{ pkgs, config, lib, ... }: { environment = { systemPackages = [ pkgs.qemu ]; }; systemd.tmpfiles.rules = [ "L+ /var/lib/qemu/firmware - - - - ${pkgs.qemu}/share/qemu/firmware" ]; boot.binfmt.emulatedSystems = [ "aarch64-linux" "riscv64-linux" ]; virtualisation.libvirtd = { enable = true; qemu = { package = pkgs.qemu_kvm; runAsRoot = true; swtpm.enable = true; ovmf = { enable = true; packages = [(pkgs.OVMF.override { secureBoot = true; tpmSupport = true; }).fd]; }; }; }; }