anchor.diff:                           https://shibboleth.net/downloads/identity-provider/$SHIBBOLETH_VERSION/shibboleth-identity-provider-$SHIBBOLETH_VERSION.tar.gz.sha256 && \
       cd /opt/src && sha256sum -c shibboleth-identity-provider-$SHIBBOLETH_VERSION.tar.gz.sha256 && \
       gpg -q --verify /opt/src/shibboleth-identity-provider-$SHIBBOLETH_VERSION.tar.gz.asc && \
  -    tar -xzf /opt/src/shibboleth-identity-provider-$SHIBBOLETH_VERSION.tar.gz -C /opt
  +    tar -xzf /opt/src/shibboleth-identity-provider-$SHIBBOLETH_VERSION.tar.gz -C /opt && \
  +    rm -rf /opt/src/
   
   ARG JETTY_CERT_KEY
   ARG JETTY_CERT_PKCS12
  
positive.code:     cp /opt/src/mysql-connector-java-5.1.39/mysql-connector-java-5.1.39-bin.jar /opt/jetty/lib/ext && \
      mkdir -p /opt/jetty/webapps/root && \
      echo etc/tweak-ssl.xml >> /opt/jetty/start.d/https.ini && \
      chown -R idp:idp /opt/jetty/ /opt/jetty-distribution*/
  
  COPY conf/common/jetty/idp.xml /opt/jetty/webapps
  COPY conf/common/jetty/tweak-ssl.xml /opt/jetty/etc
  
negative.code: 
  COPY gpg/ /root/gpg/
  RUN gpg -q --import /root/gpg/joakim.erdfelt_gmail.com.key && \
      gpg -q --import /root/gpg/tzeller_dragonacea.biz.key && \
      rm -rf /root/gpg/
  
  RUN groupadd idp && \
      useradd -m -g idp -s /bin/bash idp && \
  