From a0d1053943a167308a3569abcb131744a9045139 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Mon, 26 Dec 2022 04:01:54 +0100
Subject: [PATCH] Turn off firmware for microvm

---
 config/default.nix  | 2 +-
 modules/microvm.nix | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/config/default.nix b/config/default.nix
index bbbc2646..478029b0 100644
--- a/config/default.nix
+++ b/config/default.nix
@@ -33,7 +33,7 @@ lib.mkMerge [
       ];
     };
 
-    hardware.enableRedistributableFirmware = true;
+    hardware.enableRedistributableFirmware = lib.mkDefault true;
 
     i18n = {
       defaultLocale = "en_US.UTF-8";
diff --git a/modules/microvm.nix b/modules/microvm.nix
index 9c8965cf..8a63c837 100644
--- a/modules/microvm.nix
+++ b/modules/microvm.nix
@@ -78,6 +78,8 @@ in
       "mitigations=off"
     ];
 
+    hardware.enableRedistributableFirmware = false;
+
     microvm = {
       hypervisor = lib.mkDefault "cloud-hypervisor";
       mem = lib.mkDefault 512;