anchor.diff:  	io.openshift.tags="nginx,ingress-controller,ingress,controller,kubernetes,openshift"
   
   RUN dnf --nodocs install -y shadow-utils ca-certificates \
  -	# temp fix for CVE-2022-1271, CVE-2022-22576, CVE-2022-25313, CVE-2022-22576, CVE-2021-40528, CVE-2021-3634, CVE-2022-29824, CVE-2021-4189, CVE-2021-4189, CVE-2022-29824, CVE-2022-1621
  -	&& dnf --nodocs upgrade -y xz-libs curl expat libcurl libgcrypt libssh libssh-config libxml2 platform-python python3-libs python3-libxml2 vim-minimal \
   	&& groupadd --system --gid 101 nginx \
   	&& useradd --system --gid nginx --no-create-home --home-dir /nonexistent --comment "nginx user" --shell /bin/false --uid 101 nginx
   
  
positive.code: 	--mount=type=bind,from=opentracing-lib,target=/tmp/ot/ \
  	apt-get update \
  	&& apt-get install --no-install-recommends --no-install-suggests -y ca-certificates gnupg curl apt-transport-https libcap2-bin \
  	# temp fix for  CVE-2022-2068, CVE-2021-4209
  	&& apt-get install --no-install-recommends --no-install-suggests -y libssl1.1 openssl libgnutls30 \
  	&& curl -fsSL https://cs.nginx.com/static/keys/nginx_signing.key | gpg --dearmor > /etc/apt/trusted.gpg.d/nginx_signing.gpg \
  	&& curl -fsSL -o /etc/apt/apt.conf.d/90pkgs-nginx https://cs.nginx.com/static/files/90pkgs-nginx \
  	&& DEBIAN_VERSION=$(awk -F '=' '/^VERSION_CODENAME=/ {print $2}' /etc/os-release) \
  
negative.code: 
  
  ############################################# Base images containing libs for Opentracing #############################################
  FROM opentracing/nginx-opentracing:nginx-1.23.1 as opentracing-lib
  FROM opentracing/nginx-opentracing:nginx-1.23.1-alpine as alpine-opentracing-lib
  
  
  ############################################# Base image for Debian #############################################
  FROM nginx:1.23.1 AS debian
  
  RUN --mount=type=bind,from=opentracing-lib,target=/tmp/ot/ \
  	apt-get update \
  	&& apt-get install --no-install-recommends --no-install-suggests -y libcap2-bin \
  	&& rm -rf /var/lib/apt/lists/* \
  	&& cp -av /tmp/ot/usr/local/lib/libopentracing.so* /tmp/ot/usr/local/lib/libjaegertracing*so* /tmp/ot/usr/local/lib/libzipkin*so* /tmp/ot/usr/local/lib/libdd*so* /tmp/ot/usr/local/lib/libyaml*so* /usr/local/lib/ \
  	&& cp -av /tmp/ot/usr/lib/nginx/modules/ngx_http_opentracing_module.so /usr/lib/nginx/modules/ \
  