[SOLVED] AMD/INTEL microcodes

[TwiX]

Hi,

I'm wondering if there is any reason why amd64-microcode and intel-microcode are not installed by default.

Installing these packages is something you recommand ?

 

[cheiss]

Hi,

generally, yes, it is recommended to install these. The can fix CPU bugs or work around them more efficiently than it is possible in software (see esp. all the side-channel vulnerabilities).

The problem is that these are proprietary, closed-source blobs and contained in the non-free-firmware (or non-free in Debian 11 and earlier).
Debian does not by default enable these repository components, due to the above.

The Debian wiki page on Microcode explains that topic a bit more in detail, in addition to how to enable & install them.

 

[TwiX]

thanks !

 

[patch]

Debian does not by default enable these repository components

So why does the Proxmox update GUI not include them by default? Or is it planned to include relevant components after they have been tested in the Proxmox environment?