diff --git a/Makefile.inc b/Makefile.inc
index fcd680df2b..90a50aa4aa 100644
--- a/Makefile.inc
+++ b/Makefile.inc
@@ -23,6 +23,18 @@ export KERNELVERSION := $(shell if [ -d "$(top)/.git" -a -f "`which git`" ]; \
        then git describe --dirty --always || git describe; \
        else echo 4.0$(KERNELREVISION); fi)
 
+#######################################################################
+# Test for coreboot toolchain (except when explicitely not requested)
+ifneq ($(NOCOMPILE),1)
+# only run if we're doing a build (not for tests, kconfig, ...)
+ifneq ($(CONFIG_ANY_TOOLCHAIN),y)
+_toolchain=$(shell $(CC_i386) -v 2>&1 |grep -q "gcc version .*coreboot toolchain" && echo coreboot)
+ifneq ($(_toolchain),coreboot)
+$(error Please use the coreboot toolchain (or prove that your toolchain works))
+endif
+endif
+endif
+
 #######################################################################
 # Basic component discovery
 MAINBOARDDIR=$(call strip_quotes,$(CONFIG_MAINBOARD_DIR))
diff --git a/src/Kconfig b/src/Kconfig
index 2f5270e918..27f532b44e 100644
--- a/src/Kconfig
+++ b/src/Kconfig
@@ -70,6 +70,16 @@ config COMPILER_LLVM_CLANG
 
 endchoice
 
+config ANY_TOOLCHAIN
+	bool "Allow building with any toolchain"
+	default n
+	depends on COMPILER_GCC
+	help
+	  Many toolchains break when building coreboot since it uses quite
+	  unusual linker features. Unless developers explicitely request it,
+	  we'll have to assume that they use their distro compiler by mistake.
+	  Make sure that using patched compilers is a conscious decision.
+
 config SCANBUILD_ENABLE
 	bool "Build with scan-build for static code analysis"
 	default n