-
Notifications
You must be signed in to change notification settings - Fork 2
Expand file tree
/
Copy pathreal-ucode.spec
More file actions
67 lines (56 loc) · 2.24 KB
/
real-ucode.spec
File metadata and controls
67 lines (56 loc) · 2.24 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
Name: real-ucode
Version: 20260322
Release: 1
Epoch: 3
Summary: Actually provides the latest CPU microcode for AMD and Intel
License: proprietary
BuildArch: noarch
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
Requires: amd-ucode-firmware >= 3:20231101
Requires: microcode_ctl >= 3:20231101
%define _binary_payload w3T.xzdio
%define _sourcedir %(echo $PWD)
%define _rpmdir %(echo $PWD/build)
%description
Please see the included README
%package -n amd-ucode-firmware
Summary: Latest microcode for AMD
License: Redistributable, no modification permitted
Requires: linux-firmware-whence
RemovePathPostfixes: .official
%description -n amd-ucode-firmware
Microcode updates for AMD CPUs.
%post -n amd-ucode-firmware
echo "ucode hash check LIKELY needs to be disabled: sudo grubby --update-kernel=ALL --args=\"microcode.amd_sha_check=off\"";
%package -n amd-ucode-firmware-resigned
Summary: Latest microcode for AMD, resigned
License: Redistributable, no modification permitted
Requires: linux-firmware-whence
RemovePathPostfixes: .resigned
Provides: amd-ucode-firmware
%description -n amd-ucode-firmware-resigned
Microcode updates for AMD CPUs, resigned for vulnerable loaders.
%post -n amd-ucode-firmware-resigned
echo "ucode hash check MUST be disabled: sudo grubby --update-kernel=ALL --args=\"microcode.amd_sha_check=off\"";
%package -n microcode_ctl
Summary: Latest microcode for Intel
License: Redistributable, no modification permitted
Requires: linux-firmware-whence
%description -n microcode_ctl
Microcode updates for Intel CPUs.
%install
mkdir -p %{buildroot}/usr/lib/firmware/amd-ucode/;
install -Dm644 %{_sourcedir}/microcode/amd-ucode/* %{buildroot}/usr/lib/firmware/amd-ucode/;
mkdir -p %{buildroot}/usr/lib/firmware/intel-ucode/;
install -Dm644 %{_sourcedir}/microcode/intel-ucode/* %{buildroot}/usr/lib/firmware/intel-ucode/;
install -Dm644 %{_sourcedir}/README.md %{buildroot}/usr/share/doc/real-ucode/README.md;
%files
/usr/share/doc/real-ucode/README.md
%files -n amd-ucode-firmware
/usr/lib/firmware/amd-ucode/LICENSE.amd-ucode
/usr/lib/firmware/amd-ucode/*.bin.official
%files -n amd-ucode-firmware-resigned
/usr/lib/firmware/amd-ucode/LICENSE.amd-ucode
/usr/lib/firmware/amd-ucode/*.bin.resigned
%files -n microcode_ctl
/usr/lib/firmware/intel-ucode/*