Manage all CPU microcode packages on nodo::base::physical

diff --git a/manifests/base/physical.pp b/manifests/base/physical.pp
index 035f5c7fbaccbcd5951f74179b6c15678c231b21..42d2ce1b06ef42ffa771c30e711dea33f781020e 100644 (file)
--- a/manifests/base/physical.pp
+++ b/manifests/base/physical.pp
@@ -1,6 +1,10 @@
 class nodo::base::physical inherits nodo::base::host {
   include nodo::subsystem::sensors
 
+  # Install all available CPU microcode packages
+  include nodo::utils::microcode::intel
+  include nodo::utils::microcode::amd64
+
   # Downtime monitoring
   #
   # Check https://tracker.debian.org/pkg/downtimed

diff --git a/manifests/subsystem/inception.pp b/manifests/subsystem/inception.pp
index 1ed57d75f02e34b8b8115044f6a204c3b2f29be6..7e99f79e8ab5d91c8d0732ef7d236fb724a4d2ed 100644 (file)
--- a/manifests/subsystem/inception.pp
+++ b/manifests/subsystem/inception.pp
@@ -9,7 +9,7 @@ define nodo::subsystem::inception(
     user       => $name,
     provider   => git,
     source     => "https://git.fluxo.info/${git_dev}/apps",
-    revision   => '26cda126b51770eee410b2740d92af6c8172b4be',
+    revision   => '3ee9a3a882699deaea4327d3bf5bc5a0fd174b5c',
     submodules => true,
     depth      => 1,
     require    => [ File["/home/${name}"], User[$name] ],

diff --git a/manifests/utils/microcode/amd64.pp b/manifests/utils/microcode/amd64.pp
new file mode 100644 (file)
index 0000000..653f1f1
--- /dev/null
+++ b/manifests/utils/microcode/amd64.pp
@@ -0,0 +1,15 @@
+class nodo::utils::microcode::amd64 (
+  $ensure = 'installed',
+) {
+  # Microcode
+  #
+  # See https://wiki.debian.org/Microcode
+  package { [
+    'amd64-microcode',
+  ]:
+    ensure => $architecture ? {
+      'amd64' => $ensure,
+      default => absent,
+    },
+  }
+}

diff --git a/manifests/utils/microcode/intel.pp b/manifests/utils/microcode/intel.pp
index 10a32eff028141d96d1edc5f4456f3c06f5f2f67..ffd6b07cdaaea801add246bc4970aafb3d9407ea 100644 (file)
--- a/manifests/utils/microcode/intel.pp
+++ b/manifests/utils/microcode/intel.pp
@@ -2,11 +2,16 @@ class nodo::utils::microcode::intel (
   $ensure = 'installed',
 ) {
   # Microcode
-  # See https://wiki.archlinux.org/index.php/Microcode
+  #
+  # See https://wiki.debian.org/Microcode
+  #     https://wiki.archlinux.org/index.php/Microcode
   #     http://en.gentoo-wiki.com/wiki/Intel_Microcode
   package { [
     'intel-microcode',
   ]:
-    ensure => $ensure,
+    ensure => $architecture ? {
+      'amd64' => $ensure,
+      default => absent,
+    },
   }
 }