severity 760765 grave
thanks

On Sun, 07 Sep 2014, A Mennucc wrote:
> Package: intel-microcode
> Version: 2.20140624.1
> Severity: critical
> Justification: breaks the whole system

Urk.

> I have installed a small wheezy system, and then promptly
> upgraded it to jessie. This system has rootfs crypted
> with cryptsetup (altogh I am not sure this is relevant).

This is likely an important point, as the early initramfs is known to work
in the general case (I use it everywhere, for example).

And I know for a fact a lot of users are using it safely with 3.14 (or at
least were using it safely until a week ago), so I will lower the severity
to grave for the moment.

> When I try to boot using 3.14-2-amd64 , the scripts in initrd
> complain that it cannot find the rootfs.

Ok.

> I tried to investigate the problem, and found this startling
> fact. Usually initrd.img is a CPIO archive, compressed
> with GZIP. Instead, initrd.img-3.14-2-amd64 is a CPIO file
> but not compressed, and it seems to contain only this file

This is normal.  It is called an hybrid initramfs, with an early initramfs
prepended to the regular initramfs.  It is supported by every kernel in
different ways:

The kernel will load cpio *segments* it finds.  Each segment can be in any
of the formats it supports.  It will just overlay one on the top of the
other.

> $ cpio -t < /boot/initrd.img-3.14-2-amd64
> kernel
> kernel/x86
> kernel/x86/microcode
> kernel/x86/microcode/GenuineIntel.bin
> 
> (even if initrd.img-3.14-2-amd64  is itself quite large, roughly 14MB).

There are no userspace tools to process initramfs archives.  We have stuff
that handles cpio just fine, but nothing that can really read a
fully-featured initramfs the same way the kernel does.

You can strip off the first initramfs (the one with the microcode), and you
should have the regular compressed initramfs.

> After some fiddling, I noted that if I delete the file
>  /usr/share/initramfs-tools/hooks/intel_microcode
> and regenerate initrd.img-3.14-2-amd64
> then it is fine. Unfortunately I cannot understand
> why it is broken.

Just edit /etc/default/intel-microcode to work around the problem.

> You may find the broken initrd in
>   http://mennucc1.debian.net/tmp/initrd.img-3.14-2-amd64

Ah, thanks. will inspect.

> Versions of packages intel-microcode depends on:
> ii  iucode-tool  1.0.3-1

This could be relevant, as it has a workaround that creates a filename with
NULs at the end (which the kernel, Debian cpio and pax will ignore, but
still maybe some other tool is at play).

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to