core118: Ship microcode updates for Intel processors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/config/rootfiles/core/118/filelists/files b/config/rootfiles/core/118/filelists/files
index 4d1873530ab994613cef504696eeae14e8bab3f2..162f586d3ad7c7fafde43ea8c45579ace2dff94c 100644 (file)
--- a/config/rootfiles/core/118/filelists/files
+++ b/config/rootfiles/core/118/filelists/files
@@ -9,6 +9,7 @@ srv/web/ipfire/cgi-bin/fireinfo.cgi
 srv/web/ipfire/cgi-bin/ids.cgi
 srv/web/ipfire/cgi-bin/logs.cgi/showrequestfromcountry.dat
 srv/web/ipfire/cgi-bin/logs.cgi/urlfilter.dat
+usr/local/bin/rebuild-initrd
 usr/sbin/updxlrator
 var/ipfire/langs
 var/ipfire/updatexlrator/bin/download

diff --git a/config/rootfiles/core/118/filelists/i586/intel-microcode b/config/rootfiles/core/118/filelists/i586/intel-microcode
new file mode 120000 (symlink)
index 0000000..f03e847
--- /dev/null
+++ b/config/rootfiles/core/118/filelists/i586/intel-microcode
@@ -0,0 +1 @@
+../../../../common/i586/intel-microcode
\ No newline at end of file

diff --git a/config/rootfiles/core/118/filelists/x86_64/intel-microcode b/config/rootfiles/core/118/filelists/x86_64/intel-microcode
new file mode 120000 (symlink)
index 0000000..d5ac074
--- /dev/null
+++ b/config/rootfiles/core/118/filelists/x86_64/intel-microcode
@@ -0,0 +1 @@
+../../../../common/x86_64/intel-microcode
\ No newline at end of file

diff --git a/config/rootfiles/core/118/update.sh b/config/rootfiles/core/118/update.sh
index 60173609f88c6ff734149bfbb1350bdf484a9118..545c8ef53636b8b7f0a902714f47ef82e0d39958 100644 (file)
--- a/config/rootfiles/core/118/update.sh
+++ b/config/rootfiles/core/118/update.sh
@@ -59,7 +59,16 @@ ldconfig
 /etc/init.d/snort start
 
 # This update need a reboot...
-#touch /var/run/need_reboot
+touch /var/run/need_reboot
+
+# Rebuild the initrd to include the microcode updates
+rebuild-initrd
+
+# Reload microcode
+modprobe microcode
+if [ -w "/sys/devices/system/cpu/microcode/reload" ];
+       echo 1 > /sys/devices/system/cpu/microcode/reload
+fi
 
 # Finish
 /etc/init.d/fireinfo start