Completely Off Topic Chat

BLizgreat! · 2017-02-06 02:36:33

^ No worries one of the things I came to respect aboutcha Slob, you have no prob calling it as you see it.

Specific package is amd64-microcode, described as "processor microcode firmware for AMD CPUS". There's another couple similar meant for Intel procs.

Last edited by BLizgreat! (2017-02-06 02:37:01)

glittersloth · 2017-02-06 02:42:21

^ I assume it's this (for Intel); https://wiki.debian.org/Microcode

Seems pretty straightforward. Don't even need to reboot, according to the documentation.
You installed it? Any noticeable improvements?

For something that sounds rather crucial, the documentation seems rather lean. :-/

Last edited by glittersloth (2017-02-06 02:43:55)

BLizgreat! · 2017-02-06 03:00:44

Installed the one for AMD, since system has an amd proc, from Sid repo. Cause was a later version than the one in backports.

May just be my imagination but do think OS is a bit snappier afterwards, sometimes runs a bit cooler than it used to, not getting a systemd error about missing microcode during boot anymore and totally agree with you Slob-san, would think there would be clearer docs about this.

Last edited by BLizgreat! (2017-02-06 03:03:31)

BLizgreat! · 2017-02-06 05:28:40

Update: Before I ignorantly start a panic. According to Arch wiki Slob-san was right, people do get the microcode packages via linux-firmware default.

Reason I was seeing errors in systemd boot up, is mostly surely because I'd selectively upgraded some firmware packages from backports.

Will have to do some additional digging around on this OS about this topic.

Last edited by BLizgreat! (2017-02-06 05:30:19)

Head_on_a_Stick · 2017-02-06 07:42:52

BLwillbegreat! wrote:

Where do you guys stand on upgrading the cpu microcode?

Microcode updates should *always* be applied, they are critical.

I actually opt-out of the Debian method (to keep my sources "clean") and instead use the pre-prepared initramfs images from Arch Linux that can be loaded immediately before the system's initial ram disk (if you use one):

https://www.archlinux.org/packages/extr … tel-ucode/

Just download the package, `tar xf` it then point your bootloader configuration to boot/intel-ucode.img

ratcheer · 2017-02-06 15:09:43

BLwillbegreat! wrote:

Where do you guys stand on upgrading the cpu microcode? Should, shouldn't, ya don't think/find it even matters? Thanks fellas-felletes.

I upgrade it whenever the revised package is released. I find it odd, though, that the internal date of the program is always the same, whild the package is updated a handful of times, annually. On Arch Linux, my package date is 20161104, but the date logged by the program has been 2013-06-12 for the past few years. Yes, I am certain that the latest image installed by the package is the one that's being loaded from /boot.

Tim

BLizgreat! · 2017-02-07 03:04:27

Thanks fellas.

photonucleon · 2017-02-07 13:35:49

Two years ago today I logged in to the #! forums to see that it was The End.

And now here I am with BunsenLabs

A million thanks once more to corenominal for #! and to its awesome community for being awesome, and to the team and community members here at the Labs for continuing to be so!

ratcheer · 2017-02-07 18:04:27

I compiled a new kernel on Gentoo this morning. For one of the rare times, I saw my system use all of its 8 GB of RAM and actually use some of the swap.

Tim

Head_on_a_Stick · 2017-02-13 22:06:48

Trying out Lynis:

Lynis is an open source security tool. It helps with auditing systems running UNIX-alike systems (Linux, macOS, BSD), and providing guidance for system hardening and compliance testing.

A stock, freshly installed BunsenLabs system scored 63/100

I've tweaked my Helium test-bed a bit — apparmor, unbound, nftables, aide — that scored 75/100 but the script didn't recognise my (highly restrictive) firewall so the real score is a bit higher.

OpenBSD-current manages 78/100 straight out of the box, no tweaks... 8)

Head_on_a_Stick · 2017-02-13 23:06:12

Slightly related:

Is the Linux desktop less secure than Windows 10?

For anybody who hasn't yet:

sudo apt purge "gstreamer0.1*"

martix · 2017-02-14 11:40:23

Head_on_a_Stick wrote:

For anybody who hasn't yet:
sudo apt purge "gstreamer0.1*"

It will remove 12 packages... Just go ahead then?

Well, no more Clementine and Xfburn either, but I don't need them anyway...

Last edited by martix (2017-02-14 14:07:33)

Head_on_a_Stick · 2017-02-14 18:16:56

martix wrote:

Well, no more Clementine and Xfburn

The stretch versions may be backportable (I haven't tried) and depend on gstreamer1.0, which isn't quite as bad as the 0.1 set.

https://wiki.debian.org/SimpleBackportCreation

martix · 2017-02-14 21:35:48

^That's ok by now, I did not use those applications anyway. If I need something similar, I'll try an alternative. Anyhow thank you for mentioning the security issue with gstreamer.

ohnonot · 2017-02-15 07:54:24

thanks for that, i wouldn't have noticed.
i had one old and useless app installed that still required gstreamer0.10*, but it's all gone now.

hhh · 2017-02-18 12:45:51

Isn't that a Katy Perry song?

Head_on_a_Stick · 2017-02-19 01:24:45

My OpenBSD mirror has recently added an arm64 subfolder:

http://mirror.ox.ac.uk/pub/OpenBSD/snapshots/arm64/

Unfortunately, the default compiler for that architecture will be Clang

In other OpenBSD news, syspatch(8) will introduce Linux-style base system upgrades for the upcoming version 6.1, removing the need to recompile for any patches when running OpenBSD-stable

BLizgreat! · 2017-02-20 01:00:36

Last week I learned Perl 5. Now I've written 1k production code SLOC in Perl. And I liked it.

^ Just me or did that in fact come off sounding a bit perverted?

Oh you dirty monkey, you dirty, dirty monkey.

Messing round, just stopping in to see how my fave gnu/nix community is doing.

Head_on_a_Stick · 2017-02-25 13:09:39

My list of kernel parameters is getting silly now:

Helium: ~ $ cat /proc/cmdline
initrd=\intel-ucode.img initrd=\Helium\initrd.img root=/dev/sda3 rw rootflags=subvol=Helium quiet zswap.enabled=1 snd_hda_intel.index=1 apparmor=1 security=apparmor panic=0 scsi_mod.use_blk_mq=y dm_mod.use_blk_mq=y

#riced

hhh · 2017-02-25 13:51:58

Lol! You need to add ktchen_snk=1

#1221 2017-02-06 02:36:33

Re: Completely Off Topic Chat

#1222 2017-02-06 02:42:21

Re: Completely Off Topic Chat

#1223 2017-02-06 03:00:44

Re: Completely Off Topic Chat

#1224 2017-02-06 05:28:40

Re: Completely Off Topic Chat

#1225 2017-02-06 07:42:52

Re: Completely Off Topic Chat

#1226 2017-02-06 15:09:43

Re: Completely Off Topic Chat

#1227 2017-02-07 03:04:27

Re: Completely Off Topic Chat

#1228 2017-02-07 13:35:49

Re: Completely Off Topic Chat

#1229 2017-02-07 18:04:27

Re: Completely Off Topic Chat

#1230 2017-02-13 22:06:48

Re: Completely Off Topic Chat

#1231 2017-02-13 23:06:12

Re: Completely Off Topic Chat

#1232 2017-02-14 11:40:23

Re: Completely Off Topic Chat

#1233 2017-02-14 18:16:56

Re: Completely Off Topic Chat

#1234 2017-02-14 21:35:48

Re: Completely Off Topic Chat

#1235 2017-02-15 07:54:24

Re: Completely Off Topic Chat

#1236 2017-02-18 12:45:51

Re: Completely Off Topic Chat

#1237 2017-02-19 01:24:45

Re: Completely Off Topic Chat

#1238 2017-02-20 01:00:36

Re: Completely Off Topic Chat

#1239 2017-02-25 13:09:39

Re: Completely Off Topic Chat

#1240 2017-02-25 13:51:58

Re: Completely Off Topic Chat

Board footer