anchor.diff:    --bind-socket=<%= p("garden.listen_address") %> \
   <% end %> \
     --depot=$DEPOT_PATH \
  +  --graph="$graph" \
     --properties-path=/var/vcap/data/garden/props.json \
     --port-pool-properties-path=/var/vcap/data/garden/port-pool-props.json \
     --iptables-bin=/var/vcap/packages/iptables/sbin/iptables \
  
positive.code:   chmod o+r $groot_config_dir/grootfs_config.yml
  <% end %>
  
  $setup_cmd
  
  echo $$ > $PIDFILE
  
negative.code:   --privileged-image-plugin-extra-arg=<%= arg %> \
    <% end %> \
  <% end %> \
  <% if p("garden.image_plugin", "") == "" && !p("garden.deprecated_use_garden_shed") %> \
    --image-plugin=/var/vcap/packages/grootfs/bin/grootfs \
    --image-plugin-extra-arg="--config" \
    --image-plugin-extra-arg=$groot_config_dir/grootfs_config.yml \
  <% end %> \
  <% if p("garden.privileged_image_plugin", "") == "" %> \
  <% if !p("garden.deprecated_use_garden_shed") && !p("garden.experimental_rootless_mode") %> \
  