microcode updates: prepend first in initrd

fpletz · fpletz · commit bccac381b275 · 2017-02-27T17:12:33.000+01:00
Prevents crashing the kernel on boot if other blobs are prepended before the microkernel update image. Fixes #22674.
diff --git a/nixos/modules/hardware/cpu/amd-microcode.nix b/nixos/modules/hardware/cpu/amd-microcode.nix
@@ -22,7 +22,8 @@ with lib;
   ###### implementation
 
   config = mkIf config.hardware.cpu.amd.updateMicrocode {
-    boot.initrd.prepend = [ "${pkgs.microcodeAmd}/amd-ucode.img" ];
+    # Microcode updates must be the first item prepended in the initrd
+    boot.initrd.prepend = mkOrder 1 [ "${pkgs.microcodeAmd}/amd-ucode.img" ];
   };
 
 }
diff --git a/nixos/modules/hardware/cpu/intel-microcode.nix b/nixos/modules/hardware/cpu/intel-microcode.nix
@@ -22,7 +22,8 @@ with lib;
   ###### implementation
 
   config = mkIf config.hardware.cpu.intel.updateMicrocode {
-    boot.initrd.prepend = [ "${pkgs.microcodeIntel}/intel-ucode.img" ];
+    # Microcode updates must be the first item prepended in the initrd
+    boot.initrd.prepend = mkOrder 1 [ "${pkgs.microcodeIntel}/intel-ucode.img" ];
   };
 
 }

Original file line number	Diff line number	Diff line change
`@@ -22,7 +22,8 @@ with lib;`
`22`	`22`	`###### implementation`
`23`	`23`
`24`	`24`	`config = mkIf config.hardware.cpu.amd.updateMicrocode {`
`25`		`- boot.initrd.prepend = [ "${pkgs.microcodeAmd}/amd-ucode.img" ];`
	`25`	`+ # Microcode updates must be the first item prepended in the initrd`
	`26`	`+ boot.initrd.prepend = mkOrder 1 [ "${pkgs.microcodeAmd}/amd-ucode.img" ];`
`26`	`27`	`};`
`27`	`28`
`28`	`29`	`}`