anchor.diff:          iptables \
           jq \
           kmod \
  -        libaio-dev \
  -        libcap-dev \
  -        libnet-dev \
  -        libnl-3-dev \
  -        libprotobuf-c-dev \
  -        libprotobuf-dev \
           libseccomp-dev \
           libseccomp-dev:arm64 \
           libseccomp-dev:armel \
  
positive.code:         libseccomp-dev:ppc64el \
          libseccomp2 \
          pkg-config \
          protobuf-c-compiler \
          protobuf-compiler \
          python-minimal \
          sudo \
          uidmap \
      && apt-get clean \
      && rm -rf /var/cache/apt /var/lib/apt/lists/*;
  
  # Add a dummy user for the rootless integration tests. While runC does
  # not require an entry in /etc/passwd to operate, one of the tests uses
  
negative.code:     && git reset --hard "${BATS_VERSION}" \
      && ./install.sh /usr/local \
      && rm -rf /tmp/bats-core
  
  # install umoci
  RUN curl -o /usr/local/bin/umoci -fsSL https://github.com/opencontainers/umoci/releases/download/v0.4.5/umoci.amd64 \
  