anchor.diff:  
   # debos runtime dependencies
   # ca-certificates is required to validate HTTPS certificates when getting debootstrap release file
  -RUN echo "deb http://deb.debian.org/debian experimental main" > /etc/apt/sources.list.d/experimental.list && \
  -    apt-get update && \
  +RUN apt-get update && \
       apt-get install -y --no-install-recommends \
           apt-transport-https \
           binfmt-support \
  
positive.code:         openssh-client \
          parted \
          pkg-config \
          rsync \
          systemd \
          systemd-container \
  
negative.code:         xfsprogs \
          xz-utils \
          zip && \
      rm -rf /var/lib/apt/lists/*
  
  # debian's qemu-user-static package no longer registers binfmts
  