Merge ~vorlon/ubuntu/+source/linux-meta/+git/bionic:depend-on-microcode into ~ubuntu-kernel/ubuntu/+source/linux-meta/+git/bionic:master

[Steve Langasek]

[Steve Langasek (vorlon)]

Per Leann, we should put a hold on this until after the first round of security updates is out so that in the event of any regressions we are better able to distinguish between kernel and microcode as cause.

[Steve Langasek (vorlon)]

AIUI this should now get landed everywhere, as the next round of security updates will include the microcode change.

[Kamal Mostafa (kamalmostafa)]

Thanks Steve -- I'll see that this change gets applied to all the versions and branches.

review: Approve

[Steve Langasek (vorlon)]

It occcurs to me to mention that we probably *don't* need this on the guest-specific custom kernels - linux-{azure,kvm,gke,gcp,aws}.

diff --git a/debian/changelog b/debian/changelog
index 8493be6..51afd16 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+linux-meta (4.14.0.16.18) bionic; urgency=medium
+
+  * Make the kernel image packages depend on the cpu microcode updates,
+    to ensure they are pulled into all host installs of Ubuntu on upgrade.
+    LP: #1738259.
+
+ -- Steve Langasek <[e-mail]>  Tue, 09 Jan 2018 11:29:02 -0800
+
 linux-meta (4.14.0.16.17) bionic; urgency=medium
 
   * Bump ABI 4.14.0-16
diff --git a/debian/control.d/generic b/debian/control.d/generic
index b637f5e..784ab77 100644
--- a/debian/control.d/generic
+++ b/debian/control.d/generic
@@ -9,7 +9,7 @@ Description: Generic Linux kernel headers
 Package: linux-image-generic@SUFFIX@
 Architecture: i386 amd64 armhf arm64 powerpc ppc64el s390x
 Section: kernel
-Depends: ${misc:Depends}, linux-image-${kernel-abi-version}-generic, linux-image-extra-${kernel-abi-version}-generic [i386 amd64 arm64 powerpc ppc64el s390x], linux-firmware
+Depends: ${misc:Depends}, linux-image-${kernel-abi-version}-generic, linux-image-extra-${kernel-abi-version}-generic [i386 amd64 arm64 powerpc ppc64el s390x], linux-firmware, intel-microcode [amd64 i386], amd64-microcode [amd64 i386]
 Recommends: thermald [i386 amd64]
 Description: Generic Linux kernel image
  This package will always depend on the latest generic kernel image
diff --git a/debian/control.d/lowlatency b/debian/control.d/lowlatency
index 6e0b630..81a4796 100644
--- a/debian/control.d/lowlatency
+++ b/debian/control.d/lowlatency
@@ -9,7 +9,7 @@ Description: lowlatency Linux kernel headers
 Package: linux-image-lowlatency@SUFFIX@
 Architecture: i386 amd64
 Section: kernel
-Depends: ${misc:Depends}, linux-image-${kernel-abi-version}-lowlatency, linux-firmware
+Depends: ${misc:Depends}, linux-image-${kernel-abi-version}-lowlatency, linux-firmware, intel-microcode [amd64 i386], amd64-microcode [amd64 i386]
 Recommends: thermald [i386 amd64]
 Description: lowlatency Linux kernel image
  This package will always depend on the latest lowlatency kernel image
diff --git a/debian/control.d/signed-generic b/debian/control.d/signed-generic
index b5094c8..e79573b 100644
--- a/debian/control.d/signed-generic
+++ b/debian/control.d/signed-generic
@@ -1,7 +1,7 @@
 Package: linux-signed-image-generic@SUFFIX@
 Architecture: amd64
 Section: kernel
-Depends: ${misc:Depends}, linux-signed-image-${kernel-abi-version}-generic, linux-image-extra-${kernel-abi-version}-generic, linux-firmware
+Depends: ${misc:Depends}, linux-signed-image-${kernel-abi-version}-generic, linux-image-extra-${kernel-abi-version}-generic, linux-firmware, intel-microcode [amd64 i386], amd64-microcode [amd64 i386]
 Recommends: thermald [i386 amd64]
 Description: Signed Generic Linux kernel image
  This package will always depend on the latest generic kernel image
diff --git a/debian/control.d/signed-lowlatency b/debian/control.d/signed-lowlatency
index aa138cc..28345d4 100644
--- a/debian/control.d/signed-lowlatency
+++ b/debian/control.d/signed-lowlatency
@@ -1,7 +1,7 @@
 Package: linux-signed-image-lowlatency@SUFFIX@
 Architecture: amd64
 Section: kernel
-Depends: ${misc:Depends}, linux-signed-image-${kernel-abi-version}-lowlatency, linux-firmware
+Depends: ${misc:Depends}, linux-signed-image-${kernel-abi-version}-lowlatency, linux-firmware, intel-microcode [amd64 i386], amd64-microcode [amd64 i386]
 Recommends: thermald [i386 amd64]
 Description: Signed Lowlatency Linux kernel image
  This package will always depend on the latest lowlatency kernel image