{
  lib,
  linux_latest,
}:

let
  inherit (lib.kernel) yes no unset;
  inherit (lib) mkForce;
  result = linux_latest.override {
    structuredExtraConfig = {
      BASE_SMALL = yes;
      DRM_VIRTIO_GPU = yes;
      EROFS_FS = yes;
      # TSI = yes;
      DAX = yes;
      FS_DAX = yes;
      FUSE_DAX = yes;
      OVERLAY_FS = yes;
      VIRTIO_BALLOON = yes;
      VIRTIO_BLK = yes;
      VIRTIO_CONSOLE = yes;
      VIRTIO_FS = yes;
      VIRTIO_MMIO = yes;
      VIRTIO_PCI = yes;
      VIRTIO = yes;
      FUSE_FS = yes;
      VSOCKETS = yes;
      NO_HZ_IDLE = mkForce yes;
      NO_HZ_FULL = mkForce unset;
      HZ_1000 = unset;
      HZ_250 = yes; # NixOS default: 1000

      # LSM = "lockdown,yama,loadpin,safesetid,integrity,bpf";

      EXT4_FS = yes;
      # EXT4_USE_FOR_EXT2 = yes;
      XFS_FS = yes;
      DEFAULT_SECURITY_APPARMOR = mkForce unset;

      XEN = mkForce unset;
      XEN_BACKEND = mkForce unset;
      XEN_BALLOON = mkForce unset;
      XEN_BALLOON_MEMORY_HOTPLUG = mkForce unset;
      XEN_DOM0 = mkForce unset;
      XEN_HAVE_PVMMU = mkForce unset;
      XEN_MCE_LOG = mkForce unset;
      XEN_PVH = mkForce unset;
      XEN_SAVE_RESTORE = mkForce unset;
      XEN_SYS_HYPERVISOR = mkForce unset;
      PCI_XEN = mkForce unset;
      POWER_RESET_GPIO = mkForce unset;
      POWER_RESET_GPIO_RESTART = mkForce unset;
      RCU_LAZY = mkForce unset;
      REISERFS_FS_POSIX_ACL = mkForce unset;
      REISERFS_FS_SECURITY = mkForce unset;
      REISERFS_FS_XATTR = mkForce unset;
      SWIOTLB_XEN = mkForce unset;
      SUSPEND = mkForce unset;
      PM = mkForce unset;
      HIBERNATION = mkForce unset;
      ACPI = mkForce unset;
      CPU_FREQ = mkForce unset;
      CPU_FREQ_DT = mkForce unset;
      INTEL_IDLE = mkForce unset;
      ISA_DMA_API = mkForce unset;
      IA32_EMULATION = mkForce unset;
      COMPAT = mkForce unset;
      COMPAT_32 = mkForce unset;
      KVM = mkForce unset;
      BLOCK_LEGACY_AUTOLOAD = mkForce unset;
      SWAP = mkForce unset;
      CMA = mkForce unset;
      FB = mkForce unset;
      FB_EFI = mkForce unset;
      FB_VESA = mkForce unset;
      SECURITY_APPARMOR = mkForce unset;

      VT = no;
      DRM_FBDEV_EMULATION = lib.mkForce no;
      FONTS = mkForce unset;
      FONT_8x8 = mkForce unset;
      FONT_TER16x32 = mkForce unset;
      FRAMEBUFFER_CONSOLE = mkForce unset;
      FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER = mkForce unset;
      FRAMEBUFFER_CONSOLE_DETECT_PRIMARY = mkForce unset;
      FRAMEBUFFER_CONSOLE_ROTATION = mkForce unset;
      RC_CORE = mkForce unset;
    };
  };
in
result // { __originalOverride = result.override; }