{ config, pkgs, inputs, lib, ... } @ args:
{
  # incus admin init --minimal
  # incus image list images:
  # incus launch images:ubuntu/noble <name>
  # incus exec <name> -- /bin/bash
  # incus exec <name> -- adduser --shell /bin/bash --ingroup sudo ps
  # incus exec <name> -- su - ps -c 'tmux new-session -A -s main'
  virtualisation.incus.enable = true;
  virtualisation.incus.ui.enable = true;
  networking.firewall.trustedInterfaces = [ "incusbr0" ];
}