1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
|
PATH := $(PATH):/sbin:/usr/sbin
IUCODE_TOOL ?= iucode_tool
IUC_FLAGS := -v
IUC_FINAL_FLAGS := -vv
# CUTDATE RANGE:
#
# This filter selects what we consider to be old microcode which
# should still be shipped even if Intel dropped them. Note that
# it is useless to ship microcodes for anything the distro doesn't
# really support anymore
#
# Watch out: check in the changelog, if this filter will add
# microcodes that look like they've been recalled, use
# IUC_OLDIES_EXCLUDE to avoid shipping the probably recalled
# microcode. Refer to IUC_EXCLUDE for IUC_OLDIES_EXCLUDE syntax.
#
# Last manual check: up to 2008-01-01
IUC_OLDIES_SELECT := "--date-before=2008-01-01"
IUC_OLDIES_EXCLUDE :=
# EXCLUDING MICROCODES:
#
# Always document reason. See iucode_tool(8) for -s !<sig> syntax
# Recalls might require use of .fw overrides to retain old version,
# instead of exclusions. Exclusions have the highest priority, and
# will remove microcode added by any other means, including override
# files (.fw files).
IUC_EXCLUDE :=
# 0x106c0: alpha hardware, seen in a very very old microcode data file
IUC_EXCLUDE += -s !0x106c0
# INCLUDING MICROCODES:
#
# This should be used to add a microcode from any of the regular
# microcode bundles, without the need for an override file. See
# iucode_tool(8) for -s <sig> syntax. Always document the reason,
# as per IUC_EXCLUDE.
IUC_INCLUDE :=
# Keep sorting order predictable or things will break
export LC_COLLATE=C
MICROCODE_REG_DBIN := $(patsubst microcode-%.d/,microcode-%.dbin,$(wildcard microcode-*.d/))
MICROCODE_REG_SOURCES := $(sort $(wildcard microcode-*.dat microcode-*.bin) $(MICROCODE_REG_DBIN))
MICROCODE_SUP_SOURCES := $(wildcard supplementary-ucode-*.bin supplementary-ucode-*.d/)
MICROCODE_OVERRIDES := $(wildcard *.fw)
MICROCODE_FINAL_REG_SOURCES :=
ifneq ($(IUC_OLDIES_SELECT),)
MICROCODE_FINAL_REG_SOURCES += microcode-oldies.pbin
endif
ifneq ($(IUC_INCLUDE),)
MICROCODE_FINAL_REG_SOURCES += microcode-includes.pbin
endif
MICROCODE_FINAL_REG_SOURCES += $(lastword $(MICROCODE_REG_SOURCES))
ifneq ($(MICROCODE_SUP_SOURCES),)
MICROCODE_FINAL_SOURCES := microcode-aux.pbin
else
MICROCODE_FINAL_SOURCES := $(MICROCODE_FINAL_REG_SOURCES)
endif
ifneq ($(MICROCODE_OVERRIDES),)
MICROCODE_FINAL_SOURCES += microcode-overrides.pbin
endif
all: intel-microcode.bin intel-microcode-64.bin
# When processing a directory that contains a single upstream
# microcode release (split over many binary microcode files), we need
# to group it into a single (temporary) bundle for downgrade mode to
# work as expected. Using iucode_tool (in the default --no-downgrade
# mode) to generate the temporary bundle ensures reproducibility,
# since it will sort out any conflicts in a predictable way.
microcode-%.dbin: microcode-%.d/
@echo
@echo Preprocessing microcode directory $^ into $@...
@$(IUCODE_TOOL) $(IUC_FLAGS) --overwrite -w "$@" $^
# When looking for "old" microcodes that we should ship even if they
# are not in the latest regular microcode bundle anymore, we use a
# date filter to select *signatures* of microcodes that should be
# included (instead of directly selecting the microcode itself).
#
# Then, the "latest" microcode (in source file order, due to the use
# of downgrade mode) for each such signatures will be selected,
# regardless of the date on the microcode itself.
microcode-oldies.pbin: $(MICROCODE_REG_SOURCES)
@echo
@echo Preprocessing older regular microcode...
@$(IUCODE_TOOL) $(IUC_FLAGS) \
$(IUC_OLDIES_SELECT) $(IUC_OLDIES_EXCLUDE) \
--loose-date-filtering --downgrade --overwrite -w "$@" $^
microcode-includes.pbin: $(MICROCODE_REG_SOURCES)
@echo
@echo Preprocessing force-included regular microcode...
@$(IUCODE_TOOL) $(IUC_FLAGS) -s! $(IUC_INCLUDE) \
--downgrade --overwrite -w "$@" $^
# When there are supplementary microcode bundles, they must be merged
# with the regular microcode in a separate step, since all such
# microcodes must have the same precedence. We use two intermediate
# bundles for this.
#
# The oldies and force-included microcodes are bundled together with
# the latest regular microcode bundle in microcode-regular.pbin. The
# precedence order for downgrading is:
#
# oldies < includes < latest regular microcode bundle
#
# The precedence order won't matter for oldies and includes, as they
# either have different microcode, or microcode with the same
# revision.
#
# Then, microcode-regular.pbin is merged with all supplementary
# microcode bundles, with the downgrade logic disabled in the
# microcode-aux.pbin target. The result will be used by the final
# target.
#
# When there are no supplementary microcode updates, we can do all the
# merging with the downgrade logic active in a single go in the final
# target.
microcode-regular.pbin: $(MICROCODE_FINAL_REG_SOURCES)
@echo
@echo Building microcode bundle for regular microcode...
@$(IUCODE_TOOL) $(IUC_FINAL_FLAGS) --downgrade --overwrite -w "$@" $^
microcode-aux.pbin: microcode-regular.pbin $(MICROCODE_SUP_SOURCES)
@echo
@echo Merging regular and supplementary microcode bundles...
@$(IUCODE_TOOL) $(IUC_FINAL_FLAGS) --overwrite -w "$@" $^
# The microcode overrides are bundled together to sort out any
# duplication and revision level issues.
microcode-overrides.pbin: $(MICROCODE_OVERRIDES)
@echo
@echo Preprocessing microcode overrides...
@$(IUCODE_TOOL) $(IUC_FLAGS) --overwrite -w "$@" $^
# Final target
intel-microcode.bin: $(MICROCODE_FINAL_SOURCES)
@echo
@echo Building final microcode bundle...
@$(IUCODE_TOOL) $(IUC_FINAL_FLAGS) $(IUC_EXCLUDE) \
--downgrade --overwrite -w "$@" $^
intel-microcode-64.bin: intel-microcode.bin
@echo
@echo Building stripped-down microcode bundle for x86-64 and x32...
@$(IUCODE_TOOL) $(IUC_FLAGS) \
$(shell sed -n -r -e '/^i.86/ { s/^[^ ]+ +/-s !/;s/ +\#.*//;p}' cpu-signatures.txt) $(IUC_EXCLUDE) \
--overwrite -w "$@" $^
distclean: clean
clean:
rm -f intel-microcode-64.bin intel-microcode.bin
rm -f microcode-overrides.pbin microcode-oldies.pbin microcode-includes.pbin microcode-regular.pbin microcode-aux.pbin
rm -f microcode-*.dbin
.PHONY: clean
|
