anchor.diff:  
   FROM --platform=$BUILDPLATFORM alpine AS cni-plugins
   RUN apk add --no-cache curl
  -ENV CNI_VERSION=v0.8.1
  +ARG CNI_VERSION
   ARG TARGETOS
   ARG TARGETARCH
   WORKDIR /opt/cni/bin
  
positive.code: # syntax = docker/dockerfile:1.1-experimental
  
  ARG RUNC_VERSION=v1.0.0-rc8
  ARG CONTAINERD_VERSION=v1.3.0
  # containerd v1.2 for integration tests
  ARG CONTAINERD_OLD_VERSION=v1.2.10
  # available targets: buildkitd, buildkitd.oci_only, buildkitd.containerd_only
  ARG BUILDKIT_TARGET=buildkitd
  ARG REGISTRY_VERSION=v2.7.0-rc.0
  # v0.4.1
  ARG ROOTLESSKIT_VERSION=27a0c7a2483732b33d4192c1d178c83c6b9e202d
  ARG ROOTLESS_BASE_MODE=external
  
  # git stage is used for checking out remote repository sources
  FROM --platform=$BUILDPLATFORM alpine AS git
  
negative.code:   && make bin/containerd-shim \
    && mv bin /out
  
  ARG REGISTRY_VERSION
  FROM registry:$REGISTRY_VERSION AS registry
  
  FROM gobuild-base AS rootlesskit
  ARG ROOTLESSKIT_VERSION
  