* add optional nonfree-firmware dependency * drop downstream kernel [ci:skip-build]: already built successfully in CI