you are viewing a single comment's thread
view the rest of the comments
[–] 28 points 1 month ago (3 children)

Can't most serious compilers produce reproducible builds these days given the same build environment. I know there has been a drive towards reproducible builds in general for security verification purposes.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 5 points 1 month ago

    Yeah, but it does take a lot of work to coerce them to do it.

    GCC is honestly obnoxious, and you have to do a bunch of unintuitive things to get it. The compile stage needs the built-in RNG seeded, parent file paths stripped, you need to ensure that the date/time macros are not used anywhere, and you need to ensure that all command line flags are passed in the exact same order every time.

    I just went through this with GCC16 on a new project.

  • source
  • parent
  • [–] 1 point 1 month ago

    Not only can they but certified toolchains exist in the safety critical space. Medical, aerospace, nuclear projects, and the like are often required to use and procure such toolchains as part of their validation.

  • source
  • parent