xref: /freebsd/share/man/man5/src.conf.5 (revision 924226fba12cc9a228c73b956e1b7fa24c60b055)
1.\" DO NOT EDIT-- this file is @generated by tools/build/options/makeman.
2.\" $FreeBSD$
3.Dd June 22, 2022
4.Dt SRC.CONF 5
5.Os
6.Sh NAME
7.Nm src.conf
8.Nd "source build options"
9.Sh DESCRIPTION
10The
11.Nm
12file contains variables that control what components will be generated during
13the build process of the
14.Fx
15source tree; see
16.Xr build 7 .
17.Pp
18The
19.Nm
20file uses the standard makefile syntax.
21However,
22.Nm
23should not specify any dependencies to
24.Xr make 1 .
25Instead,
26.Nm
27is to set
28.Xr make 1
29variables that control the aspects of how the system builds.
30.Pp
31The default location of
32.Nm
33is
34.Pa /etc/src.conf ,
35though an alternative location can be specified in the
36.Xr make 1
37variable
38.Va SRCCONF .
39Overriding the location of
40.Nm
41may be necessary if the system-wide settings are not suitable
42for a particular build.
43For instance, setting
44.Va SRCCONF
45to
46.Pa /dev/null
47effectively resets all build controls to their defaults.
48.Pp
49The only purpose of
50.Nm
51is to control the compilation of the
52.Fx
53source code, which is usually located in
54.Pa /usr/src .
55As a rule, the system administrator creates
56.Nm
57when the values of certain control variables need to be changed
58from their defaults.
59.Pp
60In addition, control variables can be specified
61for a particular build via the
62.Fl D
63option of
64.Xr make 1
65or in its environment; see
66.Xr environ 7 .
67.Pp
68The environment of
69.Xr make 1
70for the build can be controlled via the
71.Va SRC_ENV_CONF
72variable, which defaults to
73.Pa /etc/src-env.conf .
74Some examples that may only be set in this file are
75.Va WITH_DIRDEPS_BUILD ,
76and
77.Va WITH_META_MODE ,
78and
79.Va MAKEOBJDIRPREFIX
80as they are environment-only variables.
81.Pp
82The values of variables are ignored regardless of their setting;
83even if they would be set to
84.Dq Li FALSE
85or
86.Dq Li NO .
87The presence of an option causes
88it to be honored by
89.Xr make 1 .
90.Pp
91This list provides a name and short description for variables
92that can be used for source builds.
93.Bl -tag -width indent
94.It Va WITHOUT_ACCT
95Do not build process accounting tools such as
96.Xr accton 8
97and
98.Xr sa 8 .
99.It Va WITHOUT_ACPI
100Do not build
101.Xr acpiconf 8 ,
102.Xr acpidump 8
103and related programs.
104.It Va WITHOUT_APM
105Do not build
106.Xr apm 8 ,
107.Xr apmd 8
108and related programs.
109.It Va WITH_ASAN
110Build the base system with Address Sanitizer (ASan) to detect
111memory corruption bugs such as buffer overflows or use-after-free.
112Requires that Clang be used as the base system compiler
113and that the runtime support library is available.
114When set, it enforces these options:
115.Pp
116.Bl -item -compact
117.It
118.Va WITH_LLVM_BINUTILS
119.It
120.Va WITH_LLVM_CXXFILT
121.El
122.It Va WITHOUT_ASSERT_DEBUG
123Compile programs and libraries without the
124.Xr assert 3
125checks.
126.It Va WITHOUT_AT
127Do not build
128.Xr at 1
129and related utilities.
130.It Va WITHOUT_ATM
131Do not build
132programs and libraries related to ATM networking.
133.It Va WITHOUT_AUDIT
134Do not build audit support into system programs.
135.It Va WITHOUT_AUTHPF
136Do not build
137.Xr authpf 8 .
138.It Va WITHOUT_AUTOFS
139Do not build
140.Xr autofs 5
141related programs, libraries, and kernel modules.
142.It Va WITHOUT_AUTO_OBJ
143Disable automatic creation of objdirs.
144This is enabled by default if the wanted OBJDIR is writable by the current user.
145.Pp
146This must be set in the environment, make command line, or
147.Pa /etc/src-env.conf ,
148not
149.Pa /etc/src.conf .
150.It Va WITH_BEARSSL
151Build the BearSSL library.
152.Pp
153BearSSL is a tiny SSL library suitable for embedded environments.
154For details see
155.Lk https://www.BearSSL.org/
156.Pp
157This library is currently only used to perform
158signature verification and related operations
159for Verified Exec and
160.Xr loader 8 .
161When set, these options are also in effect:
162.Pp
163.Bl -inset -compact
164.It Va WITH_LOADER_EFI_SECUREBOOT
165(unless
166.Va WITHOUT_LOADER_EFI_SECUREBOOT
167is set explicitly)
168.It Va WITH_LOADER_VERIEXEC
169(unless
170.Va WITHOUT_LOADER_VERIEXEC
171is set explicitly)
172.It Va WITH_LOADER_VERIEXEC_VECTX
173(unless
174.Va WITHOUT_LOADER_VERIEXEC_VECTX
175is set explicitly)
176.It Va WITH_VERIEXEC
177(unless
178.Va WITHOUT_VERIEXEC
179is set explicitly)
180.El
181.It Va WITHOUT_BHYVE
182Do not build or install
183.Xr bhyve 8 ,
184associated utilities, and examples.
185.Pp
186This option only affects amd64/amd64.
187.It Va WITH_BHYVE_SNAPSHOT
188Include support for save and restore (snapshots) in
189.Xr bhyve 8
190and
191.Xr bhyvectl 8 .
192.Pp
193This option only affects amd64/amd64.
194.It Va WITH_BIND_NOW
195Build all binaries with the
196.Dv DF_BIND_NOW
197flag set to indicate that the run-time loader should perform all relocation
198processing at process startup rather than on demand.
199The combination of the
200.Va BIND_NOW
201and
202.Va RELRO
203options provide "full" Relocation Read-Only (RELRO) support.
204With full RELRO the entire GOT is made read-only after performing relocation at
205startup, avoiding GOT overwrite attacks.
206.It Va WITHOUT_BLACKLIST
207Set this if you do not want to build
208.Xr blacklistd 8
209and
210.Xr blacklistctl 8 .
211When set, these options are also in effect:
212.Pp
213.Bl -inset -compact
214.It Va WITHOUT_BLACKLIST_SUPPORT
215(unless
216.Va WITH_BLACKLIST_SUPPORT
217is set explicitly)
218.El
219.It Va WITHOUT_BLACKLIST_SUPPORT
220Build some programs without
221.Xr libblacklist 3
222support, like
223.Xr fingerd 8 ,
224.Xr ftpd 8 ,
225and
226.Xr sshd 8 .
227.It Va WITHOUT_BLUETOOTH
228Do not build Bluetooth related kernel modules, programs and libraries.
229.It Va WITHOUT_BOOT
230Do not build the boot blocks and loader.
231.It Va WITHOUT_BOOTPARAMD
232Do not build or install
233.Xr bootparamd 8 .
234.It Va WITHOUT_BOOTPD
235Do not build or install
236.Xr bootpd 8 .
237.It Va WITHOUT_BSDINSTALL
238Do not build
239.Xr bsdinstall 8 ,
240.Xr sade 8 ,
241and related programs.
242.It Va WITHOUT_BSD_CPIO
243Do not build the BSD licensed version of cpio based on
244.Xr libarchive 3 .
245.It Va WITHOUT_BSNMP
246Do not build or install
247.Xr bsnmpd 1
248and related libraries and data files.
249.It Va WITHOUT_BZIP2
250Do not build contributed bzip2 software as a part of the base system.
251.Bf -symbolic
252The option has no effect yet.
253.Ef
254When set, these options are also in effect:
255.Pp
256.Bl -inset -compact
257.It Va WITHOUT_BZIP2_SUPPORT
258(unless
259.Va WITH_BZIP2_SUPPORT
260is set explicitly)
261.El
262.It Va WITHOUT_BZIP2_SUPPORT
263Build some programs without optional bzip2 support.
264.It Va WITHOUT_CALENDAR
265Do not build
266.Xr calendar 1 .
267.It Va WITHOUT_CAPSICUM
268Do not build Capsicum support into system programs.
269When set, it enforces these options:
270.Pp
271.Bl -item -compact
272.It
273.Va WITHOUT_CASPER
274.El
275.It Va WITHOUT_CAROOT
276Do not add the trusted certificates from the Mozilla NSS bundle to
277base.
278.It Va WITHOUT_CASPER
279Do not build Casper program and related libraries.
280.It Va WITH_CCACHE_BUILD
281Use
282.Xr ccache 1
283for the build.
284No configuration is required except to install the
285.Sy devel/ccache
286package.
287When using with
288.Xr distcc 1 ,
289set
290.Sy CCACHE_PREFIX=/usr/local/bin/distcc .
291The default cache directory of
292.Pa $HOME/.ccache
293will be used, which can be overridden by setting
294.Sy CCACHE_DIR .
295The
296.Sy CCACHE_COMPILERCHECK
297option defaults to
298.Sy content
299when using the in-tree bootstrap compiler,
300and
301.Sy mtime
302when using an external compiler.
303The
304.Sy CCACHE_CPP2
305option is used for Clang but not GCC.
306.Pp
307Sharing a cache between multiple work directories requires using a layout
308similar to
309.Pa /some/prefix/src
310.Pa /some/prefix/obj
311and an environment such as:
312.Bd -literal -offset indent
313CCACHE_BASEDIR='${SRCTOP:H}' MAKEOBJDIRPREFIX='${SRCTOP:H}/obj'
314.Ed
315.Pp
316See
317.Xr ccache 1
318for more configuration options.
319.It Va WITHOUT_CCD
320Do not build
321.Xr geom_ccd 4
322and related utilities.
323.It Va WITHOUT_CDDL
324Do not build code licensed under Sun's CDDL.
325When set, it enforces these options:
326.Pp
327.Bl -item -compact
328.It
329.Va WITHOUT_CTF
330.It
331.Va WITHOUT_LOADER_ZFS
332.It
333.Va WITHOUT_ZFS
334.El
335.It Va WITHOUT_CLANG
336Do not build the Clang C/C++ compiler during the regular phase of the build.
337When set, it enforces these options:
338.Pp
339.Bl -item -compact
340.It
341.Va WITHOUT_CLANG_EXTRAS
342.It
343.Va WITHOUT_CLANG_FORMAT
344.It
345.Va WITHOUT_CLANG_FULL
346.It
347.Va WITHOUT_LLVM_COV
348.El
349.Pp
350When set, these options are also in effect:
351.Pp
352.Bl -inset -compact
353.It Va WITHOUT_LLVM_TARGET_AARCH64
354(unless
355.Va WITH_LLVM_TARGET_AARCH64
356is set explicitly)
357.It Va WITHOUT_LLVM_TARGET_ALL
358(unless
359.Va WITH_LLVM_TARGET_ALL
360is set explicitly)
361.It Va WITHOUT_LLVM_TARGET_ARM
362(unless
363.Va WITH_LLVM_TARGET_ARM
364is set explicitly)
365.It Va WITHOUT_LLVM_TARGET_POWERPC
366(unless
367.Va WITH_LLVM_TARGET_POWERPC
368is set explicitly)
369.It Va WITHOUT_LLVM_TARGET_RISCV
370(unless
371.Va WITH_LLVM_TARGET_RISCV
372is set explicitly)
373.El
374.It Va WITHOUT_CLANG_BOOTSTRAP
375Do not build the Clang C/C++ compiler during the bootstrap phase of
376the build.
377To be able to build the system, either gcc or clang bootstrap must be
378enabled unless an alternate compiler is provided via XCC.
379.It Va WITH_CLANG_EXTRAS
380Build additional clang and llvm tools, such as bugpoint and
381clang-format.
382.It Va WITH_CLANG_FORMAT
383Build clang-format.
384.It Va WITHOUT_CLANG_FULL
385Avoid building the ARCMigrate, Rewriter and StaticAnalyzer components of
386the Clang C/C++ compiler.
387.It Va WITHOUT_CLANG_IS_CC
388Do not install links to the Clang C/C++ compiler as
389.Pa /usr/bin/cc ,
390.Pa /usr/bin/c++
391and
392.Pa /usr/bin/cpp .
393.It Va WITHOUT_CLEAN
394Do not clean before building world and/or kernel.
395.It Va WITHOUT_CPP
396Do not build
397.Xr cpp 1 .
398.It Va WITHOUT_CROSS_COMPILER
399Do not build any cross compiler in the cross-tools stage of buildworld.
400When compiling a different version of
401.Fx
402than what is installed on the system, provide an alternate
403compiler with XCC to ensure success.
404When compiling with an identical version of
405.Fx
406to the host, this option may be safely used.
407This option may also be safe when the host version of
408.Fx
409is close to the sources being built, but all bets are off if there have
410been any changes to the toolchain between the versions.
411When set, it enforces these options:
412.Pp
413.Bl -item -compact
414.It
415.Va WITHOUT_CLANG_BOOTSTRAP
416.It
417.Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
418.It
419.Va WITHOUT_LLD_BOOTSTRAP
420.El
421.It Va WITHOUT_CRYPT
422Do not build any crypto code.
423When set, it enforces these options:
424.Pp
425.Bl -item -compact
426.It
427.Va WITHOUT_DMAGENT
428.It
429.Va WITHOUT_KERBEROS
430.It
431.Va WITHOUT_KERBEROS_SUPPORT
432.It
433.Va WITHOUT_LDNS
434.It
435.Va WITHOUT_LDNS_UTILS
436.It
437.Va WITHOUT_OPENSSH
438.It
439.Va WITHOUT_OPENSSL
440.It
441.Va WITHOUT_OPENSSL_KTLS
442.It
443.Va WITHOUT_PKGBOOTSTRAP
444.It
445.Va WITHOUT_UNBOUND
446.It
447.Va WITHOUT_ZFS
448.El
449.Pp
450When set, these options are also in effect:
451.Pp
452.Bl -inset -compact
453.It Va WITHOUT_GSSAPI
454(unless
455.Va WITH_GSSAPI
456is set explicitly)
457.El
458.It Va WITH_CTF
459Compile with CTF (Compact C Type Format) data.
460CTF data encapsulates a reduced form of debugging information
461similar to DWARF and the venerable stabs and is required for DTrace.
462.It Va WITHOUT_CUSE
463Do not build CUSE-related programs and libraries.
464.It Va WITHOUT_CXGBETOOL
465Do not build
466.Xr cxgbetool 8
467.Pp
468This is a default setting on
469arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
470.It Va WITH_CXGBETOOL
471Build
472.Xr cxgbetool 8
473.Pp
474This is a default setting on
475amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
476.It Va WITHOUT_CXX
477Do not build C++ headers and runtime libraries.
478It also prevents building binaries and libraries written in C++, including
479.Xr devd 8 .
480When set, it enforces these options:
481.Pp
482.Bl -item -compact
483.It
484.Va WITHOUT_CLANG
485.It
486.Va WITHOUT_CLANG_EXTRAS
487.It
488.Va WITHOUT_CLANG_FORMAT
489.It
490.Va WITHOUT_CLANG_FULL
491.It
492.Va WITHOUT_DTRACE_TESTS
493.It
494.Va WITHOUT_GOOGLETEST
495.It
496.Va WITHOUT_LLVM_COV
497.It
498.Va WITHOUT_OFED
499.It
500.Va WITHOUT_OFED_EXTRA
501.It
502.Va WITHOUT_OPENMP
503.It
504.Va WITHOUT_PMC
505.It
506.Va WITHOUT_TESTS
507.El
508.It Va WITHOUT_DEBUG_FILES
509Avoid building or installing standalone debug files for each
510executable binary and shared library.
511.It Va WITH_DETECT_TZ_CHANGES
512Make the time handling code detect changes to the timezone files.
513.It Va WITHOUT_DIALOG
514Do not build
515.Xr dialog 1 ,
516.Xr dialog 3 ,
517.Xr dpv 1 ,
518and
519.Xr dpv 3 .
520When set, it enforces these options:
521.Pp
522.Bl -item -compact
523.It
524.Va WITHOUT_BSDINSTALL
525.El
526.It Va WITHOUT_DICT
527Do not build the Webster dictionary files.
528.It Va WITH_DIRDEPS_BUILD
529This is an experimental build system.
530For details see
531https://www.crufty.net/sjg/docs/freebsd-meta-mode.htm.
532Build commands can be seen from the top-level with:
533.Dl make show-valid-targets
534The build is driven by dirdeps.mk using
535.Va DIRDEPS
536stored in
537Makefile.depend files found in each directory.
538.Pp
539The build can be started from anywhere, and behaves the same.
540The initial instance of
541.Xr make 1
542recursively reads
543.Va DIRDEPS
544from
545.Pa Makefile.depend ,
546computing a graph of tree dependencies from the current origin.
547Setting
548.Va NO_DIRDEPS
549skips checking dirdep dependencies and will only build in the current
550and child directories.
551.Va NO_DIRDEPS_BELOW
552skips building any dirdeps and only build the current directory.
553.Pp
554This also utilizes the
555.Va WITH_META_MODE
556logic for incremental builds.
557.Pp
558The build hides commands executed unless
559.Va NO_SILENT
560is defined.
561.Pp
562Note that there is currently no mass install feature for this.
563.Pp
564When set, it enforces these options:
565.Pp
566.Bl -item -compact
567.It
568.Va WITH_INSTALL_AS_USER
569.El
570.Pp
571When set, these options are also in effect:
572.Pp
573.Bl -inset -compact
574.It Va WITH_META_MODE
575(unless
576.Va WITHOUT_META_MODE
577is set explicitly)
578.It Va WITH_STAGING
579(unless
580.Va WITHOUT_STAGING
581is set explicitly)
582.It Va WITH_STAGING_MAN
583(unless
584.Va WITHOUT_STAGING_MAN
585is set explicitly)
586.It Va WITH_STAGING_PROG
587(unless
588.Va WITHOUT_STAGING_PROG
589is set explicitly)
590.It Va WITH_SYSROOT
591(unless
592.Va WITHOUT_SYSROOT
593is set explicitly)
594.El
595.Pp
596This must be set in the environment, make command line, or
597.Pa /etc/src-env.conf ,
598not
599.Pa /etc/src.conf .
600.It Va WITH_DIRDEPS_CACHE
601Cache result of dirdeps.mk which can save significant time
602for subsequent builds.
603Depends on
604.Va WITH_DIRDEPS_BUILD .
605.Pp
606This must be set in the environment, make command line, or
607.Pa /etc/src-env.conf ,
608not
609.Pa /etc/src.conf .
610.It Va WITHOUT_DMAGENT
611Do not build dma Mail Transport Agent.
612.It Va WITHOUT_DOCCOMPRESS
613Do not install compressed system documentation.
614Only the uncompressed version will be installed.
615.It Va WITH_DTRACE_TESTS
616Build and install the DTrace test suite in
617.Pa /usr/tests/cddl/usr.sbin/dtrace .
618This test suite is considered experimental on architectures other than
619amd64/amd64 and running it may cause system instability.
620.It Va WITHOUT_DYNAMICROOT
621Set this if you do not want to link
622.Pa /bin
623and
624.Pa /sbin
625dynamically.
626.It Va WITHOUT_EE
627Do not build and install
628.Xr edit 1 ,
629.Xr ee 1 ,
630and related programs.
631.It Va WITHOUT_EFI
632Set not to build
633.Xr efivar 3
634and
635.Xr efivar 8 .
636.Pp
637This is a default setting on
638powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
639.It Va WITH_EFI
640Build
641.Xr efivar 3
642and
643.Xr efivar 8 .
644.Pp
645This is a default setting on
646amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
647.It Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
648Do not build ELF Tool Chain tools
649(addr2line, nm, size, strings and strip)
650as part of the bootstrap process.
651.Bf -symbolic
652An alternate bootstrap tool chain must be provided.
653.Ef
654.It Va WITHOUT_EXAMPLES
655Avoid installing examples to
656.Pa /usr/share/examples/ .
657.It Va WITH_EXPERIMENTAL
658Include experimental features in the build.
659.It Va WITH_EXTRA_TCP_STACKS
660Build extra TCP stack modules.
661.It Va WITH_FDT
662Build Flattened Device Tree support as part of the base system.
663This includes the device tree compiler (dtc) and libfdt support library.
664.It Va WITHOUT_FILE
665Do not build
666.Xr file 1
667and related programs.
668.It Va WITHOUT_FINGER
669Do not build or install
670.Xr finger 1
671and
672.Xr fingerd 8 .
673.It Va WITHOUT_FLOPPY
674Do not build or install programs
675for operating floppy disk driver.
676.It Va WITHOUT_FORMAT_EXTENSIONS
677Do not enable
678.Fl fformat-extensions
679when compiling the kernel.
680Also disables all format checking.
681.It Va WITHOUT_FORTH
682Build bootloaders without Forth support.
683.It Va WITHOUT_FP_LIBC
684Build
685.Nm libc
686without floating-point support.
687.It Va WITHOUT_FREEBSD_UPDATE
688Do not build
689.Xr freebsd-update 8 .
690.It Va WITHOUT_FTP
691Do not build or install
692.Xr ftp 1
693and
694.Xr ftpd 8 .
695.It Va WITHOUT_GAMES
696Do not build games.
697.It Va WITHOUT_GH_BC
698Install the traditional FreeBSD
699.Xr bc 1
700and
701.Xr dc 1
702programs instead of the enhanced versions.
703.It Va WITHOUT_GNU_DIFF
704Do not build GNU
705.Xr diff3 1 .
706.It Va WITHOUT_GOOGLETEST
707Neither build nor install
708.Lb libgmock ,
709.Lb libgtest ,
710and dependent tests.
711.It Va WITHOUT_GPIO
712Do not build
713.Xr gpioctl 8
714as part of the base system.
715.It Va WITHOUT_GSSAPI
716Do not build libgssapi.
717.It Va WITHOUT_HAST
718Do not build
719.Xr hastd 8
720and related utilities.
721.It Va WITH_HESIOD
722Build Hesiod support.
723.It Va WITHOUT_HTML
724Do not build HTML docs.
725.It Va WITHOUT_HYPERV
726Do not build or install HyperV utilities.
727.Pp
728This is a default setting on
729arm/armv6, arm/armv7, arm64/aarch64, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
730.It Va WITH_HYPERV
731Build or install HyperV utilities.
732.Pp
733This is a default setting on
734amd64/amd64 and i386/i386.
735.It Va WITHOUT_ICONV
736Do not build iconv as part of libc.
737.It Va WITHOUT_INCLUDES
738Do not install header files.
739This option used to be spelled
740.Va NO_INCS .
741.Bf -symbolic
742The option does not work for build targets.
743.Ef
744.It Va WITHOUT_INET
745Do not build programs and libraries related to IPv4 networking.
746When set, it enforces these options:
747.Pp
748.Bl -item -compact
749.It
750.Va WITHOUT_INET_SUPPORT
751.El
752.It Va WITHOUT_INET6
753Do not build
754programs and libraries related to IPv6 networking.
755When set, it enforces these options:
756.Pp
757.Bl -item -compact
758.It
759.Va WITHOUT_INET6_SUPPORT
760.El
761.It Va WITHOUT_INET6_SUPPORT
762Build libraries, programs, and kernel modules without IPv6 support.
763.It Va WITHOUT_INETD
764Do not build
765.Xr inetd 8 .
766.It Va WITHOUT_INET_SUPPORT
767Build libraries, programs, and kernel modules without IPv4 support.
768.It Va WITH_INIT_ALL_PATTERN
769Build the base system or kernel with stack variables initialized to
770.Pq compiler defined
771debugging patterns on function entry.
772This option requires the clang compiler.
773.It Va WITH_INIT_ALL_ZERO
774Build the base system or kernel with stack variables initialized
775to zero on function entry.
776This option requires that the clang compiler be used.
777.It Va WITHOUT_INSTALLLIB
778Set this to not install optional libraries.
779For example, when creating a
780.Xr nanobsd 8
781image.
782.Bf -symbolic
783The option does not work for build targets.
784.Ef
785.It Va WITH_INSTALL_AS_USER
786Make install targets succeed for non-root users by installing
787files with owner and group attributes set to that of the user running
788the
789.Xr make 1
790command.
791The user still must set the
792.Va DESTDIR
793variable to point to a directory where the user has write permissions.
794.It Va WITHOUT_IPFILTER
795Do not build IP Filter package.
796.It Va WITHOUT_IPFW
797Do not build IPFW tools.
798.It Va WITHOUT_IPSEC_SUPPORT
799Do not build the kernel with
800.Xr ipsec 4
801support.
802This option is needed for
803.Xr ipsec 4
804and
805.Xr tcpmd5 4 .
806.It Va WITHOUT_ISCSI
807Do not build
808.Xr iscsid 8
809and related utilities.
810.It Va WITHOUT_JAIL
811Do not build tools for the support of jails; e.g.,
812.Xr jail 8 .
813.It Va WITHOUT_KDUMP
814Do not build
815.Xr kdump 1
816and
817.Xr truss 1 .
818.It Va WITHOUT_KERBEROS
819Set this to not build Kerberos 5 (KTH Heimdal).
820When set, these options are also in effect:
821.Pp
822.Bl -inset -compact
823.It Va WITHOUT_GSSAPI
824(unless
825.Va WITH_GSSAPI
826is set explicitly)
827.It Va WITHOUT_KERBEROS_SUPPORT
828(unless
829.Va WITH_KERBEROS_SUPPORT
830is set explicitly)
831.El
832.It Va WITHOUT_KERBEROS_SUPPORT
833Build some programs without Kerberos support, like
834.Xr ssh 1 ,
835.Xr telnet 1 ,
836.Xr sshd 8 ,
837and
838.Xr telnetd 8 .
839.It Va WITH_KERNEL_RETPOLINE
840Enable the "retpoline" mitigation for CVE-2017-5715 in the kernel
841build.
842.It Va WITHOUT_KERNEL_SYMBOLS
843Do not install standalone kernel debug symbol files.
844This option has no effect at build time.
845.It Va WITHOUT_KVM
846Do not build the
847.Nm libkvm
848library as a part of the base system.
849.Bf -symbolic
850The option has no effect yet.
851.Ef
852When set, these options are also in effect:
853.Pp
854.Bl -inset -compact
855.It Va WITHOUT_KVM_SUPPORT
856(unless
857.Va WITH_KVM_SUPPORT
858is set explicitly)
859.El
860.It Va WITHOUT_KVM_SUPPORT
861Build some programs without optional
862.Nm libkvm
863support.
864.It Va WITHOUT_LDNS
865Setting this variable will prevent the LDNS library from being built.
866When set, it enforces these options:
867.Pp
868.Bl -item -compact
869.It
870.Va WITHOUT_LDNS_UTILS
871.It
872.Va WITHOUT_UNBOUND
873.El
874.It Va WITHOUT_LDNS_UTILS
875Setting this variable will prevent building the LDNS utilities
876.Xr drill 1
877and
878.Xr host 1 .
879.It Va WITHOUT_LEGACY_CONSOLE
880Do not build programs that support a legacy PC console; e.g.,
881.Xr kbdcontrol 1
882and
883.Xr vidcontrol 1 .
884.It Va WITHOUT_LIB32
885On 64-bit platforms, do not build 32-bit library set and a
886.Nm ld-elf32.so.1
887runtime linker.
888.Pp
889This is a default setting on
890arm/armv6, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
891.It Va WITHOUT_LLD
892Do not build LLVM's lld linker.
893.It Va WITHOUT_LLDB
894Do not build the LLDB debugger.
895.Pp
896This is a default setting on
897arm/armv6, arm/armv7, riscv/riscv64 and riscv/riscv64sf.
898.It Va WITH_LLDB
899Build the LLDB debugger.
900.Pp
901This is a default setting on
902amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
903.It Va WITHOUT_LLD_BOOTSTRAP
904Do not build the LLD linker during the bootstrap phase of
905the build.
906To be able to build the system an alternate linker must be provided via XLD.
907.It Va WITHOUT_LLD_IS_LD
908Do not install a
909.Pa /usr/bin/ld symlink
910to
911.Pa ld.lld .
912The system will not have a usable tool chain unless a linker is provided
913some other way.
914.It Va WITHOUT_LLVM_ASSERTIONS
915Disable debugging assertions in LLVM.
916.It Va WITH_LLVM_BINUTILS
917Install LLVM's binutils (ar, addr2line, nm, etc.) instead of ELF Tool Chain's.
918.It Va WITHOUT_LLVM_COV
919Do not build the
920.Xr llvm-cov 1
921tool.
922.It Va WITHOUT_LLVM_CXXFILT
923Install ELF Tool Chain's cxxfilt as c++filt, instead of LLVM's llvm-cxxfilt.
924.It Va WITHOUT_LLVM_TARGET_AARCH64
925Do not build LLVM target support for AArch64.
926The
927.Va LLVM_TARGET_ALL
928option should be used rather than this in most cases.
929.It Va WITHOUT_LLVM_TARGET_ALL
930Only build the required LLVM target support.
931This option is preferred to specific target support options.
932When set, these options are also in effect:
933.Pp
934.Bl -inset -compact
935.It Va WITHOUT_LLVM_TARGET_AARCH64
936(unless
937.Va WITH_LLVM_TARGET_AARCH64
938is set explicitly)
939.It Va WITHOUT_LLVM_TARGET_ARM
940(unless
941.Va WITH_LLVM_TARGET_ARM
942is set explicitly)
943.It Va WITHOUT_LLVM_TARGET_POWERPC
944(unless
945.Va WITH_LLVM_TARGET_POWERPC
946is set explicitly)
947.It Va WITHOUT_LLVM_TARGET_RISCV
948(unless
949.Va WITH_LLVM_TARGET_RISCV
950is set explicitly)
951.El
952.It Va WITHOUT_LLVM_TARGET_ARM
953Do not build LLVM target support for ARM.
954The
955.Va LLVM_TARGET_ALL
956option should be used rather than this in most cases.
957.It Va WITH_LLVM_TARGET_BPF
958Build LLVM target support for BPF.
959The
960.Va LLVM_TARGET_ALL
961option should be used rather than this in most cases.
962.It Va WITH_LLVM_TARGET_MIPS
963Build LLVM target support for MIPS.
964The
965.Va LLVM_TARGET_ALL
966option should be used rather than this in most cases.
967.It Va WITHOUT_LLVM_TARGET_POWERPC
968Do not build LLVM target support for PowerPC.
969The
970.Va LLVM_TARGET_ALL
971option should be used rather than this in most cases.
972.It Va WITHOUT_LLVM_TARGET_RISCV
973Do not build LLVM target support for RISC-V.
974The
975.Va LLVM_TARGET_ALL
976option should be used rather than this in most cases.
977.It Va WITHOUT_LLVM_TARGET_X86
978Do not build LLVM target support for X86.
979The
980.Va LLVM_TARGET_ALL
981option should be used rather than this in most cases.
982.It Va WITH_LOADER_EFI_SECUREBOOT
983Enable building
984.Xr loader 8
985with support for verification based on certificates obtained from UEFI.
986.It Va WITH_LOADER_FIREWIRE
987Enable firewire support in /boot/loader on x86.
988This option is a nop on all other platforms.
989.It Va WITHOUT_LOADER_GELI
990Disable inclusion of GELI crypto support in the boot chain binaries.
991.Pp
992This is a default setting on
993powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
994.It Va WITH_LOADER_GELI
995Build GELI bootloader support.
996.Pp
997This is a default setting on
998amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
999.It Va WITHOUT_LOADER_KBOOT
1000Do not build kboot, a linuxboot environment loader
1001.Pp
1002This is a default setting on
1003arm/armv6, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1004.It Va WITH_LOADER_KBOOT
1005Build kboot, a linuxboot environment loader
1006.Pp
1007This is a default setting on
1008amd64/amd64 and powerpc/powerpc64.
1009.It Va WITHOUT_LOADER_LUA
1010Do not build LUA bindings for the boot loader.
1011.Pp
1012This is a default setting on
1013powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
1014.It Va WITH_LOADER_LUA
1015Build LUA bindings for the boot loader.
1016.Pp
1017This is a default setting on
1018amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
1019.It Va WITHOUT_LOADER_OFW
1020Disable building of openfirmware bootloader components.
1021.Pp
1022This is a default setting on
1023amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
1024.It Va WITH_LOADER_OFW
1025Build openfirmware bootloader components.
1026.Pp
1027This is a default setting on
1028powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
1029.It Va WITHOUT_LOADER_UBOOT
1030Disable building of ubldr.
1031.Pp
1032This is a default setting on
1033amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1034.It Va WITH_LOADER_UBOOT
1035Build ubldr.
1036.Pp
1037This is a default setting on
1038arm/armv6, arm/armv7, powerpc/powerpc and powerpc/powerpc64.
1039.It Va WITH_LOADER_VERBOSE
1040Build with extra verbose debugging in the loader.
1041May explode already nearly too large loader over the limit.
1042Use with care.
1043.It Va WITH_LOADER_VERIEXEC
1044Enable building
1045.Xr loader 8
1046with support for verification similar to Verified Exec.
1047.Pp
1048Depends on
1049.Va WITH_BEARSSL .
1050When set, these options are also in effect:
1051.Pp
1052.Bl -inset -compact
1053.It Va WITH_LOADER_EFI_SECUREBOOT
1054(unless
1055.Va WITHOUT_LOADER_EFI_SECUREBOOT
1056is set explicitly)
1057.It Va WITH_LOADER_VERIEXEC_VECTX
1058(unless
1059.Va WITHOUT_LOADER_VERIEXEC_VECTX
1060is set explicitly)
1061.El
1062.It Va WITH_LOADER_VERIEXEC_PASS_MANIFEST
1063Enable building
1064.Xr loader 8
1065with support to pass a verified manifest to the kernel.
1066The kernel has to be built with a module to parse the manifest.
1067.Pp
1068Depends on
1069.Va WITH_LOADER_VERIEXEC .
1070.It Va WITHOUT_LOADER_ZFS
1071Do not build ZFS file system boot loader support.
1072.It Va WITHOUT_LOCALES
1073Do not build localization files; see
1074.Xr locale 1 .
1075.It Va WITHOUT_LOCATE
1076Do not build
1077.Xr locate 1
1078and related programs.
1079.It Va WITHOUT_LPR
1080Do not build
1081.Xr lpr 1
1082and related programs.
1083.It Va WITHOUT_LS_COLORS
1084Build
1085.Xr ls 1
1086without support for colors to distinguish file types.
1087.It Va WITHOUT_MAIL
1088Do not build any mail support (MUA or MTA).
1089When set, it enforces these options:
1090.Pp
1091.Bl -item -compact
1092.It
1093.Va WITHOUT_DMAGENT
1094.It
1095.Va WITHOUT_MAILWRAPPER
1096.It
1097.Va WITHOUT_SENDMAIL
1098.El
1099.It Va WITHOUT_MAILWRAPPER
1100Do not build the
1101.Xr mailwrapper 8
1102MTA selector.
1103.It Va WITHOUT_MAKE
1104Do not install
1105.Xr make 1
1106and related support files.
1107.It Va WITHOUT_MAKE_CHECK_USE_SANDBOX
1108Do not execute
1109.Dq Li "make check"
1110in limited sandbox mode.
1111This option should be paired with
1112.Va WITH_INSTALL_AS_USER
1113if executed as an unprivileged user.
1114See
1115.Xr tests 7
1116for more details.
1117.It Va WITH_MALLOC_PRODUCTION
1118Disable assertions and statistics gathering in
1119.Xr malloc 3 .
1120It also defaults the A and J runtime options to off.
1121.It Va WITHOUT_MAN
1122Do not build manual pages.
1123When set, these options are also in effect:
1124.Pp
1125.Bl -inset -compact
1126.It Va WITHOUT_MAN_UTILS
1127(unless
1128.Va WITH_MAN_UTILS
1129is set explicitly)
1130.El
1131.It Va WITHOUT_MANCOMPRESS
1132Do not install compressed man pages.
1133Only the uncompressed versions will be installed.
1134.It Va WITH_MANSPLITPKG
1135Split man pages into their own packages during make package.
1136.It Va WITHOUT_MAN_UTILS
1137Do not build utilities for manual pages,
1138.Xr apropos 1 ,
1139.Xr makewhatis 1 ,
1140.Xr man 1 ,
1141.Xr whatis 1 ,
1142.Xr manctl 8 ,
1143and related support files.
1144.It Va WITH_META_MODE
1145Create
1146.Xr make 1
1147meta files when building, which can provide a reliable incremental build when
1148using
1149.Xr filemon 4 .
1150The meta file is created in OBJDIR as
1151.Pa target.meta .
1152These meta files track the command that was executed, its output, and the
1153current directory.
1154The
1155.Xr filemon 4
1156module is required unless
1157.Va NO_FILEMON
1158is defined.
1159When the module is loaded, any files used by the commands executed are
1160tracked as dependencies for the target in its meta file.
1161The target is considered out-of-date and rebuilt if any of these
1162conditions are true compared to the last build:
1163.Bl -bullet -compact
1164.It
1165The command to execute changes.
1166.It
1167The current working directory changes.
1168.It
1169The target's meta file is missing.
1170.It
1171The target's meta file is missing filemon data when filemon is loaded
1172and a previous run did not have it loaded.
1173.It
1174[requires
1175.Xr filemon 4 ]
1176Files read, executed or linked to are newer than the target.
1177.It
1178[requires
1179.Xr filemon 4 ]
1180Files read, written, executed or linked are missing.
1181.El
1182The meta files can also be useful for debugging.
1183.Pp
1184The build hides commands that are executed unless
1185.Va NO_SILENT
1186is defined.
1187Errors cause
1188.Xr make 1
1189to show some of its environment for further debugging.
1190.Pp
1191The build operates as it normally would otherwise.
1192This option originally invoked a different build system but that was renamed
1193to
1194.Va WITH_DIRDEPS_BUILD .
1195.Pp
1196This must be set in the environment, make command line, or
1197.Pa /etc/src-env.conf ,
1198not
1199.Pa /etc/src.conf .
1200.It Va WITHOUT_MLX5TOOL
1201Do not build
1202.Xr mlx5tool 8
1203.Pp
1204This is a default setting on
1205arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
1206.It Va WITH_MLX5TOOL
1207Build
1208.Xr mlx5tool 8
1209.Pp
1210This is a default setting on
1211amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
1212.It Va WITHOUT_NETCAT
1213Do not build
1214.Xr nc 1
1215utility.
1216.It Va WITHOUT_NETGRAPH
1217Do not build applications to support
1218.Xr netgraph 4 .
1219When set, it enforces these options:
1220.Pp
1221.Bl -item -compact
1222.It
1223.Va WITHOUT_ATM
1224.It
1225.Va WITHOUT_BLUETOOTH
1226.El
1227.Pp
1228When set, these options are also in effect:
1229.Pp
1230.Bl -inset -compact
1231.It Va WITHOUT_NETGRAPH_SUPPORT
1232(unless
1233.Va WITH_NETGRAPH_SUPPORT
1234is set explicitly)
1235.El
1236.It Va WITHOUT_NETGRAPH_SUPPORT
1237Build libraries, programs, and kernel modules without netgraph support.
1238.It Va WITHOUT_NIS
1239Do not build
1240.Xr NIS 8
1241support and related programs.
1242If set, you might need to adopt your
1243.Xr nsswitch.conf 5
1244and remove
1245.Sq nis
1246entries.
1247.It Va WITHOUT_NLS
1248Do not build NLS catalogs.
1249When set, it enforces these options:
1250.Pp
1251.Bl -item -compact
1252.It
1253.Va WITHOUT_NLS_CATALOGS
1254.El
1255.It Va WITHOUT_NLS_CATALOGS
1256Do not build NLS catalog support for
1257.Xr csh 1 .
1258.It Va WITHOUT_NS_CACHING
1259Disable name caching in the
1260.Pa nsswitch
1261subsystem.
1262The generic caching daemon,
1263.Xr nscd 8 ,
1264will not be built either if this option is set.
1265.It Va WITHOUT_NTP
1266Do not build
1267.Xr ntpd 8
1268and related programs.
1269.It Va WITHOUT_NVME
1270Do not build nvme related tools and kernel modules.
1271.Pp
1272This is a default setting on
1273arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
1274.It Va WITH_NVME
1275Build nvme related tools and kernel modules.
1276.Pp
1277This is a default setting on
1278amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
1279.It Va WITHOUT_OFED
1280Disable the build of the
1281.Dq "OpenFabrics Enterprise Distribution"
1282Infiniband software stack, including kernel modules and userspace libraries.
1283When set, it enforces these options:
1284.Pp
1285.Bl -item -compact
1286.It
1287.Va WITHOUT_OFED_EXTRA
1288.El
1289.It Va WITH_OFED_EXTRA
1290Build the non-essential components of the
1291.Dq "OpenFabrics Enterprise Distribution"
1292Infiniband software stack, mostly examples.
1293.It Va WITH_OPENLDAP
1294Enable building LDAP support for kerberos using an openldap client from ports.
1295.It Va WITHOUT_OPENMP
1296Do not build LLVM's OpenMP runtime.
1297.Pp
1298This is a default setting on
1299arm/armv6, arm/armv7 and powerpc/powerpc.
1300.It Va WITH_OPENMP
1301Build LLVM's OpenMP runtime.
1302.Pp
1303This is a default setting on
1304amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1305.It Va WITHOUT_OPENSSH
1306Do not build OpenSSH.
1307.It Va WITHOUT_OPENSSL
1308Do not build OpenSSL.
1309When set, it enforces these options:
1310.Pp
1311.Bl -item -compact
1312.It
1313.Va WITHOUT_DMAGENT
1314.It
1315.Va WITHOUT_KERBEROS
1316.It
1317.Va WITHOUT_KERBEROS_SUPPORT
1318.It
1319.Va WITHOUT_LDNS
1320.It
1321.Va WITHOUT_LDNS_UTILS
1322.It
1323.Va WITHOUT_OPENSSH
1324.It
1325.Va WITHOUT_OPENSSL_KTLS
1326.It
1327.Va WITHOUT_PKGBOOTSTRAP
1328.It
1329.Va WITHOUT_UNBOUND
1330.It
1331.Va WITHOUT_ZFS
1332.El
1333.Pp
1334When set, these options are also in effect:
1335.Pp
1336.Bl -inset -compact
1337.It Va WITHOUT_GSSAPI
1338(unless
1339.Va WITH_GSSAPI
1340is set explicitly)
1341.El
1342.It Va WITHOUT_OPENSSL_KTLS
1343Do not include kernel TLS support in OpenSSL.
1344.Pp
1345This is a default setting on
1346arm/armv6, arm/armv7, i386/i386, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1347.It Va WITH_OPENSSL_KTLS
1348Include kernel TLS support in OpenSSL.
1349.Pp
1350This is a default setting on
1351amd64/amd64 and arm64/aarch64.
1352.It Va WITHOUT_PAM
1353Do not build PAM library and modules.
1354.Bf -symbolic
1355This option is deprecated and does nothing.
1356.Ef
1357When set, these options are also in effect:
1358.Pp
1359.Bl -inset -compact
1360.It Va WITHOUT_PAM_SUPPORT
1361(unless
1362.Va WITH_PAM_SUPPORT
1363is set explicitly)
1364.El
1365.It Va WITHOUT_PAM_SUPPORT
1366Build some programs without PAM support, particularly
1367.Xr ftpd 8
1368and
1369.Xr ppp 8 .
1370.It Va WITHOUT_PF
1371Do not build PF firewall package.
1372When set, it enforces these options:
1373.Pp
1374.Bl -item -compact
1375.It
1376.Va WITHOUT_AUTHPF
1377.El
1378.It Va WITHOUT_PIE
1379Do not build dynamically linked binaries as
1380Position-Independent Executable (PIE).
1381.It Va WITHOUT_PKGBOOTSTRAP
1382Do not build
1383.Xr pkg 7
1384bootstrap tool.
1385.It Va WITHOUT_PMC
1386Do not build
1387.Xr pmccontrol 8
1388and related programs.
1389.It Va WITHOUT_PORTSNAP
1390Do not build or install
1391.Xr portsnap 8
1392and related files.
1393.It Va WITHOUT_PPP
1394Do not build
1395.Xr ppp 8
1396and related programs.
1397.It Va WITH_PROFILE
1398Build profiled libraries for use with
1399.Xr gprof 8 .
1400This option is deprecated and may not be present in a future version of
1401.Fx .
1402.It Va WITHOUT_QUOTAS
1403Do not build
1404.Xr quota 1
1405and related programs.
1406.It Va WITHOUT_RADIUS_SUPPORT
1407Do not build radius support into various applications, like
1408.Xr pam_radius 8
1409and
1410.Xr ppp 8 .
1411.It Va WITH_RATELIMIT
1412Build the system with rate limit support.
1413.Pp
1414This makes
1415.Dv SO_MAX_PACING_RATE
1416effective in
1417.Xr getsockopt 2 ,
1418and
1419.Ar txrlimit
1420support in
1421.Xr ifconfig 8 ,
1422by proxy.
1423.It Va WITHOUT_RBOOTD
1424Do not build or install
1425.Xr rbootd 8 .
1426.It Va WITHOUT_RELRO
1427Do not apply the Relocation Read-Only (RELRO) vulnerability mitigation.
1428See also the
1429.Va BIND_NOW
1430option.
1431.It Va WITH_REPRODUCIBLE_BUILD
1432Exclude build metadata (such as the build time, user, or host)
1433from the kernel, boot loaders, and uname output, so that builds produce
1434bit-for-bit identical output.
1435.It Va WITHOUT_RESCUE
1436Do not build
1437.Xr rescue 8 .
1438.It Va WITH_RETPOLINE
1439Build the base system with the retpoline speculative execution
1440vulnerability mitigation for CVE-2017-5715.
1441.It Va WITHOUT_ROUTED
1442Do not build
1443.Xr routed 8
1444utility.
1445.It Va WITH_RPCBIND_WARMSTART_SUPPORT
1446Build
1447.Xr rpcbind 8
1448with warmstart support.
1449.It Va WITHOUT_SENDMAIL
1450Do not build
1451.Xr sendmail 8
1452and related programs.
1453.It Va WITHOUT_SERVICESDB
1454Do not install
1455.Pa /var/db/services.db .
1456.It Va WITHOUT_SETUID_LOGIN
1457Set this to disable the installation of
1458.Xr login 1
1459as a set-user-ID root program.
1460.It Va WITHOUT_SHAREDOCS
1461Do not build the
1462.Bx 4.4
1463legacy docs.
1464.It Va WITHOUT_SHARED_TOOLCHAIN
1465Build the toolchain binaries as statically linked executables.
1466The set includes
1467.Xr cc 1 ,
1468.Xr make 1
1469and necessary utilities like assembler, linker and library archive manager.
1470.It Va WITH_SORT_THREADS
1471Enable threads in
1472.Xr sort 1 .
1473.It Va WITHOUT_SOURCELESS
1474Do not build kernel modules that include sourceless code (either microcode or native code for host CPU).
1475When set, it enforces these options:
1476.Pp
1477.Bl -item -compact
1478.It
1479.Va WITHOUT_SOURCELESS_HOST
1480.It
1481.Va WITHOUT_SOURCELESS_UCODE
1482.El
1483.It Va WITHOUT_SOURCELESS_HOST
1484Do not build kernel modules that include sourceless native code for host CPU.
1485.It Va WITHOUT_SOURCELESS_UCODE
1486Do not build kernel modules that include sourceless microcode.
1487.It Va WITHOUT_SPLIT_KERNEL_DEBUG
1488Do not build standalone kernel debug files.
1489Debug data (if enabled by the kernel configuration file)
1490will be included in the kernel and modules.
1491When set, it enforces these options:
1492.Pp
1493.Bl -item -compact
1494.It
1495.Va WITHOUT_KERNEL_SYMBOLS
1496.El
1497.It Va WITHOUT_SSP
1498Do not build world with propolice stack smashing protection.
1499.It Va WITH_STAGING
1500Enable staging of files to a stage tree.
1501This can be best thought of as auto-install to
1502.Va DESTDIR
1503with some extra meta data to ensure dependencies can be tracked.
1504Depends on
1505.Va WITH_DIRDEPS_BUILD .
1506When set, these options are also in effect:
1507.Pp
1508.Bl -inset -compact
1509.It Va WITH_STAGING_MAN
1510(unless
1511.Va WITHOUT_STAGING_MAN
1512is set explicitly)
1513.It Va WITH_STAGING_PROG
1514(unless
1515.Va WITHOUT_STAGING_PROG
1516is set explicitly)
1517.El
1518.Pp
1519This must be set in the environment, make command line, or
1520.Pa /etc/src-env.conf ,
1521not
1522.Pa /etc/src.conf .
1523.It Va WITH_STAGING_MAN
1524Enable staging of man pages to stage tree.
1525.It Va WITH_STAGING_PROG
1526Enable staging of PROGs to stage tree.
1527.It Va WITH_STALE_STAGED
1528Check staged files are not stale.
1529.It Va WITHOUT_STATS
1530Neither build nor install
1531.Lb libstats
1532and dependent binaries.
1533.It Va WITHOUT_SYSCONS
1534Do not build
1535.Xr syscons 4
1536support files such as keyboard maps, fonts, and screen output maps.
1537.It Va WITH_SYSROOT
1538Enable use of sysroot during build.
1539Depends on
1540.Va WITH_DIRDEPS_BUILD .
1541.Pp
1542This must be set in the environment, make command line, or
1543.Pa /etc/src-env.conf ,
1544not
1545.Pa /etc/src.conf .
1546.It Va WITHOUT_SYSTEM_COMPILER
1547Do not opportunistically skip building a cross-compiler during the
1548bootstrap phase of the build.
1549Normally, if the currently installed compiler matches the planned bootstrap
1550compiler type and revision, then it will not be built.
1551This does not prevent a compiler from being built for installation though,
1552only for building one for the build itself.
1553The
1554.Va WITHOUT_CLANG
1555option controls that.
1556.It Va WITHOUT_SYSTEM_LINKER
1557Do not opportunistically skip building a cross-linker during the
1558bootstrap phase of the build.
1559Normally, if the currently installed linker matches the planned bootstrap
1560linker type and revision, then it will not be built.
1561This does not prevent a linker from being built for installation though,
1562only for building one for the build itself.
1563The
1564.Va WITHOUT_LLD
1565option controls that.
1566.Pp
1567This option is only relevant when
1568.Va WITH_LLD_BOOTSTRAP
1569is set.
1570.It Va WITHOUT_TALK
1571Do not build or install
1572.Xr talk 1
1573and
1574.Xr talkd 8 .
1575.It Va WITHOUT_TCP_WRAPPERS
1576Do not build or install
1577.Xr tcpd 8 ,
1578and related utilities.
1579.It Va WITHOUT_TCSH
1580Do not build and install
1581.Pa /bin/csh
1582(which is
1583.Xr tcsh 1 ) .
1584.It Va WITHOUT_TELNET
1585Do not build
1586.Xr telnet 1
1587and related programs.
1588.It Va WITHOUT_TESTS
1589Do not build nor install the
1590.Fx
1591Test Suite in
1592.Pa /usr/tests/ .
1593See
1594.Xr tests 7
1595for more details.
1596This also disables the build of all test-related dependencies, including ATF.
1597When set, it enforces these options:
1598.Pp
1599.Bl -item -compact
1600.It
1601.Va WITHOUT_DTRACE_TESTS
1602.El
1603.Pp
1604When set, these options are also in effect:
1605.Pp
1606.Bl -inset -compact
1607.It Va WITHOUT_GOOGLETEST
1608(unless
1609.Va WITH_GOOGLETEST
1610is set explicitly)
1611.It Va WITHOUT_TESTS_SUPPORT
1612(unless
1613.Va WITH_TESTS_SUPPORT
1614is set explicitly)
1615.El
1616.It Va WITHOUT_TESTS_SUPPORT
1617Disable the build of all test-related dependencies, including ATF.
1618When set, it enforces these options:
1619.Pp
1620.Bl -item -compact
1621.It
1622.Va WITHOUT_GOOGLETEST
1623.El
1624.It Va WITHOUT_TEXTPROC
1625Do not build
1626programs used for text processing.
1627.It Va WITHOUT_TFTP
1628Do not build or install
1629.Xr tftp 1
1630and
1631.Xr tftpd 8 .
1632.It Va WITHOUT_TOOLCHAIN
1633Do not install header or
1634programs used for program development,
1635compilers, debuggers etc.
1636When set, it enforces these options:
1637.Pp
1638.Bl -item -compact
1639.It
1640.Va WITHOUT_CLANG
1641.It
1642.Va WITHOUT_CLANG_EXTRAS
1643.It
1644.Va WITHOUT_CLANG_FORMAT
1645.It
1646.Va WITHOUT_CLANG_FULL
1647.It
1648.Va WITHOUT_INCLUDES
1649.It
1650.Va WITHOUT_LLD
1651.It
1652.Va WITHOUT_LLDB
1653.It
1654.Va WITHOUT_LLVM_COV
1655.El
1656.It Va WITH_UBSAN
1657Build the base system with Undefined Behavior Sanitizer (UBSan) to detect
1658various kinds of undefined behavior at runtime.
1659Requires that Clang be used as the base system compiler
1660and that the runtime support library is available
1661.It Va WITHOUT_UNBOUND
1662Do not build
1663.Xr unbound 8
1664and related programs.
1665.It Va WITHOUT_UNIFIED_OBJDIR
1666Use the historical object directory format for
1667.Xr build 7
1668targets.
1669For native-builds and builds done directly in sub-directories the format of
1670.Pa ${MAKEOBJDIRPREFIX}/${.CURDIR}
1671is used,
1672while for cross-builds
1673.Pa ${MAKEOBJDIRPREFIX}/${TARGET}.${TARGET_ARCH}/${.CURDIR}
1674is used.
1675.Pp
1676This option is transitional and will be removed in a future version of
1677.Fx ,
1678at which time
1679.Va WITH_UNIFIED_OBJDIR
1680will be enabled permanently.
1681.Pp
1682This must be set in the environment, make command line, or
1683.Pa /etc/src-env.conf ,
1684not
1685.Pa /etc/src.conf .
1686.It Va WITHOUT_USB
1687Do not build USB-related programs and libraries.
1688.It Va WITHOUT_USB_GADGET_EXAMPLES
1689Do not build USB gadget kernel modules.
1690.It Va WITHOUT_UTMPX
1691Do not build user accounting tools such as
1692.Xr last 1 ,
1693.Xr users 1 ,
1694.Xr who 1 ,
1695.Xr ac 8 ,
1696.Xr lastlogin 8
1697and
1698.Xr utx 8 .
1699.It Va WITH_VERIEXEC
1700Enable building
1701.Xr veriexec 8
1702which loads the contents of verified manifests into the kernel
1703for use by
1704.Xr mac_veriexec 4
1705.Pp
1706Depends on
1707.Va WITH_BEARSSL .
1708.It Va WITHOUT_VI
1709Do not build and install vi, view, ex and related programs.
1710.It Va WITHOUT_VT
1711Do not build
1712.Xr vt 4
1713support files (fonts and keymaps).
1714.It Va WITHOUT_WARNS
1715Set this to not add warning flags to the compiler invocations.
1716Useful as a temporary workaround when code enters the tree
1717which triggers warnings in environments that differ from the
1718original developer.
1719.It Va WITHOUT_WERROR
1720Set this to not treat compiler warnings as errors.
1721Useful as a temporary workaround when working on fixing compiler warnings.
1722When set, warnings are still printed in the build log but do not fail the build.
1723.It Va WITHOUT_WIRELESS
1724Do not build programs used for 802.11 wireless networks; especially
1725.Xr wpa_supplicant 8
1726and
1727.Xr hostapd 8 .
1728When set, these options are also in effect:
1729.Pp
1730.Bl -inset -compact
1731.It Va WITHOUT_WIRELESS_SUPPORT
1732(unless
1733.Va WITH_WIRELESS_SUPPORT
1734is set explicitly)
1735.El
1736.It Va WITHOUT_WIRELESS_SUPPORT
1737Build libraries, programs, and kernel modules without
1738802.11 wireless support.
1739.It Va WITHOUT_WPA_SUPPLICANT_EAPOL
1740Build
1741.Xr wpa_supplicant 8
1742without support for the IEEE 802.1X protocol and without
1743support for EAP-PEAP, EAP-TLS, EAP-LEAP, and EAP-TTLS
1744protocols (usable only via 802.1X).
1745.It Va WITHOUT_ZFS
1746Do not build the ZFS file system kernel module, libraries such as
1747.Xr libbe 3 ,
1748and user commands such as
1749.Xr zpool 8
1750or
1751.Xr zfs 8 .
1752Also disable ZFS support in utilities and libraries which implement
1753ZFS-specific functionality.
1754.It Va WITHOUT_ZONEINFO
1755Do not build the timezone database.
1756When set, it enforces these options:
1757.Pp
1758.Bl -item -compact
1759.It
1760.Va WITHOUT_ZONEINFO_LEAPSECONDS_SUPPORT
1761.El
1762.It Va WITH_ZONEINFO_LEAPSECONDS_SUPPORT
1763Build leapsecond information in to the timezone database.
1764.El
1765.Sh FILES
1766.Bl -tag -compact -width Pa
1767.It Pa /etc/src.conf
1768.It Pa /etc/src-env.conf
1769.It Pa /usr/share/mk/bsd.own.mk
1770.El
1771.Sh SEE ALSO
1772.Xr make 1 ,
1773.Xr make.conf 5 ,
1774.Xr build 7 ,
1775.Xr ports 7
1776.Sh HISTORY
1777The
1778.Nm
1779file appeared in
1780.Fx 7.0 .
1781.Sh AUTHORS
1782This manual page was autogenerated by
1783.An tools/build/options/makeman .
1784