{ modulesPath, ... }: {
  imports = [ "${toString modulesPath}/virtualisation/lxc-container.nix" ];
  services.sshd.enable = true;
  systemd.suppressedSystemUnits = [
    "dev-mqueue.mount"
    "sys-kernel-debug.mount"
    "sys-fs-fuse-connections.mount"
  ];
  boot.isContainer = true;

  fileSystems."/run/keys" = { fsType = "tmpfs"; };

}