1# Standard kernel config items for all ARM64 systems. 2# 3 4makeoptions DEBUG=-g # Build kernel with gdb(1) debug symbols 5makeoptions WITH_CTF=1 # Run ctfconvert(1) for DTrace support 6 7options SCHED_ULE # ULE scheduler 8options NUMA # Non-Uniform Memory Architecture support 9options PREEMPTION # Enable kernel thread preemption 10options VIMAGE # Subsystem virtualization, e.g. VNET 11options INET # InterNETworking 12options INET6 # IPv6 communications protocols 13options CC_CUBIC # include CUBIC congestion control 14options IPSEC_SUPPORT # Allow kldload of ipsec and tcpmd5 15options ROUTE_MPATH # Multipath routing support 16options FIB_ALGO # Modular fib lookups 17options TCP_OFFLOAD # TCP offload 18options TCP_BLACKBOX # Enhanced TCP event logging 19options TCP_HHOOK # hhook(9) framework for TCP 20options TCP_RFC7413 # TCP Fast Open 21options SCTP_SUPPORT # Allow kldload of SCTP 22options KERN_TLS # TLS transmit & receive offload 23options FFS # Berkeley Fast Filesystem 24options SOFTUPDATES # Enable FFS soft updates support 25options UFS_ACL # Support for access control lists 26options UFS_DIRHASH # Improve performance on big directories 27options UFS_GJOURNAL # Enable gjournal-based UFS journaling 28options QUOTA # Enable disk quotas for UFS 29options MD_ROOT # MD is a potential root device 30options NFSCL # Network Filesystem Client 31options NFSD # Network Filesystem Server 32options NFSLOCKD # Network Lock Manager 33options NFS_ROOT # NFS usable as /, requires NFSCL 34options MSDOSFS # MSDOS Filesystem 35options CD9660 # ISO 9660 Filesystem 36options PROCFS # Process filesystem (requires PSEUDOFS) 37options PSEUDOFS # Pseudo-filesystem framework 38options TMPFS # Efficient memory filesystem 39options GEOM_RAID # Soft RAID functionality. 40options GEOM_LABEL # Provides labelization 41options EFIRT # EFI Runtime Services support 42options COMPAT_FREEBSD32 # Compatible with FreeBSD/arm 43options COMPAT_FREEBSD11 # Compatible with FreeBSD11 44options COMPAT_FREEBSD12 # Compatible with FreeBSD12 45options COMPAT_FREEBSD13 # Compatible with FreeBSD13 46options SCSI_DELAY=5000 # Delay (in ms) before probing SCSI 47options KTRACE # ktrace(1) support 48options STACK # stack(9) support 49options SYSVSHM # SYSV-style shared memory 50options SYSVMSG # SYSV-style message queues 51options SYSVSEM # SYSV-style semaphores 52options _KPOSIX_PRIORITY_SCHEDULING # POSIX P1003_1B real-time extensions 53options PRINTF_BUFR_SIZE=128 # Prevent printf output being interspersed. 54options KBD_INSTALL_CDEV # install a CDEV entry in /dev 55options HWPMC_HOOKS # Necessary kernel hooks for hwpmc(4) 56options AUDIT # Security event auditing 57options CAPABILITY_MODE # Capsicum capability mode 58options CAPABILITIES # Capsicum capabilities 59options MAC # TrustedBSD MAC Framework 60options KDTRACE_FRAME # Ensure frames are compiled in 61options KDTRACE_HOOKS # Kernel DTrace hooks 62options DDB_CTF # Kernel ELF linker loads CTF data 63options INCLUDE_CONFIG_FILE # Include this file in kernel 64options VFP # Floating-point support 65options RACCT # Resource accounting framework 66options RACCT_DEFAULT_TO_DISABLED # Set kern.racct.enable=0 by default 67options RCTL # Resource limits 68options LINUX_BOOT_ABI # Boot using booti command from U-Boot 69options PERTHREAD_SSP # Per-thread SSP canary 70 71# Debugging support. Always need this: 72options KDB # Enable kernel debugger support. 73options KDB_TRACE # Print a stack trace for a panic. 74# For full debugger support use (turn off in stable branch): 75options DDB # Support DDB. 76options GDB # Support remote GDB. 77options DEADLKRES # Enable the deadlock resolver 78options INVARIANTS # Enable calls of extra sanity checking 79options INVARIANT_SUPPORT # Extra sanity checks of internal structures, required by INVARIANTS 80options WITNESS # Enable checks to detect deadlocks and cycles 81options WITNESS_SKIPSPIN # Don't run witness on spinlocks for speed 82options MALLOC_DEBUG_MAXZONES=8 # Separate malloc(9) zones 83options ALT_BREAK_TO_DEBUGGER # Enter debugger on keyboard escape sequence 84options VERBOSE_SYSINIT=0 # Support debug.verbose_sysinit, off by default 85 86# Kernel Sanitizers 87#options COVERAGE # Generic kernel coverage. Used by KCOV 88#options KCOV # Kernel Coverage Sanitizer 89# Warning: KUBSAN can result in a kernel too large for loader to load 90#options KUBSAN # Kernel Undefined Behavior Sanitizer 91#options KCSAN # Kernel Concurrency Sanitizer 92 93# Kernel dump features. 94options EKCD # Support for encrypted kernel dumps 95options GZIO # gzip-compressed kernel and user dumps 96options ZSTDIO # zstd-compressed kernel and user dumps 97options DEBUGNET # debugnet networking 98options NETDUMP # netdump(4) client support 99 100# Make an SMP-capable kernel by default 101options SMP # Symmetric MultiProcessor Kernel 102 103# Enable support for the kernel PLL to use an external PPS signal, 104# under supervision of [x]ntpd(8) 105# More info in ntpd documentation: http://www.eecis.udel.edu/~ntp 106 107options PPS_SYNC 108