anchor.diff:  # WireGuard
   RUN curl -sSL -o /wireguard.tar.xz "${WIREGUARD_URL}" && \
       echo "${WIREGUARD_SHA256}  /wireguard.tar.xz" | sha256sum -c - && \
  +    cp /wireguard.tar.xz /out/src/ && \
       tar -C / --one-top-level=wireguard --strip-components=2 -xJf /wireguard.tar.xz "WireGuard-${WIREGUARD_VERSION}/src" && \
       make -j "$(getconf _NPROCESSORS_ONLN)" M="/wireguard" modules
   
  
positive.code:         done; \
      fi
  
  # Kernel config
  RUN case $(uname -m) in \
      x86_64) \
  
negative.code:     make oldconfig && \
      if [ -z "${EXTRA}" ] && [ -z "${DEBUG}" ]; then diff .config ${KERNEL_DEF_CONF}; fi
  
  
  # Kernel
  RUN make -j "$(getconf _NPROCESSORS_ONLN)" KCFLAGS="-fno-pie" && \
  