diff --git a/home/common/default.nix b/home/common/default.nix
index aff627c..ca6a503 100644
--- a/home/common/default.nix
+++ b/home/common/default.nix
@@ -16,6 +16,7 @@
       outputs.overlays.modifications
       outputs.overlays.stable-packages
       outputs.overlays.pinned-packages
+      outputs.overlays.locked-packages
       outputs.overlays.master-packages
 
       # You can also add overlays exported from other flakes:
diff --git a/hosts/common/default.nix b/hosts/common/default.nix
index e5327e8..df05575 100644
--- a/hosts/common/default.nix
+++ b/hosts/common/default.nix
@@ -29,6 +29,7 @@
       outputs.overlays.modifications
       outputs.overlays.stable-packages
       outputs.overlays.pinned-packages
+      outputs.overlays.locked-packages
       outputs.overlays.master-packages
 
       # You can also add overlays exported from other flakes:
diff --git a/hosts/common/extraServices/virtualisation.nix b/hosts/common/extraServices/virtualisation.nix
index 15e9d65..88aaa40 100644
--- a/hosts/common/extraServices/virtualisation.nix
+++ b/hosts/common/extraServices/virtualisation.nix
@@ -20,7 +20,8 @@ in {
           ovmf = {
             enable = true;
             packages = [
-              (pkgs.OVMF.override {
+              pkgs.locked.OVMFFull.fd
+              (pkgs.locked.OVMF.override {
                 secureBoot = true;
                 tpmSupport = true;
               })
diff --git a/overlays/default.nix b/overlays/default.nix
index 2be0fdf..d78dd8b 100644
--- a/overlays/default.nix
+++ b/overlays/default.nix
@@ -41,6 +41,13 @@
     };
   };
 
+  locked-packages = final: _prev: {
+    pinned = import inputs.nixpkgs-locked {
+      system = final.system;
+      config.allowUnfree = true;
+    };
+  };
+
   master-packages = final: _prev: {
     master = import inputs.nixpkgs-master {
       system = final.system;