Enable KVM libvirt for Arch VM

configuration.nix

@@ -498,7 +498,7 @@
   users.users.harley = {
     isNormalUser = true;
     shell = lib.mkForce pkgs.zsh;
-    extraGroups = [ "wheel" "networkmanager" "docker" "input" "uinput" "video"];
+    extraGroups = [ "wheel" "networkmanager" "docker" "libvirtd" "input" "uinput" "video" ];
     openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH4OAJ8iC7CQIcedVbU86xgoL4YkMWAG9bU6aj9v4Skb harley@utumno" ];
   };
 
@@ -534,6 +534,9 @@
     cage guake kitty android-tools patool pv ghostscript imagemagick nodejs go deno socat
     fzf smartmontools shadow ripgrep fd jq tree qdirstat uv
 
+    ## Virtualization (KVM/QEMU)
+    qemu libvirt virt-manager virt-viewer OVMF swtpm parted dosfstools btrfs-progs squashfsTools
+
     firefox
     obsidian
 
@@ -726,6 +729,15 @@
     };
   };
 
+  ## KVM/QEMU virtualization
+  virtualisation.libvirtd = {
+    enable = true;
+    qemu = {
+      swtpm.enable = true;
+      runAsRoot = true;
+    };
+  };
+
   ## Sunshine
   ## Restrict Avahi to LAN + loopback so Moonlight/iPad does not resolve utumno.local
   ## to Docker bridge addresses (172.x.x.x), which makes Sunshine discovery connect to