anchor.diff:      uwsgi-src               \
       xfonts-75dpi            \
       xfonts-base             \
  -    fonts-liberation        \
  -    build-essential         \
  -    chrpath                 \
  -    debhelper               \
  -    help2man                \
  -    libgcrypt20-dev         \
  -    libnss3-dev             \
  -    gtk-doc-tools           \
  -    man2html-base           \
  -    xsltproc               && \
  -    mkdir xmlsec1               && \
  -    cd xmlsec1                  && \
  -    apt-get source xmlsec1      && \
  -    cd xmlsec1-1*               && \
  -    sed "s/--disable-crypto-dl/--disable-crypto-dl --enable-md5=no --enable-ripemd160=no/g" debian/rules >> debian/rules && \
  -    dpkg-buildpackage -us -uc   && \
  -    cd ..                       && \
  -    dpkg -i ./*.deb             && \
  -    apt-mark hold '*xmlsec1*'   && \
  -    rm -rf /xmlsec1/            && \
  -    apt-get remove -y              \
  -    build-essential                \
  -    chrpath                        \
  -    debhelper                      \
  -    help2man                       \
  -    gtk-doc-tools                  \
  -    man2html-base                  \
  -    xsltproc                    && \
  +    fonts-liberation     && \
       rm -rf /var/lib/apt/lists
  +
  +# Install xmlsec1
  +WORKDIR /tmp/xmlsec1
  +COPY --from=xmlsec1 /xmlsec1/*.deb ./
  +RUN dpkg -i ./*.deb && rm ./*.deb
   
   RUN curl -LO https://github.com/wkhtmltopdf/packaging/releases/download/0.12.6-1/wkhtmltox_0.12.6-1.buster_amd64.deb && \
       dpkg -i wkhtmltox_0.12.6-1.buster_amd64.deb                                                                      && \
  
positive.code: RUN rm -rf /usr/local/src/ansible-waldur-module/.git \
             /usr/local/src/django-dbtemplates/.git
  
  ENTRYPOINT ["/app-entrypoint.sh"]
  CMD ["/bin/bash"]
  
negative.code: # Disable weak crypto algorithms in xmldsig used by PySAML2
  # See also: https://github.com/IdentityPython/pysaml2/issues/421#issuecomment-306133822
  FROM buildpack-deps:buster as xmlsec1
  WORKDIR /xmlsec1
  RUN echo "deb-src http://deb.debian.org/debian buster main" >> /etc/apt/sources.list && \
      apt-get update              && \
      apt-get install -y --no-install-recommends build-essential && \
      apt-get build-dep -y xmlsec1 && \
      apt-get source xmlsec1      && \
      cd xmlsec1-1*               && \
      sed "s/--disable-crypto-dl/--disable-crypto-dl --enable-md5=no --enable-ripemd160=no/g" debian/rules >> debian/rules && \
      dpkg-buildpackage -us -uc && \
      cd .. && rm ./*-dbgsym*.deb ./*-dev*.deb ./*-doc*.deb
  
  FROM python:3.8
  
  # Add tini
  