fanquake

Also flags like `-fPIC` are shown in the C compiler flags, but not shown in the linker flags?

> Looks like this is at least missing link options like -compatibility_version 5.0.0 -current_version 5.1.0. The same is still missing on Linux?

So this is fixing a CMake regression? Also seems like the obvious time to document `BITCOIN_GENBUILD_NO_GIT` (#31999) cc @whitslack

> Add usage notes for contrib/devtools/security-check.py I think you can actually remove these docs. The symbol / security scripts are not for general developer usage, and there's no expectation that...

> But moving both to a guix-specific path would be fine with me. See #32458.

I think it'd be worth investigating any issues with `0.16.5`, rather than deferring. Seeing some build output with this branch, which is unexpected: ```bash [100%] Built target bitcoin-qt Checking binary...

> Thanks for the suggested fix @hebasto! Bumping the guix time machine to I don't think we need to bump anything here (putting aside the fact that the suggested change...

> I believe there is a regression in parsing big endian PPC64 headers in LIEF: https://github.com/lief-project/LIEF/issues/1217, but I've added a work-around to contrib/guix/security-check.py for this. You should be able to...

Actually, we can now use 0.16.6: https://github.com/lief-project/LIEF/releases/tag/0.16.6, which includes that change.

Guix build is broken: ```bash INFO: Building 0dc123319e3b for platform triple x86_64-linux-gnu: ...using reference timestamp: 1748567495 ...running at most 8 jobs ...from worktree directory: '/bitcoin' ...bind-mounted in container to: '/bitcoin'...