anchor.diff:  USER root
   RUN apt-get -y install software-properties-common && \
     apt-add-repository -y multiverse && \
  -  apt-get -qq update && apt-get install -y \
  +  apt-get -qq update && apt-get install -y --fix-missing \
  +  autoconf \
     automake \
     build-essential \
  +  cabextract \
  +  dh-autoreconf \
     git \
     jq \
  +  libffi-dev \
     libfuzzy-dev \
  -  libimage-exiftool-perl \
  -  liblzma5 \
  +  libpython2.7-stdlib \
  +  libssl-dev \
     libtool \
  -  libzmq3 \
     make \
  -  python-cffi \
  +  net-tools \
     python-dev \
  -  python-gevent \
  -  python-ipy \
  -  python-m2crypto \
  -  python-msgpack \
  -  python-pexpect \
     python-pip \
  -  python-progressbar \
  -  python-pyclamd \
  -  python-zmq \
  +  python-setuptools \
  +  ssdeep \
     unrar \
     unzip \
  -  wget
  +  upx-ucl \
  +  vim \
  +  wget && \
  +
  +# Update setuptools
  +  easy_install -U setuptools
   
   # Retrieve current version of Yara via wget, verify known good hash and install Yara
   RUN cd /tmp && \
  
positive.code: USER nonroot
  ENV HOME /home/nonroot
  ENV USER nonroot
  WORKDIR /home/nonroot/laikaboss
  
  ENTRYPOINT echo "To run the standalone scanner, execute laika.py against a file like so:" && printf "\n""./laika.py <filename> | jq -C . | less -r" && printf "\n\n""To run the networked instance, first execute laikad.py and use cloudscan against like so:" && printf "\n\n""./laikad.py &" && printf "\n\n""./cloudscan.py <filename> | jq -C . | less -r" && printf "\n\n" && /bin/bash
  
negative.code:   python setup.py build && \
    python setup.py install && \
  
  # Retrieve current version of pefile via wget, verify known good hash and install pefile
    wget -O pefile-1.2.10-139.zip "https://github.com/erocarrera/pefile/archive/master.zip" && \
    echo 6362f500afa3505d4ef92c03639af18abb43996491b2eb67295036c15e57f5d8\ \ pefile-1.2.10-139.zip > sha256sum-pefile && \
    sha256sum -c sha256sum-pefile && \
  
    unzip pefile-1.2.10-139.zip && \
    cd pefile-master && \
    python setup.py build && \
    python setup.py install
  
  # Install additional dependencies
  RUN pip install czipfile \
    hachoir-parser \
    hachoir-core \
    hachoir-regex \
    hachoir-metadata \
    hachoir-subfile \
    ConcurrentLogHandler \
    pypdf2 \
    xmltodict \
    rarfile \
    pylzma \
    oletools \
    pyasn1_modules \ 
    pyasn1 && \
  
    BUILD_LIB=1 pip install ssdeep
  
  # Add nonroot user, clone repo and setup environment
  RUN groupadd -r nonroot && \
    useradd -r -g nonroot -d /home/nonroot -s /sbin/nologin -c "Nonroot User" nonroot && \
    mkdir /home/nonroot && \
    chown -R nonroot:nonroot /home/nonroot && \
    echo "/usr/local/lib" >> /etc/ld.so.conf.d/yara.conf
  
  USER nonroot
  RUN mkdir -pv /home/nonroot/workdir && \
    cd /home/nonroot && \
    git clone https://github.com/EmersonElectricCo/fsf.git && \
    cd fsf/ && \
    sed -i 's/\/FULL\/PATH\/TO/\/home\/nonroot\/fsf/' fsf-server/conf/config.py && \
    sed -i "/^SCANNER\_CONFIG/ s/\/tmp/\/home\/nonroot\/workdir/" fsf-server/conf/config.py 
    
  USER root
  RUN ldconfig && \
    ln -f -s /home/nonroot/fsf/fsf-server/main.py /usr/local/bin/ && \
    ln -f -s /home/nonroot/fsf/fsf-client/fsf_client.py /usr/local/bin/ && \
    apt-get remove -y --purge automake build-essential libtool && \
    apt-get autoremove -y --purge && \
    apt-get clean -y && \
  