[LEDE-DEV] [OpenWrt-Devel] [PATCH 0/5] x86: add support for microcode update

[John Crispin]

On 17/01/18 20:41, Zoltan HERPAI wrote:
> Hi,
>
> This series will add support for microcode update on x86 targets,
> in light of the recent security issues.
>
> While other distributions use an early initramfs approach to update
> the microcode as early as possible, in OpenWrt the earliest place
> where we can do this is preinit.

due to the importance of this i would propose, that we add a dedicated 
step inside procd that calls right before preinit.

     John

>
> The Intel microcode package is using the source package by Debian,
> the AMD microcode package is downloaded from the linux-firmware
> git repository.
>
> This was tested on various Intel-based desktops with ancient BIOSes.
>
> Once the series is merged into trunk, this could/should be backported
> into 17.01 and 15.05 without too much hassle.
>
> Thanks,
> Zoltan H
>
>
> Zoltan HERPAI (5):
>    x86: enable microcode loading for Intel and AMD
>    firmware: add microcode package for AMD64
>    tools: add iucode-tool
>    firmware: add microcode package for Intel
>    packages: intel-microcode: update to 20180108
>
>   package/firmware/intel-microcode/Makefile          | 51 ++++++++++++++++++++++
>   .../intel-microcode/files/intel-microcode.preinit  |  8 ++++
>   package/firmware/linux-firmware/x86.mk             |  9 ++++
>   package/system/iucode-tool/Makefile                | 47 ++++++++++++++++++++
>   target/linux/x86/config-4.14                       |  5 ++-
>   target/linux/x86/config-4.9                        |  5 ++-
>   6 files changed, 123 insertions(+), 2 deletions(-)
>   create mode 100644 package/firmware/intel-microcode/Makefile
>   create mode 100644 package/firmware/intel-microcode/files/intel-microcode.preinit
>   create mode 100644 package/firmware/linux-firmware/x86.mk
>   create mode 100644 package/system/iucode-tool/Makefile
>