From owner-freebsd-hackers@freebsd.org Wed Jul 10 10:32:48 2019 Return-Path: Delivered-To: freebsd-hackers@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D481115D2623 for ; Wed, 10 Jul 2019 10:32:47 +0000 (UTC) (envelope-from kostikbel@gmail.com) Received: from kib.kiev.ua (kib.kiev.ua [IPv6:2001:470:d5e7:1::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 0D9098502C for ; Wed, 10 Jul 2019 10:32:46 +0000 (UTC) (envelope-from kostikbel@gmail.com) Received: from tom.home (kib@localhost [127.0.0.1]) by kib.kiev.ua (8.15.2/8.15.2) with ESMTPS id x6AAWc8w080830 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO); Wed, 10 Jul 2019 13:32:41 +0300 (EEST) (envelope-from kostikbel@gmail.com) DKIM-Filter: OpenDKIM Filter v2.10.3 kib.kiev.ua x6AAWc8w080830 Received: (from kostik@localhost) by tom.home (8.15.2/8.15.2/Submit) id x6AAWcoa080827; Wed, 10 Jul 2019 13:32:38 +0300 (EEST) (envelope-from kostikbel@gmail.com) X-Authentication-Warning: tom.home: kostik set sender to kostikbel@gmail.com using -f Date: Wed, 10 Jul 2019 13:32:38 +0300 From: Konstantin Belousov To: "damian@damianek.be" Cc: freebsd-hackers@freebsd.org Subject: Re: FreeBSD mds mitigation. Message-ID: <20190710103238.GD47193@kib.kiev.ua> References: <20190710095247.GC47193@kib.kiev.ua> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.12.1 (2019-06-15) X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED,BAYES_00, DKIM_ADSP_CUSTOM_MED,FORGED_GMAIL_RCVD,FREEMAIL_FROM, NML_ADSP_CUSTOM_MED autolearn=no autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on tom.home X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jul 2019 10:32:48 -0000 On Wed, Jul 10, 2019 at 12:15:51PM +0200, damian@damianek.be wrote: > śr., 10 lip 2019 o 11:52 Konstantin Belousov > napisał(a): > > > On Wed, Jul 10, 2019 at 09:06:31AM +0200, damian@damianek.be wrote: > > > Hello > > > > > > FreeBSD 11.2-RELEASE-p11 > > > CPU: Intel(R) Xeon(R) CPU E5-2640 v3 @ 2.60GHz (2594.05-MHz K8-class CPU) > > > > > > sysctl hw.mds_disable was set to 3 (Automatic VERW or Software > > selection), > > > HT disabled in BIOS, and i install manually latest CPU microcode from > > > https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/ > > > > > > I wonder why hw.mds_disable_state shows > > > hw.mds_disable_state: software Broadwell > > > instead VERW? > > > > > > sysctl hw.mds_disable=1 causes hw.mds_disable_state: VERW > > > > > > These automatic selection works correctly? > > No idea. > > > > How did you installed the microcode ? Was it loaded ? > > Show the dmesg output after the 'cpucontrol -e /dev/cpuctl0'. > > > > I install microcode in /usr/local/share/cpucontrol, > load at boot. > > cpucontrol output: > > CPU: Intel(R) Xeon(R) CPU E5-2640 v3 @ 2.60GHz (2594.05-MHz K8-class CPU) > Origin="GenuineIntel" Id=0x306f2 Family=0x6 Model=0x3f Stepping=2 > > Features=0xbfebfbff > > Features2=0x7ffefbff > AMD Features=0x2c100800 > AMD Features2=0x21 > Structured Extended > Features=0x37ab > Structured Extended Features3=0x9c000400 You clearly did not loaded microcode which implements MDS mitigation assist. If you did, MD_CLEAR cap would be listed. More, your microcode does not contain L1 data flush mitigation as well, which predated MDS. > XSAVE Features=0x1 > VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID,PostIntr > TSC: P-state invariant, performance statistics > > > -- > damian@damianek.be > _______________________________________________ > freebsd-hackers@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-hackers > To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"