{
  pkgs,
  ...
}:
let
  kernel = pkgs.cachyosKernels.linuxPackages-cachyos-latest-lto-zen4;
  # kernel = pkgs.linuxPackages_latest;
in
{
  # Configure bootloader with lanzaboot and secureboot
  boot = {
    # Override kernel to latest
    kernelPackages = kernel;

    initrd = {
      supportedFilesystems = [ "bcachefs" ];
      # clevis = {
      #   enable = false;
      #   devices = {
      #     "/dev/disk/by-label/nas_pool".secretFile = "/etc/clevis/nas_pool.jwe";
      #   };
      # };
    };

    # Enable binfmt emulation for ARM
    binfmt.emulatedSystems = [ "aarch64-linux" ]; # --argstr system aarch64-linux
  };
}