From patchwork Wed Jan 17 19:41:01 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Zoltan HERPAI X-Patchwork-Id: 862581 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=none (mailfrom) smtp.mailfrom=lists.infradead.org (client-ip=65.50.211.133; helo=bombadil.infradead.org; envelope-from=lede-dev-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org; receiver=) Authentication-Results: ozlabs.org; dkim=pass (2048-bit key; unprotected) header.d=lists.infradead.org header.i=@lists.infradead.org header.b="JwpxEhny"; dkim-atps=neutral Received: from bombadil.infradead.org (bombadil.infradead.org [65.50.211.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 3zMHYP2kcQz9t62 for ; Thu, 18 Jan 2018 06:42:33 +1100 (AEDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20170209; h=Sender: Content-Transfer-Encoding:Content-Type:MIME-Version:Cc:List-Subscribe: List-Help:List-Post:List-Archive:List-Unsubscribe:List-Id:Subject:Message-Id: Date:To:From:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References: List-Owner; bh=NrPbThEpnD38iuaoR1myox5TYCiwhDeAjCBstxsXIww=; b=JwpxEhnyktDXaA ZNSY9M8xyHw40zFLScFG3jTQs8N7DZBfHHGRnMKXoOYczbF2udSoi3bRUIZLKZGPUKSO4Kg7Mfsya MuI3yq5uedsDeBnKjF1H/FRz5L6dJn7mVvZFljhGN8+RFF9pVtJ4NDtPBPfX/abYeBDrSntg6UWv0 zcTYmWD12vh4wsSL1LhxHPpkrfqvjEVU+qKLsw4WrrwuQP0sZhYzGv2l3r9b+L7yLJjv70fueOtCN gFgNo4vN272lAzbopUxdUqpSziMFxWgKLk0KgfgWrLw0VrCBMUfOl1JtoglC4+AJv0bq+0W6q/iNI yd8VLI1YqKCW7FsnOctw==; Received: from localhost ([127.0.0.1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.89 #1 (Red Hat Linux)) id 1ebtbS-00048R-9j; Wed, 17 Jan 2018 19:42:30 +0000 Received: from trabant.uid0.hu ([81.0.124.200]) by bombadil.infradead.org with esmtps (Exim 4.89 #1 (Red Hat Linux)) id 1ebtap-000335-Fh for lede-dev@lists.infradead.org; Wed, 17 Jan 2018 19:41:54 +0000 Received: from wigyori by trabant.uid0.hu with local (Exim 4.84_2 #1 (Debian)) id 1ebtaK-0000S1-1U from ; Wed, 17 Jan 2018 20:41:20 +0100 From: Zoltan HERPAI To: openwrt-devel@lists.openwrt.org Date: Wed, 17 Jan 2018 20:41:01 +0100 Message-Id: <1516218066-1622-1-git-send-email-wigyori@uid0.hu> X-Mailer: git-send-email 1.9.1 X-Spam-Note: CRM114 invocation failed X-Spam-Score: -1.9 (-) X-Spam-Report: SpamAssassin version 3.4.1 on bombadil.infradead.org summary: Content analysis details: (-1.9 points) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [81.0.124.200 listed in list.dnswl.org] -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] Subject: [LEDE-DEV] [PATCH 0/5] x86: add support for microcode update X-BeenThere: lede-dev@lists.infradead.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: lede-dev@lists.infradead.org, Zoltan HERPAI MIME-Version: 1.0 Sender: "Lede-dev" Errors-To: lede-dev-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org Hi, This series will add support for microcode update on x86 targets, in light of the recent security issues. While other distributions use an early initramfs approach to update the microcode as early as possible, in OpenWrt the earliest place where we can do this is preinit. The Intel microcode package is using the source package by Debian, the AMD microcode package is downloaded from the linux-firmware git repository. This was tested on various Intel-based desktops with ancient BIOSes. Once the series is merged into trunk, this could/should be backported into 17.01 and 15.05 without too much hassle. Thanks, Zoltan H Zoltan HERPAI (5): x86: enable microcode loading for Intel and AMD firmware: add microcode package for AMD64 tools: add iucode-tool firmware: add microcode package for Intel packages: intel-microcode: update to 20180108 package/firmware/intel-microcode/Makefile | 51 ++++++++++++++++++++++ .../intel-microcode/files/intel-microcode.preinit | 8 ++++ package/firmware/linux-firmware/x86.mk | 9 ++++ package/system/iucode-tool/Makefile | 47 ++++++++++++++++++++ target/linux/x86/config-4.14 | 5 ++- target/linux/x86/config-4.9 | 5 ++- 6 files changed, 123 insertions(+), 2 deletions(-) create mode 100644 package/firmware/intel-microcode/Makefile create mode 100644 package/firmware/intel-microcode/files/intel-microcode.preinit create mode 100644 package/firmware/linux-firmware/x86.mk create mode 100644 package/system/iucode-tool/Makefile Reviewed-by: Florian Fainelli