anchor.diff:  #libgit2 install start
   #must precede pyinstaller requirements
   ENV LIBGIT2_SRC_URL=https://github.com/libgit2/libgit2/archive/v0.26.0.tar.gz
  -ENV LIBGIT2_SRC_SHA256=4ac70a2bbdf7a304ad2a9fb2c53ad3c8694be0dbec4f1fce0f3cd0cda14fb3b9
  +#it turns out github provided release files can change. so even though the code hopefully hasn't changed, the hash has.
  +ENV LIBGIT2_SRC_SHA256=6a62393e0ceb37d02fe0d5707713f504e7acac9006ef33da1e88960bd78b6eac
   ENV LIBGIT2_SRC_VERSION=0.26.0
   ENV LIBGIT2TEMP=/tmp/libgit2temp
   RUN mkdir -p "$LIBGIT2TEMP" \
  
positive.code: #osquery should be built first since requirements for other packages can interfere with osquery dependencies
  #to build, osquery scripts want sudo and a user to sudo with.
  #to pin to a different version change the following envirnment variable
  ENV OSQUERY_SRC_VERSION=2.6.0
  ENV OSQUERY_BUILD_USER=osquerybuilder
  ENV OSQUERY_GIT_URL=https://github.com/facebook/osquery.git
  RUN apt-get -y install git make python ruby sudo
  
negative.code: #pyinstaller start
  #commands specified for ENTRYPOINT and CMD are executed when the container is run, not when the image is built
  #use the following variables to choose the version of hubble
  ENV HUBBLE_CHECKOUT=develop
  ENV HUBBLE_VERSION=2.2.3
  ENV HUBBLE_GIT_URL=https://github.com/hubblestack/hubble.git
  ENV HUBBLE_SRC_PATH=/hubble_src
  