{
  lib,
  pkgs,
  modulesPath,
  namespace,
  ...
}:
{
  imports = [
    "${modulesPath}/installer/cd-dvd/installation-cd-graphical-calamares-plasma6.nix"
  ];

  ${namespace} = {
    desktop.plasma.enable = true;

    hardware.disko = {
      enable = true;
      filesystem = "btrfs";
    };

    impermanence = {
      enable = true;
    };

    network = {
      hostName = "nixos";
      ipv4 = {
        method = "auto";
        interface = "wlan0";
      };
      firewall = {
        enable = true;
        allowPing = true;
        allowedTCPPorts = [ 22 ];
      };
    };

    security.tpm.enable = true;

    user = {
      name = "nixos";
      password = "nixos";
    };
  };

  # The installer base module (installation-cd-graphical-calamares-plasma6.nix)
  # sets plasma-login-manager for auto-login; override with SDDM from the plasma
  # module disabled to avoid display-manager conflicts on the live ISO.
  services.displayManager.sddm.enable = lib.mkForce false;

  boot = {
    kernelPackages = lib.mkForce pkgs.linuxPackages_latest;
    supportedFilesystems.zfs = false;
  };

  services.openssh = {
    enable = lib.mkForce true;
    settings = {
      PermitRootLogin = lib.mkForce "yes";
      PasswordAuthentication = lib.mkForce false;
    };
  };

  home-manager.users.nixos.snowfallorg.user.name = "nixos";

  sops.defaultSopsFile = lib.mkForce "/dev/null";
  sops.validateSopsFiles = false;
}