diff --git a/hosts/vno1-gdrx/configuration.nix b/hosts/vno1-gdrx/configuration.nix
index b1e9ea9..d57c20b 100644
--- a/hosts/vno1-gdrx/configuration.nix
+++ b/hosts/vno1-gdrx/configuration.nix
@@ -1,4 +1,5 @@
 {
+  lib,
   pkgs,
   config,
   myData,
@@ -35,6 +36,7 @@ in
 
   boot = {
     kernelModules = [ "kvm-intel" ];
+    kernelPackages = lib.mkForce pkgs.linuxPackages_latest;
     initrd = {
       availableKernelModules = [
         "xhci_pci"
diff --git a/modules/profiles/desktop/default.nix b/modules/profiles/desktop/default.nix
index 9c8568d..7f4cd9e 100644
--- a/modules/profiles/desktop/default.nix
+++ b/modules/profiles/desktop/default.nix
@@ -127,163 +127,162 @@ in
 
     virtualisation.docker.enable = true;
 
-    environment.systemPackages =
-      with pkgs;
-      lib.mkMerge [
-        [
-          # packages defined here
-          nicer
-          tmuxbash
+    environment.systemPackages = with pkgs; [
+      # packages defined here
+      nicer
+      tmuxbash
 
-          f3 # flight-flash-fraud
-          iw
-          rr
-          gdb
-          vlc
-          sox
-          mpv
-          acpi
-          gimp
-          josm
-          qemu
-          zlib
-          ninja
-          xclip
-          pdftk
-          putty
-          scrot
-          tracy
-          cmake
-          kazam # alternative to gtk-recordMyDesktop
-          x11vnc
-          yt-dlp
-          skopeo
-          ffmpeg
-          tinycc
-          scrcpy
-          cheese
-          arandr
-          pandoc
-          evince
-          okular
-          motion
-          gthumb
-          calibre
-          gparted
-          scribus
-          gnumake
-          libwebp
-          librsvg
-          neomutt
-          wasmtime
-          picocom
-          inferno
-          libheif
-          mplayer
-          tcpflow
-          nautilus
-          smplayer
-          inkscape
-          chromium
-          hunspell
-          tigervnc
-          rtorrent
-          bsdgames
-          xss-lock
-          valgrind
-          musl.dev
-          audacity
-          graphviz
-          powertop
-          librecad
-          qgis-ltr # qgis gets recompiled, qgis-ltr is cached by hydra
-          tesseract
-          trayscale
-          espeak-ng
-          man-pages
-          rox-filer
-          distrobox
-          miniupnpc
-          v4l-utils
-          nerdfonts
-          diffoscope
-          alsa-utils
-          shellcheck
-          borgbackup
-          efibootmgr
-          virtualenv
-          imagemagick
-          ventoy-full
-          python3Full
-          ghostscript
-          libva-utils # intel video tests
-          pavucontrol
-          wirelesstools
-          poppler_utils
-          rkdeveloptool
-          squashfsTools
-          nixpkgs-review
-          aspellDicts.en
-          aspellDicts.lt
-          libreoffice-qt
-          graphicsmagick
-          magic-wormhole
-          signal-desktop
-          gnome-calendar
-          element-desktop
-          netsurf-browser
-          man-pages-posix
-          git-filter-repo
-          gnome-calculator
-          age-plugin-yubikey
-          hunspellDicts.en_US
-          python3Packages.ipython
-          samsung-unified-linux-driver
+      f3 # flight-flash-fraud
+      iw
+      rr
+      gdb
+      i7z
+      vlc
+      sox
+      mpv
+      acpi
+      gimp
+      josm
+      qemu
+      zlib
+      ninja
+      xclip
+      pdftk
+      putty
+      scrot
+      tracy
+      cmake
+      kazam # alternative to gtk-recordMyDesktop
+      x11vnc
+      yt-dlp
+      skopeo
+      ffmpeg
+      tinycc
+      scrcpy
+      cheese
+      arandr
+      pandoc
+      evince
+      okular
+      motion
+      gthumb
+      calibre
+      gparted
+      scribus
+      gnumake
+      libwebp
+      librsvg
+      neomutt
+      picocom
+      inferno
+      libheif
+      mplayer
+      tcpflow
+      cppcheck
+      wasmtime
+      undocker
+      nautilus
+      smplayer
+      inkscape
+      chromium
+      hunspell
+      tigervnc
+      rtorrent
+      bsdgames
+      xss-lock
+      valgrind
+      musl.dev
+      audacity
+      graphviz
+      powertop
+      librecad
+      qgis-ltr # qgis gets recompiled, qgis-ltr is cached by hydra
+      tesseract
+      trayscale
+      espeak-ng
+      man-pages
+      rox-filer
+      distrobox
+      miniupnpc
+      v4l-utils
+      nerdfonts
+      winetricks
+      diffoscope
+      alsa-utils
+      gcc_latest
+      shellcheck
+      borgbackup
+      efibootmgr
+      virtualenv
+      imagemagick
+      ventoy-full
+      ghostscript
+      libva-utils # intel video tests
+      pavucontrol
+      wirelesstools
+      poppler_utils
+      rkdeveloptool
+      squashfsTools
+      nixpkgs-review
+      joplin-desktop
+      aspellDicts.en
+      aspellDicts.lt
+      libreoffice-qt
+      graphicsmagick
+      magic-wormhole
+      signal-desktop
+      gnome-calendar
+      intel-gpu-tools
+      element-desktop
+      netsurf-browser
+      man-pages-posix
+      git-filter-repo
+      gnome-calculator
+      nvtopPackages.amd
+      age-plugin-yubikey
+      nvtopPackages.intel
+      hunspellDicts.en_US
+      wineWowPackages.full
+      samsung-unified-linux-driver
 
-          cppcheck
-          gcc_latest
+      xorg.xev
+      xorg.xeyes
+      xorg.lndir
+      xorg.xinit
 
-          xorg.xev
-          xorg.xeyes
-          xorg.lndir
-          xorg.xinit
-
-          (texlive.combine {
-            inherit (texlive)
-              scheme-medium
-              dvisvgm
-              dvipng
-              wrapfig
-              amsmath
-              ulem
-              hyperref
-              capt-of
-              lithuanian
-              hyphen-lithuanian
-              ;
-          })
+      (python3.withPackages (
+        ps: with ps; [
+          numpy
+          ipython
+          matplotlib
         ]
-        (lib.mkIf (pkgs.stdenv.hostPlatform.system == "x86_64-linux") [
-          i7z
-          nvtopPackages.amd
-          nvtopPackages.intel
-          joplin-desktop
-          intel-gpu-tools
+      ))
 
-          winetricks
-          wineWowPackages.full
-        ])
-        [ pkgs.undocker ]
-        (with llvmPackages_19; [
-          lld
-          llvm
-          llvm-manpages
-          clang
-          libclang
-          clang-manpages
-          clang-tools
-        ])
-      ];
+      (texlive.combine {
+        inherit (texlive)
+          scheme-medium
+          dvisvgm
+          dvipng
+          wrapfig
+          amsmath
+          ulem
+          hyperref
+          capt-of
+          lithuanian
+          hyphen-lithuanian
+          ;
+      })
+
+      (with llvmPackages_19; [
+        lld
+        llvm
+        llvm-manpages
+        clang
+        libclang
+        clang-manpages
+        clang-tools
+      ])
+    ];
 
     # https://discourse.nixos.org/t/nixos-rebuild-switch-upgrade-networkmanager-wait-online-service-failure/30746
     systemd.services.NetworkManager-wait-online.enable = false;