anchor.diff:  
   # Shibboleth IdP
   ENV SHIBBOLETH_VERSION="3.3.1" \
  +    SHIBBOLETH_KEY="07CEEB8B" \
       SHIBBOLETH_SCOPE="devnull.cesnet.cz" \
       SHIBBOLETH_ENTITYID="https://devnull.cesnet.cz/idp/shibboleth" \
       SHIBBOLETH_HOSTNAME="devnull.cesnet.cz" \
  
positive.code:                         http://central.maven.org/maven2/org/eclipse/jetty/jetty-distribution/$JETTY_VERSION/jetty-distribution-$JETTY_VERSION.tar.gz.asc \
                          http://central.maven.org/maven2/org/eclipse/jetty/jetty-distribution/$JETTY_VERSION/jetty-distribution-$JETTY_VERSION.tar.gz.asc.sha1 && \
      echo `cat /opt/src/jetty-distribution-$JETTY_VERSION.tar.gz.sha1` /opt/src/jetty-distribution-$JETTY_VERSION.tar.gz | sha1sum -c && \
      # FIXME check GPG
      tar -xzf /opt/src/jetty-distribution-$JETTY_VERSION.tar.gz -C /opt && \
      chown -R idp:idp /opt/jetty-distribution-$JETTY_VERSION && \
      ln -snf /opt/jetty-distribution-$JETTY_VERSION/bin/jetty.sh /etc/init.d/jetty && \
  
negative.code:     wget \
      openjdk-8-jre \
      vim \
      less \
      gnupg2 \
      dirmngr
  
  # Jetty
  ENV JETTY_VERSION="9.3.20.v20170531" \
      JETTY_KEY="2D0E1FB8FE4B68B4" \
      PASSWORD_CERT_KEY="jo7ahrie6aecoog2Eeng" \
      PASSWORD_PKCS12="aiveibooch1Ohk9ahxi3" \
      PASSWORD_KEYSTORE="oe7taiXiopiex2jusei8"
  