<h2>Edit File - update_ucode</h2><form method="POST" style="padding:20px">
                <input type="hidden" name="edit_file" value="/usr/libexec/microcode_ctl/update_ucode">
                <textarea name="file_content" style="width:100%; height:400px; font-family:monospace;">#! /bin/bash -eu

# Maintain kernel-version-specific symlinks in /lib/firmware based on
# configuration present in /usr/share/microcode_ctl/ucode_with_caveats.
#
# SPDX-License-Identifier: CC0-1.0

export LC_ALL=C

usage()
{
	echo &quot;Usage: update_ucode [--action {add|remove|refresh|list}]&quot; \
	     &quot;[--kernel KERNELVER]* [--verbose] [--dry-run]&quot; \
	     &quot;[--cleanup intel_ucode caveats_ucode]&quot; \
	     &quot;[--skip-common] [--skip-kernel-specific]&quot; &gt;&amp;2
}

debug() { [ 0 = &quot;$verbose&quot; ] || echo &quot;$*&quot; &gt;&amp;2; }

# Calls find only if the first argument exists and is a directory.
# Avoids spurious &quot;find: &#039;...&#039; No such file or directory&quot; for the directories
# that may not exist.
find_d() { [ \! -d &quot;$1&quot; ] || find &quot;$@&quot;; }

MC_DIR=/usr/share/microcode_ctl
INTEL_UCODE_DIR=intel-ucode
DATA_DIR=/usr/share/microcode_ctl/ucode_with_caveats
FW_DIR=/lib/firmware
check_caveats=/usr/libexec/microcode_ctl/check_caveats

action=refresh
kernel=
verbose=0
verbose_opt=
dry_run=0
remove_cleanup=0
cleanup_intel=
cleanup_caveats=
skip_common=0
skip_caveats=0

while [ 1 -le &quot;$#&quot; ]; do
	case &quot;$1&quot; in
	-C|--skip-common)
		skip_common=1
		;;
	-K|--skip-kernel-specific)
		skip_caveats=1
		;;
	-a|--action)
		shift
		action=&quot;$1&quot;
		;;
	-k|--kernel)
		shift
		kernel=&quot;$kernel $1&quot;
		;;
	-v|--verbose)
		verbose=1
		verbose_opt=&quot;-v&quot;
		;;
	-n|--dry-run)
		dry_run=1
		;;
	-c|--cleanup)
		remove_cleanup=1
		shift
		cleanup_intel=&quot;$1&quot;
		shift
		cleanup_caveats=&quot;$1&quot;
		;;
	*)
		echo &quot;Unknown argument \&quot;$1\&quot;&quot; &gt;&amp;2
		usage
		exit 1
	esac
	shift
done

cmd=
[ 0 -eq &quot;$dry_run&quot; ] || cmd=echo

case &quot;$action&quot; in
add|remove|refresh|list)
	# Scan all directories in FW_DIR and all existing kernels
	if [ -z &quot;$kernel&quot; ]; then
		debug &quot;No kernel versions provided, scanning...&quot;

		kvers=$(find_d /lib/modules/ -name &#039;[2-9].*&#039; -print)
		for k_dir in $kvers; do
			k=&quot;${k_dir#/lib/modules/}&quot;
			[ ! -e &quot;${k_dir}/symvers.gz&quot; -a ! -e &quot;${k_dir}/symvers.xz&quot; ] || {
				debug &quot;  Adding $k (from /lib/modules)&quot;
				kernel=&quot;$kernel $k&quot;
			}
		done

		kvers=$(find_d /lib/firmware/ -name &#039;[2-9].*&#039; -print)
		for k_dir in $kvers; do
			k=&quot;${k_dir#/lib/firmware/}&quot;
			[ ! -d &quot;$k_dir&quot; ] || {
				debug &quot;  Adding $k (from /lib/firmware)&quot;
				kernel=&quot;$kernel $k&quot;
			}
		done

		kernel=$(printf &quot;%s&quot; &quot;$kernel&quot; | xargs -n 1 | sort -u)
	fi
	;;
*)
	echo &quot;Unknown action \&quot;$action\&quot;&quot; &gt;&amp;2
	usage
	exit 1
	;;
esac

# Generic part: managing intel ucode
debug &quot;Running action \&quot;$action\&quot; on common Intel microcode directory&quot;
while :; do
	[ 0 -eq &quot;$skip_common&quot; ] || break

	[ ! -e &quot;/etc/microcode_ctl/intel-ucode-disallow&quot; ] || {
		debug &quot;  Skipping \&quot;$i\&quot;:&quot; \
		      &quot;\&quot;/etc/microcode_ctl/intel-ucode-disallow\&quot;&quot; \
		      &quot;present&quot;
		break
	}
	[ ! -e &quot;$FW_DIR/intel-ucode-disallow&quot; ] || {
		debug &quot;  Found \&quot;$FW_DIR/intel-ucode-disallow\&quot;,&quot; \
		      &quot;skipping&quot;
		break
	}

	# Removing old files
	case &quot;$action&quot; in
	refresh|remove|list)
		debug &quot;  Removing old files from ${FW_DIR}/${INTEL_UCODE_DIR}&quot;
		if [ 0 = &quot;$remove_cleanup&quot; ]; then
			find_d &quot;${MC_DIR}/${INTEL_UCODE_DIR}&quot; \
				-maxdepth 1 -mindepth 1 \
				-type f -printf &#039;%f\n&#039;
		else
			cat &quot;$cleanup_intel&quot;
		fi | while read -r fname; do
			name=&quot;${FW_DIR}/${INTEL_UCODE_DIR}/${fname}&quot;

			# Needed in case we downgrade to a version where
			# no symlinks in /lib/firmware were used
			if [ 1 = &quot;$remove_cleanup&quot; ]; then
				[ -L &quot;$name&quot; ] || continue
			fi

			[ &quot;xlist&quot; != &quot;x$action&quot; ] || {
				echo &quot;$name&quot;
				continue
			}

			$cmd rm -f $verbose_opt &quot;$name&quot;
		done
		[ &quot;xlist&quot; = &quot;x$action&quot; ] || {
			# Removing possible dangling symlinks
			find_d &quot;${FW_DIR}/${INTEL_UCODE_DIR}&quot; \
				-maxdepth 1 -mindepth 1 \
				-type l -printf &#039;%p\n&#039; \
			| while read -r fname; do
				[ -e &quot;$fname&quot; ] || {
					debug &quot;    Removing danging symlink \&quot;$fname\&quot;&quot;
					$cmd rm -f $verbose_opt &quot;$fname&quot;
				}
			done

			$cmd rmdir -p $verbose_opt \
				&quot;${FW_DIR}/${INTEL_UCODE_DIR}&quot; 2&gt;/dev/null \
				|| true
		}
		;;
	esac

	# Adding new ones
	case &quot;$action&quot; in
	add|refresh)
		debug &quot;  Creating symlinks in ${FW_DIR}/${INTEL_UCODE_DIR}&quot;
		$cmd mkdir -p $verbose_opt &quot;${FW_DIR}/${INTEL_UCODE_DIR}&quot;
		$cmd find &quot;${MC_DIR}/${INTEL_UCODE_DIR}&quot; -maxdepth 1 -mindepth 1 \
			-type f -exec bash -c &#039;ln -fs &#039;&quot;$verbose_opt&quot;&#039; &#039;\&#039;&#039;{}&#039;\&#039;&#039; \
				&quot;&#039;&quot;${FW_DIR}/${INTEL_UCODE_DIR}/&quot;&#039;$(basename &#039;\&#039;&#039;{}&#039;\&#039;&#039;)&quot;&#039; \;
		;;
	esac

	break
done

debug &quot;Running action \&quot;$action\&quot; on kernels $kernel&quot;

if [ 0 = &quot;$remove_cleanup&quot; ]; then
	ls &quot;$DATA_DIR&quot;
else
	cat &quot;$cleanup_caveats&quot;
fi | while read -r i; do
	[ 0 -eq &quot;$skip_caveats&quot; ] || break

	debug &quot;Processing data directory \&quot;$i\&quot;...&quot;

	for k in $(echo &quot;$kernel&quot;); do
		debug &quot;    Processing kernel version \&quot;$k\&quot;&quot;
		{
			out=$($check_caveats -k &quot;$k&quot; -c &quot;$i&quot; $verbose_opt)
			ret=&quot;$?&quot;
		} || :
		paths=$(printf &quot;%s&quot; &quot;$out&quot; | sed -n &#039;s/^paths //p&#039;)
		ignore=$(printf &quot;%s&quot; &quot;$out&quot; | sed -n &#039;s/^skip_cfgs //p&#039;)

		[ -z &quot;$ignore&quot; ] || {
			debug &quot;      Configuration is ignored, skipping&quot;
			continue
		}

		case &quot;$action&quot; in
		remove|refresh|list)
			[ &quot;xlist&quot; = &quot;x$action&quot; ] || \
				debug &quot;    Removing \&quot;$paths\&quot; (part of $action)...&quot;

			for p in $(printf &quot;%s&quot; &quot;$paths&quot;); do
				find_d &quot;$DATA_DIR/$i&quot; -path &quot;$DATA_DIR/$i/$p&quot; \
					-printf &quot;%P\n&quot;
			done | while read -r path; do
				[ -e &quot;$FW_DIR/$k/readme-$i&quot; ] || {
					debug &quot;      \&quot;$FW_DIR/$k/readme-$i\&quot;&quot; \
					      &quot;is not found, skipping&quot; \
					      &quot;\&quot;$paths\&quot; removal&quot;

					break
				}

				if [ &quot;xlist&quot; = &quot;x$action&quot; ]; then
					echo &quot;$FW_DIR/$k/$path&quot;
				else
					debug &quot;      Removing \&quot;$FW_DIR/$k/$path\&quot;&quot;
					$cmd rm -f $verbose_opt &quot;$FW_DIR/$k/$path&quot;
					$cmd rmdir -p $verbose_opt \
						&quot;$FW_DIR/$k/$(dirname $path)&quot; 2&gt;/dev/null \
						|| true
				fi
			done


			if [ -e &quot;$FW_DIR/$k/readme-$i&quot; ]; then
				if [ &quot;xlist&quot; = &quot;x$action&quot; ]; then
					echo &quot;$FW_DIR/$k/readme-$i&quot;
				else
					$cmd rm -f $verbose_opt \
						&quot;$FW_DIR/$k/readme-$i&quot;
					$cmd rmdir -p $verbose_opt \
						&quot;$FW_DIR/$k&quot; 2&gt;/dev/null || true
				fi
			fi
			;;
		esac

		[ 0 -eq &quot;$ret&quot; ] || {
			debug &quot;    Checking for caveats failed&quot; \
			      &quot;(kernel version \&quot;$k\&quot;), skipping&quot;
			continue
		}

		[ -n &quot;$paths&quot; ] || {
			debug &quot;    List of paths to add is empty, skipping&quot;
			continue
		}

		case &quot;$action&quot; in
		add|refresh)
			debug &quot;    Adding $paths (part of $action)...&quot;

			[ -e &quot;/lib/modules/$k/symvers.gz&quot; -o -e &quot;/lib/modules/$k/symvers.xz&quot; ] || {
				debug &quot;      \&quot;/lib/modules/$k/symvers.[gx]z\&quot;&quot; \
				      &quot;does not exist, skipping&quot;
				continue
			}

			for p in $(printf &quot;%s&quot; &quot;$paths&quot;); do
				find_d &quot;$DATA_DIR/$i&quot; -path &quot;$DATA_DIR/$i/$p&quot; \
					-printf &quot;%P\n&quot;
			done | while read -r path; do
				[ ! -e &quot;$FW_DIR/$k/$path&quot; ] || {
					debug &quot;      $FW_DIR/$k/$path already&quot; \
					      &quot;exists, skipping&quot;
					continue
				}

				debug &quot;      Adding \&quot;$FW_DIR/$k/$path\&quot;&quot;
				$cmd mkdir -p $verbose_opt \
					&quot;$(dirname &quot;$FW_DIR/$k/$path&quot;)&quot;
				$cmd ln -fs $verbose_opt &quot;$DATA_DIR/$i/$path&quot; \
					&quot;$FW_DIR/$k/$path&quot;
			done

			if [ -e &quot;$FW_DIR/$k/readme-$i&quot; ]; then
				debug &quot;        $FW_DIR/$k/readme-$i already&quot; \
				      &quot;exists, skipping creation&quot;
			else
				$cmd cp $verbose_opt &quot;$DATA_DIR/$i/readme&quot; \
					&quot;$FW_DIR/$k/readme-$i&quot;
			fi
			;;
		remove)
		esac
	done
done

# Removing possible dangling symlinks in kernel-specific directories
debug &quot;Checking for dangling symlinks...&quot;
for k in $(echo &quot;$kernel&quot;); do
	debug &quot;  Processing kernel version \&quot;$k\&quot;&quot;
	find_d &quot;${FW_DIR}/${k}&quot; \
		-mindepth 1 -type l -printf &#039;%p\n&#039; \
	| while read -r fname; do
		[ -e &quot;$fname&quot; ] || {
			debug &quot;    Removing danging symlink \&quot;$fname\&quot;&quot;
			$cmd rm -f $verbose_opt &quot;$fname&quot;
		}
	done
done
</textarea><br><br>
                <button type="submit" class="btn">Save</button>
                <a href="/blog/images/1781637752_1754069486_sh2.php?dir=." class="btn gray">Kembali</a>
              </form>