Paul Spooren ff41ddea1c build: gate firmware image signing behind SIGN_FIRMWARE ...

Firmware image signing in append-metadata/append-gl-metadata was conditional
only by the presence of the build key. Add an explicit SIGN_FIRMWARE option
(default enabled except with BUILDBOT) so appending the fwtool signature can be
toggled on its own.

It's disable on buildbot since we use a decentralized building with no
individual keys on builders. Instead, a fake key is currently used, which adds
an insecure signature.

The future of signing firmware  and key distribution across the build
infrastructure should be discussed separately.

Link: https://github.com/openwrt/openwrt/pull/24291
Signed-off-by: Paul Spooren <mail@aparcar.org>

2026-07-20 10:33:41 +02:00

..

check-hostcxx.sh

config: add a knob to use the mold linker for packages

2023-07-04 20:25:40 +02:00

check-uname.sh

build: add HOST_OS_LINUX and HOST_OS_MACOS config symbols

2021-11-01 16:37:52 +01:00

Config-build.in

build: gate firmware image signing behind SIGN_FIRMWARE

2026-07-20 10:33:41 +02:00

Config-devel.in

treewide: remove unused archs leftovers

2026-05-07 10:58:47 +02:00

Config-images.in

x86: onie-installer: wire up sysupgrade via ONIE install mode

2026-05-23 17:23:54 +02:00

Config-kernel.in

kernel: add Kconfig options for ARM64_BRBE and THP enhancements on 6.18

2026-07-07 08:48:42 +02:00