NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
ac713c230a
kumquat-buildroot/package/intel-microcode/intel-microcode.mk

31 lines
971 B
Makefile
Raw Normal View History

intel-microcode: new package The intel microcode is a proprietary package which provides a data file used to correct processors errors. It was originally sent by Richard Braun <rbraun@sceen.net> [Peter: set _LICENSE_FILES] Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Cc: Richard Braun <rbraun@sceen.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-02-04 10:25:57 +01:00
################################################################################
#
# intel-microcode
#
################################################################################
package/intel-microcode: security bump to version 20191112 Contains mitigations for the following security vulnerabilities: - CVE-2019-11135: Intel TSX Asynchronous Abort vulnerability: https://software.intel.com/security-software-guidance/insights/deep-dive-intel-transactional-synchronization-extensions-intel-tsx-asynchronous-abort - CVE-2019-11139: Intel Xeon Scalable Processors Voltage Setting Modulation vulnerability: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00271.html Release notes: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20191112 Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-11-13 17:18:49 +01:00
INTEL_MICROCODE_VERSION = 20191112
package: remove non-conventional prefix/suffix from github-fetched packages On Github, a large number of projects name their tag <some-prefix>-0.3-<some-suffix> (i.e release-3.0, poco-0.1-release, etc.). In fact majority of the cased adressed in this commit concerns prefixes. In most packages, we encode those prefix/suffix in the <pkg>_VERSION variable. The problem with this approach is that when used in conjunction with release-monitoring.org, it doesn't work very well, because release-monitoring.org has the concept of "version prefix/suffix" and using that they drop the prefix/suffix to really get the version. For example on https://release-monitoring.org/project/5418/ the latest release of "poco" is "1.8.1", not "poco-1.8.1-release". Therefore, a number of packages in Buildroot have a version that doesn't match with release-monitoring.org. Since really the version number of 1.8.1, is makes sense to update our packages to drop these prefixes/suffixes. This commit addreses the case of github-fetched packages with non-conventional prefixes/suffixes. Note that these changes modify the name of the files stored in DL_DIR, which means that this will force a re-download of those package source code for all users, and requires a change to their .hash file. Signed-off-by: Victor Huesca <victor.huesca@bootlin.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2019-06-12 08:42:08 +02:00
INTEL_MICROCODE_SITE = $(call github,intel,Intel-Linux-Processor-Microcode-Data-Files,microcode-$(INTEL_MICROCODE_VERSION))
intel-microcode: new package The intel microcode is a proprietary package which provides a data file used to correct processors errors. It was originally sent by Richard Braun <rbraun@sceen.net> [Peter: set _LICENSE_FILES] Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Cc: Richard Braun <rbraun@sceen.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-02-04 10:25:57 +01:00
INTEL_MICROCODE_LICENSE = PROPRIETARY
intel-microcode: bump to version 20180807a The big "intel-microcode.dat" text file is gone. Only binary files are provided, in the "intel-ucode" directory. Install it at /lib/firmware/, like linux-firmware does, and update the iucode-tool init script to use that path. We don't install the microcode under "intel-ucode-with-caveats", since it needs special commits in the Linux kernel (see "relnotes" for more information). Tested on an equipment with Intel C3000 processor. Signed-off-by: Carlos Santos <casantos@datacom.com.br> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-11-04 22:02:39 +01:00
INTEL_MICROCODE_LICENSE_FILES = license
intel-microcode: new package The intel microcode is a proprietary package which provides a data file used to correct processors errors. It was originally sent by Richard Braun <rbraun@sceen.net> [Peter: set _LICENSE_FILES] Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Cc: Richard Braun <rbraun@sceen.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-02-04 10:25:57 +01:00
INTEL_MICROCODE_REDISTRIBUTE = NO
package/intel-microcode: install into images for early loading support Microcode based security mitigation (E.G. MDS) requires that the microcode gets loaded very early. This can be handled by one of: - Concatenating (a subset of) the intel-microcode files and write to kernel/x86/microcode/GenuineIntel.bin in the initrd. Requires that the (first) initrd is external from the kernel and NOT compressed. - Build (a subset of) the intel-microcode files into the kernel using the CONFIG_EXTRA_FIRMWARE option. Install the microcode files into images to support these use cases (E.G. through a post-build script for the initrd, or by pointing CONFIG_EXTRA_FIRMWARE_DIR to ${BR_BINARIES_DIR}, similar to how we include the .cpio image inside the kernel). Notice that there may be licensing concerns when embedded non-GPL firmware in the kernel. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-05-21 00:17:10 +02:00
INTEL_MICROCODE_INSTALL_IMAGES = YES
define INTEL_MICROCODE_INSTALL_IMAGES_CMDS
mkdir -p $(BINARIES_DIR)/intel-ucode
$(INSTALL) -m 0644 -t $(BINARIES_DIR)/intel-ucode \
$(@D)/intel-ucode/*
endef
intel-microcode: new package The intel microcode is a proprietary package which provides a data file used to correct processors errors. It was originally sent by Richard Braun <rbraun@sceen.net> [Peter: set _LICENSE_FILES] Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Cc: Richard Braun <rbraun@sceen.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-02-04 10:25:57 +01:00
package/intel-microcode: make target installation optional For early microcode loading, there is no need to install the individual microcode files to /lib/firmware - So make that optional. Let the option default to y for backwards compatibility, and select it from iucode-tool as the init script relies on the /lib/firmware files. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-05-21 00:17:12 +02:00
ifeq ($(BR2_PACKAGE_INTEL_MICROCODE_INSTALL_TARGET),y)
intel-microcode: new package The intel microcode is a proprietary package which provides a data file used to correct processors errors. It was originally sent by Richard Braun <rbraun@sceen.net> [Peter: set _LICENSE_FILES] Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Cc: Richard Braun <rbraun@sceen.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-02-04 10:25:57 +01:00
define INTEL_MICROCODE_INSTALL_TARGET_CMDS
package/intel-microcode: don't use install -D -t Commit 1f0beaf9a8e2b8f0bb6e53694b38d70900b9128f ("intel-microcode: bump to version 20180807a") introduced the use of "install -D -t" to the intel-microcode package. The intent is that install will create the full destination directory, including all components leading to it, before copying the files. Unfortunately, "install -D -t" is only supported since coreutils since v8.23. Several of the build systems we support have older coreutils versions, such as Debian 7, which uses coreutils 8.13. Ubuntu 14.04 also doesn't have a recent enough coreutils. So let's create the directory explicitly first, and then use a more regular "install -t". Fixes: http://autobuild.buildroot.net/results/aa44f9ff90f296f886be6309b3355ed075494fb2/ Note: the "gzip: stdout: Broken pipe" messages in those failures seem unrelated. We have been able to reproduce the installation failure without those "Broken pipe" issues, and we have not been able to reproduce those "Broken pipe" problems. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Tested-by: Carlos Santos <casantos@datacom.com.br> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2018-12-11 16:30:05 +01:00
mkdir -p $(TARGET_DIR)/lib/firmware/intel-ucode
$(INSTALL) -m 0644 -t $(TARGET_DIR)/lib/firmware/intel-ucode \
intel-microcode: bump to version 20180807a The big "intel-microcode.dat" text file is gone. Only binary files are provided, in the "intel-ucode" directory. Install it at /lib/firmware/, like linux-firmware does, and update the iucode-tool init script to use that path. We don't install the microcode under "intel-ucode-with-caveats", since it needs special commits in the Linux kernel (see "relnotes" for more information). Tested on an equipment with Intel C3000 processor. Signed-off-by: Carlos Santos <casantos@datacom.com.br> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-11-04 22:02:39 +01:00
$(@D)/intel-ucode/*
intel-microcode: new package The intel microcode is a proprietary package which provides a data file used to correct processors errors. It was originally sent by Richard Braun <rbraun@sceen.net> [Peter: set _LICENSE_FILES] Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Cc: Richard Braun <rbraun@sceen.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-02-04 10:25:57 +01:00
endef
package/intel-microcode: make target installation optional For early microcode loading, there is no need to install the individual microcode files to /lib/firmware - So make that optional. Let the option default to y for backwards compatibility, and select it from iucode-tool as the init script relies on the /lib/firmware files. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-05-21 00:17:12 +02:00
else
INTEL_MICROCODE_INSTALL_TARGET = NO
endif
intel-microcode: new package The intel microcode is a proprietary package which provides a data file used to correct processors errors. It was originally sent by Richard Braun <rbraun@sceen.net> [Peter: set _LICENSE_FILES] Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Cc: Richard Braun <rbraun@sceen.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-02-04 10:25:57 +01:00
$(eval $(generic-package))
Reference in New Issue Copy Permalink