From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754064AbcASMn3 (ORCPT ); Tue, 19 Jan 2016 07:43:29 -0500 Received: from mx2.suse.de ([195.135.220.15]:45528 "EHLO mx2.suse.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752904AbcASMnX (ORCPT ); Tue, 19 Jan 2016 07:43:23 -0500 Subject: Re: [RFC] CONFIG_FORCE_MINIMALLY_SANE_CONFIG=y To: =?UTF-8?B?TcOlbnMgUnVsbGfDpXJk?= References: <20160108122719.GG14673@pd.tnic> <568FB028.1030706@suse.cz> <20160108133725.GH14673@pd.tnic> <568FCC45.1010301@suse.cz> <20160111194311.GF4686@pd.tnic> <20160111205945.GH4686@pd.tnic> <20160111211712.GI4686@pd.tnic> <20160114184350.GB12109@pd.tnic> <20160119082022.GB18237@gmail.com> Cc: Ingo Molnar , Borislav Petkov , Linus Torvalds , Greg Kroah-Hartman , Andrew Morton , Markus Trippelsdorf , Thomas Voegtle , linux-kernel@vger.kernel.org, x86-ml , Peter Zijlstra , Thomas Gleixner , Jiri Olsa , Arnaldo Carvalho de Melo , =?UTF-8?B?RnLDqWTDqXJpYyBXZWlzYmVja2Vy?= From: Michal Marek Message-ID: <569E2F5C.2040904@suse.cz> Date: Tue, 19 Jan 2016 13:43:08 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Dne 19.1.2016 v 13:29 Måns Rullgård napsal(a): > Force-enabling BLK_DEV_INITRD isn't going to make anyone change their > boot scripts. If you are on a regular distro, /sbin/installkernel should do the right thing: Run mkinitrd / dracut and if the tools are recent enough and there is a microcode update for your CPU, a cpio with the microcode blob will be prepended to the initrd. So this is more or less covered. > I'd also like to get a coherent answer to why microcode update is > preferably done from an initrd as opposed to shortly after mounting > a regular disk. My systems seem perfectly happy doing the latter. It's not even done *from* the initrd but way earlier. We learned the hard way when Intel released a microcode update for Haswell which disabled TSX: Userspace did not expect the feature flags to change and previously valid instructions to start trapping. This can in principle happen again and with any vendor. Michal