anchor.diff:  #                 configure security in Jenkins. Out of the box, it allows anyone 
   #                 to run any job without any login. DO NOT FORGET TO DO THIS.
   
  +# First: building `rnv` locally since it's no 
  +# longer packaged for Debian 
  +FROM debian as builder
  +
  +# We need `make` for that and 
  +# `libexpat-dev` is required to build `rnv`.
  +RUN apt-get update && apt-get --yes --force-yes --no-install-recommends install ca-certificates git make build-essential libexpat-dev \
  +    && rm -rf /var/lib/apt/lists/*
  +
  +RUN mkdir -p /var/rnv && \
  +    git clone https://github.com/dtolpin/RNV.git /var/rnv && \ 
  +    cd /var/rnv && \ 
  +    make -f Makefile.gnu rnv
  +
  +
  +# Second: Build the final Jenkins image
   FROM jenkins/jenkins:lts
   LABEL maintainer="Martin Holmes and Peter Stadler for the TEI Council"
    
  
positive.code: # Many required packages are already installed upstream. 
  # Various tex-related packages have been added as build failures
  # revealed the need for them.
  RUN apt-get update && apt-get --yes --force-yes --no-install-recommends install ant \ 
       debhelper \ 
       debiandoc-sgml \ 
       devscripts \ 
  
negative.code: # Need to switch to root user to install stuff.
  USER root
  
  # Copy build artefacts from first step
  COPY --from=builder /var/rnv/rnv /usr/bin/ 
  
  # Install a bunch of packages we need. This package list has been 
  # customized a little from the original 2016 builder script set,
  