Deploy *-microcode packages on physical servers
Debian ships CPU microcode updates via the amd64-microcode
and ìntel-microcode
packages. Those contains fixes and performance improvements, so we should consider installing them.
This is what I use in my home lab:
# microcode packages
if $facts['virtual'] == 'physical' {
if !empty($facts['processors']['models']) {
if $facts['processors']['models'][0].match(/Intel/) {
ensure_packages('intel-microcode')
} elsif $facts['processors']['models'][0].match(/AMD/) {
ensure_packages('amd64-microcode')
}
}
}
Edited by Jérôme Charaoui