anchor.diff:      xz -d linux-${KERNEL_VERSION}.tar.xz && \
       curl -fsSLO ${KERNEL_PGP2_SIGN} && \
       gpg2 --verify linux-${KERNEL_VERSION}.tar.sign linux-${KERNEL_VERSION}.tar && \
  -    cat linux-${KERNEL_VERSION}.tar | tar --absolute-names -x && mv /linux-${KERNEL_VERSION} /linux
  -
  -
  -RUN mkdir -p /out/src
  +    cat linux-${KERNEL_VERSION}.tar | tar --absolute-names -x && mv /linux-${KERNEL_VERSION} /linux && \
  +    printf "KERNEL_SOURCE=${KERNEL_SOURCE}\n" > /out/kernel-source-info
   
   WORKDIR /tmp
   # Download Intel ucode, create a CPIO archive for it, and keep it in the build context
  
positive.code: # build kernels without patches.
  COPY / /
  
  # Download and verify kernel
  # PGP keys: 589DA6B1 (greg@kroah.com) & 6092693E (autosigner@kernel.org) & 00411886 (torvalds@linux-foundation.org)
  RUN KERNEL_MAJOR=$(echo ${KERNEL_VERSION} | cut -d . -f 1) && \
  
negative.code:          tar cf - -T - | (cd $dir; tar xf -) && \
      ( cd /tmp && tar cf /out/kernel-dev.tar usr/src )
  
  RUN printf "${BUILD_IMAGE}" > /out/kernel-builder
  LABEL org.mobyproject.linuxkit.kernel.buildimage ${BUILD_IMAGE}
  
  