xref: /freebsd/share/man/man5/src.conf.5 (revision 51015e6d0f570239b0c2088dc6cf2b018928375d)
1.\" DO NOT EDIT-- this file is @generated by tools/build/options/makeman.
2.Dd March 9, 2023
3.Dt SRC.CONF 5
4.Os
5.Sh NAME
6.Nm src.conf
7.Nd "source build options"
8.Sh DESCRIPTION
9The
10.Nm
11file contains variables that control what components will be generated during
12the build process of the
13.Fx
14source tree; see
15.Xr build 7 .
16.Pp
17The
18.Nm
19file uses the standard makefile syntax.
20However,
21.Nm
22should not specify any dependencies to
23.Xr make 1 .
24Instead,
25.Nm
26is to set
27.Xr make 1
28variables that control the aspects of how the system builds.
29.Pp
30The default location of
31.Nm
32is
33.Pa /etc/src.conf ,
34though an alternative location can be specified in the
35.Xr make 1
36variable
37.Va SRCCONF .
38Overriding the location of
39.Nm
40may be necessary if the system-wide settings are not suitable
41for a particular build.
42For instance, setting
43.Va SRCCONF
44to
45.Pa /dev/null
46effectively resets all build controls to their defaults.
47.Pp
48The only purpose of
49.Nm
50is to control the compilation of the
51.Fx
52source code, which is usually located in
53.Pa /usr/src .
54As a rule, the system administrator creates
55.Nm
56when the values of certain control variables need to be changed
57from their defaults.
58.Pp
59In addition, control variables can be specified
60for a particular build via the
61.Fl D
62option of
63.Xr make 1
64or in its environment; see
65.Xr environ 7 .
66.Pp
67The environment of
68.Xr make 1
69for the build can be controlled via the
70.Va SRC_ENV_CONF
71variable, which defaults to
72.Pa /etc/src-env.conf .
73Some examples that may only be set in this file are
74.Va WITH_DIRDEPS_BUILD ,
75and
76.Va WITH_META_MODE ,
77and
78.Va MAKEOBJDIRPREFIX
79as they are environment-only variables.
80.Pp
81The values of variables are ignored regardless of their setting;
82even if they would be set to
83.Dq Li FALSE
84or
85.Dq Li NO .
86The presence of an option causes
87it to be honored by
88.Xr make 1 .
89.Pp
90This list provides a name and short description for variables
91that can be used for source builds.
92.Bl -tag -width indent
93.It Va WITHOUT_ACCT
94Do not build process accounting tools such as
95.Xr accton 8
96and
97.Xr sa 8 .
98.It Va WITHOUT_ACPI
99Do not build
100.Xr acpiconf 8 ,
101.Xr acpidump 8
102and related programs.
103.It Va WITHOUT_APM
104Do not build
105.Xr apm 8 ,
106.Xr apmd 8
107and related programs.
108.It Va WITH_ASAN
109Build the base system with Address Sanitizer (ASan) to detect
110memory corruption bugs such as buffer overflows or use-after-free.
111Requires that Clang be used as the base system compiler
112and that the runtime support library is available.
113When set, it enforces these options:
114.Pp
115.Bl -item -compact
116.It
117.Va WITH_LLVM_BINUTILS
118.It
119.Va WITH_LLVM_CXXFILT
120.El
121.It Va WITHOUT_ASSERT_DEBUG
122Compile programs and libraries without the
123.Xr assert 3
124checks.
125.It Va WITHOUT_AT
126Do not build
127.Xr at 1
128and related utilities.
129.It Va WITHOUT_AUDIT
130Do not build audit support into system programs.
131.It Va WITHOUT_AUTHPF
132Do not build
133.Xr authpf 8 .
134.It Va WITHOUT_AUTOFS
135Do not build
136.Xr autofs 5
137related programs, libraries, and kernel modules.
138.It Va WITHOUT_AUTO_OBJ
139Disable automatic creation of objdirs.
140This is enabled by default if the wanted OBJDIR is writable by the current user.
141.Pp
142This must be set in the environment, make command line, or
143.Pa /etc/src-env.conf ,
144not
145.Pa /etc/src.conf .
146.It Va WITH_BEARSSL
147Build the BearSSL library.
148.Pp
149BearSSL is a tiny SSL library suitable for embedded environments.
150For details see
151.Lk https://www.BearSSL.org/
152.Pp
153This library is currently only used to perform
154signature verification and related operations
155for Verified Exec and
156.Xr loader 8 .
157When set, these options are also in effect:
158.Pp
159.Bl -inset -compact
160.It Va WITH_LOADER_EFI_SECUREBOOT
161(unless
162.Va WITHOUT_LOADER_EFI_SECUREBOOT
163is set explicitly)
164.It Va WITH_LOADER_VERIEXEC
165(unless
166.Va WITHOUT_LOADER_VERIEXEC
167is set explicitly)
168.It Va WITH_LOADER_VERIEXEC_VECTX
169(unless
170.Va WITHOUT_LOADER_VERIEXEC_VECTX
171is set explicitly)
172.It Va WITH_VERIEXEC
173(unless
174.Va WITHOUT_VERIEXEC
175is set explicitly)
176.El
177.It Va WITHOUT_BHYVE
178Do not build or install
179.Xr bhyve 8 ,
180associated utilities, and examples.
181.Pp
182This option only affects amd64/amd64.
183.It Va WITH_BHYVE_SNAPSHOT
184Include support for save and restore (snapshots) in
185.Xr bhyve 8
186and
187.Xr bhyvectl 8 .
188.Pp
189This option only affects amd64/amd64.
190.It Va WITH_BIND_NOW
191Build all binaries with the
192.Dv DF_BIND_NOW
193flag set to indicate that the run-time loader should perform all relocation
194processing at process startup rather than on demand.
195The combination of the
196.Va BIND_NOW
197and
198.Va RELRO
199options provide "full" Relocation Read-Only (RELRO) support.
200With full RELRO the entire GOT is made read-only after performing relocation at
201startup, avoiding GOT overwrite attacks.
202.It Va WITHOUT_BLACKLIST
203Set this if you do not want to build
204.Xr blacklistd 8
205and
206.Xr blacklistctl 8 .
207When set, these options are also in effect:
208.Pp
209.Bl -inset -compact
210.It Va WITHOUT_BLACKLIST_SUPPORT
211(unless
212.Va WITH_BLACKLIST_SUPPORT
213is set explicitly)
214.El
215.It Va WITHOUT_BLACKLIST_SUPPORT
216Build some programs without
217.Xr libblacklist 3
218support, like
219.Xr fingerd 8 ,
220.Xr ftpd 8 ,
221and
222.Xr sshd 8 .
223.It Va WITHOUT_BLUETOOTH
224Do not build Bluetooth related kernel modules, programs and libraries.
225.It Va WITHOUT_BOOT
226Do not build the boot blocks and loader.
227.It Va WITHOUT_BOOTPARAMD
228Do not build or install
229.Xr bootparamd 8 .
230.It Va WITHOUT_BOOTPD
231Do not build or install
232.Xr bootpd 8 .
233.It Va WITHOUT_BSDINSTALL
234Do not build
235.Xr bsdinstall 8 ,
236.Xr sade 8 ,
237and related programs.
238.It Va WITHOUT_BSD_CPIO
239Do not build the BSD licensed version of cpio based on
240.Xr libarchive 3 .
241.It Va WITHOUT_BSNMP
242Do not build or install
243.Xr bsnmpd 1
244and related libraries and data files.
245.It Va WITHOUT_BZIP2
246Do not build contributed bzip2 software as a part of the base system.
247.Bf -symbolic
248The option has no effect yet.
249.Ef
250When set, these options are also in effect:
251.Pp
252.Bl -inset -compact
253.It Va WITHOUT_BZIP2_SUPPORT
254(unless
255.Va WITH_BZIP2_SUPPORT
256is set explicitly)
257.El
258.It Va WITHOUT_BZIP2_SUPPORT
259Build some programs without optional bzip2 support.
260.It Va WITHOUT_CALENDAR
261Do not build
262.Xr calendar 1 .
263.It Va WITHOUT_CAPSICUM
264Do not build Capsicum support into system programs.
265When set, it enforces these options:
266.Pp
267.Bl -item -compact
268.It
269.Va WITHOUT_CASPER
270.El
271.It Va WITHOUT_CAROOT
272Do not add the trusted certificates from the Mozilla NSS bundle to
273base.
274.It Va WITHOUT_CASPER
275Do not build Casper program and related libraries.
276.It Va WITH_CCACHE_BUILD
277Use
278.Xr ccache 1
279for the build.
280No configuration is required except to install the
281.Sy devel/ccache
282package.
283When using with
284.Xr distcc 1 ,
285set
286.Sy CCACHE_PREFIX=/usr/local/bin/distcc .
287The default cache directory of
288.Pa $HOME/.ccache
289will be used, which can be overridden by setting
290.Sy CCACHE_DIR .
291The
292.Sy CCACHE_COMPILERCHECK
293option defaults to
294.Sy content
295when using the in-tree bootstrap compiler,
296and
297.Sy mtime
298when using an external compiler.
299The
300.Sy CCACHE_CPP2
301option is used for Clang but not GCC.
302.Pp
303Sharing a cache between multiple work directories requires using a layout
304similar to
305.Pa /some/prefix/src
306.Pa /some/prefix/obj
307and an environment such as:
308.Bd -literal -offset indent
309CCACHE_BASEDIR='${SRCTOP:H}' MAKEOBJDIRPREFIX='${SRCTOP:H}/obj'
310.Ed
311.Pp
312See
313.Xr ccache 1
314for more configuration options.
315.It Va WITHOUT_CCD
316Do not build
317.Xr geom_ccd 4
318and related utilities.
319.It Va WITHOUT_CDDL
320Do not build code licensed under Sun's CDDL.
321When set, it enforces these options:
322.Pp
323.Bl -item -compact
324.It
325.Va WITHOUT_CTF
326.It
327.Va WITHOUT_DTRACE
328.It
329.Va WITHOUT_LOADER_ZFS
330.It
331.Va WITHOUT_ZFS
332.El
333.It Va WITHOUT_CLANG
334Do not build the Clang C/C++ compiler during the regular phase of the build.
335When set, it enforces these options:
336.Pp
337.Bl -item -compact
338.It
339.Va WITHOUT_CLANG_EXTRAS
340.It
341.Va WITHOUT_CLANG_FORMAT
342.It
343.Va WITHOUT_CLANG_FULL
344.It
345.Va WITHOUT_LLVM_COV
346.El
347.Pp
348When set, these options are also in effect:
349.Pp
350.Bl -inset -compact
351.It Va WITHOUT_LLVM_TARGET_AARCH64
352(unless
353.Va WITH_LLVM_TARGET_AARCH64
354is set explicitly)
355.It Va WITHOUT_LLVM_TARGET_ALL
356(unless
357.Va WITH_LLVM_TARGET_ALL
358is set explicitly)
359.It Va WITHOUT_LLVM_TARGET_ARM
360(unless
361.Va WITH_LLVM_TARGET_ARM
362is set explicitly)
363.It Va WITHOUT_LLVM_TARGET_POWERPC
364(unless
365.Va WITH_LLVM_TARGET_POWERPC
366is set explicitly)
367.It Va WITHOUT_LLVM_TARGET_RISCV
368(unless
369.Va WITH_LLVM_TARGET_RISCV
370is set explicitly)
371.El
372.It Va WITHOUT_CLANG_BOOTSTRAP
373Do not build the Clang C/C++ compiler during the bootstrap phase of
374the build.
375To be able to build the system, either gcc or clang bootstrap must be
376enabled unless an alternate compiler is provided via XCC.
377.It Va WITH_CLANG_EXTRAS
378Build additional clang and llvm tools, such as bugpoint and
379clang-format.
380.It Va WITH_CLANG_FORMAT
381Build clang-format.
382.It Va WITHOUT_CLANG_FULL
383Avoid building the ARCMigrate, Rewriter and StaticAnalyzer components of
384the Clang C/C++ compiler.
385.It Va WITHOUT_CLEAN
386Do not clean before building world and/or kernel.
387.It Va WITHOUT_CPP
388Do not build
389.Xr cpp 1 .
390.It Va WITHOUT_CROSS_COMPILER
391Do not build any cross compiler in the cross-tools stage of buildworld.
392When compiling a different version of
393.Fx
394than what is installed on the system, provide an alternate
395compiler with XCC to ensure success.
396When compiling with an identical version of
397.Fx
398to the host, this option may be safely used.
399This option may also be safe when the host version of
400.Fx
401is close to the sources being built, but all bets are off if there have
402been any changes to the toolchain between the versions.
403When set, it enforces these options:
404.Pp
405.Bl -item -compact
406.It
407.Va WITHOUT_CLANG_BOOTSTRAP
408.It
409.Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
410.It
411.Va WITHOUT_LLD_BOOTSTRAP
412.El
413.It Va WITHOUT_CRYPT
414Do not build any crypto code.
415When set, it enforces these options:
416.Pp
417.Bl -item -compact
418.It
419.Va WITHOUT_DMAGENT
420.It
421.Va WITHOUT_KERBEROS
422.It
423.Va WITHOUT_KERBEROS_SUPPORT
424.It
425.Va WITHOUT_LDNS
426.It
427.Va WITHOUT_LDNS_UTILS
428.It
429.Va WITHOUT_OPENSSH
430.It
431.Va WITHOUT_OPENSSL
432.It
433.Va WITHOUT_OPENSSL_KTLS
434.It
435.Va WITHOUT_PKGBOOTSTRAP
436.It
437.Va WITHOUT_UNBOUND
438.It
439.Va WITHOUT_ZFS
440.El
441.Pp
442When set, these options are also in effect:
443.Pp
444.Bl -inset -compact
445.It Va WITHOUT_GSSAPI
446(unless
447.Va WITH_GSSAPI
448is set explicitly)
449.El
450.It Va WITH_CTF
451Compile with CTF (Compact C Type Format) data.
452CTF data encapsulates a reduced form of debugging information
453similar to DWARF and the venerable stabs and is required for DTrace.
454.It Va WITHOUT_CUSE
455Do not build CUSE-related programs and libraries.
456.It Va WITHOUT_CXGBETOOL
457Do not build
458.Xr cxgbetool 8
459.Pp
460This is a default setting on
461arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
462.It Va WITH_CXGBETOOL
463Build
464.Xr cxgbetool 8
465.Pp
466This is a default setting on
467amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
468.It Va WITHOUT_DEBUG_FILES
469Avoid building or installing standalone debug files for each
470executable binary and shared library.
471.It Va WITH_DETECT_TZ_CHANGES
472Make the time handling code detect changes to the timezone files.
473.It Va WITHOUT_DIALOG
474Do not build
475.Xr dialog 1 ,
476.Xr dialog 3 ,
477.Xr dpv 1 ,
478and
479.Xr dpv 3 .
480When set, it enforces these options:
481.Pp
482.Bl -item -compact
483.It
484.Va WITHOUT_BSDINSTALL
485.El
486.It Va WITHOUT_DICT
487Do not build the Webster dictionary files.
488.It Va WITH_DIRDEPS_BUILD
489This is an experimental build system.
490For details see
491https://www.crufty.net/sjg/docs/freebsd-meta-mode.htm.
492Build commands can be seen from the top-level with:
493.Dl make show-valid-targets
494The build is driven by dirdeps.mk using
495.Va DIRDEPS
496stored in
497Makefile.depend files found in each directory.
498.Pp
499The build can be started from anywhere, and behaves the same.
500The initial instance of
501.Xr make 1
502recursively reads
503.Va DIRDEPS
504from
505.Pa Makefile.depend ,
506computing a graph of tree dependencies from the current origin.
507Setting
508.Va NO_DIRDEPS
509skips checking dirdep dependencies and will only build in the current
510and child directories.
511.Va NO_DIRDEPS_BELOW
512skips building any dirdeps and only build the current directory.
513.Pp
514This also utilizes the
515.Va WITH_META_MODE
516logic for incremental builds.
517.Pp
518The build hides commands executed unless
519.Va NO_SILENT
520is defined.
521.Pp
522Note that there is currently no mass install feature for this.
523.Pp
524When set, it enforces these options:
525.Pp
526.Bl -item -compact
527.It
528.Va WITH_INSTALL_AS_USER
529.El
530.Pp
531When set, these options are also in effect:
532.Pp
533.Bl -inset -compact
534.It Va WITH_META_MODE
535(unless
536.Va WITHOUT_META_MODE
537is set explicitly)
538.It Va WITH_STAGING
539(unless
540.Va WITHOUT_STAGING
541is set explicitly)
542.It Va WITH_STAGING_MAN
543(unless
544.Va WITHOUT_STAGING_MAN
545is set explicitly)
546.It Va WITH_STAGING_PROG
547(unless
548.Va WITHOUT_STAGING_PROG
549is set explicitly)
550.It Va WITH_SYSROOT
551(unless
552.Va WITHOUT_SYSROOT
553is set explicitly)
554.El
555.Pp
556This must be set in the environment, make command line, or
557.Pa /etc/src-env.conf ,
558not
559.Pa /etc/src.conf .
560.It Va WITH_DIRDEPS_CACHE
561Cache result of dirdeps.mk which can save significant time
562for subsequent builds.
563Depends on
564.Va WITH_DIRDEPS_BUILD .
565.Pp
566This must be set in the environment, make command line, or
567.Pa /etc/src-env.conf ,
568not
569.Pa /etc/src.conf .
570.It Va WITHOUT_DMAGENT
571Do not build dma Mail Transport Agent.
572.It Va WITHOUT_DOCCOMPRESS
573Do not install compressed system documentation.
574Only the uncompressed version will be installed.
575.It Va WITHOUT_DTRACE
576Do not build DTrace framework kernel modules, libraries, and user commands.
577When set, it enforces these options:
578.Pp
579.Bl -item -compact
580.It
581.Va WITHOUT_CTF
582.El
583.It Va WITH_DTRACE_TESTS
584Build and install the DTrace test suite in
585.Pa /usr/tests/cddl/usr.sbin/dtrace .
586This test suite is considered experimental on architectures other than
587amd64/amd64 and running it may cause system instability.
588.It Va WITHOUT_DYNAMICROOT
589Set this if you do not want to link
590.Pa /bin
591and
592.Pa /sbin
593dynamically.
594.It Va WITHOUT_EE
595Do not build and install
596.Xr edit 1 ,
597.Xr ee 1 ,
598and related programs.
599.It Va WITHOUT_EFI
600Set not to build
601.Xr efivar 3
602and
603.Xr efivar 8 .
604.Pp
605This is a default setting on
606powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
607.It Va WITH_EFI
608Build
609.Xr efivar 3
610and
611.Xr efivar 8 .
612.Pp
613This is a default setting on
614amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64 and i386/i386.
615.It Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
616Do not build ELF Tool Chain tools
617(addr2line, nm, size, strings and strip)
618as part of the bootstrap process.
619.Bf -symbolic
620An alternate bootstrap tool chain must be provided.
621.Ef
622.It Va WITHOUT_EXAMPLES
623Avoid installing examples to
624.Pa /usr/share/examples/ .
625.It Va WITH_EXPERIMENTAL
626Include experimental features in the build.
627.It Va WITH_EXTRA_TCP_STACKS
628Build extra TCP stack modules.
629.It Va WITHOUT_FDT
630Do not build Flattened Device Tree support as part of the base system.
631This includes the device tree compiler (dtc) and libfdt support library.
632.Pp
633This is a default setting on
634amd64/amd64 and i386/i386.
635.It Va WITH_FDT
636Build Flattened Device Tree support as part of the base system.
637This includes the device tree compiler (dtc) and libfdt support library.
638.Pp
639This is a default setting on
640arm/armv6, arm/armv7, arm64/aarch64, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
641.It Va WITHOUT_FILE
642Do not build
643.Xr file 1
644and related programs.
645.It Va WITHOUT_FINGER
646Do not build or install
647.Xr finger 1
648and
649.Xr fingerd 8 .
650.It Va WITHOUT_FLOPPY
651Do not build or install programs
652for operating floppy disk driver.
653.It Va WITHOUT_FORMAT_EXTENSIONS
654Do not enable
655.Fl fformat-extensions
656when compiling the kernel.
657Also disables all format checking.
658.It Va WITHOUT_FORTH
659Build bootloaders without Forth support.
660.It Va WITHOUT_FP_LIBC
661Build
662.Nm libc
663without floating-point support.
664.It Va WITHOUT_FREEBSD_UPDATE
665Do not build
666.Xr freebsd-update 8 .
667.It Va WITHOUT_FTP
668Do not build or install
669.Xr ftp 1
670and
671.Xr ftpd 8 .
672.It Va WITHOUT_GAMES
673Do not build games.
674.It Va WITHOUT_GH_BC
675Install the traditional FreeBSD
676.Xr bc 1
677and
678.Xr dc 1
679programs instead of the enhanced versions.
680.It Va WITHOUT_GNU_DIFF
681Do not build GNU
682.Xr diff3 1 .
683.It Va WITHOUT_GOOGLETEST
684Neither build nor install
685.Lb libgmock ,
686.Lb libgtest ,
687and dependent tests.
688.It Va WITHOUT_GPIO
689Do not build
690.Xr gpioctl 8
691as part of the base system.
692.It Va WITHOUT_GSSAPI
693Do not build libgssapi.
694.It Va WITHOUT_HAST
695Do not build
696.Xr hastd 8
697and related utilities.
698.It Va WITH_HESIOD
699Build Hesiod support.
700.It Va WITHOUT_HTML
701Do not build HTML docs.
702.It Va WITHOUT_HYPERV
703Do not build or install HyperV utilities.
704.Pp
705This is a default setting on
706arm/armv6, arm/armv7, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
707.It Va WITH_HYPERV
708Build or install HyperV utilities.
709.Pp
710This is a default setting on
711amd64/amd64, arm64/aarch64 and i386/i386.
712.It Va WITHOUT_ICONV
713Do not build iconv as part of libc.
714.It Va WITHOUT_INCLUDES
715Do not install header files.
716This option used to be spelled
717.Va NO_INCS .
718.Bf -symbolic
719The option does not work for build targets.
720.Ef
721.It Va WITHOUT_INET
722Do not build programs and libraries related to IPv4 networking.
723When set, it enforces these options:
724.Pp
725.Bl -item -compact
726.It
727.Va WITHOUT_INET_SUPPORT
728.El
729.It Va WITHOUT_INET6
730Do not build
731programs and libraries related to IPv6 networking.
732When set, it enforces these options:
733.Pp
734.Bl -item -compact
735.It
736.Va WITHOUT_INET6_SUPPORT
737.El
738.It Va WITHOUT_INET6_SUPPORT
739Build libraries, programs, and kernel modules without IPv6 support.
740.It Va WITHOUT_INETD
741Do not build
742.Xr inetd 8 .
743.It Va WITHOUT_INET_SUPPORT
744Build libraries, programs, and kernel modules without IPv4 support.
745.It Va WITH_INIT_ALL_PATTERN
746Build the base system or kernel with stack variables initialized to
747.Pq compiler defined
748debugging patterns on function entry.
749This option requires the clang compiler.
750.It Va WITH_INIT_ALL_ZERO
751Build the base system or kernel with stack variables initialized
752to zero on function entry.
753This option requires that the clang compiler be used.
754.It Va WITHOUT_INSTALLLIB
755Set this to not install optional libraries.
756For example, when creating a
757.Xr nanobsd 8
758image.
759.Bf -symbolic
760The option does not work for build targets.
761.Ef
762.It Va WITH_INSTALL_AS_USER
763Make install targets succeed for non-root users by installing
764files with owner and group attributes set to that of the user running
765the
766.Xr make 1
767command.
768The user still must set the
769.Va DESTDIR
770variable to point to a directory where the user has write permissions.
771.It Va WITHOUT_IPFILTER
772Do not build IP Filter package.
773.It Va WITHOUT_IPFW
774Do not build IPFW tools.
775.It Va WITHOUT_IPSEC_SUPPORT
776Do not build the kernel with
777.Xr ipsec 4
778support.
779This option is needed for
780.Xr ipsec 4
781and
782.Xr tcpmd5 4 .
783.It Va WITHOUT_ISCSI
784Do not build
785.Xr iscsid 8
786and related utilities.
787.It Va WITHOUT_JAIL
788Do not build tools for the support of jails; e.g.,
789.Xr jail 8 .
790.It Va WITHOUT_KDUMP
791Do not build
792.Xr kdump 1
793and
794.Xr truss 1 .
795.It Va WITHOUT_KERBEROS
796Set this to not build Kerberos 5 (KTH Heimdal).
797When set, these options are also in effect:
798.Pp
799.Bl -inset -compact
800.It Va WITHOUT_GSSAPI
801(unless
802.Va WITH_GSSAPI
803is set explicitly)
804.It Va WITHOUT_KERBEROS_SUPPORT
805(unless
806.Va WITH_KERBEROS_SUPPORT
807is set explicitly)
808.El
809.It Va WITHOUT_KERBEROS_SUPPORT
810Build some programs without Kerberos support, like
811.Xr ssh 1 ,
812.Xr telnet 1 ,
813and
814.Xr sshd 8 .
815.It Va WITH_KERNEL_RETPOLINE
816Enable the "retpoline" mitigation for CVE-2017-5715 in the kernel
817build.
818.It Va WITHOUT_KERNEL_SYMBOLS
819Do not install standalone kernel debug symbol files.
820This option has no effect at build time.
821.It Va WITHOUT_KVM
822Do not build the
823.Nm libkvm
824library as a part of the base system.
825.Bf -symbolic
826The option has no effect yet.
827.Ef
828When set, these options are also in effect:
829.Pp
830.Bl -inset -compact
831.It Va WITHOUT_KVM_SUPPORT
832(unless
833.Va WITH_KVM_SUPPORT
834is set explicitly)
835.El
836.It Va WITHOUT_KVM_SUPPORT
837Build some programs without optional
838.Nm libkvm
839support.
840.It Va WITHOUT_LDNS
841Setting this variable will prevent the LDNS library from being built.
842When set, it enforces these options:
843.Pp
844.Bl -item -compact
845.It
846.Va WITHOUT_LDNS_UTILS
847.It
848.Va WITHOUT_UNBOUND
849.El
850.It Va WITHOUT_LDNS_UTILS
851Setting this variable will prevent building the LDNS utilities
852.Xr drill 1
853and
854.Xr host 1 .
855.It Va WITHOUT_LEGACY_CONSOLE
856Do not build programs that support a legacy PC console; e.g.,
857.Xr kbdcontrol 1
858and
859.Xr vidcontrol 1 .
860.It Va WITHOUT_LIB32
861On 64-bit platforms, do not build 32-bit library set and a
862.Nm ld-elf32.so.1
863runtime linker.
864.Pp
865This is a default setting on
866arm/armv6, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
867.It Va WITH_LIB32
868On 64-bit platforms, build the 32-bit library set and a
869.Nm ld-elf32.so.1
870runtime linker.
871.Pp
872This is a default setting on
873amd64/amd64 and powerpc/powerpc64.
874.It Va WITHOUT_LLD
875Do not build LLVM's lld linker.
876.It Va WITHOUT_LLDB
877Do not build the LLDB debugger.
878.Pp
879This is a default setting on
880arm/armv6, arm/armv7, riscv/riscv64 and riscv/riscv64sf.
881.It Va WITH_LLDB
882Build the LLDB debugger.
883.Pp
884This is a default setting on
885amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
886.It Va WITHOUT_LLD_BOOTSTRAP
887Do not build the LLD linker during the bootstrap phase of
888the build.
889To be able to build the system an alternate linker must be provided via XLD.
890.It Va WITHOUT_LLD_IS_LD
891Do not install a
892.Pa /usr/bin/ld symlink
893to
894.Pa ld.lld .
895The system will not have a usable tool chain unless a linker is provided
896some other way.
897.It Va WITHOUT_LLVM_ASSERTIONS
898Disable debugging assertions in LLVM.
899.It Va WITH_LLVM_BINUTILS
900Install LLVM's binutils (ar, addr2line, nm, etc.) instead of ELF Tool Chain's.
901.It Va WITHOUT_LLVM_COV
902Do not build the
903.Xr llvm-cov 1
904tool.
905.It Va WITHOUT_LLVM_CXXFILT
906Install ELF Tool Chain's cxxfilt as c++filt, instead of LLVM's llvm-cxxfilt.
907.It Va WITHOUT_LLVM_TARGET_AARCH64
908Do not build LLVM target support for AArch64.
909The
910.Va LLVM_TARGET_ALL
911option should be used rather than this in most cases.
912.It Va WITHOUT_LLVM_TARGET_ALL
913Only build the required LLVM target support.
914This option is preferred to specific target support options.
915When set, these options are also in effect:
916.Pp
917.Bl -inset -compact
918.It Va WITHOUT_LLVM_TARGET_AARCH64
919(unless
920.Va WITH_LLVM_TARGET_AARCH64
921is set explicitly)
922.It Va WITHOUT_LLVM_TARGET_ARM
923(unless
924.Va WITH_LLVM_TARGET_ARM
925is set explicitly)
926.It Va WITHOUT_LLVM_TARGET_POWERPC
927(unless
928.Va WITH_LLVM_TARGET_POWERPC
929is set explicitly)
930.It Va WITHOUT_LLVM_TARGET_RISCV
931(unless
932.Va WITH_LLVM_TARGET_RISCV
933is set explicitly)
934.El
935.It Va WITHOUT_LLVM_TARGET_ARM
936Do not build LLVM target support for ARM.
937The
938.Va LLVM_TARGET_ALL
939option should be used rather than this in most cases.
940.It Va WITH_LLVM_TARGET_BPF
941Build LLVM target support for BPF.
942The
943.Va LLVM_TARGET_ALL
944option should be used rather than this in most cases.
945.It Va WITH_LLVM_TARGET_MIPS
946Build LLVM target support for MIPS.
947The
948.Va LLVM_TARGET_ALL
949option should be used rather than this in most cases.
950.It Va WITHOUT_LLVM_TARGET_POWERPC
951Do not build LLVM target support for PowerPC.
952The
953.Va LLVM_TARGET_ALL
954option should be used rather than this in most cases.
955.It Va WITHOUT_LLVM_TARGET_RISCV
956Do not build LLVM target support for RISC-V.
957The
958.Va LLVM_TARGET_ALL
959option should be used rather than this in most cases.
960.It Va WITHOUT_LLVM_TARGET_X86
961Do not build LLVM target support for X86.
962The
963.Va LLVM_TARGET_ALL
964option should be used rather than this in most cases.
965.It Va WITH_LOADER_EFI_SECUREBOOT
966Enable building
967.Xr loader 8
968with support for verification based on certificates obtained from UEFI.
969.It Va WITHOUT_LOADER_GELI
970Disable inclusion of GELI crypto support in the boot chain binaries.
971.Pp
972This is a default setting on
973powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
974.It Va WITH_LOADER_GELI
975Build GELI bootloader support.
976.Pp
977This is a default setting on
978amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
979.It Va WITHOUT_LOADER_KBOOT
980Do not build kboot, a linuxboot environment loader
981.Pp
982This is a default setting on
983arm/armv6, arm/armv7, i386/i386, powerpc/powerpc, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
984.It Va WITH_LOADER_KBOOT
985Build kboot, a linuxboot environment loader
986.Pp
987This is a default setting on
988amd64/amd64, arm64/aarch64 and powerpc/powerpc64.
989.It Va WITHOUT_LOADER_LUA
990Do not build LUA bindings for the boot loader.
991.Pp
992This is a default setting on
993powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
994.It Va WITH_LOADER_LUA
995Build LUA bindings for the boot loader.
996.Pp
997This is a default setting on
998amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
999.It Va WITHOUT_LOADER_OFW
1000Disable building of openfirmware bootloader components.
1001.Pp
1002This is a default setting on
1003amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
1004.It Va WITH_LOADER_OFW
1005Build openfirmware bootloader components.
1006.Pp
1007This is a default setting on
1008powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
1009.It Va WITHOUT_LOADER_UBOOT
1010Disable building of ubldr.
1011.Pp
1012This is a default setting on
1013amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1014.It Va WITH_LOADER_UBOOT
1015Build ubldr.
1016.Pp
1017This is a default setting on
1018arm/armv6, arm/armv7, powerpc/powerpc and powerpc/powerpc64.
1019.It Va WITH_LOADER_VERBOSE
1020Build with extra verbose debugging in the loader.
1021May explode already nearly too large loader over the limit.
1022Use with care.
1023.It Va WITH_LOADER_VERIEXEC
1024Enable building
1025.Xr loader 8
1026with support for verification similar to Verified Exec.
1027.Pp
1028Depends on
1029.Va WITH_BEARSSL .
1030When set, these options are also in effect:
1031.Pp
1032.Bl -inset -compact
1033.It Va WITH_LOADER_EFI_SECUREBOOT
1034(unless
1035.Va WITHOUT_LOADER_EFI_SECUREBOOT
1036is set explicitly)
1037.It Va WITH_LOADER_VERIEXEC_VECTX
1038(unless
1039.Va WITHOUT_LOADER_VERIEXEC_VECTX
1040is set explicitly)
1041.El
1042.It Va WITH_LOADER_VERIEXEC_PASS_MANIFEST
1043Enable building
1044.Xr loader 8
1045with support to pass a verified manifest to the kernel.
1046The kernel has to be built with a module to parse the manifest.
1047.Pp
1048Depends on
1049.Va WITH_LOADER_VERIEXEC .
1050.It Va WITH_LOADER_VERIEXEC_VECTX
1051Enable building
1052.Xr loader 8
1053with support for hashing and verifying kernel and modules as a side effect
1054of loading.
1055.Pp
1056Depends on
1057.Va WITH_LOADER_VERIEXEC .
1058.It Va WITHOUT_LOADER_ZFS
1059Do not build ZFS file system boot loader support.
1060.It Va WITHOUT_LOCALES
1061Do not build localization files; see
1062.Xr locale 1 .
1063.It Va WITHOUT_LOCATE
1064Do not build
1065.Xr locate 1
1066and related programs.
1067.It Va WITHOUT_LPR
1068Do not build
1069.Xr lpr 1
1070and related programs.
1071.It Va WITHOUT_LS_COLORS
1072Build
1073.Xr ls 1
1074without support for colors to distinguish file types.
1075.It Va WITHOUT_MACHDEP_OPTIMIZATIONS
1076Prefer machine-independent non-assembler code in libc and libm.
1077.It Va WITHOUT_MAIL
1078Do not build any mail support (MUA or MTA).
1079When set, it enforces these options:
1080.Pp
1081.Bl -item -compact
1082.It
1083.Va WITHOUT_DMAGENT
1084.It
1085.Va WITHOUT_MAILWRAPPER
1086.It
1087.Va WITHOUT_SENDMAIL
1088.El
1089.It Va WITHOUT_MAILWRAPPER
1090Do not build the
1091.Xr mailwrapper 8
1092MTA selector.
1093.It Va WITHOUT_MAKE
1094Do not install
1095.Xr make 1
1096and related support files.
1097.It Va WITHOUT_MAKE_CHECK_USE_SANDBOX
1098Do not execute
1099.Dq Li "make check"
1100in limited sandbox mode.
1101This option should be paired with
1102.Va WITH_INSTALL_AS_USER
1103if executed as an unprivileged user.
1104See
1105.Xr tests 7
1106for more details.
1107.It Va WITH_MALLOC_PRODUCTION
1108Disable assertions and statistics gathering in
1109.Xr malloc 3 .
1110It also defaults the A and J runtime options to off.
1111.It Va WITHOUT_MAN
1112Do not build manual pages.
1113When set, these options are also in effect:
1114.Pp
1115.Bl -inset -compact
1116.It Va WITHOUT_MAN_UTILS
1117(unless
1118.Va WITH_MAN_UTILS
1119is set explicitly)
1120.El
1121.It Va WITHOUT_MANCOMPRESS
1122Do not install compressed man pages.
1123Only the uncompressed versions will be installed.
1124.It Va WITH_MANSPLITPKG
1125Split man pages into their own packages during make package.
1126.It Va WITHOUT_MAN_UTILS
1127Do not build utilities for manual pages,
1128.Xr apropos 1 ,
1129.Xr makewhatis 1 ,
1130.Xr man 1 ,
1131.Xr whatis 1 ,
1132.Xr manctl 8 ,
1133and related support files.
1134.It Va WITH_META_MODE
1135Create
1136.Xr make 1
1137meta files when building, which can provide a reliable incremental build when
1138using
1139.Xr filemon 4 .
1140The meta file is created in OBJDIR as
1141.Pa target.meta .
1142These meta files track the command that was executed, its output, and the
1143current directory.
1144The
1145.Xr filemon 4
1146module is required unless
1147.Va NO_FILEMON
1148is defined.
1149When the module is loaded, any files used by the commands executed are
1150tracked as dependencies for the target in its meta file.
1151The target is considered out-of-date and rebuilt if any of these
1152conditions are true compared to the last build:
1153.Bl -bullet -compact
1154.It
1155The command to execute changes.
1156.It
1157The current working directory changes.
1158.It
1159The target's meta file is missing.
1160.It
1161The target's meta file is missing filemon data when filemon is loaded
1162and a previous run did not have it loaded.
1163.It
1164[requires
1165.Xr filemon 4 ]
1166Files read, executed or linked to are newer than the target.
1167.It
1168[requires
1169.Xr filemon 4 ]
1170Files read, written, executed or linked are missing.
1171.El
1172The meta files can also be useful for debugging.
1173.Pp
1174The build hides commands that are executed unless
1175.Va NO_SILENT
1176is defined.
1177Errors cause
1178.Xr make 1
1179to show some of its environment for further debugging.
1180.Pp
1181The build operates as it normally would otherwise.
1182This option originally invoked a different build system but that was renamed
1183to
1184.Va WITH_DIRDEPS_BUILD .
1185.Pp
1186This must be set in the environment, make command line, or
1187.Pa /etc/src-env.conf ,
1188not
1189.Pa /etc/src.conf .
1190.It Va WITHOUT_MLX5TOOL
1191Do not build
1192.Xr mlx5tool 8
1193.Pp
1194This is a default setting on
1195arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
1196.It Va WITH_MLX5TOOL
1197Build
1198.Xr mlx5tool 8
1199.Pp
1200This is a default setting on
1201amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
1202.It Va WITHOUT_NETCAT
1203Do not build
1204.Xr nc 1
1205utility.
1206.It Va WITHOUT_NETGRAPH
1207Do not build applications to support
1208.Xr netgraph 4 .
1209When set, it enforces these options:
1210.Pp
1211.Bl -item -compact
1212.It
1213.Va WITHOUT_BLUETOOTH
1214.El
1215.Pp
1216When set, these options are also in effect:
1217.Pp
1218.Bl -inset -compact
1219.It Va WITHOUT_NETGRAPH_SUPPORT
1220(unless
1221.Va WITH_NETGRAPH_SUPPORT
1222is set explicitly)
1223.El
1224.It Va WITHOUT_NETGRAPH_SUPPORT
1225Build libraries, programs, and kernel modules without netgraph support.
1226.It Va WITHOUT_NIS
1227Do not build
1228.Xr NIS 8
1229support and related programs.
1230If set, you might need to adopt your
1231.Xr nsswitch.conf 5
1232and remove
1233.Sq nis
1234entries.
1235.It Va WITHOUT_NLS
1236Do not build NLS catalogs.
1237When set, it enforces these options:
1238.Pp
1239.Bl -item -compact
1240.It
1241.Va WITHOUT_NLS_CATALOGS
1242.El
1243.It Va WITHOUT_NLS_CATALOGS
1244Do not build NLS catalog support for
1245.Xr csh 1 .
1246.It Va WITHOUT_NS_CACHING
1247Disable name caching in the
1248.Pa nsswitch
1249subsystem.
1250The generic caching daemon,
1251.Xr nscd 8 ,
1252will not be built either if this option is set.
1253.It Va WITHOUT_NTP
1254Do not build
1255.Xr ntpd 8
1256and related programs.
1257.It Va WITHOUT_NVME
1258Do not build nvme related tools and kernel modules.
1259.Pp
1260This is a default setting on
1261arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
1262.It Va WITH_NVME
1263Build nvme related tools and kernel modules.
1264.Pp
1265This is a default setting on
1266amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
1267.It Va WITHOUT_OFED
1268Do not build the
1269.Dq "OpenFabrics Enterprise Distribution"
1270InfiniBand software stack, including kernel modules and userspace libraries.
1271.Pp
1272This is a default setting on
1273arm/armv6 and arm/armv7.
1274When set, it enforces these options:
1275.Pp
1276.Bl -item -compact
1277.It
1278.Va WITHOUT_OFED_EXTRA
1279.El
1280.It Va WITH_OFED
1281Build the
1282.Dq "OpenFabrics Enterprise Distribution"
1283InfiniBand software stack, including kernel modules and userspace libraries.
1284.Pp
1285This is a default setting on
1286amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1287.It Va WITH_OFED_EXTRA
1288Build the non-essential components of the
1289.Dq "OpenFabrics Enterprise Distribution"
1290Infiniband software stack, mostly examples.
1291.It Va WITH_OPENLDAP
1292Enable building LDAP support for kerberos using an openldap client from ports.
1293.It Va WITHOUT_OPENMP
1294Do not build LLVM's OpenMP runtime.
1295.Pp
1296This is a default setting on
1297arm/armv6, arm/armv7 and powerpc/powerpc.
1298.It Va WITH_OPENMP
1299Build LLVM's OpenMP runtime.
1300.Pp
1301This is a default setting on
1302amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1303.It Va WITHOUT_OPENSSH
1304Do not build OpenSSH.
1305.It Va WITHOUT_OPENSSL
1306Do not build OpenSSL.
1307When set, it enforces these options:
1308.Pp
1309.Bl -item -compact
1310.It
1311.Va WITHOUT_DMAGENT
1312.It
1313.Va WITHOUT_KERBEROS
1314.It
1315.Va WITHOUT_KERBEROS_SUPPORT
1316.It
1317.Va WITHOUT_LDNS
1318.It
1319.Va WITHOUT_LDNS_UTILS
1320.It
1321.Va WITHOUT_OPENSSH
1322.It
1323.Va WITHOUT_OPENSSL_KTLS
1324.It
1325.Va WITHOUT_PKGBOOTSTRAP
1326.It
1327.Va WITHOUT_UNBOUND
1328.It
1329.Va WITHOUT_ZFS
1330.El
1331.Pp
1332When set, these options are also in effect:
1333.Pp
1334.Bl -inset -compact
1335.It Va WITHOUT_GSSAPI
1336(unless
1337.Va WITH_GSSAPI
1338is set explicitly)
1339.El
1340.It Va WITHOUT_OPENSSL_KTLS
1341Do not include kernel TLS support in OpenSSL.
1342.Pp
1343This is a default setting on
1344arm/armv6, arm/armv7, i386/i386, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
1345.It Va WITH_OPENSSL_KTLS
1346Include kernel TLS support in OpenSSL.
1347.Pp
1348This is a default setting on
1349amd64/amd64, arm64/aarch64, powerpc/powerpc64 and powerpc/powerpc64le.
1350.It Va WITHOUT_PAM
1351Do not build PAM library and modules.
1352.Bf -symbolic
1353This option is deprecated and does nothing.
1354.Ef
1355When set, these options are also in effect:
1356.Pp
1357.Bl -inset -compact
1358.It Va WITHOUT_PAM_SUPPORT
1359(unless
1360.Va WITH_PAM_SUPPORT
1361is set explicitly)
1362.El
1363.It Va WITHOUT_PAM_SUPPORT
1364Build some programs without PAM support, particularly
1365.Xr ftpd 8
1366and
1367.Xr ppp 8 .
1368.It Va WITHOUT_PF
1369Do not build PF firewall package.
1370When set, it enforces these options:
1371.Pp
1372.Bl -item -compact
1373.It
1374.Va WITHOUT_AUTHPF
1375.El
1376.It Va WITHOUT_PIE
1377Do not build dynamically linked binaries as
1378Position-Independent Executable (PIE).
1379.Pp
1380This is a default setting on
1381arm/armv6, arm/armv7, i386/i386 and powerpc/powerpc.
1382.It Va WITH_PIE
1383Build dynamically linked binaries as
1384Position-Independent Executable (PIE).
1385.Pp
1386This is a default setting on
1387amd64/amd64, arm64/aarch64, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1388.It Va WITHOUT_PKGBOOTSTRAP
1389Do not build
1390.Xr pkg 7
1391bootstrap tool.
1392.It Va WITHOUT_PMC
1393Do not build
1394.Xr pmccontrol 8
1395and related programs.
1396.It Va WITHOUT_PORTSNAP
1397Do not build or install
1398.Xr portsnap 8
1399and related files.
1400.It Va WITHOUT_PPP
1401Do not build
1402.Xr ppp 8
1403and related programs.
1404.It Va WITH_PROFILE
1405Build profiled libraries for use with
1406.Xr gprof 8 .
1407This option is deprecated and may not be present in a future version of
1408.Fx .
1409.It Va WITHOUT_QUOTAS
1410Do not build
1411.Xr quota 1
1412and related programs.
1413.It Va WITHOUT_RADIUS_SUPPORT
1414Do not build radius support into various applications, like
1415.Xr pam_radius 8
1416and
1417.Xr ppp 8 .
1418.It Va WITH_RATELIMIT
1419Build the system with rate limit support.
1420.Pp
1421This makes
1422.Dv SO_MAX_PACING_RATE
1423effective in
1424.Xr getsockopt 2 ,
1425and
1426.Ar txrlimit
1427support in
1428.Xr ifconfig 8 ,
1429by proxy.
1430.It Va WITHOUT_RBOOTD
1431Do not build or install
1432.Xr rbootd 8 .
1433.It Va WITHOUT_RELRO
1434Do not apply the Relocation Read-Only (RELRO) vulnerability mitigation.
1435See also the
1436.Va BIND_NOW
1437option.
1438.It Va WITH_REPRODUCIBLE_BUILD
1439Exclude build metadata (such as the build time, user, or host)
1440from the kernel, boot loaders, and uname output, so that builds produce
1441bit-for-bit identical output.
1442.It Va WITHOUT_RESCUE
1443Do not build
1444.Xr rescue 8 .
1445.It Va WITH_RETPOLINE
1446Build the base system with the retpoline speculative execution
1447vulnerability mitigation for CVE-2017-5715.
1448.It Va WITHOUT_ROUTED
1449Do not build
1450.Xr routed 8
1451utility.
1452.It Va WITH_RPCBIND_WARMSTART_SUPPORT
1453Build
1454.Xr rpcbind 8
1455with warmstart support.
1456.It Va WITHOUT_SCTP_SUPPORT
1457Disable support in the kernel for the
1458.Xr sctp 4
1459Stream Control Transmission Protocol
1460loadable kernel module.
1461.It Va WITHOUT_SENDMAIL
1462Do not build
1463.Xr sendmail 8
1464and related programs.
1465.It Va WITHOUT_SERVICESDB
1466Do not install
1467.Pa /var/db/services.db .
1468.It Va WITHOUT_SETUID_LOGIN
1469Set this to disable the installation of
1470.Xr login 1
1471as a set-user-ID root program.
1472.It Va WITHOUT_SHAREDOCS
1473Do not build the
1474.Bx 4.4
1475legacy docs.
1476.It Va WITHOUT_SHARED_TOOLCHAIN
1477Build the toolchain binaries as statically linked executables.
1478The set includes
1479.Xr cc 1 ,
1480.Xr make 1
1481and necessary utilities like assembler, linker and library archive manager.
1482.It Va WITH_SORT_THREADS
1483Enable threads in
1484.Xr sort 1 .
1485.It Va WITHOUT_SOURCELESS
1486Do not build kernel modules that include sourceless code (either microcode or native code for host CPU).
1487When set, it enforces these options:
1488.Pp
1489.Bl -item -compact
1490.It
1491.Va WITHOUT_SOURCELESS_HOST
1492.It
1493.Va WITHOUT_SOURCELESS_UCODE
1494.El
1495.It Va WITHOUT_SOURCELESS_HOST
1496Do not build kernel modules that include sourceless native code for host CPU.
1497.It Va WITHOUT_SOURCELESS_UCODE
1498Do not build kernel modules that include sourceless microcode.
1499.It Va WITHOUT_SPLIT_KERNEL_DEBUG
1500Do not build standalone kernel debug files.
1501Debug data (if enabled by the kernel configuration file)
1502will be included in the kernel and modules.
1503When set, it enforces these options:
1504.Pp
1505.Bl -item -compact
1506.It
1507.Va WITHOUT_KERNEL_SYMBOLS
1508.El
1509.It Va WITHOUT_SSP
1510Do not build world with propolice stack smashing protection.
1511.It Va WITH_STAGING
1512Enable staging of files to a stage tree.
1513This can be best thought of as auto-install to
1514.Va DESTDIR
1515with some extra meta data to ensure dependencies can be tracked.
1516Depends on
1517.Va WITH_DIRDEPS_BUILD .
1518When set, these options are also in effect:
1519.Pp
1520.Bl -inset -compact
1521.It Va WITH_STAGING_MAN
1522(unless
1523.Va WITHOUT_STAGING_MAN
1524is set explicitly)
1525.It Va WITH_STAGING_PROG
1526(unless
1527.Va WITHOUT_STAGING_PROG
1528is set explicitly)
1529.El
1530.Pp
1531This must be set in the environment, make command line, or
1532.Pa /etc/src-env.conf ,
1533not
1534.Pa /etc/src.conf .
1535.It Va WITH_STAGING_MAN
1536Enable staging of man pages to stage tree.
1537.It Va WITH_STAGING_PROG
1538Enable staging of PROGs to stage tree.
1539.It Va WITH_STALE_STAGED
1540Check staged files are not stale.
1541.It Va WITHOUT_STATS
1542Neither build nor install
1543.Lb libstats
1544and dependent binaries.
1545.It Va WITHOUT_SYSCONS
1546Do not build
1547.Xr syscons 4
1548support files such as keyboard maps, fonts, and screen output maps.
1549.It Va WITH_SYSROOT
1550Enable use of sysroot during build.
1551Depends on
1552.Va WITH_DIRDEPS_BUILD .
1553.Pp
1554This must be set in the environment, make command line, or
1555.Pa /etc/src-env.conf ,
1556not
1557.Pa /etc/src.conf .
1558.It Va WITHOUT_SYSTEM_COMPILER
1559Do not opportunistically skip building a cross-compiler during the
1560bootstrap phase of the build.
1561Normally, if the currently installed compiler matches the planned bootstrap
1562compiler type and revision, then it will not be built.
1563This does not prevent a compiler from being built for installation though,
1564only for building one for the build itself.
1565The
1566.Va WITHOUT_CLANG
1567option controls that.
1568.It Va WITHOUT_SYSTEM_LINKER
1569Do not opportunistically skip building a cross-linker during the
1570bootstrap phase of the build.
1571Normally, if the currently installed linker matches the planned bootstrap
1572linker type and revision, then it will not be built.
1573This does not prevent a linker from being built for installation though,
1574only for building one for the build itself.
1575The
1576.Va WITHOUT_LLD
1577option controls that.
1578.Pp
1579This option is only relevant when
1580.Va WITH_LLD_BOOTSTRAP
1581is set.
1582.It Va WITHOUT_TALK
1583Do not build or install
1584.Xr talk 1
1585and
1586.Xr talkd 8 .
1587.It Va WITHOUT_TCP_WRAPPERS
1588Do not build or install
1589.Xr tcpd 8 ,
1590and related utilities.
1591.It Va WITHOUT_TCSH
1592Do not build and install
1593.Pa /bin/csh
1594(which is
1595.Xr tcsh 1 ) .
1596.It Va WITHOUT_TELNET
1597Do not build
1598.Xr telnet 1
1599and related programs.
1600.It Va WITHOUT_TESTS
1601Do not build nor install the
1602.Fx
1603Test Suite in
1604.Pa /usr/tests/ .
1605See
1606.Xr tests 7
1607for more details.
1608This also disables the build of all test-related dependencies, including ATF.
1609When set, it enforces these options:
1610.Pp
1611.Bl -item -compact
1612.It
1613.Va WITHOUT_DTRACE_TESTS
1614.El
1615.Pp
1616When set, these options are also in effect:
1617.Pp
1618.Bl -inset -compact
1619.It Va WITHOUT_GOOGLETEST
1620(unless
1621.Va WITH_GOOGLETEST
1622is set explicitly)
1623.It Va WITHOUT_TESTS_SUPPORT
1624(unless
1625.Va WITH_TESTS_SUPPORT
1626is set explicitly)
1627.El
1628.It Va WITHOUT_TESTS_SUPPORT
1629Disable the build of all test-related dependencies, including ATF.
1630When set, it enforces these options:
1631.Pp
1632.Bl -item -compact
1633.It
1634.Va WITHOUT_GOOGLETEST
1635.El
1636.It Va WITHOUT_TEXTPROC
1637Do not build
1638programs used for text processing.
1639.It Va WITHOUT_TFTP
1640Do not build or install
1641.Xr tftp 1
1642and
1643.Xr tftpd 8 .
1644.It Va WITHOUT_TOOLCHAIN
1645Do not install header or
1646programs used for program development,
1647compilers, debuggers etc.
1648When set, it enforces these options:
1649.Pp
1650.Bl -item -compact
1651.It
1652.Va WITHOUT_CLANG
1653.It
1654.Va WITHOUT_CLANG_EXTRAS
1655.It
1656.Va WITHOUT_CLANG_FORMAT
1657.It
1658.Va WITHOUT_CLANG_FULL
1659.It
1660.Va WITHOUT_INCLUDES
1661.It
1662.Va WITHOUT_LLD
1663.It
1664.Va WITHOUT_LLDB
1665.It
1666.Va WITHOUT_LLVM_COV
1667.El
1668.It Va WITH_UBSAN
1669Build the base system with Undefined Behavior Sanitizer (UBSan) to detect
1670various kinds of undefined behavior at runtime.
1671Requires that Clang be used as the base system compiler
1672and that the runtime support library is available
1673.It Va WITHOUT_UNBOUND
1674Do not build
1675.Xr unbound 8
1676and related programs.
1677.It Va WITHOUT_UNIFIED_OBJDIR
1678Use the historical object directory format for
1679.Xr build 7
1680targets.
1681For native-builds and builds done directly in sub-directories the format of
1682.Pa ${MAKEOBJDIRPREFIX}/${.CURDIR}
1683is used,
1684while for cross-builds
1685.Pa ${MAKEOBJDIRPREFIX}/${TARGET}.${TARGET_ARCH}/${.CURDIR}
1686is used.
1687.Pp
1688This option is transitional and will be removed in a future version of
1689.Fx ,
1690at which time
1691.Va WITH_UNIFIED_OBJDIR
1692will be enabled permanently.
1693.Pp
1694This must be set in the environment, make command line, or
1695.Pa /etc/src-env.conf ,
1696not
1697.Pa /etc/src.conf .
1698.It Va WITHOUT_USB
1699Do not build USB-related programs and libraries.
1700.It Va WITHOUT_USB_GADGET_EXAMPLES
1701Do not build USB gadget kernel modules.
1702.It Va WITHOUT_UTMPX
1703Do not build user accounting tools such as
1704.Xr last 1 ,
1705.Xr users 1 ,
1706.Xr who 1 ,
1707.Xr ac 8 ,
1708.Xr lastlogin 8
1709and
1710.Xr utx 8 .
1711.It Va WITH_VERIEXEC
1712Enable building
1713.Xr veriexec 8
1714which loads the contents of verified manifests into the kernel
1715for use by
1716.Xr mac_veriexec 4
1717.Pp
1718Depends on
1719.Va WITH_BEARSSL .
1720.It Va WITHOUT_VI
1721Do not build and install vi, view, ex and related programs.
1722.It Va WITHOUT_VT
1723Do not build
1724.Xr vt 4
1725support files (fonts and keymaps).
1726.It Va WITHOUT_WARNS
1727Set this to not add warning flags to the compiler invocations.
1728Useful as a temporary workaround when code enters the tree
1729which triggers warnings in environments that differ from the
1730original developer.
1731.It Va WITHOUT_WERROR
1732Set this to not treat compiler warnings as errors.
1733Useful as a temporary workaround when working on fixing compiler warnings.
1734When set, warnings are still printed in the build log but do not fail the build.
1735.It Va WITHOUT_WIRELESS
1736Do not build programs used for 802.11 wireless networks; especially
1737.Xr wpa_supplicant 8
1738and
1739.Xr hostapd 8 .
1740When set, these options are also in effect:
1741.Pp
1742.Bl -inset -compact
1743.It Va WITHOUT_WIRELESS_SUPPORT
1744(unless
1745.Va WITH_WIRELESS_SUPPORT
1746is set explicitly)
1747.El
1748.It Va WITHOUT_WIRELESS_SUPPORT
1749Build libraries, programs, and kernel modules without
1750802.11 wireless support.
1751.It Va WITHOUT_WPA_SUPPLICANT_EAPOL
1752Build
1753.Xr wpa_supplicant 8
1754without support for the IEEE 802.1X protocol and without
1755support for EAP-PEAP, EAP-TLS, EAP-LEAP, and EAP-TTLS
1756protocols (usable only via 802.1X).
1757.It Va WITHOUT_ZFS
1758Do not build the ZFS file system kernel module, libraries such as
1759.Xr libbe 3 ,
1760and user commands such as
1761.Xr zpool 8
1762or
1763.Xr zfs 8 .
1764Also disable ZFS support in utilities and libraries which implement
1765ZFS-specific functionality.
1766.Pp
1767This is a default setting on
1768powerpc/powerpc.
1769.It Va WITH_ZFS
1770Build the ZFS file system kernel module, libraries, and user commands.
1771Also enable ZFS support in utilities and libraries which implement
1772ZFS-specific functionality.
1773.Pp
1774This is a default setting on
1775amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1776.It Va WITHOUT_ZONEINFO
1777Do not build the timezone database.
1778When set, it enforces these options:
1779.Pp
1780.Bl -item -compact
1781.It
1782.Va WITHOUT_ZONEINFO_LEAPSECONDS_SUPPORT
1783.El
1784.It Va WITH_ZONEINFO_LEAPSECONDS_SUPPORT
1785Build leapsecond information in to the timezone database.
1786.El
1787.Sh FILES
1788.Bl -tag -compact -width Pa
1789.It Pa /etc/src.conf
1790.It Pa /etc/src-env.conf
1791.It Pa /usr/share/mk/bsd.own.mk
1792.El
1793.Sh SEE ALSO
1794.Xr make 1 ,
1795.Xr make.conf 5 ,
1796.Xr build 7 ,
1797.Xr ports 7
1798.Sh HISTORY
1799The
1800.Nm
1801file appeared in
1802.Fx 7.0 .
1803.Sh AUTHORS
1804This manual page was autogenerated by
1805.An tools/build/options/makeman .
1806