OpenBSD: AMD processor microcode support added to -current
1–10 of 23 posts
Re: OpenBSD: AMD processor microcode support added to -current
#2But we have to work with the poor state some motherboard vendor's UEFI BIOS leaves the computer in, as control is passed to Openbsd's bootloader.
We should prevent ever getting to this situation on RISC-V. So far, implementations have done well in this regard, with TH1520 and JH7110 following u-boot spl to opensbi to u-boot flow, with UEFI on the works on the latter chip.
Re: OpenBSD: AMD processor microcode support added to -current
#3An example of something that wouldn't be needed at all with an open boot process, as earlier firmware would take care of it. But we have to work with the poor state some motherboard vendor's UEFI BIOS leaves the computer in, as control is passed to Openbsd's bootloader. We should prevent ever getting to this situation on RISC-V. So far, implementations have done well in this regard, with TH1520 and JH7110 following u…
Re: OpenBSD: AMD processor microcode support added to -current
#4An example of something that wouldn't be needed at all with an open boot process, as earlier firmware would take care of it. But we have to work with the poor state some motherboard vendor's UEFI BIOS leaves the computer in, as control is passed to Openbsd's bootloader. We should prevent ever getting to this situation on RISC-V. So far, implementations have done well in this regard, with TH1520 and JH7110 following u…
Every OS these days has a pretty good update process that patches things frequently. Doing it there means most users actually have a chance of seeing the patches.
Re: OpenBSD: AMD processor microcode support added to -current
#5An example of something that wouldn't be needed at all with an open boot process, as earlier firmware would take care of it. But we have to work with the poor state some motherboard vendor's UEFI BIOS leaves the computer in, as control is passed to Openbsd's bootloader. We should prevent ever getting to this situation on RISC-V. So far, implementations have done well in this regard, with TH1520 and JH7110 following u…
If boot firmware implemented it, I wouldn't count on it being updated very often. Every OS these days has a pretty good update process that patches things frequently. Doing it there means most users actually have a chance of seeing the patches.
That's precisely the problem when it's not possible to upgrade that boot firmware without the vendor's help.
Or why x86 firmware contains microcode, yet we still have to update it later.
Re: OpenBSD: AMD processor microcode support added to -current
#6An example of something that wouldn't be needed at all with an open boot process, as earlier firmware would take care of it. But we have to work with the poor state some motherboard vendor's UEFI BIOS leaves the computer in, as control is passed to Openbsd's bootloader. We should prevent ever getting to this situation on RISC-V. So far, implementations have done well in this regard, with TH1520 and JH7110 following u…
If this means some code duplication between operating systems, that’s OK.
Re: OpenBSD: AMD processor microcode support added to -current
#7OTOH, no matter the history of updates, it's better to have this under the OS's control, particularly when running OSes more suitable for servers. The thought of sending someone to update a BIOS in a colo facility is just... frightening.
Re: OpenBSD: AMD processor microcode support added to -current
#8An example of something that wouldn't be needed at all with an open boot process, as earlier firmware would take care of it. But we have to work with the poor state some motherboard vendor's UEFI BIOS leaves the computer in, as control is passed to Openbsd's bootloader. We should prevent ever getting to this situation on RISC-V. So far, implementations have done well in this regard, with TH1520 and JH7110 following u…
If boot firmware implemented it, I wouldn't count on it being updated very often. Every OS these days has a pretty good update process that patches things frequently. Doing it there means most users actually have a chance of seeing the patches.
Further: I'm typing this on a Macbook Pro which is running right now only because I was able to pull the bootrom (which is UEFI), add a NVME driver from a newer Macbook Pro, package it back up, and flash it back to the older Macbook Pro.
This let me use an NVME drive in a machine released before they added NVME support to that system's bootrom. The only side effect was that the OS didn't fully support NVME standby modes so power consumption was slightly higher, but even that was fixed in a later OS update which was released after NVME drives were in several models.
Re: OpenBSD: AMD processor microcode support added to -current
#9An example of something that wouldn't be needed at all with an open boot process, as earlier firmware would take care of it. But we have to work with the poor state some motherboard vendor's UEFI BIOS leaves the computer in, as control is passed to Openbsd's bootloader. We should prevent ever getting to this situation on RISC-V. So far, implementations have done well in this regard, with TH1520 and JH7110 following u…
Re: OpenBSD: AMD processor microcode support added to -current
#10An example of something that wouldn't be needed at all with an open boot process, as earlier firmware would take care of it. But we have to work with the poor state some motherboard vendor's UEFI BIOS leaves the computer in, as control is passed to Openbsd's bootloader. We should prevent ever getting to this situation on RISC-V. So far, implementations have done well in this regard, with TH1520 and JH7110 following u…
If boot firmware implemented it, I wouldn't count on it being updated very often. Every OS these days has a pretty good update process that patches things frequently. Doing it there means most users actually have a chance of seeing the patches.
Not only that, but updating firmware is always riskier than updating the OS. If an OS update is broken, you can easily use the firmware to recover (booting from the OS install media and working from there); recovering from a failed firmware update can be much harder and/or obscure.