1{ 2 lib, 3 stdenv, 4 fetchFromGitHub, 5 libarchive, 6 iucode-tool, 7 buildPackages, 8}: 9 10stdenv.mkDerivation (finalAttrs: { 11 pname = "microcode-intel"; 12 version = "20250812"; 13 14 src = fetchFromGitHub { 15 owner = "intel"; 16 repo = "Intel-Linux-Processor-Microcode-Data-Files"; 17 rev = "microcode-${finalAttrs.version}"; 18 hash = "sha256-FfHSAMu4cvJKOjufr5ZwYHHn8dYa77jR5Br65vGP5Y8="; 19 }; 20 21 nativeBuildInputs = [ libarchive ]; 22 23 installPhase = '' 24 runHook preInstall 25 26 mkdir -p $out kernel/x86/microcode 27 ${stdenv.hostPlatform.emulator buildPackages} ${lib.getExe iucode-tool} -w kernel/x86/microcode/GenuineIntel.bin intel-ucode/ 28 touch -d @$SOURCE_DATE_EPOCH kernel/x86/microcode/GenuineIntel.bin 29 echo kernel/x86/microcode/GenuineIntel.bin | bsdtar --uid 0 --gid 0 -cnf - -T - | bsdtar --null -cf - --format=newc @- > $out/intel-ucode.img 30 31 runHook postInstall 32 ''; 33 34 meta = with lib; { 35 homepage = "https://www.intel.com/"; 36 changelog = "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/${finalAttrs.src.rev}"; 37 description = "Microcode for Intel processors"; 38 license = licenses.unfreeRedistributableFirmware; 39 platforms = [ 40 "i686-linux" 41 "x86_64-linux" 42 ]; 43 maintainers = with maintainers; [ felixsinger ]; 44 }; 45})