xref: /freebsd/share/man/man5/src.conf.5 (revision e3aa18ad71782a73d3dd9dd3d526bbd2b607ca16)
1.\" DO NOT EDIT-- this file is @generated by tools/build/options/makeman.
2.\" $FreeBSD$
3.Dd May 30, 2022
4.Dt SRC.CONF 5
5.Os
6.Sh NAME
7.Nm src.conf
8.Nd "source build options"
9.Sh DESCRIPTION
10The
11.Nm
12file contains variables that control what components will be generated during
13the build process of the
14.Fx
15source tree; see
16.Xr build 7 .
17.Pp
18The
19.Nm
20file uses the standard makefile syntax.
21However,
22.Nm
23should not specify any dependencies to
24.Xr make 1 .
25Instead,
26.Nm
27is to set
28.Xr make 1
29variables that control the aspects of how the system builds.
30.Pp
31The default location of
32.Nm
33is
34.Pa /etc/src.conf ,
35though an alternative location can be specified in the
36.Xr make 1
37variable
38.Va SRCCONF .
39Overriding the location of
40.Nm
41may be necessary if the system-wide settings are not suitable
42for a particular build.
43For instance, setting
44.Va SRCCONF
45to
46.Pa /dev/null
47effectively resets all build controls to their defaults.
48.Pp
49The only purpose of
50.Nm
51is to control the compilation of the
52.Fx
53source code, which is usually located in
54.Pa /usr/src .
55As a rule, the system administrator creates
56.Nm
57when the values of certain control variables need to be changed
58from their defaults.
59.Pp
60In addition, control variables can be specified
61for a particular build via the
62.Fl D
63option of
64.Xr make 1
65or in its environment; see
66.Xr environ 7 .
67.Pp
68The environment of
69.Xr make 1
70for the build can be controlled via the
71.Va SRC_ENV_CONF
72variable, which defaults to
73.Pa /etc/src-env.conf .
74Some examples that may only be set in this file are
75.Va WITH_DIRDEPS_BUILD ,
76and
77.Va WITH_META_MODE ,
78and
79.Va MAKEOBJDIRPREFIX
80as they are environment-only variables.
81.Pp
82The values of variables are ignored regardless of their setting;
83even if they would be set to
84.Dq Li FALSE
85or
86.Dq Li NO .
87The presence of an option causes
88it to be honored by
89.Xr make 1 .
90.Pp
91This list provides a name and short description for variables
92that can be used for source builds.
93.Bl -tag -width indent
94.It Va WITHOUT_ACCT
95Do not build process accounting tools such as
96.Xr accton 8
97and
98.Xr sa 8 .
99.It Va WITHOUT_ACPI
100Do not build
101.Xr acpiconf 8 ,
102.Xr acpidump 8
103and related programs.
104.It Va WITHOUT_APM
105Do not build
106.Xr apm 8 ,
107.Xr apmd 8
108and related programs.
109.It Va WITH_ASAN
110Build the base system with Address Sanitizer (ASan) to detect
111memory corruption bugs such as buffer overflows or use-after-free.
112Requires that Clang be used as the base system compiler
113and that the runtime support library is available.
114When set, it enforces these options:
115.Pp
116.Bl -item -compact
117.It
118.Va WITH_LLVM_BINUTILS
119.It
120.Va WITH_LLVM_CXXFILT
121.El
122.It Va WITHOUT_ASSERT_DEBUG
123Compile programs and libraries without the
124.Xr assert 3
125checks.
126.It Va WITHOUT_AT
127Do not build
128.Xr at 1
129and related utilities.
130.It Va WITHOUT_ATM
131Do not build
132programs and libraries related to ATM networking.
133.It Va WITHOUT_AUDIT
134Do not build audit support into system programs.
135.It Va WITHOUT_AUTHPF
136Do not build
137.Xr authpf 8 .
138.It Va WITHOUT_AUTOFS
139Do not build
140.Xr autofs 5
141related programs, libraries, and kernel modules.
142.It Va WITHOUT_AUTO_OBJ
143Disable automatic creation of objdirs.
144This is enabled by default if the wanted OBJDIR is writable by the current user.
145.Pp
146This must be set in the environment, make command line, or
147.Pa /etc/src-env.conf ,
148not
149.Pa /etc/src.conf .
150.It Va WITH_BEARSSL
151Build the BearSSL library.
152.Pp
153BearSSL is a tiny SSL library suitable for embedded environments.
154For details see
155.Lk https://www.BearSSL.org/
156.Pp
157This library is currently only used to perform
158signature verification and related operations
159for Verified Exec and
160.Xr loader 8 .
161When set, these options are also in effect:
162.Pp
163.Bl -inset -compact
164.It Va WITH_LOADER_EFI_SECUREBOOT
165(unless
166.Va WITHOUT_LOADER_EFI_SECUREBOOT
167is set explicitly)
168.It Va WITH_LOADER_VERIEXEC
169(unless
170.Va WITHOUT_LOADER_VERIEXEC
171is set explicitly)
172.It Va WITH_LOADER_VERIEXEC_VECTX
173(unless
174.Va WITHOUT_LOADER_VERIEXEC_VECTX
175is set explicitly)
176.It Va WITH_VERIEXEC
177(unless
178.Va WITHOUT_VERIEXEC
179is set explicitly)
180.El
181.It Va WITHOUT_BHYVE
182Do not build or install
183.Xr bhyve 8 ,
184associated utilities, and examples.
185.Pp
186This option only affects amd64/amd64.
187.It Va WITH_BHYVE_SNAPSHOT
188Include support for save and restore (snapshots) in
189.Xr bhyve 8
190and
191.Xr bhyvectl 8 .
192.Pp
193This option only affects amd64/amd64.
194.It Va WITH_BIND_NOW
195Build all binaries with the
196.Dv DF_BIND_NOW
197flag set to indicate that the run-time loader should perform all relocation
198processing at process startup rather than on demand.
199.It Va WITHOUT_BLACKLIST
200Set this if you do not want to build
201.Xr blacklistd 8
202and
203.Xr blacklistctl 8 .
204When set, these options are also in effect:
205.Pp
206.Bl -inset -compact
207.It Va WITHOUT_BLACKLIST_SUPPORT
208(unless
209.Va WITH_BLACKLIST_SUPPORT
210is set explicitly)
211.El
212.It Va WITHOUT_BLACKLIST_SUPPORT
213Build some programs without
214.Xr libblacklist 3
215support, like
216.Xr fingerd 8 ,
217.Xr ftpd 8 ,
218and
219.Xr sshd 8 .
220.It Va WITHOUT_BLUETOOTH
221Do not build Bluetooth related kernel modules, programs and libraries.
222.It Va WITHOUT_BOOT
223Do not build the boot blocks and loader.
224.It Va WITHOUT_BOOTPARAMD
225Do not build or install
226.Xr bootparamd 8 .
227.It Va WITHOUT_BOOTPD
228Do not build or install
229.Xr bootpd 8 .
230.It Va WITHOUT_BSDINSTALL
231Do not build
232.Xr bsdinstall 8 ,
233.Xr sade 8 ,
234and related programs.
235.It Va WITHOUT_BSD_CPIO
236Do not build the BSD licensed version of cpio based on
237.Xr libarchive 3 .
238.It Va WITHOUT_BSNMP
239Do not build or install
240.Xr bsnmpd 1
241and related libraries and data files.
242.It Va WITHOUT_BZIP2
243Do not build contributed bzip2 software as a part of the base system.
244.Bf -symbolic
245The option has no effect yet.
246.Ef
247When set, these options are also in effect:
248.Pp
249.Bl -inset -compact
250.It Va WITHOUT_BZIP2_SUPPORT
251(unless
252.Va WITH_BZIP2_SUPPORT
253is set explicitly)
254.El
255.It Va WITHOUT_BZIP2_SUPPORT
256Build some programs without optional bzip2 support.
257.It Va WITHOUT_CALENDAR
258Do not build
259.Xr calendar 1 .
260.It Va WITHOUT_CAPSICUM
261Do not build Capsicum support into system programs.
262When set, it enforces these options:
263.Pp
264.Bl -item -compact
265.It
266.Va WITHOUT_CASPER
267.El
268.It Va WITHOUT_CAROOT
269Do not add the trusted certificates from the Mozilla NSS bundle to
270base.
271.It Va WITHOUT_CASPER
272Do not build Casper program and related libraries.
273.It Va WITH_CCACHE_BUILD
274Use
275.Xr ccache 1
276for the build.
277No configuration is required except to install the
278.Sy devel/ccache
279package.
280When using with
281.Xr distcc 1 ,
282set
283.Sy CCACHE_PREFIX=/usr/local/bin/distcc .
284The default cache directory of
285.Pa $HOME/.ccache
286will be used, which can be overridden by setting
287.Sy CCACHE_DIR .
288The
289.Sy CCACHE_COMPILERCHECK
290option defaults to
291.Sy content
292when using the in-tree bootstrap compiler,
293and
294.Sy mtime
295when using an external compiler.
296The
297.Sy CCACHE_CPP2
298option is used for Clang but not GCC.
299.Pp
300Sharing a cache between multiple work directories requires using a layout
301similar to
302.Pa /some/prefix/src
303.Pa /some/prefix/obj
304and an environment such as:
305.Bd -literal -offset indent
306CCACHE_BASEDIR='${SRCTOP:H}' MAKEOBJDIRPREFIX='${SRCTOP:H}/obj'
307.Ed
308.Pp
309See
310.Xr ccache 1
311for more configuration options.
312.It Va WITHOUT_CCD
313Do not build
314.Xr geom_ccd 4
315and related utilities.
316.It Va WITHOUT_CDDL
317Do not build code licensed under Sun's CDDL.
318When set, it enforces these options:
319.Pp
320.Bl -item -compact
321.It
322.Va WITHOUT_CTF
323.It
324.Va WITHOUT_LOADER_ZFS
325.It
326.Va WITHOUT_ZFS
327.El
328.It Va WITHOUT_CLANG
329Do not build the Clang C/C++ compiler during the regular phase of the build.
330When set, it enforces these options:
331.Pp
332.Bl -item -compact
333.It
334.Va WITHOUT_CLANG_EXTRAS
335.It
336.Va WITHOUT_CLANG_FORMAT
337.It
338.Va WITHOUT_CLANG_FULL
339.It
340.Va WITHOUT_LLVM_COV
341.El
342.Pp
343When set, these options are also in effect:
344.Pp
345.Bl -inset -compact
346.It Va WITHOUT_LLVM_TARGET_AARCH64
347(unless
348.Va WITH_LLVM_TARGET_AARCH64
349is set explicitly)
350.It Va WITHOUT_LLVM_TARGET_ALL
351(unless
352.Va WITH_LLVM_TARGET_ALL
353is set explicitly)
354.It Va WITHOUT_LLVM_TARGET_ARM
355(unless
356.Va WITH_LLVM_TARGET_ARM
357is set explicitly)
358.It Va WITHOUT_LLVM_TARGET_POWERPC
359(unless
360.Va WITH_LLVM_TARGET_POWERPC
361is set explicitly)
362.It Va WITHOUT_LLVM_TARGET_RISCV
363(unless
364.Va WITH_LLVM_TARGET_RISCV
365is set explicitly)
366.El
367.It Va WITHOUT_CLANG_BOOTSTRAP
368Do not build the Clang C/C++ compiler during the bootstrap phase of
369the build.
370To be able to build the system, either gcc or clang bootstrap must be
371enabled unless an alternate compiler is provided via XCC.
372.It Va WITH_CLANG_EXTRAS
373Build additional clang and llvm tools, such as bugpoint and
374clang-format.
375.It Va WITH_CLANG_FORMAT
376Build clang-format.
377.It Va WITHOUT_CLANG_FULL
378Avoid building the ARCMigrate, Rewriter and StaticAnalyzer components of
379the Clang C/C++ compiler.
380.It Va WITHOUT_CLANG_IS_CC
381Do not install links to the Clang C/C++ compiler as
382.Pa /usr/bin/cc ,
383.Pa /usr/bin/c++
384and
385.Pa /usr/bin/cpp .
386.It Va WITHOUT_CLEAN
387Do not clean before building world and/or kernel.
388.It Va WITHOUT_CPP
389Do not build
390.Xr cpp 1 .
391.It Va WITHOUT_CROSS_COMPILER
392Do not build any cross compiler in the cross-tools stage of buildworld.
393When compiling a different version of
394.Fx
395than what is installed on the system, provide an alternate
396compiler with XCC to ensure success.
397When compiling with an identical version of
398.Fx
399to the host, this option may be safely used.
400This option may also be safe when the host version of
401.Fx
402is close to the sources being built, but all bets are off if there have
403been any changes to the toolchain between the versions.
404When set, it enforces these options:
405.Pp
406.Bl -item -compact
407.It
408.Va WITHOUT_CLANG_BOOTSTRAP
409.It
410.Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
411.It
412.Va WITHOUT_LLD_BOOTSTRAP
413.El
414.It Va WITHOUT_CRYPT
415Do not build any crypto code.
416When set, it enforces these options:
417.Pp
418.Bl -item -compact
419.It
420.Va WITHOUT_DMAGENT
421.It
422.Va WITHOUT_KERBEROS
423.It
424.Va WITHOUT_KERBEROS_SUPPORT
425.It
426.Va WITHOUT_LDNS
427.It
428.Va WITHOUT_LDNS_UTILS
429.It
430.Va WITHOUT_OPENSSH
431.It
432.Va WITHOUT_OPENSSL
433.It
434.Va WITHOUT_OPENSSL_KTLS
435.It
436.Va WITHOUT_PKGBOOTSTRAP
437.It
438.Va WITHOUT_UNBOUND
439.It
440.Va WITHOUT_ZFS
441.El
442.Pp
443When set, these options are also in effect:
444.Pp
445.Bl -inset -compact
446.It Va WITHOUT_GSSAPI
447(unless
448.Va WITH_GSSAPI
449is set explicitly)
450.El
451.It Va WITH_CTF
452Compile with CTF (Compact C Type Format) data.
453CTF data encapsulates a reduced form of debugging information
454similar to DWARF and the venerable stabs and is required for DTrace.
455.It Va WITHOUT_CUSE
456Do not build CUSE-related programs and libraries.
457.It Va WITHOUT_CXGBETOOL
458Do not build
459.Xr cxgbetool 8
460.Pp
461This is a default setting on
462arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
463.It Va WITH_CXGBETOOL
464Build
465.Xr cxgbetool 8
466.Pp
467This is a default setting on
468amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
469.It Va WITHOUT_CXX
470Do not build C++ headers and runtime libraries.
471It also prevents building binaries and libraries written in C++, including
472.Xr devd 8 .
473When set, it enforces these options:
474.Pp
475.Bl -item -compact
476.It
477.Va WITHOUT_CLANG
478.It
479.Va WITHOUT_CLANG_EXTRAS
480.It
481.Va WITHOUT_CLANG_FORMAT
482.It
483.Va WITHOUT_CLANG_FULL
484.It
485.Va WITHOUT_DTRACE_TESTS
486.It
487.Va WITHOUT_GOOGLETEST
488.It
489.Va WITHOUT_LLVM_COV
490.It
491.Va WITHOUT_OFED
492.It
493.Va WITHOUT_OFED_EXTRA
494.It
495.Va WITHOUT_OPENMP
496.It
497.Va WITHOUT_PMC
498.It
499.Va WITHOUT_TESTS
500.El
501.It Va WITHOUT_DEBUG_FILES
502Avoid building or installing standalone debug files for each
503executable binary and shared library.
504.It Va WITH_DETECT_TZ_CHANGES
505Make the time handling code detect changes to the timezone files.
506.It Va WITHOUT_DIALOG
507Do not build
508.Xr dialog 1 ,
509.Xr dialog 3 ,
510.Xr dpv 1 ,
511and
512.Xr dpv 3 .
513When set, it enforces these options:
514.Pp
515.Bl -item -compact
516.It
517.Va WITHOUT_BSDINSTALL
518.El
519.It Va WITHOUT_DICT
520Do not build the Webster dictionary files.
521.It Va WITH_DIRDEPS_BUILD
522This is an experimental build system.
523For details see
524https://www.crufty.net/sjg/docs/freebsd-meta-mode.htm.
525Build commands can be seen from the top-level with:
526.Dl make show-valid-targets
527The build is driven by dirdeps.mk using
528.Va DIRDEPS
529stored in
530Makefile.depend files found in each directory.
531.Pp
532The build can be started from anywhere, and behaves the same.
533The initial instance of
534.Xr make 1
535recursively reads
536.Va DIRDEPS
537from
538.Pa Makefile.depend ,
539computing a graph of tree dependencies from the current origin.
540Setting
541.Va NO_DIRDEPS
542skips checking dirdep dependencies and will only build in the current
543and child directories.
544.Va NO_DIRDEPS_BELOW
545skips building any dirdeps and only build the current directory.
546.Pp
547This also utilizes the
548.Va WITH_META_MODE
549logic for incremental builds.
550.Pp
551The build hides commands executed unless
552.Va NO_SILENT
553is defined.
554.Pp
555Note that there is currently no mass install feature for this.
556.Pp
557When set, it enforces these options:
558.Pp
559.Bl -item -compact
560.It
561.Va WITH_INSTALL_AS_USER
562.El
563.Pp
564When set, these options are also in effect:
565.Pp
566.Bl -inset -compact
567.It Va WITH_META_MODE
568(unless
569.Va WITHOUT_META_MODE
570is set explicitly)
571.It Va WITH_STAGING
572(unless
573.Va WITHOUT_STAGING
574is set explicitly)
575.It Va WITH_STAGING_MAN
576(unless
577.Va WITHOUT_STAGING_MAN
578is set explicitly)
579.It Va WITH_STAGING_PROG
580(unless
581.Va WITHOUT_STAGING_PROG
582is set explicitly)
583.It Va WITH_SYSROOT
584(unless
585.Va WITHOUT_SYSROOT
586is set explicitly)
587.El
588.Pp
589This must be set in the environment, make command line, or
590.Pa /etc/src-env.conf ,
591not
592.Pa /etc/src.conf .
593.It Va WITH_DIRDEPS_CACHE
594Cache result of dirdeps.mk which can save significant time
595for subsequent builds.
596Depends on
597.Va WITH_DIRDEPS_BUILD .
598.Pp
599This must be set in the environment, make command line, or
600.Pa /etc/src-env.conf ,
601not
602.Pa /etc/src.conf .
603.It Va WITHOUT_DMAGENT
604Do not build dma Mail Transport Agent.
605.It Va WITHOUT_DOCCOMPRESS
606Do not install compressed system documentation.
607Only the uncompressed version will be installed.
608.It Va WITH_DTRACE_TESTS
609Build and install the DTrace test suite in
610.Pa /usr/tests/cddl/usr.sbin/dtrace .
611This test suite is considered experimental on architectures other than
612amd64/amd64 and running it may cause system instability.
613.It Va WITHOUT_DYNAMICROOT
614Set this if you do not want to link
615.Pa /bin
616and
617.Pa /sbin
618dynamically.
619.It Va WITHOUT_EE
620Do not build and install
621.Xr edit 1 ,
622.Xr ee 1 ,
623and related programs.
624.It Va WITHOUT_EFI
625Set not to build
626.Xr efivar 3
627and
628.Xr efivar 8 .
629.Pp
630This is a default setting on
631powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
632.It Va WITH_EFI
633Build
634.Xr efivar 3
635and
636.Xr efivar 8 .
637.Pp
638This is a default setting on
639amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
640.It Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
641Do not build ELF Tool Chain tools
642(addr2line, nm, size, strings and strip)
643as part of the bootstrap process.
644.Bf -symbolic
645An alternate bootstrap tool chain must be provided.
646.Ef
647.It Va WITHOUT_EXAMPLES
648Avoid installing examples to
649.Pa /usr/share/examples/ .
650.It Va WITH_EXPERIMENTAL
651Include experimental features in the build.
652.It Va WITH_EXTRA_TCP_STACKS
653Build extra TCP stack modules.
654.It Va WITHOUT_FDT
655Do not build Flattened Device Tree support as part of the base system.
656This includes the device tree compiler (dtc) and libfdt support library.
657.It Va WITHOUT_FILE
658Do not build
659.Xr file 1
660and related programs.
661.It Va WITHOUT_FINGER
662Do not build or install
663.Xr finger 1
664and
665.Xr fingerd 8 .
666.It Va WITHOUT_FLOPPY
667Do not build or install programs
668for operating floppy disk driver.
669.It Va WITHOUT_FORMAT_EXTENSIONS
670Do not enable
671.Fl fformat-extensions
672when compiling the kernel.
673Also disables all format checking.
674.It Va WITHOUT_FORTH
675Build bootloaders without Forth support.
676.It Va WITHOUT_FP_LIBC
677Build
678.Nm libc
679without floating-point support.
680.It Va WITHOUT_FREEBSD_UPDATE
681Do not build
682.Xr freebsd-update 8 .
683.It Va WITHOUT_FTP
684Do not build or install
685.Xr ftp 1
686and
687.Xr ftpd 8 .
688.It Va WITHOUT_GAMES
689Do not build games.
690.It Va WITHOUT_GH_BC
691Install the traditional FreeBSD
692.Xr bc 1
693and
694.Xr dc 1
695programs instead of the enhanced versions.
696.It Va WITHOUT_GNU_DIFF
697Do not build GNU
698.Xr diff3 1 .
699.It Va WITHOUT_GOOGLETEST
700Neither build nor install
701.Lb libgmock ,
702.Lb libgtest ,
703and dependent tests.
704.It Va WITHOUT_GPIO
705Do not build
706.Xr gpioctl 8
707as part of the base system.
708.It Va WITHOUT_GSSAPI
709Do not build libgssapi.
710.It Va WITHOUT_HAST
711Do not build
712.Xr hastd 8
713and related utilities.
714.It Va WITH_HESIOD
715Build Hesiod support.
716.It Va WITHOUT_HTML
717Do not build HTML docs.
718.It Va WITHOUT_HYPERV
719Do not build or install HyperV utilities.
720.Pp
721This is a default setting on
722arm/armv6, arm/armv7, arm64/aarch64, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
723.It Va WITH_HYPERV
724Build or install HyperV utilities.
725.Pp
726This is a default setting on
727amd64/amd64 and i386/i386.
728.It Va WITHOUT_ICONV
729Do not build iconv as part of libc.
730.It Va WITHOUT_INCLUDES
731Do not install header files.
732This option used to be spelled
733.Va NO_INCS .
734.Bf -symbolic
735The option does not work for build targets.
736.Ef
737.It Va WITHOUT_INET
738Do not build programs and libraries related to IPv4 networking.
739When set, it enforces these options:
740.Pp
741.Bl -item -compact
742.It
743.Va WITHOUT_INET_SUPPORT
744.El
745.It Va WITHOUT_INET6
746Do not build
747programs and libraries related to IPv6 networking.
748When set, it enforces these options:
749.Pp
750.Bl -item -compact
751.It
752.Va WITHOUT_INET6_SUPPORT
753.El
754.It Va WITHOUT_INET6_SUPPORT
755Build libraries, programs, and kernel modules without IPv6 support.
756.It Va WITHOUT_INETD
757Do not build
758.Xr inetd 8 .
759.It Va WITHOUT_INET_SUPPORT
760Build libraries, programs, and kernel modules without IPv4 support.
761.It Va WITH_INIT_ALL_PATTERN
762Build the base system or kernel with stack variables initialized to
763.Pq compiler defined
764debugging patterns on function entry.
765This option requires the clang compiler.
766.It Va WITH_INIT_ALL_ZERO
767Build the base system or kernel with stack variables initialized
768to zero on function entry.
769This option requires that the clang compiler be used.
770.It Va WITHOUT_INSTALLLIB
771Set this to not install optional libraries.
772For example, when creating a
773.Xr nanobsd 8
774image.
775.Bf -symbolic
776The option does not work for build targets.
777.Ef
778.It Va WITH_INSTALL_AS_USER
779Make install targets succeed for non-root users by installing
780files with owner and group attributes set to that of the user running
781the
782.Xr make 1
783command.
784The user still must set the
785.Va DESTDIR
786variable to point to a directory where the user has write permissions.
787.It Va WITHOUT_IPFILTER
788Do not build IP Filter package.
789.It Va WITHOUT_IPFW
790Do not build IPFW tools.
791.It Va WITHOUT_IPSEC_SUPPORT
792Do not build the kernel with
793.Xr ipsec 4
794support.
795This option is needed for
796.Xr ipsec 4
797and
798.Xr tcpmd5 4 .
799.It Va WITHOUT_ISCSI
800Do not build
801.Xr iscsid 8
802and related utilities.
803.It Va WITHOUT_JAIL
804Do not build tools for the support of jails; e.g.,
805.Xr jail 8 .
806.It Va WITHOUT_KDUMP
807Do not build
808.Xr kdump 1
809and
810.Xr truss 1 .
811.It Va WITHOUT_KERBEROS
812Set this to not build Kerberos 5 (KTH Heimdal).
813When set, these options are also in effect:
814.Pp
815.Bl -inset -compact
816.It Va WITHOUT_GSSAPI
817(unless
818.Va WITH_GSSAPI
819is set explicitly)
820.It Va WITHOUT_KERBEROS_SUPPORT
821(unless
822.Va WITH_KERBEROS_SUPPORT
823is set explicitly)
824.El
825.It Va WITHOUT_KERBEROS_SUPPORT
826Build some programs without Kerberos support, like
827.Xr ssh 1 ,
828.Xr telnet 1 ,
829.Xr sshd 8 ,
830and
831.Xr telnetd 8 .
832.It Va WITH_KERNEL_RETPOLINE
833Enable the "retpoline" mitigation for CVE-2017-5715 in the kernel
834build.
835.It Va WITHOUT_KERNEL_SYMBOLS
836Do not install kernel debug symbol files.
837.It Va WITHOUT_KVM
838Do not build the
839.Nm libkvm
840library as a part of the base system.
841.Bf -symbolic
842The option has no effect yet.
843.Ef
844When set, these options are also in effect:
845.Pp
846.Bl -inset -compact
847.It Va WITHOUT_KVM_SUPPORT
848(unless
849.Va WITH_KVM_SUPPORT
850is set explicitly)
851.El
852.It Va WITHOUT_KVM_SUPPORT
853Build some programs without optional
854.Nm libkvm
855support.
856.It Va WITHOUT_LDNS
857Setting this variable will prevent the LDNS library from being built.
858When set, it enforces these options:
859.Pp
860.Bl -item -compact
861.It
862.Va WITHOUT_LDNS_UTILS
863.It
864.Va WITHOUT_UNBOUND
865.El
866.It Va WITHOUT_LDNS_UTILS
867Setting this variable will prevent building the LDNS utilities
868.Xr drill 1
869and
870.Xr host 1 .
871.It Va WITHOUT_LEGACY_CONSOLE
872Do not build programs that support a legacy PC console; e.g.,
873.Xr kbdcontrol 1
874and
875.Xr vidcontrol 1 .
876.It Va WITHOUT_LIB32
877On 64-bit platforms, do not build 32-bit library set and a
878.Nm ld-elf32.so.1
879runtime linker.
880.Pp
881This is a default setting on
882arm/armv6, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
883.It Va WITHOUT_LLD
884Do not build LLVM's lld linker.
885.It Va WITHOUT_LLDB
886Do not build the LLDB debugger.
887.Pp
888This is a default setting on
889arm/armv6, arm/armv7, riscv/riscv64 and riscv/riscv64sf.
890.It Va WITH_LLDB
891Build the LLDB debugger.
892.Pp
893This is a default setting on
894amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
895.It Va WITHOUT_LLD_BOOTSTRAP
896Do not build the LLD linker during the bootstrap phase of
897the build.
898To be able to build the system an alternate linker must be provided via XLD.
899.It Va WITHOUT_LLD_IS_LD
900Do not install a
901.Pa /usr/bin/ld symlink
902to
903.Pa ld.lld .
904The system will not have a usable tool chain unless a linker is provided
905some other way.
906.It Va WITHOUT_LLVM_ASSERTIONS
907Disable debugging assertions in LLVM.
908.It Va WITH_LLVM_BINUTILS
909Install LLVM's binutils (ar, addr2line, nm, etc.) instead of ELF Tool Chain's.
910.It Va WITHOUT_LLVM_COV
911Do not build the
912.Xr llvm-cov 1
913tool.
914.It Va WITHOUT_LLVM_CXXFILT
915Install ELF Tool Chain's cxxfilt as c++filt, instead of LLVM's llvm-cxxfilt.
916.It Va WITHOUT_LLVM_TARGET_AARCH64
917Do not build LLVM target support for AArch64.
918The
919.Va LLVM_TARGET_ALL
920option should be used rather than this in most cases.
921.It Va WITHOUT_LLVM_TARGET_ALL
922Only build the required LLVM target support.
923This option is preferred to specific target support options.
924When set, these options are also in effect:
925.Pp
926.Bl -inset -compact
927.It Va WITHOUT_LLVM_TARGET_AARCH64
928(unless
929.Va WITH_LLVM_TARGET_AARCH64
930is set explicitly)
931.It Va WITHOUT_LLVM_TARGET_ARM
932(unless
933.Va WITH_LLVM_TARGET_ARM
934is set explicitly)
935.It Va WITHOUT_LLVM_TARGET_POWERPC
936(unless
937.Va WITH_LLVM_TARGET_POWERPC
938is set explicitly)
939.It Va WITHOUT_LLVM_TARGET_RISCV
940(unless
941.Va WITH_LLVM_TARGET_RISCV
942is set explicitly)
943.El
944.It Va WITHOUT_LLVM_TARGET_ARM
945Do not build LLVM target support for ARM.
946The
947.Va LLVM_TARGET_ALL
948option should be used rather than this in most cases.
949.It Va WITH_LLVM_TARGET_BPF
950Build LLVM target support for BPF.
951The
952.Va LLVM_TARGET_ALL
953option should be used rather than this in most cases.
954.It Va WITH_LLVM_TARGET_MIPS
955Build LLVM target support for MIPS.
956The
957.Va LLVM_TARGET_ALL
958option should be used rather than this in most cases.
959.It Va WITHOUT_LLVM_TARGET_POWERPC
960Do not build LLVM target support for PowerPC.
961The
962.Va LLVM_TARGET_ALL
963option should be used rather than this in most cases.
964.It Va WITHOUT_LLVM_TARGET_RISCV
965Do not build LLVM target support for RISC-V.
966The
967.Va LLVM_TARGET_ALL
968option should be used rather than this in most cases.
969.It Va WITHOUT_LLVM_TARGET_X86
970Do not build LLVM target support for X86.
971The
972.Va LLVM_TARGET_ALL
973option should be used rather than this in most cases.
974.It Va WITH_LOADER_EFI_SECUREBOOT
975Enable building
976.Xr loader 8
977with support for verification based on certificates obtained from UEFI.
978.It Va WITH_LOADER_FIREWIRE
979Enable firewire support in /boot/loader on x86.
980This option is a nop on all other platforms.
981.It Va WITHOUT_LOADER_GELI
982Disable inclusion of GELI crypto support in the boot chain binaries.
983.Pp
984This is a default setting on
985powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
986.It Va WITH_LOADER_GELI
987Build GELI bootloader support.
988.Pp
989This is a default setting on
990amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
991.It Va WITHOUT_LOADER_KBOOT
992Do not build kboot, a linuxboot environment loader
993.Pp
994This is a default setting on
995arm/armv6, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
996.It Va WITH_LOADER_KBOOT
997Build kboot, a linuxboot environment loader
998.Pp
999This is a default setting on
1000amd64/amd64 and powerpc/powerpc64.
1001.It Va WITHOUT_LOADER_LUA
1002Do not build LUA bindings for the boot loader.
1003.Pp
1004This is a default setting on
1005powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
1006.It Va WITH_LOADER_LUA
1007Build LUA bindings for the boot loader.
1008.Pp
1009This is a default setting on
1010amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
1011.It Va WITHOUT_LOADER_OFW
1012Disable building of openfirmware bootloader components.
1013.Pp
1014This is a default setting on
1015amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
1016.It Va WITH_LOADER_OFW
1017Build openfirmware bootloader components.
1018.Pp
1019This is a default setting on
1020powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
1021.It Va WITHOUT_LOADER_UBOOT
1022Disable building of ubldr.
1023.Pp
1024This is a default setting on
1025amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1026.It Va WITH_LOADER_UBOOT
1027Build ubldr.
1028.Pp
1029This is a default setting on
1030arm/armv6, arm/armv7, powerpc/powerpc and powerpc/powerpc64.
1031.It Va WITH_LOADER_VERBOSE
1032Build with extra verbose debugging in the loader.
1033May explode already nearly too large loader over the limit.
1034Use with care.
1035.It Va WITH_LOADER_VERIEXEC
1036Enable building
1037.Xr loader 8
1038with support for verification similar to Verified Exec.
1039.Pp
1040Depends on
1041.Va WITH_BEARSSL .
1042When set, these options are also in effect:
1043.Pp
1044.Bl -inset -compact
1045.It Va WITH_LOADER_EFI_SECUREBOOT
1046(unless
1047.Va WITHOUT_LOADER_EFI_SECUREBOOT
1048is set explicitly)
1049.It Va WITH_LOADER_VERIEXEC_VECTX
1050(unless
1051.Va WITHOUT_LOADER_VERIEXEC_VECTX
1052is set explicitly)
1053.El
1054.It Va WITH_LOADER_VERIEXEC_PASS_MANIFEST
1055Enable building
1056.Xr loader 8
1057with support to pass a verified manifest to the kernel.
1058The kernel has to be built with a module to parse the manifest.
1059.Pp
1060Depends on
1061.Va WITH_LOADER_VERIEXEC .
1062.It Va WITHOUT_LOADER_ZFS
1063Do not build ZFS file system boot loader support.
1064.It Va WITHOUT_LOCALES
1065Do not build localization files; see
1066.Xr locale 1 .
1067.It Va WITHOUT_LOCATE
1068Do not build
1069.Xr locate 1
1070and related programs.
1071.It Va WITHOUT_LPR
1072Do not build
1073.Xr lpr 1
1074and related programs.
1075.It Va WITHOUT_LS_COLORS
1076Build
1077.Xr ls 1
1078without support for colors to distinguish file types.
1079.It Va WITHOUT_MAIL
1080Do not build any mail support (MUA or MTA).
1081When set, it enforces these options:
1082.Pp
1083.Bl -item -compact
1084.It
1085.Va WITHOUT_DMAGENT
1086.It
1087.Va WITHOUT_MAILWRAPPER
1088.It
1089.Va WITHOUT_SENDMAIL
1090.El
1091.It Va WITHOUT_MAILWRAPPER
1092Do not build the
1093.Xr mailwrapper 8
1094MTA selector.
1095.It Va WITHOUT_MAKE
1096Do not install
1097.Xr make 1
1098and related support files.
1099.It Va WITHOUT_MAKE_CHECK_USE_SANDBOX
1100Do not execute
1101.Dq Li "make check"
1102in limited sandbox mode.
1103This option should be paired with
1104.Va WITH_INSTALL_AS_USER
1105if executed as an unprivileged user.
1106See
1107.Xr tests 7
1108for more details.
1109.It Va WITH_MALLOC_PRODUCTION
1110Disable assertions and statistics gathering in
1111.Xr malloc 3 .
1112It also defaults the A and J runtime options to off.
1113.It Va WITHOUT_MAN
1114Do not build manual pages.
1115When set, these options are also in effect:
1116.Pp
1117.Bl -inset -compact
1118.It Va WITHOUT_MAN_UTILS
1119(unless
1120.Va WITH_MAN_UTILS
1121is set explicitly)
1122.El
1123.It Va WITHOUT_MANCOMPRESS
1124Do not install compressed man pages.
1125Only the uncompressed versions will be installed.
1126.It Va WITH_MANSPLITPKG
1127Split man pages into their own packages during make package.
1128.It Va WITHOUT_MAN_UTILS
1129Do not build utilities for manual pages,
1130.Xr apropos 1 ,
1131.Xr makewhatis 1 ,
1132.Xr man 1 ,
1133.Xr whatis 1 ,
1134.Xr manctl 8 ,
1135and related support files.
1136.It Va WITH_META_MODE
1137Create
1138.Xr make 1
1139meta files when building, which can provide a reliable incremental build when
1140using
1141.Xr filemon 4 .
1142The meta file is created in OBJDIR as
1143.Pa target.meta .
1144These meta files track the command that was executed, its output, and the
1145current directory.
1146The
1147.Xr filemon 4
1148module is required unless
1149.Va NO_FILEMON
1150is defined.
1151When the module is loaded, any files used by the commands executed are
1152tracked as dependencies for the target in its meta file.
1153The target is considered out-of-date and rebuilt if any of these
1154conditions are true compared to the last build:
1155.Bl -bullet -compact
1156.It
1157The command to execute changes.
1158.It
1159The current working directory changes.
1160.It
1161The target's meta file is missing.
1162.It
1163The target's meta file is missing filemon data when filemon is loaded
1164and a previous run did not have it loaded.
1165.It
1166[requires
1167.Xr filemon 4 ]
1168Files read, executed or linked to are newer than the target.
1169.It
1170[requires
1171.Xr filemon 4 ]
1172Files read, written, executed or linked are missing.
1173.El
1174The meta files can also be useful for debugging.
1175.Pp
1176The build hides commands that are executed unless
1177.Va NO_SILENT
1178is defined.
1179Errors cause
1180.Xr make 1
1181to show some of its environment for further debugging.
1182.Pp
1183The build operates as it normally would otherwise.
1184This option originally invoked a different build system but that was renamed
1185to
1186.Va WITH_DIRDEPS_BUILD .
1187.Pp
1188This must be set in the environment, make command line, or
1189.Pa /etc/src-env.conf ,
1190not
1191.Pa /etc/src.conf .
1192.It Va WITHOUT_MLX5TOOL
1193Do not build
1194.Xr mlx5tool 8
1195.Pp
1196This is a default setting on
1197arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
1198.It Va WITH_MLX5TOOL
1199Build
1200.Xr mlx5tool 8
1201.Pp
1202This is a default setting on
1203amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
1204.It Va WITHOUT_NETCAT
1205Do not build
1206.Xr nc 1
1207utility.
1208.It Va WITHOUT_NETGRAPH
1209Do not build applications to support
1210.Xr netgraph 4 .
1211When set, it enforces these options:
1212.Pp
1213.Bl -item -compact
1214.It
1215.Va WITHOUT_ATM
1216.It
1217.Va WITHOUT_BLUETOOTH
1218.El
1219.Pp
1220When set, these options are also in effect:
1221.Pp
1222.Bl -inset -compact
1223.It Va WITHOUT_NETGRAPH_SUPPORT
1224(unless
1225.Va WITH_NETGRAPH_SUPPORT
1226is set explicitly)
1227.El
1228.It Va WITHOUT_NETGRAPH_SUPPORT
1229Build libraries, programs, and kernel modules without netgraph support.
1230.It Va WITHOUT_NIS
1231Do not build
1232.Xr NIS 8
1233support and related programs.
1234If set, you might need to adopt your
1235.Xr nsswitch.conf 5
1236and remove
1237.Sq nis
1238entries.
1239.It Va WITHOUT_NLS
1240Do not build NLS catalogs.
1241When set, it enforces these options:
1242.Pp
1243.Bl -item -compact
1244.It
1245.Va WITHOUT_NLS_CATALOGS
1246.El
1247.It Va WITHOUT_NLS_CATALOGS
1248Do not build NLS catalog support for
1249.Xr csh 1 .
1250.It Va WITHOUT_NS_CACHING
1251Disable name caching in the
1252.Pa nsswitch
1253subsystem.
1254The generic caching daemon,
1255.Xr nscd 8 ,
1256will not be built either if this option is set.
1257.It Va WITHOUT_NTP
1258Do not build
1259.Xr ntpd 8
1260and related programs.
1261.It Va WITHOUT_NVME
1262Do not build nvme related tools and kernel modules.
1263.Pp
1264This is a default setting on
1265arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
1266.It Va WITH_NVME
1267Build nvme related tools and kernel modules.
1268.Pp
1269This is a default setting on
1270amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
1271.It Va WITHOUT_OFED
1272Disable the build of the
1273.Dq "OpenFabrics Enterprise Distribution"
1274Infiniband software stack, including kernel modules and userspace libraries.
1275When set, it enforces these options:
1276.Pp
1277.Bl -item -compact
1278.It
1279.Va WITHOUT_OFED_EXTRA
1280.El
1281.It Va WITH_OFED_EXTRA
1282Build the non-essential components of the
1283.Dq "OpenFabrics Enterprise Distribution"
1284Infiniband software stack, mostly examples.
1285.It Va WITH_OPENLDAP
1286Enable building LDAP support for kerberos using an openldap client from ports.
1287.It Va WITHOUT_OPENMP
1288Do not build LLVM's OpenMP runtime.
1289.Pp
1290This is a default setting on
1291arm/armv6, arm/armv7 and powerpc/powerpc.
1292.It Va WITH_OPENMP
1293Build LLVM's OpenMP runtime.
1294.Pp
1295This is a default setting on
1296amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1297.It Va WITHOUT_OPENSSH
1298Do not build OpenSSH.
1299.It Va WITHOUT_OPENSSL
1300Do not build OpenSSL.
1301When set, it enforces these options:
1302.Pp
1303.Bl -item -compact
1304.It
1305.Va WITHOUT_DMAGENT
1306.It
1307.Va WITHOUT_KERBEROS
1308.It
1309.Va WITHOUT_KERBEROS_SUPPORT
1310.It
1311.Va WITHOUT_LDNS
1312.It
1313.Va WITHOUT_LDNS_UTILS
1314.It
1315.Va WITHOUT_OPENSSH
1316.It
1317.Va WITHOUT_OPENSSL_KTLS
1318.It
1319.Va WITHOUT_PKGBOOTSTRAP
1320.It
1321.Va WITHOUT_UNBOUND
1322.It
1323.Va WITHOUT_ZFS
1324.El
1325.Pp
1326When set, these options are also in effect:
1327.Pp
1328.Bl -inset -compact
1329.It Va WITHOUT_GSSAPI
1330(unless
1331.Va WITH_GSSAPI
1332is set explicitly)
1333.El
1334.It Va WITHOUT_OPENSSL_KTLS
1335Do not include kernel TLS support in OpenSSL.
1336.Pp
1337This is a default setting on
1338arm/armv6, arm/armv7, i386/i386, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1339.It Va WITH_OPENSSL_KTLS
1340Include kernel TLS support in OpenSSL.
1341.Pp
1342This is a default setting on
1343amd64/amd64 and arm64/aarch64.
1344.It Va WITHOUT_PAM
1345Do not build PAM library and modules.
1346.Bf -symbolic
1347This option is deprecated and does nothing.
1348.Ef
1349When set, these options are also in effect:
1350.Pp
1351.Bl -inset -compact
1352.It Va WITHOUT_PAM_SUPPORT
1353(unless
1354.Va WITH_PAM_SUPPORT
1355is set explicitly)
1356.El
1357.It Va WITHOUT_PAM_SUPPORT
1358Build some programs without PAM support, particularly
1359.Xr ftpd 8
1360and
1361.Xr ppp 8 .
1362.It Va WITHOUT_PF
1363Do not build PF firewall package.
1364When set, it enforces these options:
1365.Pp
1366.Bl -item -compact
1367.It
1368.Va WITHOUT_AUTHPF
1369.El
1370.It Va WITHOUT_PIE
1371Do not build dynamically linked binaries as
1372Position-Independent Executable (PIE).
1373.It Va WITHOUT_PKGBOOTSTRAP
1374Do not build
1375.Xr pkg 7
1376bootstrap tool.
1377.It Va WITHOUT_PMC
1378Do not build
1379.Xr pmccontrol 8
1380and related programs.
1381.It Va WITHOUT_PORTSNAP
1382Do not build or install
1383.Xr portsnap 8
1384and related files.
1385.It Va WITHOUT_PPP
1386Do not build
1387.Xr ppp 8
1388and related programs.
1389.It Va WITH_PROFILE
1390Build profiled libraries for use with
1391.Xr gprof 8 .
1392This option is deprecated and may not be present in a future version of
1393.Fx .
1394.It Va WITHOUT_QUOTAS
1395Do not build
1396.Xr quota 1
1397and related programs.
1398.It Va WITHOUT_RADIUS_SUPPORT
1399Do not build radius support into various applications, like
1400.Xr pam_radius 8
1401and
1402.Xr ppp 8 .
1403.It Va WITH_RATELIMIT
1404Build the system with rate limit support.
1405.Pp
1406This makes
1407.Dv SO_MAX_PACING_RATE
1408effective in
1409.Xr getsockopt 2 ,
1410and
1411.Ar txrlimit
1412support in
1413.Xr ifconfig 8 ,
1414by proxy.
1415.It Va WITHOUT_RBOOTD
1416Do not build or install
1417.Xr rbootd 8 .
1418.It Va WITH_REPRODUCIBLE_BUILD
1419Exclude build metadata (such as the build time, user, or host)
1420from the kernel, boot loaders, and uname output, so that builds produce
1421bit-for-bit identical output.
1422.It Va WITHOUT_RESCUE
1423Do not build
1424.Xr rescue 8 .
1425.It Va WITH_RETPOLINE
1426Build the base system with the retpoline speculative execution
1427vulnerability mitigation for CVE-2017-5715.
1428.It Va WITHOUT_ROUTED
1429Do not build
1430.Xr routed 8
1431utility.
1432.It Va WITH_RPCBIND_WARMSTART_SUPPORT
1433Build
1434.Xr rpcbind 8
1435with warmstart support.
1436.It Va WITHOUT_SENDMAIL
1437Do not build
1438.Xr sendmail 8
1439and related programs.
1440.It Va WITHOUT_SERVICESDB
1441Do not install
1442.Pa /var/db/services.db .
1443.It Va WITHOUT_SETUID_LOGIN
1444Set this to disable the installation of
1445.Xr login 1
1446as a set-user-ID root program.
1447.It Va WITHOUT_SHAREDOCS
1448Do not build the
1449.Bx 4.4
1450legacy docs.
1451.It Va WITHOUT_SHARED_TOOLCHAIN
1452Build the toolchain binaries as statically linked executables.
1453The set includes
1454.Xr cc 1 ,
1455.Xr make 1
1456and necessary utilities like assembler, linker and library archive manager.
1457.It Va WITH_SORT_THREADS
1458Enable threads in
1459.Xr sort 1 .
1460.It Va WITHOUT_SOURCELESS
1461Do not build kernel modules that include sourceless code (either microcode or native code for host CPU).
1462When set, it enforces these options:
1463.Pp
1464.Bl -item -compact
1465.It
1466.Va WITHOUT_SOURCELESS_HOST
1467.It
1468.Va WITHOUT_SOURCELESS_UCODE
1469.El
1470.It Va WITHOUT_SOURCELESS_HOST
1471Do not build kernel modules that include sourceless native code for host CPU.
1472.It Va WITHOUT_SOURCELESS_UCODE
1473Do not build kernel modules that include sourceless microcode.
1474.It Va WITHOUT_SSP
1475Do not build world with propolice stack smashing protection.
1476.It Va WITH_STAGING
1477Enable staging of files to a stage tree.
1478This can be best thought of as auto-install to
1479.Va DESTDIR
1480with some extra meta data to ensure dependencies can be tracked.
1481Depends on
1482.Va WITH_DIRDEPS_BUILD .
1483When set, these options are also in effect:
1484.Pp
1485.Bl -inset -compact
1486.It Va WITH_STAGING_MAN
1487(unless
1488.Va WITHOUT_STAGING_MAN
1489is set explicitly)
1490.It Va WITH_STAGING_PROG
1491(unless
1492.Va WITHOUT_STAGING_PROG
1493is set explicitly)
1494.El
1495.Pp
1496This must be set in the environment, make command line, or
1497.Pa /etc/src-env.conf ,
1498not
1499.Pa /etc/src.conf .
1500.It Va WITH_STAGING_MAN
1501Enable staging of man pages to stage tree.
1502.It Va WITH_STAGING_PROG
1503Enable staging of PROGs to stage tree.
1504.It Va WITH_STALE_STAGED
1505Check staged files are not stale.
1506.It Va WITHOUT_STATS
1507Neither build nor install
1508.Lb libstats
1509and dependent binaries.
1510.It Va WITHOUT_SYSCONS
1511Do not build
1512.Xr syscons 4
1513support files such as keyboard maps, fonts, and screen output maps.
1514.It Va WITH_SYSROOT
1515Enable use of sysroot during build.
1516Depends on
1517.Va WITH_DIRDEPS_BUILD .
1518.Pp
1519This must be set in the environment, make command line, or
1520.Pa /etc/src-env.conf ,
1521not
1522.Pa /etc/src.conf .
1523.It Va WITHOUT_SYSTEM_COMPILER
1524Do not opportunistically skip building a cross-compiler during the
1525bootstrap phase of the build.
1526Normally, if the currently installed compiler matches the planned bootstrap
1527compiler type and revision, then it will not be built.
1528This does not prevent a compiler from being built for installation though,
1529only for building one for the build itself.
1530The
1531.Va WITHOUT_CLANG
1532option controls that.
1533.It Va WITHOUT_SYSTEM_LINKER
1534Do not opportunistically skip building a cross-linker during the
1535bootstrap phase of the build.
1536Normally, if the currently installed linker matches the planned bootstrap
1537linker type and revision, then it will not be built.
1538This does not prevent a linker from being built for installation though,
1539only for building one for the build itself.
1540The
1541.Va WITHOUT_LLD
1542option controls that.
1543.Pp
1544This option is only relevant when
1545.Va WITH_LLD_BOOTSTRAP
1546is set.
1547.It Va WITHOUT_TALK
1548Do not build or install
1549.Xr talk 1
1550and
1551.Xr talkd 8 .
1552.It Va WITHOUT_TCP_WRAPPERS
1553Do not build or install
1554.Xr tcpd 8 ,
1555and related utilities.
1556.It Va WITHOUT_TCSH
1557Do not build and install
1558.Pa /bin/csh
1559(which is
1560.Xr tcsh 1 ) .
1561.It Va WITHOUT_TELNET
1562Do not build
1563.Xr telnet 1
1564and related programs.
1565.It Va WITHOUT_TESTS
1566Do not build nor install the
1567.Fx
1568Test Suite in
1569.Pa /usr/tests/ .
1570See
1571.Xr tests 7
1572for more details.
1573This also disables the build of all test-related dependencies, including ATF.
1574When set, it enforces these options:
1575.Pp
1576.Bl -item -compact
1577.It
1578.Va WITHOUT_DTRACE_TESTS
1579.El
1580.Pp
1581When set, these options are also in effect:
1582.Pp
1583.Bl -inset -compact
1584.It Va WITHOUT_GOOGLETEST
1585(unless
1586.Va WITH_GOOGLETEST
1587is set explicitly)
1588.It Va WITHOUT_TESTS_SUPPORT
1589(unless
1590.Va WITH_TESTS_SUPPORT
1591is set explicitly)
1592.El
1593.It Va WITHOUT_TESTS_SUPPORT
1594Disable the build of all test-related dependencies, including ATF.
1595When set, it enforces these options:
1596.Pp
1597.Bl -item -compact
1598.It
1599.Va WITHOUT_GOOGLETEST
1600.El
1601.It Va WITHOUT_TEXTPROC
1602Do not build
1603programs used for text processing.
1604.It Va WITHOUT_TFTP
1605Do not build or install
1606.Xr tftp 1
1607and
1608.Xr tftpd 8 .
1609.It Va WITHOUT_TOOLCHAIN
1610Do not install header or
1611programs used for program development,
1612compilers, debuggers etc.
1613When set, it enforces these options:
1614.Pp
1615.Bl -item -compact
1616.It
1617.Va WITHOUT_CLANG
1618.It
1619.Va WITHOUT_CLANG_EXTRAS
1620.It
1621.Va WITHOUT_CLANG_FORMAT
1622.It
1623.Va WITHOUT_CLANG_FULL
1624.It
1625.Va WITHOUT_INCLUDES
1626.It
1627.Va WITHOUT_LLD
1628.It
1629.Va WITHOUT_LLDB
1630.It
1631.Va WITHOUT_LLVM_COV
1632.El
1633.It Va WITH_UBSAN
1634Build the base system with Undefined Behavior Sanitizer (UBSan) to detect
1635various kinds of undefined behavior at runtime.
1636Requires that Clang be used as the base system compiler
1637and that the runtime support library is available
1638.It Va WITHOUT_UNBOUND
1639Do not build
1640.Xr unbound 8
1641and related programs.
1642.It Va WITHOUT_UNIFIED_OBJDIR
1643Use the historical object directory format for
1644.Xr build 7
1645targets.
1646For native-builds and builds done directly in sub-directories the format of
1647.Pa ${MAKEOBJDIRPREFIX}/${.CURDIR}
1648is used,
1649while for cross-builds
1650.Pa ${MAKEOBJDIRPREFIX}/${TARGET}.${TARGET_ARCH}/${.CURDIR}
1651is used.
1652.Pp
1653This option is transitional and will be removed in a future version of
1654.Fx ,
1655at which time
1656.Va WITH_UNIFIED_OBJDIR
1657will be enabled permanently.
1658.Pp
1659This must be set in the environment, make command line, or
1660.Pa /etc/src-env.conf ,
1661not
1662.Pa /etc/src.conf .
1663.It Va WITHOUT_USB
1664Do not build USB-related programs and libraries.
1665.It Va WITHOUT_USB_GADGET_EXAMPLES
1666Do not build USB gadget kernel modules.
1667.It Va WITHOUT_UTMPX
1668Do not build user accounting tools such as
1669.Xr last 1 ,
1670.Xr users 1 ,
1671.Xr who 1 ,
1672.Xr ac 8 ,
1673.Xr lastlogin 8
1674and
1675.Xr utx 8 .
1676.It Va WITH_VERIEXEC
1677Enable building
1678.Xr veriexec 8
1679which loads the contents of verified manifests into the kernel
1680for use by
1681.Xr mac_veriexec 4
1682.Pp
1683Depends on
1684.Va WITH_BEARSSL .
1685.It Va WITHOUT_VI
1686Do not build and install vi, view, ex and related programs.
1687.It Va WITHOUT_VT
1688Do not build
1689.Xr vt 4
1690support files (fonts and keymaps).
1691.It Va WITHOUT_WARNS
1692Set this to not add warning flags to the compiler invocations.
1693Useful as a temporary workaround when code enters the tree
1694which triggers warnings in environments that differ from the
1695original developer.
1696.It Va WITHOUT_WERROR
1697Set this to not treat compiler warnings as errors.
1698Useful as a temporary workaround when working on fixing compiler warnings.
1699When set, warnings are still printed in the build log but do not fail the build.
1700.It Va WITHOUT_WIRELESS
1701Do not build programs used for 802.11 wireless networks; especially
1702.Xr wpa_supplicant 8
1703and
1704.Xr hostapd 8 .
1705When set, these options are also in effect:
1706.Pp
1707.Bl -inset -compact
1708.It Va WITHOUT_WIRELESS_SUPPORT
1709(unless
1710.Va WITH_WIRELESS_SUPPORT
1711is set explicitly)
1712.El
1713.It Va WITHOUT_WIRELESS_SUPPORT
1714Build libraries, programs, and kernel modules without
1715802.11 wireless support.
1716.It Va WITHOUT_WPA_SUPPLICANT_EAPOL
1717Build
1718.Xr wpa_supplicant 8
1719without support for the IEEE 802.1X protocol and without
1720support for EAP-PEAP, EAP-TLS, EAP-LEAP, and EAP-TTLS
1721protocols (usable only via 802.1X).
1722.It Va WITHOUT_ZFS
1723Do not build the ZFS file system kernel module, libraries such as
1724.Xr libbe 3 ,
1725and user commands such as
1726.Xr zpool 8
1727or
1728.Xr zfs 8 .
1729Also disable ZFS support in utilities and libraries which implement
1730ZFS-specific functionality.
1731.It Va WITHOUT_ZONEINFO
1732Do not build the timezone database.
1733When set, it enforces these options:
1734.Pp
1735.Bl -item -compact
1736.It
1737.Va WITHOUT_ZONEINFO_LEAPSECONDS_SUPPORT
1738.El
1739.It Va WITH_ZONEINFO_LEAPSECONDS_SUPPORT
1740Build leapsecond information in to the timezone database.
1741.El
1742.Sh FILES
1743.Bl -tag -compact -width Pa
1744.It Pa /etc/src.conf
1745.It Pa /etc/src-env.conf
1746.It Pa /usr/share/mk/bsd.own.mk
1747.El
1748.Sh SEE ALSO
1749.Xr make 1 ,
1750.Xr make.conf 5 ,
1751.Xr build 7 ,
1752.Xr ports 7
1753.Sh HISTORY
1754The
1755.Nm
1756file appeared in
1757.Fx 7.0 .
1758.Sh AUTHORS
1759This manual page was autogenerated by
1760.An tools/build/options/makeman .
1761