anchor.diff:  # The Rust toolchain layer will get updated most frequently, but we could keep the system
   # dependencies layer intact for much longer.
   
  +ARG RUST_TOOLCHAIN="1.32.0"
   ARG TMP_BUILD_DIR=/tmp/build
   ARG FIRECRACKER_SRC_DIR="/firecracker"
   ARG FIRECRACKER_BUILD_DIR="$FIRECRACKER_SRC_DIR/build"
  
positive.code:         requests \
          requests-unixsocket \
          retry \
      && rm -rf /var/lib/apt/lists/*
  
  # Install the Rust toolchain
  #
  RUN mkdir "$TMP_BUILD_DIR" \
      && curl https://sh.rustup.rs -sSf | sh -s -- -y \
          && rustup target add x86_64-unknown-linux-musl \
          && rustup target add aarch64-unknown-linux-musl \
          && rustup component add rustfmt \
  
negative.code:         python3-dev \
          python3-pip \
          python3-venv    \
          xz-utils \
          zlib1g-dev \
      && python3 -m pip install \
          setuptools \
  