Configuring binary package server flags

[Bilirubin]

I have the following resolve-march-native output:

computer 1: -march=skylake -mabm -mno-sgx --param=l1-cache-line-size=64 --param=l1-cache-size=32 --param=l2-cache-size=16384
computer 2: -march=sandybridge -maes --param=l1-cache-line-size=64 --param=l1-cache-size=32 --param=l2-cache-size=3072

Are these flags a good choice for binary package server: -march=sandybridge -maes -O2 -pipe ?

-march=sandybridge seems to be subset of -march=skylake but i'm not sure about -maes both cpus seems to support aes instructions but -maes is not listed on computer 1's resolve-march-native output

[sam_]

The -maes in the second line is because sandybridge does not always have AES (but your sandybridge does have it), while for skylake, I think it's always present (so no need for an extra option).