anchor.diff:  FROM bitnami/minideb:latest
   
   LABEL description="A small, elegant foundation image for Shibboleth IdP containers" \
  -      version="1.1.0" \
  +      version="1.2.0" \
         maintainer="pete@digitalidentitylabs.com"
   
   ARG SRC_DIR=/usr/local/src
   ARG APT_KEY_DONT_WARN_ON_DANGEROUS_USAGE=DontWarn
  -ARG JETTY_URL=https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-distribution/9.4.32.v20200930/jetty-distribution-9.4.32.v20200930.tar.gz
  -ARG JETTY_CHECKSUM=b7925b37e0ab6264bfbdf51a2b9167cb957c46f4
  -ARG IDP_URL=https://shibboleth.net/downloads/identity-provider/latest4/shibboleth-identity-provider-4.0.1.tar.gz
  -ARG IDP_CHECKSUM=832f73568c5b74a616332258fd9dc555bb20d7dd9056c18dc0ccf52e9292102a
  +ARG JETTY_URL=https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-distribution/9.4.40.v20210413/jetty-distribution-9.4.40.v20210413.tar.gz
  +ARG JETTY_CHECKSUM=fec94b66d7ec5b132d939f20186eae01db522ff3
  +ARG IDP_URL=https://shibboleth.net/downloads/identity-provider/latest4/shibboleth-identity-provider-4.1.0.tar.gz
  +ARG IDP_CHECKSUM=46fe154859f9f1557acd1ae26ee9ac82ded938af52a7dec0b18adbf5bb4510e9
  +ARG EDWIN_STARR=0
  +
  +ARG IDP_HOSTNAME=idp.example.com
  +ARG IDP_ID=https://idp.example.com/idp/shibboleth
  +ARG IDP_SCOPE=example.com
  +ARG IDP_KEYSIZE=3072
   ARG SPASS=password
   ARG KPASS=password
  -ARG EDWIN_STARR=0
  +ARG CREDS_MODE=660
  +ARG CREDS_GROUP=jetty
  +ARG IDP_PROPERTIES=""
  +ARG IDP_PROPERTIES_FILE="$SRC_DIR/idp.properties"
  +ARG LDAP_PROPERTIES=""
  +ARG LDAP_PROPERTIES_FILE="$SRC_DIR/ldap.properties"
  +ARG MODULES="idp.authn.Password,idp.admin.Hello"
   
   ENV JAVA_HOME=/usr/lib/jvm/java-11-amazon-corretto \
  -    JETTY_HOME=/opt/jetty JETTY_BASE=/opt/jetty-shib \
  +    JETTY_HOME=/opt/jetty \
  +    JETTY_BASE=/opt/jetty-shib \
       ADMIN_HOME=/opt/admin \
  -    IDP_HOME=/opt/shibboleth-idp \
  -    IDP_HOSTNAME=idp.example.com IDP_SCOPE=example.com IDP_ID=https://idp.example.com/idp/shibboleth
  +    IDP_HOME=/opt/shibboleth-idp
   
   WORKDIR $SRC_DIR
   
  
positive.code:     echo "${IDP_CHECKSUM} idp.tgz" > idp.tgz.sha256 && sha256sum -c idp.tgz.sha256 && \
      mkdir -p idp_src && tar -zxf idp.tgz -C idp_src --strip-components 1 && \
      rm -rf idp_src/bin/*.bat && \
      echo "idp.entityID=$IDP_ID" > $SRC_DIR/temp.properties && \
      idp_src/bin/install.sh -Didp.src.dir=/usr/local/src/idp_src -Didp.target.dir=/opt/shibboleth-idp \
        -Didp.host.name=$IDP_HOSTNAME -Didp.scope=$IDP_SCOPE \
        -Didp.sealer.password=$SPASS -Didp.keystore.password=$KPASS \
        -Didp.noprompt=true -Didp.merge.properties=$SRC_DIR/temp.properties  && \
      mkdir -p /var/opt/shibboleth-idp/tmp && chown -R jetty /var/opt/shibboleth-idp/tmp && \
      mkdir -p /var/cache/shibboleth-idp   && chown -R jetty /var/cache/shibboleth-idp   && \
      rm -rf /usr/local/src/* && \
      if [ "${EDWIN_STARR}" -gt "0" ] ; then rm -fv $IDP_HOME/war/* ; fi
  
  
negative.code:     rm -rf $JETTY_HOME/demo-base && \
      chown -R root $JETTY_HOME && \
      mkdir -p /var/opt/jetty/tmp && chown -R jetty /var/opt/jetty/tmp && \
      mkdir -p $JETTY_BASE/logs && chown -R jetty $JETTY_BASE/logs && chmod 0770 $JETTY_BASE/logs && \
      rm -rf /usr/local/src/*
  
  RUN echo "\n## Installing Shibboleth IdP..." > /dev/stdout && \
  