%define upstream_version 2.1-18

%define intel_ucode_version 20230808

%define caveat_dir %{_datarootdir}/microcode_ctl/ucode_with_caveats

%define microcode_ctl_libexec %{_libexecdir}/microcode_ctl

%define update_ucode %{microcode_ctl_libexec}/update_ucode

%define check_caveats %{microcode_ctl_libexec}/check_caveats

%define reload_microcode %{microcode_ctl_libexec}/reload_microcode

%define dracutlibdir %{_prefix}/lib/dracut

%define i_m2u_man intel-microcode2ucode.8

# In microcode_ctl, documentation directory is unversioned historically.

# In RHEL 8 spec, %{_pkgdocdir} is used as installation destination; however,

# it is unversioned only since Fedora 20, per #986871,

# and not in Fedora 18/19-based RHEL 7.

%define _pkgdocdir %{_docdir}/%{name}

Summary:        Tool to transform and deploy CPU microcode update for x86.

Name:           microcode_ctl

Version:        2.1

Release:        73.19%{?dist}

Epoch:          2

Group:          System Environment/Base

License:        GPLv2+ and Redistributable, no modification permitted

URL:            https://pagure.io/microcode_ctl

Source0:        https://releases.pagure.org/microcode_ctl/%{name}-%{upstream_version}.tar.xz

Source1:        https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/archive/microcode-%{intel_ucode_version}.tar.gz

# (Pre-MDS) revision 0x714 of 06-2d-07 microcode

Source2:        https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/raw/microcode-20190514/intel-ucode/06-2d-07

# (Pre-20191112) revision 0x2000064 of 06-55-04 microcode

Source3:        https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/raw/microcode-20190918/intel-ucode/06-55-04

# (Pre-20200609) revision 0xd6 of 06-4e-03/06-5e-03 microcode

Source4:        https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/raw/microcode-20200520/intel-ucode/06-4e-03

Source5:        https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/raw/microcode-20200520/intel-ucode/06-5e-03

# systemd unit

Source10:       microcode.service

# dracut-related stuff

Source20:       01-microcode.conf

Source21:       99-microcode-override.conf

Source22:       dracut_99microcode_ctl-fw_dir_override_module_init.sh

# libexec

Source30:       update_ucode

Source31:       check_caveats

Source32:       reload_microcode

# docs

Source40:       %{i_m2u_man}.in

Source41:       README.caveats

Source42:       README

## Caveats

# BDW EP/EX

# https://bugzilla.redhat.com/show_bug.cgi?id=1622180

# https://bugzilla.redhat.com/show_bug.cgi?id=1623630

# https://bugzilla.redhat.com/show_bug.cgi?id=1646383

Source100:      06-4f-01_readme

Source101:      06-4f-01_config

Source102:      06-4f-01_disclaimer

# Unsafe early MC update inside VM:

# https://bugzilla.redhat.com/show_bug.cgi?id=1596627

Source110:      intel_readme

Source111:      intel_config

Source112:      intel_disclaimer

# SNB-EP (CPUID 0x206d7) post-MDS hangs

# https://bugzilla.redhat.com/show_bug.cgi?id=1758382

# https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/15

Source120:      06-2d-07_readme

Source121:      06-2d-07_config

Source122:      06-2d-07_disclaimer

# SKL-SP/W/X (CPUID 0x50654) post-20191112 hangs

# https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/21

Source130:      06-55-04_readme

Source131:      06-55-04_config

Source132:      06-55-04_disclaimer

# SKL-U/Y (CPUID 0x406e3) post-20200609 hangs

# https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/31

Source140:      06-4e-03_readme

Source141:      06-4e-03_config

Source142:      06-4e-03_disclaimer

# SKL-H/S/Xeon E3 v5 (CPUID 0x506e3) post-20200609 possible hangs

# https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/31#issuecomment-644885826

Source150:      06-5e-03_readme

Source151:      06-5e-03_config

Source152:      06-5e-03_disclaimer

# TGL-UP3/UP4 (CPUID 06-8c-01) hangs

# https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/issues/44

Source180:      06-8c-01_readme

Source181:      06-8c-01_config

Source182:      06-8c-01_disclaimer

# "Provides:" RPM tags generator

Source1000:     gen_provides.sh

Source1001:     codenames.list

Source1002:     gen_updates2.py

Patch1:         microcode_ctl-do-not-merge-ucode-with-caveats.patch

Patch2:         microcode_ctl-revert-intel-microcode2ucode-removal.patch

Patch3:         microcode_ctl-use-microcode-%{intel_ucode_version}-tgz.patch

Patch4:         microcode_ctl-do-not-install-intel-ucode.patch

Patch5:         microcode_ctl-intel-microcode2ucode-buf-handling.patch

Patch6:         microcode_ctl-ignore-first-directory-level-in-archive.patch

Patch1001: 0001-releasenote.md-eliminate-usage-of-U-0080.patch

Patch1002: 0002-releasenote.md-eliminate-most-of-the-trailing-whites.patch

Patch1003: 0003-releasenote.md-remove-excess-Release-Notes-headers.patch

Patch1004: 0004-releasenote.md-sort-the-entries-of-the-20230808-rele.patch

Patch1005: 0005-releasenote.md-fix-incorrect-platform-mask-for-RPL-H.patch

Patch1006: 0006-releasenote.md-fix-stepping-for-RPL-S.patch

Patch1007: 0007-releasenote.md-add-missing-06-ba-03-e0-to-the-new-mi.patch

Patch1008: 0008-releasenote.md-remove-the-duplicating-06-9e-0c-22-re.patch

Patch1009: 0009-releasenote.md-fix-old-revisions-for-06-8e-09-10-and.patch

Patch1010: 0010-releasenote.md-add-old-revisions-for-06-be-00-11-06-.patch

Buildroot:      %{_tmppath}/%{name}-%{version}-root

ExclusiveArch:  %{ix86} x86_64

BuildRequires:  systemd-units

# hexdump is used in gen_provides.sh

BuildRequires:  coreutils util-linux python

Requires:       coreutils

Requires(post): systemd coreutils

Requires(preun): systemd coreutils

Requires(postun): systemd coreutils

Requires(posttrans): dracut coreutils

%global _use_internal_dependency_generator 0

%define __find_provides "%{SOURCE1000}" "%{SOURCE1001}"

%description

The microcode_ctl utility is a companion to the microcode driver written

by Tigran Aivazian <tigran@aivazian.fsnet.co.uk>.

The microcode update is volatile and needs to be uploaded on each system

boot i.e. it doesn't reflash your cpu permanently, reboot and it reverts

back to the old microcode.

%prep

%setup -q -n %{name}-%{upstream_version}

tar xf "%{SOURCE1}" --wildcards --strip-components=1 \

	\*/intel-ucode-with-caveats \

	\*/license \*/releasenote.md \*/README.md \*/security.md

%patch1 -p1

%patch2 -p1

# Use the latest archive instead of microcode-20180703.tgz bundled

# with upstream microcode_ctl-2.1-18.

cp "%{SOURCE1}" .

%patch3 -p1

# We install ucode files manually into "intel" caveat directory

%patch4 -p1

%patch5 -p1

# The archive published on github has an additional top-level directory,

# strip it.

%patch6 -p1

%patch1001 -p1

%patch1002 -p1

%patch1003 -p1

%patch1004 -p1

%patch1005 -p1

%patch1006 -p1

%patch1007 -p1

%patch1008 -p1

%patch1009 -p1

%patch1010 -p1

%build

make CFLAGS="$RPM_OPT_FLAGS" %{?_smp_mflags}

# We do not populate any intel-ucode files into /lib/firmware directly due to

# early microcode load inside VM issue:

#   https://bugzilla.redhat.com/show_bug.cgi?id=1596627

#   https://bugzilla.redhat.com/show_bug.cgi?id=1607899

#find intel-ucode -type f | sed 's/^/%%ghost \/lib\/firmware\//' > ghost_list

touch ghost_list

# remove bogus *_DUPLICATE files with older microcode revisions

rm -vf intel-ucode/??-??-??_DUPLICATE

# replacing SNB-EP (CPUID 0x206d7) microcode with pre-MDS version

mv intel-ucode/06-2d-07 intel-ucode-with-caveats/

cp "%{SOURCE2}" intel-ucode/

# replacing SKL-SP/W/X (CPUID 0x50654) microcode with pre-20191112 version

mv intel-ucode/06-55-04 intel-ucode-with-caveats/

cp "%{SOURCE3}" intel-ucode/

# replacing SKL-U/Y (CPUID 0x4063e) microcode with pre-20200609 version

mv intel-ucode/06-4e-03 intel-ucode-with-caveats/

cp "%{SOURCE4}" intel-ucode/

# replacing SKL-H/S/Xeon E3 v5 (CPUID 0x5063e) microcode with pre-20200609 version

mv intel-ucode/06-5e-03 intel-ucode-with-caveats/

cp "%{SOURCE5}" intel-ucode/

# Moving 06-8c-01 microcode to intel-ucode-with-caveats

mv intel-ucode/06-8c-01 intel-ucode-with-caveats/

# man page

sed "%{SOURCE40}" \

	-e "s/@DATE@/2019-05-09/g" \

	-e "s/@VERSION@/%{version}-%{release}/g" \

	-e "s|@MICROCODE_URL@|https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files|g" > "%{i_m2u_man}"

%install

rm -rf %{buildroot}

make DESTDIR=%{buildroot} PREFIX=%{_prefix} INSDIR=/usr/sbin MICDIR=/usr/share/microcode_ctl install clean

install -m 755 -d \

	"%{buildroot}/%{_datarootdir}/microcode_ctl/intel-ucode" \

	"%{buildroot}/%{caveat_dir}/" \

	"%{buildroot}/etc/microcode_ctl/ucode_with_caveats/"

# systemd unit

install -m 755 -d "%{buildroot}/%{_unitdir}"

install -m 644 "%{SOURCE10}" -t "%{buildroot}/%{_unitdir}/"

# dracut

%define dracut_mod_dir "%{buildroot}/%{dracutlibdir}/modules.d/99microcode_ctl-fw_dir_override"

install -m 755 -d \

	"%{dracut_mod_dir}" \

	"%{buildroot}/%{dracutlibdir}/dracut.conf.d/"

install -m 644 "%{SOURCE20}" "%{SOURCE21}" \

	-t "%{buildroot}/%{dracutlibdir}/dracut.conf.d/"

install -m 755 "%{SOURCE22}" "%{dracut_mod_dir}/module-setup.sh"

# Internal helper scripts

install -m 755 -d "%{buildroot}/%{microcode_ctl_libexec}"

install "%{SOURCE30}" "%{SOURCE31}" "%{SOURCE32}" \

	-m 755 -t "%{buildroot}/%{microcode_ctl_libexec}"

## Documentation

install -m 755 -d "%{buildroot}/%{_pkgdocdir}/caveats"

# caveats readme

install "%{SOURCE41}"  "%{SOURCE42}" \

	-m 644 -t "%{buildroot}/%{_pkgdocdir}/"

# Provide Intel microcode license, as it requires so

install -m 644 license \

	"%{buildroot}/%{_pkgdocdir}/LICENSE.intel-ucode"

# Provide release notes, README and security for Intel microcode

install -m 644 README.md \

	"%{buildroot}/%{_pkgdocdir}/README.intel-ucode"

install -m 644 security.md \

	"%{buildroot}/%{_pkgdocdir}/SECURITY.intel-ucode"

install -m 644 releasenote.md \

	"%{buildroot}/%{_pkgdocdir}/RELEASE_NOTES.intel-ucode"

# caveats

install -m 644 "%{SOURCE100}" "%{SOURCE110}" "%{SOURCE120}" "%{SOURCE130}" \

	       "%{SOURCE140}" "%{SOURCE150}" \

	       "%{SOURCE180}" \

	-t "%{buildroot}/%{_pkgdocdir}/caveats/"

# Man page

install -m 755 -d %{buildroot}/%{_mandir}/man8/

install -m 644 "%{i_m2u_man}" -t %{buildroot}/%{_mandir}/man8/

## Caveat data

# BDW caveat

%define bdw_inst_dir %{buildroot}/%{caveat_dir}/intel-06-4f-01/

install -m 755 -d "%{bdw_inst_dir}/intel-ucode"

install -m 644 intel-ucode-with-caveats/06-4f-01 -t "%{bdw_inst_dir}/intel-ucode/"

install -m 644 "%{SOURCE100}" "%{bdw_inst_dir}/readme"

install -m 644 "%{SOURCE101}" "%{bdw_inst_dir}/config"

install -m 644 "%{SOURCE102}" "%{bdw_inst_dir}/disclaimer"

# Early update caveat

%define intel_inst_dir %{buildroot}/%{caveat_dir}/intel/

install -m 755 -d "%{intel_inst_dir}/intel-ucode"

install -m 644 intel-ucode/* -t "%{intel_inst_dir}/intel-ucode/"

install -m 644 "%{SOURCE110}" "%{intel_inst_dir}/readme"

install -m 644 "%{SOURCE111}" "%{intel_inst_dir}/config"

install -m 644 "%{SOURCE112}" "%{intel_inst_dir}/disclaimer"

# SNB caveat

%define snb_inst_dir %{buildroot}/%{caveat_dir}/intel-06-2d-07/

install -m 755 -d "%{snb_inst_dir}/intel-ucode"

install -m 644 intel-ucode-with-caveats/06-2d-07 -t "%{snb_inst_dir}/intel-ucode/"

install -m 644 "%{SOURCE120}" "%{snb_inst_dir}/readme"

install -m 644 "%{SOURCE121}" "%{snb_inst_dir}/config"

install -m 644 "%{SOURCE122}" "%{snb_inst_dir}/disclaimer"

# SKL-SP caveat

%define skl_sp_inst_dir %{buildroot}/%{caveat_dir}/intel-06-55-04/

install -m 755 -d "%{skl_sp_inst_dir}/intel-ucode"

install -m 644 intel-ucode-with-caveats/06-55-04 -t "%{skl_sp_inst_dir}/intel-ucode/"

install -m 644 "%{SOURCE130}" "%{skl_sp_inst_dir}/readme"

install -m 644 "%{SOURCE131}" "%{skl_sp_inst_dir}/config"

install -m 644 "%{SOURCE132}" "%{skl_sp_inst_dir}/disclaimer"

# SKL-U/Y caveat

%define skl_uy_inst_dir %{buildroot}/%{caveat_dir}/intel-06-4e-03/

install -m 755 -d "%{skl_uy_inst_dir}/intel-ucode"

install -m 644 intel-ucode-with-caveats/06-4e-03 -t "%{skl_uy_inst_dir}/intel-ucode/"

install -m 644 "%{SOURCE140}" "%{skl_uy_inst_dir}/readme"

install -m 644 "%{SOURCE141}" "%{skl_uy_inst_dir}/config"

install -m 644 "%{SOURCE142}" "%{skl_uy_inst_dir}/disclaimer"

# SKL-H/S/Xeoon E3 v5 caveat

%define skl_hs_inst_dir %{buildroot}/%{caveat_dir}/intel-06-5e-03/

install -m 755 -d "%{skl_hs_inst_dir}/intel-ucode"

install -m 644 intel-ucode-with-caveats/06-5e-03 -t "%{skl_hs_inst_dir}/intel-ucode/"

install -m 644 "%{SOURCE150}" "%{skl_hs_inst_dir}/readme"

install -m 644 "%{SOURCE151}" "%{skl_hs_inst_dir}/config"

install -m 644 "%{SOURCE152}" "%{skl_hs_inst_dir}/disclaimer"

# TGL caveat

%define tgl_inst_dir %{buildroot}/%{caveat_dir}/intel-06-8c-01/

install -m 755 -d "%{tgl_inst_dir}/intel-ucode"

install -m 644 intel-ucode-with-caveats/06-8c-01 -t "%{tgl_inst_dir}/intel-ucode/"

install -m 644 "%{SOURCE180}" "%{tgl_inst_dir}/readme"

install -m 644 "%{SOURCE181}" "%{tgl_inst_dir}/config"

install -m 644 "%{SOURCE182}" "%{tgl_inst_dir}/disclaimer"

# SUMMARY.intel-ucode generation

# It is to be done only after file population, so, it is here,

# at the end of the install stage

/usr/bin/python "%{SOURCE1002}" -C "%{SOURCE1001}" \

	summary -A "%{buildroot}" \

	> "%{buildroot}/%{_pkgdocdir}/SUMMARY.intel-ucode"

# Cleanup

rm -f intel-ucode-with-caveats/06-2d-07

rm -f intel-ucode-with-caveats/06-4e-03

rm -f intel-ucode-with-caveats/06-4f-01

rm -f intel-ucode-with-caveats/06-55-04

rm -f intel-ucode-with-caveats/06-5e-03

rm -f intel-ucode-with-caveats/06-8c-01

rmdir intel-ucode-with-caveats

rm -rf intel-ucode

%post

%systemd_post microcode.service

%{update_ucode}

%{reload_microcode}

# send the message to syslog, so it gets recorded on /var/log

if [ -e /usr/bin/logger ]; then

	%{check_caveats} -m -d | /usr/bin/logger -p syslog.warning -t DISCLAIMER

fi

# also paste it over dmesg (some customers drop dmesg messages while

# others keep them into /var/log for the later case, we'll have the

# disclaimer recorded twice into system logs.

%{check_caveats} -m -d > /dev/kmsg

exit 0

%posttrans

# We only want to regenerate the initramfs for a fully booted

# system; if this package happened to e.g. be pulled in as a build

# dependency, it is pointless at best to regenerate the initramfs,

# and also does not work with rpm-ostree:

# https://bugzilla.redhat.com/show_bug.cgi?id=1199582

# https://bugzilla.redhat.com/show_bug.cgi?id=1530400

[ -d /run/systemd/system ] || exit 0

# We can't simply update all initramfs images, since "dracut --regenerate-all"

# generates initramfs even for removed kernels and if dracut generates botched

# initramfs image, that results in unbootable system, even with older kernels

# that can't be used as a fallback:

# https://bugzilla.redhat.com/show_bug.cgi?id=1420180

# https://access.redhat.com/support/cases/#/case/01779274

# https://access.redhat.com/support/cases/#/case/01814106

#

# ...and we can't simply limit ourselves to updating only the currently

# running kernel, as this doesn't work well with cases where kernel

# is installed before the updated microcode, or in the same transaction.

# And we can't rely on late update either, due to issues like this:

# https://bugzilla.redhat.com/show_bug.cgi?id=1710445

#

# ...and there are also issues with setups with increased "installonly_limit"

# in /etc/yum.conf, which could lead to unacceptably long package installation

# times.

#

# So, in the end, we try to grab no more than 2 most recently installed kernels

# that are installed after the currently running one (with the currently running

# kernel that makes up to 3 in total, the default "installonly_limit" value)

# as a kernel package selection heuristic that tries to accomodate both the need

# to put the latest microcode in freshly installed kernels and also addresses

# existing concerns.

#

# For RPM selection, kernel flavours (like "debug" or "kdump" or "zfcp",

# with only the former being relevant to x86 architecture) are a part or RPM

# name; it's also a part of uname, with different separator used in RHEL 6/7

# and RHEL 8.  RT kernel, however, is special, as "rt" is another part

# of RPM name and it has its own versioning scheme both in NVR and uname.

# And there's the kernel package split in RHEL 8, so one should look for *-core

# and not the main package.

pkgs="kernel kernel-debug kernel-rt kernel-rt-debug"

qf='%%{NAME} %%{VERSION}-%%{RELEASE}.%%{ARCH} %%{installtime}\n'

: "${MICROCODE_RPM_KVER_LIMIT=2}"

rpm -qa --qf "${qf}" ${pkgs} | sort -r -n -k'3,3' | {

	kver_cnt=0

	processed=""

	skipped=""

	skip=0

	while read -r pkgname vra install_ts; do

		flavour=''

		# For x86, only "debug" flavour exists in RHEL 8

		[ "x${pkgname%*-debug}" = "x${pkgname}" ] \

			|| flavour='.debug'

		kver_cnt="$((kver_cnt + 1))"

		kver_uname="${vra}${flavour}"

		# Also check that the kernel is actually installed:

		# https://bugzilla.redhat.com/show_bug.cgi?id=1591664

		# We use the presence of symvers file as an indicator, the check

		# similar to what weak-modules script does.

		#

		# XXX: Not sure if this check is still needed, since we now

		# iterate over the rpm output.

		[ -e "/boot/symvers-${kver_uname}.gz" ] || continue

		# Check that modules.dep for the kernel is present as well,

		# otherwise dracut complains with "/lib/modules/.../modules.dep

		# is missing. Did you run depmod?".

		[ -e "/lib/modules/${kver_uname}/modules.dep" ] || continue

		# We update the kernels with the same uname as the running kernel

		# regardless of the selected limit

		if [ "x$(uname -r)" = "x${kver_uname}" \

		     -o \( "${kver_cnt}" -le "${MICROCODE_RPM_KVER_LIMIT}" \

		           -a "${skip}" = 0 \) ]

		then

			dracut -f --kver "${kver_uname}"

			processed="${processed} ${pkgname}-${vra}"

		else

			skipped="${skipped} ${pkgname}-${vra}"

		fi

		# The packages are processed until a package with the same uname

		# as the running kernel is hit (since they are sorted

		# in the descending installation time stamp older).

		[ "x$(uname -r)" != "x${kver_uname}" ] || skip=1

	done

	if [ -n "${skipped}" ]; then

		skip_msg="<4>After installation of a new version of microcode_ctl package,

initramfs hasn't been re-generated for all the installed kernel packages.

The following kernel packages have been skipped:${skipped}.

Please re-generate initramfs manually for these kernel packages with the

\"dracut -f --kver KERNEL_VERSION\" command in order to get the latest

Intel CPU microcode included into early initramfs image for it, if needed."

		if [ -e /usr/bin/logger ]; then

			echo "${skip_msg}" |

				/usr/bin/logger -p syslog.warning -t microcode_ctl

		fi

		if [ -e /dev/kmsg ]; then

			echo "${skip_msg}" > /dev/kmsg

		fi

	fi

}

exit 0

%global rpm_state_dir %{_localstatedir}/lib/rpm-state

%preun

%systemd_preun microcode.service

# Storing ucode list before uninstall

ls /usr/share/microcode_ctl/intel-ucode |

	sort > "%{rpm_state_dir}/microcode_ctl_un_intel-ucode"

ls /usr/share/microcode_ctl/ucode_with_caveats |

	sort > "%{rpm_state_dir}/microcode_ctl_un_ucode_caveats"

%{update_ucode} --action list --skip-common |

	sort > "%{rpm_state_dir}/microcode_ctl_un_file_list"

%postun

%systemd_postun microcode.service

ls /usr/share/microcode_ctl/intel-ucode 2> /dev/null |

	sort > "%{rpm_state_dir}/microcode_ctl_un_intel-ucode_after"

comm -23 \

	"%{rpm_state_dir}/microcode_ctl_un_intel-ucode" \

	"%{rpm_state_dir}/microcode_ctl_un_intel-ucode_after" \

	> "%{rpm_state_dir}/microcode_ctl_un_intel-ucode_diff"

if [ -e "%{update_ucode}" ]; then

	ls /usr/share/microcode_ctl/ucode_with_caveats 2> /dev/null |

		sort > "%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_after"

	comm -23 \

		"%{rpm_state_dir}/microcode_ctl_un_ucode_caveats" \

		"%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_after" \

		> "%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_diff"

	%{update_ucode} --action remove --cleanup \

		"%{rpm_state_dir}/microcode_ctl_un_intel-ucode_diff" \

		"%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_diff" || :

	rm -f "%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_after"

	rm -f "%{rpm_state_dir}/microcode_ctl_un_ucode_caveats_diff"

else

	while read -r f; do

		[ -L "/lib/firmware/intel-ucode/$f" ] || continue

		rm -f "/lib/firmware/intel-ucode/$f"

	done < "%{rpm_state_dir}/microcode_ctl_un_intel-ucode_diff"

	rmdir "/lib/firmware/intel-ucode" 2>/dev/null || :

	# We presume that if we don't have update_ucode script, we can remove

	# all the caveats-related files.

	while read -r f; do

		if [ -L "$f" ] || [ "${f%%readme-*}" != "$f" ]; then

			rm -f "$f"

			rmdir -p $(dirname "$f") 2>/dev/null || :

		fi

	done < "%{rpm_state_dir}/microcode_ctl_un_file_list"

fi

rm -f "%{rpm_state_dir}/microcode_ctl_un_intel-ucode"

rm -f "%{rpm_state_dir}/microcode_ctl_un_intel-ucode_after"

rm -f "%{rpm_state_dir}/microcode_ctl_un_intel-ucode_diff"

rm -f "%{rpm_state_dir}/microcode_ctl_un_ucode_caveats"

rm -f "%{rpm_state_dir}/microcode_ctl_un_file_list"

exit 0

%triggerin -- kernel, kernel-debug, kernel-rt, kernel-rt-debug

%{update_ucode}

%triggerpostun -- kernel, kernel-debug, kernel-rt, kernel-rt-debug

%{update_ucode}

%clean

rm -rf %{buildroot}

%files -f ghost_list

%ghost %attr(0755, root, root) /lib/firmware/intel-ucode/

/usr/sbin/intel-microcode2ucode

%{microcode_ctl_libexec}

/usr/share/microcode_ctl

%{dracutlibdir}/modules.d/*

%config(noreplace) %{dracutlibdir}/dracut.conf.d/*

%{_unitdir}/microcode.service

%doc %{_pkgdocdir}

%{_mandir}/man8/*

%changelog

* Thu Aug 10 2023 Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-73.19

- Update Intel CPU microcode to microcode-20230808 release, addresses

  CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2223994):

  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in

    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up

    to 0x2007006;

  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in

    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;

  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171

    up to 0x1000181;

  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501

    up to 0x4003604;

  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision

    0x5003501 up to 0x5003604;

  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601

    up to 0x7002703;

  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390

    up to 0xd0003a5;

  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba

    up to 0xbc;

  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up

    to 0x2c;

  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up

    to 0x46;

  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision

    0xf2 up to 0xf4;

  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf2

    up to 0xf4;

  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from

    revision 0xf2 up to 0xf4;

  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf2 up

    to 0xf4;

  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)

    microcode from revision 0xf6 up to 0xf8;

  - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to

    0x2c000271;

  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision

    0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in

    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;

  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in

    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from

    revision 0x2c0001d1 up to 0x2c000271;

  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in

    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in

    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in

    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;

  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in

    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from

    revision 0x2c0001d1 up to 0x2c000271;

  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in

    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision

    0x2c0001d1 up to 0x2c000271;

  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461

    up to 0x2b0004b1;

  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from

    revision 0x2c0001d1 up to 0x2c000271;

  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in

    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in

    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in

    intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;

  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in

    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from

    revision 0x2c0001d1 up to 0x2c000271;

  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in

    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in

    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;

  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in

    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to

    0x2c000271;

  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461

    up to 0x2b0004b1;

  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in

    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in

    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;

  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in

    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in

    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in

    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in

    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision

    0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in

    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from

    revision 0x2c0001d1 up to 0x2c000271;

  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in

    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in

    intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;

  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in

    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from

    revision 0x2c0001d1 up to 0x2c000271;

  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in

    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in

    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;

  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision

    0x2c0001d1 up to 0x2c000271;

  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision

    0x2b000461 up to 0x2b0004b1;

  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision

    0x2c up to 0x2e;

  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in

    intel-ucode/06-97-02) from revision 0x2c up to 0x2e;

  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)

    from revision 0x2c up to 0x2e;

  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)

    from revision 0x2c up to 0x2e;

  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in

    intel-ucode/06-97-05) from revision 0x2c up to 0x2e;

  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c

    up to 0x2e;

  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)

    from revision 0x2c up to 0x2e;

  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)

    from revision 0x2c up to 0x2e;

  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision

    0x42a up to 0x42c;

  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in

    intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;

  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in

    intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;

  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a