1.\" DO NOT EDIT-- this file is @generated by tools/build/options/makeman. 2.Dd September 28, 2026 3.Dt SRC.CONF 5 4.Os 5.Sh NAME 6.Nm src.conf 7.Nd "source build options" 8.Sh DESCRIPTION 9The 10.Nm 11file contains variables that control what components will be generated during 12the build process of the 13.Fx 14source tree; see 15.Xr build 7 . 16.Pp 17The 18.Nm 19file uses the standard makefile syntax. 20However, 21.Nm 22should not specify any dependencies to 23.Xr make 1 . 24Instead, 25.Nm 26is to set 27.Xr make 1 28variables that control the aspects of how the system builds. 29.Pp 30The default location of 31.Nm 32is the top level of the source tree, or 33.Pa /etc/src.conf 34if no 35.Nm 36is found in the source tree itself, 37though an alternative location can be specified in the 38.Xr make 1 39variable 40.Va SRCCONF . 41Overriding the location of 42.Nm 43may be necessary if the system-wide settings are not suitable 44for a particular build. 45For instance, setting 46.Va SRCCONF 47to 48.Pa /dev/null 49effectively resets all build controls to their defaults. 50.Pp 51The only purpose of 52.Nm 53is to control the compilation of the 54.Fx 55source code, which is usually located in 56.Pa /usr/src . 57As a rule, the system administrator creates 58.Nm 59when the values of certain control variables need to be changed 60from their defaults. 61.Pp 62In addition, control variables can be specified 63for a particular build via the 64.Fl D 65option of 66.Xr make 1 67or in its environment; see 68.Xr environ 7 . 69.Pp 70The environment of 71.Xr make 1 72for the build can be controlled via the 73.Va SRC_ENV_CONF 74variable, which defaults to 75.Pa /etc/src-env.conf . 76Some examples that may only be set in this file are 77.Va WITH_DIRDEPS_BUILD , 78and 79.Va WITH_META_MODE , 80and 81.Va MAKEOBJDIRPREFIX 82as they are environment-only variables. 83.Pp 84The values of 85.Va WITH_ 86and 87.Va WITHOUT_ 88variables are ignored regardless of their setting; 89even if they would be set to 90.Dq Li FALSE 91or 92.Dq Li NO . 93The presence of an option causes 94it to be honored by 95.Xr make 1 . 96.Pp 97This list provides a name and short description for variables 98that can be used for source builds. 99.Bl -tag -width indent 100.It Va WITHOUT_ACCT 101Do not build process accounting tools such as 102.Xr accton 8 103and 104.Xr sa 8 . 105.It Va WITHOUT_ACPI 106Do not build 107.Xr acpiconf 8 , 108.Xr acpidump 8 109and related programs. 110.It Va WITHOUT_APM 111Do not build 112.Xr apm 8 , 113.Xr apmd 8 114and related programs. 115.It Va WITH_ASAN 116Build the base system with Address Sanitizer (ASan) to detect 117memory corruption bugs such as buffer overflows or use-after-free. 118Requires that Clang be used as the base system compiler 119and that the runtime support library is available. 120When set, it enforces these options: 121.Pp 122.Bl -item -compact 123.It 124.Va WITH_LLVM_BINUTILS 125.El 126.It Va WITHOUT_ASSERT_DEBUG 127Compile programs and libraries without the 128.Xr assert 3 129checks. 130.It Va WITHOUT_AT 131Do not build 132.Xr at 1 133and related utilities. 134.It Va WITHOUT_AUDIT 135Do not build audit support into system programs. 136.It Va WITHOUT_AUTHPF 137Do not build 138.Xr authpf 8 . 139.It Va WITHOUT_AUTOFS 140Do not build 141.Xr autofs 4 142related programs, libraries, and kernel modules. 143.It Va WITHOUT_AUTO_OBJ 144Disable automatic creation of objdirs. 145This is enabled by default if the wanted OBJDIR is writable by the current user. 146.Pp 147This must be set in the environment, make command line, or 148.Pa /etc/src-env.conf , 149not 150.Pa /etc/src.conf . 151.It Va WITH_BEARSSL 152Build the BearSSL library. 153.Pp 154BearSSL is a tiny SSL library suitable for embedded environments. 155For details see 156.Lk https://www.BearSSL.org/ 157.Pp 158This library is currently only used to perform 159signature verification and related operations 160for Verified Exec and 161.Xr loader 8 . 162.Pp 163Due to size constraints in the BIOS environment on x86, one may need to set 164.Va LOADERSIZE 165larger than the 166default 500000, although often loader is under the 500k limit even with 167this option. 168Setting 169.Va LOADERSIZE 170larger than 500000 may cause 171.Xr pxeboot 8 172to be too large to work. 173Careful testing of the loader in the target environment when built with a larger 174limit to establish safe limits is critical because different BIOS environments 175reserve differing amounts of the low 640k space, making a precise limit for 176everybody impossible. 177.Pp 178See also 179.Va WITH_LOADER_PXEBOOT 180for other considerations. 181When set, these options are also in effect: 182.Pp 183.Bl -inset -compact 184.It Va WITH_LOADER_EFI_SECUREBOOT 185(unless 186.Va WITHOUT_LOADER_EFI_SECUREBOOT 187is set explicitly) 188.It Va WITH_LOADER_VERIEXEC 189(unless 190.Va WITHOUT_LOADER_VERIEXEC 191is set explicitly) 192.It Va WITH_LOADER_VERIEXEC_VECTX 193(unless 194.Va WITHOUT_LOADER_VERIEXEC_VECTX 195is set explicitly) 196.It Va WITH_VERIEXEC 197(unless 198.Va WITHOUT_VERIEXEC 199is set explicitly) 200.El 201.It Va WITHOUT_BHYVE 202Do not build or install 203.Xr bhyve 8 , 204associated utilities, and examples. 205.Pp 206This option only affects amd64/amd64 and arm64/aarch64. 207.It Va WITH_BHYVE_SNAPSHOT 208Include support for save and restore (snapshots) in 209.Xr bhyve 8 210and 211.Xr bhyvectl 8 . 212.Pp 213This option only affects amd64/amd64. 214.It Va WITH_BIND_NOW 215Build all binaries with the 216.Dv DF_BIND_NOW 217flag set to indicate that the run-time loader should perform all relocation 218processing at process startup rather than on demand. 219The combination of the 220.Va BIND_NOW 221and 222.Va RELRO 223options provide "full" Relocation Read-Only (RELRO) support. 224With full RELRO the entire GOT is made read-only after performing relocation at 225startup, avoiding GOT overwrite attacks. 226.It Va WITHOUT_BLACKLIST 227This option has been renamed to 228.Va WITHOUT_BLOCKLIST . 229When set, it enforces these options: 230.Pp 231.Bl -item -compact 232.It 233.Va WITHOUT_BLOCKLIST 234.El 235.Pp 236When set, these options are also in effect: 237.Pp 238.Bl -inset -compact 239.It Va WITHOUT_BLACKLIST_SUPPORT 240(unless 241.Va WITH_BLACKLIST_SUPPORT 242is set explicitly) 243.It Va WITHOUT_BLOCKLIST_SUPPORT 244(unless 245.Va WITH_BLOCKLIST_SUPPORT 246is set explicitly) 247.El 248.It Va WITHOUT_BLACKLIST_SUPPORT 249This option has been renamed to 250.Va WITHOUT_BLOCKLIST_SUPPORT . 251When set, it enforces these options: 252.Pp 253.Bl -item -compact 254.It 255.Va WITHOUT_BLOCKLIST_SUPPORT 256.El 257.It Va WITHOUT_BLOCKLIST 258Set this if you do not want to build 259.Xr blocklistd 8 260and 261.Xr blocklistctl 8 . 262When set, it enforces these options: 263.Pp 264.Bl -item -compact 265.It 266.Va WITHOUT_BLACKLIST 267.El 268.Pp 269When set, these options are also in effect: 270.Pp 271.Bl -inset -compact 272.It Va WITHOUT_BLACKLIST_SUPPORT 273(unless 274.Va WITH_BLACKLIST_SUPPORT 275is set explicitly) 276.It Va WITHOUT_BLOCKLIST_SUPPORT 277(unless 278.Va WITH_BLOCKLIST_SUPPORT 279is set explicitly) 280.El 281.It Va WITHOUT_BLOCKLIST_SUPPORT 282Build some programs without 283.Xr libblocklist 3 284support, like 285.Xr fingerd 8 286and 287.Xr sshd 8 . 288When set, it enforces these options: 289.Pp 290.Bl -item -compact 291.It 292.Va WITHOUT_BLACKLIST_SUPPORT 293.El 294.It Va WITHOUT_BLUETOOTH 295Do not build Bluetooth related kernel modules, programs and libraries. 296.It Va WITHOUT_BOOT 297Do not build the boot blocks and loader. 298.It Va WITHOUT_BOOTPARAMD 299Do not build or install 300.Xr bootparamd 8 . 301.It Va WITHOUT_BOOTPD 302Do not build or install 303.Xr bootpd 8 . 304.It Va WITH_BRANCH_PROTECTION 305Build with branch protection enabled. 306On arm64 enable the use of pointer authentication and 307branch target identification instructions on arm64. 308These can be used to help mitigate some exploit techniques. 309.It Va WITHOUT_BSDINSTALL 310Do not build 311.Xr bsdinstall 8 , 312.Xr sade 8 , 313and related programs. 314.It Va WITHOUT_BSNMP 315Do not build or install 316.Xr bsnmpd 1 317and related libraries and data files. 318.It Va WITHOUT_CALENDAR 319Do not build 320.Xr calendar 1 . 321.It Va WITHOUT_CAROOT 322Do not add the trusted certificates from the Mozilla NSS bundle to 323base. 324.It Va WITHOUT_CASPER 325This option has no effect. 326.It Va WITH_CCACHE_BUILD 327Use 328.Xr ccache 1 329for the build. 330No configuration is required except to install the 331.Sy devel/ccache , 332.Sy devel/ccache4 , 333or 334.Sy devel/sccache 335port or package; in the latter case, set 336.Sy CCACHE_NAME=sccache . 337When using with 338.Xr distcc 1 , 339set 340.Sy CCACHE_PREFIX=${LOCALBASE}/bin/distcc . 341The default cache directory is 342.Pa $HOME/.ccache 343and can be changed by setting 344.Sy CCACHE_DIR . 345The 346.Sy CCACHE_COMPILERCHECK 347option defaults to 348.Sy content 349when using the in-tree bootstrap compiler, 350and 351.Sy mtime 352when using an external compiler. 353The 354.Sy CCACHE_CPP2 355option is used for Clang but not GCC. 356.Pp 357Sharing a cache between multiple work directories requires using a layout 358similar to 359.Pa /some/prefix/src 360.Pa /some/prefix/obj 361and an environment such as: 362.Bd -literal -offset indent 363CCACHE_BASEDIR='${SRCTOP:H}' MAKEOBJDIRPREFIX='${SRCTOP:H}/obj' 364.Ed 365.Pp 366See 367.Xr ccache 1 368for more configuration options. 369.It Va WITHOUT_CCD 370Do not build 371.Xr geom_ccd 4 372and related utilities. 373.It Va WITHOUT_CDDL 374Do not build code licensed under Sun's CDDL. 375When set, it enforces these options: 376.Pp 377.Bl -item -compact 378.It 379.Va WITHOUT_CTF 380.It 381.Va WITHOUT_DTRACE 382.It 383.Va WITHOUT_DTRACE_TESTS 384.It 385.Va WITHOUT_LOADER_ZFS 386.It 387.Va WITHOUT_ZFS 388.It 389.Va WITHOUT_ZFS_TESTS 390.El 391.It Va WITHOUT_CLANG 392Do not build the Clang C/C++ compiler during the regular phase of the build. 393When set, it enforces these options: 394.Pp 395.Bl -item -compact 396.It 397.Va WITHOUT_CLANG_EXTRAS 398.It 399.Va WITHOUT_CLANG_FORMAT 400.It 401.Va WITHOUT_CLANG_FULL 402.El 403.Pp 404When set, these options are also in effect: 405.Pp 406.Bl -inset -compact 407.It Va WITHOUT_LLVM_TARGET_AARCH64 408(unless 409.Va WITH_LLVM_TARGET_AARCH64 410is set explicitly) 411.It Va WITHOUT_LLVM_TARGET_ALL 412(unless 413.Va WITH_LLVM_TARGET_ALL 414is set explicitly) 415.It Va WITHOUT_LLVM_TARGET_ARM 416(unless 417.Va WITH_LLVM_TARGET_ARM 418is set explicitly) 419.It Va WITHOUT_LLVM_TARGET_POWERPC 420(unless 421.Va WITH_LLVM_TARGET_POWERPC 422is set explicitly) 423.It Va WITHOUT_LLVM_TARGET_RISCV 424(unless 425.Va WITH_LLVM_TARGET_RISCV 426is set explicitly) 427.El 428.It Va WITHOUT_CLANG_BOOTSTRAP 429Do not build the Clang C/C++ compiler during the bootstrap phase of 430the build. 431To be able to build the system, either gcc or clang bootstrap must be 432enabled unless an alternate compiler is provided via XCC. 433.It Va WITH_CLANG_EXTRAS 434Build additional clang and llvm tools, such as bugpoint and 435clang-format. 436.It Va WITH_CLANG_FORMAT 437Build clang-format. 438.It Va WITHOUT_CLANG_FULL 439Avoid building the ARCMigrate, Rewriter and StaticAnalyzer components of 440the Clang C/C++ compiler. 441.It Va WITH_CLEAN 442Clean before building world and/or kernel. 443Note that recording a new epoch in 444.Pa .clean_build_epoch 445in the root of the source tree will also force a clean world build. 446When set, these options are also in effect: 447.Pp 448.Bl -inset -compact 449.It Va WITHOUT_DEPEND_CLEANUP 450(unless 451.Va WITH_DEPEND_CLEANUP 452is set explicitly) 453.El 454.It Va WITHOUT_CPP 455Do not build 456.Xr cpp 1 . 457.It Va WITHOUT_CROSS_COMPILER 458Do not build any cross compiler in the cross-tools stage of buildworld. 459When compiling a different version of 460.Fx 461than what is installed on the system, provide an alternate 462compiler with XCC to ensure success. 463When compiling with an identical version of 464.Fx 465to the host, this option may be safely used. 466This option may also be safe when the host version of 467.Fx 468is close to the sources being built, but all bets are off if there have 469been any changes to the toolchain between the versions. 470When set, it enforces these options: 471.Pp 472.Bl -item -compact 473.It 474.Va WITHOUT_CLANG_BOOTSTRAP 475.It 476.Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP 477.It 478.Va WITHOUT_LLD_BOOTSTRAP 479.It 480.Va WITHOUT_LLVM_BINUTILS_BOOTSTRAP 481.El 482.It Va WITHOUT_CRYPT 483Do not build any crypto code. 484When set, it enforces these options: 485.Pp 486.Bl -item -compact 487.It 488.Va WITHOUT_DMAGENT 489.It 490.Va WITHOUT_KERBEROS 491.It 492.Va WITHOUT_LDNS 493.It 494.Va WITHOUT_LDNS_UTILS 495.It 496.Va WITHOUT_LOADER_ZFS 497.It 498.Va WITHOUT_MITKRB5 499.It 500.Va WITHOUT_OPENSSH 501.It 502.Va WITHOUT_OPENSSL 503.It 504.Va WITHOUT_OPENSSL_KTLS 505.It 506.Va WITHOUT_PKGBOOTSTRAP 507.It 508.Va WITHOUT_UNBOUND 509.It 510.Va WITHOUT_ZFS 511.It 512.Va WITHOUT_ZFS_TESTS 513.El 514.Pp 515When set, these options are also in effect: 516.Pp 517.Bl -inset -compact 518.It Va WITHOUT_KERBEROS_SUPPORT 519(unless 520.Va WITH_KERBEROS_SUPPORT 521is set explicitly) 522.El 523.It Va WITH_CTF 524Compile with CTF (Compact C Type Format) data. 525CTF data encapsulates a reduced form of debugging information 526similar to DWARF and the venerable stabs and is required for DTrace. 527.It Va WITHOUT_CUSE 528Do not build CUSE-related programs and libraries. 529.It Va WITHOUT_CXGBETOOL 530Do not build 531.Xr cxgbetool 8 532.Pp 533This is a default setting on 534arm/armv7 and riscv/riscv64. 535.It Va WITH_CXGBETOOL 536Build 537.Xr cxgbetool 8 538.Pp 539This is a default setting on 540amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le. 541.It Va WITHOUT_DEBUG_FILES 542Avoid building or installing standalone debug files for each 543executable binary and shared library. 544.It Va WITHOUT_DEPEND_CLEANUP 545Do not attempt to detect if the object tree needs cleaning in part or in 546whole before building. 547This speeds up incremental builds, especially when experimenting with 548build options, but may cause the build to inexplicably fail or produce 549non-functioning binaries. 550.It Va WITH_DETECT_TZ_CHANGES 551Make the time handling code detect changes to the timezone files. 552.It Va WITHOUT_DICT 553Do not build the Webster dictionary files. 554.It Va WITH_DIRDEPS_BUILD 555This is an alternate build system. 556For details see 557https://www.crufty.net/sjg/docs/freebsd-meta-mode.htm. 558Build commands can be seen from the top-level with: 559.Dl make show-valid-targets 560The build is driven by dirdeps.mk using 561.Va DIRDEPS 562stored in 563Makefile.depend files found in each directory. 564.Pp 565The build can be started from anywhere, and behaves the same. 566The initial instance of 567.Xr make 1 568recursively reads 569.Va DIRDEPS 570from 571.Pa Makefile.depend , 572computing a graph of tree dependencies from the current origin. 573Setting 574.Va NO_DIRDEPS 575skips checking dirdep dependencies and will only build in the current 576and child directories. 577.Va NO_DIRDEPS_BELOW 578skips building any dirdeps and only build the current directory. 579.Pp 580This also utilizes the 581.Va WITH_META_MODE 582logic for incremental builds. 583.Pp 584The build hides commands executed unless 585.Va NO_SILENT 586is defined. 587.Pp 588Note that there is currently no mass install feature for this. 589This build is designed for producing packages, that can then be installed 590on a target system. 591.Pp 592The implementation in 593.Fx 594is incomplete. 595Completion would require leaf directories for building each kernel 596and package so that their dependencies can be tracked. 597When set, it enforces these options: 598.Pp 599.Bl -item -compact 600.It 601.Va WITH_INSTALL_AS_USER 602.El 603.Pp 604When set, these options are also in effect: 605.Pp 606.Bl -inset -compact 607.It Va WITH_META_ERROR_TARGET 608(unless 609.Va WITHOUT_META_ERROR_TARGET 610is set explicitly) 611.It Va WITH_META_MODE 612(unless 613.Va WITHOUT_META_MODE 614is set explicitly) 615.It Va WITH_STAGING 616(unless 617.Va WITHOUT_STAGING 618is set explicitly) 619.It Va WITH_STAGING_MAN 620(unless 621.Va WITHOUT_STAGING_MAN 622is set explicitly) 623.It Va WITH_STAGING_PROG 624(unless 625.Va WITHOUT_STAGING_PROG 626is set explicitly) 627.It Va WITH_SYSROOT 628(unless 629.Va WITHOUT_SYSROOT 630is set explicitly) 631.El 632.Pp 633This must be set in the environment, make command line, or 634.Pa /etc/src-env.conf , 635not 636.Pa /etc/src.conf . 637.It Va WITH_DIRDEPS_CACHE 638Cache result of dirdeps.mk which can save significant time 639for subsequent builds. 640Depends on 641.Va WITH_DIRDEPS_BUILD . 642.Pp 643This must be set in the environment, make command line, or 644.Pa /etc/src-env.conf , 645not 646.Pa /etc/src.conf . 647.It Va WITH_DISK_IMAGE_TOOLS_BOOTSTRAP 648Build 649.Xr etdump 1 , 650.Xr makefs 8 651and 652.Xr mkimg 1 653as bootstrap tools. 654.It Va WITHOUT_DMAGENT 655Do not build dma Mail Transport Agent. 656.It Va WITHOUT_DOCCOMPRESS 657Do not install compressed system documentation. 658Only the uncompressed version will be installed. 659.It Va WITHOUT_DTRACE 660Do not build DTrace framework kernel modules, libraries, and user commands. 661When set, it enforces these options: 662.Pp 663.Bl -item -compact 664.It 665.Va WITHOUT_CTF 666.It 667.Va WITHOUT_DTRACE_TESTS 668.El 669.It Va WITH_DTRACE_ASAN 670Compile userspace DTrace code (libdtrace, dtrace(1), lockstat(1), plockstat(1)) 671with address and undefined behavior sanitizers. 672Requires that Clang be used as the base system compiler 673and that the runtime support library is available. 674.It Va WITH_DTRACE_TESTS 675Build and install the DTrace test suite in 676.Pa /usr/tests/cddl/usr.sbin/dtrace . 677This test suite is considered experimental on architectures other than 678amd64/amd64 and running it may cause system instability. 679.It Va WITHOUT_DYNAMICROOT 680Set this if you do not want to link 681.Pa /bin 682and 683.Pa /sbin 684dynamically. 685.It Va WITHOUT_EE 686Do not build and install 687.Xr edit 1 , 688.Xr ee 1 , 689and related programs. 690.It Va WITHOUT_EFI 691Set not to build 692.Xr efivar 3 693and 694.Xr efivar 8 . 695.Pp 696This is a default setting on 697i386/i386, powerpc/powerpc64 and powerpc/powerpc64le. 698.It Va WITH_EFI 699Build 700.Xr efivar 3 701and 702.Xr efivar 8 . 703.Pp 704This is a default setting on 705amd64/amd64, arm/armv7, arm64/aarch64 and riscv/riscv64. 706.It Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP 707Do not build ELF Tool Chain tools 708(addr2line, nm, size, strings and strip) 709as part of the bootstrap process. 710.Bf -symbolic 711An alternate bootstrap tool chain must be provided. 712.Ef 713.It Va WITHOUT_EXAMPLES 714Avoid installing examples to 715.Pa /usr/share/examples/ . 716.It Va WITHOUT_FDT 717Do not build Flattened Device Tree support as part of the base system. 718This includes the device tree compiler (dtc) and libfdt support library. 719.Pp 720This is a default setting on 721amd64/amd64 and i386/i386. 722.It Va WITH_FDT 723Build Flattened Device Tree support as part of the base system. 724This includes the device tree compiler (dtc) and libfdt support library. 725.Pp 726This is a default setting on 727arm/armv7, arm64/aarch64, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 728.It Va WITHOUT_FILE 729Do not build 730.Xr file 1 731and related programs. 732.It Va WITHOUT_FINGER 733Do not build or install 734.Xr finger 1 735and 736.Xr fingerd 8 . 737.It Va WITHOUT_FLOPPY 738Do not build or install programs 739for operating floppy disk driver. 740.It Va WITHOUT_FORMAT_EXTENSIONS 741Do not enable 742.Fl fformat-extensions 743when compiling the kernel. 744Also disables all format checking. 745.It Va WITHOUT_FORTH 746Build bootloaders without Forth support. 747.It Va WITHOUT_FREEBSD_UPDATE 748Do not build 749.Xr freebsd-update 8 . 750.It Va WITHOUT_FTP 751Do not build or install 752.Xr ftp 1 . 753.It Va WITHOUT_GAMES 754Do not build games. 755.It Va WITHOUT_GOOGLETEST 756Neither build nor install 757.Lb libgmock , 758.Lb libgtest , 759and dependent tests. 760.It Va WITHOUT_GPIO 761Do not build 762.Xr gpioctl 8 763as part of the base system. 764.It Va WITHOUT_HAST 765Do not build 766.Xr hastd 8 767and related utilities. 768.It Va WITH_HESIOD 769Build Hesiod support. 770.It Va WITHOUT_HTML 771Do not build HTML docs. 772.It Va WITHOUT_HYPERV 773Do not build or install HyperV utilities. 774.Pp 775This is a default setting on 776arm/armv7, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 777.It Va WITH_HYPERV 778Build or install HyperV utilities. 779.Pp 780This is a default setting on 781amd64/amd64, arm64/aarch64 and i386/i386. 782.It Va WITHOUT_ICONV 783Do not build iconv as part of libc. 784.It Va WITHOUT_INCLUDES 785Do not install header files. 786This option used to be spelled 787.Va NO_INCS . 788.Bf -symbolic 789The option does not work for build targets. 790.Ef 791.It Va WITHOUT_INET 792Do not build programs and libraries related to IPv4 networking. 793When set, it enforces these options: 794.Pp 795.Bl -item -compact 796.It 797.Va WITHOUT_INET_SUPPORT 798.El 799.It Va WITHOUT_INET6 800Do not build 801programs and libraries related to IPv6 networking. 802When set, it enforces these options: 803.Pp 804.Bl -item -compact 805.It 806.Va WITHOUT_INET6_SUPPORT 807.El 808.It Va WITHOUT_INET6_SUPPORT 809Build libraries, programs, and kernel modules without IPv6 support. 810.It Va WITHOUT_INETD 811Do not build 812.Xr inetd 8 . 813.It Va WITHOUT_INET_SUPPORT 814Build libraries, programs, and kernel modules without IPv4 support. 815.It Va WITHOUT_INSTALLLIB 816Set this to not install optional libraries. 817For example, when creating a 818.Xr nanobsd 8 819image. 820.Bf -symbolic 821The option does not work for build targets. 822.Ef 823.It Va WITH_INSTALL_AS_USER 824Make install targets succeed for non-root users by installing 825files with owner and group attributes set to that of the user running 826the 827.Xr make 1 828command. 829The user still must set the 830.Va DESTDIR 831variable to point to a directory where the user has write permissions. 832.It Va WITHOUT_IPFILTER 833Do not build IP Filter package. 834.It Va WITH_IPFILTER_IPFS 835Enable building the 836.Xr ipfs 8 837tool to save and restore IPFilter state tables. 838.It Va WITHOUT_IPFW 839Do not build IPFW tools. 840.It Va WITHOUT_IPSEC_SUPPORT 841Do not build the kernel with 842.Xr ipsec 4 843support. 844This option is needed for 845.Xr ipsec 4 846and 847.Xr tcpmd5 4 . 848.It Va WITHOUT_ISCSI 849Do not build 850.Xr iscsid 8 851and related utilities. 852.It Va WITHOUT_JAIL 853Do not build tools for the support of jails; e.g., 854.Xr jail 8 . 855.It Va WITHOUT_JEMALLOC_LG_VADDR_WIDE 856Disallow programs to use more than 48 address bits on amd64. 857Incompatible with LA57 mode. 858Enabling this option might result in a slight reduction in memory 859consumption for jemalloc metadata, but also requires disabling LA57 860(if hardware supports it). 861.It Va WITHOUT_KDUMP 862Do not build 863.Xr kdump 1 864and 865.Xr truss 1 . 866.It Va WITHOUT_KERBEROS 867Set this to not build Kerberos. 868When set, these options are also in effect: 869.Pp 870.Bl -inset -compact 871.It Va WITHOUT_KERBEROS_SUPPORT 872(unless 873.Va WITH_KERBEROS_SUPPORT 874is set explicitly) 875.El 876.It Va WITHOUT_KERBEROS_SUPPORT 877Build some programs without Kerberos support, like 878.Xr ssh 1 , 879.Xr telnet 1 , 880and 881.Xr sshd 8 . 882.It Va WITH_KERNEL_BIN 883Generate and install kernel.bin from kernel as part of the normal build and 884install processes for the kernel. Available only on arm and arm64. 885 886Usually this will be added to the kernel config file with: 887 888makeoptions WITH_KERNEL_BIN=1 889 890though it can also be used on the command line. 891.It Va WITH_KERNEL_RETPOLINE 892Enable the "retpoline" mitigation for CVE-2017-5715 in the kernel 893build. 894.It Va WITHOUT_KERNEL_SYMBOLS 895Do not install standalone kernel debug symbol files. 896This option has no effect at build time. 897.It Va WITHOUT_KVM 898Do not build the 899.Nm libkvm 900library as a part of the base system. 901.Bf -symbolic 902The option has no effect yet. 903.Ef 904When set, these options are also in effect: 905.Pp 906.Bl -inset -compact 907.It Va WITHOUT_KVM_SUPPORT 908(unless 909.Va WITH_KVM_SUPPORT 910is set explicitly) 911.El 912.It Va WITHOUT_KVM_SUPPORT 913Build some programs without optional 914.Nm libkvm 915support. 916.It Va WITHOUT_LDNS 917Setting this variable will prevent the LDNS library from being built. 918When set, it enforces these options: 919.Pp 920.Bl -item -compact 921.It 922.Va WITHOUT_LDNS_UTILS 923.It 924.Va WITHOUT_UNBOUND 925.El 926.It Va WITHOUT_LDNS_UTILS 927Setting this variable will prevent building the LDNS utilities 928.Xr drill 1 929and 930.Xr host 1 . 931.It Va WITHOUT_LEGACY_CONSOLE 932Do not build programs that support a legacy PC console; e.g., 933.Xr kbdcontrol 1 934and 935.Xr vidcontrol 1 . 936.It Va WITHOUT_LIB32 937On 64-bit platforms, do not build 32-bit library set and a 938.Nm ld-elf32.so.1 939runtime linker. 940.Pp 941This is a default setting on 942arm/armv7, i386/i386, powerpc/powerpc64le and riscv/riscv64. 943.It Va WITH_LIB32 944On 64-bit platforms, build the 32-bit library set and a 945.Nm ld-elf32.so.1 946runtime linker. 947.Pp 948This is a default setting on 949amd64/amd64, arm64/aarch64 and powerpc/powerpc64. 950.It Va WITHOUT_LLD 951Do not build LLVM's lld linker. 952.It Va WITHOUT_LLDB 953Do not build the LLDB debugger. 954.Pp 955This is a default setting on 956riscv/riscv64. 957.It Va WITH_LLDB 958Build the LLDB debugger. 959.Pp 960This is a default setting on 961amd64/amd64, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le. 962.It Va WITHOUT_LLD_BOOTSTRAP 963Do not build the LLD linker during the bootstrap phase of 964the build. 965To be able to build the system an alternate linker must be provided via XLD. 966.It Va WITHOUT_LLVM_ASSERTIONS 967Disable debugging assertions in LLVM. 968.It Va WITHOUT_LLVM_BINUTILS 969Install ELF Tool Chain's binary utilities instead of LLVM's. 970This includes 971.Xr addr2line 1 , 972.Xr ar 1 , 973.Xr nm 1 , 974.Xr objcopy 1 , 975.Xr ranlib 1 , 976.Xr readelf 1 , 977.Xr size 1 , 978and 979.Xr strip 1 . 980Regardless of this setting, LLVM tools are used for 981.Xr c++filt 1 982and 983.Xr objdump 1 . 984.Xr strings 1 985is always provided by ELF Tool Chain. 986.It Va WITHOUT_LLVM_BINUTILS_BOOTSTRAP 987Do not build LLVM binary utilities during the bootstrap phase of 988the build. 989To be able to build the system alternate binary utilities must be provided via 990.Ev XAR , 991.Ev XNM , 992.Ev XOBJCOPY , 993.Ev XSIZE , 994.Ev XSTRINGS , 995and 996.Ev XSTRIPBIN . 997 998.It Va WITH_LLVM_FULL_DEBUGINFO 999Generate full debug information for LLVM libraries and tools, which uses 1000more disk space and build resources, but allows for easier debugging. 1001.It Va WITH_LLVM_LINK_STATIC_LIBRARIES 1002Link LLVM libraries (libllvm, libclang, liblldb) statically into each of 1003the binaries that use them. 1004 1005This means that binaries linked against these libraries, such as clang, 1006ld.lld and lldb will be much larger and position dependent, but will 1007start more quickly. 1008.It Va WITHOUT_LLVM_TARGET_AARCH64 1009Do not build LLVM target support for AArch64. 1010The 1011.Va LLVM_TARGET_ALL 1012option should be used rather than this in most cases. 1013.It Va WITHOUT_LLVM_TARGET_ALL 1014Only build the required LLVM target support. 1015This option is preferred to specific target support options. 1016When set, these options are also in effect: 1017.Pp 1018.Bl -inset -compact 1019.It Va WITHOUT_LLVM_TARGET_AARCH64 1020(unless 1021.Va WITH_LLVM_TARGET_AARCH64 1022is set explicitly) 1023.It Va WITHOUT_LLVM_TARGET_ARM 1024(unless 1025.Va WITH_LLVM_TARGET_ARM 1026is set explicitly) 1027.It Va WITHOUT_LLVM_TARGET_POWERPC 1028(unless 1029.Va WITH_LLVM_TARGET_POWERPC 1030is set explicitly) 1031.It Va WITHOUT_LLVM_TARGET_RISCV 1032(unless 1033.Va WITH_LLVM_TARGET_RISCV 1034is set explicitly) 1035.El 1036.It Va WITHOUT_LLVM_TARGET_ARM 1037Do not build LLVM target support for ARM. 1038The 1039.Va LLVM_TARGET_ALL 1040option should be used rather than this in most cases. 1041.It Va WITH_LLVM_TARGET_BPF 1042Build LLVM target support for BPF. 1043.It Va WITH_LLVM_TARGET_LOONGARCH 1044Build LLVM target support for LoongArch. 1045.It Va WITHOUT_LLVM_TARGET_POWERPC 1046Do not build LLVM target support for PowerPC. 1047The 1048.Va LLVM_TARGET_ALL 1049option should be used rather than this in most cases. 1050.It Va WITHOUT_LLVM_TARGET_RISCV 1051Do not build LLVM target support for RISC-V. 1052The 1053.Va LLVM_TARGET_ALL 1054option should be used rather than this in most cases. 1055.It Va WITHOUT_LLVM_TARGET_X86 1056Do not build LLVM target support for X86. 1057The 1058.Va LLVM_TARGET_ALL 1059option should be used rather than this in most cases. 1060.It Va WITHOUT_LOADER_BIOS 1061Do not build x86 BIOS loader support 1062 1063.It Va WITHOUT_LOADER_BIOS_TEXTONLY 1064Include graphics, font and video mode support in the i386 and amd64 BIOS 1065boot loader. 1066.It Va WITH_LOADER_EFI_SECUREBOOT 1067Enable building 1068.Xr loader 8 1069with support for verification based on certificates obtained from UEFI. 1070.It Va WITHOUT_LOADER_GELI 1071Disable inclusion of GELI crypto support in the boot chain binaries. 1072.Pp 1073This is a default setting on 1074powerpc/powerpc64 and powerpc/powerpc64le. 1075.It Va WITH_LOADER_GELI 1076Build GELI bootloader support. 1077.Pp 1078This is a default setting on 1079amd64/amd64, arm/armv7, arm64/aarch64, i386/i386 and riscv/riscv64. 1080.It Va WITHOUT_LOADER_IA32 1081Do not build the 32-bit UEFI loader. 1082.Pp 1083This is a default setting on 1084arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 1085.It Va WITH_LOADER_IA32 1086Build the 32-bit UEFI loader. 1087.Pp 1088This is a default setting on 1089amd64/amd64. 1090.It Va WITHOUT_LOADER_KBOOT 1091Do not build kboot, a linuxboot environment loader 1092.Pp 1093This is a default setting on 1094arm/armv7, i386/i386, powerpc/powerpc64le and riscv/riscv64. 1095.It Va WITH_LOADER_KBOOT 1096Build kboot, a linuxboot environment loader 1097.Pp 1098This is a default setting on 1099amd64/amd64, arm64/aarch64 and powerpc/powerpc64. 1100.It Va WITHOUT_LOADER_LUA 1101Do not build LUA bindings for the boot loader. 1102.Pp 1103This is a default setting on 1104powerpc/powerpc64 and powerpc/powerpc64le. 1105.It Va WITH_LOADER_LUA 1106Build LUA bindings for the boot loader. 1107.Pp 1108This is a default setting on 1109amd64/amd64, arm/armv7, arm64/aarch64, i386/i386 and riscv/riscv64. 1110.It Va WITHOUT_LOADER_OFW 1111Disable building of openfirmware bootloader components. 1112.Pp 1113This is a default setting on 1114amd64/amd64, arm/armv7, arm64/aarch64, i386/i386 and riscv/riscv64. 1115.It Va WITH_LOADER_OFW 1116Build openfirmware bootloader components. 1117.Pp 1118This is a default setting on 1119powerpc/powerpc64 and powerpc/powerpc64le. 1120.It Va WITHOUT_LOADER_PXEBOOT 1121Do not build pxeboot on i386/amd64. 1122When the pxeboot is too large, or unneeded, it may be disabled with this option. 1123See 1124.Va WITH_LOADER_PXEBOOT 1125for how to adjust the defaults when you need both a larger 1126.Pa /boot/loader 1127and 1128.Pa /boot/pxeboot 1129.Pp 1130This option only has an effect on x86. 1131.It Va WITHOUT_LOADER_UBOOT 1132Disable building of ubldr. 1133.Pp 1134This is a default setting on 1135amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64le and riscv/riscv64. 1136.It Va WITH_LOADER_UBOOT 1137Build ubldr. 1138.Pp 1139This is a default setting on 1140arm/armv7 and powerpc/powerpc64. 1141.It Va WITH_LOADER_USB 1142Build the usb/kshim library 1143 1144.It Va WITHOUT_LOADER_USERBOOT 1145Do not build x86 userboot loader support 1146 1147.It Va WITH_LOADER_VERBOSE 1148Build with extra verbose debugging in the loader. 1149May explode already nearly too large loader over the limit. 1150Use with care. 1151.It Va WITH_LOADER_VERIEXEC 1152Enable building 1153.Xr loader 8 1154with support for verification similar to Verified Exec. 1155.Pp 1156Depends on 1157.Va WITH_BEARSSL . 1158May require a larger 1159.Va LOADERSIZE . 1160When set, these options are also in effect: 1161.Pp 1162.Bl -inset -compact 1163.It Va WITH_LOADER_EFI_SECUREBOOT 1164(unless 1165.Va WITHOUT_LOADER_EFI_SECUREBOOT 1166is set explicitly) 1167.It Va WITH_LOADER_VERIEXEC_VECTX 1168(unless 1169.Va WITHOUT_LOADER_VERIEXEC_VECTX 1170is set explicitly) 1171.El 1172.It Va WITH_LOADER_VERIEXEC_PASS_MANIFEST 1173Enable building 1174.Xr loader 8 1175with support to pass a verified manifest to the kernel. 1176The kernel has to be built with a module to parse the manifest. 1177.Pp 1178Depends on 1179.Va WITH_LOADER_VERIEXEC . 1180.It Va WITH_LOADER_VERIEXEC_VECTX 1181Enable building 1182.Xr loader 8 1183with support for hashing and verifying kernel and modules as a side effect 1184of loading. 1185.Pp 1186Depends on 1187.Va WITH_LOADER_VERIEXEC . 1188.It Va WITHOUT_LOADER_ZFS 1189Do not build ZFS file system boot loader support. 1190.It Va WITHOUT_LOCALES 1191Do not build localization files; see 1192.Xr locale 1 . 1193.It Va WITHOUT_LOCATE 1194Do not build 1195.Xr locate 1 1196and related programs. 1197.It Va WITHOUT_LPR 1198Do not build 1199.Xr lpr 1 1200and related programs. 1201.It Va WITHOUT_LS_COLORS 1202Build 1203.Xr ls 1 1204without support for colors to distinguish file types. 1205.It Va WITHOUT_MACHDEP_OPTIMIZATIONS 1206Prefer machine-independent non-assembler code in libc and libm. 1207.It Va WITHOUT_MAIL 1208Do not build any mail support (MUA or MTA). 1209When set, it enforces these options: 1210.Pp 1211.Bl -item -compact 1212.It 1213.Va WITHOUT_DMAGENT 1214.It 1215.Va WITHOUT_MAILWRAPPER 1216.It 1217.Va WITHOUT_SENDMAIL 1218.El 1219.It Va WITHOUT_MAILWRAPPER 1220Do not build the 1221.Xr mailwrapper 8 1222MTA selector. 1223.It Va WITHOUT_MAKE 1224Do not install 1225.Xr make 1 1226and related support files. 1227.It Va WITHOUT_MAKE_CHECK_USE_SANDBOX 1228Do not execute 1229.Dq Li "make check" 1230in limited sandbox mode. 1231This option should be paired with 1232.Va WITH_INSTALL_AS_USER 1233if executed as an unprivileged user. 1234See 1235.Xr tests 7 1236for more details. 1237.It Va WITH_MALLOC_PRODUCTION 1238Disable assertions and statistics gathering in 1239.Xr malloc 3 . 1240The run-time options 1241.Dv opt.abort , 1242.Dv opt.abort_conf , 1243and 1244.Dv opt.junk 1245also default to false. 1246.It Va WITHOUT_MAN 1247Do not build manual pages. 1248When set, these options are also in effect: 1249.Pp 1250.Bl -inset -compact 1251.It Va WITHOUT_MAN_UTILS 1252(unless 1253.Va WITH_MAN_UTILS 1254is set explicitly) 1255.El 1256.It Va WITHOUT_MANCOMPRESS 1257Do not install compressed man pages. 1258Only the uncompressed versions will be installed. 1259.It Va WITH_MANSPLITPKG 1260Split man pages into their own packages during make package. 1261.It Va WITHOUT_MAN_UTILS 1262Do not build utilities for manual pages, 1263.Xr apropos 1 , 1264.Xr makewhatis 1 , 1265.Xr man 1 , 1266.Xr whatis 1 , 1267.Xr manctl 8 , 1268and related support files. 1269.It Va WITH_META_ERROR_TARGET 1270Enable the META_MODE .ERROR target. 1271.Pp 1272This target will copy the meta file of a failed target 1273to 1274.Va ERROR_LOGDIR 1275(default is 1276.Ql ${SRCTOP:H}/error ) 1277to help with failure analysis. 1278Depends on 1279.Va WITH_META_MODE . 1280This default when 1281.Va WITH_DIRDEPS_BUILD 1282is set. 1283.Pp 1284This must be set in the environment, make command line, or 1285.Pa /etc/src-env.conf , 1286not 1287.Pa /etc/src.conf . 1288.It Va WITH_META_MODE 1289Create 1290.Xr make 1 1291meta files when building, which can provide a reliable incremental build when 1292using 1293.Xr filemon 4 . 1294The meta file is created in OBJDIR as 1295.Pa target.meta . 1296These meta files track the command that was executed, its output, and the 1297current directory. 1298The 1299.Xr filemon 4 1300module is required unless 1301.Va NO_FILEMON 1302is defined. 1303When the module is loaded, any files used by the commands executed are 1304tracked as dependencies for the target in its meta file. 1305The target is considered out-of-date and rebuilt if any of these 1306conditions are true compared to the last build: 1307.Bl -bullet -compact 1308.It 1309The command to execute changes. 1310.It 1311The current working directory changes. 1312.It 1313The target's meta file is missing. 1314.It 1315The target's meta file is missing filemon data when filemon is loaded 1316and a previous run did not have it loaded. 1317.It 1318[requires 1319.Xr filemon 4 ] 1320Files read, executed or linked to are newer than the target. 1321.It 1322[requires 1323.Xr filemon 4 ] 1324Files read, written, executed or linked are missing. 1325.El 1326The meta files can also be useful for debugging. 1327.Pp 1328The build hides commands that are executed unless 1329.Va NO_SILENT 1330is defined. 1331Errors cause 1332.Xr make 1 1333to show some of its environment for further debugging. 1334.Pp 1335The build operates as it normally would otherwise. 1336This option originally invoked a different build system but that was renamed 1337to 1338.Va WITH_DIRDEPS_BUILD . 1339.Pp 1340This must be set in the environment, make command line, or 1341.Pa /etc/src-env.conf , 1342not 1343.Pa /etc/src.conf . 1344.It Va WITHOUT_MITKRB5 1345Set this to build KTH Heimdal instead of MIT Kerberos 5. 1346.It Va WITHOUT_MLX5TOOL 1347Do not build 1348.Xr mlx5tool 8 1349.Pp 1350This is a default setting on 1351arm/armv7 and riscv/riscv64. 1352.It Va WITH_MLX5TOOL 1353Build 1354.Xr mlx5tool 8 1355.Pp 1356This is a default setting on 1357amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le. 1358.It Va WITHOUT_NETCAT 1359Do not build 1360.Xr nc 1 1361utility. 1362.It Va WITHOUT_NETGRAPH 1363Do not build applications to support 1364.Xr netgraph 4 . 1365When set, it enforces these options: 1366.Pp 1367.Bl -item -compact 1368.It 1369.Va WITHOUT_BLUETOOTH 1370.El 1371.Pp 1372When set, these options are also in effect: 1373.Pp 1374.Bl -inset -compact 1375.It Va WITHOUT_NETGRAPH_SUPPORT 1376(unless 1377.Va WITH_NETGRAPH_SUPPORT 1378is set explicitly) 1379.El 1380.It Va WITHOUT_NETGRAPH_SUPPORT 1381Build libraries, programs, and kernel modules without netgraph support. 1382.It Va WITHOUT_NETLINK 1383Do not build 1384.Xr genl 1 1385utility. 1386.It Va WITHOUT_NETLINK_SUPPORT 1387Make libraries and programs use rtsock and 1388.Xr sysctl 3 1389interfaces instead of 1390.Xr snl 3 . 1391.It Va WITHOUT_NIS 1392Do not build 1393.Xr NIS 8 1394support and related programs. 1395If set, you might need to adopt your 1396.Xr nsswitch.conf 5 1397and remove 1398.Sq nis 1399entries. 1400.It Va WITHOUT_NLS 1401Do not build NLS catalogs. 1402When set, it enforces these options: 1403.Pp 1404.Bl -item -compact 1405.It 1406.Va WITHOUT_NLS_CATALOGS 1407.El 1408.It Va WITHOUT_NLS_CATALOGS 1409Do not build NLS catalog support for 1410.Xr csh 1 . 1411.It Va WITHOUT_NS_CACHING 1412Disable name caching in the 1413.Pa nsswitch 1414subsystem. 1415The generic caching daemon, 1416.Xr nscd 8 , 1417will not be built either if this option is set. 1418.It Va WITHOUT_NTP 1419Do not build 1420.Xr ntpd 8 1421and related programs. 1422.It Va WITHOUT_NUAGEINIT 1423Do not install the limited cloud init support scripts. 1424.It Va WITHOUT_OFED 1425Do not build the 1426.Dq "OpenFabrics Enterprise Distribution" 1427InfiniBand software stack, including kernel modules and userspace libraries. 1428.Pp 1429This is a default setting on 1430arm/armv7. 1431When set, it enforces these options: 1432.Pp 1433.Bl -item -compact 1434.It 1435.Va WITHOUT_OFED_EXTRA 1436.El 1437.It Va WITH_OFED 1438Build the 1439.Dq "OpenFabrics Enterprise Distribution" 1440InfiniBand software stack, including kernel modules and userspace libraries. 1441.Pp 1442This is a default setting on 1443amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 1444.It Va WITH_OFED_EXTRA 1445Build the non-essential components of the 1446.Dq "OpenFabrics Enterprise Distribution" 1447Infiniband software stack, mostly examples. 1448.It Va WITH_OPENLDAP 1449Enable building LDAP support for kerberos using an openldap client from ports. 1450.It Va WITHOUT_OPENMP 1451Do not build LLVM's OpenMP runtime. 1452.Pp 1453This is a default setting on 1454arm/armv7. 1455.It Va WITH_OPENMP 1456Build LLVM's OpenMP runtime. 1457.Pp 1458This is a default setting on 1459amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 1460.It Va WITHOUT_OPENSSH 1461Do not build OpenSSH. 1462.It Va WITHOUT_OPENSSL 1463Do not build OpenSSL. 1464When set, it enforces these options: 1465.Pp 1466.Bl -item -compact 1467.It 1468.Va WITHOUT_DMAGENT 1469.It 1470.Va WITHOUT_KERBEROS 1471.It 1472.Va WITHOUT_LDNS 1473.It 1474.Va WITHOUT_LDNS_UTILS 1475.It 1476.Va WITHOUT_LOADER_ZFS 1477.It 1478.Va WITHOUT_MITKRB5 1479.It 1480.Va WITHOUT_OPENSSH 1481.It 1482.Va WITHOUT_OPENSSL_KTLS 1483.It 1484.Va WITHOUT_PKGBOOTSTRAP 1485.It 1486.Va WITHOUT_UNBOUND 1487.It 1488.Va WITHOUT_ZFS 1489.It 1490.Va WITHOUT_ZFS_TESTS 1491.El 1492.Pp 1493When set, these options are also in effect: 1494.Pp 1495.Bl -inset -compact 1496.It Va WITHOUT_KERBEROS_SUPPORT 1497(unless 1498.Va WITH_KERBEROS_SUPPORT 1499is set explicitly) 1500.El 1501.It Va WITHOUT_OPENSSL_KTLS 1502Do not include kernel TLS support in OpenSSL. 1503.Pp 1504This is a default setting on 1505arm/armv7 and i386/i386. 1506.It Va WITH_OPENSSL_KTLS 1507Include kernel TLS support in OpenSSL. 1508.Pp 1509This is a default setting on 1510amd64/amd64, arm64/aarch64, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 1511.It Va WITHOUT_PAM 1512Do not build PAM library and modules. 1513.Bf -symbolic 1514This option is deprecated and does nothing. 1515.Ef 1516When set, these options are also in effect: 1517.Pp 1518.Bl -inset -compact 1519.It Va WITHOUT_PAM_SUPPORT 1520(unless 1521.Va WITH_PAM_SUPPORT 1522is set explicitly) 1523.El 1524.It Va WITHOUT_PAM_SUPPORT 1525Build 1526.Xr ppp 8 1527without PAM support. 1528.It Va WITHOUT_PF 1529Do not build PF firewall package. 1530When set, it enforces these options: 1531.Pp 1532.Bl -item -compact 1533.It 1534.Va WITHOUT_AUTHPF 1535.El 1536.It Va WITHOUT_PIE 1537Do not build dynamically linked binaries as 1538Position-Independent Executable (PIE). 1539.Pp 1540This is a default setting on 1541arm/armv7 and i386/i386. 1542.It Va WITH_PIE 1543Build dynamically linked binaries as 1544Position-Independent Executable (PIE). 1545.Pp 1546This is a default setting on 1547amd64/amd64, arm64/aarch64, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 1548.It Va WITHOUT_PKGBOOTSTRAP 1549Do not build 1550.Xr pkg 7 1551bootstrap tool. 1552.It Va WITHOUT_PKGCONF 1553Do not build the pkgconf binaries nor the libpkgconf library. 1554.It Va WITHOUT_PKGSERVE 1555Do not build or install 1556.Xr pkg-serve 8 . 1557.It Va WITHOUT_PMC 1558Do not build 1559.Xr pmccontrol 8 1560and related programs. 1561.It Va WITHOUT_PPP 1562Do not build 1563.Xr ppp 8 1564and related programs. 1565.It Va WITHOUT_PTHREADS_ASSERTIONS 1566Disable debugging assertions in pthreads library. 1567.It Va WITHOUT_QUOTAS 1568Do not build 1569.Xr quota 1 1570and related programs. 1571.It Va WITHOUT_RADIUS_SUPPORT 1572Do not build radius support into various applications, like 1573.Xr pam_radius 8 1574and 1575.Xr ppp 8 . 1576.It Va WITH_RATELIMIT 1577Build the system with rate limit support. 1578.Pp 1579This makes 1580.Dv SO_MAX_PACING_RATE 1581effective in 1582.Xr getsockopt 2 , 1583and 1584.Ar txrlimit 1585support in 1586.Xr ifconfig 8 , 1587by proxy. 1588.It Va WITHOUT_RBOOTD 1589Do not build or install 1590.Xr rbootd 8 . 1591.It Va WITHOUT_RELRO 1592Do not apply the Relocation Read-Only (RELRO) vulnerability mitigation. 1593See also the 1594.Va BIND_NOW 1595option. 1596.It Va WITH_REPRODUCIBLE_BUILD 1597Exclude build metadata (such as the build time, user, or host) 1598from the kernel, boot loaders, and 1599.Xr uname 1 1600output, so that builds produce 1601bit-for-bit identical output. 1602.It Va WITH_REPRODUCIBLE_PATHS 1603Modify the paths encoded in binary artifacts to be standard path 1604 1605Normally, the actual path is encoded in the binary. However, this makes the 1606build differ depending on the path it was built from. With this option enabled, 1607the paths recorded are /usr/src, regardless of the actual path. With this option 1608disabled, the actual paths are recorded. 1609.It Va WITHOUT_RESCUE 1610Do not build 1611.Xr rescue 8 . 1612.It Va WITH_RETPOLINE 1613Build the base system with the retpoline speculative execution 1614vulnerability mitigation for CVE-2017-5715. 1615.It Va WITHOUT_ROUTED 1616Do not build 1617.Xr routed 8 1618utility. 1619.It Va WITH_RPCBIND_WARMSTART_SUPPORT 1620Build 1621.Xr rpcbind 8 1622with warmstart support. 1623.It Va WITH_RUN_TESTS 1624Run tests as part of the build. 1625.It Va WITHOUT_SCTP_SUPPORT 1626Disable support in the kernel for the 1627.Xr sctp 4 1628Stream Control Transmission Protocol 1629loadable kernel module. 1630.It Va WITHOUT_SENDMAIL 1631Do not build 1632.Xr sendmail 8 1633and related programs. 1634.It Va WITHOUT_SERVICESDB 1635Do not install 1636.Pa /var/db/services.db . 1637.It Va WITHOUT_SETUID_LOGIN 1638Set this to disable the installation of 1639.Xr login 1 1640as a set-user-ID root program. 1641.It Va WITHOUT_SHAREDOCS 1642Do not build the 1643.Bx 4.4 1644legacy docs. 1645.It Va WITH_SORT_THREADS 1646Enable threads in 1647.Xr sort 1 . 1648.It Va WITHOUT_SOUND 1649Do not build userland sound utilities such as 1650.Xr beep 1 1651and 1652.Xr mixer 8 . 1653.It Va WITHOUT_SOURCELESS 1654Do not build kernel modules that include sourceless code (either microcode or native code for host CPU). 1655When set, it enforces these options: 1656.Pp 1657.Bl -item -compact 1658.It 1659.Va WITHOUT_SOURCELESS_HOST 1660.It 1661.Va WITHOUT_SOURCELESS_UCODE 1662.El 1663.It Va WITHOUT_SOURCELESS_HOST 1664Do not build kernel modules that include sourceless native code for host CPU. 1665.It Va WITHOUT_SOURCELESS_UCODE 1666Do not build kernel modules that include sourceless microcode. 1667.It Va WITHOUT_SPLIT_KERNEL_DEBUG 1668Do not build standalone kernel debug files. 1669Debug data (if enabled by the kernel configuration file) 1670will be included in the kernel and modules. 1671When set, it enforces these options: 1672.Pp 1673.Bl -item -compact 1674.It 1675.Va WITHOUT_KERNEL_SYMBOLS 1676.El 1677.It Va WITHOUT_SSP 1678Do not build world with stack smashing protection. 1679See 1680.Xr mitigations 7 1681for more information. 1682.It Va WITH_STAGING 1683Enable staging of files to a stage tree. 1684This can be best thought of as auto-install to 1685.Va DESTDIR 1686with some extra meta data to ensure dependencies can be tracked. 1687Depends on 1688.Va WITH_DIRDEPS_BUILD . 1689When set, these options are also in effect: 1690.Pp 1691.Bl -inset -compact 1692.It Va WITH_STAGING_MAN 1693(unless 1694.Va WITHOUT_STAGING_MAN 1695is set explicitly) 1696.It Va WITH_STAGING_PROG 1697(unless 1698.Va WITHOUT_STAGING_PROG 1699is set explicitly) 1700.El 1701.Pp 1702This must be set in the environment, make command line, or 1703.Pa /etc/src-env.conf , 1704not 1705.Pa /etc/src.conf . 1706.It Va WITH_STAGING_MAN 1707Enable staging of man pages to stage tree. 1708.It Va WITH_STAGING_PROG 1709Enable staging of PROGs to stage tree. 1710.It Va WITH_STALE_STAGED 1711Check staged files are not stale. 1712.It Va WITHOUT_STATS 1713Neither build nor install 1714.Lb libstats 1715and dependent binaries. 1716.It Va WITHOUT_SYSCONS 1717Do not build 1718.Xr syscons 4 1719support files such as keyboard maps, fonts, and screen output maps. 1720.It Va WITH_SYSROOT 1721Enable use of sysroot during build. 1722Depends on 1723.Va WITH_DIRDEPS_BUILD . 1724.Pp 1725This must be set in the environment, make command line, or 1726.Pa /etc/src-env.conf , 1727not 1728.Pa /etc/src.conf . 1729.It Va WITHOUT_SYSTEM_COMPILER 1730Do not opportunistically skip building a cross-compiler during the 1731bootstrap phase of the build. 1732Normally, if the currently installed compiler matches the planned bootstrap 1733compiler type and revision, then it will not be built. 1734This does not prevent a compiler from being built for installation though, 1735only for building one for the build itself. 1736The 1737.Va WITHOUT_CLANG 1738option controls that. 1739.It Va WITHOUT_SYSTEM_LINKER 1740Do not opportunistically skip building a cross-linker during the 1741bootstrap phase of the build. 1742Normally, if the currently installed linker matches the planned bootstrap 1743linker type and revision, then it will not be built. 1744This does not prevent a linker from being built for installation though, 1745only for building one for the build itself. 1746The 1747.Va WITHOUT_LLD 1748option controls that. 1749.Pp 1750This option is only relevant when 1751.Va WITH_LLD_BOOTSTRAP 1752is set. 1753.It Va WITHOUT_TALK 1754Do not build or install 1755.Xr talk 1 1756and 1757.Xr talkd 8 . 1758.It Va WITHOUT_TCP_WRAPPERS 1759Do not build or install 1760.Xr tcpd 8 , 1761and related utilities. 1762.It Va WITHOUT_TCSH 1763Do not build and install 1764.Pa /bin/csh 1765(which is 1766.Xr tcsh 1 ) . 1767.It Va WITHOUT_TELNET 1768Do not build 1769.Xr telnet 1 1770and related programs. 1771.It Va WITHOUT_TESTS 1772Do not build nor install the 1773.Fx 1774Test Suite in 1775.Pa /usr/tests/ . 1776See 1777.Xr tests 7 1778for more details. 1779This also disables the build of all test-related dependencies, including ATF. 1780When set, it enforces these options: 1781.Pp 1782.Bl -item -compact 1783.It 1784.Va WITHOUT_DTRACE_TESTS 1785.It 1786.Va WITHOUT_ZFS_TESTS 1787.El 1788.Pp 1789When set, these options are also in effect: 1790.Pp 1791.Bl -inset -compact 1792.It Va WITHOUT_GOOGLETEST 1793(unless 1794.Va WITH_GOOGLETEST 1795is set explicitly) 1796.It Va WITHOUT_TESTS_SUPPORT 1797(unless 1798.Va WITH_TESTS_SUPPORT 1799is set explicitly) 1800.El 1801.It Va WITHOUT_TESTS_SUPPORT 1802Disable the build of all test-related dependencies, including ATF. 1803When set, it enforces these options: 1804.Pp 1805.Bl -item -compact 1806.It 1807.Va WITHOUT_GOOGLETEST 1808.El 1809.It Va WITHOUT_TEXTPROC 1810Do not build 1811programs used for text processing. 1812.It Va WITHOUT_TFTP 1813Do not build or install 1814.Xr tftp 1 1815and 1816.Xr tftpd 8 . 1817.It Va WITHOUT_TOOLCHAIN 1818Do not install 1819programs used for program development, 1820compilers, debuggers etc. 1821When set, it enforces these options: 1822.Pp 1823.Bl -item -compact 1824.It 1825.Va WITHOUT_CLANG 1826.It 1827.Va WITHOUT_CLANG_EXTRAS 1828.It 1829.Va WITHOUT_CLANG_FORMAT 1830.It 1831.Va WITHOUT_CLANG_FULL 1832.It 1833.Va WITHOUT_LLD 1834.It 1835.Va WITHOUT_LLDB 1836.El 1837.Pp 1838When set, these options are also in effect: 1839.Pp 1840.Bl -inset -compact 1841.It Va WITHOUT_LLVM_BINUTILS 1842(unless 1843.Va WITH_LLVM_BINUTILS 1844is set explicitly) 1845.El 1846.It Va WITH_UBSAN 1847Build the base system with Undefined Behavior Sanitizer (UBSan) to detect 1848various kinds of undefined behavior at runtime. 1849Requires that Clang be used as the base system compiler 1850and that the runtime support library is available 1851.It Va WITHOUT_UNBOUND 1852Do not build 1853.Xr unbound 8 1854and related programs. 1855.It Va WITH_UNDEFINED_VERSION 1856Link libraries with --undefined-version which permits version maps to 1857contain symbols that are not present in the library. 1858If this is necessary to build a particular configuration, a bug is 1859present and the configuration should be reported. 1860.It Va WITHOUT_UNIFIED_OBJDIR 1861Use the historical object directory format for 1862.Xr build 7 1863targets. 1864For native-builds and builds done directly in sub-directories the format of 1865.Pa ${MAKEOBJDIRPREFIX}/${.CURDIR} 1866is used, 1867while for cross-builds 1868.Pa ${MAKEOBJDIRPREFIX}/${TARGET}.${TARGET_ARCH}/${.CURDIR} 1869is used. 1870.Pp 1871This option is transitional and will be removed in a future version of 1872.Fx , 1873at which time 1874.Va WITH_UNIFIED_OBJDIR 1875will be enabled permanently. 1876.Pp 1877This must be set in the environment, make command line, or 1878.Pa /etc/src-env.conf , 1879not 1880.Pa /etc/src.conf . 1881.It Va WITHOUT_USB 1882Do not build USB-related programs and libraries. 1883When set, it enforces these options: 1884.Pp 1885.Bl -item -compact 1886.It 1887.Va WITHOUT_USB_GADGET_EXAMPLES 1888.El 1889.It Va WITHOUT_USB_GADGET_EXAMPLES 1890Do not build USB gadget kernel modules. 1891.It Va WITHOUT_UTMPX 1892Do not build user accounting tools such as 1893.Xr last 1 , 1894.Xr users 1 , 1895.Xr who 1 , 1896.Xr ac 8 , 1897.Xr lastlogin 8 1898and 1899.Xr utx 8 . 1900.It Va WITH_VERIEXEC 1901Enable building 1902.Xr veriexec 8 1903which loads the contents of verified manifests into the kernel 1904for use by 1905.Xr mac_veriexec 4 1906.Pp 1907Depends on 1908.Va WITH_BEARSSL . 1909.It Va WITHOUT_VI 1910Do not build and install vi, view, ex and related programs. 1911.It Va WITHOUT_VT 1912Do not build 1913.Xr vt 4 1914support files (fonts and keymaps). 1915.It Va WITHOUT_WARNS 1916Set this to not add warning flags to the compiler invocations. 1917Useful as a temporary workaround when code enters the tree 1918which triggers warnings in environments that differ from the 1919original developer. 1920.It Va WITHOUT_WERROR 1921Set this to not treat compiler warnings as errors. 1922Useful as a temporary workaround when working on fixing compiler warnings. 1923When set, warnings are still printed in the build log but do not fail the build. 1924.It Va WITHOUT_WIRELESS 1925Do not build programs used for 802.11 wireless networks; especially 1926.Xr wpa_supplicant 8 1927and 1928.Xr hostapd 8 . 1929When set, these options are also in effect: 1930.Pp 1931.Bl -inset -compact 1932.It Va WITHOUT_WIRELESS_SUPPORT 1933(unless 1934.Va WITH_WIRELESS_SUPPORT 1935is set explicitly) 1936.El 1937.It Va WITHOUT_WIRELESS_SUPPORT 1938Build libraries, programs, and kernel modules without 1939802.11 wireless support. 1940.It Va WITHOUT_WPA_SUPPLICANT_EAPOL 1941Build 1942.Xr wpa_supplicant 8 1943without support for the IEEE 802.1X protocol and without 1944support for EAP-PEAP, EAP-TLS, EAP-LEAP, and EAP-TTLS 1945protocols (usable only via 802.1X). 1946.It Va WITH_ZEROREGS 1947Build the basesystem with code to zero caller-used register contents 1948on function return. 1949This prevents leaking temporary values for side channel attacks. 1950Additionally this reduces the number of usable ROP gadgets for attackers. 1951.It Va WITHOUT_ZFS 1952Do not build the ZFS file system kernel module, libraries such as 1953.Xr libbe 3 , 1954and user commands such as 1955.Xr zpool 8 1956or 1957.Xr zfs 8 . 1958Also disable ZFS support in utilities and libraries which implement 1959ZFS-specific functionality. 1960When set, it enforces these options: 1961.Pp 1962.Bl -item -compact 1963.It 1964.Va WITHOUT_ZFS_TESTS 1965.El 1966.It Va WITHOUT_ZFS_TESTS 1967Do not build and install the legacy ZFS test suite. 1968.It Va WITHOUT_ZONEINFO 1969Do not build the timezone database. 1970When set, it enforces these options: 1971.Pp 1972.Bl -item -compact 1973.It 1974.Va WITHOUT_ZONEINFO_LEAPSECONDS_SUPPORT 1975.El 1976.It Va WITH_ZONEINFO_LEAPSECONDS_SUPPORT 1977Build leapsecond information in to the timezone database. 1978This option violates 1979.St -p1003.1 1980and all other applicable standards, and is known to cause unexpected 1981issues with date/time handling in many applications and programming 1982languages. 1983.El 1984.Pp 1985The following options accept a single value from a list of valid values. 1986.Bl -tag -width indent 1987.It Va INIT_ALL 1988Control default initialization of stack variables in C and C++ code. 1989Options other than 1990.Li none 1991require the Clang compiler or GCC 12.0 or later. 1992The default value is 1993.Li none . 1994Valid values are: 1995.Bl -tag -width indent 1996.It Li none 1997Do not initialize stack variables (standard C/C++ behavior). 1998.It Li pattern 1999Build the base system or kernel with stack variables initialized to 2000.Pq compiler defined 2001debugging patterns on function entry. 2002.It Li zero 2003Build the base system or kernel with stack variables initialized 2004to zero on function entry. 2005This value is converted to 2006.Li none 2007for amd64 kernel builds due to incompatibility with ifunc memset. 2008.El 2009.It Va LIBC_MALLOC 2010Specify the 2011.Xr malloc 3 2012implementation used by libc. 2013The default value is 2014.Li jemalloc . 2015Valid values are: 2016.Bl -tag -width indent 2017.It Li jemalloc 2018.El 2019.Pp 2020Other implementations are expected in the future in both 2021.Fx 2022and downstream consumers. 2023.El 2024.Sh FILES 2025.Bl -tag -compact -width Pa 2026.It Pa /etc/src.conf 2027.It Pa /etc/src-env.conf 2028.It Pa /usr/share/mk/bsd.own.mk 2029.El 2030.Sh SEE ALSO 2031.Xr make 1 , 2032.Xr make.conf 5 , 2033.Xr build 7 , 2034.Xr ports 7 2035.Sh HISTORY 2036The 2037.Nm 2038file appeared in 2039.Fx 7.0 . 2040.Sh AUTHORS 2041This manual page was autogenerated by 2042.An tools/build/options/makeman . 2043