Disabling fake signing of firmware images

Paul Spooren mail at aparcar.org
Sat Jul 18 01:47:43 PDT 2026


Hi, I’m trying to make our firmware reproducible and found another issue, we sign our firmware with a fake key[1]

I’d like to disable this entirely. We never signed the firmware properly and adding this fake signature adds nothing, checking the git logs, this was due to an entanglement between signing packages and firmware.

Are there any strong opinions against this change or is anyone working on proper image signing? In that case, I’d have to modify the rebuild script to strip attached signatures.

Best,
Paul

[1]: https://git.openwrt.org/buildbot/tree/phase1/master.cfg#n1063.


More information about the openwrt-devel mailing list