mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-12-03 12:23:02 +00:00
36c3acef21
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20230214 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html Fixes: CVE-2022-38090 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html Fixes: CVE-2022-33196 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html Fixes: CVE-2022-21216
35 lines
1.0 KiB
Nix
35 lines
1.0 KiB
Nix
{ lib, stdenv, fetchFromGitHub, libarchive, iucode-tool }:
|
|
|
|
stdenv.mkDerivation rec {
|
|
pname = "microcode-intel";
|
|
version = "20230214";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "intel";
|
|
repo = "Intel-Linux-Processor-Microcode-Data-Files";
|
|
rev = "microcode-${version}";
|
|
hash = "sha256-SwdE1c7OEg5nncs5QqaTKCL77KddeHw7ZilctQ4L9RA=";
|
|
};
|
|
|
|
nativeBuildInputs = [ iucode-tool libarchive ];
|
|
|
|
installPhase = ''
|
|
runHook preInstall
|
|
|
|
mkdir -p $out kernel/x86/microcode
|
|
iucode_tool -w kernel/x86/microcode/GenuineIntel.bin intel-ucode/
|
|
touch -d @$SOURCE_DATE_EPOCH kernel/x86/microcode/GenuineIntel.bin
|
|
echo kernel/x86/microcode/GenuineIntel.bin | bsdtar --uid 0 --gid 0 -cnf - -T - | bsdtar --null -cf - --format=newc @- > $out/intel-ucode.img
|
|
|
|
runHook postInstall
|
|
'';
|
|
|
|
meta = with lib; {
|
|
homepage = "http://www.intel.com/";
|
|
description = "Microcode for Intel processors";
|
|
license = licenses.unfreeRedistributableFirmware;
|
|
platforms = platforms.linux;
|
|
maintainers = with maintainers; [ ];
|
|
};
|
|
}
|