anchor.diff:  # Runlevel 2
   #----
   
  -#socklog-ucspi-tcp install
  -ADD services/socklog-ucspi-tcp /package/airstack/conf/socklog-ucspi-tcp
  -
   #dropbear install
   ADD services/dropbear /package/airstack/conf/dropbear
  -RUN set -x; eval $PKG_INSTALL dropbear
   EXPOSE 22
   
   #haproxy install
   ADD services/haproxy /package/airstack/conf/haproxy
  -RUN \
  -  set -x; eval $PKG_INSTALL haproxy && \
  -  rm -vf /etc/haproxy/haproxy.cfg && \
  -  rm -vf /etc/rsyslog.d/haproxy.conf;
   EXPOSE 443 80
   
   #serf install
   ADD services/serf /package/airstack/conf/serf
  -RUN \
  -  wget -vO serf.zip https://dl.bintray.com/mitchellh/serf/0.6.3_linux_amd64.zip && \
  -  unzip serf.zip && mv serf /usr/local/bin && rm -vf ./serf.zip
   EXPOSE 7946
   
   ADD core /package/airstack/conf/core
  
positive.code: WORKDIR /root
  
  #----
  # Base Environment
  #----
  
  # install commands
  # TODO: move PKG_INSTALL to core/service-install to get rid of evil eval below
  ENV PKG_INSTALL apt-get update; apt-get install -o Dpkg::Options::=--force-confdef -o Dpkg::Options::=--force-confold --no-install-recommends --no-install-suggests -y
  ENV DEBIAN_FRONTEND noninteractive
  
  # TODO: load all tags from json then remove these ENVs
  ENV AIRSTACK_TAGS_CLUSTERNAME airstack_cluster
  
negative.code: # RUN service-install apt-utils net-tools less curl wget unzip sudo ca-certificates procps jq
  # install development packages if in development environment
  # RUN [ $AIRSTACK_TAGS_ENV = "development" ] && service-install $AIRSTACK_PKGS_DEVELOPMENT
  
  #----
  # Services
  