Aren&#x27;t builds typically reproducible? What makes builds non-reproducible? I know the Debian folks are very enthusiastic about reproducible builds, and for a huge system I can see that things can vary -- but what tends to be varying in the case of individual components? If I build a library from the same revision of a source tree I expect the exact bits to come out, if the same compiler version was used? When does it not?<p>Is it a problem with C&#x2F;C++ in particular, where toolchains are complex? Or would non-reproducible also be a problem e.g for a Java library?<p>Googling reproducible builds mainly gets you Debian info, not a general description of the issue