1{
2 lib,
3 stdenv,
4 fetchFromGitHub,
5 libarchive,
6 iucode-tool,
7 buildPackages,
8}:
9
10stdenv.mkDerivation (finalAttrs: {
11 pname = "microcode-intel";
12 version = "20250812";
13
14 src = fetchFromGitHub {
15 owner = "intel";
16 repo = "Intel-Linux-Processor-Microcode-Data-Files";
17 rev = "microcode-${finalAttrs.version}";
18 hash = "sha256-FfHSAMu4cvJKOjufr5ZwYHHn8dYa77jR5Br65vGP5Y8=";
19 };
20
21 nativeBuildInputs = [ libarchive ];
22
23 installPhase = ''
24 runHook preInstall
25
26 mkdir -p $out kernel/x86/microcode
27 ${stdenv.hostPlatform.emulator buildPackages} ${lib.getExe iucode-tool} -w kernel/x86/microcode/GenuineIntel.bin intel-ucode/
28 touch -d @$SOURCE_DATE_EPOCH kernel/x86/microcode/GenuineIntel.bin
29 echo kernel/x86/microcode/GenuineIntel.bin | bsdtar --uid 0 --gid 0 -cnf - -T - | bsdtar --null -cf - --format=newc @- > $out/intel-ucode.img
30
31 runHook postInstall
32 '';
33
34 meta = with lib; {
35 homepage = "https://www.intel.com/";
36 changelog = "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/${finalAttrs.src.rev}";
37 description = "Microcode for Intel processors";
38 license = licenses.unfreeRedistributableFirmware;
39 platforms = [
40 "i686-linux"
41 "x86_64-linux"
42 ];
43 maintainers = with maintainers; [ felixsinger ];
44 };
45})