{ config, ... }:
let
  inherit (config.systemConf) username;
in
{
  virtualisation.libvirtd.enable = true;
  users.extraUsers."${username}".extraGroups = [ "libvirtd" ];

  boot.extraModprobeConfig = ''
    options kvm_intel nested=1
    options kvm_intel emulate_invalid_guest_state=0
    options kvm ignore_msrs=1 report_ignored_msrs=0
  '';
}