anchor.diff:  # Build and then remove yarn stuff??
   RUN yarn workspaces foreach run build && rm -rf .yarn .pnp.*
   
  -FROM install
  +# Assemble "production" image
  +FROM node:$NODE_VER-slim AS production
  +
  +WORKDIR /oada
  +
  +# Install packages needed for running node-rdkafka etc.
  +RUN apt-get update -y && apt-get install -y --no-install-recommends \
  +    ca-certificates \
  +    liblz4-1 \
  +    libsasl2-2 \
  +    libssl1.1 \
  +    tini \
  +  && apt-get clean && rm -rf /var/lib/apt/lists/*
   
   COPY ./utils/entrypoint.sh /entrypoint.sh
   RUN chmod u+x /entrypoint.sh
   
   COPY ./utils/wait-for-it.sh /wait-for-it.sh
   RUN chmod u+x /wait-for-it.sh
  -
  -# Copy in service code and production dependencies
  -COPY --from=yarn /oada/ /oada/
  -# Copy in built code
  -# TODO: Don't have both source and built code in image?
  -COPY --from=build /oada/ /oada/
   
   # Copy in config file?
   COPY ./oada-srvc-docker-config.js /oada-srvc-docker-config.js
  
positive.code: # Run start script of package
  CMD ["start", "--config=/oada-srvc-docker-config.js"]
  
  ARG OADA_SERVICE
  ENV OADA_SERVICE=${OADA_SERVICE}
  
  # Do not run services as root
  USER node
  
  WORKDIR /oada/services/${OADA_SERVICE}
  
  
negative.code: ARG NODE_VER=14-buster
  
  # Copy in package files and any needed apt packages?
  FROM node:$NODE_VER AS packages
  
  WORKDIR /oada
  
  # install things only needed for building
  RUN apt-get update -y && apt-get install -y --no-install-recommends \
      liblz4-dev \
      libsasl2-dev \
      libssl-dev \
      musl-dev \
    && apt-get clean && rm -rf /var/lib/apt/lists/*
  
  # Need to list out every package.json we need from monorepo for caching stuff...
  