WIP

nix/os/devices/srv0.home-ch.stefanjunker.de/boot.nix

@@ -4,5 +4,8 @@
 
 {
   boot.loader.grub.efiSupport = true;
+  boot.loader.grub.efiInstallAsRemovable = lib.mkForce true;
+  boot.loader.efi.canTouchEfiVariables = lib.mkForce false;
+
   boot.extraModulePackages = [ ];
 }

nix/os/devices/srv0.home-ch.stefanjunker.de/hw.nix

@@ -11,7 +11,13 @@ let
     "virtio_pci"
     "virtio_ring"
     "virtio"
+
     "scsi_mod"
+    "uas"
+    "usb_storage"
+
+    "xhci_hcd"
+    "xhci_pci"
   ];
 
 in
@@ -20,7 +26,7 @@ in
   hardware.opinionatedDisk = {
     enable = true;
     encrypted = false;
-    diskId = "ata-Crucial_CT750MX300SSD1_16161311C7A6";
+    diskId = "usb-JMicron_Generic_0123456789ABCDEF-0:0";
   };
 
   boot.initrd.availableKernelModules = stage1Modules;

nix/os/devices/steveej-rmvbl-sdep0/hw.nix

@@ -4,4 +4,5 @@
   # TASK: new device
   hardware.opinionatedDisk.diskId = "usb-SanDisk_Extreme_Pro_12345978EC62-0:0";
   hardware.opinionatedDisk.encrypted = true;
+  hardware.enableRedistributableFirmware = true;
 }