{
  imports = [ ../common ../services/openssh.nix ../system/headless.nix ];

  boot.isContainer = true;
  boot.loader.initScript.enable = true;

  systemd.oomd.enable = false;
  systemd.services."serial-getty@ttyS0".enable = false;
  systemd.services."autovt@".enable = false;

  # https://github.com/NixOS/nixpkgs/issues/157918
  # https://github.com/NixOS/nixpkgs/issues/9735#issuecomment-500164017
  systemd.suppressedSystemUnits = [ "sys-kernel-debug.mount" ];
}