{ options, lib, ... }: {
  config = lib.mkMerge
    [ (lib.mkIf (options ? disko) {
        disko.devices.nodev = {
          "/" = {
            fsType = "tmpfs";
            mountOptions = [
              "mode=0755"
            ];
          };
        };
      })
      (lib.mkIf (!(options ? disko)) {
        fileSystems."/" = {
          fsType = "tmpfs";
          options = [ "mode=0755" ];
        };
      })
      {
        security.sudo.extraConfig = ''
          Defaults lecture = never
        '';
      }
    ];
}