Hi Maxim,

thank you for your extensive help. I'm sending a v11 which hopefully 
addresses everything. I tested my changes with:

guix shell -CPWN --writable-root nss-certs -m manifest.scm -- make check-system TESTS="pounce jami ngircd oci-service-rootless-podman oci-service-docker oci-container rootless-podman docker docker-system"

cheers,
giacomo