anchor.diff:          gcc \
           git \
           libffi-dev \
  +        libgeoip-dev \
           libjpeg-dev \
           libpq-dev \
           libxml2-dev \
  
positive.code: 
  # grab gosu for easy step-down from root
  RUN set -x \
      && export GOSU_VERSION=1.10 \
      && apt-get update && apt-get install -y --no-install-recommends wget && rm -rf /var/lib/apt/lists/* \
      && wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture)" \
      && wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture).asc" \
      && export GNUPGHOME="$(mktemp -d)" \
      && gpg --batch --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \
      && gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu \
      && rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc \
      && chmod +x /usr/local/bin/gosu \
  
negative.code: 
  RUN [ "$SENTRY_BUILD" != '' ] \
      # Install node to build assets
      && export NODE_VERSION=8.10.0 \
      && export YARN_VERSION=1.13.0 \
      && export GNUPGHOME="$(mktemp -d)" \
      && export NPM_CONFIG_CACHE="$(mktemp -d)" \
      && export YARN_CACHE_FOLDER="$(mktemp -d)" \
      # gpg keys listed at https://github.com/nodejs/node
      && set -ex \
      && for key in \
        94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
        FD3A5288F042B6850C66B31F09FE44734EB7990E \
        71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
        DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
        C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
        B9AE9905FFD7803F25714661B63B535A4C206CA9 \
        77984A986EBC2AA786BC0F66B01FBB92821C587A \
        8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 \
        4ED778F539E3634C779C87C6D7062848A1AB005C \
        A48C2BEE680E841632CD4E44F07496B3EB3C1762 \
        B9E2F5981AA6E0CD28160D9FF13993A75599653C \
      ; do \
        gpg --batch --keyserver hkp://p80.pool.sks-keyservers.net:80 --recv-keys "$key" || \
        gpg --batch --keyserver hkp://ipv4.pool.sks-keyservers.net --recv-keys "$key" || \
        gpg --batch --keyserver hkp://pgp.mit.edu:80 --recv-keys "$key" ; \
      done \
      && mkdir -p /usr/local/node && PATH=/usr/local/node/bin:$PATH \
      && apt-get update && apt-get install -y --no-install-recommends make g++ wget \
  