anchor.diff:      HELM_VERSION="2.9.0-rc5" \
       MYSQL_SHELL_VERSION="8.0.11-1"
   
  -#--- Install tools packages
  -ARG DEBIAN_FRONTEND=noninteractive
  -ENV INIT_PACKAGES="apt-utils ca-certificates sudo wget curl unzip openssh-server openssl apt-transport-https" \
  -    TOOLS_PACKAGES="supervisor git-core s3cmd bash-completion vim less mlocate nano yarn screen tmux byobu silversearcher-ag colordiff" \
  +ENV CONTAINER_LOGIN="bosh" CONTAINER_PASSWORD="welcome" \
  +    INIT_PACKAGES="apt-utils ca-certificates sudo wget curl unzip openssh-server openssl apt-transport-https" \
  +    TOOLS_PACKAGES="supervisor git-core s3cmd bash-completion vim less mlocate nano screen tmux byobu silversearcher-ag colordiff" \
       NET_PACKAGES="netbase net-tools iproute2 iputils-ping dnsutils ldap-utils netcat tcpdump mtr-tiny" \
       DEV_PACKAGES="nodejs python-pip python-setuptools python-dev build-essential libxml2-dev libxslt1-dev libpq-dev libsqlite3-dev libmysqlclient-dev libssl-dev zlib1g-dev" \
       BDD_PACKAGES="libprotobuf9v5 mongodb-clients" \
       CF_PLUGINS="CLI-Recorder,doctor,manifest-generator,Statistics,Targets,Usage Report"
   
  -RUN apt-get update && apt-get install -y --no-install-recommends ${INIT_PACKAGES} && apt-get upgrade -y && \
  -    apt-get clean && apt-get autoremove -y && apt-get purge && rm -fr /var/lib/apt/lists/* /tmp/* /var/tmp/*
  +ADD scripts/supervisord scripts/check_ssh_security scripts/disable_ssh_password_auth /usr/local/bin/
  +ADD supervisord/sshd.conf /etc/supervisor/conf.d/
  +ADD scripts/homedir.sh /etc/profile.d/
   
  -RUN curl -sL https://deb.nodesource.com/setup_8.x | sudo -E bash - && \
  -    curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | apt-key add - && echo "deb https://dl.yarnpkg.com/debian/ stable main" >> /etc/apt/sources.list.d/yarn.list  && \
  -    apt-get update && apt-get install -y --no-install-recommends ${TOOLS_PACKAGES} ${NET_PACKAGES} ${DEV_PACKAGES} ${BDD_PACKAGES} && apt-get upgrade -y && \
  -    apt-get clean && apt-get autoremove -y && apt-get purge && rm -fr /var/lib/apt/lists/* /tmp/* /var/tmp/*
  -
  -#--- Install Ruby Version Manager and Ruby packages (bundler, bosh-cli, bosh-gen & uaa client)
  -RUN curl -sSL https://rvm.io/mpapis.asc | gpg --import - && \
  +RUN echo "=====================================================" && \
  +    echo "=> Install system tools packages" && \
  +    echo "=====================================================" && \
  +    apt-get update && apt-get install -y --no-install-recommends ${INIT_PACKAGES} ${TOOLS_PACKAGES} ${NET_PACKAGES} ${DEV_PACKAGES} ${BDD_PACKAGES} && apt-get upgrade -y && \
  +    echo "=====================================================" && \
  +    echo "=> Install NodeJS and yarn" && \
  +    echo "=====================================================" && \
  +    curl -sL https://deb.nodesource.com/setup_8.x | sudo -E bash - && \
  +    curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | apt-key add - && echo "deb https://dl.yarnpkg.com/debian/ stable main" >> /etc/apt/sources.list.d/yarn.list && \
  +    apt-get update && apt-get install -y --no-install-recommends yarn && apt-get upgrade -y && \
  +    apt-get autoremove -y && apt-get clean && apt-get purge && rm -fr /var/lib/apt/lists/* && \
  +    echo "=====================================================" && \
  +    echo "=> Install Ruby tools" && \
  +    echo "=====================================================" && \
  +    curl -sSL https://rvm.io/mpapis.asc | gpg --import - && \
       curl -sSL https://get.rvm.io | bash -s stable && \
       /bin/bash -l -c "rvm requirements" && \
       /bin/bash -l -c "rvm install ${RUBY_VERSION}" && \
  
positive.code:     wget "https://dl.minio.io/client/mc/release/linux-amd64/mc" -nv -O /usr/local/bin/mc && \
      wget "https://storage.googleapis.com/kubernetes-release/release/v${KUBECTL_VERSION}/bin/linux/amd64/kubectl" -nv -O /usr/local/bin/kubectl && \
      wget "https://storage.googleapis.com/kubernetes-helm/helm-v${HELM_VERSION}-linux-amd64.tar.gz" -nv -O - | tar -xz -C /tmp linux-amd64/helm && mv /tmp/linux-amd64/helm /usr/local/bin/helm && \
      wget "https://dev.mysql.com/get/Downloads/MySQL-Shell/mysql-shell_${MYSQL_SHELL_VERSION}ubuntu16.04_amd64.deb" -nv -O /tmp/mysql-shell.deb && dpkg -i /tmp/mysql-shell.deb && rm /tmp/mysql-shell.deb && \
      wget "https://raw.githubusercontent.com/rupa/z/master/z.sh" -nv -O /usr/local/bin/z.sh && printf "\n# Maintain a jump-list of in use directories\nif [ -f /usr/local/bin/z.sh ] ; then\n  source /usr/local/bin/z.sh\nfi\n" >> /home/${CONTAINER_LOGIN}/.bashrc && \
      wget "https://releases.hashicorp.com/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_linux_amd64.zip" -nv -O /tmp/terraform.zip && unzip -q /tmp/terraform.zip -d /usr/local/bin && rm /tmp/terraform.zip && \
      export PROVIDER_CLOUDFOUNDRY_VERSION="v${TERRAFORM_PCF_VERSION}" && /bin/bash -c "$(wget https://raw.github.com/orange-cloudfoundry/terraform-provider-cloudfoundry/master/bin/install.sh -O - | sed -e 's/tf_version=.*/tf_version=0\.10/')" && \
      su -l ${CONTAINER_LOGIN} -s /bin/bash -c "export IFS=, ; for plug in \`echo ${CF_PLUGINS}\` ; do cf install-plugin \"\${plug}\" -r CF-Community -f ; done" && \
      export GOPATH=/tmp && export PATH=$PATH:/usr/local/go/bin && \
      go get -v github.com/square/certstrap && mv /tmp/bin/certstrap /usr/local/bin/certstrap && \
      go get -v github.com/rlmcpherson/s3gof3r/gof3r && mv /tmp/bin/gof3r /usr/local/bin/gof3r && \
      pip install --upgrade pip && \
      python -m pip install python-keystoneclient python-novaclient python-swiftclient python-neutronclient python-cinderclient python-glanceclient python-openstackclient && \
      git clone --depth 1 https://github.com/junegunn/fzf.git /home/${CONTAINER_LOGIN}/.fzf && \
      chown -R ${CONTAINER_LOGIN}:users /home/${CONTAINER_LOGIN}/.fzf && su -l ${CONTAINER_LOGIN} -s /bin/bash -c "/home/${CONTAINER_LOGIN}/.fzf/install --all" && \
      sed -i "/source ~\/.fzf.bash/d" /home/${CONTAINER_LOGIN}/.bashrc && \
      printf "# Interactive filter for command-line\nif [ -f /home/${CONTAINER_LOGIN}/.fzf.bash ] ; then\n  source /home/${CONTAINER_LOGIN}/.fzf.bash\nfi\n" >> /home/${CONTAINER_LOGIN}/.bashrc && \
      rm -fr /tmp/* /var/tmp/*
  
  #--- Provide tools information on system banner, setup profile & cleanup
  ADD scripts/profile /home/${CONTAINER_LOGIN}/.profile
  ADD scripts/log-bosh scripts/log-cf scripts/log-credhub scripts/log-fly scripts/log-mc scripts/log-openstack scripts/tools /data/shared/tools/
  ADD scripts/motd /etc/
  
  RUN sed -i "s/<username>/${CONTAINER_LOGIN}/g" /home/${CONTAINER_LOGIN}/.profile && \
      find /home/${CONTAINER_LOGIN} -print0 | xargs -0 chown ${CONTAINER_LOGIN}:users && chmod 644 /home/${CONTAINER_LOGIN}/.profile /etc/motd && \
      find /data -print0 | xargs -0 chown ${CONTAINER_LOGIN}:users && chmod 755 /data/shared/tools/* /usr/local/bin/* /etc/profile.d/* && \
      CERTSTRAP_VERSION=`/usr/local/bin/certstrap -v | awk '{print $3}'` && \
      GIT_VERSION=`git --version | awk '{print $3}'` && \
      GO3FR_VERSION=`gof3r --version 2>&1 | awk '{print $3}'` && \
  
negative.code:     sed -i "s/<username>/${CONTAINER_LOGIN}/g" /usr/local/bin/disable_ssh_password_auth && \
      chown ${CONTAINER_LOGIN}:users /home/${CONTAINER_LOGIN} && chmod 700 /home/${CONTAINER_LOGIN} && \
      ln -s /tmp /home/${CONTAINER_LOGIN}/tmp && chown -R ${CONTAINER_LOGIN}:users /home/${CONTAINER_LOGIN} && mkdir -p /data/shared/tools/certs && \
      echo "=====================================================" && \
      echo "=> Install ops tools" && \
      echo "=====================================================" && \
      wget "https://storage.googleapis.com/golang/go${GOLANG_VERSION}.linux-amd64.tar.gz" -nv -O - | tar -xz -C /usr/local && \
      wget "https://github.com/cloudfoundry-incubator/spiff/releases/download/v${SPIFF_VERSION}/spiff_linux_amd64.zip" -nv -O /tmp/spiff_linux_amd64.zip && unzip -q /tmp/spiff_linux_amd64.zip -d /usr/local/bin && \
      wget "https://github.com/mandelsoft/spiff/releases/download/v${SPIFF_RELOADED_VERSION}/spiff_linux_amd64.zip" -nv -O /tmp/spiff_linux_amd64.zip && unzip -q /tmp/spiff_linux_amd64.zip -d /usr/local/bin && \
      wget "https://github.com/geofffranks/spruce/releases/download/v${SPRUCE_VERSION}/spruce-linux-amd64" -nv -O /usr/local/bin/spruce && \
      wget "https://github.com/stedolan/jq/releases/download/jq-${JQ_VERSION}/jq-linux64" -nv -O /usr/local/bin/jq && \
      wget "https://s3.amazonaws.com/bosh-cli-artifacts/bosh-cli-${BOSH_CLI_V2_VERSION}-linux-amd64" -nv -O /usr/local/bin/bosh && \
      wget "https://cli.run.pivotal.io/stable?release=debian64&version=${CF_CLI_VERSION}&source=github-rel" -nv -O /tmp/cf.deb && dpkg -i /tmp/cf.deb && \
      wget "https://github.com/cloudfoundry-incubator/credhub-cli/releases/download/${CREDHUB_VERSION}/credhub-linux-${CREDHUB_VERSION}.tgz" -nv -O - | tar -xz -C /usr/local/bin && \
      wget "https://github.com/concourse/concourse/releases/download/v${FLY_VERSION}/fly_linux_amd64" -nv -O /usr/local/bin/fly && \
      wget "https://github.com/starkandwayne/shield/releases/download/v${SHIELD_VERSION}/shield-linux-amd64" && mv shield-linux-amd64 /usr/local/bin/shield && \
  