package/intel-microcode/intel-microcode.mk

################################################################################
#
# intel-microcode
#
################################################################################

INTEL_MICROCODE_VERSION = microcode-20190514a
INTEL_MICROCODE_SITE = $(call github,intel,Intel-Linux-Processor-Microcode-Data-Files,$(INTEL_MICROCODE_VERSION))
INTEL_MICROCODE_LICENSE = PROPRIETARY
INTEL_MICROCODE_LICENSE_FILES = license
INTEL_MICROCODE_REDISTRIBUTE = NO
INTEL_MICROCODE_INSTALL_IMAGES = YES

define INTEL_MICROCODE_INSTALL_IMAGES_CMDS
	mkdir -p $(BINARIES_DIR)/intel-ucode
	$(INSTALL) -m 0644 -t $(BINARIES_DIR)/intel-ucode \
		$(@D)/intel-ucode/*
endef

define INTEL_MICROCODE_INSTALL_TARGET_CMDS
	mkdir -p $(TARGET_DIR)/lib/firmware/intel-ucode
	$(INSTALL) -m 0644 -t $(TARGET_DIR)/lib/firmware/intel-ucode \
		$(@D)/intel-ucode/*
endef

$(eval $(generic-package))
intel-microcode: new package The intel microcode is a proprietary package which provides a data file used to correct processors errors. It was originally sent by Richard Braun <rbraun@sceen.net> [Peter: set _LICENSE_FILES] Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Cc: Richard Braun <rbraun@sceen.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2014-02-04 10:25:57 +01:00			`################################################################################`
			`#`
			`# intel-microcode`
			`#`
			`################################################################################`

package/intel-microcode: security bump to version 20190514a Includes MDS mitigation (RIDL, Fallout, Zombieload), INTEL-SA-00223 Move to the Intel github repo as this release is not yet available on downloadmirror.intel.com. Update license hash because of copyright year and DOS/UNIX newlines change. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2019-05-20 15:52:39 +02:00			`INTEL_MICROCODE_VERSION = microcode-20190514a`
			`INTEL_MICROCODE_SITE = $(call github,intel,Intel-Linux-Processor-Microcode-Data-Files,$(INTEL_MICROCODE_VERSION))`
intel-microcode: new package The intel microcode is a proprietary package which provides a data file used to correct processors errors. It was originally sent by Richard Braun <rbraun@sceen.net> [Peter: set _LICENSE_FILES] Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Cc: Richard Braun <rbraun@sceen.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2014-02-04 10:25:57 +01:00			`INTEL_MICROCODE_LICENSE = PROPRIETARY`
intel-microcode: bump to version 20180807a The big "intel-microcode.dat" text file is gone. Only binary files are provided, in the "intel-ucode" directory. Install it at /lib/firmware/, like linux-firmware does, and update the iucode-tool init script to use that path. We don't install the microcode under "intel-ucode-with-caveats", since it needs special commits in the Linux kernel (see "relnotes" for more information). Tested on an equipment with Intel C3000 processor. Signed-off-by: Carlos Santos <casantos@datacom.com.br> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2018-11-04 19:02:39 -02:00			`INTEL_MICROCODE_LICENSE_FILES = license`
intel-microcode: new package The intel microcode is a proprietary package which provides a data file used to correct processors errors. It was originally sent by Richard Braun <rbraun@sceen.net> [Peter: set _LICENSE_FILES] Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Cc: Richard Braun <rbraun@sceen.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2014-02-04 10:25:57 +01:00			`INTEL_MICROCODE_REDISTRIBUTE = NO`
package/intel-microcode: install into images for early loading support Microcode based security mitigation (E.G. MDS) requires that the microcode gets loaded very early. This can be handled by one of: - Concatenating (a subset of) the intel-microcode files and write to kernel/x86/microcode/GenuineIntel.bin in the initrd. Requires that the (first) initrd is external from the kernel and NOT compressed. - Build (a subset of) the intel-microcode files into the kernel using the CONFIG_EXTRA_FIRMWARE option. Install the microcode files into images to support these use cases (E.G. through a post-build script for the initrd, or by pointing CONFIG_EXTRA_FIRMWARE_DIR to ${BR_BINARIES_DIR}, similar to how we include the .cpio image inside the kernel). Notice that there may be licensing concerns when embedded non-GPL firmware in the kernel. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2019-05-21 00:17:10 +02:00			`INTEL_MICROCODE_INSTALL_IMAGES = YES`

			`define INTEL_MICROCODE_INSTALL_IMAGES_CMDS`
			`mkdir -p $(BINARIES_DIR)/intel-ucode`
			`$(INSTALL) -m 0644 -t $(BINARIES_DIR)/intel-ucode \`
			`$(@D)/intel-ucode/*`
			`endef`
intel-microcode: new package The intel microcode is a proprietary package which provides a data file used to correct processors errors. It was originally sent by Richard Braun <rbraun@sceen.net> [Peter: set _LICENSE_FILES] Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Cc: Richard Braun <rbraun@sceen.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2014-02-04 10:25:57 +01:00
			`define INTEL_MICROCODE_INSTALL_TARGET_CMDS`
package/intel-microcode: don't use install -D -t Commit 1f0beaf9a8e2b8f0bb6e53694b38d70900b9128f ("intel-microcode: bump to version 20180807a") introduced the use of "install -D -t" to the intel-microcode package. The intent is that install will create the full destination directory, including all components leading to it, before copying the files. Unfortunately, "install -D -t" is only supported since coreutils since v8.23. Several of the build systems we support have older coreutils versions, such as Debian 7, which uses coreutils 8.13. Ubuntu 14.04 also doesn't have a recent enough coreutils. So let's create the directory explicitly first, and then use a more regular "install -t". Fixes: http://autobuild.buildroot.net/results/aa44f9ff90f296f886be6309b3355ed075494fb2/ Note: the "gzip: stdout: Broken pipe" messages in those failures seem unrelated. We have been able to reproduce the installation failure without those "Broken pipe" issues, and we have not been able to reproduce those "Broken pipe" problems. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Tested-by: Carlos Santos <casantos@datacom.com.br> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> 2018-12-11 16:30:05 +01:00			`mkdir -p $(TARGET_DIR)/lib/firmware/intel-ucode`
			`$(INSTALL) -m 0644 -t $(TARGET_DIR)/lib/firmware/intel-ucode \`
intel-microcode: bump to version 20180807a The big "intel-microcode.dat" text file is gone. Only binary files are provided, in the "intel-ucode" directory. Install it at /lib/firmware/, like linux-firmware does, and update the iucode-tool init script to use that path. We don't install the microcode under "intel-ucode-with-caveats", since it needs special commits in the Linux kernel (see "relnotes" for more information). Tested on an equipment with Intel C3000 processor. Signed-off-by: Carlos Santos <casantos@datacom.com.br> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2018-11-04 19:02:39 -02:00			`$(@D)/intel-ucode/*`
intel-microcode: new package The intel microcode is a proprietary package which provides a data file used to correct processors errors. It was originally sent by Richard Braun <rbraun@sceen.net> [Peter: set _LICENSE_FILES] Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Cc: Richard Braun <rbraun@sceen.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2014-02-04 10:25:57 +01:00			`endef`

			`$(eval $(generic-package))`