anchor.diff:  # and your own certificates matching that domain
   ONBUILD COPY --chown=consul:consul consul.json /etc/consul/consul.json
   # Copy certificates
  -ONBUILD COPY tls/ /etc/
  +ONBUILD COPY tls/* /etc/tls/
   # Add CA to system trusted store
   ONBUILD RUN cat /etc/tls/ca.pem >> /etc/ssl/certs/ca-certificates.crt
   
  
positive.code: # Copy Consul config
  COPY --chown=consul:consul consul.json /etc/consul/
  # Copy certificates
  COPY tls/ /etc/tls
  
  # Add CA to system trusted store
  RUN	cat /etc/tls/ca.pem >> /etc/ssl/certs/ca-certificates.crt
  
negative.code: 	addgroup -S consul &&\
  	adduser -H -h /tmp -D -S -G consul -g 'Consul user' -s /dev/null consul &&\
  	adduser root consul &&\
  # Cleanup
  	apk -q --no-cache del --purge ca-certificates gnupg wget &&\
  	rm -rf consul_${CONSUL_VERSION}_* .ash* /root/.gnupg
  