anchor.diff:  
     mkService = name: container: let
       dependsOn = map (x: "${cfg.backend}-${x}.service") container.dependsOn;
  +    escapedName = escapeShellArg name;
     in {
       wantedBy = [] ++ optional (container.autoStart) "multi-user.target";
       after = lib.optionals (cfg.backend == "docker") [ "docker.service" "docker.socket" ] ++ dependsOn;
  
positive.code:       ${optionalString (container.imageFile != null) ''
          ${cfg.backend} load -i ${container.imageFile}
          ''}
        '';
  
      script = concatStringsSep " \\\n  " ([
        "exec ${cfg.backend} run"
        "--rm"
        "--name=${escapeShellArg name}"
        "--log-driver=${container.log-driver}"
      ] ++ optional (container.entrypoint != null)
        "--entrypoint=${escapeShellArg container.entrypoint}"
        ++ (mapAttrsToList (k: v: "-e ${escapeShellArg k}=${escapeShellArg v}") container.environment)
        ++ map (f: "--env-file ${escapeShellArg f}") container.environmentFiles
        ++ map (p: "-p ${escapeShellArg p}") container.ports
        ++ optional (container.user != null) "-u ${escapeShellArg container.user}"
  
negative.code:       ++ map escapeShellArg container.cmd
      );
  
      preStop = if cfg.backend == "podman"
        then "[ $SERVICE_RESULT = success ] || podman stop --ignore --cidfile=/run/podman-${escapedName}.ctr-id"
        else "[ $SERVICE_RESULT = success ] || ${cfg.backend} stop ${name}";
      postStop =  if cfg.backend == "podman"
        then "podman rm -f --ignore --cidfile=/run/podman-${escapedName}.ctr-id"
        else "${cfg.backend} rm -f ${name} || true";
  
      serviceConfig = {
        ### There is no generalized way of supporting `reload` for docker
  