Borislav Petkov wrote in <Y+N4qE2CD9Vu6maw@xxxxxxx>: |On Wed, Feb 08, 2023 at 11:21:13AM +0800, RuiRui Yang wrote: |>> There is only one question regarding CPU microcode loading: it |>> seems the microcode is not "updated early" with kexec upon "boot". | |You lost me here: when you load a kernel and you have builtin microcode |or have supplied it through initrd, it should update. Ok. That was what i always hoped. I have never seen "microcode updated early" for kexec-booted kernels. (For all CPUs i have it does not make a difference regarding /sys/devices/system/cpu/vulnerabilities/*, only SMT on/off changes things; ie, CPU microcode is not newest but seems to offer mitigations already; and likewise new microcode does not mitigate the remaining vulnerabilities; and it unfortunately seems FINEIBT is not backported to 6.1, but that off-topic.) I only wanted to ask once, as the message comes so late, when all CPUs are in use. (And the "updated early" _does_ come after suspend/resume. And i am no kernel / hardware hacker.) |>> This is a homegrown kernel, with built-in firmware | |Yeah, this is kinda confusing. When you kexec a kernel, it should be |just the same as when you boot a k^ernel normally. Very lucky for that kexec possibility, thanks. I have not seen the "normal" case for long, at least not the log (it goes nowhere), and the screen scrolls too fast. (And there is no scrollback buffer, and i think i am |If you can give simplified reproduction instructions, I could give it a |try... Well it is a simple kernel with enough built-in to boot stage1 so i can run cryptsetup, and then (optionally) kexec-boot stage2 (same (maybe newer) kernel but on encrypted device). Formerly all static, but now network/firewall, sound etc are modules. Three small somewhat simple scripts with text-only config files. But upon interest i can very well post them? (I like it! No extra boot loader, no systemd here.) Thank you. And ciao! --steffen | |Der Kragenbaer, The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem anderen runter wa.ks himself off |(By Robert Gernhardt) _______________________________________________ kexec mailing list kexec@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/kexec
