Meltdown and Spectre information update

[Sepherosa Ziehau]

In addition to installing the devcpu-data and updating the firmware
image, you need to add
microcode_update_enable="YES"
to /etc/rc.conf

The latest Intel firmware is here:
https://downloadcenter.intel.com/download/27431/Linux-Processor-Microcode-Data-File?v=t

Thanks,
sephe

On Wed, Jan 10, 2018 at 2:34 PM, Matthew Dillon <dillon at backplane.com> wrote:
> We fully support microcode updates (as does FreeBSD).
>
> kldload cpuctl
>
> pkg install devcpu-data
>
> cpucontrol -u /dev/cpuctl0
> cpucontrol -u /dev/cpuctl1
>   ...  (iterate all cpus)
>
> If you download a microcode update that isn't yet in the devcpu-data
> package, you will wind up with a microcode.dat file from Intel which you
> have to break up using a tool that is in devcpu-data's build directory.
>
> cd /usr/dports/sysutils/devcpu-data
> make
>
> cd /usr/obj/dports/sysutils/devcpu-data/devcpu-data-1.9
>
> use the ./ucode-tool binary.  Urm.   I think something like:
>
> ./ucode-tool -i <location_of_intel_microcode_dat_file>
>
> and then move all the *.fw files to /usr/local/share/cpucontrol
>
> Then cpucontrol -u can find them.
>
> You need the latest master (the cpuctl device needed a larger buffer to
> handle newer cpu's larger microcodes).
>
> -Matt
>
>
> On Sun, Jan 7, 2018 at 4:32 PM, Lars Schotte <gustopn at gmail.com> wrote:
>>
>> Not if it runs counter clockwise.
>>
>> On Mon, 8 Jan 2018 01:16:29 +0200
>> PeerCorps Trust Fund <ipc at peercorpstrust.org> wrote:
>>
>> > Even a broken watch is right twice a day!
>> >
>> > (I've always wanted to use that :)
>>
>>
>> --
>>  Lars Schotte
>>  Mudroňova 13
>> 92101 Piešťany
>
>



-- 
Tomorrow Will Never Die