anchor.diff:      && DEBIAN_FRONTEND=noninteractive clean-install \
         systemd \
         conntrack iptables iproute2 ethtool socat util-linux mount ebtables udev kmod \
  -      libseccomp2 \
  +      libseccomp2 pigz \
         bash ca-certificates curl rsync \
  +      nfs-common \
       && find /lib/systemd/system/sysinit.target.wants/ -name "systemd-tmpfiles-setup.service" -delete \
       && rm -f /lib/systemd/system/multi-user.target.wants/* \
       && rm -f /etc/systemd/system/*.wants/* \
  
positive.code: # - packages needed for kubernetes components
  # - packages needed by the container runtime
  # - misc packages kind uses itself
  # After installing packages we cleanup by:
  # - removing unwanted systemd services
  # - disabling kmsg in journald (these log entries would be confusing)
  
negative.code:     && sed -i /etc/nsswitch.conf -re 's#^(hosts:\s*).*#\1dns files#'
  
  # tell systemd that it is in docker (it will check for the container env)
  # https://systemd.io/CONTAINER_INTERFACE/
  ENV container docker
  # systemd exits on SIGRTMIN+3, not SIGTERM (which re-executes it)
  # https://bugzilla.redhat.com/show_bug.cgi?id=1201657
  