anchor.diff: -FROM node:14-buster-slim AS install
  +ARG NODE_VER=14-buster
  +
  +# Copy in package files and any needed apt packages?
  +FROM node:$NODE_VER AS packages
   
   WORKDIR /oada
   
  -# node-rdkafka requires these things to be installed:
  +# install things only needed for building
   RUN apt-get update -y && apt-get install -y --no-install-recommends \
  -    ca-certificates \
  -    libc6 \
  -    liblz4-1 \
  -    libsasl2-2 \
  -    libssl1.1 \
  -    tini \
  -    zlibc \
  -  && apt-get clean && rm -rf /var/lib/apt/lists/*
  -
  -FROM install AS packages
  -
  -# install things only needed for build?
  -RUN apt-get update -y && apt-get install -y --no-install-recommends \
  -    gcc \
  -    git \
  -    libc6-dev \
  -    g++ \
       liblz4-dev \
  -    musl-dev \
       libsasl2-dev \
       libssl-dev \
  -    make \
  -    python \
  +    musl-dev \
     && apt-get clean && rm -rf /var/lib/apt/lists/*
   
   # Need to list out every package.json we need from monorepo for caching stuff...
  
positive.code: # Run start script of package
  CMD ["start", "--config=/oada-srvc-docker-config.js"]
  
  ARG OADA_SERVICE
  ENV OADA_SERVICE=${OADA_SERVICE}
  
  # Do not run services as root
  USER node
  
  WORKDIR /oada/services/${OADA_SERVICE}
  
  
negative.code: # Run again to be safe?
  RUN yarn workspaces focus --all --production
  
  # Install all deps and run build step
  # Allows for workspaces to have build step (e.g., for TypeScript)
  FROM packages as build
  
  # Install _all_ dependencies for build
  