{ pkgs, ... }: {
  virtualisation.libvirtd.enable = true;
  networking.firewall.checkReversePath = "loose";
  environment.systemPackages = with pkgs; [ virt-manager ];
  # boot.zfs.devNodes = "/dev";
}
