The note is not visible to the blocked user.
Also described in the manpage.
Not sure if this is optional: a9987de62c/src/libsystemd/sd-id128/id128-util.c (L205)
a9987de62c/src/libsystemd/sd-id128/id128-util.c (L205)
Why do we generate those in the same generator?
This can be dropped. Unused as far as I can see.
You can compare to config.clan.core.machine.diskId directly.
config.clan.core.machine.diskId
Does this really needs to be an option?
That looks wrong. I don't think we need lib.mkIf here.
lib.mkIf
I would also try to combine this with some sort of monitoring.