anchor.diff:      && curl -o /usr/local/bin/gosu -fSL "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$ARCH" \
       && curl -o /usr/local/bin/gosu.asc -fSL "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$ARCH.asc" \
       && export GNUPGHOME="$(mktemp -d)" \
  -    && gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \
  +    && gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \
       && gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu \
  -    && rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc \
  +    && rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc \
       && chmod +x /usr/local/bin/gosu \
       && gosu nobody true \
       && apk del .gosu-deps
  
positive.code: RUN addgroup crate && adduser -G crate -H crate -D
  
  # install crate
  ENV CRATE_VERSION 2.2.4
  RUN apk add --no-cache --virtual .crate-rundeps \
          openjdk8-jre-base \
          python3 \
  
negative.code:     && curl -fSL -O https://cdn.crate.io/downloads/releases/crate-$CRATE_VERSION.tar.gz \
      && curl -fSL -O https://cdn.crate.io/downloads/releases/crate-$CRATE_VERSION.tar.gz.asc \
      && export GNUPGHOME="$(mktemp -d)" \
      && gpg --keyserver ha.pool.sks-keyservers.net --recv-keys 90C23FC6585BC0717F8FBFC37FAAE51A06F6EAEB \
      && gpg --batch --verify crate-$CRATE_VERSION.tar.gz.asc crate-$CRATE_VERSION.tar.gz \
      && rm -r "$GNUPGHOME" crate-$CRATE_VERSION.tar.gz.asc \
      && mkdir /crate \
      && tar -xf crate-$CRATE_VERSION.tar.gz -C /crate --strip-components=1 \
      && rm crate-$CRATE_VERSION.tar.gz \
  