From nobody Mon Feb 9 10:44:47 2026 Delivered-To: importer@patchew.org Received-SPF: pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) client-ip=192.237.175.120; envelope-from=xen-devel-bounces@lists.xenproject.org; helo=lists.xenproject.org; Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) smtp.mailfrom=xen-devel-bounces@lists.xenproject.org; dmarc=pass(p=reject dis=none) header.from=citrix.com ARC-Seal: i=1; a=rsa-sha256; t=1744401586; cv=none; d=zohomail.com; s=zohoarc; b=Yy/yUtfnsKL+mlOgB3vBAhJsGBp6GW2wAGA8Pot6IZBjyhD6J3ArMpBwM+XHT3sDfdxxsbUakdfOQEiAhQom9ZrVdZ45MwLHhGHpoTYHM3Zw+yD2NfI9VCv6fjrzisWly74QKpGwF/BibvxgIaNLkO2KvNnQexJQa0642lV79g8= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1744401586; h=Content-Type:Content-Transfer-Encoding:Cc:Cc:Date:Date:From:From:List-Subscribe:List-Post:List-Id:List-Help:List-Unsubscribe:MIME-Version:Message-ID:Sender:Subject:Subject:To:To:Message-Id:Reply-To; bh=c+hnH5laC8XFET4cC5pzAhie//+QnKI8CmY2LPWGGck=; b=ahpGtjZgTr6h9Z8dlk/HJRhGVYtqGNHv9HItf5Y1C20WZqTbPSGN1GA3ktbK7JMVn4g+ip1KQZQfTgogHRFiNM5UDW3KozjCfbw0eF4e/DWTuHUQQFggQGRT83VqrxHMgqWOgn0NOWQqFFGdZs9J0wvzVQjmxzLb6ZAHeDk55ao= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) smtp.mailfrom=xen-devel-bounces@lists.xenproject.org; dmarc=pass header.from= (p=reject dis=none) Return-Path: Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) by mx.zohomail.com with SMTPS id 1744401586902963.1872211178846; Fri, 11 Apr 2025 12:59:46 -0700 (PDT) Received: from list by lists.xenproject.org with outflank-mailman.947803.1345388 (Exim 4.92) (envelope-from ) id 1u3KX2-0004bI-9m; Fri, 11 Apr 2025 19:59:20 +0000 Received: by outflank-mailman (output) from mailman id 947803.1345388; Fri, 11 Apr 2025 19:59:20 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1u3KX2-0004bB-7C; Fri, 11 Apr 2025 19:59:20 +0000 Received: by outflank-mailman (input) for mailman id 947803; Fri, 11 Apr 2025 19:59:19 +0000 Received: from se1-gles-sth1-in.inumbo.com ([159.253.27.254] helo=se1-gles-sth1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1u3KX1-0004b5-Ez for xen-devel@lists.xenproject.org; Fri, 11 Apr 2025 19:59:19 +0000 Received: from mail-wr1-x42a.google.com (mail-wr1-x42a.google.com [2a00:1450:4864:20::42a]) by se1-gles-sth1.inumbo.com (Halon) with ESMTPS id 7329f20e-170f-11f0-9eae-5ba50f476ded; Fri, 11 Apr 2025 21:59:17 +0200 (CEST) Received: by mail-wr1-x42a.google.com with SMTP id ffacd0b85a97d-39c0dfba946so1417446f8f.3 for ; Fri, 11 Apr 2025 12:59:17 -0700 (PDT) Received: from localhost.localdomain (host-92-26-98-202.as13285.net. [92.26.98.202]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-43f23572ce4sm94448555e9.30.2025.04.11.12.59.15 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 11 Apr 2025 12:59:16 -0700 (PDT) X-Outflank-Mailman: Message body and most headers restored to incoming version X-BeenThere: xen-devel@lists.xenproject.org List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Precedence: list Sender: "Xen-devel" X-Inumbo-ID: 7329f20e-170f-11f0-9eae-5ba50f476ded DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=citrix.com; s=google; t=1744401556; x=1745006356; darn=lists.xenproject.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=c+hnH5laC8XFET4cC5pzAhie//+QnKI8CmY2LPWGGck=; b=maVt7TrBck5hb4WlSVxo6CsrCSkvMVIs9NU3KUfe6U0V8kuyvhNqjsDIr17Sa63Lw5 ikJorOHZ4sVutxvBz0KvuDVOzFtuqzUHdDJSG3Hj8BYh3BhG5GCTRsEQ5WCjAyXrta25 c97WMO3hYHBGrjs/bBekUP5k/J5Xs8C/tumLw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1744401556; x=1745006356; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=c+hnH5laC8XFET4cC5pzAhie//+QnKI8CmY2LPWGGck=; b=u+jbqTrRpLK+Z78dUcgMMbgTJduNhXFRmBuABMOZpgO1cAAK8nd15RFs6Qyv9J5LU0 jLe6PgULewsmaqlVuj5X2kYJY6YsDaHoGFABM8kP0m+sbsDbwG7TfzbYuMkQVxj2dSuV Ce5hcTpK/rTJIZoX1TptE3H42QyoxWuO5H5eE5XHqOgkEj+WpN62BirwoDRG0rU+22SX TC92llFGgciwdx5wBeKF5ojApb8cJewltRWAmImRj419mCrKaee0EgofDyY/JJqyA4JD zPAAjcsCLrLGMFydaICe8Z7dIIQeTMoblhxtVPSoiD3TOF4acV09WkoPNBCdjqkfGyde pWSw== X-Gm-Message-State: AOJu0YzyY//Etq5/VsSsAxnnmm6+1crLIWQuSEsga8r47wg353TRO/4n Jxe+5lSquZ0b6YR45FUUfHoKDRx8Gh489iYYGBo7STRQQ4XOtw3CeDpJIWisI/vUY73BoInuxlS whLg= X-Gm-Gg: ASbGnctR0jPR6xD2TNmT9qIwNUWYsPYXS1emQ4GipMEu6T+jCmMvNF7tjDiIyssb5qM yM7wjqK3sJ57oUICAaJF0f5FBLOVS1Ek2H84uyKe0PEkdzJwGwRuBbbcb98ZlZHuLchmcU+sFCJ DzgWVUC+fO80haR7hia/J1kPM86P1y0PGLjcrZZp3cxSKsmtayp3OGSSNfnWrshJw/vtRBHzcJv A4hzJFNNxt9bqXn3LMGdBeJogYgF0O37QNxNkShVWfnQgL9NgtIo88cuMSfx8D7BORrabhHCGTz 814BSAx5L9rMkXTTqWybBFwPeo1Vv6ESOXLmcngl5aYI83kiz6j2PTh0ZqKPO74OyUHhLnrrqNu ibXNPG6X8WgudBg== X-Google-Smtp-Source: AGHT+IFsSGj90KiuAdcCPUWX4xbif6MThlDR9w3BG85TWdKtYUYL8EJ3RAIcAcAZKnJzL3FtC6fxTg== X-Received: by 2002:a05:6000:178e:b0:39a:d336:16 with SMTP id ffacd0b85a97d-39ea5215dc6mr3569905f8f.34.1744401556598; Fri, 11 Apr 2025 12:59:16 -0700 (PDT) From: Andrew Cooper To: Xen-devel Cc: Andrew Cooper , Anthony PERARD , Stefano Stabellini , Michal Orzel , Doug Goldstein , =?UTF-8?q?Marek=20Marczykowski-G=C3=B3recki?= Subject: [PATCH] Package microcode for the x86 hardware runners Date: Fri, 11 Apr 2025 20:59:14 +0100 Message-Id: <20250411195914.2256882-1-andrew.cooper3@citrix.com> X-Mailer: git-send-email 2.39.5 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-ZohoMail-DKIM: pass (identity @citrix.com) X-ZM-MESSAGEID: 1744401588516019100 They are all out of date, to different degrees. Install jq into the x86_64 build container so we can parse the Github latest release information in an acceptable way. The resulting archive must be uncompressed, in order to work during early boot. Signed-off-by: Andrew Cooper Reviewed-by: Jason Andryuk --- CC: Anthony PERARD CC: Stefano Stabellini CC: Michal Orzel CC: Doug Goldstein CC: Marek Marczykowski-G=C3=B3recki Example working in Xen: https://gitlab.com/xen-project/hardware/xen-staging/-/jobs/9700756054#L206 --- .gitlab-ci.yml | 4 +++ images/alpine/3.18-x86_64-build.dockerfile | 3 ++ scripts/x86-microcode.sh | 42 ++++++++++++++++++++++ 3 files changed, 49 insertions(+) create mode 100755 scripts/x86-microcode.sh diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 3587d660aa62..63722233dc6f 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -64,6 +64,10 @@ linux-6.6.56-x86_64: ARGO_SHA: "ca5473a56f62e2b4d59697c8552d151391d3fec1" ARGOEXEC_SHA: "d900429f6640acc6f68a3d3a4c945d7da60625d8" =20 +microcode-x86: + extends: .x86_64-artifacts + script: ./scripts/x86-microcode.sh + # # The jobs below here are legacy and being phased out. # diff --git a/images/alpine/3.18-x86_64-build.dockerfile b/images/alpine/3.1= 8-x86_64-build.dockerfile index eac0cda4fed3..c4ff30e1f138 100644 --- a/images/alpine/3.18-x86_64-build.dockerfile +++ b/images/alpine/3.18-x86_64-build.dockerfile @@ -27,6 +27,9 @@ RUN < intel-latest.json +TARBALL_URL=3D"$(jq -r .tarball_url intel-latest.json)" +curl -fsSL "${TARBALL_URL}" > intel-latest.tar +tar xf intel-latest.tar --strip-components=3D1 + +( + cd intel-ucode + cat 06-97-02 # adl-* + cat 06-8e-09 # kbl-* +) > "${UCODEDIR}/GenuineIntel.bin" + +# +# AMD microcode comes from linux-firmware +# +curl -fsSLO https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux= -firmware.git/plain/amd-ucode/microcode_amd_fam17h.bin +curl -fsSLO https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux= -firmware.git/plain/amd-ucode/microcode_amd_fam19h.bin + +( + cat microcode_amd_fam17h.bin # zen2-*, xilinux-*-x86_64-* + cat microcode_amd_fam19h.bin # zen3p-* +) > "${UCODEDIR}/AuthenticAMD.bin" + +# Package everything up. It must be uncompressed +cd "${ROOTDIR}" +find . | cpio -R 0:0 -H newc -o > "${COPYDIR}/ucode.cpio" + +# Print the contents for the build log +cpio -tv < "${COPYDIR}/ucode.cpio" --=20 2.39.5