xref: /freebsd/share/man/man5/src.conf.5 (revision f0cf9b602dc0375dfc279500e0314b7c55273bf0)
1.\" DO NOT EDIT-- this file is @generated by tools/build/options/makeman.
2.\" $FreeBSD$
3.Dd February 9, 2022
4.Dt SRC.CONF 5
5.Os
6.Sh NAME
7.Nm src.conf
8.Nd "source build options"
9.Sh DESCRIPTION
10The
11.Nm
12file contains variables that control what components will be generated during
13the build process of the
14.Fx
15source tree; see
16.Xr build 7 .
17.Pp
18The
19.Nm
20file uses the standard makefile syntax.
21However,
22.Nm
23should not specify any dependencies to
24.Xr make 1 .
25Instead,
26.Nm
27is to set
28.Xr make 1
29variables that control the aspects of how the system builds.
30.Pp
31The default location of
32.Nm
33is
34.Pa /etc/src.conf ,
35though an alternative location can be specified in the
36.Xr make 1
37variable
38.Va SRCCONF .
39Overriding the location of
40.Nm
41may be necessary if the system-wide settings are not suitable
42for a particular build.
43For instance, setting
44.Va SRCCONF
45to
46.Pa /dev/null
47effectively resets all build controls to their defaults.
48.Pp
49The only purpose of
50.Nm
51is to control the compilation of the
52.Fx
53source code, which is usually located in
54.Pa /usr/src .
55As a rule, the system administrator creates
56.Nm
57when the values of certain control variables need to be changed
58from their defaults.
59.Pp
60In addition, control variables can be specified
61for a particular build via the
62.Fl D
63option of
64.Xr make 1
65or in its environment; see
66.Xr environ 7 .
67.Pp
68The environment of
69.Xr make 1
70for the build can be controlled via the
71.Va SRC_ENV_CONF
72variable, which defaults to
73.Pa /etc/src-env.conf .
74Some examples that may only be set in this file are
75.Va WITH_DIRDEPS_BUILD ,
76and
77.Va WITH_META_MODE ,
78and
79.Va MAKEOBJDIRPREFIX
80as they are environment-only variables.
81.Pp
82The values of variables are ignored regardless of their setting;
83even if they would be set to
84.Dq Li FALSE
85or
86.Dq Li NO .
87The presence of an option causes
88it to be honored by
89.Xr make 1 .
90.Pp
91This list provides a name and short description for variables
92that can be used for source builds.
93.Bl -tag -width indent
94.It Va WITHOUT_ACCT
95Do not build process accounting tools such as
96.Xr accton 8
97and
98.Xr sa 8 .
99.It Va WITHOUT_ACPI
100Do not build
101.Xr acpiconf 8 ,
102.Xr acpidump 8
103and related programs.
104.It Va WITHOUT_APM
105Do not build
106.Xr apm 8 ,
107.Xr apmd 8
108and related programs.
109.It Va WITH_ASAN
110Build the base system with Address Sanitizer (ASan) to detect
111memory corruption bugs such as buffer overflows or use-after-free.
112Requires that Clang be used as the base system compiler
113and that the runtime support library is available.
114When set, it enforces these options:
115.Pp
116.Bl -item -compact
117.It
118.Va WITH_LLVM_BINUTILS
119.It
120.Va WITH_LLVM_CXXFILT
121.El
122.It Va WITHOUT_ASSERT_DEBUG
123Compile programs and libraries without the
124.Xr assert 3
125checks.
126.It Va WITHOUT_AT
127Do not build
128.Xr at 1
129and related utilities.
130.It Va WITHOUT_ATM
131Do not build
132programs and libraries related to ATM networking.
133.It Va WITHOUT_AUDIT
134Do not build audit support into system programs.
135.It Va WITHOUT_AUTHPF
136Do not build
137.Xr authpf 8 .
138.It Va WITHOUT_AUTOFS
139Do not build
140.Xr autofs 5
141related programs, libraries, and kernel modules.
142.It Va WITHOUT_AUTO_OBJ
143Disable automatic creation of objdirs.
144This is enabled by default if the wanted OBJDIR is writable by the current user.
145.Pp
146This must be set in the environment, make command line, or
147.Pa /etc/src-env.conf ,
148not
149.Pa /etc/src.conf .
150.It Va WITH_BEARSSL
151Build the BearSSL library.
152.Pp
153BearSSL is a tiny SSL library suitable for embedded environments.
154For details see
155.Lk https://www.BearSSL.org/
156.Pp
157This library is currently only used to perform
158signature verification and related operations
159for Verified Exec and
160.Xr loader 8 .
161When set, these options are also in effect:
162.Pp
163.Bl -inset -compact
164.It Va WITH_LOADER_EFI_SECUREBOOT
165(unless
166.Va WITHOUT_LOADER_EFI_SECUREBOOT
167is set explicitly)
168.It Va WITH_LOADER_VERIEXEC
169(unless
170.Va WITHOUT_LOADER_VERIEXEC
171is set explicitly)
172.It Va WITH_LOADER_VERIEXEC_VECTX
173(unless
174.Va WITHOUT_LOADER_VERIEXEC_VECTX
175is set explicitly)
176.It Va WITH_VERIEXEC
177(unless
178.Va WITHOUT_VERIEXEC
179is set explicitly)
180.El
181.It Va WITHOUT_BHYVE
182Do not build or install
183.Xr bhyve 8 ,
184associated utilities, and examples.
185.Pp
186This option only affects amd64/amd64.
187.It Va WITH_BHYVE_SNAPSHOT
188Include support for save and restore (snapshots) in
189.Xr bhyve 8
190and
191.Xr bhyvectl 8 .
192.Pp
193This option only affects amd64/amd64.
194.It Va WITH_BIND_NOW
195Build all binaries with the
196.Dv DF_BIND_NOW
197flag set to indicate that the run-time loader should perform all relocation
198processing at process startup rather than on demand.
199.It Va WITHOUT_BLACKLIST
200Set this if you do not want to build
201.Xr blacklistd 8
202and
203.Xr blacklistctl 8 .
204When set, these options are also in effect:
205.Pp
206.Bl -inset -compact
207.It Va WITHOUT_BLACKLIST_SUPPORT
208(unless
209.Va WITH_BLACKLIST_SUPPORT
210is set explicitly)
211.El
212.It Va WITHOUT_BLACKLIST_SUPPORT
213Build some programs without
214.Xr libblacklist 3
215support, like
216.Xr fingerd 8 ,
217.Xr ftpd 8 ,
218and
219.Xr sshd 8 .
220.It Va WITHOUT_BLUETOOTH
221Do not build Bluetooth related kernel modules, programs and libraries.
222.It Va WITHOUT_BOOT
223Do not build the boot blocks and loader.
224.It Va WITHOUT_BOOTPARAMD
225Do not build or install
226.Xr bootparamd 8 .
227.It Va WITHOUT_BOOTPD
228Do not build or install
229.Xr bootpd 8 .
230.It Va WITHOUT_BSDINSTALL
231Do not build
232.Xr bsdinstall 8 ,
233.Xr sade 8 ,
234and related programs.
235.It Va WITHOUT_BSD_CPIO
236Do not build the BSD licensed version of cpio based on
237.Xr libarchive 3 .
238.It Va WITHOUT_BSNMP
239Do not build or install
240.Xr bsnmpd 1
241and related libraries and data files.
242.It Va WITHOUT_BZIP2
243Do not build contributed bzip2 software as a part of the base system.
244.Bf -symbolic
245The option has no effect yet.
246.Ef
247When set, these options are also in effect:
248.Pp
249.Bl -inset -compact
250.It Va WITHOUT_BZIP2_SUPPORT
251(unless
252.Va WITH_BZIP2_SUPPORT
253is set explicitly)
254.El
255.It Va WITHOUT_BZIP2_SUPPORT
256Build some programs without optional bzip2 support.
257.It Va WITHOUT_CALENDAR
258Do not build
259.Xr calendar 1 .
260.It Va WITHOUT_CAPSICUM
261Do not build Capsicum support into system programs.
262When set, it enforces these options:
263.Pp
264.Bl -item -compact
265.It
266.Va WITHOUT_CASPER
267.El
268.It Va WITHOUT_CAROOT
269Do not add the trusted certificates from the Mozilla NSS bundle to
270base.
271.It Va WITHOUT_CASPER
272Do not build Casper program and related libraries.
273.It Va WITH_CCACHE_BUILD
274Use
275.Xr ccache 1
276for the build.
277No configuration is required except to install the
278.Sy devel/ccache
279package.
280When using with
281.Xr distcc 1 ,
282set
283.Sy CCACHE_PREFIX=/usr/local/bin/distcc .
284The default cache directory of
285.Pa $HOME/.ccache
286will be used, which can be overridden by setting
287.Sy CCACHE_DIR .
288The
289.Sy CCACHE_COMPILERCHECK
290option defaults to
291.Sy content
292when using the in-tree bootstrap compiler,
293and
294.Sy mtime
295when using an external compiler.
296The
297.Sy CCACHE_CPP2
298option is used for Clang but not GCC.
299.Pp
300Sharing a cache between multiple work directories requires using a layout
301similar to
302.Pa /some/prefix/src
303.Pa /some/prefix/obj
304and an environment such as:
305.Bd -literal -offset indent
306CCACHE_BASEDIR='${SRCTOP:H}' MAKEOBJDIRPREFIX='${SRCTOP:H}/obj'
307.Ed
308.Pp
309See
310.Xr ccache 1
311for more configuration options.
312.It Va WITHOUT_CCD
313Do not build
314.Xr geom_ccd 4
315and related utilities.
316.It Va WITHOUT_CDDL
317Do not build code licensed under Sun's CDDL.
318When set, it enforces these options:
319.Pp
320.Bl -item -compact
321.It
322.Va WITHOUT_CTF
323.It
324.Va WITHOUT_LOADER_ZFS
325.It
326.Va WITHOUT_ZFS
327.El
328.It Va WITHOUT_CLANG
329Do not build the Clang C/C++ compiler during the regular phase of the build.
330When set, it enforces these options:
331.Pp
332.Bl -item -compact
333.It
334.Va WITHOUT_CLANG_EXTRAS
335.It
336.Va WITHOUT_CLANG_FORMAT
337.It
338.Va WITHOUT_CLANG_FULL
339.It
340.Va WITHOUT_LLVM_COV
341.El
342.Pp
343When set, these options are also in effect:
344.Pp
345.Bl -inset -compact
346.It Va WITHOUT_LLVM_TARGET_AARCH64
347(unless
348.Va WITH_LLVM_TARGET_AARCH64
349is set explicitly)
350.It Va WITHOUT_LLVM_TARGET_ALL
351(unless
352.Va WITH_LLVM_TARGET_ALL
353is set explicitly)
354.It Va WITHOUT_LLVM_TARGET_ARM
355(unless
356.Va WITH_LLVM_TARGET_ARM
357is set explicitly)
358.It Va WITHOUT_LLVM_TARGET_POWERPC
359(unless
360.Va WITH_LLVM_TARGET_POWERPC
361is set explicitly)
362.It Va WITHOUT_LLVM_TARGET_RISCV
363(unless
364.Va WITH_LLVM_TARGET_RISCV
365is set explicitly)
366.El
367.It Va WITHOUT_CLANG_BOOTSTRAP
368Do not build the Clang C/C++ compiler during the bootstrap phase of
369the build.
370To be able to build the system, either gcc or clang bootstrap must be
371enabled unless an alternate compiler is provided via XCC.
372.It Va WITH_CLANG_EXTRAS
373Build additional clang and llvm tools, such as bugpoint and
374clang-format.
375.It Va WITH_CLANG_FORMAT
376Build clang-format.
377.It Va WITHOUT_CLANG_FULL
378Avoid building the ARCMigrate, Rewriter and StaticAnalyzer components of
379the Clang C/C++ compiler.
380.It Va WITHOUT_CLANG_IS_CC
381Do not install links to the Clang C/C++ compiler as
382.Pa /usr/bin/cc ,
383.Pa /usr/bin/c++
384and
385.Pa /usr/bin/cpp .
386.It Va WITHOUT_CLEAN
387Do not clean before building world and/or kernel.
388.It Va WITHOUT_CPP
389Do not build
390.Xr cpp 1 .
391.It Va WITHOUT_CROSS_COMPILER
392Do not build any cross compiler in the cross-tools stage of buildworld.
393When compiling a different version of
394.Fx
395than what is installed on the system, provide an alternate
396compiler with XCC to ensure success.
397When compiling with an identical version of
398.Fx
399to the host, this option may be safely used.
400This option may also be safe when the host version of
401.Fx
402is close to the sources being built, but all bets are off if there have
403been any changes to the toolchain between the versions.
404When set, it enforces these options:
405.Pp
406.Bl -item -compact
407.It
408.Va WITHOUT_CLANG_BOOTSTRAP
409.It
410.Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
411.It
412.Va WITHOUT_LLD_BOOTSTRAP
413.El
414.It Va WITHOUT_CRYPT
415Do not build any crypto code.
416When set, it enforces these options:
417.Pp
418.Bl -item -compact
419.It
420.Va WITHOUT_DMAGENT
421.It
422.Va WITHOUT_KERBEROS
423.It
424.Va WITHOUT_KERBEROS_SUPPORT
425.It
426.Va WITHOUT_LDNS
427.It
428.Va WITHOUT_LDNS_UTILS
429.It
430.Va WITHOUT_OPENSSH
431.It
432.Va WITHOUT_OPENSSL
433.It
434.Va WITHOUT_OPENSSL_KTLS
435.It
436.Va WITHOUT_PKGBOOTSTRAP
437.It
438.Va WITHOUT_UNBOUND
439.It
440.Va WITHOUT_ZFS
441.El
442.Pp
443When set, these options are also in effect:
444.Pp
445.Bl -inset -compact
446.It Va WITHOUT_GSSAPI
447(unless
448.Va WITH_GSSAPI
449is set explicitly)
450.El
451.It Va WITH_CTF
452Compile with CTF (Compact C Type Format) data.
453CTF data encapsulates a reduced form of debugging information
454similar to DWARF and the venerable stabs and is required for DTrace.
455.It Va WITHOUT_CUSE
456Do not build CUSE-related programs and libraries.
457.It Va WITHOUT_CXGBETOOL
458Do not build
459.Xr cxgbetool 8
460.Pp
461This is a default setting on
462arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
463.It Va WITH_CXGBETOOL
464Build
465.Xr cxgbetool 8
466.Pp
467This is a default setting on
468amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
469.It Va WITHOUT_CXX
470Do not build C++ headers and runtime libraries.
471It also prevents building binaries and libraries written in C++, including
472.Xr devd 8 .
473When set, it enforces these options:
474.Pp
475.Bl -item -compact
476.It
477.Va WITHOUT_CLANG
478.It
479.Va WITHOUT_CLANG_EXTRAS
480.It
481.Va WITHOUT_CLANG_FORMAT
482.It
483.Va WITHOUT_CLANG_FULL
484.It
485.Va WITHOUT_DTRACE_TESTS
486.It
487.Va WITHOUT_GOOGLETEST
488.It
489.Va WITHOUT_LLVM_COV
490.It
491.Va WITHOUT_OFED
492.It
493.Va WITHOUT_OFED_EXTRA
494.It
495.Va WITHOUT_OPENMP
496.It
497.Va WITHOUT_PMC
498.It
499.Va WITHOUT_TESTS
500.El
501.It Va WITHOUT_DEBUG_FILES
502Avoid building or installing standalone debug files for each
503executable binary and shared library.
504.It Va WITH_DETECT_TZ_CHANGES
505Make the time handling code detect changes to the timezone files.
506.It Va WITHOUT_DIALOG
507Do not build
508.Xr dialog 1 ,
509.Xr dialog 3 ,
510.Xr dpv 1 ,
511and
512.Xr dpv 3 .
513When set, it enforces these options:
514.Pp
515.Bl -item -compact
516.It
517.Va WITHOUT_BSDINSTALL
518.El
519.It Va WITHOUT_DICT
520Do not build the Webster dictionary files.
521.It Va WITH_DIRDEPS_BUILD
522This is an experimental build system.
523For details see
524https://www.crufty.net/sjg/docs/freebsd-meta-mode.htm.
525Build commands can be seen from the top-level with:
526.Dl make show-valid-targets
527The build is driven by dirdeps.mk using
528.Va DIRDEPS
529stored in
530Makefile.depend files found in each directory.
531.Pp
532The build can be started from anywhere, and behaves the same.
533The initial instance of
534.Xr make 1
535recursively reads
536.Va DIRDEPS
537from
538.Pa Makefile.depend ,
539computing a graph of tree dependencies from the current origin.
540Setting
541.Va NO_DIRDEPS
542skips checking dirdep dependencies and will only build in the current
543and child directories.
544.Va NO_DIRDEPS_BELOW
545skips building any dirdeps and only build the current directory.
546.Pp
547This also utilizes the
548.Va WITH_META_MODE
549logic for incremental builds.
550.Pp
551The build hides commands executed unless
552.Va NO_SILENT
553is defined.
554.Pp
555Note that there is currently no mass install feature for this.
556.Pp
557When set, it enforces these options:
558.Pp
559.Bl -item -compact
560.It
561.Va WITH_INSTALL_AS_USER
562.El
563.Pp
564When set, these options are also in effect:
565.Pp
566.Bl -inset -compact
567.It Va WITH_META_MODE
568(unless
569.Va WITHOUT_META_MODE
570is set explicitly)
571.It Va WITH_STAGING
572(unless
573.Va WITHOUT_STAGING
574is set explicitly)
575.It Va WITH_STAGING_MAN
576(unless
577.Va WITHOUT_STAGING_MAN
578is set explicitly)
579.It Va WITH_STAGING_PROG
580(unless
581.Va WITHOUT_STAGING_PROG
582is set explicitly)
583.It Va WITH_SYSROOT
584(unless
585.Va WITHOUT_SYSROOT
586is set explicitly)
587.El
588.Pp
589This must be set in the environment, make command line, or
590.Pa /etc/src-env.conf ,
591not
592.Pa /etc/src.conf .
593.It Va WITH_DIRDEPS_CACHE
594Cache result of dirdeps.mk which can save significant time
595for subsequent builds.
596Depends on
597.Va WITH_DIRDEPS_BUILD .
598.Pp
599This must be set in the environment, make command line, or
600.Pa /etc/src-env.conf ,
601not
602.Pa /etc/src.conf .
603.It Va WITHOUT_DMAGENT
604Do not build dma Mail Transport Agent.
605.It Va WITHOUT_DOCCOMPRESS
606Do not install compressed system documentation.
607Only the uncompressed version will be installed.
608.It Va WITH_DTRACE_TESTS
609Build and install the DTrace test suite in
610.Pa /usr/tests/cddl/usr.sbin/dtrace .
611This test suite is considered experimental on architectures other than
612amd64/amd64 and running it may cause system instability.
613.It Va WITHOUT_DYNAMICROOT
614Set this if you do not want to link
615.Pa /bin
616and
617.Pa /sbin
618dynamically.
619.It Va WITHOUT_EE
620Do not build and install
621.Xr edit 1 ,
622.Xr ee 1 ,
623and related programs.
624.It Va WITHOUT_EFI
625Set not to build
626.Xr efivar 3
627and
628.Xr efivar 8 .
629.Pp
630This is a default setting on
631powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
632.It Va WITH_EFI
633Build
634.Xr efivar 3
635and
636.Xr efivar 8 .
637.Pp
638This is a default setting on
639amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
640.It Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
641Do not build ELF Tool Chain tools
642(addr2line, nm, size, strings and strip)
643as part of the bootstrap process.
644.Bf -symbolic
645An alternate bootstrap tool chain must be provided.
646.Ef
647.It Va WITHOUT_EXAMPLES
648Avoid installing examples to
649.Pa /usr/share/examples/ .
650.It Va WITH_EXPERIMENTAL
651Include experimental features in the build.
652.It Va WITH_EXTRA_TCP_STACKS
653Build extra TCP stack modules.
654.It Va WITHOUT_FDT
655Do not build Flattened Device Tree support as part of the base system.
656This includes the device tree compiler (dtc) and libfdt support library.
657.It Va WITHOUT_FILE
658Do not build
659.Xr file 1
660and related programs.
661.It Va WITHOUT_FINGER
662Do not build or install
663.Xr finger 1
664and
665.Xr fingerd 8 .
666.It Va WITHOUT_FLOPPY
667Do not build or install programs
668for operating floppy disk driver.
669.It Va WITHOUT_FORMAT_EXTENSIONS
670Do not enable
671.Fl fformat-extensions
672when compiling the kernel.
673Also disables all format checking.
674.It Va WITHOUT_FORTH
675Build bootloaders without Forth support.
676.It Va WITHOUT_FP_LIBC
677Build
678.Nm libc
679without floating-point support.
680.It Va WITHOUT_FREEBSD_UPDATE
681Do not build
682.Xr freebsd-update 8 .
683.It Va WITHOUT_FTP
684Do not build or install
685.Xr ftp 1
686and
687.Xr ftpd 8 .
688.It Va WITHOUT_GAMES
689Do not build games.
690.It Va WITHOUT_GH_BC
691Install the traditional FreeBSD
692.Xr bc 1
693and
694.Xr dc 1
695programs instead of the enhanced versions.
696.It Va WITHOUT_GNU_DIFF
697Do not build GNU
698.Xr diff3 1 .
699.It Va WITHOUT_GOOGLETEST
700Neither build nor install
701.Lb libgmock ,
702.Lb libgtest ,
703and dependent tests.
704.It Va WITHOUT_GPIO
705Do not build
706.Xr gpioctl 8
707as part of the base system.
708.It Va WITHOUT_GSSAPI
709Do not build libgssapi.
710.It Va WITHOUT_HAST
711Do not build
712.Xr hastd 8
713and related utilities.
714.It Va WITH_HESIOD
715Build Hesiod support.
716.It Va WITHOUT_HTML
717Do not build HTML docs.
718.It Va WITHOUT_HYPERV
719Do not build or install HyperV utilities.
720.Pp
721This is a default setting on
722arm/armv6, arm/armv7, arm64/aarch64, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
723.It Va WITH_HYPERV
724Build or install HyperV utilities.
725.Pp
726This is a default setting on
727amd64/amd64 and i386/i386.
728.It Va WITHOUT_ICONV
729Do not build iconv as part of libc.
730.It Va WITHOUT_INCLUDES
731Do not install header files.
732This option used to be spelled
733.Va NO_INCS .
734.Bf -symbolic
735The option does not work for build targets.
736.Ef
737.It Va WITHOUT_INET
738Do not build programs and libraries related to IPv4 networking.
739When set, it enforces these options:
740.Pp
741.Bl -item -compact
742.It
743.Va WITHOUT_INET_SUPPORT
744.El
745.It Va WITHOUT_INET6
746Do not build
747programs and libraries related to IPv6 networking.
748When set, it enforces these options:
749.Pp
750.Bl -item -compact
751.It
752.Va WITHOUT_INET6_SUPPORT
753.El
754.It Va WITHOUT_INET6_SUPPORT
755Build libraries, programs, and kernel modules without IPv6 support.
756.It Va WITHOUT_INETD
757Do not build
758.Xr inetd 8 .
759.It Va WITHOUT_INET_SUPPORT
760Build libraries, programs, and kernel modules without IPv4 support.
761.It Va WITH_INIT_ALL_PATTERN
762Build the base system or kernel with stack variables initialized to
763.Pq compiler defined
764debugging patterns on function entry.
765This option requires the clang compiler.
766.It Va WITH_INIT_ALL_ZERO
767Build the base system or kernel with stack variables initialized
768to zero on function entry.
769This option requires that the clang compiler be used.
770.It Va WITHOUT_INSTALLLIB
771Set this to not install optional libraries.
772For example, when creating a
773.Xr nanobsd 8
774image.
775.Bf -symbolic
776The option does not work for build targets.
777.Ef
778.It Va WITH_INSTALL_AS_USER
779Make install targets succeed for non-root users by installing
780files with owner and group attributes set to that of the user running
781the
782.Xr make 1
783command.
784The user still must set the
785.Va DESTDIR
786variable to point to a directory where the user has write permissions.
787.It Va WITHOUT_IPFILTER
788Do not build IP Filter package.
789.It Va WITHOUT_IPFW
790Do not build IPFW tools.
791.It Va WITHOUT_IPSEC_SUPPORT
792Do not build the kernel with
793.Xr ipsec 4
794support.
795This option is needed for
796.Xr ipsec 4
797and
798.Xr tcpmd5 4 .
799.It Va WITHOUT_ISCSI
800Do not build
801.Xr iscsid 8
802and related utilities.
803.It Va WITHOUT_JAIL
804Do not build tools for the support of jails; e.g.,
805.Xr jail 8 .
806.It Va WITHOUT_KDUMP
807Do not build
808.Xr kdump 1
809and
810.Xr truss 1 .
811.It Va WITHOUT_KERBEROS
812Set this to not build Kerberos 5 (KTH Heimdal).
813When set, these options are also in effect:
814.Pp
815.Bl -inset -compact
816.It Va WITHOUT_GSSAPI
817(unless
818.Va WITH_GSSAPI
819is set explicitly)
820.It Va WITHOUT_KERBEROS_SUPPORT
821(unless
822.Va WITH_KERBEROS_SUPPORT
823is set explicitly)
824.El
825.It Va WITHOUT_KERBEROS_SUPPORT
826Build some programs without Kerberos support, like
827.Xr ssh 1 ,
828.Xr telnet 1 ,
829.Xr sshd 8 ,
830and
831.Xr telnetd 8 .
832.It Va WITH_KERNEL_RETPOLINE
833Enable the "retpoline" mitigation for CVE-2017-5715 in the kernel
834build.
835.It Va WITHOUT_KERNEL_SYMBOLS
836Do not install kernel debug symbol files.
837.It Va WITHOUT_KVM
838Do not build the
839.Nm libkvm
840library as a part of the base system.
841.Bf -symbolic
842The option has no effect yet.
843.Ef
844When set, these options are also in effect:
845.Pp
846.Bl -inset -compact
847.It Va WITHOUT_KVM_SUPPORT
848(unless
849.Va WITH_KVM_SUPPORT
850is set explicitly)
851.El
852.It Va WITHOUT_KVM_SUPPORT
853Build some programs without optional
854.Nm libkvm
855support.
856.It Va WITHOUT_LDNS
857Setting this variable will prevent the LDNS library from being built.
858When set, it enforces these options:
859.Pp
860.Bl -item -compact
861.It
862.Va WITHOUT_LDNS_UTILS
863.It
864.Va WITHOUT_UNBOUND
865.El
866.It Va WITHOUT_LDNS_UTILS
867Setting this variable will prevent building the LDNS utilities
868.Xr drill 1
869and
870.Xr host 1 .
871.It Va WITHOUT_LEGACY_CONSOLE
872Do not build programs that support a legacy PC console; e.g.,
873.Xr kbdcontrol 1
874and
875.Xr vidcontrol 1 .
876.It Va WITHOUT_LIB32
877On 64-bit platforms, do not build 32-bit library set and a
878.Nm ld-elf32.so.1
879runtime linker.
880.Pp
881This is a default setting on
882arm/armv6, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
883.It Va WITHOUT_LLD
884Do not build LLVM's lld linker.
885.It Va WITHOUT_LLDB
886Do not build the LLDB debugger.
887.Pp
888This is a default setting on
889arm/armv6, arm/armv7, riscv/riscv64 and riscv/riscv64sf.
890.It Va WITH_LLDB
891Build the LLDB debugger.
892.Pp
893This is a default setting on
894amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
895.It Va WITHOUT_LLD_BOOTSTRAP
896Do not build the LLD linker during the bootstrap phase of
897the build.
898To be able to build the system an alternate linker must be provided via XLD.
899.It Va WITHOUT_LLD_IS_LD
900Do not install a
901.Pa /usr/bin/ld symlink
902to
903.Pa ld.lld .
904The system will not have a usable tool chain unless a linker is provided
905some other way.
906.It Va WITHOUT_LLVM_ASSERTIONS
907Disable debugging assertions in LLVM.
908.It Va WITH_LLVM_BINUTILS
909Install LLVM's binutils (ar, addr2line, nm, etc.) instead of ELF Tool Chain's.
910.It Va WITHOUT_LLVM_COV
911Do not build the
912.Xr llvm-cov 1
913tool.
914.It Va WITHOUT_LLVM_CXXFILT
915Install ELF Tool Chain's cxxfilt as c++filt, instead of LLVM's llvm-cxxfilt.
916.It Va WITHOUT_LLVM_TARGET_AARCH64
917Do not build LLVM target support for AArch64.
918The
919.Va LLVM_TARGET_ALL
920option should be used rather than this in most cases.
921.It Va WITHOUT_LLVM_TARGET_ALL
922Only build the required LLVM target support.
923This option is preferred to specific target support options.
924When set, these options are also in effect:
925.Pp
926.Bl -inset -compact
927.It Va WITHOUT_LLVM_TARGET_AARCH64
928(unless
929.Va WITH_LLVM_TARGET_AARCH64
930is set explicitly)
931.It Va WITHOUT_LLVM_TARGET_ARM
932(unless
933.Va WITH_LLVM_TARGET_ARM
934is set explicitly)
935.It Va WITHOUT_LLVM_TARGET_POWERPC
936(unless
937.Va WITH_LLVM_TARGET_POWERPC
938is set explicitly)
939.It Va WITHOUT_LLVM_TARGET_RISCV
940(unless
941.Va WITH_LLVM_TARGET_RISCV
942is set explicitly)
943.El
944.It Va WITHOUT_LLVM_TARGET_ARM
945Do not build LLVM target support for ARM.
946The
947.Va LLVM_TARGET_ALL
948option should be used rather than this in most cases.
949.It Va WITH_LLVM_TARGET_BPF
950Build LLVM target support for BPF.
951The
952.Va LLVM_TARGET_ALL
953option should be used rather than this in most cases.
954.It Va WITH_LLVM_TARGET_MIPS
955Build LLVM target support for MIPS.
956The
957.Va LLVM_TARGET_ALL
958option should be used rather than this in most cases.
959.It Va WITHOUT_LLVM_TARGET_POWERPC
960Do not build LLVM target support for PowerPC.
961The
962.Va LLVM_TARGET_ALL
963option should be used rather than this in most cases.
964.It Va WITHOUT_LLVM_TARGET_RISCV
965Do not build LLVM target support for RISC-V.
966The
967.Va LLVM_TARGET_ALL
968option should be used rather than this in most cases.
969.It Va WITHOUT_LLVM_TARGET_X86
970Do not build LLVM target support for X86.
971The
972.Va LLVM_TARGET_ALL
973option should be used rather than this in most cases.
974.It Va WITH_LOADER_EFI_SECUREBOOT
975Enable building
976.Xr loader 8
977with support for verification based on certificates obtained from UEFI.
978.Pp
979.It Va WITH_LOADER_FIREWIRE
980Enable firewire support in /boot/loader on x86.
981This option is a nop on all other platforms.
982.It Va WITHOUT_LOADER_GELI
983Disable inclusion of GELI crypto support in the boot chain binaries.
984.Pp
985This is a default setting on
986powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
987.It Va WITH_LOADER_GELI
988Build GELI bootloader support.
989.Pp
990This is a default setting on
991amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
992.It Va WITHOUT_LOADER_KBOOT
993Do not build kboot, a linuxboot environment loader
994.Pp
995This is a default setting on
996amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
997.It Va WITH_LOADER_KBOOT
998Build kboot, a linuxboot environment loader
999.Pp
1000This is a default setting on
1001powerpc/powerpc64.
1002.It Va WITHOUT_LOADER_LUA
1003Do not build LUA bindings for the boot loader.
1004.Pp
1005This is a default setting on
1006powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
1007.It Va WITH_LOADER_LUA
1008Build LUA bindings for the boot loader.
1009.Pp
1010This is a default setting on
1011amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
1012.It Va WITHOUT_LOADER_OFW
1013Disable building of openfirmware bootloader components.
1014.Pp
1015This is a default setting on
1016amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
1017.It Va WITH_LOADER_OFW
1018Build openfirmware bootloader components.
1019.Pp
1020This is a default setting on
1021powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
1022.It Va WITHOUT_LOADER_UBOOT
1023Disable building of ubldr.
1024.Pp
1025This is a default setting on
1026amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1027.It Va WITH_LOADER_UBOOT
1028Build ubldr.
1029.Pp
1030This is a default setting on
1031arm/armv6, arm/armv7, powerpc/powerpc and powerpc/powerpc64.
1032.It Va WITH_LOADER_VERBOSE
1033Build with extra verbose debugging in the loader.
1034May explode already nearly too large loader over the limit.
1035Use with care.
1036.It Va WITH_LOADER_VERIEXEC
1037Enable building
1038.Xr loader 8
1039with support for verification similar to Verified Exec.
1040.Pp
1041Depends on
1042.Va WITH_BEARSSL .
1043When set, these options are also in effect:
1044.Pp
1045.Bl -inset -compact
1046.It Va WITH_LOADER_EFI_SECUREBOOT
1047(unless
1048.Va WITHOUT_LOADER_EFI_SECUREBOOT
1049is set explicitly)
1050.It Va WITH_LOADER_VERIEXEC_VECTX
1051(unless
1052.Va WITHOUT_LOADER_VERIEXEC_VECTX
1053is set explicitly)
1054.El
1055.It Va WITH_LOADER_VERIEXEC_PASS_MANIFEST
1056Enable building
1057.Xr loader 8
1058with support to pass a verified manifest to the kernel.
1059The kernel has to be built with a module to parse the manifest.
1060.Pp
1061Depends on
1062.Va WITH_LOADER_VERIEXEC .
1063.It Va WITHOUT_LOADER_ZFS
1064Do not build ZFS file system boot loader support.
1065.It Va WITHOUT_LOCALES
1066Do not build localization files; see
1067.Xr locale 1 .
1068.It Va WITHOUT_LOCATE
1069Do not build
1070.Xr locate 1
1071and related programs.
1072.It Va WITHOUT_LPR
1073Do not build
1074.Xr lpr 1
1075and related programs.
1076.It Va WITHOUT_LS_COLORS
1077Build
1078.Xr ls 1
1079without support for colors to distinguish file types.
1080.It Va WITHOUT_MAIL
1081Do not build any mail support (MUA or MTA).
1082When set, it enforces these options:
1083.Pp
1084.Bl -item -compact
1085.It
1086.Va WITHOUT_DMAGENT
1087.It
1088.Va WITHOUT_MAILWRAPPER
1089.It
1090.Va WITHOUT_SENDMAIL
1091.El
1092.It Va WITHOUT_MAILWRAPPER
1093Do not build the
1094.Xr mailwrapper 8
1095MTA selector.
1096.It Va WITHOUT_MAKE
1097Do not install
1098.Xr make 1
1099and related support files.
1100.It Va WITHOUT_MAKE_CHECK_USE_SANDBOX
1101Do not execute
1102.Dq Li "make check"
1103in limited sandbox mode.
1104This option should be paired with
1105.Va WITH_INSTALL_AS_USER
1106if executed as an unprivileged user.
1107See
1108.Xr tests 7
1109for more details.
1110.It Va WITH_MALLOC_PRODUCTION
1111Disable assertions and statistics gathering in
1112.Xr malloc 3 .
1113It also defaults the A and J runtime options to off.
1114.It Va WITHOUT_MAN
1115Do not build manual pages.
1116When set, these options are also in effect:
1117.Pp
1118.Bl -inset -compact
1119.It Va WITHOUT_MAN_UTILS
1120(unless
1121.Va WITH_MAN_UTILS
1122is set explicitly)
1123.El
1124.It Va WITHOUT_MANCOMPRESS
1125Do not install compressed man pages.
1126Only the uncompressed versions will be installed.
1127.It Va WITH_MANSPLITPKG
1128Split man pages into their own packages during make package.
1129.It Va WITHOUT_MAN_UTILS
1130Do not build utilities for manual pages,
1131.Xr apropos 1 ,
1132.Xr makewhatis 1 ,
1133.Xr man 1 ,
1134.Xr whatis 1 ,
1135.Xr manctl 8 ,
1136and related support files.
1137.It Va WITH_META_MODE
1138Create
1139.Xr make 1
1140meta files when building, which can provide a reliable incremental build when
1141using
1142.Xr filemon 4 .
1143The meta file is created in OBJDIR as
1144.Pa target.meta .
1145These meta files track the command that was executed, its output, and the
1146current directory.
1147The
1148.Xr filemon 4
1149module is required unless
1150.Va NO_FILEMON
1151is defined.
1152When the module is loaded, any files used by the commands executed are
1153tracked as dependencies for the target in its meta file.
1154The target is considered out-of-date and rebuilt if any of these
1155conditions are true compared to the last build:
1156.Bl -bullet -compact
1157.It
1158The command to execute changes.
1159.It
1160The current working directory changes.
1161.It
1162The target's meta file is missing.
1163.It
1164The target's meta file is missing filemon data when filemon is loaded
1165and a previous run did not have it loaded.
1166.It
1167[requires
1168.Xr filemon 4 ]
1169Files read, executed or linked to are newer than the target.
1170.It
1171[requires
1172.Xr filemon 4 ]
1173Files read, written, executed or linked are missing.
1174.El
1175The meta files can also be useful for debugging.
1176.Pp
1177The build hides commands that are executed unless
1178.Va NO_SILENT
1179is defined.
1180Errors cause
1181.Xr make 1
1182to show some of its environment for further debugging.
1183.Pp
1184The build operates as it normally would otherwise.
1185This option originally invoked a different build system but that was renamed
1186to
1187.Va WITH_DIRDEPS_BUILD .
1188.Pp
1189This must be set in the environment, make command line, or
1190.Pa /etc/src-env.conf ,
1191not
1192.Pa /etc/src.conf .
1193.It Va WITHOUT_MLX5TOOL
1194Do not build
1195.Xr mlx5tool 8
1196.Pp
1197This is a default setting on
1198arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
1199.It Va WITH_MLX5TOOL
1200Build
1201.Xr mlx5tool 8
1202.Pp
1203This is a default setting on
1204amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
1205.It Va WITHOUT_NETCAT
1206Do not build
1207.Xr nc 1
1208utility.
1209.It Va WITHOUT_NETGRAPH
1210Do not build applications to support
1211.Xr netgraph 4 .
1212When set, it enforces these options:
1213.Pp
1214.Bl -item -compact
1215.It
1216.Va WITHOUT_ATM
1217.It
1218.Va WITHOUT_BLUETOOTH
1219.El
1220.Pp
1221When set, these options are also in effect:
1222.Pp
1223.Bl -inset -compact
1224.It Va WITHOUT_NETGRAPH_SUPPORT
1225(unless
1226.Va WITH_NETGRAPH_SUPPORT
1227is set explicitly)
1228.El
1229.It Va WITHOUT_NETGRAPH_SUPPORT
1230Build libraries, programs, and kernel modules without netgraph support.
1231.It Va WITHOUT_NIS
1232Do not build
1233.Xr NIS 8
1234support and related programs.
1235If set, you might need to adopt your
1236.Xr nsswitch.conf 5
1237and remove
1238.Sq nis
1239entries.
1240.It Va WITHOUT_NLS
1241Do not build NLS catalogs.
1242When set, it enforces these options:
1243.Pp
1244.Bl -item -compact
1245.It
1246.Va WITHOUT_NLS_CATALOGS
1247.El
1248.It Va WITHOUT_NLS_CATALOGS
1249Do not build NLS catalog support for
1250.Xr csh 1 .
1251.It Va WITHOUT_NS_CACHING
1252Disable name caching in the
1253.Pa nsswitch
1254subsystem.
1255The generic caching daemon,
1256.Xr nscd 8 ,
1257will not be built either if this option is set.
1258.It Va WITHOUT_NTP
1259Do not build
1260.Xr ntpd 8
1261and related programs.
1262.It Va WITHOUT_NVME
1263Do not build nvme related tools and kernel modules.
1264.Pp
1265This is a default setting on
1266arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
1267.It Va WITH_NVME
1268Build nvme related tools and kernel modules.
1269.Pp
1270This is a default setting on
1271amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
1272.It Va WITHOUT_OFED
1273Disable the build of the
1274.Dq "OpenFabrics Enterprise Distribution"
1275Infiniband software stack, including kernel modules and userspace libraries.
1276When set, it enforces these options:
1277.Pp
1278.Bl -item -compact
1279.It
1280.Va WITHOUT_OFED_EXTRA
1281.El
1282.It Va WITH_OFED_EXTRA
1283Build the non-essential components of the
1284.Dq "OpenFabrics Enterprise Distribution"
1285Infiniband software stack, mostly examples.
1286.It Va WITH_OPENLDAP
1287Enable building LDAP support for kerberos using an openldap client from ports.
1288.It Va WITHOUT_OPENMP
1289Do not build LLVM's OpenMP runtime.
1290.Pp
1291This is a default setting on
1292arm/armv6, arm/armv7 and powerpc/powerpc.
1293.It Va WITH_OPENMP
1294Build LLVM's OpenMP runtime.
1295.Pp
1296This is a default setting on
1297amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1298.It Va WITHOUT_OPENSSH
1299Do not build OpenSSH.
1300.It Va WITHOUT_OPENSSL
1301Do not build OpenSSL.
1302When set, it enforces these options:
1303.Pp
1304.Bl -item -compact
1305.It
1306.Va WITHOUT_DMAGENT
1307.It
1308.Va WITHOUT_KERBEROS
1309.It
1310.Va WITHOUT_KERBEROS_SUPPORT
1311.It
1312.Va WITHOUT_LDNS
1313.It
1314.Va WITHOUT_LDNS_UTILS
1315.It
1316.Va WITHOUT_OPENSSH
1317.It
1318.Va WITHOUT_OPENSSL_KTLS
1319.It
1320.Va WITHOUT_PKGBOOTSTRAP
1321.It
1322.Va WITHOUT_UNBOUND
1323.It
1324.Va WITHOUT_ZFS
1325.El
1326.Pp
1327When set, these options are also in effect:
1328.Pp
1329.Bl -inset -compact
1330.It Va WITHOUT_GSSAPI
1331(unless
1332.Va WITH_GSSAPI
1333is set explicitly)
1334.El
1335.It Va WITHOUT_OPENSSL_KTLS
1336Do not include kernel TLS support in OpenSSL.
1337.Pp
1338This is a default setting on
1339arm/armv6, arm/armv7, i386/i386, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1340.It Va WITH_OPENSSL_KTLS
1341Include kernel TLS support in OpenSSL.
1342.Pp
1343This is a default setting on
1344amd64/amd64 and arm64/aarch64.
1345.It Va WITHOUT_PAM
1346Do not build PAM library and modules.
1347.Bf -symbolic
1348This option is deprecated and does nothing.
1349.Ef
1350When set, these options are also in effect:
1351.Pp
1352.Bl -inset -compact
1353.It Va WITHOUT_PAM_SUPPORT
1354(unless
1355.Va WITH_PAM_SUPPORT
1356is set explicitly)
1357.El
1358.It Va WITHOUT_PAM_SUPPORT
1359Build some programs without PAM support, particularly
1360.Xr ftpd 8
1361and
1362.Xr ppp 8 .
1363.It Va WITHOUT_PF
1364Do not build PF firewall package.
1365When set, it enforces these options:
1366.Pp
1367.Bl -item -compact
1368.It
1369.Va WITHOUT_AUTHPF
1370.El
1371.It Va WITHOUT_PIE
1372Do not build dynamically linked binaries as
1373Position-Independent Executable (PIE).
1374.It Va WITHOUT_PKGBOOTSTRAP
1375Do not build
1376.Xr pkg 7
1377bootstrap tool.
1378.It Va WITHOUT_PMC
1379Do not build
1380.Xr pmccontrol 8
1381and related programs.
1382.It Va WITHOUT_PORTSNAP
1383Do not build or install
1384.Xr portsnap 8
1385and related files.
1386.It Va WITHOUT_PPP
1387Do not build
1388.Xr ppp 8
1389and related programs.
1390.It Va WITH_PROFILE
1391Build profiled libraries for use with
1392.Xr gprof 8 .
1393This option is deprecated and is not present in
1394.Fx 14 .
1395.It Va WITHOUT_QUOTAS
1396Do not build
1397.Xr quota 1
1398and related programs.
1399.It Va WITHOUT_RADIUS_SUPPORT
1400Do not build radius support into various applications, like
1401.Xr pam_radius 8
1402and
1403.Xr ppp 8 .
1404.It Va WITH_RATELIMIT
1405Build the system with rate limit support.
1406.Pp
1407This makes
1408.Dv SO_MAX_PACING_RATE
1409effective in
1410.Xr getsockopt 2 ,
1411and
1412.Ar txrlimit
1413support in
1414.Xr ifconfig 8 ,
1415by proxy.
1416.It Va WITHOUT_RBOOTD
1417Do not build or install
1418.Xr rbootd 8 .
1419.It Va WITH_REPRODUCIBLE_BUILD
1420Exclude build metadata (such as the build time, user, or host)
1421from the kernel, boot loaders, and uname output, so that builds produce
1422bit-for-bit identical output.
1423.It Va WITHOUT_RESCUE
1424Do not build
1425.Xr rescue 8 .
1426.It Va WITH_RETPOLINE
1427Build the base system with the retpoline speculative execution
1428vulnerability mitigation for CVE-2017-5715.
1429.It Va WITHOUT_ROUTED
1430Do not build
1431.Xr routed 8
1432utility.
1433.It Va WITH_RPCBIND_WARMSTART_SUPPORT
1434Build
1435.Xr rpcbind 8
1436with warmstart support.
1437.It Va WITHOUT_SENDMAIL
1438Do not build
1439.Xr sendmail 8
1440and related programs.
1441.It Va WITHOUT_SERVICESDB
1442Do not install
1443.Pa /var/db/services.db .
1444.It Va WITHOUT_SETUID_LOGIN
1445Set this to disable the installation of
1446.Xr login 1
1447as a set-user-ID root program.
1448.It Va WITHOUT_SHAREDOCS
1449Do not build the
1450.Bx 4.4
1451legacy docs.
1452.It Va WITHOUT_SHARED_TOOLCHAIN
1453Build the toolchain binaries as statically linked executables.
1454The set includes
1455.Xr cc 1 ,
1456.Xr make 1
1457and necessary utilities like assembler, linker and library archive manager.
1458.It Va WITH_SORT_THREADS
1459Enable threads in
1460.Xr sort 1 .
1461.It Va WITHOUT_SOURCELESS
1462Do not build kernel modules that include sourceless code (either microcode or native code for host CPU).
1463When set, it enforces these options:
1464.Pp
1465.Bl -item -compact
1466.It
1467.Va WITHOUT_SOURCELESS_HOST
1468.It
1469.Va WITHOUT_SOURCELESS_UCODE
1470.El
1471.It Va WITHOUT_SOURCELESS_HOST
1472Do not build kernel modules that include sourceless native code for host CPU.
1473.It Va WITHOUT_SOURCELESS_UCODE
1474Do not build kernel modules that include sourceless microcode.
1475.It Va WITHOUT_SSP
1476Do not build world with propolice stack smashing protection.
1477.It Va WITH_STAGING
1478Enable staging of files to a stage tree.
1479This can be best thought of as auto-install to
1480.Va DESTDIR
1481with some extra meta data to ensure dependencies can be tracked.
1482Depends on
1483.Va WITH_DIRDEPS_BUILD .
1484When set, these options are also in effect:
1485.Pp
1486.Bl -inset -compact
1487.It Va WITH_STAGING_MAN
1488(unless
1489.Va WITHOUT_STAGING_MAN
1490is set explicitly)
1491.It Va WITH_STAGING_PROG
1492(unless
1493.Va WITHOUT_STAGING_PROG
1494is set explicitly)
1495.El
1496.Pp
1497This must be set in the environment, make command line, or
1498.Pa /etc/src-env.conf ,
1499not
1500.Pa /etc/src.conf .
1501.It Va WITH_STAGING_MAN
1502Enable staging of man pages to stage tree.
1503.It Va WITH_STAGING_PROG
1504Enable staging of PROGs to stage tree.
1505.It Va WITH_STALE_STAGED
1506Check staged files are not stale.
1507.It Va WITHOUT_STATS
1508Neither build nor install
1509.Lb libstats
1510and dependent binaries.
1511.It Va WITHOUT_SYSCONS
1512Do not build
1513.Xr syscons 4
1514support files such as keyboard maps, fonts, and screen output maps.
1515.It Va WITH_SYSROOT
1516Enable use of sysroot during build.
1517Depends on
1518.Va WITH_DIRDEPS_BUILD .
1519.Pp
1520This must be set in the environment, make command line, or
1521.Pa /etc/src-env.conf ,
1522not
1523.Pa /etc/src.conf .
1524.It Va WITHOUT_SYSTEM_COMPILER
1525Do not opportunistically skip building a cross-compiler during the
1526bootstrap phase of the build.
1527Normally, if the currently installed compiler matches the planned bootstrap
1528compiler type and revision, then it will not be built.
1529This does not prevent a compiler from being built for installation though,
1530only for building one for the build itself.
1531The
1532.Va WITHOUT_CLANG
1533option controls that.
1534.It Va WITHOUT_SYSTEM_LINKER
1535Do not opportunistically skip building a cross-linker during the
1536bootstrap phase of the build.
1537Normally, if the currently installed linker matches the planned bootstrap
1538linker type and revision, then it will not be built.
1539This does not prevent a linker from being built for installation though,
1540only for building one for the build itself.
1541The
1542.Va WITHOUT_LLD
1543option controls that.
1544.Pp
1545This option is only relevant when
1546.Va WITH_LLD_BOOTSTRAP
1547is set.
1548.It Va WITHOUT_TALK
1549Do not build or install
1550.Xr talk 1
1551and
1552.Xr talkd 8 .
1553.It Va WITHOUT_TCP_WRAPPERS
1554Do not build or install
1555.Xr tcpd 8 ,
1556and related utilities.
1557.It Va WITHOUT_TCSH
1558Do not build and install
1559.Pa /bin/csh
1560(which is
1561.Xr tcsh 1 ) .
1562.It Va WITHOUT_TELNET
1563Do not build
1564.Xr telnet 1
1565and related programs.
1566.It Va WITHOUT_TESTS
1567Do not build nor install the
1568.Fx
1569Test Suite in
1570.Pa /usr/tests/ .
1571See
1572.Xr tests 7
1573for more details.
1574This also disables the build of all test-related dependencies, including ATF.
1575When set, it enforces these options:
1576.Pp
1577.Bl -item -compact
1578.It
1579.Va WITHOUT_DTRACE_TESTS
1580.El
1581.Pp
1582When set, these options are also in effect:
1583.Pp
1584.Bl -inset -compact
1585.It Va WITHOUT_GOOGLETEST
1586(unless
1587.Va WITH_GOOGLETEST
1588is set explicitly)
1589.It Va WITHOUT_TESTS_SUPPORT
1590(unless
1591.Va WITH_TESTS_SUPPORT
1592is set explicitly)
1593.El
1594.It Va WITHOUT_TESTS_SUPPORT
1595Disable the build of all test-related dependencies, including ATF.
1596When set, it enforces these options:
1597.Pp
1598.Bl -item -compact
1599.It
1600.Va WITHOUT_GOOGLETEST
1601.El
1602.It Va WITHOUT_TEXTPROC
1603Do not build
1604programs used for text processing.
1605.It Va WITHOUT_TFTP
1606Do not build or install
1607.Xr tftp 1
1608and
1609.Xr tftpd 8 .
1610.It Va WITHOUT_TOOLCHAIN
1611Do not install header or
1612programs used for program development,
1613compilers, debuggers etc.
1614When set, it enforces these options:
1615.Pp
1616.Bl -item -compact
1617.It
1618.Va WITHOUT_CLANG
1619.It
1620.Va WITHOUT_CLANG_EXTRAS
1621.It
1622.Va WITHOUT_CLANG_FORMAT
1623.It
1624.Va WITHOUT_CLANG_FULL
1625.It
1626.Va WITHOUT_INCLUDES
1627.It
1628.Va WITHOUT_LLD
1629.It
1630.Va WITHOUT_LLDB
1631.It
1632.Va WITHOUT_LLVM_COV
1633.El
1634.It Va WITH_UBSAN
1635Build the base system with Undefined Behavior Sanitizer (UBSan) to detect
1636various kinds of undefined behavior at runtime.
1637Requires that Clang be used as the base system compiler
1638and that the runtime support library is available
1639.It Va WITHOUT_UNBOUND
1640Do not build
1641.Xr unbound 8
1642and related programs.
1643.It Va WITHOUT_UNIFIED_OBJDIR
1644Use the historical object directory format for
1645.Xr build 7
1646targets.
1647For native-builds and builds done directly in sub-directories the format of
1648.Pa ${MAKEOBJDIRPREFIX}/${.CURDIR}
1649is used,
1650while for cross-builds
1651.Pa ${MAKEOBJDIRPREFIX}/${TARGET}.${TARGET_ARCH}/${.CURDIR}
1652is used.
1653.Pp
1654This option is transitional and will be removed before the 12.0 release,
1655at which time
1656.va WITH_UNIFIED_OBJDIR
1657will be enabled permanently.
1658.Pp
1659This must be set in the environment, make command line, or
1660.Pa /etc/src-env.conf ,
1661not
1662.Pa /etc/src.conf .
1663.It Va WITHOUT_USB
1664Do not build USB-related programs and libraries.
1665.It Va WITHOUT_USB_GADGET_EXAMPLES
1666Do not build USB gadget kernel modules.
1667.It Va WITHOUT_UTMPX
1668Do not build user accounting tools such as
1669.Xr last 1 ,
1670.Xr users 1 ,
1671.Xr who 1 ,
1672.Xr ac 8 ,
1673.Xr lastlogin 8
1674and
1675.Xr utx 8 .
1676.It Va WITH_VERIEXEC
1677Enable building
1678.Xr veriexec 8
1679which loads the contents of verified manifests into the kernel
1680for use by
1681.Xr mac_veriexec 4
1682.Pp
1683Depends on
1684.Va WITH_BEARSSL .
1685.It Va WITHOUT_VI
1686Do not build and install vi, view, ex and related programs.
1687.It Va WITHOUT_VT
1688Do not build
1689.Xr vt 4
1690support files (fonts and keymaps).
1691.It Va WITHOUT_WARNS
1692Set this to not add warning flags to the compiler invocations.
1693Useful as a temporary workaround when code enters the tree
1694which triggers warnings in environments that differ from the
1695original developer.
1696.It Va WITHOUT_WERROR
1697Set this to not treat compiler warnings as errors.
1698Useful as a temporary workaround when working on fixing compiler warnings.
1699When set, warnings are still printed in the build log but do not fail the build.
1700.It Va WITHOUT_WIRELESS
1701Do not build programs used for 802.11 wireless networks; especially
1702.Xr wpa_supplicant 8
1703and
1704.Xr hostapd 8 .
1705When set, these options are also in effect:
1706.Pp
1707.Bl -inset -compact
1708.It Va WITHOUT_WIRELESS_SUPPORT
1709(unless
1710.Va WITH_WIRELESS_SUPPORT
1711is set explicitly)
1712.El
1713.It Va WITHOUT_WIRELESS_SUPPORT
1714Build libraries, programs, and kernel modules without
1715802.11 wireless support.
1716.It Va WITHOUT_WPA_SUPPLICANT_EAPOL
1717Build
1718.Xr wpa_supplicant 8
1719without support for the IEEE 802.1X protocol and without
1720support for EAP-PEAP, EAP-TLS, EAP-LEAP, and EAP-TTLS
1721protocols (usable only via 802.1X).
1722.It Va WITHOUT_ZFS
1723Do not build ZFS file system kernel module, libraries, and user commands.
1724.It Va WITHOUT_ZONEINFO
1725Do not build the timezone database.
1726When set, it enforces these options:
1727.Pp
1728.Bl -item -compact
1729.It
1730.Va WITHOUT_ZONEINFO_LEAPSECONDS_SUPPORT
1731.El
1732.It Va WITH_ZONEINFO_LEAPSECONDS_SUPPORT
1733Build leapsecond information in to the timezone database.
1734.El
1735.Sh FILES
1736.Bl -tag -compact -width Pa
1737.It Pa /etc/src.conf
1738.It Pa /etc/src-env.conf
1739.It Pa /usr/share/mk/bsd.own.mk
1740.El
1741.Sh SEE ALSO
1742.Xr make 1 ,
1743.Xr make.conf 5 ,
1744.Xr build 7 ,
1745.Xr ports 7
1746.Sh HISTORY
1747The
1748.Nm
1749file appeared in
1750.Fx 7.0 .
1751.Sh AUTHORS
1752This manual page was autogenerated by
1753.An tools/build/options/makeman .
1754