No able to apply clearcpuid KARG
I am trying to apply the clearcpuid=rdseed (or clearcpuid=306) KARG to temporarily patch up a Zen 5 vulnerability CVE-2025-62626.
I put it in my main recipe, using the KARG modyle, but it just doesn't seem to apply the argument and rdseed shows up with `grep "rdseed" /proc/cpuinfo`. It will not apply the argument and I have to do it via rpm-ostree instead using `rpm-ostree kargs --append='clearcpuid=rdseed'`. Obviously I do restart the system after a successful build on GitHub.
This is how I have it in my recipe:
```
[... start of the recipe.yml]
modules:
- type: systemd
system:
enabled:
- podman.socket
- greenboot-healthcheck.service
- scx_loader.service
- type: kargs
kargs:
- clearcpuid=306 # Fix for CVE-2025-62626 RDSEED vulnerability
- type: initramfs
[... rest of the recipe.yml]
```
0 条评论