From d10e04e07cd0b4c80da5a2c87c56be8dadbb32b7 Mon Sep 17 00:00:00 2001
From: s0me1newithhand7s <git+me@hand7s.org>
Date: Sun, 3 May 2026 15:31:21 +0300
Subject: [PATCH] kyra(hardening): tmpfs rootfs init

Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
---
 kyra/disko/nodev.nix | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 kyra/disko/nodev.nix

diff --git a/kyra/disko/nodev.nix b/kyra/disko/nodev.nix
new file mode 100644
index 0000000..31a3b68
--- /dev/null
+++ b/kyra/disko/nodev.nix
@@ -0,0 +1,18 @@
+_: {
+  disko = {
+    devices = {
+      nodev = {
+        "/" = {
+          fsType = "tmpfs";
+          mountOptions = [
+            "size=1G"
+            "mode=755"
+            "nodev"
+            "nosuid"
+            "rw"
+          ];
+        };
+      };
+    };
+  };
+}