diff --git a/PKGBUILD b/PKGBUILD
index d0f2cc9..545a572 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -68,15 +68,23 @@ backup=(
 source=(
   "https://github.com/fwupd/fwupd/releases/download/${pkgver}/${pkgname}-${pkgver}.tar.xz"{,.asc}
   fwupd.sysusers
+  6388.patch
 )
 sha512sums=('ea6a8129dcb4a2fd5eb564eda6803cc287e0c9c4a3548cd4dd6a0fc4d46f5eba8732ce9bde1625952dfb6637511bacf3f6bd40f205ae95165fe0312c47e89f7c'
             'SKIP'
-            '637203080b55eda74a659f58c853a9a723a2dad5da70915b2b0e036c6145a649468ebec700cc83975d9cb5378b9dced8b3a3b26bdbcc75ddc774837355e75deb')
+            '637203080b55eda74a659f58c853a9a723a2dad5da70915b2b0e036c6145a649468ebec700cc83975d9cb5378b9dced8b3a3b26bdbcc75ddc774837355e75deb'
+            '26a8e2d1f040c8cd2c3c20060d8787c28abe0928c937f1b8bf6150214ce2286d24a5c7809453c74ec0362fe7e04837354cfe0094abf535b3aea6e21ab11fdfb0')
 b2sums=('50fb7610dced39077dc3c92065d63e7be79d5d18335029195b49d95c7025933c55d6cafb7ed79f0e9c9db86367f16fd615627a4b3ccd599318a9df3638038da9'
         'SKIP'
-        'e65ca7da22a20a40882cfc1fe4479643f9a38c90a4f2c3e71e6e5e3de1d6db212a0f17d600097619fe3cdb0a9b860422f8b0b9a9d45441518e51a7eb12a918bb')
+        'e65ca7da22a20a40882cfc1fe4479643f9a38c90a4f2c3e71e6e5e3de1d6db212a0f17d600097619fe3cdb0a9b860422f8b0b9a9d45441518e51a7eb12a918bb'
+        '094358b07433b09ab1ec7700a1eb169ba838f47d99dfeabeacdaf6e9adfa7ba84df9cf35ef2f24609068323548e7d4f58329d729ae852b0a2f1fd485338c4e80')
 validpgpkeys=(163EB50119225DB3DF8F49EA17ACBA8DFA970E17) # Richard Hughes <richard@hughsie.com>
 
+prepare() {
+  # Remove timestamp from builtin.quirk.gz to make package reproducible
+  patch --directory="${pkgname}-${pkgver}" --forward --strip=1 --input="${srcdir}/fix-unreproducible-gzip.patch"
+}
+
 build() {
   arch-meson ${pkgname}-${pkgver} build \
     -D b_lto=false \