generate partition tables in nix, add open-system maintenance function
ZFS, encryption (keys, keystore, LUKS), bootFS, ephemeral root (tmpfs, ZFS, F2FS, ...), testing in qemu, options & debugging, ... and many small things
make system's $out/config optional, don't use patches by default