{
  pkgs,
  username,
  lib,
  ...
}:
{
  # android virtualization
  virtualisation.waydroid = {
    enable = true;

    # https://github.com/NixOS/nixpkgs/pull/466473
    package = pkgs.waydroid-nftables;
  };

  programs.virt-manager.enable = true;

  users.groups.libvirtd.members = [ username ];

  virtualisation.libvirtd = {
    enable = true;

    package = pkgs.libvirt;
  };

  virtualisation.spiceUSBRedirection.enable = true;

  users.users."${username}".extraGroups = [ "libvirtd" ];

  # boot.kernelPatches = [
  #   {
  #     name = "undetected-kvm";
  #     patch = pkgs.fetchurl {
  #       url = "https://raw.githubusercontent.com/Scrut1ny/Hypervisor-Phantom/d09d66813570704e2b05440f290d6f9bdf2d26c7/Hypervisor-Phantom/patches/Kernel/linux-6.13-svm.patch";
  #       sha256 = "zz18xerutulLGzlHhnu26WCY8rVQXApyeoDtCjbejIk=";
  #     };
  #   }
  # ];
}