silly uki image with the systemd-ukify tooling

flake.nix

@@ -46,6 +46,7 @@
 
             # Copy kernel modules
             cp -Pr ${self.packages.${system}.kernel.kernel}/lib/modules ./usr/lib/
+            find usr/lib/modules -type d -exec chmod 755 {} \;
 
             mkdir -p dev proc sys tmp root
             ln -sf usr/bin bin

kernel/generic.config

@@ -1397,14 +1397,6 @@ CONFIG_MMU=y
 CONFIG_MODPROBE_PATH="/sbin/modprobe"
 CONFIG_MODULE_COMPRESS_ZSTD=y
 CONFIG_MODULE_FORCE_UNLOAD=y
-CONFIG_MODULE_SIG_ALL=y
-CONFIG_MODULE_SIG_FORCE=y
-CONFIG_MODULE_SIG_FORMAT=y
-CONFIG_MODULE_SIG_HASH="sha512"
-CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
-CONFIG_MODULE_SIG_KEY_TYPE_RSA=y
-CONFIG_MODULE_SIG_SHA512=y
-CONFIG_MODULE_SIG=y
 CONFIG_MODULE_SRCVERSION_ALL=y
 CONFIG_MODULE_UNLOAD=y
 CONFIG_MODULES_TREE_LOOKUP=y