Amd microcode update linux

AMD microcode

This article describes updating the microcode for AMD processors. In most cases the firmware of a system, i.e. the BIOS or UEFI, will contain updated processor microcode. It is recommended to always update the system firmware, because vendors will also incorporate new microcode provided by AMD with their BIOS updates (in the changelog this is often called «AGESA update»). It is however also possible to have the Linux kernel load the same updated microcode.

Important
For AMD GPU firmware see the corresponding articles radeon #Firmware and AMDGPU #Firmware instead.

Installation

Kernel configuration

For the Linux kernel to support CPU microcode loading, the following must be enabled:

Processor type and features ---> [*] CPU microcode loading support [ ] Intel microcode loading support [*] AMD microcode loading support

For the kernel to be able to load any firmware (including microcode), the firmware loading facility option must also be enabled:

Device Drivers ---> Generic Driver Options Firmware loader ---> Firmware loading facility

When microcode is available and the kernel is configured, it will update microcode automatically. In most modern configurations the root partition (where the /lib/firmware directory is located) will be mounted during the boot process. For this reason, to be able to update the microcode as soon as possible, it is also necessary to include the microcode firmware blobs either in the kernel image or the initrd/initramfs.

Warning
Building the firmware loading facility as a module, Firmware loading facility i.e. CONFIG_FW_LOADER=M , will prevent early microcode updating in most setups.

For further instructions, refer to the Microcode article.

Firmware blob files installation

Microcode updates for AMD processors are provided by the sys-kernel/linux-firmware package.

Microcode firmware files

There are different firmware files for different AMD CPU families. The CPU family identification of the current system can be obtained from /proc/cpuinfo :

In this example the CPU belongs to the AMD CPU family 22.

Important
The CPU family identificator listed in /proc/cpuinfo uses the decimal numeral system.

The following table helps to identify the right firmware blob file for a given CPU family identificator:

Firmware blob file	Decimal	Hexadecimal	Family name	Year	Examples
amd-ucode/microcode_amd.bin	16	10h	K10	2007	Phenom, Phenom II, Athlon II
	17	11h	Turion	2008	Athlon X2, Sempron X2, Turion X2
	18	12h	Llano, Fusion	2009	A- and E2-Series APU with Radeon HD graphics, Athlon II, Sempron X2
	20	14h	Bobcat	2011	C- and E-Series APU with Radeon HD graphics
amd-ucode/microcode_amd_fam15h.bin	21	15h	Bulldozer, Piledriver, Steamroller, Excavator	2011	FX series, A-Series APU with Radeon HD graphics, Opteron 6200/6300
amd-ucode/microcode_amd_fam16h.bin	22	16h	Jaguar, Puma	2013	A-series and E-Series APU with Radeon HD graphics
amd-ucode/microcode_amd_fam17h.bin	23	17h	Zen, Zen+, Zen 2	2017	Ryzen 1000-5000 series, Threadripper, EPYC 7xx1/7xx2
amd/amd_sev_fam17h_model0xh.sbin			EPYC 7xx1 [1] (Zen 1)	2017	SEV (Secure Encrypted Virtualization) firmware update for models in the range 00h to 0fh [2]
amd/amd_sev_fam17h_model3xh.sbin			EPYC 7xx2 [3] (Zen 2)	2019	SEV firmware update for models in the range 30h to 3fh [4]
amd-ucode/microcode_amd_fam19h.bin	25	19h	Zen 3 and Zen 4	2021	Ryzen 5000 series (not all models), Ryzen 9 7900X & 7950X series, EPYC 7xx3
amd/amd_sev_fam19h_model0xh.sbin			EPYC 7xx3 [5] (Zen 3)	2021	SEV firmware update for models in the range 00h to 0fh [6]

Note
Note that after the K8 AMD has started to refer to the various microarchitectures as «AMD Family xxh», where «xxh» is the hexadecimal CPU family value from the CPUID. For example, AMD Family 10h really is the official AMD name for the K10 microarchitecture. Following this convention AMD even used AMD Family 0Fh in retrospective for the previous K8 microarchitecture (CPUID 0F hexadecimal or 15 decimal).

Supplying the microcode files to the kernel

It is possible to incorporate the microcode firmware blob files for all AMD processors in the Linux kernel, but it should be considered that this will enlarge the kernel image by the combined size of those files.

Device Drivers ---> Generic Driver Options Firmware loader ---> Firmware loading facility (amd-ucode/microcode_amd.bin amd-ucode/microcode_amd_fam15h.bin amd-ucode/microcode_amd_fam16h.bin amd-ucode/microcode_amd_fam17h.bin amd/amd_sev_fam17h_model0xh.sbin amd/amd_sev_fam17h_model3xh.sbin amd-ucode/microcode_amd_fam19h.bin amd/amd_sev_fam19h_model0xh.sbin) External firmware blobs to build into the kernel binary (/lib/firmware) Firmware blobs root directory

Note
The CONFIG_EXTRA_FIRMWARE option allows specifying multiple firmware files by listing them space-separated.
The CONFIG_EXTRA_FIRMWARE_DIR is set to /lib/firmware , this is the default directory.

For in-kernel microcode it may be preferable to only include the firmware blob file(s) specific to the identified CPU. For example, for the EPYC 7xx1 CPU family this would be CONFIG_EXTRA_FIRMWARE=»amd-ucode/microcode_amd_fam17h.bin amd/amd_sev_fam17h_model0xh.sbin» .

Instead of in-kernel, the firmware blob files can also be included in an (additional) initrd/initramfs.

General setup --- > [*] Initial RAM filesystem and RAM disk (initramfs/initrd) support (BLK_DEV_INITRD)

This method has the advantage that only the specific initrd/initramfs must be rebuild in case of a firmware files update. If the initramfs USE flag is used with the sys-kernel/linux-firmware package, microcode for all AMD processors will be saved in /boot/amd-uc.img , allowing it to be loaded alongside any other initrd/initramfs by a Linux bootloader such as GRUB.

Note
With the initramfs USE flag set, package sys-kernel/linux-firmware will fail if /boot is a separate partition and is not mounted before installing or updating the package (by running emerge ).

Note
GRUB will detect the presence of /boot/amd-uc.img and it will automatically be loaded. It may be necessary to update grub.cfg by running grub-mkconfig .

Verification

Booting a capable kernel, the following line should be observed in case a microcode update was performed: microcode: updated early

Note
It is possible the microcode has already been fully updated by the system’s firmware vendor. In that case the dmesg output does not contain the update log message.

In any case the output will show a patch_level . The following example shows a successful early microcode update using the Linux kernel and supplied microcode firmware blob files (in-kernel or from an initrd/initramfs):

[ 0.584603] microcode: microcode: updated early to new patch_level=0x06000832 [ 0.868036] microcode: CPU0: patch_level=0x06000832 [ 0.868116] microcode: CPU1: patch_level=0x06000832 [ 0.868196] microcode: CPU2: patch_level=0x06000832 [ 0.868277] microcode: CPU3: patch_level=0x06000832 [ 0.868360] microcode: CPU4: patch_level=0x06000832 [ 0.868451] microcode: CPU5: patch_level=0x06000832 [ 0.868538] microcode: CPU6: patch_level=0x06000832 [ 0.868619] microcode: CPU7: patch_level=0x06000832 [ 0.868718] microcode: Microcode Update Driver: v2.01 , Peter Oruba

Troubleshooting

Newly installed firmware is not used after a reboot

The image file /boot/amd-uc.img is in a file path recognized by GRUB by default, but only after regenerating the grub configuration. This is done by the following command:

Found linux image: /boot/vmlinuz-4.18.12 Found initrd image: /boot/amd-uc.img /boot/initramfs-4.18.12.img

The command output should show it found the /boot/amd-uc.img file.

After installing updated microcode firmware files, the kernel still loads the previous microcode patch-level

After updating sys-kernel/linux-firmware that includes updated AMD processor microcode they will only be installed to /lib/firmware on the root directory. With the initramfs USE flag set the package will also update /boot/amd-uc.img with the new firmware files, whereas (if so configured) both the main initramfs/initrd as well as the kernel will still contain the previous files from sys-kernel/linux-firmware.

If the microcode was supplied in-kernel, rebuilding and installing the kernel as usual is needed to finally provide the new microcode firmware files to the kernel during the boot process. Likewise, if the microcode was included in the main initramfs/initrd, rebuilding it will be necessary to replace the previous with the new versions of the microcode firmware files.

Note
Even after AMD releases updated microcode firmware files, it should be noted that it takes some time before they are included in sys-kernel/linux-firmware and maybe longer before they are supplied with the next stable version.

If the patch-level still doesn’t change after including the updated firmware files it is very likely that the microcode simply doesn’t apply for the specific CPU.

References

1. ↑Revision Guide for AMD Family 17h Models 00h-0Fh Processors (PDF, page 6)
2. ↑[PATCH] linux-firmware: Update AMD SEV firmware (LKML, John Allen, commit pushed, 18 Jun 2019)
3. ↑Revision Guide for AMD Family 17h Models 30h-3Fh Processors (PDF, page 6)
4. ↑[PATCH] linux-firmware: Update AMD SEV firmware (LKML, Josh Boyer, signed-off, 20 Jul 2020)
5. ↑Revision Guide for AMD Family 19h Models 00h-0Fh Processors (PDF, page 8)
6. ↑[PATCH v2] linux-firmware: Update AMD SEV firmware (LKML, John Allen, signed-off, 10 Sep 2021)

Источник

Linux: Install and Update Intel/AMD CPU Microcode

This post will guide you how to install the AMD or Intel Microcode package in Linux. How do I update the CPU Microcode in Linux system.

What is Microcode?

Microcode could be assumed as firmware of the CPU, which generally adds more functionality to the processor and patches hardware level bugs.

Install Intel CPU Microcode

For CentOS/RHEL Linux:

Type the following command:

# yum install microcode_ctl

[root@devops ~]# yum install microcode_ctl Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: mirrors.cn99.com * extras: mirrors.cn99.com * updates: mirrors.cn99.com Resolving Dependencies --> Running transaction check ---> Package microcode_ctl.x86_64 2:2.1-29.16.el7_5 will be installed --> Finished Dependency Resolution Dependencies Resolved ======================================================================================================== Package Arch Version Repository Size ======================================================================================================== Installing: microcode_ctl x86_64 2:2.1-29.16.el7_5 updates 1.4 M Transaction Summary ======================================================================================================== Install 1 Package Total download size: 1.4 M Installed size: 1.7 M Is this ok [y/d/N]: y Downloading packages: microcode_ctl-2.1-29.16.el7_5.x86_64.rpm | 1.4 MB 00:00:00 Running transaction check Running transaction test Transaction test succeeded Running transaction Warning: RPMDB altered outside of yum. Installing : 2:microcode_ctl-2.1-29.16.el7_5.x86_64 1/1 Verifying : 2:microcode_ctl-2.1-29.16.el7_5.x86_64 1/1 Installed: microcode_ctl.x86_64 2:2.1-29.16.el7_5 Complete!

For Ubuntu/Debian Linux:

$ sudo apt-get install intel-microcode iucode-tool

Install AMD CPU Microcode

If you want to install AMD microcode firmware on your Linux system, type:

For CentOS/RHEL Linux:

# yum install microcode_ctl

For Ubuntu/Debian Linux:

sudo apt-get install amd64-ucode

Then you need to reboot the system and check the microcode status with the dmesg command.

[root@devops ~]# dmesg | grep microcode [ 0.182177] microcode: CPU0 sig=0x306c3, pf=0x2, revision=0x19 [ 0.182187] microcode: Microcode Update Driver: v2.00 , Peter Oruba [ 835.278981] microcode: CPU0 sig=0x306c3, pf=0x2, revision=0x19 [ 835.278995] microcode: CPU0 update to revision 0x25 failed [ 835.302031] This updated microcode supersedes microcode provided by Red Hat with Historically, Red Hat has provided updated microcode, developed by our temporarily suspended this practice while microcode stabilized. Red Hat is once again providing an updated Intel microcode package (microcode_ctl) and AMD microcode package (linux-firmware) to customers continue to update these microcode packages as necessary. Please Intel and AMD microcode package versions.

Источник