It is a lot easier to simply do: sudo apt install intel-microcode, on every proxmox node since microcode patches must be applied on every reboot and not all patches can be applied to a booted system, eg. a boot is required. See https://wiki.debian.org/Microcode