anchor.diff:      wget "https://dl.minio.io/client/mc/release/linux-amd64/mc" -nv -O /usr/local/bin/mc && \
       wget "https://storage.googleapis.com/kubernetes-release/release/v${KUBECTL_VERSION}/bin/linux/amd64/kubectl" -nv -O /usr/local/bin/kubectl && \
       wget "https://storage.googleapis.com/kubernetes-helm/helm-v${HELM_VERSION}-linux-amd64.tar.gz" -nv -O - | tar -xz -C /tmp linux-amd64/helm && mv /tmp/linux-amd64/helm /usr/local/bin/helm && \
  -    wget "https://dev.mysql.com/get/Downloads/MySQL-Shell/mysql-shell_${MYSQL_SHELL_VERSION}ubuntu16.04_amd64.deb" -nv -O /tmp/mysql-shell.deb && dpkg -i /tmp/mysql-shell.deb && rm /tmp/mysql-shell.deb && \
  +    wget "https://dev.mysql.com/get/Downloads/MySQL-Shell/mysql-shell_${MYSQL_SHELL_VERSION}ubuntu16.04_amd64.deb" -nv -O /tmp/mysql-shell.deb && dpkg -i /tmp/mysql-shell.deb && \
       wget "https://raw.githubusercontent.com/rupa/z/master/z.sh" -nv -O /usr/local/bin/z.sh && printf "\n# Maintain a jump-list of in use directories\nif [ -f /usr/local/bin/z.sh ] ; then\n  source /usr/local/bin/z.sh\nfi\n" >> /home/${CONTAINER_LOGIN}/.bashrc && \
  -    wget "https://releases.hashicorp.com/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_linux_amd64.zip" -nv -O /tmp/terraform.zip && unzip -q /tmp/terraform.zip -d /usr/local/bin && rm /tmp/terraform.zip && \
  +    wget "https://releases.hashicorp.com/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_linux_amd64.zip" -nv -O /tmp/terraform.zip && unzip -q /tmp/terraform.zip -d /usr/local/bin && \
       export PROVIDER_CLOUDFOUNDRY_VERSION="v${TERRAFORM_PCF_VERSION}" && /bin/bash -c "$(wget https://raw.github.com/orange-cloudfoundry/terraform-provider-cloudfoundry/master/bin/install.sh -O - | sed -e 's/tf_version=.*/tf_version=0\.10/')" && \
  -    su -l ${CONTAINER_LOGIN} -s /bin/bash -c "export IFS=, ; for plug in \`echo ${CF_PLUGINS}\` ; do cf install-plugin \"\${plug}\" -r CF-Community -f ; done" && \
  -    export GOPATH=/tmp && export PATH=$PATH:/usr/local/go/bin && \
  -    go get -v github.com/square/certstrap && mv /tmp/bin/certstrap /usr/local/bin/certstrap && \
  -    go get -v github.com/rlmcpherson/s3gof3r/gof3r && mv /tmp/bin/gof3r /usr/local/bin/gof3r && \
  -    pip install --upgrade pip && \
  -    python -m pip install python-keystoneclient python-novaclient python-swiftclient python-neutronclient python-cinderclient python-glanceclient python-openstackclient && \
       git clone --depth 1 https://github.com/junegunn/fzf.git /home/${CONTAINER_LOGIN}/.fzf && \
       chown -R ${CONTAINER_LOGIN}:users /home/${CONTAINER_LOGIN}/.fzf && su -l ${CONTAINER_LOGIN} -s /bin/bash -c "/home/${CONTAINER_LOGIN}/.fzf/install --all" && \
       sed -i "/source ~\/.fzf.bash/d" /home/${CONTAINER_LOGIN}/.bashrc && \
       printf "# Interactive filter for command-line\nif [ -f /home/${CONTAINER_LOGIN}/.fzf.bash ] ; then\n  source /home/${CONTAINER_LOGIN}/.fzf.bash\nfi\n" >> /home/${CONTAINER_LOGIN}/.bashrc && \
  +    echo "=====================================================" && \
  +    echo "=> Install CF plugins" && \
  +    echo "=====================================================" && \
  +    su -l ${CONTAINER_LOGIN} -s /bin/bash -c "export IFS=, ; for plug in \`echo ${CF_PLUGINS}\` ; do cf install-plugin \"\${plug}\" -r CF-Community -f ; done" && \
  +    echo "=====================================================" && \
  +    echo "=> Install GO tools" && \
  +    echo "=====================================================" && \
  +    export GOPATH=/tmp && export PATH=$PATH:/usr/local/go/bin && \
  +    go get -v github.com/square/certstrap && mv /tmp/bin/certstrap /usr/local/bin/certstrap && \
  +    go get -v github.com/rlmcpherson/s3gof3r/gof3r && mv /tmp/bin/gof3r /usr/local/bin/gof3r && \
  +    echo "=====================================================" && \
  +    echo "=> Install Python tools" && \
  +    echo "=====================================================" && \
  +    pip install --upgrade pip && \
  +    python -m pip install python-keystoneclient python-novaclient python-swiftclient python-neutronclient python-cinderclient python-glanceclient python-openstackclient && \
  +    echo "=====================================================" && \
  +    echo "=> Cleanup docker image" && \
  +    echo "=====================================================" && \
       rm -fr /tmp/* /var/tmp/*
   
  -#--- Provide tools information on system banner, setup profile & cleanup
  +#--- Provide tools information on system banner, setup profile
   ADD scripts/profile /home/${CONTAINER_LOGIN}/.profile
   ADD scripts/log-bosh scripts/log-cf scripts/log-credhub scripts/log-fly scripts/log-mc scripts/log-openstack scripts/tools /data/shared/tools/
   ADD scripts/motd /etc/
   
  -RUN sed -i "s/<username>/${CONTAINER_LOGIN}/g" /home/${CONTAINER_LOGIN}/.profile && \
  +RUN echo "=====================================================" && \
  +    echo "=> Setup user profile and system banner" && \
  +    echo "=====================================================" && \
  +    sed -i "s/<username>/${CONTAINER_LOGIN}/g" /home/${CONTAINER_LOGIN}/.profile && \
       find /home/${CONTAINER_LOGIN} -print0 | xargs -0 chown ${CONTAINER_LOGIN}:users && chmod 644 /home/${CONTAINER_LOGIN}/.profile /etc/motd && \
  -    find /data -print0 | xargs -0 chown ${CONTAINER_LOGIN}:users && chmod 755 /data/shared/tools/* /usr/local/bin/* /etc/profile.d/* && \
  +    find /data -print0 | xargs -0 chown ${CONTAINER_LOGIN}:users && chmod 755 /usr/local/bin/* /etc/profile.d/* /data/shared/tools/* && \
       CERTSTRAP_VERSION=`/usr/local/bin/certstrap -v | awk '{print $3}'` && \
       GIT_VERSION=`git --version | awk '{print $3}'` && \
       GO3FR_VERSION=`gof3r --version 2>&1 | awk '{print $3}'` && \
  
positive.code:     sed -i "s/<username>/${CONTAINER_LOGIN}/g" /usr/local/bin/disable_ssh_password_auth && \
      chown ${CONTAINER_LOGIN}:users /home/${CONTAINER_LOGIN} && chmod 700 /home/${CONTAINER_LOGIN} && \
      ln -s /tmp /home/${CONTAINER_LOGIN}/tmp && chown -R ${CONTAINER_LOGIN}:users /home/${CONTAINER_LOGIN} && mkdir -p /data/shared/tools/certs && \
      rm -fr /tmp/* /var/tmp/*
  
  #--- Install ops tools & cf cli plugins
  RUN wget "https://storage.googleapis.com/golang/go${GOLANG_VERSION}.linux-amd64.tar.gz" -nv -O - | tar -xz -C /usr/local && \
      wget "https://github.com/cloudfoundry-incubator/spiff/releases/download/v${SPIFF_VERSION}/spiff_linux_amd64.zip" -nv -O /tmp/spiff_linux_amd64.zip && unzip -q /tmp/spiff_linux_amd64.zip -d /usr/local/bin && rm /tmp/spiff_linux_amd64.zip && \
      wget "https://github.com/mandelsoft/spiff/releases/download/v${SPIFF_RELOADED_VERSION}/spiff_linux_amd64.zip" -nv -O /tmp/spiff_linux_amd64.zip && unzip -q /tmp/spiff_linux_amd64.zip -d /usr/local/bin && rm /tmp/spiff_linux_amd64.zip && \
      wget "https://github.com/geofffranks/spruce/releases/download/v${SPRUCE_VERSION}/spruce-linux-amd64" -nv -O /usr/local/bin/spruce && \
      wget "https://github.com/stedolan/jq/releases/download/jq-${JQ_VERSION}/jq-linux64" -nv -O /usr/local/bin/jq && \
      wget "https://s3.amazonaws.com/bosh-cli-artifacts/bosh-cli-${BOSH_CLI_V2_VERSION}-linux-amd64" -nv -O /usr/local/bin/bosh && \
      wget "https://cli.run.pivotal.io/stable?release=debian64&version=${CF_CLI_VERSION}&source=github-rel" -nv -O /tmp/cf.deb && dpkg -i /tmp/cf.deb && rm /tmp/cf.deb && \
      wget "https://github.com/cloudfoundry-incubator/credhub-cli/releases/download/${CREDHUB_VERSION}/credhub-linux-${CREDHUB_VERSION}.tgz" -nv -O - | tar -xz -C /usr/local/bin && \
      wget "https://github.com/concourse/concourse/releases/download/v${FLY_VERSION}/fly_linux_amd64" -nv -O /usr/local/bin/fly && \
      wget "https://github.com/starkandwayne/shield/releases/download/v${SHIELD_VERSION}/shield-linux-amd64" && mv shield-linux-amd64 /usr/local/bin/shield && \
  
negative.code: FROM ubuntu:16.04
  USER root
  ARG DEBIAN_FRONTEND=noninteractive
  
  #--- Packages versions
  ENV BUNDLER_VERSION="1.13.6" \
  