Nix and patching the Linux kernel whilst still tracking upstream packages: https://zeroindexed.com/nix-ejection-problem