anchor.diff:      env CFLAGS=-Ofast ./configure --disable-dependency-tracking && \
       make -j$(getconf _NPROCESSORS_ONLN) check && make -j$(getconf _NPROCESSORS_ONLN) install && \
       ldconfig /usr/local/lib && \
  +    apk del --purge $BUILD_DEPS && \
       rm -fr /tmp/* /var/tmp/*
   
   ENV DNSCRYPT_WRAPPER_GIT_URL https://github.com/jedisct1/dnscrypt-wrapper.git
  
positive.code: ENV RUNTIME_DEPS bash util-linux coreutils findutils grep openssl ldns ldns-tools libevent expat libexecinfo coreutils drill ca-certificates
  
  RUN set -x && \
      apk --no-cache upgrade && apk add --no-cache $RUNTIME_DEPS $BUILD_DEPS && \
      update-ca-certificates 2> /dev/null || true
  
  ENV UNBOUND_GIT_URL https://github.com/jedisct1/unbound.git
  ENV UNBOUND_GIT_REVISION 7bd08b7a9987a0780892131f8590b6e384194bbc
  
  RUN set -x && \
      mkdir -p /tmp/src && \
      cd /tmp/src && \
      git clone --depth=1000 "$UNBOUND_GIT_URL" && \
  
negative.code:     --with-username=_unbound --with-libevent --enable-event-api && \
      make -j$(getconf _NPROCESSORS_ONLN) install && \
      mv /opt/unbound/etc/unbound/unbound.conf /opt/unbound/etc/unbound/unbound.conf.example && \
      apk del --purge $BUILD_DEPS && \
      rm -fr /opt/unbound/share/man && \
      rm -fr /tmp/* /var/tmp/*
  
  ENV LIBSODIUM_GIT_URL https://github.com/jedisct1/libsodium.git
  
  RUN set -x && \
      apk add --no-cache $BUILD_DEPS && \
      mkdir -p /tmp/src && \
      cd /tmp/src && \
      git clone --depth=1 --branch stable "$LIBSODIUM_GIT_URL" && \
  