anchor.diff:          gcc \
           git \
           libffi-dev \
  +        libgeoip-dev \
           libjpeg-dev \
           libpq-dev \
           libxml2-dev \
  
positive.code:     && wget -O /usr/local/bin/tini "https://github.com/krallin/tini/releases/download/v$TINI_VERSION/tini" \
      && wget -O /usr/local/bin/tini.asc "https://github.com/krallin/tini/releases/download/v$TINI_VERSION/tini.asc" \
      && export GNUPGHOME="$(mktemp -d)" \
      && gpg --batch --keyserver ha.pool.sks-keyservers.net --recv-keys 595E85A6B1B4779EA4DAAEC70B588DFF0527A9B7 \
      && gpg --batch --verify /usr/local/bin/tini.asc /usr/local/bin/tini \
      && rm -r "$GNUPGHOME" /usr/local/bin/tini.asc \
      && chmod +x /usr/local/bin/tini \
  
negative.code: 
  # grab gosu for easy step-down from root
  RUN set -x \
      && export GOSU_VERSION=1.11 \
      && apt-get update && apt-get install -y --no-install-recommends wget && rm -rf /var/lib/apt/lists/* \
      && wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture)" \
      && wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture).asc" \
      && export GNUPGHOME="$(mktemp -d)" \
      && for key in \
        B42F6819007F00F88E364FD4036A9C25BF357DD4 \
      ; do \
        gpg --batch --keyserver hkp://p80.pool.sks-keyservers.net:80 --recv-keys "$key" || \
        gpg --batch --keyserver hkp://ipv4.pool.sks-keyservers.net --recv-keys "$key" || \
        gpg --batch --keyserver hkp://pgp.mit.edu:80 --recv-keys "$key" ; \
      done \
      && gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu \
      && rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc \
      && chmod +x /usr/local/bin/gosu \
  