diff --git a/nixos/boxes/thinky.nix b/nixos/boxes/thinky.nix
index dc01f7fe..bfbaee5f 100644
--- a/nixos/boxes/thinky.nix
+++ b/nixos/boxes/thinky.nix
@@ -3,6 +3,7 @@
 {
   networking.hostName = "thinky";
   boot = {
+    kernelPackages = pkgs.linuxPackages_latest_hardened;
     initrd.luks.devices = [
       {
         name = "root";