just for info:
since, as of today, the debian stretch non-free repo contains a very old (3.20160316.3) amd64-microcode version - so I used stretch-backports to get a more recent version (3.20180524.1~bpo9+1):
1.) add non-free backports security updates to sources
deb
http://ftp.debian.org/debian stretch-backports non-free
2.) update repo
apt-get update
3.) install AMD64 microcode
apt-get -t stretch-backports -y install amd64-microcode
4.) reboot
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
info on the operating environment:
While updating I used live system migration for all running VMs (various Linux and Windows servers and workstations).
All VM disks are located on serveral external NFS storage servers (so I don't know if there is any impact on Proxmox internal or distribute storage),
So far I all VMs on a three systems cluster are continuing running without problems (most VMs are configured with CPU type Opteron_G3 or Opteron_G4, a few with kvm64)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Just for convenience - the attached "amd64-microcode.zip" file contains two files:
a) "debian-non-free.list" ... to be placed in /etc/apt/sources.list.d
b) "install-amd64-microcode.sh" ... a script to automate the update and install process (note: the file doesn't have any execute attributes - add them to activate the script)
-------------------------------------------------------------------------
CPUINFO before installing the microcode package:
#cat /proc/cpuinfo
processor : 0
vendor_id : AuthenticAMD
cpu family : 21
model : 2
model name : AMD Opteron(tm) Processor 4334
stepping : 0
microcode : 0x600084f
cpu MHz : 2827.057
cache size : 2048 KB
...
-------------------------------------------------------------------------
CPUINFO after installing the microcode package and the reboot:
cat /proc/cpuinfo
processor : 0
vendor_id : AuthenticAMD
cpu family : 21
model : 2
model name : AMD Opteron(tm) Processor 4334
stepping : 0
microcode : 0x6000852
...