Microcode is the firmware used to fix bugs in the CPU. It should be installed only on the host instead of virtual machines because microcode updates are applied during boot. We need to install it from the Debian unstable repository because microcode packages in Proxmox (Debian stable) are out of date.
Add the unstable repo.
|
|
Add this to /etc/apt/preferences.d/unstable-repo
.
|
|
Update all repos and make sure no package will upgrade from the unstable repo.
|
|
Install one of the microcode packages according to your CPU manufacturer. Don’t install both.
|
|
Reboot the Proxmox host.
|
|
Check microcode.
|
|
You should see similar output like this.
|
|
Note: The date displayed does not correspond to the version of the [intel-microcode] package installed. It does show the last time Intel updated the microcode that corresponds to the specific hardware being updated.
If you want to remove microcode and unstable repo, run:
|
|
Further reading: