{ ... }: {
  services.fwupd.enable = false; # Note: run inside a nix-shell
  hardware.enableAllFirmware = true;
}