anchor.diff:      --mount=type=cache,target=/go/pkg/mod \
           PREFIX=/build/ ./install.sh $INSTALL_BINARY_NAME
   COPY ./contrib/dockerd-rootless.sh /build
  +
  +FROM djs55/vpnkit@sha256:${VPNKIT_DIGEST} AS vpnkit
   
   # TODO: Some of this is only really needed for testing, it would be nice to split this up
   FROM runtime-dev AS dev
  
positive.code: ARG CROSS="false"
  ARG GO_VERSION=1.13.1
  ARG DEBIAN_FRONTEND=noninteractive
  
  FROM golang:${GO_VERSION}-stretch AS base
  RUN echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' > /etc/apt/apt.conf.d/keep-cache
  
negative.code: COPY --from=registry /build/registry* /usr/local/bin/
  COPY --from=criu /build/ /usr/local/
  COPY --from=rootlesskit /build/ /usr/local/bin/
  COPY --from=vpnkit /vpnkit /usr/local/bin/vpnkit.x86_64
  
  ENV PATH=/usr/local/cli:$PATH
  ENV DOCKER_BUILDTAGS apparmor seccomp selinux
  