anchor.diff:  ############################################# Base image for UBI 8 #############################################
   FROM redhat/ubi8-minimal AS ubi-base-8
   
  +# temporary fix for CVE-2021-33910
  +RUN microdnf --nodocs install -y systemd-pam
   
   ############################################# Base image for UBI 7 #############################################
   FROM registry.access.redhat.com/ubi7/ubi AS ubi-base-7
  
positive.code: FROM nginx:1.21.1 AS debian
  
  RUN apt-get update \
  	&& apt-get install --no-install-recommends --no-install-suggests -y libcap2-bin \
  	&& rm -rf /var/lib/apt/lists/*
  
  
  
negative.code: 	summary="The Ingress controller is an application that runs in a cluster and configures an HTTP load balancer according to Ingress resources." \
  	io.openshift.tags="nginx,ingress-controller,ingress,controller,kubernetes,openshift"
  
  RUN microdnf --nodocs install -y shadow-utils ca-certificates systemd systemd-libs \
  	&& groupadd --system --gid 101 nginx \
  	&& useradd --system --gid nginx --no-create-home --home-dir /nonexistent --comment "nginx user" --shell /bin/false --uid 101 nginx
  
  