{ pkgs, ... }: {
  boot = {
    kernelPackages = pkgs.linuxPackages_6_8_hardened;
  };
}