tags 886445 upstream thanks
Hi Paul, thanks for summarising your findings. I'm going add the new feature to handle the microcode update problem in needrestart 3.0. HTH, Thomas Paul Wise <p...@debian.org> writes: > Package: needrestart > Version: 2.11-4 > Severity: wishlist > > Please detect the need to reboot to apply Intel microcode updates. > > When iucode_tool is installed, please check if /boot/initrd.img* > contain the same microcode rev for the current CPU signature as the > Linux kernel is listing in /proc/cpuinfo as the microcode version. > > First, get the processor signature (also available in next step): > > $ /usr/sbin/iucode_tool -Sv > /usr/sbin/iucode_tool: system has processor(s) with signature 0x00020655 > > Second, match the processor signature against the 'sig' field of the > selected microcodes in all the initrds and extract the 'rev' field of > that microcode. > > $ /usr/sbin/iucode_tool -tr -Sl /boot/initrd.img-4.14.0-2-amd64 > /usr/sbin/iucode_tool: system has processor(s) with signature 0x00020655 > microcode bundle 1: /boot/initrd.img-4.14.0-2-amd64 > selected microcodes: > 001/001: sig 0x00020652, pf_mask 0x12, 2015-06-30, rev 0x000f, size 8192 > 001/002: sig 0x00020655, pf_mask 0x92, 2015-06-30, rev 0x0005, size 3072 > > Third, match the extracted rev field against the microcode field in the > Linux /proc/cpuinfo file. > > $ grep micro /proc/cpuinfo > microcode : 0x5 > microcode : 0x5 > microcode : 0x5 > microcode : 0x5 > > When running as root, the microcode versions are also in /sys: > > $ head /sys/devices/system/cpu/*/microcode/version > head: cannot open '/sys/devices/system/cpu/cpu0/microcode/version' for > reading: Permission denied > head: cannot open '/sys/devices/system/cpu/cpu1/microcode/version' for > reading: Permission denied > head: cannot open '/sys/devices/system/cpu/cpu2/microcode/version' for > reading: Permission denied > head: cannot open '/sys/devices/system/cpu/cpu3/microcode/version' for > reading: Permission denied > > $ sudo head /sys/devices/system/cpu/*/microcode/version > ==> /sys/devices/system/cpu/cpu0/microcode/version <== > 0x5 > > ==> /sys/devices/system/cpu/cpu1/microcode/version <== > 0x5 > > ==> /sys/devices/system/cpu/cpu2/microcode/version <== > 0x5 > > ==> /sys/devices/system/cpu/cpu3/microcode/version <== > 0x5 > > -- > bye, > pabs > > https://wiki.debian.org/PaulWise -- supp...@ibh.de Tel. +49 351 477 77 30 www.ibh.de Fax +49 351 477 77 39 ----------------------------------------------------------------------- Dipl.-Ing. Thomas Liske Teamleiter DataCenter Services IBH IT-Service GmbH Amtsgericht Dresden Heilbronner Str. 20 HRB 13626 01189 Dresden GF: Prof. Dr. T. Horn, S. Horn Germany VAT DE182302907 ----------------------------------------------------------------------- Ihr Partner für: LAN, WAN IP-Quality, Security, VoIP, SAN, Backup, USV ----------------------------------------------------------------------- professioneller IT-Service - kompetent und zuverlässig -----------------------------------------------------------------------