feat(firmware): use ucodenix to update firmwares

Author: kid

flake.lock

@@ -16,7 +16,10 @@
     nixos-generators.url = "github:nix-community/nixos-generators";
     nixos-generators.inputs.nixpkgs.follows = "nixpkgs";
 
+    ucodenix.url = "github:e-tho/ucodenix";
+
     nixos-hardware.url = "github:nixos/nixos-hardware";
+
     impermanence.url = "github:nix-community/impermanence";
 
     home-manager.url = "github:nix-community/home-manager";
@@ -108,6 +111,7 @@
         disko.nixosModules.disko
         impermanence.nixosModules.impermanence
         stylix.nixosModules.stylix
+        ucodenix.nixosModules.default
         # xremap.nixosModules.default
       ];
 

flake.nix

@@ -12,9 +12,12 @@ mkModule ./. false config { } (_cfg: {
     suites = {
       common = enabled;
     };
-    hardware.power = {
-      governor = "powersave";
-      energy_performance_preference = "balance_power";
+    hardware = {
+      firmware.enable = true;
+      power = {
+        governor = "powersave";
+        energy_performance_preference = "balance_power";
+      };
     };
     system = {
       boot = {

modules/nixos/archetypes/server/default.nix

@@ -0,0 +1,32 @@
+{
+  config,
+  lib,
+  namespace,
+  ...
+}:
+let
+  inherit (lib.${namespace}) mkModule;
+  inherit (config.facter) report reportPath;
+  virtualized = (report.virtualisation or null) != "none";
+in
+mkModule ./. false config { } (_cfg: {
+  services = {
+    fwupd = {
+      enable = !virtualized;
+      daemonSettings.EspUpdateLevel = config.boot.loader.efi.efiSysMountPoint;
+    };
+
+    ucodenix = {
+      enable = !virtualized;
+      cpuModelId = reportPath;
+    };
+  };
+
+  # NOTE: force disable when running via build-vm
+  virtualisation.vmVariant = {
+    services = {
+      fwupd.enable = false;
+      ucodenix.enable = false;
+    };
+  };
+})

modules/nixos/hardware/cpu/amd/default.nix

@@ -13,7 +13,10 @@ mkModule ./. false config { } (_cfg: {
   ${namespace} = {
     nix = mkDefault enabled;
     theme.stylix = mkDefault enabled;
-    hardware.power = mkDefault enabled;
+    hardware = {
+      firmware = mkDefault enabled;
+      power = mkDefault enabled;
+    };
   };
 
   environment = {

modules/nixos/hardware/firmware/default.nix

@@ -88,14 +88,4 @@ mkModule ./. false config
         tmpfsSize = "50%";
       };
     };
-
-    services.fwupd = {
-      # NOTE: need to be false for VMs
-      enable = true;
-      daemonSettings.EspUpdateLevel = config.boot.loader.efi.efiSysMountPoint;
-    };
-
-    virtualisation.vmVariant = {
-      services.fwupd.enable = false;
-    };
   })