minimize kernel firmware on base systems

presets/nixos/desktopBase.nix

@@ -1,5 +1,8 @@
 {tree, ...}: {
   imports = with tree; [
+    profiles.wifiHardware
+
+    profiles.sound.base
     profiles.sound.pipewire
     profiles.gui.base
 

presets/nixos/laptop.nix

@@ -5,12 +5,16 @@
     profiles.connectivity.networkManager
     profiles.connectivity.iOS
 
+    profiles.wifiHardware
+
     profiles.tor
   ];
 
-  boot.loader.systemd-boot.editor = true;
+  boot.loader.systemd-boot = {
-  boot.loader.systemd-boot.memtest86.enable = true;
+    editor = true;
-  boot.loader.systemd-boot.netbootxyz.enable = true;
+    memtest86.enable = true;
+    netbootxyz.enable = true;
+  };
 
   services.fwupd.enable = true;
 

presets/nixos/wslBase.nix

@@ -1,5 +1,6 @@
 {tree, ...}: {
   imports = with tree; [
+    profiles.sound.base
     profiles.sound.pipewire
     profiles.gui.base
 

profiles/base/hardware.nix

@@ -8,10 +8,14 @@
   is_x86 = "${pkgs.system}" == "x86_64-linux";
 in {
   hardware = {
-    enableAllFirmware = true;
+    enableAllFirmware = false; # we include a more minimal subset for base
-    enableRedistributableFirmware = true;
+    enableRedistributableFirmware = false;
     wirelessRegulatoryDatabase = true;
 
+    firmware = with pkgs; [
+      linux-firmware
+    ];
+
     ksm.enable = true;
 
     i2c.enable = true;

profiles/sound/base.nix

@@ -0,0 +1,10 @@
+{
+  lib,
+  pkgs,
+  ...
+}: {
+  hardware.firmware = with pkgs; [
+    alsa-firmware
+    sof-firmware
+  ];
+}

profiles/wifiHardware.nix

@@ -0,0 +1,24 @@
+{
+  lib,
+  pkgs,
+  ...
+}: let
+  inherit (lib.lists) optional;
+in {
+  hardware = {
+    firmware = with pkgs;
+      [
+        # Realtek
+        rtl8192su-firmware
+        rt5677-firmware
+        rtl8761b-firmware
+        rtw88-firmware
+        # ZyDAS
+        zd1211fw
+        # Broadcom
+        b43Firmware_5_1_138
+        b43Firmware_6_30_163_46
+      ]
+      ++ optional pkgs.stdenv.hostPlatform.isAarch raspberrypiWirelessFirmware;
+  };
+}