| 7 Dec 2024 |
 hexa | 6 days newer than the release we have | 18:18:05 |
| hexa | * 11 days newer than the release we have | 18:18:35 |
| hexa | Microcode patches in microcode_amd_fam19h.bin:
Family=0x19 Model=0x01 Stepping=0x00: Patch=0x0a00107a Length=5568 bytes
+ Family=0x19 Model=0x7c Stepping=0x00: Patch=0x0a70c005 Length=5568 bytes
+ Family=0x19 Model=0x75 Stepping=0x02: Patch=0x0a705206 Length=5568 bytes
+ Family=0x19 Model=0x08 Stepping=0x02: Patch=0x0a00820c Length=5568 bytes
Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a101248 Length=5568 bytes
Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00215 Length=5568 bytes
+ Family=0x19 Model=0x44 Stepping=0x01: Patch=0x0a404107 Length=5568 bytes
+ Family=0x19 Model=0x78 Stepping=0x00: Patch=0x0a708007 Length=5568 bytes
+ Family=0x19 Model=0x21 Stepping=0x00: Patch=0x0a20102d Length=5568 bytes
+ Family=0x19 Model=0x74 Stepping=0x01: Patch=0x0a704107 Length=5568 bytes
Family=0x19 Model=0x01 Stepping=0x02: Patch=0x0a001238 Length=5568 bytes
Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a101148 Length=5568 bytes
+ Family=0x19 Model=0x61 Stepping=0x02: Patch=0x0a601209 Length=5568 bytes
Family=0x19 Model=0x01 Stepping=0x01: Patch=0x0a0011d5 Length=5568 bytes
Family=0x19 Model=0xa0 Stepping=0x01: Patch=0x0aa00116 Length=5568 bytes
+ Family=0x19 Model=0x18 Stepping=0x01: Patch=0x0a108108 Length=5568 bytes
+ Family=0x19 Model=0x50 Stepping=0x00: Patch=0x0a500011 Length=5568 bytes
+ Family=0x19 Model=0x21 Stepping=0x02: Patch=0x0a201210 Length=5568 bytes
| 18:18:51 |
| hexa | like the first microcode update for lots of cpus in that family | 18:19:01 |
 zzywysm | darn it, i wanted AMD to be as evil as Intel 😆 | 18:20:07 |
| hexa | nouuuu 😄 | 18:20:51 |
| hexa | release date for the cpu was 2020/11/05 | 18:21:30 |
| hexa | * release date for the cpu was 2020-11-05 | 18:23:39 |
 Winter | there's some repo we can pull ucode from for that, but it's unofficial | 18:41:24 |
| Winter | https://github.com/platomav/CPUMicrocodes | 18:42:01 |
| hexa | yeah, I found that as well, but it is not in any way official, apparently scraped from bios releases | 18:43:25 |
| hexa | mind you, these are very certainly signed, so I would expect that not to be an issue | 18:44:11 |
| Winter | yeah | 18:44:10 |
| Winter | repo has been going for almost a decade, if it was shipping malicious ucode i feel like we'd know ;) | 18:44:48 |
| hexa | ok, so let's find out if any other distros ships it first maybe? | 18:45:03 |
| Winter | i'm looking as we speak | 18:45:15 |
| Winter | Gentoo does | 18:45:48 |
| hexa | Arch does not | 18:46:25 |
| hexa | FreeBSD does not | 18:46:31 |
| hexa | and the Gentoo wiki says | 18:47:44 |
| hexa |
Microcode updates for AMD processors are provided by the sys-kernel/linux-firmware package.
| 18:47:45 |
| Winter | i was looking to see if they shipped anything from the repo, and they do for Intel | 18:48:26 |
| hexa | intel-microcode-20210608_p20210830.ebuild
intel-microcode-20220207_p20220207.ebuild
intel-microcode-20220419_p20220421.ebuild
intel-microcode-20220510_p20220508.ebuild
intel-microcode-20220809_p20220809.ebuild <-- in here
| 18:49:12 |
| hexa | only in a comment | 18:50:19 |
| hexa | # Package Maintenance instructions :
# 1. The ebuild is in the form of intel-microcode-<INTEL_SNAPSHOT>_p<COLLECTION_SNAPSHOT>.ebuild
# 2. The INTEL_SNAPSHOT upstream is located at: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files\
# 3. The COLLECTION_SNAPSHOT is created manually using the following steps:
# a. Clone the repository https://github.com/platomav/CPUMicrocodes
# b. Rename the Intel directory to intel-microcode-collection-<YYYYMMDD>
# c. From the CPUMicrocodes directory tar and xz compress the contents of intel-microcode-collection-<YYYYMMDD>:
# tar -cJf intel-microcode-collection-<YYYYMMDD>.tar.xz intel-microcode-collection-<YYYYMMDD>/
# d. This file can go in your devspace, add the URL to SRC_URI if it's not there
# https://dev.gentoo.org/~<dev nick>/dist/intel-microcode/intel-microcode-collection-${COLLECTION_SNAPSHOT}.tar.xz
| 18:50:36 |
| Winter | did you read it? the tarball is constructed from the repo :P | 18:51:21 |
| hexa | SRC_URI="https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/archive/microcode-${INTEL_SNAPSHOT}.tar.gz
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/raw/437f382b1be4412b9d03e2bbdcda46d83d581242/intel-ucode/06-4e-03 -> intel-ucode-sig_0x406e3-rev_0xd6.bin
https://dev.gentoo.org/~mpagano/dist/intel-microcode/intel-microcode-collection-${COLLECTION_SNAPSHOT}.tar.xz"
| 18:51:37 |
| hexa | so a repo at github.com:intel/Intel-Linux-Processor-Microcode-Data-Files has the collection? 🤔 | 18:51:56 |
| hexa | oh no, it is multiple files | 18:52:10 |
| Winter | yeah | 18:52:13 |
