<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Reproducible-Builds on aparcar</title><link>https://aparcar.org/blog/reproducible-builds/</link><description>Recent content in Reproducible-Builds on aparcar</description><generator>Hugo</generator><language>en-US</language><copyright>Copyright © 2020, Paul Spooren.</copyright><lastBuildDate>Mon, 19 Oct 2026 17:09:51 +0200</lastBuildDate><atom:link href="https://aparcar.org/blog/reproducible-builds/index.xml" rel="self" type="application/rss+xml"/><item><title>100% Reproducible OpenWrt</title><link>https://aparcar.org/100-reproducible-openwrt/</link><pubDate>Mon, 19 Oct 2026 17:09:51 +0200</pubDate><guid>https://aparcar.org/100-reproducible-openwrt/</guid><description>&lt;p&gt;This one has been cooking for a long time.&lt;/p&gt;&#10;&lt;blockquote&gt;&#10;&lt;p&gt;tl;dr: OpenWrt (SNAPSHOT) is now 100% reproducible.&lt;/p&gt;&#10;&lt;/blockquote&gt;&#10;&lt;p&gt;I planned a blog post like this back in 2019 when I first worked on the reproducibility of OpenWrt. The work was initially fueled by &lt;a href="http://layer-acht.org/thinking/" title="down Oct 2026"&gt;h01ger&lt;/a&gt;, who kindly invited me to the &lt;a href="https://reproducible-builds.org/events/Marrakesh2019/"&gt;Reproducible Builds Summit 2019 in Marrakesh&lt;/a&gt;. Discussions at the conference motivated me to look into &lt;em&gt;rebuilding firmware&lt;/em&gt; rather than &lt;em&gt;building twice in different environments&lt;/em&gt;. &lt;a href="https://tests.reproducible-builds.org/openwrt/openwrt.html"&gt;Previous OpenWrt CI tests&lt;/a&gt; would build the same OpenWrt commit twice on two hosts with different times, different build paths, different GCC versions etc., whereas I wanted to check if I could fully recreate the officially published OpenWrt firmware images, therefore &amp;ldquo;re-building&amp;rdquo;. In other words, it&amp;rsquo;s a verification build to prove that whatever was published is really based on the source. While sources for this claim are missing, &lt;a href="https://vulns.xyz/"&gt;kpcyrd&lt;/a&gt; and I think the term &lt;em&gt;rebuilder&lt;/em&gt; was coined at that conference.&lt;/p&gt;</description></item></channel></rss>