Developers
Install a toolchain
A CHERI toolchain normally combines a capability-aware Clang/LLVM compiler, linker, target sysroot and runtime libraries; many workflows also use cheribuild to create a matched environment.
What you’ll do
A CHERI toolchain normally combines a capability-aware Clang/LLVM compiler, linker, target sysroot and runtime libraries; many workflows also use cheribuild to create a matched environment. Installation should be pinned to a supported architecture and ABI.
Before you begin
A verified toolchain is the foundation for trustworthy warnings, binary compatibility and reproducible fault analysis.
Steps
1. Prerequisites
Check host operating system, storage, build tools, target platform and supported toolchain branch.
2. Build or install
Follow the maintained project route and keep the compiler, sysroot, emulator or image on compatible revisions.
3. Verify
Record compiler version and target triple, compile a known example and confirm it runs on the intended runtime.
Check your result
System package managers may not provide the CHERI variants needed by a platform. Do not mix a conventional sysroot with pure-capability output.
Record the architecture, platform, ABI, release, source revision and complete commands. A second developer should be able to reproduce the result.