1{ pkgs, ... }:
 2{
 3  boot = {
 4    # extraModprobeConfig = ''
 5    #   options snd_hda_intel power_save=1
 6    # '';
 7
 8    blacklistedKernelModules = [
 9      "sierra_net" # sierra wireless modules
10      "cdc_mbim" # modem mobile broadband modules
11      "cdc_ncm" # similar
12    ];
13    kernelModules = [
14      "ahci" # sata controller, might not be needed
15      "nvme" # required for nvme disks
16      "thunderbolt" # required for thunderbolt (dock, …)
17      # from thinkpad x1 gen 9
18      "dm-mod"
19      "cryptd" # required for encryption
20      "xhci_pci" # usb controller related
21      "usb_storage" # usb storage related
22      "sd_mod" # block device related
23      "sdhci_pci" # block device related as well
24      "aesni-intel" # advanced encryption for intel
25      "kvm_intel"
26    ];
27
28    kernelParams = [
29      # Kernel GPU Savings Options (NOTE i915 chipset only)
30      # "i915.enable_rc6=1"
31      # "i915.enable_fbc=1"
32      # "i915.lvds_use_ssc=0"
33      # "drm.debug=0"
34      # "drm.vblankoffdelay=1"
35      "kvm_intel.nested=1"
36      "intel_iommu=on"
37    ];
38
39    kernelPackages = pkgs.linuxPackages_latest;
40  };
41}