anchor.diff:  ]
   ~~~
   
  -#### grace\_time
  +##### grace\_time #####
   
   If specified, this setting overrides the default time period during which no client references a container before the container is destroyed.
   The value can either be the number of seconds as floating point number or integer, or the `null` value to completely disable the grace time.
   
  -#### disk\_size\_mb
  +##### disk\_size\_mb #####
   
   If specified, this setting overrides the default size of the container scratch filesystem. The value is expected to be an integer number.
   
  -### spawn HANDLE SCRIPT [OPTS]
  +#### spawn HANDLE SCRIPT [OPTS] ####
   
   Run the script `SCRIPT` in the container identified by `HANDLE`.
   
  
positive.code: 
  * The memory limit is specified in number of bytes. It is enforced using the control group associated with the container. When a container exceeds this limit, the kernel kills one or more of its processes. Additionally, the Warden is notified that an OOM happened. The Warden subsequently tears down the container.
  
  ### net HANDLE in
  
  Forward a port on the external interface of the host to the container identified by `HANDLE`.
  
  Returns the port number that is mapped to the container. This port number is the same on the inside of the container.
  
  ### net HANDLE out ADDRESS[/MASK][:PORT]
  
  Allow traffic from the container identified by `HANDLE` to the network address specified by `ADDRESS`.
  Additionally, the address may be masked to allow a network of addresses, and a port to only allow traffic to a specific port.
  
  Returns `ok`.
  
  ### copy HANDLE in SRC\_PATH DST\_PATH
  
  Copy the contents at `SRC_PATH` on the host to `DST_PATH` in the container identified by `HANDLE`.
  
  
negative.code: 
  Run `rake setup` for further Warden bootstrapping.
  
  ## <a id='hacking'></a>Hacking ##
  
  The included tests create and destroy real containers, so they require system prerequisites to be in place.
  They need to be run as root if the backend to be tested requires it.
  
  See `root/<backend>/README.md` for backend-specific information.