genisoimage is part of the build result because it's needed to make the code signed dmg
I wonder if it is a significant enough change to result in a different code-signed binary
I wonder why genisoimage build is not deterministic
achow101: I guess it would be possible to build genisoimage independently for the normal osx build and the signing, don't know how long it takes to build but can't be that bad?
I agree it should ideally not matter, but it seeems this binary that is built for the host is the source of non-determinism every time, is it built with debug info perhaps? the chance of non-determinism in debug info seems to be slightly larger than in the stripped code
alternatively #19068 just removes it entirely, along with all of the other dmg building stuff