system/nixos/shared/kernel.nix

{ inputs, pkgs, ... }:

{
  imports = [
    "${inputs.nixpkgs-unstable}/nixos/modules/profiles/hardened.nix"
  ];

  boot.kernelPackages = pkgs.unstable.linuxPackages_6_6_hardened;
  # Fix for GLIBC errors due to 'scudo' from hardened profile.
  # https://github.com/NixOS/nix/issues/6563
  environment.memoryAllocator.provider = "libc";
}