{ options, lib, ... }: {
  config = lib.foldr lib.recursiveUpdate {} ([
    {
      security.sudo.extraConfig = ''
        Defaults lecture = never
      '';
    }
  ]
  ++ (lib.optional (options ? disko) {
    disko.devices.nodev = {
      "/" = {
        fsType = "tmpfs";
        mountOptions = [
          "mode=0755"
        ];
      };
    };
  })
  ++ (lib.optional (!(options ? disko)) {
    fileSystems."/" = {
      fsType = "tmpfs";
      options = [ "mode=0755" ];
    };
  }));
}