diff --git a/flake.lock b/flake.lock
index c8d337c..c3e2c2d 100644
--- a/flake.lock
+++ b/flake.lock
@@ -179,6 +179,22 @@
         "type": "github"
       }
     },
+    "nixpkgs-stable": {
+      "locked": {
+        "lastModified": 1710420202,
+        "narHash": "sha256-MvFKESbq4rUWuaf2RKPNYENaSZEw/jaCLo2gU6oREcM=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "878ef7d9721bee9f81f8a80819f9211ad1f993da",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-23.11",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
     "nixpkgs_2": {
       "locked": {
         "lastModified": 1682134069,
@@ -201,6 +217,7 @@
         "nil": "nil",
         "nix-darwin": "nix-darwin",
         "nixpkgs": "nixpkgs",
+        "nixpkgs-stable": "nixpkgs-stable",
         "vscode-server": "vscode-server"
       }
     },
diff --git a/flake.nix b/flake.nix
index def5e8d..d2d53b5 100755
--- a/flake.nix
+++ b/flake.nix
@@ -14,6 +14,7 @@
 
   inputs = {
     nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+    nixpkgs-stable.url = "github:NixOS/nixpkgs/nixos-23.11";
     vscode-server.url = "github:nix-community/nixos-vscode-server";
 
     nil = {
@@ -44,6 +45,7 @@
   outputs =
     inputs@{ self
     , nixpkgs
+    , nixpkgs-stable
     , vscode-server
     , agenix
     , bootspec-secureboot
@@ -68,7 +70,12 @@
             { home-manager.extraSpecialArgs = specialArgs; }
             ./hosts/koi/configuration.nix
           ];
-          inherit specialArgs;
+          specialArgs = specialArgs // {
+            pkgs-stable = import nixpkgs-stable {
+              system = "x86_64-linux";
+              config = { allowUnfree = true; };
+            };
+          };
         };
       };
 
diff --git a/lib/qemu.nix b/lib/qemu.nix
index 43b4b00..d0faa4b 100644
--- a/lib/qemu.nix
+++ b/lib/qemu.nix
@@ -1,4 +1,4 @@
-{ pkgs, ... }@inputs:
+{ pkgs, pkgs-stable, ... }@inputs:
 
 let
   mkDiskFlags = disks: if (builtins.length disks == 0) then [ ] else
@@ -50,7 +50,7 @@ let
     , disks ? [ ]
     , usbs ? [ ]
     , extraFlags ? [ ]
-    , OVMF ? pkgs.OVMF.override {
+    , OVMF ? pkgs-stable.OVMF.override {
         secureBoot = true;
       }
     , enableTpm ? false