1.\" DO NOT EDIT-- this file is @generated by tools/build/options/makeman. 2.Dd May 30, 2023 3.Dt SRC.CONF 5 4.Os 5.Sh NAME 6.Nm src.conf 7.Nd "source build options" 8.Sh DESCRIPTION 9The 10.Nm 11file contains variables that control what components will be generated during 12the build process of the 13.Fx 14source tree; see 15.Xr build 7 . 16.Pp 17The 18.Nm 19file uses the standard makefile syntax. 20However, 21.Nm 22should not specify any dependencies to 23.Xr make 1 . 24Instead, 25.Nm 26is to set 27.Xr make 1 28variables that control the aspects of how the system builds. 29.Pp 30The default location of 31.Nm 32is 33.Pa /etc/src.conf , 34though an alternative location can be specified in the 35.Xr make 1 36variable 37.Va SRCCONF . 38Overriding the location of 39.Nm 40may be necessary if the system-wide settings are not suitable 41for a particular build. 42For instance, setting 43.Va SRCCONF 44to 45.Pa /dev/null 46effectively resets all build controls to their defaults. 47.Pp 48The only purpose of 49.Nm 50is to control the compilation of the 51.Fx 52source code, which is usually located in 53.Pa /usr/src . 54As a rule, the system administrator creates 55.Nm 56when the values of certain control variables need to be changed 57from their defaults. 58.Pp 59In addition, control variables can be specified 60for a particular build via the 61.Fl D 62option of 63.Xr make 1 64or in its environment; see 65.Xr environ 7 . 66.Pp 67The environment of 68.Xr make 1 69for the build can be controlled via the 70.Va SRC_ENV_CONF 71variable, which defaults to 72.Pa /etc/src-env.conf . 73Some examples that may only be set in this file are 74.Va WITH_DIRDEPS_BUILD , 75and 76.Va WITH_META_MODE , 77and 78.Va MAKEOBJDIRPREFIX 79as they are environment-only variables. 80.Pp 81The values of variables are ignored regardless of their setting; 82even if they would be set to 83.Dq Li FALSE 84or 85.Dq Li NO . 86The presence of an option causes 87it to be honored by 88.Xr make 1 . 89.Pp 90This list provides a name and short description for variables 91that can be used for source builds. 92.Bl -tag -width indent 93.It Va WITHOUT_ACCT 94Do not build process accounting tools such as 95.Xr accton 8 96and 97.Xr sa 8 . 98.It Va WITHOUT_ACPI 99Do not build 100.Xr acpiconf 8 , 101.Xr acpidump 8 102and related programs. 103.It Va WITHOUT_APM 104Do not build 105.Xr apm 8 , 106.Xr apmd 8 107and related programs. 108.It Va WITH_ASAN 109Build the base system with Address Sanitizer (ASan) to detect 110memory corruption bugs such as buffer overflows or use-after-free. 111Requires that Clang be used as the base system compiler 112and that the runtime support library is available. 113When set, it enforces these options: 114.Pp 115.Bl -item -compact 116.It 117.Va WITH_LLVM_BINUTILS 118.It 119.Va WITH_LLVM_CXXFILT 120.El 121.It Va WITHOUT_ASSERT_DEBUG 122Compile programs and libraries without the 123.Xr assert 3 124checks. 125.It Va WITHOUT_AT 126Do not build 127.Xr at 1 128and related utilities. 129.It Va WITHOUT_AUDIT 130Do not build audit support into system programs. 131.It Va WITHOUT_AUTHPF 132Do not build 133.Xr authpf 8 . 134.It Va WITHOUT_AUTOFS 135Do not build 136.Xr autofs 5 137related programs, libraries, and kernel modules. 138.It Va WITHOUT_AUTO_OBJ 139Disable automatic creation of objdirs. 140This is enabled by default if the wanted OBJDIR is writable by the current user. 141.Pp 142This must be set in the environment, make command line, or 143.Pa /etc/src-env.conf , 144not 145.Pa /etc/src.conf . 146.It Va WITH_BEARSSL 147Build the BearSSL library. 148.Pp 149BearSSL is a tiny SSL library suitable for embedded environments. 150For details see 151.Lk https://www.BearSSL.org/ 152.Pp 153This library is currently only used to perform 154signature verification and related operations 155for Verified Exec and 156.Xr loader 8 . 157When set, these options are also in effect: 158.Pp 159.Bl -inset -compact 160.It Va WITH_LOADER_EFI_SECUREBOOT 161(unless 162.Va WITHOUT_LOADER_EFI_SECUREBOOT 163is set explicitly) 164.It Va WITH_LOADER_VERIEXEC 165(unless 166.Va WITHOUT_LOADER_VERIEXEC 167is set explicitly) 168.It Va WITH_LOADER_VERIEXEC_VECTX 169(unless 170.Va WITHOUT_LOADER_VERIEXEC_VECTX 171is set explicitly) 172.It Va WITH_VERIEXEC 173(unless 174.Va WITHOUT_VERIEXEC 175is set explicitly) 176.El 177.It Va WITHOUT_BHYVE 178Do not build or install 179.Xr bhyve 8 , 180associated utilities, and examples. 181.Pp 182This option only affects amd64/amd64. 183.It Va WITH_BHYVE_SNAPSHOT 184Include support for save and restore (snapshots) in 185.Xr bhyve 8 186and 187.Xr bhyvectl 8 . 188.Pp 189This option only affects amd64/amd64. 190.It Va WITH_BIND_NOW 191Build all binaries with the 192.Dv DF_BIND_NOW 193flag set to indicate that the run-time loader should perform all relocation 194processing at process startup rather than on demand. 195The combination of the 196.Va BIND_NOW 197and 198.Va RELRO 199options provide "full" Relocation Read-Only (RELRO) support. 200With full RELRO the entire GOT is made read-only after performing relocation at 201startup, avoiding GOT overwrite attacks. 202.It Va WITHOUT_BLACKLIST 203Set this if you do not want to build 204.Xr blacklistd 8 205and 206.Xr blacklistctl 8 . 207When set, these options are also in effect: 208.Pp 209.Bl -inset -compact 210.It Va WITHOUT_BLACKLIST_SUPPORT 211(unless 212.Va WITH_BLACKLIST_SUPPORT 213is set explicitly) 214.El 215.It Va WITHOUT_BLACKLIST_SUPPORT 216Build some programs without 217.Xr libblacklist 3 218support, like 219.Xr fingerd 8 , 220.Xr ftpd 8 , 221and 222.Xr sshd 8 . 223.It Va WITHOUT_BLUETOOTH 224Do not build Bluetooth related kernel modules, programs and libraries. 225.It Va WITHOUT_BOOT 226Do not build the boot blocks and loader. 227.It Va WITHOUT_BOOTPARAMD 228Do not build or install 229.Xr bootparamd 8 . 230.It Va WITHOUT_BOOTPD 231Do not build or install 232.Xr bootpd 8 . 233.It Va WITHOUT_BSDINSTALL 234Do not build 235.Xr bsdinstall 8 , 236.Xr sade 8 , 237and related programs. 238.It Va WITHOUT_BSD_CPIO 239Do not build the BSD licensed version of cpio based on 240.Xr libarchive 3 . 241.It Va WITHOUT_BSNMP 242Do not build or install 243.Xr bsnmpd 1 244and related libraries and data files. 245.It Va WITHOUT_BZIP2 246Do not build contributed bzip2 software as a part of the base system. 247.Bf -symbolic 248The option has no effect yet. 249.Ef 250When set, these options are also in effect: 251.Pp 252.Bl -inset -compact 253.It Va WITHOUT_BZIP2_SUPPORT 254(unless 255.Va WITH_BZIP2_SUPPORT 256is set explicitly) 257.El 258.It Va WITHOUT_BZIP2_SUPPORT 259Build some programs without optional bzip2 support. 260.It Va WITHOUT_CALENDAR 261Do not build 262.Xr calendar 1 . 263.It Va WITHOUT_CAPSICUM 264Do not build Capsicum support into system programs. 265When set, it enforces these options: 266.Pp 267.Bl -item -compact 268.It 269.Va WITHOUT_CASPER 270.El 271.It Va WITHOUT_CAROOT 272Do not add the trusted certificates from the Mozilla NSS bundle to 273base. 274.It Va WITHOUT_CASPER 275Do not build Casper program and related libraries. 276.It Va WITH_CCACHE_BUILD 277Use 278.Xr ccache 1 279for the build. 280No configuration is required except to install the 281.Sy devel/ccache 282package. 283When using with 284.Xr distcc 1 , 285set 286.Sy CCACHE_PREFIX=/usr/local/bin/distcc . 287The default cache directory of 288.Pa $HOME/.ccache 289will be used, which can be overridden by setting 290.Sy CCACHE_DIR . 291The 292.Sy CCACHE_COMPILERCHECK 293option defaults to 294.Sy content 295when using the in-tree bootstrap compiler, 296and 297.Sy mtime 298when using an external compiler. 299The 300.Sy CCACHE_CPP2 301option is used for Clang but not GCC. 302.Pp 303Sharing a cache between multiple work directories requires using a layout 304similar to 305.Pa /some/prefix/src 306.Pa /some/prefix/obj 307and an environment such as: 308.Bd -literal -offset indent 309CCACHE_BASEDIR='${SRCTOP:H}' MAKEOBJDIRPREFIX='${SRCTOP:H}/obj' 310.Ed 311.Pp 312See 313.Xr ccache 1 314for more configuration options. 315.It Va WITHOUT_CCD 316Do not build 317.Xr geom_ccd 4 318and related utilities. 319.It Va WITHOUT_CDDL 320Do not build code licensed under Sun's CDDL. 321When set, it enforces these options: 322.Pp 323.Bl -item -compact 324.It 325.Va WITHOUT_CTF 326.It 327.Va WITHOUT_DTRACE 328.It 329.Va WITHOUT_LOADER_ZFS 330.It 331.Va WITHOUT_ZFS 332.El 333.It Va WITHOUT_CLANG 334Do not build the Clang C/C++ compiler during the regular phase of the build. 335When set, it enforces these options: 336.Pp 337.Bl -item -compact 338.It 339.Va WITHOUT_CLANG_EXTRAS 340.It 341.Va WITHOUT_CLANG_FORMAT 342.It 343.Va WITHOUT_CLANG_FULL 344.It 345.Va WITHOUT_LLVM_COV 346.El 347.Pp 348When set, these options are also in effect: 349.Pp 350.Bl -inset -compact 351.It Va WITHOUT_LLVM_TARGET_AARCH64 352(unless 353.Va WITH_LLVM_TARGET_AARCH64 354is set explicitly) 355.It Va WITHOUT_LLVM_TARGET_ALL 356(unless 357.Va WITH_LLVM_TARGET_ALL 358is set explicitly) 359.It Va WITHOUT_LLVM_TARGET_ARM 360(unless 361.Va WITH_LLVM_TARGET_ARM 362is set explicitly) 363.It Va WITHOUT_LLVM_TARGET_POWERPC 364(unless 365.Va WITH_LLVM_TARGET_POWERPC 366is set explicitly) 367.It Va WITHOUT_LLVM_TARGET_RISCV 368(unless 369.Va WITH_LLVM_TARGET_RISCV 370is set explicitly) 371.El 372.It Va WITHOUT_CLANG_BOOTSTRAP 373Do not build the Clang C/C++ compiler during the bootstrap phase of 374the build. 375To be able to build the system, either gcc or clang bootstrap must be 376enabled unless an alternate compiler is provided via XCC. 377.It Va WITH_CLANG_EXTRAS 378Build additional clang and llvm tools, such as bugpoint and 379clang-format. 380.It Va WITH_CLANG_FORMAT 381Build clang-format. 382.It Va WITHOUT_CLANG_FULL 383Avoid building the ARCMigrate, Rewriter and StaticAnalyzer components of 384the Clang C/C++ compiler. 385.It Va WITHOUT_CLEAN 386Do not clean before building world and/or kernel. 387.It Va WITHOUT_CPP 388Do not build 389.Xr cpp 1 . 390.It Va WITHOUT_CROSS_COMPILER 391Do not build any cross compiler in the cross-tools stage of buildworld. 392When compiling a different version of 393.Fx 394than what is installed on the system, provide an alternate 395compiler with XCC to ensure success. 396When compiling with an identical version of 397.Fx 398to the host, this option may be safely used. 399This option may also be safe when the host version of 400.Fx 401is close to the sources being built, but all bets are off if there have 402been any changes to the toolchain between the versions. 403When set, it enforces these options: 404.Pp 405.Bl -item -compact 406.It 407.Va WITHOUT_CLANG_BOOTSTRAP 408.It 409.Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP 410.It 411.Va WITHOUT_LLD_BOOTSTRAP 412.El 413.It Va WITHOUT_CRYPT 414Do not build any crypto code. 415When set, it enforces these options: 416.Pp 417.Bl -item -compact 418.It 419.Va WITHOUT_DMAGENT 420.It 421.Va WITHOUT_KERBEROS 422.It 423.Va WITHOUT_KERBEROS_SUPPORT 424.It 425.Va WITHOUT_LDNS 426.It 427.Va WITHOUT_LDNS_UTILS 428.It 429.Va WITHOUT_LOADER_ZFS 430.It 431.Va WITHOUT_OPENSSH 432.It 433.Va WITHOUT_OPENSSL 434.It 435.Va WITHOUT_OPENSSL_KTLS 436.It 437.Va WITHOUT_PKGBOOTSTRAP 438.It 439.Va WITHOUT_UNBOUND 440.It 441.Va WITHOUT_ZFS 442.El 443.Pp 444When set, these options are also in effect: 445.Pp 446.Bl -inset -compact 447.It Va WITHOUT_GSSAPI 448(unless 449.Va WITH_GSSAPI 450is set explicitly) 451.El 452.It Va WITH_CTF 453Compile with CTF (Compact C Type Format) data. 454CTF data encapsulates a reduced form of debugging information 455similar to DWARF and the venerable stabs and is required for DTrace. 456.It Va WITHOUT_CUSE 457Do not build CUSE-related programs and libraries. 458.It Va WITHOUT_CXGBETOOL 459Do not build 460.Xr cxgbetool 8 461.Pp 462This is a default setting on 463arm/armv6, arm/armv7, powerpc/powerpc and riscv/riscv64. 464.It Va WITH_CXGBETOOL 465Build 466.Xr cxgbetool 8 467.Pp 468This is a default setting on 469amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le. 470.It Va WITHOUT_DEBUG_FILES 471Avoid building or installing standalone debug files for each 472executable binary and shared library. 473.It Va WITH_DETECT_TZ_CHANGES 474Make the time handling code detect changes to the timezone files. 475.It Va WITHOUT_DIALOG 476Do not build 477.Xr dialog 1 , 478.Xr dialog 3 , 479.Xr dpv 1 , 480and 481.Xr dpv 3 . 482When set, it enforces these options: 483.Pp 484.Bl -item -compact 485.It 486.Va WITHOUT_BSDINSTALL 487.El 488.It Va WITHOUT_DICT 489Do not build the Webster dictionary files. 490.It Va WITH_DIRDEPS_BUILD 491This is an alternate build system. 492For details see 493https://www.crufty.net/sjg/docs/freebsd-meta-mode.htm. 494Build commands can be seen from the top-level with: 495.Dl make show-valid-targets 496The build is driven by dirdeps.mk using 497.Va DIRDEPS 498stored in 499Makefile.depend files found in each directory. 500.Pp 501The build can be started from anywhere, and behaves the same. 502The initial instance of 503.Xr make 1 504recursively reads 505.Va DIRDEPS 506from 507.Pa Makefile.depend , 508computing a graph of tree dependencies from the current origin. 509Setting 510.Va NO_DIRDEPS 511skips checking dirdep dependencies and will only build in the current 512and child directories. 513.Va NO_DIRDEPS_BELOW 514skips building any dirdeps and only build the current directory. 515.Pp 516This also utilizes the 517.Va WITH_META_MODE 518logic for incremental builds. 519.Pp 520The build hides commands executed unless 521.Va NO_SILENT 522is defined. 523.Pp 524Note that there is currently no mass install feature for this. 525This build is designed for producing packages, that can then be installed 526on a target system. 527.Pp 528The implementation in 529.Fx 530is incomplete. 531Completion would require leaf directories for building each kernel 532and package so that their dependencies can be tracked. 533When set, it enforces these options: 534.Pp 535.Bl -item -compact 536.It 537.Va WITH_INSTALL_AS_USER 538.El 539.Pp 540When set, these options are also in effect: 541.Pp 542.Bl -inset -compact 543.It Va WITH_META_ERROR_TARGET 544(unless 545.Va WITHOUT_META_ERROR_TARGET 546is set explicitly) 547.It Va WITH_META_MODE 548(unless 549.Va WITHOUT_META_MODE 550is set explicitly) 551.It Va WITH_STAGING 552(unless 553.Va WITHOUT_STAGING 554is set explicitly) 555.It Va WITH_STAGING_MAN 556(unless 557.Va WITHOUT_STAGING_MAN 558is set explicitly) 559.It Va WITH_STAGING_PROG 560(unless 561.Va WITHOUT_STAGING_PROG 562is set explicitly) 563.It Va WITH_SYSROOT 564(unless 565.Va WITHOUT_SYSROOT 566is set explicitly) 567.El 568.Pp 569This must be set in the environment, make command line, or 570.Pa /etc/src-env.conf , 571not 572.Pa /etc/src.conf . 573.It Va WITH_DIRDEPS_CACHE 574Cache result of dirdeps.mk which can save significant time 575for subsequent builds. 576Depends on 577.Va WITH_DIRDEPS_BUILD . 578.Pp 579This must be set in the environment, make command line, or 580.Pa /etc/src-env.conf , 581not 582.Pa /etc/src.conf . 583.It Va WITH_DISK_IMAGE_TOOLS_BOOTSTRAP 584Build 585.Xr etdump 1 , 586.Xr makefs 8 587and 588.Xr mkimg 1 589as bootstrap tools. 590.It Va WITHOUT_DMAGENT 591Do not build dma Mail Transport Agent. 592.It Va WITHOUT_DOCCOMPRESS 593Do not install compressed system documentation. 594Only the uncompressed version will be installed. 595.It Va WITHOUT_DTRACE 596Do not build DTrace framework kernel modules, libraries, and user commands. 597When set, it enforces these options: 598.Pp 599.Bl -item -compact 600.It 601.Va WITHOUT_CTF 602.El 603.It Va WITH_DTRACE_TESTS 604Build and install the DTrace test suite in 605.Pa /usr/tests/cddl/usr.sbin/dtrace . 606This test suite is considered experimental on architectures other than 607amd64/amd64 and running it may cause system instability. 608.It Va WITHOUT_DYNAMICROOT 609Set this if you do not want to link 610.Pa /bin 611and 612.Pa /sbin 613dynamically. 614.It Va WITHOUT_EE 615Do not build and install 616.Xr edit 1 , 617.Xr ee 1 , 618and related programs. 619.It Va WITHOUT_EFI 620Set not to build 621.Xr efivar 3 622and 623.Xr efivar 8 . 624.Pp 625This is a default setting on 626i386/i386, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 627.It Va WITH_EFI 628Build 629.Xr efivar 3 630and 631.Xr efivar 8 . 632.Pp 633This is a default setting on 634amd64/amd64, arm/armv6, arm/armv7 and arm64/aarch64. 635.It Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP 636Do not build ELF Tool Chain tools 637(addr2line, nm, size, strings and strip) 638as part of the bootstrap process. 639.Bf -symbolic 640An alternate bootstrap tool chain must be provided. 641.Ef 642.It Va WITHOUT_EXAMPLES 643Avoid installing examples to 644.Pa /usr/share/examples/ . 645.It Va WITH_EXPERIMENTAL 646Include experimental features in the build. 647.It Va WITH_EXTRA_TCP_STACKS 648Build extra TCP stack modules. 649.It Va WITHOUT_FDT 650Do not build Flattened Device Tree support as part of the base system. 651This includes the device tree compiler (dtc) and libfdt support library. 652.Pp 653This is a default setting on 654amd64/amd64 and i386/i386. 655.It Va WITH_FDT 656Build Flattened Device Tree support as part of the base system. 657This includes the device tree compiler (dtc) and libfdt support library. 658.Pp 659This is a default setting on 660arm/armv6, arm/armv7, arm64/aarch64, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 661.It Va WITHOUT_FILE 662Do not build 663.Xr file 1 664and related programs. 665.It Va WITHOUT_FINGER 666Do not build or install 667.Xr finger 1 668and 669.Xr fingerd 8 . 670.It Va WITHOUT_FLOPPY 671Do not build or install programs 672for operating floppy disk driver. 673.It Va WITHOUT_FORMAT_EXTENSIONS 674Do not enable 675.Fl fformat-extensions 676when compiling the kernel. 677Also disables all format checking. 678.It Va WITHOUT_FORTH 679Build bootloaders without Forth support. 680.It Va WITHOUT_FP_LIBC 681Build 682.Nm libc 683without floating-point support. 684.It Va WITHOUT_FREEBSD_UPDATE 685Do not build 686.Xr freebsd-update 8 . 687.It Va WITHOUT_FTP 688Do not build or install 689.Xr ftp 1 690and 691.Xr ftpd 8 . 692.It Va WITHOUT_GAMES 693Do not build games. 694.It Va WITHOUT_GH_BC 695Install the traditional FreeBSD 696.Xr bc 1 697and 698.Xr dc 1 699programs instead of the enhanced versions. 700.It Va WITHOUT_GNU_DIFF 701Do not build GNU 702.Xr diff3 1 . 703.It Va WITHOUT_GOOGLETEST 704Neither build nor install 705.Lb libgmock , 706.Lb libgtest , 707and dependent tests. 708.It Va WITHOUT_GPIO 709Do not build 710.Xr gpioctl 8 711as part of the base system. 712.It Va WITHOUT_GSSAPI 713Do not build libgssapi. 714.It Va WITHOUT_HAST 715Do not build 716.Xr hastd 8 717and related utilities. 718.It Va WITH_HESIOD 719Build Hesiod support. 720.It Va WITHOUT_HTML 721Do not build HTML docs. 722.It Va WITHOUT_HYPERV 723Do not build or install HyperV utilities. 724.Pp 725This is a default setting on 726arm/armv6, arm/armv7, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 727.It Va WITH_HYPERV 728Build or install HyperV utilities. 729.Pp 730This is a default setting on 731amd64/amd64, arm64/aarch64 and i386/i386. 732.It Va WITHOUT_ICONV 733Do not build iconv as part of libc. 734.It Va WITHOUT_INCLUDES 735Do not install header files. 736This option used to be spelled 737.Va NO_INCS . 738.Bf -symbolic 739The option does not work for build targets. 740.Ef 741.It Va WITHOUT_INET 742Do not build programs and libraries related to IPv4 networking. 743When set, it enforces these options: 744.Pp 745.Bl -item -compact 746.It 747.Va WITHOUT_INET_SUPPORT 748.El 749.It Va WITHOUT_INET6 750Do not build 751programs and libraries related to IPv6 networking. 752When set, it enforces these options: 753.Pp 754.Bl -item -compact 755.It 756.Va WITHOUT_INET6_SUPPORT 757.El 758.It Va WITHOUT_INET6_SUPPORT 759Build libraries, programs, and kernel modules without IPv6 support. 760.It Va WITHOUT_INETD 761Do not build 762.Xr inetd 8 . 763.It Va WITHOUT_INET_SUPPORT 764Build libraries, programs, and kernel modules without IPv4 support. 765.It Va WITH_INIT_ALL_PATTERN 766Build the base system or kernel with stack variables initialized to 767.Pq compiler defined 768debugging patterns on function entry. 769This option requires the clang compiler. 770.It Va WITH_INIT_ALL_ZERO 771Build the base system or kernel with stack variables initialized 772to zero on function entry. 773This option requires that the clang compiler be used. 774.It Va WITHOUT_INSTALLLIB 775Set this to not install optional libraries. 776For example, when creating a 777.Xr nanobsd 8 778image. 779.Bf -symbolic 780The option does not work for build targets. 781.Ef 782.It Va WITH_INSTALL_AS_USER 783Make install targets succeed for non-root users by installing 784files with owner and group attributes set to that of the user running 785the 786.Xr make 1 787command. 788The user still must set the 789.Va DESTDIR 790variable to point to a directory where the user has write permissions. 791.It Va WITHOUT_IPFILTER 792Do not build IP Filter package. 793.It Va WITHOUT_IPFW 794Do not build IPFW tools. 795.It Va WITHOUT_IPSEC_SUPPORT 796Do not build the kernel with 797.Xr ipsec 4 798support. 799This option is needed for 800.Xr ipsec 4 801and 802.Xr tcpmd5 4 . 803.It Va WITHOUT_ISCSI 804Do not build 805.Xr iscsid 8 806and related utilities. 807.It Va WITHOUT_JAIL 808Do not build tools for the support of jails; e.g., 809.Xr jail 8 . 810.It Va WITHOUT_KDUMP 811Do not build 812.Xr kdump 1 813and 814.Xr truss 1 . 815.It Va WITHOUT_KERBEROS 816Set this to not build Kerberos 5 (KTH Heimdal). 817When set, these options are also in effect: 818.Pp 819.Bl -inset -compact 820.It Va WITHOUT_GSSAPI 821(unless 822.Va WITH_GSSAPI 823is set explicitly) 824.It Va WITHOUT_KERBEROS_SUPPORT 825(unless 826.Va WITH_KERBEROS_SUPPORT 827is set explicitly) 828.El 829.It Va WITHOUT_KERBEROS_SUPPORT 830Build some programs without Kerberos support, like 831.Xr ssh 1 , 832.Xr telnet 1 , 833and 834.Xr sshd 8 . 835.It Va WITH_KERNEL_RETPOLINE 836Enable the "retpoline" mitigation for CVE-2017-5715 in the kernel 837build. 838.It Va WITHOUT_KERNEL_SYMBOLS 839Do not install standalone kernel debug symbol files. 840This option has no effect at build time. 841.It Va WITHOUT_KVM 842Do not build the 843.Nm libkvm 844library as a part of the base system. 845.Bf -symbolic 846The option has no effect yet. 847.Ef 848When set, these options are also in effect: 849.Pp 850.Bl -inset -compact 851.It Va WITHOUT_KVM_SUPPORT 852(unless 853.Va WITH_KVM_SUPPORT 854is set explicitly) 855.El 856.It Va WITHOUT_KVM_SUPPORT 857Build some programs without optional 858.Nm libkvm 859support. 860.It Va WITHOUT_LDNS 861Setting this variable will prevent the LDNS library from being built. 862When set, it enforces these options: 863.Pp 864.Bl -item -compact 865.It 866.Va WITHOUT_LDNS_UTILS 867.It 868.Va WITHOUT_UNBOUND 869.El 870.It Va WITHOUT_LDNS_UTILS 871Setting this variable will prevent building the LDNS utilities 872.Xr drill 1 873and 874.Xr host 1 . 875.It Va WITHOUT_LEGACY_CONSOLE 876Do not build programs that support a legacy PC console; e.g., 877.Xr kbdcontrol 1 878and 879.Xr vidcontrol 1 . 880.It Va WITHOUT_LIB32 881On 64-bit platforms, do not build 32-bit library set and a 882.Nm ld-elf32.so.1 883runtime linker. 884.Pp 885This is a default setting on 886arm/armv6, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64le and riscv/riscv64. 887.It Va WITH_LIB32 888On 64-bit platforms, build the 32-bit library set and a 889.Nm ld-elf32.so.1 890runtime linker. 891.Pp 892This is a default setting on 893amd64/amd64 and powerpc/powerpc64. 894.It Va WITHOUT_LLD 895Do not build LLVM's lld linker. 896.It Va WITHOUT_LLDB 897Do not build the LLDB debugger. 898.Pp 899This is a default setting on 900arm/armv6, arm/armv7 and riscv/riscv64. 901.It Va WITH_LLDB 902Build the LLDB debugger. 903.Pp 904This is a default setting on 905amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le. 906.It Va WITHOUT_LLD_BOOTSTRAP 907Do not build the LLD linker during the bootstrap phase of 908the build. 909To be able to build the system an alternate linker must be provided via XLD. 910.It Va WITHOUT_LLD_IS_LD 911Do not install a 912.Pa /usr/bin/ld symlink 913to 914.Pa ld.lld . 915The system will not have a usable tool chain unless a linker is provided 916some other way. 917.It Va WITHOUT_LLVM_ASSERTIONS 918Disable debugging assertions in LLVM. 919.It Va WITH_LLVM_BINUTILS 920Install LLVM's binutils (without an llvm- prefix), 921instead of ELF Tool Chain's tools. 922This includes 923.Xr addr2line 1 , 924.Xr ar 1 , 925.Xr nm 1 , 926.Xr objcopy 1 , 927.Xr ranlib 1 , 928.Xr readelf 1 , 929.Xr size 1 , 930and 931.Xr strip 1 . 932Regardless of this setting, LLVM tools are used for 933.Xr c++filt 1 934and 935.Xr objdump 1 . 936.Xr strings 1 937is always provided by ELF Tool Chain. 938.It Va WITHOUT_LLVM_COV 939Do not build the 940.Xr llvm-cov 1 941tool. 942.It Va WITHOUT_LLVM_CXXFILT 943Install ELF Tool Chain's cxxfilt as c++filt, instead of LLVM's llvm-cxxfilt. 944.It Va WITHOUT_LLVM_TARGET_AARCH64 945Do not build LLVM target support for AArch64. 946The 947.Va LLVM_TARGET_ALL 948option should be used rather than this in most cases. 949.It Va WITHOUT_LLVM_TARGET_ALL 950Only build the required LLVM target support. 951This option is preferred to specific target support options. 952When set, these options are also in effect: 953.Pp 954.Bl -inset -compact 955.It Va WITHOUT_LLVM_TARGET_AARCH64 956(unless 957.Va WITH_LLVM_TARGET_AARCH64 958is set explicitly) 959.It Va WITHOUT_LLVM_TARGET_ARM 960(unless 961.Va WITH_LLVM_TARGET_ARM 962is set explicitly) 963.It Va WITHOUT_LLVM_TARGET_POWERPC 964(unless 965.Va WITH_LLVM_TARGET_POWERPC 966is set explicitly) 967.It Va WITHOUT_LLVM_TARGET_RISCV 968(unless 969.Va WITH_LLVM_TARGET_RISCV 970is set explicitly) 971.El 972.It Va WITHOUT_LLVM_TARGET_ARM 973Do not build LLVM target support for ARM. 974The 975.Va LLVM_TARGET_ALL 976option should be used rather than this in most cases. 977.It Va WITH_LLVM_TARGET_BPF 978Build LLVM target support for BPF. 979The 980.Va LLVM_TARGET_ALL 981option should be used rather than this in most cases. 982.It Va WITH_LLVM_TARGET_MIPS 983Build LLVM target support for MIPS. 984The 985.Va LLVM_TARGET_ALL 986option should be used rather than this in most cases. 987.It Va WITHOUT_LLVM_TARGET_POWERPC 988Do not build LLVM target support for PowerPC. 989The 990.Va LLVM_TARGET_ALL 991option should be used rather than this in most cases. 992.It Va WITHOUT_LLVM_TARGET_RISCV 993Do not build LLVM target support for RISC-V. 994The 995.Va LLVM_TARGET_ALL 996option should be used rather than this in most cases. 997.It Va WITHOUT_LLVM_TARGET_X86 998Do not build LLVM target support for X86. 999The 1000.Va LLVM_TARGET_ALL 1001option should be used rather than this in most cases. 1002.It Va WITH_LOADER_EFI_SECUREBOOT 1003Enable building 1004.Xr loader 8 1005with support for verification based on certificates obtained from UEFI. 1006.It Va WITHOUT_LOADER_GELI 1007Disable inclusion of GELI crypto support in the boot chain binaries. 1008.Pp 1009This is a default setting on 1010powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le. 1011.It Va WITH_LOADER_GELI 1012Build GELI bootloader support. 1013.Pp 1014This is a default setting on 1015amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386 and riscv/riscv64. 1016.It Va WITHOUT_LOADER_KBOOT 1017Do not build kboot, a linuxboot environment loader 1018.Pp 1019This is a default setting on 1020arm/armv6, arm/armv7, i386/i386, powerpc/powerpc, powerpc/powerpc64le and riscv/riscv64. 1021.It Va WITH_LOADER_KBOOT 1022Build kboot, a linuxboot environment loader 1023.Pp 1024This is a default setting on 1025amd64/amd64, arm64/aarch64 and powerpc/powerpc64. 1026.It Va WITHOUT_LOADER_LUA 1027Do not build LUA bindings for the boot loader. 1028.Pp 1029This is a default setting on 1030powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le. 1031.It Va WITH_LOADER_LUA 1032Build LUA bindings for the boot loader. 1033.Pp 1034This is a default setting on 1035amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386 and riscv/riscv64. 1036.It Va WITHOUT_LOADER_OFW 1037Disable building of openfirmware bootloader components. 1038.Pp 1039This is a default setting on 1040amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386 and riscv/riscv64. 1041.It Va WITH_LOADER_OFW 1042Build openfirmware bootloader components. 1043.Pp 1044This is a default setting on 1045powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le. 1046.It Va WITHOUT_LOADER_UBOOT 1047Disable building of ubldr. 1048.Pp 1049This is a default setting on 1050amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64le and riscv/riscv64. 1051.It Va WITH_LOADER_UBOOT 1052Build ubldr. 1053.Pp 1054This is a default setting on 1055arm/armv6, arm/armv7, powerpc/powerpc and powerpc/powerpc64. 1056.It Va WITH_LOADER_VERBOSE 1057Build with extra verbose debugging in the loader. 1058May explode already nearly too large loader over the limit. 1059Use with care. 1060.It Va WITH_LOADER_VERIEXEC 1061Enable building 1062.Xr loader 8 1063with support for verification similar to Verified Exec. 1064.Pp 1065Depends on 1066.Va WITH_BEARSSL . 1067When set, these options are also in effect: 1068.Pp 1069.Bl -inset -compact 1070.It Va WITH_LOADER_EFI_SECUREBOOT 1071(unless 1072.Va WITHOUT_LOADER_EFI_SECUREBOOT 1073is set explicitly) 1074.It Va WITH_LOADER_VERIEXEC_VECTX 1075(unless 1076.Va WITHOUT_LOADER_VERIEXEC_VECTX 1077is set explicitly) 1078.El 1079.It Va WITH_LOADER_VERIEXEC_PASS_MANIFEST 1080Enable building 1081.Xr loader 8 1082with support to pass a verified manifest to the kernel. 1083The kernel has to be built with a module to parse the manifest. 1084.Pp 1085Depends on 1086.Va WITH_LOADER_VERIEXEC . 1087.It Va WITH_LOADER_VERIEXEC_VECTX 1088Enable building 1089.Xr loader 8 1090with support for hashing and verifying kernel and modules as a side effect 1091of loading. 1092.Pp 1093Depends on 1094.Va WITH_LOADER_VERIEXEC . 1095.It Va WITHOUT_LOADER_ZFS 1096Do not build ZFS file system boot loader support. 1097.It Va WITHOUT_LOCALES 1098Do not build localization files; see 1099.Xr locale 1 . 1100.It Va WITHOUT_LOCATE 1101Do not build 1102.Xr locate 1 1103and related programs. 1104.It Va WITHOUT_LPR 1105Do not build 1106.Xr lpr 1 1107and related programs. 1108.It Va WITHOUT_LS_COLORS 1109Build 1110.Xr ls 1 1111without support for colors to distinguish file types. 1112.It Va WITHOUT_MACHDEP_OPTIMIZATIONS 1113Prefer machine-independent non-assembler code in libc and libm. 1114.It Va WITHOUT_MAIL 1115Do not build any mail support (MUA or MTA). 1116When set, it enforces these options: 1117.Pp 1118.Bl -item -compact 1119.It 1120.Va WITHOUT_DMAGENT 1121.It 1122.Va WITHOUT_MAILWRAPPER 1123.It 1124.Va WITHOUT_SENDMAIL 1125.El 1126.It Va WITHOUT_MAILWRAPPER 1127Do not build the 1128.Xr mailwrapper 8 1129MTA selector. 1130.It Va WITHOUT_MAKE 1131Do not install 1132.Xr make 1 1133and related support files. 1134.It Va WITHOUT_MAKE_CHECK_USE_SANDBOX 1135Do not execute 1136.Dq Li "make check" 1137in limited sandbox mode. 1138This option should be paired with 1139.Va WITH_INSTALL_AS_USER 1140if executed as an unprivileged user. 1141See 1142.Xr tests 7 1143for more details. 1144.It Va WITH_MALLOC_PRODUCTION 1145Disable assertions and statistics gathering in 1146.Xr malloc 3 . 1147It also defaults the A and J runtime options to off. 1148.It Va WITHOUT_MAN 1149Do not build manual pages. 1150When set, these options are also in effect: 1151.Pp 1152.Bl -inset -compact 1153.It Va WITHOUT_MAN_UTILS 1154(unless 1155.Va WITH_MAN_UTILS 1156is set explicitly) 1157.El 1158.It Va WITHOUT_MANCOMPRESS 1159Do not install compressed man pages. 1160Only the uncompressed versions will be installed. 1161.It Va WITH_MANSPLITPKG 1162Split man pages into their own packages during make package. 1163.It Va WITHOUT_MAN_UTILS 1164Do not build utilities for manual pages, 1165.Xr apropos 1 , 1166.Xr makewhatis 1 , 1167.Xr man 1 , 1168.Xr whatis 1 , 1169.Xr manctl 8 , 1170and related support files. 1171.It Va WITH_META_ERROR_TARGET 1172Enable the META_MODE .ERROR target. 1173.Pp 1174This target will copy the meta file of a failed target 1175to 1176.Va ERROR_LOGDIR 1177(default is 1178.Ql ${SRCTOP:H}/error ) 1179to help with failure analysis. 1180Depends on 1181.Va WITH_META_MODE . 1182This default when 1183.Va WITH_DIRDEPS_BUILD 1184is set. 1185.Pp 1186This must be set in the environment, make command line, or 1187.Pa /etc/src-env.conf , 1188not 1189.Pa /etc/src.conf . 1190.It Va WITH_META_MODE 1191Create 1192.Xr make 1 1193meta files when building, which can provide a reliable incremental build when 1194using 1195.Xr filemon 4 . 1196The meta file is created in OBJDIR as 1197.Pa target.meta . 1198These meta files track the command that was executed, its output, and the 1199current directory. 1200The 1201.Xr filemon 4 1202module is required unless 1203.Va NO_FILEMON 1204is defined. 1205When the module is loaded, any files used by the commands executed are 1206tracked as dependencies for the target in its meta file. 1207The target is considered out-of-date and rebuilt if any of these 1208conditions are true compared to the last build: 1209.Bl -bullet -compact 1210.It 1211The command to execute changes. 1212.It 1213The current working directory changes. 1214.It 1215The target's meta file is missing. 1216.It 1217The target's meta file is missing filemon data when filemon is loaded 1218and a previous run did not have it loaded. 1219.It 1220[requires 1221.Xr filemon 4 ] 1222Files read, executed or linked to are newer than the target. 1223.It 1224[requires 1225.Xr filemon 4 ] 1226Files read, written, executed or linked are missing. 1227.El 1228The meta files can also be useful for debugging. 1229.Pp 1230The build hides commands that are executed unless 1231.Va NO_SILENT 1232is defined. 1233Errors cause 1234.Xr make 1 1235to show some of its environment for further debugging. 1236.Pp 1237The build operates as it normally would otherwise. 1238This option originally invoked a different build system but that was renamed 1239to 1240.Va WITH_DIRDEPS_BUILD . 1241.Pp 1242This must be set in the environment, make command line, or 1243.Pa /etc/src-env.conf , 1244not 1245.Pa /etc/src.conf . 1246.It Va WITHOUT_MLX5TOOL 1247Do not build 1248.Xr mlx5tool 8 1249.Pp 1250This is a default setting on 1251arm/armv6, arm/armv7, powerpc/powerpc and riscv/riscv64. 1252.It Va WITH_MLX5TOOL 1253Build 1254.Xr mlx5tool 8 1255.Pp 1256This is a default setting on 1257amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le. 1258.It Va WITHOUT_NETCAT 1259Do not build 1260.Xr nc 1 1261utility. 1262.It Va WITHOUT_NETGRAPH 1263Do not build applications to support 1264.Xr netgraph 4 . 1265When set, it enforces these options: 1266.Pp 1267.Bl -item -compact 1268.It 1269.Va WITHOUT_BLUETOOTH 1270.El 1271.Pp 1272When set, these options are also in effect: 1273.Pp 1274.Bl -inset -compact 1275.It Va WITHOUT_NETGRAPH_SUPPORT 1276(unless 1277.Va WITH_NETGRAPH_SUPPORT 1278is set explicitly) 1279.El 1280.It Va WITHOUT_NETGRAPH_SUPPORT 1281Build libraries, programs, and kernel modules without netgraph support. 1282.It Va WITHOUT_NETLINK 1283Do not build 1284.Xr genl 1 1285utility. 1286.It Va WITHOUT_NETLINK_SUPPORT 1287Make libraries and programs use rtsock and 1288.Xr sysctl 3 1289interfaces instead of 1290.Xr snl 3 . 1291.It Va WITHOUT_NIS 1292Do not build 1293.Xr NIS 8 1294support and related programs. 1295If set, you might need to adopt your 1296.Xr nsswitch.conf 5 1297and remove 1298.Sq nis 1299entries. 1300.It Va WITHOUT_NLS 1301Do not build NLS catalogs. 1302When set, it enforces these options: 1303.Pp 1304.Bl -item -compact 1305.It 1306.Va WITHOUT_NLS_CATALOGS 1307.El 1308.It Va WITHOUT_NLS_CATALOGS 1309Do not build NLS catalog support for 1310.Xr csh 1 . 1311.It Va WITHOUT_NS_CACHING 1312Disable name caching in the 1313.Pa nsswitch 1314subsystem. 1315The generic caching daemon, 1316.Xr nscd 8 , 1317will not be built either if this option is set. 1318.It Va WITHOUT_NTP 1319Do not build 1320.Xr ntpd 8 1321and related programs. 1322.It Va WITHOUT_NVME 1323Do not build nvme related tools and kernel modules. 1324.Pp 1325This is a default setting on 1326arm/armv6, arm/armv7, powerpc/powerpc and riscv/riscv64. 1327.It Va WITH_NVME 1328Build nvme related tools and kernel modules. 1329.Pp 1330This is a default setting on 1331amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le. 1332.It Va WITHOUT_OFED 1333Do not build the 1334.Dq "OpenFabrics Enterprise Distribution" 1335InfiniBand software stack, including kernel modules and userspace libraries. 1336.Pp 1337This is a default setting on 1338arm/armv6 and arm/armv7. 1339When set, it enforces these options: 1340.Pp 1341.Bl -item -compact 1342.It 1343.Va WITHOUT_OFED_EXTRA 1344.El 1345.It Va WITH_OFED 1346Build the 1347.Dq "OpenFabrics Enterprise Distribution" 1348InfiniBand software stack, including kernel modules and userspace libraries. 1349.Pp 1350This is a default setting on 1351amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 1352.It Va WITH_OFED_EXTRA 1353Build the non-essential components of the 1354.Dq "OpenFabrics Enterprise Distribution" 1355Infiniband software stack, mostly examples. 1356.It Va WITH_OPENLDAP 1357Enable building LDAP support for kerberos using an openldap client from ports. 1358.It Va WITHOUT_OPENMP 1359Do not build LLVM's OpenMP runtime. 1360.Pp 1361This is a default setting on 1362arm/armv6, arm/armv7 and powerpc/powerpc. 1363.It Va WITH_OPENMP 1364Build LLVM's OpenMP runtime. 1365.Pp 1366This is a default setting on 1367amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 1368.It Va WITHOUT_OPENSSH 1369Do not build OpenSSH. 1370.It Va WITHOUT_OPENSSL 1371Do not build OpenSSL. 1372When set, it enforces these options: 1373.Pp 1374.Bl -item -compact 1375.It 1376.Va WITHOUT_DMAGENT 1377.It 1378.Va WITHOUT_KERBEROS 1379.It 1380.Va WITHOUT_KERBEROS_SUPPORT 1381.It 1382.Va WITHOUT_LDNS 1383.It 1384.Va WITHOUT_LDNS_UTILS 1385.It 1386.Va WITHOUT_LOADER_ZFS 1387.It 1388.Va WITHOUT_OPENSSH 1389.It 1390.Va WITHOUT_OPENSSL_KTLS 1391.It 1392.Va WITHOUT_PKGBOOTSTRAP 1393.It 1394.Va WITHOUT_UNBOUND 1395.It 1396.Va WITHOUT_ZFS 1397.El 1398.Pp 1399When set, these options are also in effect: 1400.Pp 1401.Bl -inset -compact 1402.It Va WITHOUT_GSSAPI 1403(unless 1404.Va WITH_GSSAPI 1405is set explicitly) 1406.El 1407.It Va WITHOUT_OPENSSL_KTLS 1408Do not include kernel TLS support in OpenSSL. 1409.Pp 1410This is a default setting on 1411arm/armv6, arm/armv7, i386/i386, powerpc/powerpc and riscv/riscv64. 1412.It Va WITH_OPENSSL_KTLS 1413Include kernel TLS support in OpenSSL. 1414.Pp 1415This is a default setting on 1416amd64/amd64, arm64/aarch64, powerpc/powerpc64 and powerpc/powerpc64le. 1417.It Va WITHOUT_PAM 1418Do not build PAM library and modules. 1419.Bf -symbolic 1420This option is deprecated and does nothing. 1421.Ef 1422When set, these options are also in effect: 1423.Pp 1424.Bl -inset -compact 1425.It Va WITHOUT_PAM_SUPPORT 1426(unless 1427.Va WITH_PAM_SUPPORT 1428is set explicitly) 1429.El 1430.It Va WITHOUT_PAM_SUPPORT 1431Build some programs without PAM support, particularly 1432.Xr ftpd 8 1433and 1434.Xr ppp 8 . 1435.It Va WITHOUT_PF 1436Do not build PF firewall package. 1437When set, it enforces these options: 1438.Pp 1439.Bl -item -compact 1440.It 1441.Va WITHOUT_AUTHPF 1442.El 1443.It Va WITHOUT_PIE 1444Do not build dynamically linked binaries as 1445Position-Independent Executable (PIE). 1446.Pp 1447This is a default setting on 1448arm/armv6, arm/armv7, i386/i386 and powerpc/powerpc. 1449.It Va WITH_PIE 1450Build dynamically linked binaries as 1451Position-Independent Executable (PIE). 1452.Pp 1453This is a default setting on 1454amd64/amd64, arm64/aarch64, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 1455.It Va WITHOUT_PKGBOOTSTRAP 1456Do not build 1457.Xr pkg 7 1458bootstrap tool. 1459.It Va WITHOUT_PMC 1460Do not build 1461.Xr pmccontrol 8 1462and related programs. 1463.It Va WITHOUT_PPP 1464Do not build 1465.Xr ppp 8 1466and related programs. 1467.It Va WITH_PROFILE 1468Build profiled libraries for use with 1469.Xr gprof 8 . 1470This option is deprecated and may not be present in a future version of 1471.Fx . 1472.It Va WITHOUT_QUOTAS 1473Do not build 1474.Xr quota 1 1475and related programs. 1476.It Va WITHOUT_RADIUS_SUPPORT 1477Do not build radius support into various applications, like 1478.Xr pam_radius 8 1479and 1480.Xr ppp 8 . 1481.It Va WITH_RATELIMIT 1482Build the system with rate limit support. 1483.Pp 1484This makes 1485.Dv SO_MAX_PACING_RATE 1486effective in 1487.Xr getsockopt 2 , 1488and 1489.Ar txrlimit 1490support in 1491.Xr ifconfig 8 , 1492by proxy. 1493.It Va WITHOUT_RBOOTD 1494Do not build or install 1495.Xr rbootd 8 . 1496.It Va WITHOUT_RELRO 1497Do not apply the Relocation Read-Only (RELRO) vulnerability mitigation. 1498See also the 1499.Va BIND_NOW 1500option. 1501.It Va WITH_REPRODUCIBLE_BUILD 1502Exclude build metadata (such as the build time, user, or host) 1503from the kernel, boot loaders, and uname output, so that builds produce 1504bit-for-bit identical output. 1505.It Va WITHOUT_RESCUE 1506Do not build 1507.Xr rescue 8 . 1508.It Va WITH_RETPOLINE 1509Build the base system with the retpoline speculative execution 1510vulnerability mitigation for CVE-2017-5715. 1511.It Va WITHOUT_ROUTED 1512Do not build 1513.Xr routed 8 1514utility. 1515.It Va WITH_RPCBIND_WARMSTART_SUPPORT 1516Build 1517.Xr rpcbind 8 1518with warmstart support. 1519.It Va WITHOUT_SCTP_SUPPORT 1520Disable support in the kernel for the 1521.Xr sctp 4 1522Stream Control Transmission Protocol 1523loadable kernel module. 1524.It Va WITHOUT_SENDMAIL 1525Do not build 1526.Xr sendmail 8 1527and related programs. 1528.It Va WITHOUT_SERVICESDB 1529Do not install 1530.Pa /var/db/services.db . 1531.It Va WITHOUT_SETUID_LOGIN 1532Set this to disable the installation of 1533.Xr login 1 1534as a set-user-ID root program. 1535.It Va WITHOUT_SHAREDOCS 1536Do not build the 1537.Bx 4.4 1538legacy docs. 1539.It Va WITHOUT_SHARED_TOOLCHAIN 1540Build the toolchain binaries as statically linked executables. 1541The set includes 1542.Xr cc 1 , 1543.Xr make 1 1544and necessary utilities like assembler, linker and library archive manager. 1545.It Va WITH_SORT_THREADS 1546Enable threads in 1547.Xr sort 1 . 1548.It Va WITHOUT_SOURCELESS 1549Do not build kernel modules that include sourceless code (either microcode or native code for host CPU). 1550When set, it enforces these options: 1551.Pp 1552.Bl -item -compact 1553.It 1554.Va WITHOUT_SOURCELESS_HOST 1555.It 1556.Va WITHOUT_SOURCELESS_UCODE 1557.El 1558.It Va WITHOUT_SOURCELESS_HOST 1559Do not build kernel modules that include sourceless native code for host CPU. 1560.It Va WITHOUT_SOURCELESS_UCODE 1561Do not build kernel modules that include sourceless microcode. 1562.It Va WITHOUT_SPLIT_KERNEL_DEBUG 1563Do not build standalone kernel debug files. 1564Debug data (if enabled by the kernel configuration file) 1565will be included in the kernel and modules. 1566When set, it enforces these options: 1567.Pp 1568.Bl -item -compact 1569.It 1570.Va WITHOUT_KERNEL_SYMBOLS 1571.El 1572.It Va WITHOUT_SSP 1573Do not build world with propolice stack smashing protection. 1574.It Va WITH_STAGING 1575Enable staging of files to a stage tree. 1576This can be best thought of as auto-install to 1577.Va DESTDIR 1578with some extra meta data to ensure dependencies can be tracked. 1579Depends on 1580.Va WITH_DIRDEPS_BUILD . 1581When set, these options are also in effect: 1582.Pp 1583.Bl -inset -compact 1584.It Va WITH_STAGING_MAN 1585(unless 1586.Va WITHOUT_STAGING_MAN 1587is set explicitly) 1588.It Va WITH_STAGING_PROG 1589(unless 1590.Va WITHOUT_STAGING_PROG 1591is set explicitly) 1592.El 1593.Pp 1594This must be set in the environment, make command line, or 1595.Pa /etc/src-env.conf , 1596not 1597.Pa /etc/src.conf . 1598.It Va WITH_STAGING_MAN 1599Enable staging of man pages to stage tree. 1600.It Va WITH_STAGING_PROG 1601Enable staging of PROGs to stage tree. 1602.It Va WITH_STALE_STAGED 1603Check staged files are not stale. 1604.It Va WITHOUT_STATS 1605Neither build nor install 1606.Lb libstats 1607and dependent binaries. 1608.It Va WITHOUT_SYSCONS 1609Do not build 1610.Xr syscons 4 1611support files such as keyboard maps, fonts, and screen output maps. 1612.It Va WITH_SYSROOT 1613Enable use of sysroot during build. 1614Depends on 1615.Va WITH_DIRDEPS_BUILD . 1616.Pp 1617This must be set in the environment, make command line, or 1618.Pa /etc/src-env.conf , 1619not 1620.Pa /etc/src.conf . 1621.It Va WITHOUT_SYSTEM_COMPILER 1622Do not opportunistically skip building a cross-compiler during the 1623bootstrap phase of the build. 1624Normally, if the currently installed compiler matches the planned bootstrap 1625compiler type and revision, then it will not be built. 1626This does not prevent a compiler from being built for installation though, 1627only for building one for the build itself. 1628The 1629.Va WITHOUT_CLANG 1630option controls that. 1631.It Va WITHOUT_SYSTEM_LINKER 1632Do not opportunistically skip building a cross-linker during the 1633bootstrap phase of the build. 1634Normally, if the currently installed linker matches the planned bootstrap 1635linker type and revision, then it will not be built. 1636This does not prevent a linker from being built for installation though, 1637only for building one for the build itself. 1638The 1639.Va WITHOUT_LLD 1640option controls that. 1641.Pp 1642This option is only relevant when 1643.Va WITH_LLD_BOOTSTRAP 1644is set. 1645.It Va WITHOUT_TALK 1646Do not build or install 1647.Xr talk 1 1648and 1649.Xr talkd 8 . 1650.It Va WITHOUT_TCP_WRAPPERS 1651Do not build or install 1652.Xr tcpd 8 , 1653and related utilities. 1654.It Va WITHOUT_TCSH 1655Do not build and install 1656.Pa /bin/csh 1657(which is 1658.Xr tcsh 1 ) . 1659.It Va WITHOUT_TELNET 1660Do not build 1661.Xr telnet 1 1662and related programs. 1663.It Va WITHOUT_TESTS 1664Do not build nor install the 1665.Fx 1666Test Suite in 1667.Pa /usr/tests/ . 1668See 1669.Xr tests 7 1670for more details. 1671This also disables the build of all test-related dependencies, including ATF. 1672When set, it enforces these options: 1673.Pp 1674.Bl -item -compact 1675.It 1676.Va WITHOUT_DTRACE_TESTS 1677.El 1678.Pp 1679When set, these options are also in effect: 1680.Pp 1681.Bl -inset -compact 1682.It Va WITHOUT_GOOGLETEST 1683(unless 1684.Va WITH_GOOGLETEST 1685is set explicitly) 1686.It Va WITHOUT_TESTS_SUPPORT 1687(unless 1688.Va WITH_TESTS_SUPPORT 1689is set explicitly) 1690.El 1691.It Va WITHOUT_TESTS_SUPPORT 1692Disable the build of all test-related dependencies, including ATF. 1693When set, it enforces these options: 1694.Pp 1695.Bl -item -compact 1696.It 1697.Va WITHOUT_GOOGLETEST 1698.El 1699.It Va WITHOUT_TEXTPROC 1700Do not build 1701programs used for text processing. 1702.It Va WITHOUT_TFTP 1703Do not build or install 1704.Xr tftp 1 1705and 1706.Xr tftpd 8 . 1707.It Va WITHOUT_TOOLCHAIN 1708Do not install 1709programs used for program development, 1710compilers, debuggers etc. 1711When set, it enforces these options: 1712.Pp 1713.Bl -item -compact 1714.It 1715.Va WITHOUT_CLANG 1716.It 1717.Va WITHOUT_CLANG_EXTRAS 1718.It 1719.Va WITHOUT_CLANG_FORMAT 1720.It 1721.Va WITHOUT_CLANG_FULL 1722.It 1723.Va WITHOUT_LLD 1724.It 1725.Va WITHOUT_LLDB 1726.It 1727.Va WITHOUT_LLVM_COV 1728.El 1729.It Va WITH_UBSAN 1730Build the base system with Undefined Behavior Sanitizer (UBSan) to detect 1731various kinds of undefined behavior at runtime. 1732Requires that Clang be used as the base system compiler 1733and that the runtime support library is available 1734.It Va WITHOUT_UNBOUND 1735Do not build 1736.Xr unbound 8 1737and related programs. 1738.It Va WITHOUT_UNIFIED_OBJDIR 1739Use the historical object directory format for 1740.Xr build 7 1741targets. 1742For native-builds and builds done directly in sub-directories the format of 1743.Pa ${MAKEOBJDIRPREFIX}/${.CURDIR} 1744is used, 1745while for cross-builds 1746.Pa ${MAKEOBJDIRPREFIX}/${TARGET}.${TARGET_ARCH}/${.CURDIR} 1747is used. 1748.Pp 1749This option is transitional and will be removed in a future version of 1750.Fx , 1751at which time 1752.Va WITH_UNIFIED_OBJDIR 1753will be enabled permanently. 1754.Pp 1755This must be set in the environment, make command line, or 1756.Pa /etc/src-env.conf , 1757not 1758.Pa /etc/src.conf . 1759.It Va WITHOUT_USB 1760Do not build USB-related programs and libraries. 1761.It Va WITHOUT_USB_GADGET_EXAMPLES 1762Do not build USB gadget kernel modules. 1763.It Va WITHOUT_UTMPX 1764Do not build user accounting tools such as 1765.Xr last 1 , 1766.Xr users 1 , 1767.Xr who 1 , 1768.Xr ac 8 , 1769.Xr lastlogin 8 1770and 1771.Xr utx 8 . 1772.It Va WITH_VERIEXEC 1773Enable building 1774.Xr veriexec 8 1775which loads the contents of verified manifests into the kernel 1776for use by 1777.Xr mac_veriexec 4 1778.Pp 1779Depends on 1780.Va WITH_BEARSSL . 1781.It Va WITHOUT_VI 1782Do not build and install vi, view, ex and related programs. 1783.It Va WITHOUT_VT 1784Do not build 1785.Xr vt 4 1786support files (fonts and keymaps). 1787.It Va WITHOUT_WARNS 1788Set this to not add warning flags to the compiler invocations. 1789Useful as a temporary workaround when code enters the tree 1790which triggers warnings in environments that differ from the 1791original developer. 1792.It Va WITHOUT_WERROR 1793Set this to not treat compiler warnings as errors. 1794Useful as a temporary workaround when working on fixing compiler warnings. 1795When set, warnings are still printed in the build log but do not fail the build. 1796.It Va WITHOUT_WIRELESS 1797Do not build programs used for 802.11 wireless networks; especially 1798.Xr wpa_supplicant 8 1799and 1800.Xr hostapd 8 . 1801When set, these options are also in effect: 1802.Pp 1803.Bl -inset -compact 1804.It Va WITHOUT_WIRELESS_SUPPORT 1805(unless 1806.Va WITH_WIRELESS_SUPPORT 1807is set explicitly) 1808.El 1809.It Va WITHOUT_WIRELESS_SUPPORT 1810Build libraries, programs, and kernel modules without 1811802.11 wireless support. 1812.It Va WITHOUT_WPA_SUPPLICANT_EAPOL 1813Build 1814.Xr wpa_supplicant 8 1815without support for the IEEE 802.1X protocol and without 1816support for EAP-PEAP, EAP-TLS, EAP-LEAP, and EAP-TTLS 1817protocols (usable only via 802.1X). 1818.It Va WITHOUT_ZFS 1819Do not build the ZFS file system kernel module, libraries such as 1820.Xr libbe 3 , 1821and user commands such as 1822.Xr zpool 8 1823or 1824.Xr zfs 8 . 1825Also disable ZFS support in utilities and libraries which implement 1826ZFS-specific functionality. 1827.It Va WITHOUT_ZONEINFO 1828Do not build the timezone database. 1829When set, it enforces these options: 1830.Pp 1831.Bl -item -compact 1832.It 1833.Va WITHOUT_ZONEINFO_LEAPSECONDS_SUPPORT 1834.El 1835.It Va WITH_ZONEINFO_LEAPSECONDS_SUPPORT 1836Build leapsecond information in to the timezone database. 1837.El 1838.Sh FILES 1839.Bl -tag -compact -width Pa 1840.It Pa /etc/src.conf 1841.It Pa /etc/src-env.conf 1842.It Pa /usr/share/mk/bsd.own.mk 1843.El 1844.Sh SEE ALSO 1845.Xr make 1 , 1846.Xr make.conf 5 , 1847.Xr build 7 , 1848.Xr ports 7 1849.Sh HISTORY 1850The 1851.Nm 1852file appeared in 1853.Fx 7.0 . 1854.Sh AUTHORS 1855This manual page was autogenerated by 1856.An tools/build/options/makeman . 1857