anchor.diff: -FROM alpine:3.6 as ffmpeg-builder
  +FROM alpine:3.7 AS ffmpeg-builder
   
   RUN apk add --no-cache \
     coreutils \
  
positive.code:   CFLAGS="-fno-strict-overflow -fstack-protector-all -fPIE" LDFLAGS="-Wl,-z,relro -Wl,-z,now -fPIE -pie" \
    ./configure --enable-pic --enable-static && make -j4 install
  
  # note that this will produce a "static" PIE binary with no dynamic lib deps
  ENV FFMPEG_VERSION=n3.4.2
  RUN \
  
negative.code:   --enable-static \
    --pkg-config-flags=--static \
    --extra-ldflags=-static \
    --enable-gpl \
    --enable-nonfree \
    --enable-openssl \
  