From 775a2ee07946900a747f51b5d6a7e2e7eb45ec6c Mon Sep 17 00:00:00 2001
From: Peder Bergebakken Sundt <pbsds@hotmail.com>
Date: Wed, 20 May 2026 15:18:53 +0200
Subject: [PATCH] laksjdalksjd

---
 hardware/gpu/cuda-common.nix       | 15 +++++++++++++++
 hosts/nixos/garp/configuration.nix |  1 -
 profiles/base/default.nix          |  9 ++++++---
 profiles/base/vm-variant.nix       |  1 +
 4 files changed, 22 insertions(+), 4 deletions(-)

diff --git a/hardware/gpu/cuda-common.nix b/hardware/gpu/cuda-common.nix
index 075745f..80ac6c3 100644
--- a/hardware/gpu/cuda-common.nix
+++ b/hardware/gpu/cuda-common.nix
@@ -43,6 +43,21 @@ lib.mkMerge [
         ncclSupport = false;
       };
     });
+
+    # openusd is too slow to build
+    opensubdiv = pkgs.opensubdiv.override {
+      cudaSupport = false;
+    };
+
+    # pythonPackagesExtensions = pkgs.pythonPackagesExtensions ++ [
+    #    (
+    #      ps-final: ps-prev: {
+    #        openusd = ps-prev.openusd.overridePythonAttrs (old: {
+    #          ...
+    #        });
+    #      }
+    #    )
+    #  ];
   };
 
 }
diff --git a/hosts/nixos/garp/configuration.nix b/hosts/nixos/garp/configuration.nix
index 96f0997..1d2ecc2 100644
--- a/hosts/nixos/garp/configuration.nix
+++ b/hosts/nixos/garp/configuration.nix
@@ -62,7 +62,6 @@
   # zramSwap.enable = true;
   # zramSwap.memoryPercent = 20;
 
-
   # TODO: remove? Move?
   programs.dconf.enable = true;
 }
diff --git a/profiles/base/default.nix b/profiles/base/default.nix
index d37206a..b0c2b63 100644
--- a/profiles/base/default.nix
+++ b/profiles/base/default.nix
@@ -85,9 +85,12 @@
   networking.firewall.logRefusedConnections = false; # too spammy, rotates dmesg too quickly
 
   # nixos-rebuild switch --specialisation no-firewall
-  specialisation.no-firewall.configuration = {
-    networking.firewall.enable = false;
-    services.fail2ban.enable = false; # requires firewall
+
+  specialisation = lib.mkIf (config.networking.firewall.enable && !config.virtualisation.isVmVariant) {
+    no-firewall.configuration = {
+      networking.firewall.enable = false;
+      services.fail2ban.enable = false; # requires firewall
+    };
   };
 
   security.sudo.execWheelOnly = true;
diff --git a/profiles/base/vm-variant.nix b/profiles/base/vm-variant.nix
index 3c70501..ce01390 100644
--- a/profiles/base/vm-variant.nix
+++ b/profiles/base/vm-variant.nix
@@ -4,6 +4,7 @@
     type = lib.types.bool;
     default = false;
   };
+  # to be used with 'lib.mkIf (!config.virtualisation.isVmVariant)'
   config.virtualisation.vmVariant = {
     virtualisation.isVmVariant = true;
   };