{
  pkgs,
  config,
  lib,
  ...
}: {
  # support for mounting windaube partitions
  boot.supportedFilesystems = ["ntfs"];
  boot.loader.efi.canTouchEfiVariables = true;

  # tmp, will be replaced by lanzaboot
  boot.loader.systemd-boot.enable = true;

  # clean /tmp at each boot
  boot.tmp.cleanOnBoot = true;

  # use latest kernel
  boot.kernelPackages = pkgs.linuxPackages_latest;

  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;

  # imports = [
  #   ./lanzaboot.nix
  # ];

  boot.initrd.availableKernelModules = ["xhci_pci" "thunderbolt" "nvme" "usb_storage" "sd_mod"];
  boot.initrd.kernelModules = [""];
  boot.kernelModules = ["kvm-intel"];
  boot.extraModulePackages = [];
}