Disabling fake signing of firmware images
Paul Spooren
mail at aparcar.org
Sat Jul 18 01:47:43 PDT 2026
Hi, I’m trying to make our firmware reproducible and found another issue, we sign our firmware with a fake key[1]
I’d like to disable this entirely. We never signed the firmware properly and adding this fake signature adds nothing, checking the git logs, this was due to an entanglement between signing packages and firmware.
Are there any strong opinions against this change or is anyone working on proper image signing? In that case, I’d have to modify the rebuild script to strip attached signatures.
Best,
Paul
[1]: https://git.openwrt.org/buildbot/tree/phase1/master.cfg#n1063.
More information about the openwrt-devel
mailing list