Launching today
OpenWrt Integrity
Scripts to verify the integrity of OpenWrt routers
2 followers
Scripts to verify the integrity of OpenWrt routers
2 followers
Scripts to create known-good baselines and verify the integrity of OpenWrt routers. The baseline script records system information, critical file hashes, installed packages, UID 0 accounts, SSH authorized keys, overlay changes, and cron configuration. The verifier compares the current router state against that baseline and reports differences. Multiple routers are supported, each logging in with its own SSH key, a running ssh-agent, or a password.
Free
Launch Team
Render Sandboxes: a computer for every agentIsolated compute, persistent state and a real filesystem
Promoted
You run an OpenWrt router, but how do you know its important system files haven't changed unexpectedly? A compromised router, an accidental configuration change or an unwanted modification can go unnoticed. OpenWrt Integrity helps you establish a known-good baseline and verify your router against it.
Create a baseline of your router's files and their cryptographic hashes, then run verification whenever you want to check for unexpected changes. The scripts help identify modified, missing or unexpected files by comparing the current state against the known-good baseline. You can also manage multiple routers, with individual SSH authentication for each router using SSH keys, an SSH agent or password authentication.
I wanted a straightforward way to check whether my OpenWrt routers were still in the state I expected. Checking files manually is tedious, and simply knowing that a router is accessible doesn't mean its integrity is intact. I wanted something that could establish a trusted baseline and make subsequent verification repeatable.
That idea shaped the project. It uses local shell scripts and standard cryptographic hashing rather than requiring a cloud service or a central monitoring platform. Router access is handled over SSH, with authentication configured per router. There is no telemetry, no analytics and no external service collecting router data. The goal is simple: give router owners a practical way to detect unexpected changes and verify the integrity of their OpenWrt systems.