anchor.diff:  
   MAINTAINER Jan Oppolzer <jan.oppolzer@cesnet.cz>
   
  +# variables
  +## Java
   ARG JAVA_HOME
   ENV JAVA_HOME=$JAVA_HOME
  +
  +## Jetty
  +ARG JETTY_VERSION
  +ARG JETTY_KEY
  +ARG PASSWORD_CERT_KEY
  +ARG PASSWORD_PKCS12
  +ARG PASSWORD_KEYSTORE
  +ENV JETTY_VERSION=$JETTY_VERSION \
  +    JETTY_KEY=$JETTY_KEY \
  +    PASSWORD_CERT_KEY=$PASSWORD_CERT_KEY \
  +    PASSWORD_PKCS12=$PASSWORD_PKCS12 \
  +    PASSWORD_KEYSTORE=$PASSWORD_KEYSTORE
  +
  +## Shibboleth IdP
  +ARG SHIBBOLETH_VERSION
  +ARG SHIBBOLETH_KEY
  +ARG SHIBBOLETH_SCOPE
  +ARG SHIBBOLETH_ENTITYID
  +ARG SHIBBOLETH_HOSTNAME
  +ARG SHIBBOLETH_PASSWORD_SEALER
  +ARG SHIBBOLETH_PASSWORD_KEYSTORE
  +ENV SHIBBOLETH_VERSION=$SHIBBOLETH_VERSION \
  +    SHIBBOLETH_KEY=$SHIBBOLETH_KEY \
  +    SHIBBOLETH_SCOPE=$SHIBBOLETH_SCOPE \
  +    SHIBBOLETH_ENTITYID=$SHIBBOLETH_ENTITYID \
  +    SHIBBOLETH_HOSTNAME=$SHIBBOLETH_HOSTNAME \
  +    SHIBBOLETH_PASSWORD_SEALER=$SHIBBOLETH_PASSWORD_SEALER \
  +    SHIBBOLETH_PASSWORD_KEYSTORE=$SHIBBOLETH_PASSWORD_KEYSTORE
  +
   
   # update APT cache and install required packages
   RUN apt-get update && \
  
positive.code:     /tmp/jetty-keystore.sh $JETTY_VERSION $PASSWORD_CERT_KEY $PASSWORD_PKCS12 $PASSWORD_KEYSTORE
  
  # Shibboleth IdP
  ARG SHIBBOLETH_VERSION
  ARG SHIBBOLETH_KEY
  ARG SHIBBOLETH_SCOPE
  ARG SHIBBOLETH_ENTITYID
  ARG SHIBBOLETH_HOSTNAME
  ARG SHIBBOLETH_PASSWORD_SEALER
  ARG SHIBBOLETH_PASSWORD_KEYSTORE
  
  ENV SHIBBOLETH_VERSION=$SHIBBOLETH_VERSION \
      SHIBBOLETH_KEY=$SHIBBOLETH_KEY \
      SHIBBOLETH_SCOPE=$SHIBBOLETH_SCOPE \
      SHIBBOLETH_ENTITYID=$SHIBBOLETH_ENTITYID \
      SHIBBOLETH_HOSTNAME=$SHIBBOLETH_HOSTNAME \
      SHIBBOLETH_PASSWORD_SEALER=$SHIBBOLETH_PASSWORD_SEALER \
      SHIBBOLETH_PASSWORD_KEYSTORE=$SHIBBOLETH_PASSWORD_KEYSTORE
  
  RUN wget -q -P /opt/src/ https://shibboleth.net/downloads/identity-provider/$SHIBBOLETH_VERSION/shibboleth-identity-provider-$SHIBBOLETH_VERSION.tar.gz \
                           https://shibboleth.net/downloads/identity-provider/$SHIBBOLETH_VERSION/shibboleth-identity-provider-$SHIBBOLETH_VERSION.tar.gz.asc \
                           https://shibboleth.net/downloads/identity-provider/$SHIBBOLETH_VERSION/shibboleth-identity-provider-$SHIBBOLETH_VERSION.tar.gz.sha256 && \
  
negative.code:     rm -rf /var/lib/apt/lists/*
  
  # Jetty
  COPY jetty-keystore.sh key.pem cert.pem /tmp/
  
  RUN groupadd idp && \
  