Here is also a very interesting talk about reproducible builds and trusting compilers given at the Chaos Communication Congress: https://www.youtube.com/watch?v=5pAen7beYNc

They also talk about using multiple and very old compilers to bootstrap trust.