{ pkgs, ... }: { boot.kernelPackages = pkgs.linuxPackages_5_15_hardened; }