anchor.diff:  USER nonroot
   ENV HOME /home/nonroot
   ENV USER nonroot
  -WORKDIR /home/nonroot/workdir
  +WORKDIR /home/nonroot/laikaboss
   
  -ENTRYPOINT sed -i "/^SERVER_CONFIG/ s/127\.0\.0\.1/$(hostname -i)/" /home/nonroot/fsf/fsf-client/conf/config.py && main.py start && printf "\n\n" && echo "<----->" && echo "FSF server daemonized!" &&  echo "<----->" && printf "\n" && echo "Invoke fsf_client.py by giving it a file as an argument:" && printf "\n" && echo "fsf_client.py <file>"  && printf "\n" && echo "Alternatively, Invoke fsf_client.py by giving it a file as an argument and pass to jq so you can interact extensively with the JSON output:" && printf "\n" && echo "fsf_client.py <file> | jq - C . | less -r" && printf "\n" && echo "To access all of the subobjects that are recursively processed, simply add --full when invoking fsf_client.py:" && printf "\n" && echo "fsf_client.py <file> --full" && printf "\n" && /bin/bash
  +ENTRYPOINT echo "To run the standalone scanner, execute laika.py against a file like so:" && printf "\n""./laika.py <filename> | jq -C . | less -r" && printf "\n\n""To run the networked instance, first execute laikad.py and use cloudscan against like so:" && printf "\n\n""./laikad.py &" && printf "\n\n""./cloudscan.py <filename> | jq -C . | less -r" && printf "\n\n" && /bin/bash
  
positive.code:   python setup.py build && \
    python setup.py install && \
  
  # Retrieve current version of pefile via wget, verify known good hash and install pefile
    wget -O pefile-1.2.10-139.zip "https://github.com/erocarrera/pefile/archive/master.zip" && \
    echo 6362f500afa3505d4ef92c03639af18abb43996491b2eb67295036c15e57f5d8\ \ pefile-1.2.10-139.zip > sha256sum-pefile && \
    sha256sum -c sha256sum-pefile && \
  
    unzip pefile-1.2.10-139.zip && \
    cd pefile-master && \
    python setup.py build && \
    python setup.py install
  
  # Install additional dependencies
  RUN pip install czipfile \
    hachoir-parser \
    hachoir-core \
    hachoir-regex \
    hachoir-metadata \
    hachoir-subfile \
    ConcurrentLogHandler \
    pypdf2 \
    xmltodict \
    rarfile \
    pylzma \
    oletools \
    pyasn1_modules \ 
    pyasn1 && \
  
    BUILD_LIB=1 pip install ssdeep
  
  # Add nonroot user, clone repo and setup environment
  RUN groupadd -r nonroot && \
    useradd -r -g nonroot -d /home/nonroot -s /sbin/nologin -c "Nonroot User" nonroot && \
    mkdir /home/nonroot && \
    chown -R nonroot:nonroot /home/nonroot && \
    echo "/usr/local/lib" >> /etc/ld.so.conf.d/yara.conf
  
  USER nonroot
  RUN mkdir -pv /home/nonroot/workdir && \
    cd /home/nonroot && \
    git clone https://github.com/EmersonElectricCo/fsf.git && \
    cd fsf/ && \
    sed -i 's/\/FULL\/PATH\/TO/\/home\/nonroot\/fsf/' fsf-server/conf/config.py && \
    sed -i "/^SCANNER\_CONFIG/ s/\/tmp/\/home\/nonroot\/workdir/" fsf-server/conf/config.py 
    
  USER root
  RUN ldconfig && \
    ln -f -s /home/nonroot/fsf/fsf-server/main.py /usr/local/bin/ && \
    ln -f -s /home/nonroot/fsf/fsf-client/fsf_client.py /usr/local/bin/ && \
    apt-get remove -y --purge automake build-essential libtool && \
    apt-get autoremove -y --purge && \
    apt-get clean -y && \
  
negative.code: USER root
  RUN apt-get -y install software-properties-common && \
    apt-add-repository -y multiverse && \
    apt-get -qq update && apt-get install -y \
    automake \
    build-essential \
    git \
    jq \
    libfuzzy-dev \
    libimage-exiftool-perl \
    liblzma5 \
    libtool \
    libzmq3 \
    make \
    python-cffi \
    python-dev \
    python-gevent \
    python-ipy \
    python-m2crypto \
    python-msgpack \
    python-pexpect \
    python-pip \
    python-progressbar \
    python-pyclamd \
    python-zmq \
    unrar \
    unzip \
    wget
  
  # Retrieve current version of Yara via wget, verify known good hash and install Yara
  RUN cd /tmp && \
  