anchor.diff:  
   COPY optfs /opt
   
  -#RUN echo "\n## Setting permissions..." > /dev/stdout && \
  -#    chmod a+x $ADMIN_HOME/*.sh && sync && $ADMIN_HOME/prepare_apps.sh
  -
   EXPOSE     8080
   WORKDIR    $JETTY_BASE
   
  -ENTRYPOINT exec gosu jetty:jetty /usr/bin/java -jar ${JETTY_HOME}/start.jar
  +ENTRYPOINT exec gosu jetty:$CREDS_MODE /usr/bin/java -jar ${JETTY_HOME}/start.jar
   
   HEALTHCHECK --interval=30s --timeout=3s CMD curl -f http://127.0.0.1:8080/idp/status || exit 1
positive.code:     JETTY_HOME=/opt/jetty \
      JETTY_BASE=/opt/jetty-shib \
      ADMIN_HOME=/opt/admin \
      IDP_HOME=/opt/shibboleth-idp
  
  WORKDIR $SRC_DIR
  
  
negative.code: ARG IDP_URL=https://shibboleth.net/downloads/identity-provider/latest4/shibboleth-identity-provider-4.1.0.tar.gz
  ARG IDP_CHECKSUM=46fe154859f9f1557acd1ae26ee9ac82ded938af52a7dec0b18adbf5bb4510e9
  ARG EDWIN_STARR=0
  
  ARG IDP_HOSTNAME=idp.example.com
  ARG IDP_ID=https://idp.example.com/idp/shibboleth
  