Bug 11590 - Package Intel/AMD microcode and make the system load it at boot time
Summary: Package Intel/AMD microcode and make the system load it at boot time
Status: CLOSED FIXED
Alias: None
Product: IPFire
Classification: Unclassified
Component: --- (show other bugs)
Version: 2
Hardware: unspecified Unspecified
: Will affect all users Major Usability
Assignee: Jonatan Schlag
QA Contact:
URL:
Keywords: Security
Depends on:
Blocks: 11591 CORE121
  Show dependency treegraph
 
Reported: 2018-01-13 13:46 UTC by Michael Tremer
Modified: 2019-06-24 10:59 UTC (History)
2 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Tremer 2018-01-13 13:46:32 UTC
https://pagure.io/microcode_ctl/tree/master

Please package this and check if dracut can load this automatically at boot time.
Comment 2 Jonatan Schlag 2018-01-13 20:37:13 UTC
Hi,

just some updates what I have achieved so far:

- the microcode for Intel is packed and will be shipped with the core
- dracut is configured in a way that the microcode is loaded early in the boot process, the microcode itself is built into our initrd file
- I not sure we need to change some kernel options, but I build a test version in the moment

Test results:

I just copied the firmware to an installation and regenerated the initframe with the needed option and the microcode was reported to be at version 0x28. On the same machine using Debian the microcode is 0x23.
Comment 3 Jonatan Schlag 2018-01-15 20:06:45 UTC
To ship am updated microcode, for which we have no official source we need this patch:
https://github.com/torvalds/linux/commit/f4e9b7af0cd58dd039a0fb2cd67d57cea4889abf
Comment 4 Michael Tremer 2018-04-03 00:05:49 UTC
Intel has re-released those microcodes. Would you prepare patches to add them again?
Comment 5 Michael Tremer 2018-05-18 16:15:06 UTC
Reminder to submit this patch again
Comment 7 Peter Müller 2018-08-06 22:20:37 UTC
Core 122 has been shipped; this is fixed.
Comment 8 Arne.F 2018-08-07 08:47:45 UTC
The package is not up to date in core122