question on microcode loading
Steffen Nurpmeso
steffen at sdaoden.eu
Wed Feb 8 11:57:09 PST 2023
Borislav Petkov wrote in
<Y+N4qE2CD9Vu6maw at zn.tnic>:
|On Wed, Feb 08, 2023 at 11:21:13AM +0800, RuiRui Yang wrote:
|>> There is only one question regarding CPU microcode loading: it
|>> seems the microcode is not "updated early" with kexec upon "boot".
|
|You lost me here: when you load a kernel and you have builtin microcode
|or have supplied it through initrd, it should update.
Ok. That was what i always hoped. I have never seen "microcode
updated early" for kexec-booted kernels.
(For all CPUs i have it does not make a difference regarding
/sys/devices/system/cpu/vulnerabilities/*, only SMT on/off changes
things; ie, CPU microcode is not newest but seems to offer
mitigations already; and likewise new microcode does not mitigate
the remaining vulnerabilities; and it unfortunately seems FINEIBT
is not backported to 6.1, but that off-topic.)
I only wanted to ask once, as the message comes so late, when all
CPUs are in use. (And the "updated early" _does_ come after
suspend/resume. And i am no kernel / hardware hacker.)
|>> This is a homegrown kernel, with built-in firmware
|
|Yeah, this is kinda confusing. When you kexec a kernel, it should be
|just the same as when you boot a k^ernel normally.
Very lucky for that kexec possibility, thanks.
I have not seen the "normal" case for long, at least not the log
(it goes nowhere), and the screen scrolls too fast. (And there is
no scrollback buffer, and i think i am
|If you can give simplified reproduction instructions, I could give it a
|try...
Well it is a simple kernel with enough built-in to boot stage1 so
i can run cryptsetup, and then (optionally) kexec-boot stage2
(same (maybe newer) kernel but on encrypted device). Formerly all
static, but now network/firewall, sound etc are modules.
Three small somewhat simple scripts with text-only config files.
But upon interest i can very well post them? (I like it! No
extra boot loader, no systemd here.)
Thank you. And ciao!
--steffen
|
|Der Kragenbaer, The moon bear,
|der holt sich munter he cheerfully and one by one
|einen nach dem anderen runter wa.ks himself off
|(By Robert Gernhardt)
More information about the kexec
mailing list