xref: /freebsd/share/man/man5/src.conf.5 (revision 643ac419fafba89f5adda0e0ea75b538727453fb)
1.\" DO NOT EDIT-- this file is @generated by tools/build/options/makeman.
2.\" $FreeBSD$
3.Dd July 6, 2022
4.Dt SRC.CONF 5
5.Os
6.Sh NAME
7.Nm src.conf
8.Nd "source build options"
9.Sh DESCRIPTION
10The
11.Nm
12file contains variables that control what components will be generated during
13the build process of the
14.Fx
15source tree; see
16.Xr build 7 .
17.Pp
18The
19.Nm
20file uses the standard makefile syntax.
21However,
22.Nm
23should not specify any dependencies to
24.Xr make 1 .
25Instead,
26.Nm
27is to set
28.Xr make 1
29variables that control the aspects of how the system builds.
30.Pp
31The default location of
32.Nm
33is
34.Pa /etc/src.conf ,
35though an alternative location can be specified in the
36.Xr make 1
37variable
38.Va SRCCONF .
39Overriding the location of
40.Nm
41may be necessary if the system-wide settings are not suitable
42for a particular build.
43For instance, setting
44.Va SRCCONF
45to
46.Pa /dev/null
47effectively resets all build controls to their defaults.
48.Pp
49The only purpose of
50.Nm
51is to control the compilation of the
52.Fx
53source code, which is usually located in
54.Pa /usr/src .
55As a rule, the system administrator creates
56.Nm
57when the values of certain control variables need to be changed
58from their defaults.
59.Pp
60In addition, control variables can be specified
61for a particular build via the
62.Fl D
63option of
64.Xr make 1
65or in its environment; see
66.Xr environ 7 .
67.Pp
68The environment of
69.Xr make 1
70for the build can be controlled via the
71.Va SRC_ENV_CONF
72variable, which defaults to
73.Pa /etc/src-env.conf .
74Some examples that may only be set in this file are
75.Va WITH_DIRDEPS_BUILD ,
76and
77.Va WITH_META_MODE ,
78and
79.Va MAKEOBJDIRPREFIX
80as they are environment-only variables.
81.Pp
82The values of variables are ignored regardless of their setting;
83even if they would be set to
84.Dq Li FALSE
85or
86.Dq Li NO .
87The presence of an option causes
88it to be honored by
89.Xr make 1 .
90.Pp
91This list provides a name and short description for variables
92that can be used for source builds.
93.Bl -tag -width indent
94.It Va WITHOUT_ACCT
95Do not build process accounting tools such as
96.Xr accton 8
97and
98.Xr sa 8 .
99.It Va WITHOUT_ACPI
100Do not build
101.Xr acpiconf 8 ,
102.Xr acpidump 8
103and related programs.
104.It Va WITHOUT_APM
105Do not build
106.Xr apm 8 ,
107.Xr apmd 8
108and related programs.
109.It Va WITH_ASAN
110Build the base system with Address Sanitizer (ASan) to detect
111memory corruption bugs such as buffer overflows or use-after-free.
112Requires that Clang be used as the base system compiler
113and that the runtime support library is available.
114When set, it enforces these options:
115.Pp
116.Bl -item -compact
117.It
118.Va WITH_LLVM_BINUTILS
119.It
120.Va WITH_LLVM_CXXFILT
121.El
122.It Va WITHOUT_ASSERT_DEBUG
123Compile programs and libraries without the
124.Xr assert 3
125checks.
126.It Va WITHOUT_AT
127Do not build
128.Xr at 1
129and related utilities.
130.It Va WITHOUT_ATM
131Do not build
132programs and libraries related to ATM networking.
133.It Va WITHOUT_AUDIT
134Do not build audit support into system programs.
135.It Va WITHOUT_AUTHPF
136Do not build
137.Xr authpf 8 .
138.It Va WITHOUT_AUTOFS
139Do not build
140.Xr autofs 5
141related programs, libraries, and kernel modules.
142.It Va WITHOUT_AUTO_OBJ
143Disable automatic creation of objdirs.
144This is enabled by default if the wanted OBJDIR is writable by the current user.
145.Pp
146This must be set in the environment, make command line, or
147.Pa /etc/src-env.conf ,
148not
149.Pa /etc/src.conf .
150.It Va WITH_BEARSSL
151Build the BearSSL library.
152.Pp
153BearSSL is a tiny SSL library suitable for embedded environments.
154For details see
155.Lk https://www.BearSSL.org/
156.Pp
157This library is currently only used to perform
158signature verification and related operations
159for Verified Exec and
160.Xr loader 8 .
161When set, these options are also in effect:
162.Pp
163.Bl -inset -compact
164.It Va WITH_LOADER_EFI_SECUREBOOT
165(unless
166.Va WITHOUT_LOADER_EFI_SECUREBOOT
167is set explicitly)
168.It Va WITH_LOADER_VERIEXEC
169(unless
170.Va WITHOUT_LOADER_VERIEXEC
171is set explicitly)
172.It Va WITH_LOADER_VERIEXEC_VECTX
173(unless
174.Va WITHOUT_LOADER_VERIEXEC_VECTX
175is set explicitly)
176.It Va WITH_VERIEXEC
177(unless
178.Va WITHOUT_VERIEXEC
179is set explicitly)
180.El
181.It Va WITHOUT_BHYVE
182Do not build or install
183.Xr bhyve 8 ,
184associated utilities, and examples.
185.Pp
186This option only affects amd64/amd64.
187.It Va WITH_BHYVE_SNAPSHOT
188Include support for save and restore (snapshots) in
189.Xr bhyve 8
190and
191.Xr bhyvectl 8 .
192.Pp
193This option only affects amd64/amd64.
194.It Va WITH_BIND_NOW
195Build all binaries with the
196.Dv DF_BIND_NOW
197flag set to indicate that the run-time loader should perform all relocation
198processing at process startup rather than on demand.
199The combination of the
200.Va BIND_NOW
201and
202.Va RELRO
203options provide "full" Relocation Read-Only (RELRO) support.
204With full RELRO the entire GOT is made read-only after performing relocation at
205startup, avoiding GOT overwrite attacks.
206.It Va WITHOUT_BLACKLIST
207Set this if you do not want to build
208.Xr blacklistd 8
209and
210.Xr blacklistctl 8 .
211When set, these options are also in effect:
212.Pp
213.Bl -inset -compact
214.It Va WITHOUT_BLACKLIST_SUPPORT
215(unless
216.Va WITH_BLACKLIST_SUPPORT
217is set explicitly)
218.El
219.It Va WITHOUT_BLACKLIST_SUPPORT
220Build some programs without
221.Xr libblacklist 3
222support, like
223.Xr fingerd 8 ,
224.Xr ftpd 8 ,
225and
226.Xr sshd 8 .
227.It Va WITHOUT_BLUETOOTH
228Do not build Bluetooth related kernel modules, programs and libraries.
229.It Va WITHOUT_BOOT
230Do not build the boot blocks and loader.
231.It Va WITHOUT_BOOTPARAMD
232Do not build or install
233.Xr bootparamd 8 .
234.It Va WITHOUT_BOOTPD
235Do not build or install
236.Xr bootpd 8 .
237.It Va WITHOUT_BSDINSTALL
238Do not build
239.Xr bsdinstall 8 ,
240.Xr sade 8 ,
241and related programs.
242.It Va WITHOUT_BSD_CPIO
243Do not build the BSD licensed version of cpio based on
244.Xr libarchive 3 .
245.It Va WITHOUT_BSNMP
246Do not build or install
247.Xr bsnmpd 1
248and related libraries and data files.
249.It Va WITHOUT_BZIP2
250Do not build contributed bzip2 software as a part of the base system.
251.Bf -symbolic
252The option has no effect yet.
253.Ef
254When set, these options are also in effect:
255.Pp
256.Bl -inset -compact
257.It Va WITHOUT_BZIP2_SUPPORT
258(unless
259.Va WITH_BZIP2_SUPPORT
260is set explicitly)
261.El
262.It Va WITHOUT_BZIP2_SUPPORT
263Build some programs without optional bzip2 support.
264.It Va WITHOUT_CALENDAR
265Do not build
266.Xr calendar 1 .
267.It Va WITHOUT_CAPSICUM
268Do not build Capsicum support into system programs.
269When set, it enforces these options:
270.Pp
271.Bl -item -compact
272.It
273.Va WITHOUT_CASPER
274.El
275.It Va WITHOUT_CAROOT
276Do not add the trusted certificates from the Mozilla NSS bundle to
277base.
278.It Va WITHOUT_CASPER
279Do not build Casper program and related libraries.
280.It Va WITH_CCACHE_BUILD
281Use
282.Xr ccache 1
283for the build.
284No configuration is required except to install the
285.Sy devel/ccache
286package.
287When using with
288.Xr distcc 1 ,
289set
290.Sy CCACHE_PREFIX=/usr/local/bin/distcc .
291The default cache directory of
292.Pa $HOME/.ccache
293will be used, which can be overridden by setting
294.Sy CCACHE_DIR .
295The
296.Sy CCACHE_COMPILERCHECK
297option defaults to
298.Sy content
299when using the in-tree bootstrap compiler,
300and
301.Sy mtime
302when using an external compiler.
303The
304.Sy CCACHE_CPP2
305option is used for Clang but not GCC.
306.Pp
307Sharing a cache between multiple work directories requires using a layout
308similar to
309.Pa /some/prefix/src
310.Pa /some/prefix/obj
311and an environment such as:
312.Bd -literal -offset indent
313CCACHE_BASEDIR='${SRCTOP:H}' MAKEOBJDIRPREFIX='${SRCTOP:H}/obj'
314.Ed
315.Pp
316See
317.Xr ccache 1
318for more configuration options.
319.It Va WITHOUT_CCD
320Do not build
321.Xr geom_ccd 4
322and related utilities.
323.It Va WITHOUT_CDDL
324Do not build code licensed under Sun's CDDL.
325When set, it enforces these options:
326.Pp
327.Bl -item -compact
328.It
329.Va WITHOUT_CTF
330.It
331.Va WITHOUT_DTRACE
332.It
333.Va WITHOUT_LOADER_ZFS
334.It
335.Va WITHOUT_ZFS
336.El
337.It Va WITHOUT_CLANG
338Do not build the Clang C/C++ compiler during the regular phase of the build.
339When set, it enforces these options:
340.Pp
341.Bl -item -compact
342.It
343.Va WITHOUT_CLANG_EXTRAS
344.It
345.Va WITHOUT_CLANG_FORMAT
346.It
347.Va WITHOUT_CLANG_FULL
348.It
349.Va WITHOUT_LLVM_COV
350.El
351.Pp
352When set, these options are also in effect:
353.Pp
354.Bl -inset -compact
355.It Va WITHOUT_LLVM_TARGET_AARCH64
356(unless
357.Va WITH_LLVM_TARGET_AARCH64
358is set explicitly)
359.It Va WITHOUT_LLVM_TARGET_ALL
360(unless
361.Va WITH_LLVM_TARGET_ALL
362is set explicitly)
363.It Va WITHOUT_LLVM_TARGET_ARM
364(unless
365.Va WITH_LLVM_TARGET_ARM
366is set explicitly)
367.It Va WITHOUT_LLVM_TARGET_POWERPC
368(unless
369.Va WITH_LLVM_TARGET_POWERPC
370is set explicitly)
371.It Va WITHOUT_LLVM_TARGET_RISCV
372(unless
373.Va WITH_LLVM_TARGET_RISCV
374is set explicitly)
375.El
376.It Va WITHOUT_CLANG_BOOTSTRAP
377Do not build the Clang C/C++ compiler during the bootstrap phase of
378the build.
379To be able to build the system, either gcc or clang bootstrap must be
380enabled unless an alternate compiler is provided via XCC.
381.It Va WITH_CLANG_EXTRAS
382Build additional clang and llvm tools, such as bugpoint and
383clang-format.
384.It Va WITH_CLANG_FORMAT
385Build clang-format.
386.It Va WITHOUT_CLANG_FULL
387Avoid building the ARCMigrate, Rewriter and StaticAnalyzer components of
388the Clang C/C++ compiler.
389.It Va WITHOUT_CLANG_IS_CC
390Do not install links to the Clang C/C++ compiler as
391.Pa /usr/bin/cc ,
392.Pa /usr/bin/c++
393and
394.Pa /usr/bin/cpp .
395.It Va WITHOUT_CLEAN
396Do not clean before building world and/or kernel.
397.It Va WITHOUT_CPP
398Do not build
399.Xr cpp 1 .
400.It Va WITHOUT_CROSS_COMPILER
401Do not build any cross compiler in the cross-tools stage of buildworld.
402When compiling a different version of
403.Fx
404than what is installed on the system, provide an alternate
405compiler with XCC to ensure success.
406When compiling with an identical version of
407.Fx
408to the host, this option may be safely used.
409This option may also be safe when the host version of
410.Fx
411is close to the sources being built, but all bets are off if there have
412been any changes to the toolchain between the versions.
413When set, it enforces these options:
414.Pp
415.Bl -item -compact
416.It
417.Va WITHOUT_CLANG_BOOTSTRAP
418.It
419.Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
420.It
421.Va WITHOUT_LLD_BOOTSTRAP
422.El
423.It Va WITHOUT_CRYPT
424Do not build any crypto code.
425When set, it enforces these options:
426.Pp
427.Bl -item -compact
428.It
429.Va WITHOUT_DMAGENT
430.It
431.Va WITHOUT_KERBEROS
432.It
433.Va WITHOUT_KERBEROS_SUPPORT
434.It
435.Va WITHOUT_LDNS
436.It
437.Va WITHOUT_LDNS_UTILS
438.It
439.Va WITHOUT_OPENSSH
440.It
441.Va WITHOUT_OPENSSL
442.It
443.Va WITHOUT_OPENSSL_KTLS
444.It
445.Va WITHOUT_PKGBOOTSTRAP
446.It
447.Va WITHOUT_UNBOUND
448.It
449.Va WITHOUT_ZFS
450.El
451.Pp
452When set, these options are also in effect:
453.Pp
454.Bl -inset -compact
455.It Va WITHOUT_GSSAPI
456(unless
457.Va WITH_GSSAPI
458is set explicitly)
459.El
460.It Va WITH_CTF
461Compile with CTF (Compact C Type Format) data.
462CTF data encapsulates a reduced form of debugging information
463similar to DWARF and the venerable stabs and is required for DTrace.
464.It Va WITHOUT_CUSE
465Do not build CUSE-related programs and libraries.
466.It Va WITHOUT_CXGBETOOL
467Do not build
468.Xr cxgbetool 8
469.Pp
470This is a default setting on
471arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
472.It Va WITH_CXGBETOOL
473Build
474.Xr cxgbetool 8
475.Pp
476This is a default setting on
477amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
478.It Va WITHOUT_CXX
479Do not build C++ headers and runtime libraries.
480It also prevents building binaries and libraries written in C++, including
481.Xr devd 8 .
482When set, it enforces these options:
483.Pp
484.Bl -item -compact
485.It
486.Va WITHOUT_CLANG
487.It
488.Va WITHOUT_CLANG_EXTRAS
489.It
490.Va WITHOUT_CLANG_FORMAT
491.It
492.Va WITHOUT_CLANG_FULL
493.It
494.Va WITHOUT_DTRACE_TESTS
495.It
496.Va WITHOUT_GOOGLETEST
497.It
498.Va WITHOUT_LLVM_COV
499.It
500.Va WITHOUT_OFED
501.It
502.Va WITHOUT_OFED_EXTRA
503.It
504.Va WITHOUT_OPENMP
505.It
506.Va WITHOUT_PMC
507.It
508.Va WITHOUT_TESTS
509.El
510.It Va WITHOUT_DEBUG_FILES
511Avoid building or installing standalone debug files for each
512executable binary and shared library.
513.It Va WITH_DETECT_TZ_CHANGES
514Make the time handling code detect changes to the timezone files.
515.It Va WITHOUT_DIALOG
516Do not build
517.Xr dialog 1 ,
518.Xr dialog 3 ,
519.Xr dpv 1 ,
520and
521.Xr dpv 3 .
522When set, it enforces these options:
523.Pp
524.Bl -item -compact
525.It
526.Va WITHOUT_BSDINSTALL
527.El
528.It Va WITHOUT_DICT
529Do not build the Webster dictionary files.
530.It Va WITH_DIRDEPS_BUILD
531This is an experimental build system.
532For details see
533https://www.crufty.net/sjg/docs/freebsd-meta-mode.htm.
534Build commands can be seen from the top-level with:
535.Dl make show-valid-targets
536The build is driven by dirdeps.mk using
537.Va DIRDEPS
538stored in
539Makefile.depend files found in each directory.
540.Pp
541The build can be started from anywhere, and behaves the same.
542The initial instance of
543.Xr make 1
544recursively reads
545.Va DIRDEPS
546from
547.Pa Makefile.depend ,
548computing a graph of tree dependencies from the current origin.
549Setting
550.Va NO_DIRDEPS
551skips checking dirdep dependencies and will only build in the current
552and child directories.
553.Va NO_DIRDEPS_BELOW
554skips building any dirdeps and only build the current directory.
555.Pp
556This also utilizes the
557.Va WITH_META_MODE
558logic for incremental builds.
559.Pp
560The build hides commands executed unless
561.Va NO_SILENT
562is defined.
563.Pp
564Note that there is currently no mass install feature for this.
565.Pp
566When set, it enforces these options:
567.Pp
568.Bl -item -compact
569.It
570.Va WITH_INSTALL_AS_USER
571.El
572.Pp
573When set, these options are also in effect:
574.Pp
575.Bl -inset -compact
576.It Va WITH_META_MODE
577(unless
578.Va WITHOUT_META_MODE
579is set explicitly)
580.It Va WITH_STAGING
581(unless
582.Va WITHOUT_STAGING
583is set explicitly)
584.It Va WITH_STAGING_MAN
585(unless
586.Va WITHOUT_STAGING_MAN
587is set explicitly)
588.It Va WITH_STAGING_PROG
589(unless
590.Va WITHOUT_STAGING_PROG
591is set explicitly)
592.It Va WITH_SYSROOT
593(unless
594.Va WITHOUT_SYSROOT
595is set explicitly)
596.El
597.Pp
598This must be set in the environment, make command line, or
599.Pa /etc/src-env.conf ,
600not
601.Pa /etc/src.conf .
602.It Va WITH_DIRDEPS_CACHE
603Cache result of dirdeps.mk which can save significant time
604for subsequent builds.
605Depends on
606.Va WITH_DIRDEPS_BUILD .
607.Pp
608This must be set in the environment, make command line, or
609.Pa /etc/src-env.conf ,
610not
611.Pa /etc/src.conf .
612.It Va WITHOUT_DMAGENT
613Do not build dma Mail Transport Agent.
614.It Va WITHOUT_DOCCOMPRESS
615Do not install compressed system documentation.
616Only the uncompressed version will be installed.
617.It Va WITHOUT_DTRACE
618Do not build DTrace framework kernel modules, libraries, and user commands.
619When set, it enforces these options:
620.Pp
621.Bl -item -compact
622.It
623.Va WITHOUT_CTF
624.El
625.It Va WITH_DTRACE_TESTS
626Build and install the DTrace test suite in
627.Pa /usr/tests/cddl/usr.sbin/dtrace .
628This test suite is considered experimental on architectures other than
629amd64/amd64 and running it may cause system instability.
630.It Va WITHOUT_DYNAMICROOT
631Set this if you do not want to link
632.Pa /bin
633and
634.Pa /sbin
635dynamically.
636.It Va WITHOUT_EE
637Do not build and install
638.Xr edit 1 ,
639.Xr ee 1 ,
640and related programs.
641.It Va WITHOUT_EFI
642Set not to build
643.Xr efivar 3
644and
645.Xr efivar 8 .
646.Pp
647This is a default setting on
648powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
649.It Va WITH_EFI
650Build
651.Xr efivar 3
652and
653.Xr efivar 8 .
654.Pp
655This is a default setting on
656amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
657.It Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
658Do not build ELF Tool Chain tools
659(addr2line, nm, size, strings and strip)
660as part of the bootstrap process.
661.Bf -symbolic
662An alternate bootstrap tool chain must be provided.
663.Ef
664.It Va WITHOUT_EXAMPLES
665Avoid installing examples to
666.Pa /usr/share/examples/ .
667.It Va WITH_EXPERIMENTAL
668Include experimental features in the build.
669.It Va WITH_EXTRA_TCP_STACKS
670Build extra TCP stack modules.
671.It Va WITH_FDT
672Build Flattened Device Tree support as part of the base system.
673This includes the device tree compiler (dtc) and libfdt support library.
674.It Va WITHOUT_FILE
675Do not build
676.Xr file 1
677and related programs.
678.It Va WITHOUT_FINGER
679Do not build or install
680.Xr finger 1
681and
682.Xr fingerd 8 .
683.It Va WITHOUT_FLOPPY
684Do not build or install programs
685for operating floppy disk driver.
686.It Va WITHOUT_FORMAT_EXTENSIONS
687Do not enable
688.Fl fformat-extensions
689when compiling the kernel.
690Also disables all format checking.
691.It Va WITHOUT_FORTH
692Build bootloaders without Forth support.
693.It Va WITHOUT_FP_LIBC
694Build
695.Nm libc
696without floating-point support.
697.It Va WITHOUT_FREEBSD_UPDATE
698Do not build
699.Xr freebsd-update 8 .
700.It Va WITHOUT_FTP
701Do not build or install
702.Xr ftp 1
703and
704.Xr ftpd 8 .
705.It Va WITHOUT_GAMES
706Do not build games.
707.It Va WITHOUT_GH_BC
708Install the traditional FreeBSD
709.Xr bc 1
710and
711.Xr dc 1
712programs instead of the enhanced versions.
713.It Va WITHOUT_GNU_DIFF
714Do not build GNU
715.Xr diff3 1 .
716.It Va WITHOUT_GOOGLETEST
717Neither build nor install
718.Lb libgmock ,
719.Lb libgtest ,
720and dependent tests.
721.It Va WITHOUT_GPIO
722Do not build
723.Xr gpioctl 8
724as part of the base system.
725.It Va WITHOUT_GSSAPI
726Do not build libgssapi.
727.It Va WITHOUT_HAST
728Do not build
729.Xr hastd 8
730and related utilities.
731.It Va WITH_HESIOD
732Build Hesiod support.
733.It Va WITHOUT_HTML
734Do not build HTML docs.
735.It Va WITHOUT_HYPERV
736Do not build or install HyperV utilities.
737.Pp
738This is a default setting on
739arm/armv6, arm/armv7, arm64/aarch64, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
740.It Va WITH_HYPERV
741Build or install HyperV utilities.
742.Pp
743This is a default setting on
744amd64/amd64 and i386/i386.
745.It Va WITHOUT_ICONV
746Do not build iconv as part of libc.
747.It Va WITHOUT_INCLUDES
748Do not install header files.
749This option used to be spelled
750.Va NO_INCS .
751.Bf -symbolic
752The option does not work for build targets.
753.Ef
754.It Va WITHOUT_INET
755Do not build programs and libraries related to IPv4 networking.
756When set, it enforces these options:
757.Pp
758.Bl -item -compact
759.It
760.Va WITHOUT_INET_SUPPORT
761.El
762.It Va WITHOUT_INET6
763Do not build
764programs and libraries related to IPv6 networking.
765When set, it enforces these options:
766.Pp
767.Bl -item -compact
768.It
769.Va WITHOUT_INET6_SUPPORT
770.El
771.It Va WITHOUT_INET6_SUPPORT
772Build libraries, programs, and kernel modules without IPv6 support.
773.It Va WITHOUT_INETD
774Do not build
775.Xr inetd 8 .
776.It Va WITHOUT_INET_SUPPORT
777Build libraries, programs, and kernel modules without IPv4 support.
778.It Va WITH_INIT_ALL_PATTERN
779Build the base system or kernel with stack variables initialized to
780.Pq compiler defined
781debugging patterns on function entry.
782This option requires the clang compiler.
783.It Va WITH_INIT_ALL_ZERO
784Build the base system or kernel with stack variables initialized
785to zero on function entry.
786This option requires that the clang compiler be used.
787.It Va WITHOUT_INSTALLLIB
788Set this to not install optional libraries.
789For example, when creating a
790.Xr nanobsd 8
791image.
792.Bf -symbolic
793The option does not work for build targets.
794.Ef
795.It Va WITH_INSTALL_AS_USER
796Make install targets succeed for non-root users by installing
797files with owner and group attributes set to that of the user running
798the
799.Xr make 1
800command.
801The user still must set the
802.Va DESTDIR
803variable to point to a directory where the user has write permissions.
804.It Va WITHOUT_IPFILTER
805Do not build IP Filter package.
806.It Va WITHOUT_IPFW
807Do not build IPFW tools.
808.It Va WITHOUT_IPSEC_SUPPORT
809Do not build the kernel with
810.Xr ipsec 4
811support.
812This option is needed for
813.Xr ipsec 4
814and
815.Xr tcpmd5 4 .
816.It Va WITHOUT_ISCSI
817Do not build
818.Xr iscsid 8
819and related utilities.
820.It Va WITHOUT_JAIL
821Do not build tools for the support of jails; e.g.,
822.Xr jail 8 .
823.It Va WITHOUT_KDUMP
824Do not build
825.Xr kdump 1
826and
827.Xr truss 1 .
828.It Va WITHOUT_KERBEROS
829Set this to not build Kerberos 5 (KTH Heimdal).
830When set, these options are also in effect:
831.Pp
832.Bl -inset -compact
833.It Va WITHOUT_GSSAPI
834(unless
835.Va WITH_GSSAPI
836is set explicitly)
837.It Va WITHOUT_KERBEROS_SUPPORT
838(unless
839.Va WITH_KERBEROS_SUPPORT
840is set explicitly)
841.El
842.It Va WITHOUT_KERBEROS_SUPPORT
843Build some programs without Kerberos support, like
844.Xr ssh 1 ,
845.Xr telnet 1 ,
846.Xr sshd 8 ,
847and
848.Xr telnetd 8 .
849.It Va WITH_KERNEL_RETPOLINE
850Enable the "retpoline" mitigation for CVE-2017-5715 in the kernel
851build.
852.It Va WITHOUT_KERNEL_SYMBOLS
853Do not install standalone kernel debug symbol files.
854This option has no effect at build time.
855.It Va WITHOUT_KVM
856Do not build the
857.Nm libkvm
858library as a part of the base system.
859.Bf -symbolic
860The option has no effect yet.
861.Ef
862When set, these options are also in effect:
863.Pp
864.Bl -inset -compact
865.It Va WITHOUT_KVM_SUPPORT
866(unless
867.Va WITH_KVM_SUPPORT
868is set explicitly)
869.El
870.It Va WITHOUT_KVM_SUPPORT
871Build some programs without optional
872.Nm libkvm
873support.
874.It Va WITHOUT_LDNS
875Setting this variable will prevent the LDNS library from being built.
876When set, it enforces these options:
877.Pp
878.Bl -item -compact
879.It
880.Va WITHOUT_LDNS_UTILS
881.It
882.Va WITHOUT_UNBOUND
883.El
884.It Va WITHOUT_LDNS_UTILS
885Setting this variable will prevent building the LDNS utilities
886.Xr drill 1
887and
888.Xr host 1 .
889.It Va WITHOUT_LEGACY_CONSOLE
890Do not build programs that support a legacy PC console; e.g.,
891.Xr kbdcontrol 1
892and
893.Xr vidcontrol 1 .
894.It Va WITHOUT_LIB32
895On 64-bit platforms, do not build 32-bit library set and a
896.Nm ld-elf32.so.1
897runtime linker.
898.Pp
899This is a default setting on
900arm/armv6, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
901.It Va WITHOUT_LLD
902Do not build LLVM's lld linker.
903.It Va WITHOUT_LLDB
904Do not build the LLDB debugger.
905.Pp
906This is a default setting on
907arm/armv6, arm/armv7, riscv/riscv64 and riscv/riscv64sf.
908.It Va WITH_LLDB
909Build the LLDB debugger.
910.Pp
911This is a default setting on
912amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
913.It Va WITHOUT_LLD_BOOTSTRAP
914Do not build the LLD linker during the bootstrap phase of
915the build.
916To be able to build the system an alternate linker must be provided via XLD.
917.It Va WITHOUT_LLD_IS_LD
918Do not install a
919.Pa /usr/bin/ld symlink
920to
921.Pa ld.lld .
922The system will not have a usable tool chain unless a linker is provided
923some other way.
924.It Va WITHOUT_LLVM_ASSERTIONS
925Disable debugging assertions in LLVM.
926.It Va WITH_LLVM_BINUTILS
927Install LLVM's binutils (ar, addr2line, nm, etc.) instead of ELF Tool Chain's.
928.It Va WITHOUT_LLVM_COV
929Do not build the
930.Xr llvm-cov 1
931tool.
932.It Va WITHOUT_LLVM_CXXFILT
933Install ELF Tool Chain's cxxfilt as c++filt, instead of LLVM's llvm-cxxfilt.
934.It Va WITHOUT_LLVM_TARGET_AARCH64
935Do not build LLVM target support for AArch64.
936The
937.Va LLVM_TARGET_ALL
938option should be used rather than this in most cases.
939.It Va WITHOUT_LLVM_TARGET_ALL
940Only build the required LLVM target support.
941This option is preferred to specific target support options.
942When set, these options are also in effect:
943.Pp
944.Bl -inset -compact
945.It Va WITHOUT_LLVM_TARGET_AARCH64
946(unless
947.Va WITH_LLVM_TARGET_AARCH64
948is set explicitly)
949.It Va WITHOUT_LLVM_TARGET_ARM
950(unless
951.Va WITH_LLVM_TARGET_ARM
952is set explicitly)
953.It Va WITHOUT_LLVM_TARGET_POWERPC
954(unless
955.Va WITH_LLVM_TARGET_POWERPC
956is set explicitly)
957.It Va WITHOUT_LLVM_TARGET_RISCV
958(unless
959.Va WITH_LLVM_TARGET_RISCV
960is set explicitly)
961.El
962.It Va WITHOUT_LLVM_TARGET_ARM
963Do not build LLVM target support for ARM.
964The
965.Va LLVM_TARGET_ALL
966option should be used rather than this in most cases.
967.It Va WITH_LLVM_TARGET_BPF
968Build LLVM target support for BPF.
969The
970.Va LLVM_TARGET_ALL
971option should be used rather than this in most cases.
972.It Va WITH_LLVM_TARGET_MIPS
973Build LLVM target support for MIPS.
974The
975.Va LLVM_TARGET_ALL
976option should be used rather than this in most cases.
977.It Va WITHOUT_LLVM_TARGET_POWERPC
978Do not build LLVM target support for PowerPC.
979The
980.Va LLVM_TARGET_ALL
981option should be used rather than this in most cases.
982.It Va WITHOUT_LLVM_TARGET_RISCV
983Do not build LLVM target support for RISC-V.
984The
985.Va LLVM_TARGET_ALL
986option should be used rather than this in most cases.
987.It Va WITHOUT_LLVM_TARGET_X86
988Do not build LLVM target support for X86.
989The
990.Va LLVM_TARGET_ALL
991option should be used rather than this in most cases.
992.It Va WITH_LOADER_EFI_SECUREBOOT
993Enable building
994.Xr loader 8
995with support for verification based on certificates obtained from UEFI.
996.It Va WITH_LOADER_FIREWIRE
997Enable firewire support in /boot/loader on x86.
998This option is a nop on all other platforms.
999.It Va WITHOUT_LOADER_GELI
1000Disable inclusion of GELI crypto support in the boot chain binaries.
1001.Pp
1002This is a default setting on
1003powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
1004.It Va WITH_LOADER_GELI
1005Build GELI bootloader support.
1006.Pp
1007This is a default setting on
1008amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
1009.It Va WITHOUT_LOADER_KBOOT
1010Do not build kboot, a linuxboot environment loader
1011.Pp
1012This is a default setting on
1013arm/armv6, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1014.It Va WITH_LOADER_KBOOT
1015Build kboot, a linuxboot environment loader
1016.Pp
1017This is a default setting on
1018amd64/amd64 and powerpc/powerpc64.
1019.It Va WITHOUT_LOADER_LUA
1020Do not build LUA bindings for the boot loader.
1021.Pp
1022This is a default setting on
1023powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
1024.It Va WITH_LOADER_LUA
1025Build LUA bindings for the boot loader.
1026.Pp
1027This is a default setting on
1028amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
1029.It Va WITHOUT_LOADER_OFW
1030Disable building of openfirmware bootloader components.
1031.Pp
1032This is a default setting on
1033amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
1034.It Va WITH_LOADER_OFW
1035Build openfirmware bootloader components.
1036.Pp
1037This is a default setting on
1038powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
1039.It Va WITHOUT_LOADER_UBOOT
1040Disable building of ubldr.
1041.Pp
1042This is a default setting on
1043amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1044.It Va WITH_LOADER_UBOOT
1045Build ubldr.
1046.Pp
1047This is a default setting on
1048arm/armv6, arm/armv7, powerpc/powerpc and powerpc/powerpc64.
1049.It Va WITH_LOADER_VERBOSE
1050Build with extra verbose debugging in the loader.
1051May explode already nearly too large loader over the limit.
1052Use with care.
1053.It Va WITH_LOADER_VERIEXEC
1054Enable building
1055.Xr loader 8
1056with support for verification similar to Verified Exec.
1057.Pp
1058Depends on
1059.Va WITH_BEARSSL .
1060When set, these options are also in effect:
1061.Pp
1062.Bl -inset -compact
1063.It Va WITH_LOADER_EFI_SECUREBOOT
1064(unless
1065.Va WITHOUT_LOADER_EFI_SECUREBOOT
1066is set explicitly)
1067.It Va WITH_LOADER_VERIEXEC_VECTX
1068(unless
1069.Va WITHOUT_LOADER_VERIEXEC_VECTX
1070is set explicitly)
1071.El
1072.It Va WITH_LOADER_VERIEXEC_PASS_MANIFEST
1073Enable building
1074.Xr loader 8
1075with support to pass a verified manifest to the kernel.
1076The kernel has to be built with a module to parse the manifest.
1077.Pp
1078Depends on
1079.Va WITH_LOADER_VERIEXEC .
1080.It Va WITHOUT_LOADER_ZFS
1081Do not build ZFS file system boot loader support.
1082.It Va WITHOUT_LOCALES
1083Do not build localization files; see
1084.Xr locale 1 .
1085.It Va WITHOUT_LOCATE
1086Do not build
1087.Xr locate 1
1088and related programs.
1089.It Va WITHOUT_LPR
1090Do not build
1091.Xr lpr 1
1092and related programs.
1093.It Va WITHOUT_LS_COLORS
1094Build
1095.Xr ls 1
1096without support for colors to distinguish file types.
1097.It Va WITHOUT_MAIL
1098Do not build any mail support (MUA or MTA).
1099When set, it enforces these options:
1100.Pp
1101.Bl -item -compact
1102.It
1103.Va WITHOUT_DMAGENT
1104.It
1105.Va WITHOUT_MAILWRAPPER
1106.It
1107.Va WITHOUT_SENDMAIL
1108.El
1109.It Va WITHOUT_MAILWRAPPER
1110Do not build the
1111.Xr mailwrapper 8
1112MTA selector.
1113.It Va WITHOUT_MAKE
1114Do not install
1115.Xr make 1
1116and related support files.
1117.It Va WITHOUT_MAKE_CHECK_USE_SANDBOX
1118Do not execute
1119.Dq Li "make check"
1120in limited sandbox mode.
1121This option should be paired with
1122.Va WITH_INSTALL_AS_USER
1123if executed as an unprivileged user.
1124See
1125.Xr tests 7
1126for more details.
1127.It Va WITH_MALLOC_PRODUCTION
1128Disable assertions and statistics gathering in
1129.Xr malloc 3 .
1130It also defaults the A and J runtime options to off.
1131.It Va WITHOUT_MAN
1132Do not build manual pages.
1133When set, these options are also in effect:
1134.Pp
1135.Bl -inset -compact
1136.It Va WITHOUT_MAN_UTILS
1137(unless
1138.Va WITH_MAN_UTILS
1139is set explicitly)
1140.El
1141.It Va WITHOUT_MANCOMPRESS
1142Do not install compressed man pages.
1143Only the uncompressed versions will be installed.
1144.It Va WITH_MANSPLITPKG
1145Split man pages into their own packages during make package.
1146.It Va WITHOUT_MAN_UTILS
1147Do not build utilities for manual pages,
1148.Xr apropos 1 ,
1149.Xr makewhatis 1 ,
1150.Xr man 1 ,
1151.Xr whatis 1 ,
1152.Xr manctl 8 ,
1153and related support files.
1154.It Va WITH_META_MODE
1155Create
1156.Xr make 1
1157meta files when building, which can provide a reliable incremental build when
1158using
1159.Xr filemon 4 .
1160The meta file is created in OBJDIR as
1161.Pa target.meta .
1162These meta files track the command that was executed, its output, and the
1163current directory.
1164The
1165.Xr filemon 4
1166module is required unless
1167.Va NO_FILEMON
1168is defined.
1169When the module is loaded, any files used by the commands executed are
1170tracked as dependencies for the target in its meta file.
1171The target is considered out-of-date and rebuilt if any of these
1172conditions are true compared to the last build:
1173.Bl -bullet -compact
1174.It
1175The command to execute changes.
1176.It
1177The current working directory changes.
1178.It
1179The target's meta file is missing.
1180.It
1181The target's meta file is missing filemon data when filemon is loaded
1182and a previous run did not have it loaded.
1183.It
1184[requires
1185.Xr filemon 4 ]
1186Files read, executed or linked to are newer than the target.
1187.It
1188[requires
1189.Xr filemon 4 ]
1190Files read, written, executed or linked are missing.
1191.El
1192The meta files can also be useful for debugging.
1193.Pp
1194The build hides commands that are executed unless
1195.Va NO_SILENT
1196is defined.
1197Errors cause
1198.Xr make 1
1199to show some of its environment for further debugging.
1200.Pp
1201The build operates as it normally would otherwise.
1202This option originally invoked a different build system but that was renamed
1203to
1204.Va WITH_DIRDEPS_BUILD .
1205.Pp
1206This must be set in the environment, make command line, or
1207.Pa /etc/src-env.conf ,
1208not
1209.Pa /etc/src.conf .
1210.It Va WITHOUT_MLX5TOOL
1211Do not build
1212.Xr mlx5tool 8
1213.Pp
1214This is a default setting on
1215arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
1216.It Va WITH_MLX5TOOL
1217Build
1218.Xr mlx5tool 8
1219.Pp
1220This is a default setting on
1221amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
1222.It Va WITHOUT_NETCAT
1223Do not build
1224.Xr nc 1
1225utility.
1226.It Va WITHOUT_NETGRAPH
1227Do not build applications to support
1228.Xr netgraph 4 .
1229When set, it enforces these options:
1230.Pp
1231.Bl -item -compact
1232.It
1233.Va WITHOUT_ATM
1234.It
1235.Va WITHOUT_BLUETOOTH
1236.El
1237.Pp
1238When set, these options are also in effect:
1239.Pp
1240.Bl -inset -compact
1241.It Va WITHOUT_NETGRAPH_SUPPORT
1242(unless
1243.Va WITH_NETGRAPH_SUPPORT
1244is set explicitly)
1245.El
1246.It Va WITHOUT_NETGRAPH_SUPPORT
1247Build libraries, programs, and kernel modules without netgraph support.
1248.It Va WITHOUT_NIS
1249Do not build
1250.Xr NIS 8
1251support and related programs.
1252If set, you might need to adopt your
1253.Xr nsswitch.conf 5
1254and remove
1255.Sq nis
1256entries.
1257.It Va WITHOUT_NLS
1258Do not build NLS catalogs.
1259When set, it enforces these options:
1260.Pp
1261.Bl -item -compact
1262.It
1263.Va WITHOUT_NLS_CATALOGS
1264.El
1265.It Va WITHOUT_NLS_CATALOGS
1266Do not build NLS catalog support for
1267.Xr csh 1 .
1268.It Va WITHOUT_NS_CACHING
1269Disable name caching in the
1270.Pa nsswitch
1271subsystem.
1272The generic caching daemon,
1273.Xr nscd 8 ,
1274will not be built either if this option is set.
1275.It Va WITHOUT_NTP
1276Do not build
1277.Xr ntpd 8
1278and related programs.
1279.It Va WITHOUT_NVME
1280Do not build nvme related tools and kernel modules.
1281.Pp
1282This is a default setting on
1283arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
1284.It Va WITH_NVME
1285Build nvme related tools and kernel modules.
1286.Pp
1287This is a default setting on
1288amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
1289.It Va WITHOUT_OFED
1290Disable the build of the
1291.Dq "OpenFabrics Enterprise Distribution"
1292Infiniband software stack, including kernel modules and userspace libraries.
1293When set, it enforces these options:
1294.Pp
1295.Bl -item -compact
1296.It
1297.Va WITHOUT_OFED_EXTRA
1298.El
1299.It Va WITH_OFED_EXTRA
1300Build the non-essential components of the
1301.Dq "OpenFabrics Enterprise Distribution"
1302Infiniband software stack, mostly examples.
1303.It Va WITH_OPENLDAP
1304Enable building LDAP support for kerberos using an openldap client from ports.
1305.It Va WITHOUT_OPENMP
1306Do not build LLVM's OpenMP runtime.
1307.Pp
1308This is a default setting on
1309arm/armv6, arm/armv7 and powerpc/powerpc.
1310.It Va WITH_OPENMP
1311Build LLVM's OpenMP runtime.
1312.Pp
1313This is a default setting on
1314amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1315.It Va WITHOUT_OPENSSH
1316Do not build OpenSSH.
1317.It Va WITHOUT_OPENSSL
1318Do not build OpenSSL.
1319When set, it enforces these options:
1320.Pp
1321.Bl -item -compact
1322.It
1323.Va WITHOUT_DMAGENT
1324.It
1325.Va WITHOUT_KERBEROS
1326.It
1327.Va WITHOUT_KERBEROS_SUPPORT
1328.It
1329.Va WITHOUT_LDNS
1330.It
1331.Va WITHOUT_LDNS_UTILS
1332.It
1333.Va WITHOUT_OPENSSH
1334.It
1335.Va WITHOUT_OPENSSL_KTLS
1336.It
1337.Va WITHOUT_PKGBOOTSTRAP
1338.It
1339.Va WITHOUT_UNBOUND
1340.It
1341.Va WITHOUT_ZFS
1342.El
1343.Pp
1344When set, these options are also in effect:
1345.Pp
1346.Bl -inset -compact
1347.It Va WITHOUT_GSSAPI
1348(unless
1349.Va WITH_GSSAPI
1350is set explicitly)
1351.El
1352.It Va WITHOUT_OPENSSL_KTLS
1353Do not include kernel TLS support in OpenSSL.
1354.Pp
1355This is a default setting on
1356arm/armv6, arm/armv7, i386/i386, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1357.It Va WITH_OPENSSL_KTLS
1358Include kernel TLS support in OpenSSL.
1359.Pp
1360This is a default setting on
1361amd64/amd64 and arm64/aarch64.
1362.It Va WITHOUT_PAM
1363Do not build PAM library and modules.
1364.Bf -symbolic
1365This option is deprecated and does nothing.
1366.Ef
1367When set, these options are also in effect:
1368.Pp
1369.Bl -inset -compact
1370.It Va WITHOUT_PAM_SUPPORT
1371(unless
1372.Va WITH_PAM_SUPPORT
1373is set explicitly)
1374.El
1375.It Va WITHOUT_PAM_SUPPORT
1376Build some programs without PAM support, particularly
1377.Xr ftpd 8
1378and
1379.Xr ppp 8 .
1380.It Va WITHOUT_PF
1381Do not build PF firewall package.
1382When set, it enforces these options:
1383.Pp
1384.Bl -item -compact
1385.It
1386.Va WITHOUT_AUTHPF
1387.El
1388.It Va WITHOUT_PIE
1389Do not build dynamically linked binaries as
1390Position-Independent Executable (PIE).
1391.It Va WITHOUT_PKGBOOTSTRAP
1392Do not build
1393.Xr pkg 7
1394bootstrap tool.
1395.It Va WITHOUT_PMC
1396Do not build
1397.Xr pmccontrol 8
1398and related programs.
1399.It Va WITHOUT_PORTSNAP
1400Do not build or install
1401.Xr portsnap 8
1402and related files.
1403.It Va WITHOUT_PPP
1404Do not build
1405.Xr ppp 8
1406and related programs.
1407.It Va WITH_PROFILE
1408Build profiled libraries for use with
1409.Xr gprof 8 .
1410This option is deprecated and may not be present in a future version of
1411.Fx .
1412.It Va WITHOUT_QUOTAS
1413Do not build
1414.Xr quota 1
1415and related programs.
1416.It Va WITHOUT_RADIUS_SUPPORT
1417Do not build radius support into various applications, like
1418.Xr pam_radius 8
1419and
1420.Xr ppp 8 .
1421.It Va WITH_RATELIMIT
1422Build the system with rate limit support.
1423.Pp
1424This makes
1425.Dv SO_MAX_PACING_RATE
1426effective in
1427.Xr getsockopt 2 ,
1428and
1429.Ar txrlimit
1430support in
1431.Xr ifconfig 8 ,
1432by proxy.
1433.It Va WITHOUT_RBOOTD
1434Do not build or install
1435.Xr rbootd 8 .
1436.It Va WITHOUT_RELRO
1437Do not apply the Relocation Read-Only (RELRO) vulnerability mitigation.
1438See also the
1439.Va BIND_NOW
1440option.
1441.It Va WITH_REPRODUCIBLE_BUILD
1442Exclude build metadata (such as the build time, user, or host)
1443from the kernel, boot loaders, and uname output, so that builds produce
1444bit-for-bit identical output.
1445.It Va WITHOUT_RESCUE
1446Do not build
1447.Xr rescue 8 .
1448.It Va WITH_RETPOLINE
1449Build the base system with the retpoline speculative execution
1450vulnerability mitigation for CVE-2017-5715.
1451.It Va WITHOUT_ROUTED
1452Do not build
1453.Xr routed 8
1454utility.
1455.It Va WITH_RPCBIND_WARMSTART_SUPPORT
1456Build
1457.Xr rpcbind 8
1458with warmstart support.
1459.It Va WITHOUT_SENDMAIL
1460Do not build
1461.Xr sendmail 8
1462and related programs.
1463.It Va WITHOUT_SERVICESDB
1464Do not install
1465.Pa /var/db/services.db .
1466.It Va WITHOUT_SETUID_LOGIN
1467Set this to disable the installation of
1468.Xr login 1
1469as a set-user-ID root program.
1470.It Va WITHOUT_SHAREDOCS
1471Do not build the
1472.Bx 4.4
1473legacy docs.
1474.It Va WITHOUT_SHARED_TOOLCHAIN
1475Build the toolchain binaries as statically linked executables.
1476The set includes
1477.Xr cc 1 ,
1478.Xr make 1
1479and necessary utilities like assembler, linker and library archive manager.
1480.It Va WITH_SORT_THREADS
1481Enable threads in
1482.Xr sort 1 .
1483.It Va WITHOUT_SOURCELESS
1484Do not build kernel modules that include sourceless code (either microcode or native code for host CPU).
1485When set, it enforces these options:
1486.Pp
1487.Bl -item -compact
1488.It
1489.Va WITHOUT_SOURCELESS_HOST
1490.It
1491.Va WITHOUT_SOURCELESS_UCODE
1492.El
1493.It Va WITHOUT_SOURCELESS_HOST
1494Do not build kernel modules that include sourceless native code for host CPU.
1495.It Va WITHOUT_SOURCELESS_UCODE
1496Do not build kernel modules that include sourceless microcode.
1497.It Va WITHOUT_SPLIT_KERNEL_DEBUG
1498Do not build standalone kernel debug files.
1499Debug data (if enabled by the kernel configuration file)
1500will be included in the kernel and modules.
1501When set, it enforces these options:
1502.Pp
1503.Bl -item -compact
1504.It
1505.Va WITHOUT_KERNEL_SYMBOLS
1506.El
1507.It Va WITHOUT_SSP
1508Do not build world with propolice stack smashing protection.
1509.It Va WITH_STAGING
1510Enable staging of files to a stage tree.
1511This can be best thought of as auto-install to
1512.Va DESTDIR
1513with some extra meta data to ensure dependencies can be tracked.
1514Depends on
1515.Va WITH_DIRDEPS_BUILD .
1516When set, these options are also in effect:
1517.Pp
1518.Bl -inset -compact
1519.It Va WITH_STAGING_MAN
1520(unless
1521.Va WITHOUT_STAGING_MAN
1522is set explicitly)
1523.It Va WITH_STAGING_PROG
1524(unless
1525.Va WITHOUT_STAGING_PROG
1526is set explicitly)
1527.El
1528.Pp
1529This must be set in the environment, make command line, or
1530.Pa /etc/src-env.conf ,
1531not
1532.Pa /etc/src.conf .
1533.It Va WITH_STAGING_MAN
1534Enable staging of man pages to stage tree.
1535.It Va WITH_STAGING_PROG
1536Enable staging of PROGs to stage tree.
1537.It Va WITH_STALE_STAGED
1538Check staged files are not stale.
1539.It Va WITHOUT_STATS
1540Neither build nor install
1541.Lb libstats
1542and dependent binaries.
1543.It Va WITHOUT_SYSCONS
1544Do not build
1545.Xr syscons 4
1546support files such as keyboard maps, fonts, and screen output maps.
1547.It Va WITH_SYSROOT
1548Enable use of sysroot during build.
1549Depends on
1550.Va WITH_DIRDEPS_BUILD .
1551.Pp
1552This must be set in the environment, make command line, or
1553.Pa /etc/src-env.conf ,
1554not
1555.Pa /etc/src.conf .
1556.It Va WITHOUT_SYSTEM_COMPILER
1557Do not opportunistically skip building a cross-compiler during the
1558bootstrap phase of the build.
1559Normally, if the currently installed compiler matches the planned bootstrap
1560compiler type and revision, then it will not be built.
1561This does not prevent a compiler from being built for installation though,
1562only for building one for the build itself.
1563The
1564.Va WITHOUT_CLANG
1565option controls that.
1566.It Va WITHOUT_SYSTEM_LINKER
1567Do not opportunistically skip building a cross-linker during the
1568bootstrap phase of the build.
1569Normally, if the currently installed linker matches the planned bootstrap
1570linker type and revision, then it will not be built.
1571This does not prevent a linker from being built for installation though,
1572only for building one for the build itself.
1573The
1574.Va WITHOUT_LLD
1575option controls that.
1576.Pp
1577This option is only relevant when
1578.Va WITH_LLD_BOOTSTRAP
1579is set.
1580.It Va WITHOUT_TALK
1581Do not build or install
1582.Xr talk 1
1583and
1584.Xr talkd 8 .
1585.It Va WITHOUT_TCP_WRAPPERS
1586Do not build or install
1587.Xr tcpd 8 ,
1588and related utilities.
1589.It Va WITHOUT_TCSH
1590Do not build and install
1591.Pa /bin/csh
1592(which is
1593.Xr tcsh 1 ) .
1594.It Va WITHOUT_TELNET
1595Do not build
1596.Xr telnet 1
1597and related programs.
1598.It Va WITHOUT_TESTS
1599Do not build nor install the
1600.Fx
1601Test Suite in
1602.Pa /usr/tests/ .
1603See
1604.Xr tests 7
1605for more details.
1606This also disables the build of all test-related dependencies, including ATF.
1607When set, it enforces these options:
1608.Pp
1609.Bl -item -compact
1610.It
1611.Va WITHOUT_DTRACE_TESTS
1612.El
1613.Pp
1614When set, these options are also in effect:
1615.Pp
1616.Bl -inset -compact
1617.It Va WITHOUT_GOOGLETEST
1618(unless
1619.Va WITH_GOOGLETEST
1620is set explicitly)
1621.It Va WITHOUT_TESTS_SUPPORT
1622(unless
1623.Va WITH_TESTS_SUPPORT
1624is set explicitly)
1625.El
1626.It Va WITHOUT_TESTS_SUPPORT
1627Disable the build of all test-related dependencies, including ATF.
1628When set, it enforces these options:
1629.Pp
1630.Bl -item -compact
1631.It
1632.Va WITHOUT_GOOGLETEST
1633.El
1634.It Va WITHOUT_TEXTPROC
1635Do not build
1636programs used for text processing.
1637.It Va WITHOUT_TFTP
1638Do not build or install
1639.Xr tftp 1
1640and
1641.Xr tftpd 8 .
1642.It Va WITHOUT_TOOLCHAIN
1643Do not install header or
1644programs used for program development,
1645compilers, debuggers etc.
1646When set, it enforces these options:
1647.Pp
1648.Bl -item -compact
1649.It
1650.Va WITHOUT_CLANG
1651.It
1652.Va WITHOUT_CLANG_EXTRAS
1653.It
1654.Va WITHOUT_CLANG_FORMAT
1655.It
1656.Va WITHOUT_CLANG_FULL
1657.It
1658.Va WITHOUT_INCLUDES
1659.It
1660.Va WITHOUT_LLD
1661.It
1662.Va WITHOUT_LLDB
1663.It
1664.Va WITHOUT_LLVM_COV
1665.El
1666.It Va WITH_UBSAN
1667Build the base system with Undefined Behavior Sanitizer (UBSan) to detect
1668various kinds of undefined behavior at runtime.
1669Requires that Clang be used as the base system compiler
1670and that the runtime support library is available
1671.It Va WITHOUT_UNBOUND
1672Do not build
1673.Xr unbound 8
1674and related programs.
1675.It Va WITHOUT_UNIFIED_OBJDIR
1676Use the historical object directory format for
1677.Xr build 7
1678targets.
1679For native-builds and builds done directly in sub-directories the format of
1680.Pa ${MAKEOBJDIRPREFIX}/${.CURDIR}
1681is used,
1682while for cross-builds
1683.Pa ${MAKEOBJDIRPREFIX}/${TARGET}.${TARGET_ARCH}/${.CURDIR}
1684is used.
1685.Pp
1686This option is transitional and will be removed in a future version of
1687.Fx ,
1688at which time
1689.Va WITH_UNIFIED_OBJDIR
1690will be enabled permanently.
1691.Pp
1692This must be set in the environment, make command line, or
1693.Pa /etc/src-env.conf ,
1694not
1695.Pa /etc/src.conf .
1696.It Va WITHOUT_USB
1697Do not build USB-related programs and libraries.
1698.It Va WITHOUT_USB_GADGET_EXAMPLES
1699Do not build USB gadget kernel modules.
1700.It Va WITHOUT_UTMPX
1701Do not build user accounting tools such as
1702.Xr last 1 ,
1703.Xr users 1 ,
1704.Xr who 1 ,
1705.Xr ac 8 ,
1706.Xr lastlogin 8
1707and
1708.Xr utx 8 .
1709.It Va WITH_VERIEXEC
1710Enable building
1711.Xr veriexec 8
1712which loads the contents of verified manifests into the kernel
1713for use by
1714.Xr mac_veriexec 4
1715.Pp
1716Depends on
1717.Va WITH_BEARSSL .
1718.It Va WITHOUT_VI
1719Do not build and install vi, view, ex and related programs.
1720.It Va WITHOUT_VT
1721Do not build
1722.Xr vt 4
1723support files (fonts and keymaps).
1724.It Va WITHOUT_WARNS
1725Set this to not add warning flags to the compiler invocations.
1726Useful as a temporary workaround when code enters the tree
1727which triggers warnings in environments that differ from the
1728original developer.
1729.It Va WITHOUT_WERROR
1730Set this to not treat compiler warnings as errors.
1731Useful as a temporary workaround when working on fixing compiler warnings.
1732When set, warnings are still printed in the build log but do not fail the build.
1733.It Va WITHOUT_WIRELESS
1734Do not build programs used for 802.11 wireless networks; especially
1735.Xr wpa_supplicant 8
1736and
1737.Xr hostapd 8 .
1738When set, these options are also in effect:
1739.Pp
1740.Bl -inset -compact
1741.It Va WITHOUT_WIRELESS_SUPPORT
1742(unless
1743.Va WITH_WIRELESS_SUPPORT
1744is set explicitly)
1745.El
1746.It Va WITHOUT_WIRELESS_SUPPORT
1747Build libraries, programs, and kernel modules without
1748802.11 wireless support.
1749.It Va WITHOUT_WPA_SUPPLICANT_EAPOL
1750Build
1751.Xr wpa_supplicant 8
1752without support for the IEEE 802.1X protocol and without
1753support for EAP-PEAP, EAP-TLS, EAP-LEAP, and EAP-TTLS
1754protocols (usable only via 802.1X).
1755.It Va WITHOUT_ZFS
1756Do not build the ZFS file system kernel module, libraries such as
1757.Xr libbe 3 ,
1758and user commands such as
1759.Xr zpool 8
1760or
1761.Xr zfs 8 .
1762Also disable ZFS support in utilities and libraries which implement
1763ZFS-specific functionality.
1764.It Va WITHOUT_ZONEINFO
1765Do not build the timezone database.
1766When set, it enforces these options:
1767.Pp
1768.Bl -item -compact
1769.It
1770.Va WITHOUT_ZONEINFO_LEAPSECONDS_SUPPORT
1771.El
1772.It Va WITH_ZONEINFO_LEAPSECONDS_SUPPORT
1773Build leapsecond information in to the timezone database.
1774.El
1775.Sh FILES
1776.Bl -tag -compact -width Pa
1777.It Pa /etc/src.conf
1778.It Pa /etc/src-env.conf
1779.It Pa /usr/share/mk/bsd.own.mk
1780.El
1781.Sh SEE ALSO
1782.Xr make 1 ,
1783.Xr make.conf 5 ,
1784.Xr build 7 ,
1785.Xr ports 7
1786.Sh HISTORY
1787The
1788.Nm
1789file appeared in
1790.Fx 7.0 .
1791.Sh AUTHORS
1792This manual page was autogenerated by
1793.An tools/build/options/makeman .
1794