anchor.diff:  PIDFILE=$RUN_DIR/garden.pid
   DATA_DIR=/var/vcap/data
   GARDEN_DIR=/var/vcap/data/garden
  +GARDEN_CONFIG_DIR=/var/vcap/jobs/garden/config
   
   mkdir -p /var/vcap/sys/log/monit
   exec 1>> /var/vcap/sys/log/monit/garden.out.log
  
positive.code:     <% p("garden.additional_dns_servers").each do |server| %> \
        --additional-dns-server=<%= server %> \
      <% end %> \
      <% if !p("garden.apparmor_profile").empty?  %> \
        --apparmor=<%= p("garden.apparmor_profile") %> \
      <% end %> \
      <% if p("garden.cleanup_process_dirs_on_wait") %> \
  
negative.code: 
      permit_device_control
      create_loop_devices 256
  
      <% if p("garden.apparmor_profile") == "garden-default" %>
        load_apparmor_profile "$GARDEN_CONFIG_DIR"/garden-default
      <% end %>
  
      set_graph_permissions "$graph_path"
  
      echo 1 > /proc/sys/kernel/dmesg_restrict
  