xref: /freebsd/share/man/man5/src.conf.5 (revision 9f27341c336aa12f6c7163c17e646e76c813b689)
1.\" DO NOT EDIT-- this file is @generated by tools/build/options/makeman.
2.Dd May 1, 2023
3.Dt SRC.CONF 5
4.Os
5.Sh NAME
6.Nm src.conf
7.Nd "source build options"
8.Sh DESCRIPTION
9The
10.Nm
11file contains variables that control what components will be generated during
12the build process of the
13.Fx
14source tree; see
15.Xr build 7 .
16.Pp
17The
18.Nm
19file uses the standard makefile syntax.
20However,
21.Nm
22should not specify any dependencies to
23.Xr make 1 .
24Instead,
25.Nm
26is to set
27.Xr make 1
28variables that control the aspects of how the system builds.
29.Pp
30The default location of
31.Nm
32is
33.Pa /etc/src.conf ,
34though an alternative location can be specified in the
35.Xr make 1
36variable
37.Va SRCCONF .
38Overriding the location of
39.Nm
40may be necessary if the system-wide settings are not suitable
41for a particular build.
42For instance, setting
43.Va SRCCONF
44to
45.Pa /dev/null
46effectively resets all build controls to their defaults.
47.Pp
48The only purpose of
49.Nm
50is to control the compilation of the
51.Fx
52source code, which is usually located in
53.Pa /usr/src .
54As a rule, the system administrator creates
55.Nm
56when the values of certain control variables need to be changed
57from their defaults.
58.Pp
59In addition, control variables can be specified
60for a particular build via the
61.Fl D
62option of
63.Xr make 1
64or in its environment; see
65.Xr environ 7 .
66.Pp
67The environment of
68.Xr make 1
69for the build can be controlled via the
70.Va SRC_ENV_CONF
71variable, which defaults to
72.Pa /etc/src-env.conf .
73Some examples that may only be set in this file are
74.Va WITH_DIRDEPS_BUILD ,
75and
76.Va WITH_META_MODE ,
77and
78.Va MAKEOBJDIRPREFIX
79as they are environment-only variables.
80.Pp
81The values of variables are ignored regardless of their setting;
82even if they would be set to
83.Dq Li FALSE
84or
85.Dq Li NO .
86The presence of an option causes
87it to be honored by
88.Xr make 1 .
89.Pp
90This list provides a name and short description for variables
91that can be used for source builds.
92.Bl -tag -width indent
93.It Va WITHOUT_ACCT
94Do not build process accounting tools such as
95.Xr accton 8
96and
97.Xr sa 8 .
98.It Va WITHOUT_ACPI
99Do not build
100.Xr acpiconf 8 ,
101.Xr acpidump 8
102and related programs.
103.It Va WITHOUT_APM
104Do not build
105.Xr apm 8 ,
106.Xr apmd 8
107and related programs.
108.It Va WITH_ASAN
109Build the base system with Address Sanitizer (ASan) to detect
110memory corruption bugs such as buffer overflows or use-after-free.
111Requires that Clang be used as the base system compiler
112and that the runtime support library is available.
113When set, it enforces these options:
114.Pp
115.Bl -item -compact
116.It
117.Va WITH_LLVM_BINUTILS
118.It
119.Va WITH_LLVM_CXXFILT
120.El
121.It Va WITHOUT_ASSERT_DEBUG
122Compile programs and libraries without the
123.Xr assert 3
124checks.
125.It Va WITHOUT_AT
126Do not build
127.Xr at 1
128and related utilities.
129.It Va WITHOUT_AUDIT
130Do not build audit support into system programs.
131.It Va WITHOUT_AUTHPF
132Do not build
133.Xr authpf 8 .
134.It Va WITHOUT_AUTOFS
135Do not build
136.Xr autofs 5
137related programs, libraries, and kernel modules.
138.It Va WITHOUT_AUTO_OBJ
139Disable automatic creation of objdirs.
140This is enabled by default if the wanted OBJDIR is writable by the current user.
141.Pp
142This must be set in the environment, make command line, or
143.Pa /etc/src-env.conf ,
144not
145.Pa /etc/src.conf .
146.It Va WITH_BEARSSL
147Build the BearSSL library.
148.Pp
149BearSSL is a tiny SSL library suitable for embedded environments.
150For details see
151.Lk https://www.BearSSL.org/
152.Pp
153This library is currently only used to perform
154signature verification and related operations
155for Verified Exec and
156.Xr loader 8 .
157When set, these options are also in effect:
158.Pp
159.Bl -inset -compact
160.It Va WITH_LOADER_EFI_SECUREBOOT
161(unless
162.Va WITHOUT_LOADER_EFI_SECUREBOOT
163is set explicitly)
164.It Va WITH_LOADER_VERIEXEC
165(unless
166.Va WITHOUT_LOADER_VERIEXEC
167is set explicitly)
168.It Va WITH_LOADER_VERIEXEC_VECTX
169(unless
170.Va WITHOUT_LOADER_VERIEXEC_VECTX
171is set explicitly)
172.It Va WITH_VERIEXEC
173(unless
174.Va WITHOUT_VERIEXEC
175is set explicitly)
176.El
177.It Va WITHOUT_BHYVE
178Do not build or install
179.Xr bhyve 8 ,
180associated utilities, and examples.
181.Pp
182This option only affects amd64/amd64.
183.It Va WITH_BHYVE_SNAPSHOT
184Include support for save and restore (snapshots) in
185.Xr bhyve 8
186and
187.Xr bhyvectl 8 .
188.Pp
189This option only affects amd64/amd64.
190.It Va WITH_BIND_NOW
191Build all binaries with the
192.Dv DF_BIND_NOW
193flag set to indicate that the run-time loader should perform all relocation
194processing at process startup rather than on demand.
195The combination of the
196.Va BIND_NOW
197and
198.Va RELRO
199options provide "full" Relocation Read-Only (RELRO) support.
200With full RELRO the entire GOT is made read-only after performing relocation at
201startup, avoiding GOT overwrite attacks.
202.It Va WITHOUT_BLACKLIST
203Set this if you do not want to build
204.Xr blacklistd 8
205and
206.Xr blacklistctl 8 .
207When set, these options are also in effect:
208.Pp
209.Bl -inset -compact
210.It Va WITHOUT_BLACKLIST_SUPPORT
211(unless
212.Va WITH_BLACKLIST_SUPPORT
213is set explicitly)
214.El
215.It Va WITHOUT_BLACKLIST_SUPPORT
216Build some programs without
217.Xr libblacklist 3
218support, like
219.Xr fingerd 8 ,
220.Xr ftpd 8 ,
221and
222.Xr sshd 8 .
223.It Va WITHOUT_BLUETOOTH
224Do not build Bluetooth related kernel modules, programs and libraries.
225.It Va WITHOUT_BOOT
226Do not build the boot blocks and loader.
227.It Va WITHOUT_BOOTPARAMD
228Do not build or install
229.Xr bootparamd 8 .
230.It Va WITHOUT_BOOTPD
231Do not build or install
232.Xr bootpd 8 .
233.It Va WITHOUT_BSDINSTALL
234Do not build
235.Xr bsdinstall 8 ,
236.Xr sade 8 ,
237and related programs.
238.It Va WITHOUT_BSD_CPIO
239Do not build the BSD licensed version of cpio based on
240.Xr libarchive 3 .
241.It Va WITHOUT_BSNMP
242Do not build or install
243.Xr bsnmpd 1
244and related libraries and data files.
245.It Va WITHOUT_BZIP2
246Do not build contributed bzip2 software as a part of the base system.
247.Bf -symbolic
248The option has no effect yet.
249.Ef
250When set, these options are also in effect:
251.Pp
252.Bl -inset -compact
253.It Va WITHOUT_BZIP2_SUPPORT
254(unless
255.Va WITH_BZIP2_SUPPORT
256is set explicitly)
257.El
258.It Va WITHOUT_BZIP2_SUPPORT
259Build some programs without optional bzip2 support.
260.It Va WITHOUT_CALENDAR
261Do not build
262.Xr calendar 1 .
263.It Va WITHOUT_CAPSICUM
264Do not build Capsicum support into system programs.
265When set, it enforces these options:
266.Pp
267.Bl -item -compact
268.It
269.Va WITHOUT_CASPER
270.El
271.It Va WITHOUT_CAROOT
272Do not add the trusted certificates from the Mozilla NSS bundle to
273base.
274.It Va WITHOUT_CASPER
275Do not build Casper program and related libraries.
276.It Va WITH_CCACHE_BUILD
277Use
278.Xr ccache 1
279for the build.
280No configuration is required except to install the
281.Sy devel/ccache
282package.
283When using with
284.Xr distcc 1 ,
285set
286.Sy CCACHE_PREFIX=/usr/local/bin/distcc .
287The default cache directory of
288.Pa $HOME/.ccache
289will be used, which can be overridden by setting
290.Sy CCACHE_DIR .
291The
292.Sy CCACHE_COMPILERCHECK
293option defaults to
294.Sy content
295when using the in-tree bootstrap compiler,
296and
297.Sy mtime
298when using an external compiler.
299The
300.Sy CCACHE_CPP2
301option is used for Clang but not GCC.
302.Pp
303Sharing a cache between multiple work directories requires using a layout
304similar to
305.Pa /some/prefix/src
306.Pa /some/prefix/obj
307and an environment such as:
308.Bd -literal -offset indent
309CCACHE_BASEDIR='${SRCTOP:H}' MAKEOBJDIRPREFIX='${SRCTOP:H}/obj'
310.Ed
311.Pp
312See
313.Xr ccache 1
314for more configuration options.
315.It Va WITHOUT_CCD
316Do not build
317.Xr geom_ccd 4
318and related utilities.
319.It Va WITHOUT_CDDL
320Do not build code licensed under Sun's CDDL.
321When set, it enforces these options:
322.Pp
323.Bl -item -compact
324.It
325.Va WITHOUT_CTF
326.It
327.Va WITHOUT_DTRACE
328.It
329.Va WITHOUT_LOADER_ZFS
330.It
331.Va WITHOUT_ZFS
332.El
333.It Va WITHOUT_CLANG
334Do not build the Clang C/C++ compiler during the regular phase of the build.
335When set, it enforces these options:
336.Pp
337.Bl -item -compact
338.It
339.Va WITHOUT_CLANG_EXTRAS
340.It
341.Va WITHOUT_CLANG_FORMAT
342.It
343.Va WITHOUT_CLANG_FULL
344.It
345.Va WITHOUT_LLVM_COV
346.El
347.Pp
348When set, these options are also in effect:
349.Pp
350.Bl -inset -compact
351.It Va WITHOUT_LLVM_TARGET_AARCH64
352(unless
353.Va WITH_LLVM_TARGET_AARCH64
354is set explicitly)
355.It Va WITHOUT_LLVM_TARGET_ALL
356(unless
357.Va WITH_LLVM_TARGET_ALL
358is set explicitly)
359.It Va WITHOUT_LLVM_TARGET_ARM
360(unless
361.Va WITH_LLVM_TARGET_ARM
362is set explicitly)
363.It Va WITHOUT_LLVM_TARGET_POWERPC
364(unless
365.Va WITH_LLVM_TARGET_POWERPC
366is set explicitly)
367.It Va WITHOUT_LLVM_TARGET_RISCV
368(unless
369.Va WITH_LLVM_TARGET_RISCV
370is set explicitly)
371.El
372.It Va WITHOUT_CLANG_BOOTSTRAP
373Do not build the Clang C/C++ compiler during the bootstrap phase of
374the build.
375To be able to build the system, either gcc or clang bootstrap must be
376enabled unless an alternate compiler is provided via XCC.
377.It Va WITH_CLANG_EXTRAS
378Build additional clang and llvm tools, such as bugpoint and
379clang-format.
380.It Va WITH_CLANG_FORMAT
381Build clang-format.
382.It Va WITHOUT_CLANG_FULL
383Avoid building the ARCMigrate, Rewriter and StaticAnalyzer components of
384the Clang C/C++ compiler.
385.It Va WITHOUT_CLEAN
386Do not clean before building world and/or kernel.
387.It Va WITHOUT_CPP
388Do not build
389.Xr cpp 1 .
390.It Va WITHOUT_CROSS_COMPILER
391Do not build any cross compiler in the cross-tools stage of buildworld.
392When compiling a different version of
393.Fx
394than what is installed on the system, provide an alternate
395compiler with XCC to ensure success.
396When compiling with an identical version of
397.Fx
398to the host, this option may be safely used.
399This option may also be safe when the host version of
400.Fx
401is close to the sources being built, but all bets are off if there have
402been any changes to the toolchain between the versions.
403When set, it enforces these options:
404.Pp
405.Bl -item -compact
406.It
407.Va WITHOUT_CLANG_BOOTSTRAP
408.It
409.Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
410.It
411.Va WITHOUT_LLD_BOOTSTRAP
412.El
413.It Va WITHOUT_CRYPT
414Do not build any crypto code.
415When set, it enforces these options:
416.Pp
417.Bl -item -compact
418.It
419.Va WITHOUT_DMAGENT
420.It
421.Va WITHOUT_KERBEROS
422.It
423.Va WITHOUT_KERBEROS_SUPPORT
424.It
425.Va WITHOUT_LDNS
426.It
427.Va WITHOUT_LDNS_UTILS
428.It
429.Va WITHOUT_LOADER_ZFS
430.It
431.Va WITHOUT_OPENSSH
432.It
433.Va WITHOUT_OPENSSL
434.It
435.Va WITHOUT_OPENSSL_KTLS
436.It
437.Va WITHOUT_PKGBOOTSTRAP
438.It
439.Va WITHOUT_UNBOUND
440.It
441.Va WITHOUT_ZFS
442.El
443.Pp
444When set, these options are also in effect:
445.Pp
446.Bl -inset -compact
447.It Va WITHOUT_GSSAPI
448(unless
449.Va WITH_GSSAPI
450is set explicitly)
451.El
452.It Va WITH_CTF
453Compile with CTF (Compact C Type Format) data.
454CTF data encapsulates a reduced form of debugging information
455similar to DWARF and the venerable stabs and is required for DTrace.
456.It Va WITHOUT_CUSE
457Do not build CUSE-related programs and libraries.
458.It Va WITHOUT_CXGBETOOL
459Do not build
460.Xr cxgbetool 8
461.Pp
462This is a default setting on
463arm/armv6, arm/armv7, powerpc/powerpc and riscv/riscv64.
464.It Va WITH_CXGBETOOL
465Build
466.Xr cxgbetool 8
467.Pp
468This is a default setting on
469amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
470.It Va WITHOUT_DEBUG_FILES
471Avoid building or installing standalone debug files for each
472executable binary and shared library.
473.It Va WITH_DETECT_TZ_CHANGES
474Make the time handling code detect changes to the timezone files.
475.It Va WITHOUT_DIALOG
476Do not build
477.Xr dialog 1 ,
478.Xr dialog 3 ,
479.Xr dpv 1 ,
480and
481.Xr dpv 3 .
482When set, it enforces these options:
483.Pp
484.Bl -item -compact
485.It
486.Va WITHOUT_BSDINSTALL
487.El
488.It Va WITHOUT_DICT
489Do not build the Webster dictionary files.
490.It Va WITH_DIRDEPS_BUILD
491This is an experimental build system.
492For details see
493https://www.crufty.net/sjg/docs/freebsd-meta-mode.htm.
494Build commands can be seen from the top-level with:
495.Dl make show-valid-targets
496The build is driven by dirdeps.mk using
497.Va DIRDEPS
498stored in
499Makefile.depend files found in each directory.
500.Pp
501The build can be started from anywhere, and behaves the same.
502The initial instance of
503.Xr make 1
504recursively reads
505.Va DIRDEPS
506from
507.Pa Makefile.depend ,
508computing a graph of tree dependencies from the current origin.
509Setting
510.Va NO_DIRDEPS
511skips checking dirdep dependencies and will only build in the current
512and child directories.
513.Va NO_DIRDEPS_BELOW
514skips building any dirdeps and only build the current directory.
515.Pp
516This also utilizes the
517.Va WITH_META_MODE
518logic for incremental builds.
519.Pp
520The build hides commands executed unless
521.Va NO_SILENT
522is defined.
523.Pp
524Note that there is currently no mass install feature for this.
525.Pp
526When set, it enforces these options:
527.Pp
528.Bl -item -compact
529.It
530.Va WITH_INSTALL_AS_USER
531.El
532.Pp
533When set, these options are also in effect:
534.Pp
535.Bl -inset -compact
536.It Va WITH_META_MODE
537(unless
538.Va WITHOUT_META_MODE
539is set explicitly)
540.It Va WITH_STAGING
541(unless
542.Va WITHOUT_STAGING
543is set explicitly)
544.It Va WITH_STAGING_MAN
545(unless
546.Va WITHOUT_STAGING_MAN
547is set explicitly)
548.It Va WITH_STAGING_PROG
549(unless
550.Va WITHOUT_STAGING_PROG
551is set explicitly)
552.It Va WITH_SYSROOT
553(unless
554.Va WITHOUT_SYSROOT
555is set explicitly)
556.El
557.Pp
558This must be set in the environment, make command line, or
559.Pa /etc/src-env.conf ,
560not
561.Pa /etc/src.conf .
562.It Va WITH_DIRDEPS_CACHE
563Cache result of dirdeps.mk which can save significant time
564for subsequent builds.
565Depends on
566.Va WITH_DIRDEPS_BUILD .
567.Pp
568This must be set in the environment, make command line, or
569.Pa /etc/src-env.conf ,
570not
571.Pa /etc/src.conf .
572.It Va WITH_DISK_IMAGE_TOOLS_BOOTSTRAP
573Build
574.Xr etdump 1 ,
575.Xr makefs 8
576and
577.Xr mkimg 1
578as bootstrap tools.
579.It Va WITHOUT_DMAGENT
580Do not build dma Mail Transport Agent.
581.It Va WITHOUT_DOCCOMPRESS
582Do not install compressed system documentation.
583Only the uncompressed version will be installed.
584.It Va WITHOUT_DTRACE
585Do not build DTrace framework kernel modules, libraries, and user commands.
586When set, it enforces these options:
587.Pp
588.Bl -item -compact
589.It
590.Va WITHOUT_CTF
591.El
592.It Va WITH_DTRACE_TESTS
593Build and install the DTrace test suite in
594.Pa /usr/tests/cddl/usr.sbin/dtrace .
595This test suite is considered experimental on architectures other than
596amd64/amd64 and running it may cause system instability.
597.It Va WITHOUT_DYNAMICROOT
598Set this if you do not want to link
599.Pa /bin
600and
601.Pa /sbin
602dynamically.
603.It Va WITHOUT_EE
604Do not build and install
605.Xr edit 1 ,
606.Xr ee 1 ,
607and related programs.
608.It Va WITHOUT_EFI
609Set not to build
610.Xr efivar 3
611and
612.Xr efivar 8 .
613.Pp
614This is a default setting on
615powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64.
616.It Va WITH_EFI
617Build
618.Xr efivar 3
619and
620.Xr efivar 8 .
621.Pp
622This is a default setting on
623amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64 and i386/i386.
624.It Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
625Do not build ELF Tool Chain tools
626(addr2line, nm, size, strings and strip)
627as part of the bootstrap process.
628.Bf -symbolic
629An alternate bootstrap tool chain must be provided.
630.Ef
631.It Va WITHOUT_EXAMPLES
632Avoid installing examples to
633.Pa /usr/share/examples/ .
634.It Va WITH_EXPERIMENTAL
635Include experimental features in the build.
636.It Va WITH_EXTRA_TCP_STACKS
637Build extra TCP stack modules.
638.It Va WITHOUT_FDT
639Do not build Flattened Device Tree support as part of the base system.
640This includes the device tree compiler (dtc) and libfdt support library.
641.Pp
642This is a default setting on
643amd64/amd64 and i386/i386.
644.It Va WITH_FDT
645Build Flattened Device Tree support as part of the base system.
646This includes the device tree compiler (dtc) and libfdt support library.
647.Pp
648This is a default setting on
649arm/armv6, arm/armv7, arm64/aarch64, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64.
650.It Va WITHOUT_FILE
651Do not build
652.Xr file 1
653and related programs.
654.It Va WITHOUT_FINGER
655Do not build or install
656.Xr finger 1
657and
658.Xr fingerd 8 .
659.It Va WITHOUT_FLOPPY
660Do not build or install programs
661for operating floppy disk driver.
662.It Va WITHOUT_FORMAT_EXTENSIONS
663Do not enable
664.Fl fformat-extensions
665when compiling the kernel.
666Also disables all format checking.
667.It Va WITHOUT_FORTH
668Build bootloaders without Forth support.
669.It Va WITHOUT_FP_LIBC
670Build
671.Nm libc
672without floating-point support.
673.It Va WITHOUT_FREEBSD_UPDATE
674Do not build
675.Xr freebsd-update 8 .
676.It Va WITHOUT_FTP
677Do not build or install
678.Xr ftp 1
679and
680.Xr ftpd 8 .
681.It Va WITHOUT_GAMES
682Do not build games.
683.It Va WITHOUT_GH_BC
684Install the traditional FreeBSD
685.Xr bc 1
686and
687.Xr dc 1
688programs instead of the enhanced versions.
689.It Va WITHOUT_GNU_DIFF
690Do not build GNU
691.Xr diff3 1 .
692.It Va WITHOUT_GOOGLETEST
693Neither build nor install
694.Lb libgmock ,
695.Lb libgtest ,
696and dependent tests.
697.It Va WITHOUT_GPIO
698Do not build
699.Xr gpioctl 8
700as part of the base system.
701.It Va WITHOUT_GSSAPI
702Do not build libgssapi.
703.It Va WITHOUT_HAST
704Do not build
705.Xr hastd 8
706and related utilities.
707.It Va WITH_HESIOD
708Build Hesiod support.
709.It Va WITHOUT_HTML
710Do not build HTML docs.
711.It Va WITHOUT_HYPERV
712Do not build or install HyperV utilities.
713.Pp
714This is a default setting on
715arm/armv6, arm/armv7, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64.
716.It Va WITH_HYPERV
717Build or install HyperV utilities.
718.Pp
719This is a default setting on
720amd64/amd64, arm64/aarch64 and i386/i386.
721.It Va WITHOUT_ICONV
722Do not build iconv as part of libc.
723.It Va WITHOUT_INCLUDES
724Do not install header files.
725This option used to be spelled
726.Va NO_INCS .
727.Bf -symbolic
728The option does not work for build targets.
729.Ef
730.It Va WITHOUT_INET
731Do not build programs and libraries related to IPv4 networking.
732When set, it enforces these options:
733.Pp
734.Bl -item -compact
735.It
736.Va WITHOUT_INET_SUPPORT
737.El
738.It Va WITHOUT_INET6
739Do not build
740programs and libraries related to IPv6 networking.
741When set, it enforces these options:
742.Pp
743.Bl -item -compact
744.It
745.Va WITHOUT_INET6_SUPPORT
746.El
747.It Va WITHOUT_INET6_SUPPORT
748Build libraries, programs, and kernel modules without IPv6 support.
749.It Va WITHOUT_INETD
750Do not build
751.Xr inetd 8 .
752.It Va WITHOUT_INET_SUPPORT
753Build libraries, programs, and kernel modules without IPv4 support.
754.It Va WITH_INIT_ALL_PATTERN
755Build the base system or kernel with stack variables initialized to
756.Pq compiler defined
757debugging patterns on function entry.
758This option requires the clang compiler.
759.It Va WITH_INIT_ALL_ZERO
760Build the base system or kernel with stack variables initialized
761to zero on function entry.
762This option requires that the clang compiler be used.
763.It Va WITHOUT_INSTALLLIB
764Set this to not install optional libraries.
765For example, when creating a
766.Xr nanobsd 8
767image.
768.Bf -symbolic
769The option does not work for build targets.
770.Ef
771.It Va WITH_INSTALL_AS_USER
772Make install targets succeed for non-root users by installing
773files with owner and group attributes set to that of the user running
774the
775.Xr make 1
776command.
777The user still must set the
778.Va DESTDIR
779variable to point to a directory where the user has write permissions.
780.It Va WITHOUT_IPFILTER
781Do not build IP Filter package.
782.It Va WITHOUT_IPFW
783Do not build IPFW tools.
784.It Va WITHOUT_IPSEC_SUPPORT
785Do not build the kernel with
786.Xr ipsec 4
787support.
788This option is needed for
789.Xr ipsec 4
790and
791.Xr tcpmd5 4 .
792.It Va WITHOUT_ISCSI
793Do not build
794.Xr iscsid 8
795and related utilities.
796.It Va WITHOUT_JAIL
797Do not build tools for the support of jails; e.g.,
798.Xr jail 8 .
799.It Va WITHOUT_KDUMP
800Do not build
801.Xr kdump 1
802and
803.Xr truss 1 .
804.It Va WITHOUT_KERBEROS
805Set this to not build Kerberos 5 (KTH Heimdal).
806When set, these options are also in effect:
807.Pp
808.Bl -inset -compact
809.It Va WITHOUT_GSSAPI
810(unless
811.Va WITH_GSSAPI
812is set explicitly)
813.It Va WITHOUT_KERBEROS_SUPPORT
814(unless
815.Va WITH_KERBEROS_SUPPORT
816is set explicitly)
817.El
818.It Va WITHOUT_KERBEROS_SUPPORT
819Build some programs without Kerberos support, like
820.Xr ssh 1 ,
821.Xr telnet 1 ,
822and
823.Xr sshd 8 .
824.It Va WITH_KERNEL_RETPOLINE
825Enable the "retpoline" mitigation for CVE-2017-5715 in the kernel
826build.
827.It Va WITHOUT_KERNEL_SYMBOLS
828Do not install standalone kernel debug symbol files.
829This option has no effect at build time.
830.It Va WITHOUT_KVM
831Do not build the
832.Nm libkvm
833library as a part of the base system.
834.Bf -symbolic
835The option has no effect yet.
836.Ef
837When set, these options are also in effect:
838.Pp
839.Bl -inset -compact
840.It Va WITHOUT_KVM_SUPPORT
841(unless
842.Va WITH_KVM_SUPPORT
843is set explicitly)
844.El
845.It Va WITHOUT_KVM_SUPPORT
846Build some programs without optional
847.Nm libkvm
848support.
849.It Va WITHOUT_LDNS
850Setting this variable will prevent the LDNS library from being built.
851When set, it enforces these options:
852.Pp
853.Bl -item -compact
854.It
855.Va WITHOUT_LDNS_UTILS
856.It
857.Va WITHOUT_UNBOUND
858.El
859.It Va WITHOUT_LDNS_UTILS
860Setting this variable will prevent building the LDNS utilities
861.Xr drill 1
862and
863.Xr host 1 .
864.It Va WITHOUT_LEGACY_CONSOLE
865Do not build programs that support a legacy PC console; e.g.,
866.Xr kbdcontrol 1
867and
868.Xr vidcontrol 1 .
869.It Va WITHOUT_LIB32
870On 64-bit platforms, do not build 32-bit library set and a
871.Nm ld-elf32.so.1
872runtime linker.
873.Pp
874This is a default setting on
875arm/armv6, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64le and riscv/riscv64.
876.It Va WITH_LIB32
877On 64-bit platforms, build the 32-bit library set and a
878.Nm ld-elf32.so.1
879runtime linker.
880.Pp
881This is a default setting on
882amd64/amd64 and powerpc/powerpc64.
883.It Va WITHOUT_LLD
884Do not build LLVM's lld linker.
885.It Va WITHOUT_LLDB
886Do not build the LLDB debugger.
887.Pp
888This is a default setting on
889arm/armv6, arm/armv7 and riscv/riscv64.
890.It Va WITH_LLDB
891Build the LLDB debugger.
892.Pp
893This is a default setting on
894amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
895.It Va WITHOUT_LLD_BOOTSTRAP
896Do not build the LLD linker during the bootstrap phase of
897the build.
898To be able to build the system an alternate linker must be provided via XLD.
899.It Va WITHOUT_LLD_IS_LD
900Do not install a
901.Pa /usr/bin/ld symlink
902to
903.Pa ld.lld .
904The system will not have a usable tool chain unless a linker is provided
905some other way.
906.It Va WITHOUT_LLVM_ASSERTIONS
907Disable debugging assertions in LLVM.
908.It Va WITH_LLVM_BINUTILS
909Install LLVM's binutils (without an llvm- prefix),
910instead of ELF Tool Chain's tools.
911This includes
912.Xr addr2line 1 ,
913.Xr ar 1 ,
914.Xr nm 1 ,
915.Xr objcopy 1 ,
916.Xr ranlib 1 ,
917.Xr readelf 1 ,
918.Xr size 1 ,
919and
920.Xr strip 1 .
921Regardless of this setting, LLVM tools are used for
922.Xr c++filt 1
923and
924.Xr objdump 1 .
925.Xr strings 1
926is always provided by ELF Tool Chain.
927.It Va WITHOUT_LLVM_COV
928Do not build the
929.Xr llvm-cov 1
930tool.
931.It Va WITHOUT_LLVM_CXXFILT
932Install ELF Tool Chain's cxxfilt as c++filt, instead of LLVM's llvm-cxxfilt.
933.It Va WITHOUT_LLVM_TARGET_AARCH64
934Do not build LLVM target support for AArch64.
935The
936.Va LLVM_TARGET_ALL
937option should be used rather than this in most cases.
938.It Va WITHOUT_LLVM_TARGET_ALL
939Only build the required LLVM target support.
940This option is preferred to specific target support options.
941When set, these options are also in effect:
942.Pp
943.Bl -inset -compact
944.It Va WITHOUT_LLVM_TARGET_AARCH64
945(unless
946.Va WITH_LLVM_TARGET_AARCH64
947is set explicitly)
948.It Va WITHOUT_LLVM_TARGET_ARM
949(unless
950.Va WITH_LLVM_TARGET_ARM
951is set explicitly)
952.It Va WITHOUT_LLVM_TARGET_POWERPC
953(unless
954.Va WITH_LLVM_TARGET_POWERPC
955is set explicitly)
956.It Va WITHOUT_LLVM_TARGET_RISCV
957(unless
958.Va WITH_LLVM_TARGET_RISCV
959is set explicitly)
960.El
961.It Va WITHOUT_LLVM_TARGET_ARM
962Do not build LLVM target support for ARM.
963The
964.Va LLVM_TARGET_ALL
965option should be used rather than this in most cases.
966.It Va WITH_LLVM_TARGET_BPF
967Build LLVM target support for BPF.
968The
969.Va LLVM_TARGET_ALL
970option should be used rather than this in most cases.
971.It Va WITH_LLVM_TARGET_MIPS
972Build LLVM target support for MIPS.
973The
974.Va LLVM_TARGET_ALL
975option should be used rather than this in most cases.
976.It Va WITHOUT_LLVM_TARGET_POWERPC
977Do not build LLVM target support for PowerPC.
978The
979.Va LLVM_TARGET_ALL
980option should be used rather than this in most cases.
981.It Va WITHOUT_LLVM_TARGET_RISCV
982Do not build LLVM target support for RISC-V.
983The
984.Va LLVM_TARGET_ALL
985option should be used rather than this in most cases.
986.It Va WITHOUT_LLVM_TARGET_X86
987Do not build LLVM target support for X86.
988The
989.Va LLVM_TARGET_ALL
990option should be used rather than this in most cases.
991.It Va WITH_LOADER_EFI_SECUREBOOT
992Enable building
993.Xr loader 8
994with support for verification based on certificates obtained from UEFI.
995.It Va WITHOUT_LOADER_GELI
996Disable inclusion of GELI crypto support in the boot chain binaries.
997.Pp
998This is a default setting on
999powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
1000.It Va WITH_LOADER_GELI
1001Build GELI bootloader support.
1002.Pp
1003This is a default setting on
1004amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386 and riscv/riscv64.
1005.It Va WITHOUT_LOADER_KBOOT
1006Do not build kboot, a linuxboot environment loader
1007.Pp
1008This is a default setting on
1009arm/armv6, arm/armv7, i386/i386, powerpc/powerpc, powerpc/powerpc64le and riscv/riscv64.
1010.It Va WITH_LOADER_KBOOT
1011Build kboot, a linuxboot environment loader
1012.Pp
1013This is a default setting on
1014amd64/amd64, arm64/aarch64 and powerpc/powerpc64.
1015.It Va WITHOUT_LOADER_LUA
1016Do not build LUA bindings for the boot loader.
1017.Pp
1018This is a default setting on
1019powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
1020.It Va WITH_LOADER_LUA
1021Build LUA bindings for the boot loader.
1022.Pp
1023This is a default setting on
1024amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386 and riscv/riscv64.
1025.It Va WITHOUT_LOADER_OFW
1026Disable building of openfirmware bootloader components.
1027.Pp
1028This is a default setting on
1029amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386 and riscv/riscv64.
1030.It Va WITH_LOADER_OFW
1031Build openfirmware bootloader components.
1032.Pp
1033This is a default setting on
1034powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
1035.It Va WITHOUT_LOADER_UBOOT
1036Disable building of ubldr.
1037.Pp
1038This is a default setting on
1039amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64le and riscv/riscv64.
1040.It Va WITH_LOADER_UBOOT
1041Build ubldr.
1042.Pp
1043This is a default setting on
1044arm/armv6, arm/armv7, powerpc/powerpc and powerpc/powerpc64.
1045.It Va WITH_LOADER_VERBOSE
1046Build with extra verbose debugging in the loader.
1047May explode already nearly too large loader over the limit.
1048Use with care.
1049.It Va WITH_LOADER_VERIEXEC
1050Enable building
1051.Xr loader 8
1052with support for verification similar to Verified Exec.
1053.Pp
1054Depends on
1055.Va WITH_BEARSSL .
1056When set, these options are also in effect:
1057.Pp
1058.Bl -inset -compact
1059.It Va WITH_LOADER_EFI_SECUREBOOT
1060(unless
1061.Va WITHOUT_LOADER_EFI_SECUREBOOT
1062is set explicitly)
1063.It Va WITH_LOADER_VERIEXEC_VECTX
1064(unless
1065.Va WITHOUT_LOADER_VERIEXEC_VECTX
1066is set explicitly)
1067.El
1068.It Va WITH_LOADER_VERIEXEC_PASS_MANIFEST
1069Enable building
1070.Xr loader 8
1071with support to pass a verified manifest to the kernel.
1072The kernel has to be built with a module to parse the manifest.
1073.Pp
1074Depends on
1075.Va WITH_LOADER_VERIEXEC .
1076.It Va WITH_LOADER_VERIEXEC_VECTX
1077Enable building
1078.Xr loader 8
1079with support for hashing and verifying kernel and modules as a side effect
1080of loading.
1081.Pp
1082Depends on
1083.Va WITH_LOADER_VERIEXEC .
1084.It Va WITHOUT_LOADER_ZFS
1085Do not build ZFS file system boot loader support.
1086.It Va WITHOUT_LOCALES
1087Do not build localization files; see
1088.Xr locale 1 .
1089.It Va WITHOUT_LOCATE
1090Do not build
1091.Xr locate 1
1092and related programs.
1093.It Va WITHOUT_LPR
1094Do not build
1095.Xr lpr 1
1096and related programs.
1097.It Va WITHOUT_LS_COLORS
1098Build
1099.Xr ls 1
1100without support for colors to distinguish file types.
1101.It Va WITHOUT_MACHDEP_OPTIMIZATIONS
1102Prefer machine-independent non-assembler code in libc and libm.
1103.It Va WITHOUT_MAIL
1104Do not build any mail support (MUA or MTA).
1105When set, it enforces these options:
1106.Pp
1107.Bl -item -compact
1108.It
1109.Va WITHOUT_DMAGENT
1110.It
1111.Va WITHOUT_MAILWRAPPER
1112.It
1113.Va WITHOUT_SENDMAIL
1114.El
1115.It Va WITHOUT_MAILWRAPPER
1116Do not build the
1117.Xr mailwrapper 8
1118MTA selector.
1119.It Va WITHOUT_MAKE
1120Do not install
1121.Xr make 1
1122and related support files.
1123.It Va WITHOUT_MAKE_CHECK_USE_SANDBOX
1124Do not execute
1125.Dq Li "make check"
1126in limited sandbox mode.
1127This option should be paired with
1128.Va WITH_INSTALL_AS_USER
1129if executed as an unprivileged user.
1130See
1131.Xr tests 7
1132for more details.
1133.It Va WITH_MALLOC_PRODUCTION
1134Disable assertions and statistics gathering in
1135.Xr malloc 3 .
1136It also defaults the A and J runtime options to off.
1137.It Va WITHOUT_MAN
1138Do not build manual pages.
1139When set, these options are also in effect:
1140.Pp
1141.Bl -inset -compact
1142.It Va WITHOUT_MAN_UTILS
1143(unless
1144.Va WITH_MAN_UTILS
1145is set explicitly)
1146.El
1147.It Va WITHOUT_MANCOMPRESS
1148Do not install compressed man pages.
1149Only the uncompressed versions will be installed.
1150.It Va WITH_MANSPLITPKG
1151Split man pages into their own packages during make package.
1152.It Va WITHOUT_MAN_UTILS
1153Do not build utilities for manual pages,
1154.Xr apropos 1 ,
1155.Xr makewhatis 1 ,
1156.Xr man 1 ,
1157.Xr whatis 1 ,
1158.Xr manctl 8 ,
1159and related support files.
1160.It Va WITH_META_MODE
1161Create
1162.Xr make 1
1163meta files when building, which can provide a reliable incremental build when
1164using
1165.Xr filemon 4 .
1166The meta file is created in OBJDIR as
1167.Pa target.meta .
1168These meta files track the command that was executed, its output, and the
1169current directory.
1170The
1171.Xr filemon 4
1172module is required unless
1173.Va NO_FILEMON
1174is defined.
1175When the module is loaded, any files used by the commands executed are
1176tracked as dependencies for the target in its meta file.
1177The target is considered out-of-date and rebuilt if any of these
1178conditions are true compared to the last build:
1179.Bl -bullet -compact
1180.It
1181The command to execute changes.
1182.It
1183The current working directory changes.
1184.It
1185The target's meta file is missing.
1186.It
1187The target's meta file is missing filemon data when filemon is loaded
1188and a previous run did not have it loaded.
1189.It
1190[requires
1191.Xr filemon 4 ]
1192Files read, executed or linked to are newer than the target.
1193.It
1194[requires
1195.Xr filemon 4 ]
1196Files read, written, executed or linked are missing.
1197.El
1198The meta files can also be useful for debugging.
1199.Pp
1200The build hides commands that are executed unless
1201.Va NO_SILENT
1202is defined.
1203Errors cause
1204.Xr make 1
1205to show some of its environment for further debugging.
1206.Pp
1207The build operates as it normally would otherwise.
1208This option originally invoked a different build system but that was renamed
1209to
1210.Va WITH_DIRDEPS_BUILD .
1211.Pp
1212This must be set in the environment, make command line, or
1213.Pa /etc/src-env.conf ,
1214not
1215.Pa /etc/src.conf .
1216.It Va WITHOUT_MLX5TOOL
1217Do not build
1218.Xr mlx5tool 8
1219.Pp
1220This is a default setting on
1221arm/armv6, arm/armv7, powerpc/powerpc and riscv/riscv64.
1222.It Va WITH_MLX5TOOL
1223Build
1224.Xr mlx5tool 8
1225.Pp
1226This is a default setting on
1227amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
1228.It Va WITHOUT_NETCAT
1229Do not build
1230.Xr nc 1
1231utility.
1232.It Va WITHOUT_NETGRAPH
1233Do not build applications to support
1234.Xr netgraph 4 .
1235When set, it enforces these options:
1236.Pp
1237.Bl -item -compact
1238.It
1239.Va WITHOUT_BLUETOOTH
1240.El
1241.Pp
1242When set, these options are also in effect:
1243.Pp
1244.Bl -inset -compact
1245.It Va WITHOUT_NETGRAPH_SUPPORT
1246(unless
1247.Va WITH_NETGRAPH_SUPPORT
1248is set explicitly)
1249.El
1250.It Va WITHOUT_NETGRAPH_SUPPORT
1251Build libraries, programs, and kernel modules without netgraph support.
1252.It Va WITHOUT_NETLINK_SUPPORT
1253Make libraries and programs use rtsock and
1254.Xr sysctl 3
1255interfaces instead of
1256.Xr snl 3 .
1257.It Va WITHOUT_NIS
1258Do not build
1259.Xr NIS 8
1260support and related programs.
1261If set, you might need to adopt your
1262.Xr nsswitch.conf 5
1263and remove
1264.Sq nis
1265entries.
1266.It Va WITHOUT_NLS
1267Do not build NLS catalogs.
1268When set, it enforces these options:
1269.Pp
1270.Bl -item -compact
1271.It
1272.Va WITHOUT_NLS_CATALOGS
1273.El
1274.It Va WITHOUT_NLS_CATALOGS
1275Do not build NLS catalog support for
1276.Xr csh 1 .
1277.It Va WITHOUT_NS_CACHING
1278Disable name caching in the
1279.Pa nsswitch
1280subsystem.
1281The generic caching daemon,
1282.Xr nscd 8 ,
1283will not be built either if this option is set.
1284.It Va WITHOUT_NTP
1285Do not build
1286.Xr ntpd 8
1287and related programs.
1288.It Va WITHOUT_NVME
1289Do not build nvme related tools and kernel modules.
1290.Pp
1291This is a default setting on
1292arm/armv6, arm/armv7, powerpc/powerpc and riscv/riscv64.
1293.It Va WITH_NVME
1294Build nvme related tools and kernel modules.
1295.Pp
1296This is a default setting on
1297amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
1298.It Va WITHOUT_OFED
1299Do not build the
1300.Dq "OpenFabrics Enterprise Distribution"
1301InfiniBand software stack, including kernel modules and userspace libraries.
1302.Pp
1303This is a default setting on
1304arm/armv6 and arm/armv7.
1305When set, it enforces these options:
1306.Pp
1307.Bl -item -compact
1308.It
1309.Va WITHOUT_OFED_EXTRA
1310.El
1311.It Va WITH_OFED
1312Build the
1313.Dq "OpenFabrics Enterprise Distribution"
1314InfiniBand software stack, including kernel modules and userspace libraries.
1315.Pp
1316This is a default setting on
1317amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64.
1318.It Va WITH_OFED_EXTRA
1319Build the non-essential components of the
1320.Dq "OpenFabrics Enterprise Distribution"
1321Infiniband software stack, mostly examples.
1322.It Va WITH_OPENLDAP
1323Enable building LDAP support for kerberos using an openldap client from ports.
1324.It Va WITHOUT_OPENMP
1325Do not build LLVM's OpenMP runtime.
1326.Pp
1327This is a default setting on
1328arm/armv6, arm/armv7 and powerpc/powerpc.
1329.It Va WITH_OPENMP
1330Build LLVM's OpenMP runtime.
1331.Pp
1332This is a default setting on
1333amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64.
1334.It Va WITHOUT_OPENSSH
1335Do not build OpenSSH.
1336.It Va WITHOUT_OPENSSL
1337Do not build OpenSSL.
1338When set, it enforces these options:
1339.Pp
1340.Bl -item -compact
1341.It
1342.Va WITHOUT_DMAGENT
1343.It
1344.Va WITHOUT_KERBEROS
1345.It
1346.Va WITHOUT_KERBEROS_SUPPORT
1347.It
1348.Va WITHOUT_LDNS
1349.It
1350.Va WITHOUT_LDNS_UTILS
1351.It
1352.Va WITHOUT_LOADER_ZFS
1353.It
1354.Va WITHOUT_OPENSSH
1355.It
1356.Va WITHOUT_OPENSSL_KTLS
1357.It
1358.Va WITHOUT_PKGBOOTSTRAP
1359.It
1360.Va WITHOUT_UNBOUND
1361.It
1362.Va WITHOUT_ZFS
1363.El
1364.Pp
1365When set, these options are also in effect:
1366.Pp
1367.Bl -inset -compact
1368.It Va WITHOUT_GSSAPI
1369(unless
1370.Va WITH_GSSAPI
1371is set explicitly)
1372.El
1373.It Va WITHOUT_OPENSSL_KTLS
1374Do not include kernel TLS support in OpenSSL.
1375.Pp
1376This is a default setting on
1377arm/armv6, arm/armv7, i386/i386, powerpc/powerpc and riscv/riscv64.
1378.It Va WITH_OPENSSL_KTLS
1379Include kernel TLS support in OpenSSL.
1380.Pp
1381This is a default setting on
1382amd64/amd64, arm64/aarch64, powerpc/powerpc64 and powerpc/powerpc64le.
1383.It Va WITHOUT_PAM
1384Do not build PAM library and modules.
1385.Bf -symbolic
1386This option is deprecated and does nothing.
1387.Ef
1388When set, these options are also in effect:
1389.Pp
1390.Bl -inset -compact
1391.It Va WITHOUT_PAM_SUPPORT
1392(unless
1393.Va WITH_PAM_SUPPORT
1394is set explicitly)
1395.El
1396.It Va WITHOUT_PAM_SUPPORT
1397Build some programs without PAM support, particularly
1398.Xr ftpd 8
1399and
1400.Xr ppp 8 .
1401.It Va WITHOUT_PF
1402Do not build PF firewall package.
1403When set, it enforces these options:
1404.Pp
1405.Bl -item -compact
1406.It
1407.Va WITHOUT_AUTHPF
1408.El
1409.It Va WITHOUT_PIE
1410Do not build dynamically linked binaries as
1411Position-Independent Executable (PIE).
1412.Pp
1413This is a default setting on
1414arm/armv6, arm/armv7, i386/i386 and powerpc/powerpc.
1415.It Va WITH_PIE
1416Build dynamically linked binaries as
1417Position-Independent Executable (PIE).
1418.Pp
1419This is a default setting on
1420amd64/amd64, arm64/aarch64, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64.
1421.It Va WITHOUT_PKGBOOTSTRAP
1422Do not build
1423.Xr pkg 7
1424bootstrap tool.
1425.It Va WITHOUT_PMC
1426Do not build
1427.Xr pmccontrol 8
1428and related programs.
1429.It Va WITHOUT_PPP
1430Do not build
1431.Xr ppp 8
1432and related programs.
1433.It Va WITH_PROFILE
1434Build profiled libraries for use with
1435.Xr gprof 8 .
1436This option is deprecated and may not be present in a future version of
1437.Fx .
1438.It Va WITHOUT_QUOTAS
1439Do not build
1440.Xr quota 1
1441and related programs.
1442.It Va WITHOUT_RADIUS_SUPPORT
1443Do not build radius support into various applications, like
1444.Xr pam_radius 8
1445and
1446.Xr ppp 8 .
1447.It Va WITH_RATELIMIT
1448Build the system with rate limit support.
1449.Pp
1450This makes
1451.Dv SO_MAX_PACING_RATE
1452effective in
1453.Xr getsockopt 2 ,
1454and
1455.Ar txrlimit
1456support in
1457.Xr ifconfig 8 ,
1458by proxy.
1459.It Va WITHOUT_RBOOTD
1460Do not build or install
1461.Xr rbootd 8 .
1462.It Va WITHOUT_RELRO
1463Do not apply the Relocation Read-Only (RELRO) vulnerability mitigation.
1464See also the
1465.Va BIND_NOW
1466option.
1467.It Va WITH_REPRODUCIBLE_BUILD
1468Exclude build metadata (such as the build time, user, or host)
1469from the kernel, boot loaders, and uname output, so that builds produce
1470bit-for-bit identical output.
1471.It Va WITHOUT_RESCUE
1472Do not build
1473.Xr rescue 8 .
1474.It Va WITH_RETPOLINE
1475Build the base system with the retpoline speculative execution
1476vulnerability mitigation for CVE-2017-5715.
1477.It Va WITHOUT_ROUTED
1478Do not build
1479.Xr routed 8
1480utility.
1481.It Va WITH_RPCBIND_WARMSTART_SUPPORT
1482Build
1483.Xr rpcbind 8
1484with warmstart support.
1485.It Va WITHOUT_SCTP_SUPPORT
1486Disable support in the kernel for the
1487.Xr sctp 4
1488Stream Control Transmission Protocol
1489loadable kernel module.
1490.It Va WITHOUT_SENDMAIL
1491Do not build
1492.Xr sendmail 8
1493and related programs.
1494.It Va WITHOUT_SERVICESDB
1495Do not install
1496.Pa /var/db/services.db .
1497.It Va WITHOUT_SETUID_LOGIN
1498Set this to disable the installation of
1499.Xr login 1
1500as a set-user-ID root program.
1501.It Va WITHOUT_SHAREDOCS
1502Do not build the
1503.Bx 4.4
1504legacy docs.
1505.It Va WITHOUT_SHARED_TOOLCHAIN
1506Build the toolchain binaries as statically linked executables.
1507The set includes
1508.Xr cc 1 ,
1509.Xr make 1
1510and necessary utilities like assembler, linker and library archive manager.
1511.It Va WITH_SORT_THREADS
1512Enable threads in
1513.Xr sort 1 .
1514.It Va WITHOUT_SOURCELESS
1515Do not build kernel modules that include sourceless code (either microcode or native code for host CPU).
1516When set, it enforces these options:
1517.Pp
1518.Bl -item -compact
1519.It
1520.Va WITHOUT_SOURCELESS_HOST
1521.It
1522.Va WITHOUT_SOURCELESS_UCODE
1523.El
1524.It Va WITHOUT_SOURCELESS_HOST
1525Do not build kernel modules that include sourceless native code for host CPU.
1526.It Va WITHOUT_SOURCELESS_UCODE
1527Do not build kernel modules that include sourceless microcode.
1528.It Va WITHOUT_SPLIT_KERNEL_DEBUG
1529Do not build standalone kernel debug files.
1530Debug data (if enabled by the kernel configuration file)
1531will be included in the kernel and modules.
1532When set, it enforces these options:
1533.Pp
1534.Bl -item -compact
1535.It
1536.Va WITHOUT_KERNEL_SYMBOLS
1537.El
1538.It Va WITHOUT_SSP
1539Do not build world with propolice stack smashing protection.
1540.It Va WITH_STAGING
1541Enable staging of files to a stage tree.
1542This can be best thought of as auto-install to
1543.Va DESTDIR
1544with some extra meta data to ensure dependencies can be tracked.
1545Depends on
1546.Va WITH_DIRDEPS_BUILD .
1547When set, these options are also in effect:
1548.Pp
1549.Bl -inset -compact
1550.It Va WITH_STAGING_MAN
1551(unless
1552.Va WITHOUT_STAGING_MAN
1553is set explicitly)
1554.It Va WITH_STAGING_PROG
1555(unless
1556.Va WITHOUT_STAGING_PROG
1557is set explicitly)
1558.El
1559.Pp
1560This must be set in the environment, make command line, or
1561.Pa /etc/src-env.conf ,
1562not
1563.Pa /etc/src.conf .
1564.It Va WITH_STAGING_MAN
1565Enable staging of man pages to stage tree.
1566.It Va WITH_STAGING_PROG
1567Enable staging of PROGs to stage tree.
1568.It Va WITH_STALE_STAGED
1569Check staged files are not stale.
1570.It Va WITHOUT_STATS
1571Neither build nor install
1572.Lb libstats
1573and dependent binaries.
1574.It Va WITHOUT_SYSCONS
1575Do not build
1576.Xr syscons 4
1577support files such as keyboard maps, fonts, and screen output maps.
1578.It Va WITH_SYSROOT
1579Enable use of sysroot during build.
1580Depends on
1581.Va WITH_DIRDEPS_BUILD .
1582.Pp
1583This must be set in the environment, make command line, or
1584.Pa /etc/src-env.conf ,
1585not
1586.Pa /etc/src.conf .
1587.It Va WITHOUT_SYSTEM_COMPILER
1588Do not opportunistically skip building a cross-compiler during the
1589bootstrap phase of the build.
1590Normally, if the currently installed compiler matches the planned bootstrap
1591compiler type and revision, then it will not be built.
1592This does not prevent a compiler from being built for installation though,
1593only for building one for the build itself.
1594The
1595.Va WITHOUT_CLANG
1596option controls that.
1597.It Va WITHOUT_SYSTEM_LINKER
1598Do not opportunistically skip building a cross-linker during the
1599bootstrap phase of the build.
1600Normally, if the currently installed linker matches the planned bootstrap
1601linker type and revision, then it will not be built.
1602This does not prevent a linker from being built for installation though,
1603only for building one for the build itself.
1604The
1605.Va WITHOUT_LLD
1606option controls that.
1607.Pp
1608This option is only relevant when
1609.Va WITH_LLD_BOOTSTRAP
1610is set.
1611.It Va WITHOUT_TALK
1612Do not build or install
1613.Xr talk 1
1614and
1615.Xr talkd 8 .
1616.It Va WITHOUT_TCP_WRAPPERS
1617Do not build or install
1618.Xr tcpd 8 ,
1619and related utilities.
1620.It Va WITHOUT_TCSH
1621Do not build and install
1622.Pa /bin/csh
1623(which is
1624.Xr tcsh 1 ) .
1625.It Va WITHOUT_TELNET
1626Do not build
1627.Xr telnet 1
1628and related programs.
1629.It Va WITHOUT_TESTS
1630Do not build nor install the
1631.Fx
1632Test Suite in
1633.Pa /usr/tests/ .
1634See
1635.Xr tests 7
1636for more details.
1637This also disables the build of all test-related dependencies, including ATF.
1638When set, it enforces these options:
1639.Pp
1640.Bl -item -compact
1641.It
1642.Va WITHOUT_DTRACE_TESTS
1643.El
1644.Pp
1645When set, these options are also in effect:
1646.Pp
1647.Bl -inset -compact
1648.It Va WITHOUT_GOOGLETEST
1649(unless
1650.Va WITH_GOOGLETEST
1651is set explicitly)
1652.It Va WITHOUT_TESTS_SUPPORT
1653(unless
1654.Va WITH_TESTS_SUPPORT
1655is set explicitly)
1656.El
1657.It Va WITHOUT_TESTS_SUPPORT
1658Disable the build of all test-related dependencies, including ATF.
1659When set, it enforces these options:
1660.Pp
1661.Bl -item -compact
1662.It
1663.Va WITHOUT_GOOGLETEST
1664.El
1665.It Va WITHOUT_TEXTPROC
1666Do not build
1667programs used for text processing.
1668.It Va WITHOUT_TFTP
1669Do not build or install
1670.Xr tftp 1
1671and
1672.Xr tftpd 8 .
1673.It Va WITHOUT_TOOLCHAIN
1674Do not install
1675programs used for program development,
1676compilers, debuggers etc.
1677When set, it enforces these options:
1678.Pp
1679.Bl -item -compact
1680.It
1681.Va WITHOUT_CLANG
1682.It
1683.Va WITHOUT_CLANG_EXTRAS
1684.It
1685.Va WITHOUT_CLANG_FORMAT
1686.It
1687.Va WITHOUT_CLANG_FULL
1688.It
1689.Va WITHOUT_LLD
1690.It
1691.Va WITHOUT_LLDB
1692.It
1693.Va WITHOUT_LLVM_COV
1694.El
1695.It Va WITH_UBSAN
1696Build the base system with Undefined Behavior Sanitizer (UBSan) to detect
1697various kinds of undefined behavior at runtime.
1698Requires that Clang be used as the base system compiler
1699and that the runtime support library is available
1700.It Va WITHOUT_UNBOUND
1701Do not build
1702.Xr unbound 8
1703and related programs.
1704.It Va WITHOUT_UNIFIED_OBJDIR
1705Use the historical object directory format for
1706.Xr build 7
1707targets.
1708For native-builds and builds done directly in sub-directories the format of
1709.Pa ${MAKEOBJDIRPREFIX}/${.CURDIR}
1710is used,
1711while for cross-builds
1712.Pa ${MAKEOBJDIRPREFIX}/${TARGET}.${TARGET_ARCH}/${.CURDIR}
1713is used.
1714.Pp
1715This option is transitional and will be removed in a future version of
1716.Fx ,
1717at which time
1718.Va WITH_UNIFIED_OBJDIR
1719will be enabled permanently.
1720.Pp
1721This must be set in the environment, make command line, or
1722.Pa /etc/src-env.conf ,
1723not
1724.Pa /etc/src.conf .
1725.It Va WITHOUT_USB
1726Do not build USB-related programs and libraries.
1727.It Va WITHOUT_USB_GADGET_EXAMPLES
1728Do not build USB gadget kernel modules.
1729.It Va WITHOUT_UTMPX
1730Do not build user accounting tools such as
1731.Xr last 1 ,
1732.Xr users 1 ,
1733.Xr who 1 ,
1734.Xr ac 8 ,
1735.Xr lastlogin 8
1736and
1737.Xr utx 8 .
1738.It Va WITH_VERIEXEC
1739Enable building
1740.Xr veriexec 8
1741which loads the contents of verified manifests into the kernel
1742for use by
1743.Xr mac_veriexec 4
1744.Pp
1745Depends on
1746.Va WITH_BEARSSL .
1747.It Va WITHOUT_VI
1748Do not build and install vi, view, ex and related programs.
1749.It Va WITHOUT_VT
1750Do not build
1751.Xr vt 4
1752support files (fonts and keymaps).
1753.It Va WITHOUT_WARNS
1754Set this to not add warning flags to the compiler invocations.
1755Useful as a temporary workaround when code enters the tree
1756which triggers warnings in environments that differ from the
1757original developer.
1758.It Va WITHOUT_WERROR
1759Set this to not treat compiler warnings as errors.
1760Useful as a temporary workaround when working on fixing compiler warnings.
1761When set, warnings are still printed in the build log but do not fail the build.
1762.It Va WITHOUT_WIRELESS
1763Do not build programs used for 802.11 wireless networks; especially
1764.Xr wpa_supplicant 8
1765and
1766.Xr hostapd 8 .
1767When set, these options are also in effect:
1768.Pp
1769.Bl -inset -compact
1770.It Va WITHOUT_WIRELESS_SUPPORT
1771(unless
1772.Va WITH_WIRELESS_SUPPORT
1773is set explicitly)
1774.El
1775.It Va WITHOUT_WIRELESS_SUPPORT
1776Build libraries, programs, and kernel modules without
1777802.11 wireless support.
1778.It Va WITHOUT_WPA_SUPPLICANT_EAPOL
1779Build
1780.Xr wpa_supplicant 8
1781without support for the IEEE 802.1X protocol and without
1782support for EAP-PEAP, EAP-TLS, EAP-LEAP, and EAP-TTLS
1783protocols (usable only via 802.1X).
1784.It Va WITHOUT_ZFS
1785Do not build the ZFS file system kernel module, libraries such as
1786.Xr libbe 3 ,
1787and user commands such as
1788.Xr zpool 8
1789or
1790.Xr zfs 8 .
1791Also disable ZFS support in utilities and libraries which implement
1792ZFS-specific functionality.
1793.It Va WITHOUT_ZONEINFO
1794Do not build the timezone database.
1795When set, it enforces these options:
1796.Pp
1797.Bl -item -compact
1798.It
1799.Va WITHOUT_ZONEINFO_LEAPSECONDS_SUPPORT
1800.El
1801.It Va WITH_ZONEINFO_LEAPSECONDS_SUPPORT
1802Build leapsecond information in to the timezone database.
1803.El
1804.Sh FILES
1805.Bl -tag -compact -width Pa
1806.It Pa /etc/src.conf
1807.It Pa /etc/src-env.conf
1808.It Pa /usr/share/mk/bsd.own.mk
1809.El
1810.Sh SEE ALSO
1811.Xr make 1 ,
1812.Xr make.conf 5 ,
1813.Xr build 7 ,
1814.Xr ports 7
1815.Sh HISTORY
1816The
1817.Nm
1818file appeared in
1819.Fx 7.0 .
1820.Sh AUTHORS
1821This manual page was autogenerated by
1822.An tools/build/options/makeman .
1823