boot changes

common.nix

@@ -7,7 +7,13 @@ all: {
 }: {
   imports = [all];
 
-  config = {
+  boot.loader = {
+    efi.canTouchEfiVariables = lib.mkDefault true;
+    systemd-boot.editor = lib.mkDefault false;
+    # having a user makes sure `superusers=""` gets set, which prevents editing like the above
+    grub.users.grubby = {};
+  };
+
   services.haveged.enable = lib.mkDefault true;
 
   security.rtkit.enable = lib.mkDefault true;
@@ -89,5 +95,4 @@ all: {
 
   programs.fish.enable = lib.mkDefault true;
   users.defaultUserShell = lib.mkOverride 900 pkgs.fish;
-  };
 }

modules/workstation.nix

@@ -23,12 +23,34 @@ in {
   };
 
   config = mkIf cfg.enable {
-    boot.plymouth.enable = lib.mkDefault true;
-    # as soon as this stops breaking _all_ my machines
-    boot.initrd.systemd.enable = lib.mkDefault false;
     # until https://github.com/NixOS/nixpkgs/pull/199784 is merged
     systemd.services.plymouth-start.restartIfChanged = false;
 
+    console = {
+      earlySetup = lib.mkDefault false;
+    };
+
+    boot = {
+      consoleLogLevel = lib.mkDefault 0;
+      initrd.verbose = lib.mkDefault false;
+      plymouth.enable = lib.mkDefault true;
+      kernelParams = [
+        "quiet"
+        "loglevel=3"
+        "rd.systemd.show_status=no"
+        "rd.udev.log_level=3"
+        "udev.log_priority=3"
+        "vt.global_cursor_default=0"
+      ];
+
+      loader.timeout = 0;
+
+      kernel.sysctl = {
+        # lol anti-cheat
+        "abi.vsyscall32" = lib.mkDefault 0;
+      };
+    };
+
     services.avahi = {
       enable = lib.mkDefault true;
       nssmdns = lib.mkDefault true;
@@ -276,13 +298,6 @@ in {
     services.dbus.enable = lib.mkDefault true;
     services.dbus.packages = with pkgs; [dconf];
 
-    boot.kernel.sysctl = {
-      # better default swap
-      "vm.swappiness" = lib.mkDefault 45;
-      # lol anti-cheat
-      "abi.vsyscall32" = 0;
-    };
-
     # self explanatory
     fuckingprint.enable = lib.mkDefault true;