
                   },
                  ),
                 ],
                 recursive: false,
                 position: (166, 39),
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "services",
                   position: (179, 7),
                  },
                  Raw {
                   content: "dbus",
                   position: (179, 16),
                  },
                  Raw {
                   content: "packages",
                   position: (179, 21),
                  },
                 ],
                },
                FunctionApplication {
                 function: PropertyAccess {
                  expression: Variable {
                   identifier: "lib",
                   position: (179, 32),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "singleton",
                     position: (179, 36),
                    },
                   ],
                  },
                  default: None,
                 },
                 arguments: [
                  PropertyAccess {
                   expression: Variable {
                    identifier: "cfg",
                    position: (179, 46),
                   },
                   attribute_path: AttributePath {
                    attributes: [
                     Raw {
                      content: "abrmd",
                      position: (179, 50),
                     },
                     Raw {
                      content: "package",
                      position: (179, 56),
                     },
                    ],
                   },
                   default: None,
                  },
                 ],
                },
               ),
              ],
              recursive: false,
              position: (165, 32),
             },
            ],
           },
          ],
          position: (134, 45),
         },
        ],
       },
      ],
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "meta",
        position: (183, 3),
       },
       Raw {
        content: "maintainers",
        position: (183, 8),
       },
      ],
     },
     With {
      expression: PropertyAccess {
       expression: Variable {
        identifier: "lib",
        position: (183, 27),
       },
       attribute_path: AttributePath {
        attributes: [
         Raw {
          content: "maintainers",
          position: (183, 31),
         },
        ],
       },
       default: None,
      },
      target: List {
       elements: [
        Variable {
         identifier: "lschuermann",
         position: (183, 46),
        },
       ],
       position: (183, 44),
      },
      position: (183, 22),
     },
    ),
   ],
   recursive: false,
   position: (18, 4),
  },
  position: (2, 1),
 },
 position: (1, 1),
}