{ config, lib, pkgs, ... }:
{
  boot.isContainer = true;
  networking.firewall.allowedTCPPorts = [ 22 ];
  services.openssh.enable = lib.mkDefault true;
  system.activationScripts.installInitScript = ''
    ln -fs $systemConfig/init /init
  '';
}