Hi Martin,
On 21.11.2017 09:31, Martin Kepplinger wrote:
> Since there are many releases of Intel's cpu microcode since 2015-01, I
> was wondering if
> there's a reason why coreboot, if at all, uses this one.
the explanation might be a simple one, e.g. the last person who tried to
update it, didn't know the new package exists at all. I bet that's true
for 99% of the coreboot community.
Last time I checked for microcode updates (for Skylake) I had to click
through a license at intel.com and promise not to redistribute it! And
if you ask Intel employees about it, they just ignore you. So I'm overly
pleased to see your link ;) thank you very much! Please tell us, for
future reference, how you found it.
Now if you also tell us that it comes with a license that allows redris-
tribution, that would be like an early Christmas xD That we don't have
the (mandatory!) updates for current Intel processors in our blobs repo-
sitory is one of the big bummers that make the upstream coreboot ex-
perience suck.
>
> I know very little about it really. It may well be potentially bad to
> simply use the latest version,
No, it's considered to be the best thing to use the latest updates.
> but in case it's really only because nobody did it, I might prepare a
> patch to use
> downloadmirror.intel.com/27337/eng/microcode-20171117. insteadtgz
> (someday, after
> I testing it on my device).
Please do so. Though, the `update-microcodes.sh` doesn't fit the binary
format in the new package any more. I guess it can be replaced with a
simpler script, e.g.
for f in ??-??-??; do
model=$(echo $f | sed -e's/\(0.\)-\(.\)\(.\)-0./0x\2\1\3/')
dir=$(printf "model_%xx\n" $model)
mkdir -p $dir
cat $f >>$dir/microcode.bin
done
Best,
Nico