anchor.diff:  # - packages needed for kubernetes components
   # - packages needed by the container runtime
   # - misc packages kind uses itself
  +# - packages that provide semi-core kubernetes functionality
   # After installing packages we cleanup by:
   # - removing unwanted systemd services
   # - disabling kmsg in journald (these log entries would be confusing)
  
positive.code:     && DEBIAN_FRONTEND=noninteractive clean-install \
        systemd \
        conntrack iptables iproute2 ethtool socat util-linux mount ebtables udev kmod \
        libseccomp2 \
        bash ca-certificates curl rsync \
      && find /lib/systemd/system/sysinit.target.wants/ -name "systemd-tmpfiles-setup.service" -delete \
      && rm -f /lib/systemd/system/multi-user.target.wants/* \
      && rm -f /etc/systemd/system/*.wants/* \
  
negative.code:     && sed -i /etc/nsswitch.conf -re 's#^(hosts:\s*).*#\1dns files#'
  
  # tell systemd that it is in docker (it will check for the container env)
  # https://systemd.io/CONTAINER_INTERFACE/
  ENV container docker
  # systemd exits on SIGRTMIN+3, not SIGTERM (which re-executes it)
  # https://bugzilla.redhat.com/show_bug.cgi?id=1201657
  