config/default.nix

@@ -33,7 +33,7 @@ lib.mkMerge [
       ];
     };
 
-    hardware.enableRedistributableFirmware = true;
+    hardware.enableRedistributableFirmware = lib.mkDefault true;
 
     i18n = {
       defaultLocale = "en_US.UTF-8";

modules/microvm.nix

@@ -78,6 +78,8 @@ in
       "mitigations=off"
     ];
 
+    hardware.enableRedistributableFirmware = false;
+
     microvm = {
       hypervisor = lib.mkDefault "cloud-hypervisor";
       mem = lib.mkDefault 512;