talos-extensions/firmware/intel-ucode/pkg.yaml

name: intel-ucode
variant: scratch
shell: /bin/bash
dependencies:
  - stage: base
steps:
  - sources:
      - url: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/archive/refs/tags/microcode-{{ .INTEL_UCODE_VERSION }}.tar.gz
        destination: intel-ucode.tar.gz
        sha256: {{ .INTEL_UCODE_SHA256 }}
        sha512: {{ .INTEL_UCODE_SHA512 }}
    prepare:
      - |
        tar -xzf intel-ucode.tar.gz --strip-components=1
    install:
      - |
        mkdir -p /rootfs/usr/lib/firmware
        cp -R -p intel-ucode /rootfs/usr/lib/firmware
    test:
      - |
        mkdir -p /extensions-validator-rootfs
        cp -r /rootfs/ /extensions-validator-rootfs/rootfs
        cp /pkg/manifest.yaml /extensions-validator-rootfs/manifest.yaml
        /extensions-validator validate --rootfs=/extensions-validator-rootfs --pkg-name="${PKG_NAME}"
    sbom:
      outputPath: /rootfs/usr/local/share/spdx/intel-ucode.spdx.json
      version: {{ .INTEL_UCODE_VERSION }}
finalize:
  - from: /rootfs
    to: /rootfs
  - from: /pkg/manifest.yaml
    to: /