anchor.diff:  RUN \
     useradd -d /backup -u 998 -o application && \
     mkdir -p /data/ghe-production-data/ && mkdir -p /backup/backup-utils/ && \
  -  mkdir -p /kms && mkdir -p /var/log/
  +  mkdir -p /kms && mkdir -p /var/log/ && mkdir /delete-instuck-backups
   WORKDIR /backup
   
   # read package lists
   # update w/ latest security patches
  -# install python pip boto pyyaml & english & git
  +# install python pip3 boto3 pyyaml & english & git
   # clone backup-utils
   RUN \
     apt-get update -y && \
  
positive.code: COPY python/extract-kms-str.py /kms/extract-kms-str.py
  COPY convert-kms-private-ssh-key.sh /kms/convert-kms-private-ssh-key.sh
  
  # copy cron job
  COPY cron-ghe-backup /etc/cron.d/ghe-backup
  
  
negative.code:   chown -R application: /data && \
    chown -R application: /backup && \
    chown -R application: /kms && \
    chown -R application: /delete-instuck-backups && \
    chmod 0700 /kms/extract-kms-str.py && \
    chmod 0700 /kms/convert-kms-private-ssh-key.sh && \
    chmod 0644 /etc/cron.d/ghe-backup && \
    chmod 0700 /delete-instuck-backups/delete-instuck-progress.py && \
    mkfifo /var/log/ghe-prod-backup.log
  
  CMD python3 /delete-instuck-backups/delete-instuck-progress.py && \
      /kms/convert-kms-private-ssh-key.sh && \
      cron && \
      tail -F /var/log/ghe-prod-backup.log
  