xref: /freebsd/sys/conf/NOTES (revision 14bb3e5e7d4245bc78907617454c7ea15cabfe6d)
1# $FreeBSD$
2#
3# NOTES -- Lines that can be cut/pasted into kernel and hints configs.
4#
5# Lines that begin with 'device', 'options', 'machine', 'ident', 'maxusers',
6# 'makeoptions', 'hints', etc. go into the kernel configuration that you
7# run config(8) with.
8#
9# Lines that begin with 'hint.' are NOT for config(8), they go into your
10# hints file.  See /boot/device.hints and/or the 'hints' config(8) directive.
11#
12# Please use ``make LINT'' to create an old-style LINT file if you want to
13# do kernel test-builds.
14#
15# This file contains machine independent kernel configuration notes.  For
16# machine dependent notes, look in /sys/<arch>/conf/NOTES.
17#
18
19#
20# NOTES conventions and style guide:
21#
22# Large block comments should begin and end with a line containing only a
23# comment character.
24#
25# To describe a particular object, a block comment (if it exists) should
26# come first.  Next should come device, options, and hints lines in that
27# order.  All device and option lines must be described by a comment that
28# doesn't just expand the device or option name.  Use only a concise
29# comment on the same line if possible.  Very detailed descriptions of
30# devices and subsystems belong in man pages.
31#
32# A space followed by a tab separates 'options' from an option name.  Two
33# spaces followed by a tab separate 'device' from a device name.  Comments
34# after an option or device should use one space after the comment character.
35# To comment out a negative option that disables code and thus should not be
36# enabled for LINT builds, precede 'options' with "#!".
37#
38
39#
40# This is the ``identification'' of the kernel.  Usually this should
41# be the same as the name of your kernel.
42#
43ident		LINT
44
45#
46# The `maxusers' parameter controls the static sizing of a number of
47# internal system tables by a formula defined in subr_param.c.
48# Omitting this parameter or setting it to 0 will cause the system to
49# auto-size based on physical memory.
50#
51maxusers	10
52
53#
54# The `makeoptions' parameter allows variables to be passed to the
55# generated Makefile in the build area.
56#
57# CONF_CFLAGS gives some extra compiler flags that are added to ${CFLAGS}
58# after most other flags.  Here we use it to inhibit use of non-optimal
59# gcc builtin functions (e.g., memcmp).
60#
61# DEBUG happens to be magic.
62# The following is equivalent to 'config -g KERNELNAME' and creates
63# 'kernel.debug' compiled with -g debugging as well as a normal
64# 'kernel'.  Use 'make install.debug' to install the debug kernel
65# but that isn't normally necessary as the debug symbols are not loaded
66# by the kernel and are not useful there anyway.
67#
68# KERNEL can be overridden so that you can change the default name of your
69# kernel.
70#
71# MODULES_OVERRIDE can be used to limit modules built to a specific list.
72#
73makeoptions	CONF_CFLAGS=-fno-builtin  #Don't allow use of memcmp, etc.
74#makeoptions	DEBUG=-g		#Build kernel with gdb(1) debug symbols
75#makeoptions	KERNEL=foo		#Build kernel "foo" and install "/foo"
76# Only build Linux API modules and plus those parts of the sound system I need.
77#makeoptions	MODULES_OVERRIDE="linux sound/snd sound/pcm sound/driver/maestro3"
78makeoptions	DESTDIR=/tmp
79
80
81#
82# Certain applications can grow to be larger than the 512M limit
83# that FreeBSD initially imposes.  Below are some options to
84# allow that limit to grow to 1GB, and can be increased further
85# with changing the parameters.  MAXDSIZ is the maximum that the
86# limit can be set to, and the DFLDSIZ is the default value for
87# the limit.  MAXSSIZ is the maximum that the stack limit can be
88# set to.  You might want to set the default lower than the max,
89# and explicitly set the maximum with a shell command for processes
90# that regularly exceed the limit like INND.
91#
92options 	MAXDSIZ=(1024UL*1024*1024)
93options 	MAXSSIZ=(128UL*1024*1024)
94options 	DFLDSIZ=(1024UL*1024*1024)
95
96#
97# BLKDEV_IOSIZE sets the default block size used in user block
98# device I/O.  Note that this value will be overridden by the label
99# when specifying a block device from a label with a non-0
100# partition blocksize.  The default is PAGE_SIZE.
101#
102options 	BLKDEV_IOSIZE=8192
103
104# Options for the VM subsystem
105# L2 cache size (in KB) can be specified in PQ_CACHESIZE
106options 	PQ_CACHESIZE=512	# color for 512k cache
107# Deprecated options supported for backwards compatibility
108#options 	PQ_NOOPT		# No coloring
109#options 	PQ_LARGECACHE		# color for 512k cache
110#options 	PQ_HUGECACHE		# color for 1024k cache
111#options 	PQ_MEDIUMCACHE		# color for 256k cache
112#options 	PQ_NORMALCACHE		# color for 64k cache
113
114# This allows you to actually store this configuration file into
115# the kernel binary itself, where it may be later read by saying:
116#    strings -n 3 /boot/kernel/kernel | sed -n 's/^___//p' > MYKERNEL
117#
118options 	INCLUDE_CONFIG_FILE     # Include this file in kernel
119
120options 	GEOM_AES		# Don't use, use GEOM_BDE
121options 	GEOM_APPLE		# Apple partitioning
122options 	GEOM_BDE		# Disk encryption.
123options 	GEOM_BSD		# BSD disklabels
124options 	GEOM_CONCAT		# Disk concatenation.
125options 	GEOM_FOX		# Redundant path mitigation
126options 	GEOM_GATE		# Userland services.
127options 	GEOM_GPT		# GPT partitioning
128options 	GEOM_MBR		# DOS/MBR partitioning
129options 	GEOM_NOP		# Test class.
130options 	GEOM_PC98		# NEC PC9800 partitioning
131options 	GEOM_STRIPE		# Disk striping.
132options 	GEOM_SUNLABEL		# Sun/Solaris partitioning
133options 	GEOM_VOL		# Volume names from UFS superblock
134
135#
136# The root device and filesystem type can be compiled in;
137# this provides a fallback option if the root device cannot
138# be correctly guessed by the bootstrap code, or an override if
139# the RB_DFLTROOT flag (-r) is specified when booting the kernel.
140#
141options 	ROOTDEVNAME=\"ufs:da0s2e\"
142
143
144#####################################################################
145# Scheduler options:
146#
147# Specifying one of SCHED_4BSD or SCHED_ULE is mandatory.  These options
148# select which scheduler is compiled in.
149#
150# SCHED_4BSD is the historical, proven, BSD scheduler.  It has a global run
151# queue and no cpu affinity which makes it suboptimal for SMP.  It has very
152# good interactivity and priority selection.
153#
154# SCHED_ULE is a new scheduler that has been designed for SMP and has some
155# advantages for UP as well.  It is intended to replace the 4BSD scheduler
156# over time.
157#
158options 	SCHED_4BSD
159#options 	SCHED_ULE
160
161#####################################################################
162# SMP OPTIONS:
163#
164# SMP enables building of a Symmetric MultiProcessor Kernel.
165
166# Mandatory:
167options 	SMP			# Symmetric MultiProcessor Kernel
168
169# ADAPTIVE_MUTEXES changes the behavior of blocking mutexes to spin
170# if the thread that currently owns the mutex is executing on another
171# CPU.
172options 	ADAPTIVE_MUTEXES
173
174# MUTEX_NOINLINE forces mutex operations to call functions to perform each
175# operation rather than inlining the simple cases.  This can be used to
176# shrink the size of the kernel text segment.  Note that this behavior is
177# already implied by the INVARIANT_SUPPORT, INVARIANTS, MUTEX_PROFILING,
178# and WITNESS options.
179options 	MUTEX_NOINLINE
180
181# SMP Debugging Options:
182#
183# MUTEX_DEBUG enables various extra assertions in the mutex code.
184# SLEEPQUEUE_PROFILING enables rudimentary profiling of the hash table
185#	  used to hold active sleep queues.
186# TURNSTILE_PROFILING enables rudimentary profiling of the hash table
187#	  used to hold active lock queues.
188# WITNESS enables the witness code which detects deadlocks and cycles
189#         during locking operations.
190# WITNESS_DDB causes the witness code to drop into the kernel debugger if
191#	  a lock hierarchy violation occurs or if locks are held when going to
192#	  sleep.
193# WITNESS_SKIPSPIN disables the witness checks on spin mutexes.
194options 	MUTEX_DEBUG
195options 	WITNESS
196options 	WITNESS_DDB
197options 	WITNESS_SKIPSPIN
198
199# MUTEX_PROFILING - Profiling mutual exclusion locks (mutexes).  See
200# MUTEX_PROFILING(9) for details.
201options 	MUTEX_PROFILING
202
203# Profiling for internal hash tables.
204options 	SLEEPQUEUE_PROFILING
205options 	TURNSTILE_PROFILING
206
207
208#####################################################################
209# COMPATIBILITY OPTIONS
210
211#
212# Implement system calls compatible with 4.3BSD and older versions of
213# FreeBSD.  You probably do NOT want to remove this as much current code
214# still relies on the 4.3 emulation.  Note that some architectures that
215# are supported by FreeBSD do not include support for certain important
216# aspects of this compatibility option, namely those related to the
217# signal delivery mechanism.
218#
219options 	COMPAT_43
220
221# Enable FreeBSD4 compatibility syscalls
222options 	COMPAT_FREEBSD4
223
224#
225# These three options provide support for System V Interface
226# Definition-style interprocess communication, in the form of shared
227# memory, semaphores, and message queues, respectively.
228#
229options 	SYSVSHM
230options 	SYSVSEM
231options 	SYSVMSG
232
233
234#####################################################################
235# DEBUGGING OPTIONS
236
237#
238# Enable the kernel debugger.
239#
240options 	DDB
241
242#
243# Use direct symbol lookup routines for ddb instead of the kernel linker
244# ones, so that symbols (mostly) work before the kernel linker has been
245# initialized.  This is not the default because it breaks ddb's lookup of
246# symbols in loaded modules.
247#
248#!options 	DDB_NOKLDSYM
249
250#
251# Print the numerical value of symbols in addition to the symbolic
252# representation.
253#
254options 	DDB_NUMSYM
255
256#
257# Print a stack trace of the current thread out on the console for a panic.
258#
259options 	DDB_TRACE
260
261#
262# Don't drop into DDB for a panic. Intended for unattended operation
263# where you may want to drop to DDB from the console, but still want
264# the machine to recover from a panic
265#
266options 	DDB_UNATTENDED
267
268#
269# If using GDB remote mode to debug the kernel, there's a non-standard
270# extension to the remote protocol that can be used to use the serial
271# port as both the debugging port and the system console.  It's non-
272# standard and you're on your own if you enable it.  See also the
273# "remotechat" variables in the FreeBSD specific version of gdb.
274#
275options 	GDB_REMOTE_CHAT
276
277#
278# KTRACE enables the system-call tracing facility ktrace(2).  To be more
279# SMP-friendly, KTRACE uses a worker thread to process most trace events
280# asynchronously to the thread generating the event.  This requires a
281# pre-allocated store of objects representing trace events.  The
282# KTRACE_REQUEST_POOL option specifies the initial size of this store.
283# The size of the pool can be adjusted both at boottime and runtime via
284# the kern.ktrace_request_pool tunable and sysctl.
285#
286options 	KTRACE			#kernel tracing
287options 	KTRACE_REQUEST_POOL=101
288
289#
290# KTR is a kernel tracing mechanism imported from BSD/OS.  Currently it
291# has no userland interface aside from a few sysctl's.  It is enabled with
292# the KTR option.  KTR_ENTRIES defines the number of entries in the circular
293# trace buffer.  KTR_COMPILE defines the mask of events to compile into the
294# kernel as defined by the KTR_* constants in <sys/ktr.h>.  KTR_MASK defines the
295# initial value of the ktr_mask variable which determines at runtime what
296# events to trace.  KTR_CPUMASK determines which CPU's log events, with
297# bit X corresponding to cpu X.  KTR_VERBOSE enables dumping of KTR events
298# to the console by default.  This functionality can be toggled via the
299# debug.ktr_verbose sysctl and defaults to off if KTR_VERBOSE is not defined.
300#
301options 	KTR
302options 	KTR_ENTRIES=1024
303options 	KTR_COMPILE=(KTR_INTR|KTR_PROC)
304options 	KTR_MASK=KTR_INTR
305options 	KTR_CPUMASK=0x3
306options 	KTR_VERBOSE
307
308#
309# The INVARIANTS option is used in a number of source files to enable
310# extra sanity checking of internal structures.  This support is not
311# enabled by default because of the extra time it would take to check
312# for these conditions, which can only occur as a result of
313# programming errors.
314#
315options 	INVARIANTS
316
317#
318# The INVARIANT_SUPPORT option makes us compile in support for
319# verifying some of the internal structures.  It is a prerequisite for
320# 'INVARIANTS', as enabling 'INVARIANTS' will make these functions be
321# called.  The intent is that you can set 'INVARIANTS' for single
322# source files (by changing the source file or specifying it on the
323# command line) if you have 'INVARIANT_SUPPORT' enabled.  Also, if you
324# wish to build a kernel module with 'INVARIANTS', then adding
325# 'INVARIANT_SUPPORT' to your kernel will provide all the necessary
326# infrastructure without the added overhead.
327#
328options 	INVARIANT_SUPPORT
329
330#
331# The DIAGNOSTIC option is used to enable extra debugging information
332# from some parts of the kernel.  As this makes everything more noisy,
333# it is disabled by default.
334#
335options 	DIAGNOSTIC
336
337#
338# REGRESSION causes optional kernel interfaces necessary only for regression
339# testing to be enabled.  These interfaces may constitute security risks
340# when enabled, as they permit processes to easily modify aspects of the
341# run-time environment to reproduce unlikely or unusual (possibly normally
342# impossible) scenarios.
343#
344options 	REGRESSION
345
346#
347# RESTARTABLE_PANICS allows one to continue from a panic as if it were
348# a call to the debugger via the Debugger() function instead.  It is only
349# useful if a kernel debugger is present.  To restart from a panic, reset
350# the panicstr variable to NULL and continue execution.  This option is
351# for development use only and should NOT be used in production systems
352# to "workaround" a panic.
353#
354#options 	RESTARTABLE_PANICS
355
356#
357# This option let some drivers co-exist that can't co-exist in a running
358# system.  This is used to be able to compile all kernel code in one go for
359# quality assurance purposes (like this file, which the option takes it name
360# from.)
361#
362options 	COMPILING_LINT
363
364
365#####################################################################
366# NETWORKING OPTIONS
367
368#
369# Protocol families:
370#  Only the INET (Internet) family is officially supported in FreeBSD.
371#
372options 	INET			#Internet communications protocols
373options 	INET6			#IPv6 communications protocols
374options 	IPSEC			#IP security
375options 	IPSEC_ESP		#IP security (crypto; define w/ IPSEC)
376options 	IPSEC_DEBUG		#debug for IP security
377#
378# Set IPSEC_FILTERGIF to force packets coming through a gif tunnel
379# to be processed by any configured packet filtering (ipfw, ipf).
380# The default is that packets coming from a tunnel are _not_ processed;
381# they are assumed trusted.
382#
383# IPSEC history is preserved for such packets, and can be filtered
384# using ipfw(8)'s 'ipsec' keyword, when this option is enabled.
385#
386#options 	IPSEC_FILTERGIF		#filter ipsec packets from a tunnel
387
388#options 	FAST_IPSEC		#new IPsec (cannot define w/ IPSEC)
389
390options 	IPX			#IPX/SPX communications protocols
391options 	IPXIP			#IPX in IP encapsulation (not available)
392
393#options 	NCP			#NetWare Core protocol
394
395options 	NETATALK		#Appletalk communications protocols
396options 	NETATALKDEBUG		#Appletalk debugging
397
398#
399# SMB/CIFS requester
400# NETSMB enables support for SMB protocol, it requires LIBMCHAIN and LIBICONV
401# options.
402# NETSMBCRYPTO enables support for encrypted passwords.
403options 	NETSMB			#SMB/CIFS requester
404options 	NETSMBCRYPTO		#encrypted password support for SMB
405
406# mchain library. It can be either loaded as KLD or compiled into kernel
407options 	LIBMCHAIN
408
409# altq(9). Enable the base part of the hooks with the ALTQ option.
410# Individual disciplines must be built into the base system and can not be
411# loaded as modules at this point. In order to build a SMP kernel you must
412# also have the ALTQ_NOPCC option.
413options 	ALTQ
414options 	ALTQ_CBQ	# Class Bases Queueing
415options 	ALTQ_RED	# Random Early Drop
416options 	ALTQ_RIO	# RED In/Out
417options 	ALTQ_HFSC	# Hierarchical Packet Scheduler
418options 	ALTQ_CDNR	# Traffic conditioner
419options 	ALTQ_PRIQ	# Priority Queueing
420options 	ALTQ_NOPCC	# Required for SMP build
421options 	ALTQ_DEBUG
422
423# netgraph(4). Enable the base netgraph code with the NETGRAPH option.
424# Individual node types can be enabled with the corresponding option
425# listed below; however, this is not strictly necessary as netgraph
426# will automatically load the corresponding KLD module if the node type
427# is not already compiled into the kernel. Each type below has a
428# corresponding man page, e.g., ng_async(8).
429options 	NETGRAPH		#netgraph(4) system
430options 	NETGRAPH_ASYNC
431options 	NETGRAPH_ATMLLC
432options 	NETGRAPH_ATM_ATMPIF
433options 	NETGRAPH_BLUETOOTH		# ng_bluetooth(4)
434options 	NETGRAPH_BLUETOOTH_BT3C		# ng_bt3c(4)
435options 	NETGRAPH_BLUETOOTH_H4		# ng_h4(4)
436options 	NETGRAPH_BLUETOOTH_HCI		# ng_hci(4)
437options 	NETGRAPH_BLUETOOTH_L2CAP	# ng_l2cap(4)
438options 	NETGRAPH_BLUETOOTH_SOCKET	# ng_btsocket(4)
439options 	NETGRAPH_BLUETOOTH_UBT		# ng_ubt(4)
440options 	NETGRAPH_BLUETOOTH_UBTBCMFW	# ubtbcmfw(4)
441options 	NETGRAPH_BPF
442options 	NETGRAPH_BRIDGE
443options 	NETGRAPH_CISCO
444options 	NETGRAPH_ECHO
445options 	NETGRAPH_EIFACE
446options 	NETGRAPH_ETHER
447options 	NETGRAPH_FEC
448options 	NETGRAPH_FRAME_RELAY
449options 	NETGRAPH_GIF
450options 	NETGRAPH_GIF_DEMUX
451options 	NETGRAPH_HOLE
452options 	NETGRAPH_IFACE
453options 	NETGRAPH_IP_INPUT
454options 	NETGRAPH_KSOCKET
455options 	NETGRAPH_L2TP
456options 	NETGRAPH_LMI
457# MPPC compression requires proprietary files (not included)
458#options 	NETGRAPH_MPPC_COMPRESSION
459options 	NETGRAPH_MPPC_ENCRYPTION
460options 	NETGRAPH_ONE2MANY
461options 	NETGRAPH_PPP
462options 	NETGRAPH_PPPOE
463options 	NETGRAPH_PPTPGRE
464options 	NETGRAPH_RFC1490
465options 	NETGRAPH_SOCKET
466options 	NETGRAPH_SPLIT
467options 	NETGRAPH_SPPP
468options 	NETGRAPH_TEE
469options 	NETGRAPH_TTY
470options 	NETGRAPH_UI
471options 	NETGRAPH_VJC
472
473# NgATM - Netgraph ATM
474options 	NGATM_ATM
475options 	NGATM_ATMBASE
476options 	NGATM_SSCOP
477options 	NGATM_SSCFU
478options 	NGATM_UNI
479
480device		mn	# Munich32x/Falc54 Nx64kbit/sec cards.
481device		musycc	# LMC/SBE LMC1504 quad T1/E1
482
483#
484# Network interfaces:
485#  The `loop' device is MANDATORY when networking is enabled.
486#  The `ether' device provides generic code to handle
487#  Ethernets; it is MANDATORY when an Ethernet device driver is
488#  configured or token-ring is enabled.
489#  The `wlan' device provides generic code to support 802.11
490#  drivers, including host AP mode; it is MANDATORY for the wi
491#  driver and will eventually be required by all 802.11 drivers.
492#  The `fddi' device provides generic code to support FDDI.
493#  The `arcnet' device provides generic code to support Arcnet.
494#  The `sppp' device serves a similar role for certain types
495#  of synchronous PPP links (like `cx', `ar').
496#  The `sl' device implements the Serial Line IP (SLIP) service.
497#  The `ppp' device implements the Point-to-Point Protocol.
498#  The `bpf' device enables the Berkeley Packet Filter.  Be
499#  aware of the legal and administrative consequences of enabling this
500#  option.  The number of devices determines the maximum number of
501#  simultaneous BPF clients programs runnable.
502#  The `disc' device implements a minimal network interface,
503#  which throws away all packets sent and never receives any.  It is
504#  included for testing purposes.  This shows up as the `ds' interface.
505#  The `tap' device is a pty-like virtual Ethernet interface
506#  The `tun' device implements (user-)ppp and nos-tun
507#  The `gif' device implements IPv6 over IP4 tunneling,
508#  IPv4 over IPv6 tunneling, IPv4 over IPv4 tunneling and
509#  IPv6 over IPv6 tunneling.
510#  The `gre' device implements two types of IP4 over IP4 tunneling:
511#  GRE and MOBILE, as specified in the RFC1701 and RFC2004.
512#  The XBONEHACK option allows the same pair of addresses to be configured on
513#  multiple gif interfaces.
514#  The `faith' device captures packets sent to it and diverts them
515#  to the IPv4/IPv6 translation daemon.
516#  The `stf' device implements 6to4 encapsulation.
517#  The `ef' device provides support for multiple ethernet frame types
518#  specified via ETHER_* options. See ef(4) for details.
519#
520# The pf packet filter consists of three devices:
521#  The `pf' device provides /dev/pf and the firewall code itself.
522#  The `pflog' device provides the pflog0 interface which logs packets.
523#  The `pfsync' device provides the pfsync0 interface used for
524#   synchronization of firewall state tables (over the net).
525# Requires option PFIL_HOOKS and (when used as a module) option RANDOM_IP_ID
526#
527# The PPP_BSDCOMP option enables support for compress(1) style entire
528# packet compression, the PPP_DEFLATE is for zlib/gzip style compression.
529# PPP_FILTER enables code for filtering the ppp data stream and selecting
530# events for resetting the demand dial activity timer - requires bpf.
531# See pppd(8) for more details.
532#
533device		ether			#Generic Ethernet
534device		vlan			#VLAN support
535device		wlan			#802.11 support
536device		token			#Generic TokenRing
537device		fddi			#Generic FDDI
538device		arcnet			#Generic Arcnet
539device		sppp			#Generic Synchronous PPP
540device		loop			#Network loopback device
541device		bpf			#Berkeley packet filter
542device		disc			#Discard device (ds0, ds1, etc)
543device		tap			#Virtual Ethernet driver
544device		tun			#Tunnel driver (ppp(8), nos-tun(8))
545device		sl			#Serial Line IP
546device		gre			#IP over IP tunneling
547device		pf			#PF OpenBSD packet-filter firewall
548device		pflog			#logging support interface for PF
549device		pfsync			#synchronization interface for PF
550device		ppp			#Point-to-point protocol
551options 	PPP_BSDCOMP		#PPP BSD-compress support
552options 	PPP_DEFLATE		#PPP zlib/deflate/gzip support
553options 	PPP_FILTER		#enable bpf filtering (needs bpf)
554
555device		ef			# Multiple ethernet frames support
556options 	ETHER_II		# enable Ethernet_II frame
557options 	ETHER_8023		# enable Ethernet_802.3 (Novell) frame
558options 	ETHER_8022		# enable Ethernet_802.2 frame
559options 	ETHER_SNAP		# enable Ethernet_802.2/SNAP frame
560
561# for IPv6
562device		gif			#IPv6 and IPv4 tunneling
563options 	XBONEHACK
564device		faith			#for IPv6 and IPv4 translation
565device		stf			#6to4 IPv6 over IPv4 encapsulation
566
567#
568# Internet family options:
569#
570# MROUTING enables the kernel multicast packet forwarder, which works
571# with mrouted(8).
572#
573# PIM enables Protocol Independent Multicast in the kernel.
574# Requires MROUTING enabled.
575#
576# IPFIREWALL enables support for IP firewall construction, in
577# conjunction with the `ipfw' program.  IPFIREWALL_VERBOSE sends
578# logged packets to the system logger.  IPFIREWALL_VERBOSE_LIMIT
579# limits the number of times a matching entry can be logged.
580#
581# WARNING:  IPFIREWALL defaults to a policy of "deny ip from any to any"
582# and if you do not add other rules during startup to allow access,
583# YOU WILL LOCK YOURSELF OUT.  It is suggested that you set firewall_type=open
584# in /etc/rc.conf when first enabling this feature, then refining the
585# firewall rules in /etc/rc.firewall after you've tested that the new kernel
586# feature works properly.
587#
588# IPFIREWALL_DEFAULT_TO_ACCEPT causes the default rule (at boot) to
589# allow everything.  Use with care, if a cracker can crash your
590# firewall machine, they can get to your protected machines.  However,
591# if you are using it as an as-needed filter for specific problems as
592# they arise, then this may be for you.  Changing the default to 'allow'
593# means that you won't get stuck if the kernel and /sbin/ipfw binary get
594# out of sync.
595#
596# IPDIVERT enables the divert IP sockets, used by ``ipfw divert''
597#
598# IPSTEALTH enables code to support stealth forwarding (i.e., forwarding
599# packets without touching the ttl).  This can be useful to hide firewalls
600# from traceroute and similar tools.
601#
602# PFIL_HOOKS enables an abstraction layer which is meant to be used in
603# network code where filtering is required.  See pfil(9).  This option is
604# required by the IPFILTER option and the PF device.
605#
606# TCPDEBUG enables code which keeps traces of the TCP state machine
607# for sockets with the SO_DEBUG option set, which can then be examined
608# using the trpt(8) utility.
609#
610options 	MROUTING		# Multicast routing
611options 	PIM			# Protocol Independent Multicast
612options 	IPFIREWALL		#firewall
613options 	IPFIREWALL_VERBOSE	#enable logging to syslogd(8)
614options 	IPFIREWALL_VERBOSE_LIMIT=100	#limit verbosity
615options 	IPFIREWALL_DEFAULT_TO_ACCEPT	#allow everything by default
616options 	IPV6FIREWALL		#firewall for IPv6
617options 	IPV6FIREWALL_VERBOSE
618options 	IPV6FIREWALL_VERBOSE_LIMIT=100
619options 	IPV6FIREWALL_DEFAULT_TO_ACCEPT
620options 	IPDIVERT		#divert sockets
621options 	IPFILTER		#ipfilter support
622options 	IPFILTER_LOG		#ipfilter logging
623options 	IPFILTER_DEFAULT_BLOCK	#block all packets by default
624options 	IPSTEALTH		#support for stealth forwarding
625options 	PFIL_HOOKS		#required by IPFILTER
626options 	TCPDEBUG
627
628# The MBUF_STRESS_TEST option enables options which create
629# various random failures / extreme cases related to mbuf
630# functions.  See mbuf(9) for a list of available test cases.
631options 	MBUF_STRESS_TEST
632
633# RANDOM_IP_ID causes the ID field in IP packets to be randomized
634# instead of incremented by 1 with each packet generated.  This
635# option closes a minor information leak which allows remote
636# observers to determine the rate of packet generation on the
637# machine by watching the counter.
638options 	RANDOM_IP_ID
639
640# Statically Link in accept filters
641options 	ACCEPT_FILTER_DATA
642options 	ACCEPT_FILTER_HTTP
643
644# TCP_DROP_SYNFIN adds support for ignoring TCP packets with SYN+FIN. This
645# prevents nmap et al. from identifying the TCP/IP stack, but breaks support
646# for RFC1644 extensions and is not recommended for web servers.
647#
648options 	TCP_DROP_SYNFIN		#drop TCP packets with SYN+FIN
649
650# TCP_SIGNATURE adds support for RFC 2385 (TCP-MD5) digests. These are
651# carried in TCP option 19. This option is commonly used to protect
652# TCP sessions (e.g. BGP) where IPSEC is not available nor desirable.
653# This is enabled on a per-socket basis using the TCP_MD5SIG socket option.
654# This requires the use of 'device crypto', 'options FAST_IPSEC', and
655# 'device cryptodev' as it depends on the non-KAME IPSEC SADB code.
656#options 	TCP_SIGNATURE		#include support for RFC 2385
657
658# DUMMYNET enables the "dummynet" bandwidth limiter.  You need IPFIREWALL
659# as well.  See dummynet(4) and ipfw(8) for more info.  When you run
660# DUMMYNET it is advisable to also have "options HZ=1000" to achieve a
661# smoother scheduling of the traffic.
662#
663# BRIDGE enables bridging between ethernet cards -- see bridge(4).
664# You can use IPFIREWALL and DUMMYNET together with bridging.
665#
666options 	DUMMYNET
667options 	BRIDGE
668
669# Zero copy sockets support.  This enables "zero copy" for sending and
670# receiving data via a socket.  The send side works for any type of NIC,
671# the receive side only works for NICs that support MTUs greater than the
672# page size of your architecture and that support header splitting.  See
673# zero_copy(9) for more details.
674options 	ZERO_COPY_SOCKETS
675
676#
677# ATM (HARP version) options
678#
679# ATM_CORE includes the base ATM functionality code.  This must be included
680#	for ATM support.
681#
682# ATM_IP includes support for running IP over ATM.
683#
684# At least one (and usually only one) of the following signalling managers
685# must be included (note that all signalling managers include PVC support):
686# ATM_SIGPVC includes support for the PVC-only signalling manager `sigpvc'.
687# ATM_SPANS includes support for the `spans' signalling manager, which runs
688#	the FORE Systems's proprietary SPANS signalling protocol.
689# ATM_UNI includes support for the `uni30' and `uni31' signalling managers,
690#	which run the ATM Forum UNI 3.x signalling protocols.
691#
692# The `hfa' driver provides support for the FORE Systems, Inc.
693# PCA-200E ATM PCI Adapter.
694#
695# The `harp' pseudo-driver makes all NATM interface drivers available to HARP.
696#
697options 	ATM_CORE		#core ATM protocol family
698options 	ATM_IP			#IP over ATM support
699options 	ATM_SIGPVC		#SIGPVC signalling manager
700options 	ATM_SPANS		#SPANS signalling manager
701options 	ATM_UNI			#UNI signalling manager
702
703device		hfa			#FORE PCA-200E ATM PCI
704device		harp			#Pseudo-interface for NATM
705
706
707#####################################################################
708# FILESYSTEM OPTIONS
709
710#
711# Only the root, /usr, and /tmp filesystems need be statically
712# compiled; everything else will be automatically loaded at mount
713# time.  (Exception: the UFS family--- FFS --- cannot
714# currently be demand-loaded.)  Some people still prefer to statically
715# compile other filesystems as well.
716#
717# NB: The NULL, PORTAL, UMAP and UNION filesystems are known to be
718# buggy, and WILL panic your system if you attempt to do anything with
719# them.  They are included here as an incentive for some enterprising
720# soul to sit down and fix them.
721#
722
723# One of these is mandatory:
724options 	FFS			#Fast filesystem
725options 	NFSCLIENT		#Network File System client
726
727# The rest are optional:
728options 	CD9660			#ISO 9660 filesystem
729options 	FDESCFS			#File descriptor filesystem
730options 	HPFS			#OS/2 File system
731options 	MSDOSFS			#MS DOS File System (FAT, FAT32)
732options 	NFSSERVER		#Network File System server
733options 	NTFS			#NT File System
734options 	NULLFS			#NULL filesystem
735# Broken (depends on NCP):
736#options 	NWFS			#NetWare filesystem
737options 	PORTALFS		#Portal filesystem
738options 	PROCFS			#Process filesystem (requires PSEUDOFS)
739options 	PSEUDOFS		#Pseudo-filesystem framework
740options 	SMBFS			#SMB/CIFS filesystem
741options 	UDF			#Universal Disk Format
742# Broken (seriously (functionally) broken):
743#options 	UMAPFS			#UID map filesystem
744options 	UNIONFS			#Union filesystem
745# The xFS_ROOT options REQUIRE the associated ``options xFS''
746options 	NFS_ROOT		#NFS usable as root device
747
748# Soft updates is a technique for improving filesystem speed and
749# making abrupt shutdown less risky.
750#
751options 	SOFTUPDATES
752
753# Extended attributes allow additional data to be associated with files,
754# and is used for ACLs, Capabilities, and MAC labels.
755# See src/sys/ufs/ufs/README.extattr for more information.
756options 	UFS_EXTATTR
757options 	UFS_EXTATTR_AUTOSTART
758
759# Access Control List support for UFS filesystems.  The current ACL
760# implementation requires extended attribute support, UFS_EXTATTR,
761# for the underlying filesystem.
762# See src/sys/ufs/ufs/README.acls for more information.
763options 	UFS_ACL
764
765# Directory hashing improves the speed of operations on very large
766# directories at the expense of some memory.
767options 	UFS_DIRHASH
768
769# Make space in the kernel for a root filesystem on a md device.
770# Define to the number of kilobytes to reserve for the filesystem.
771options 	MD_ROOT_SIZE=10
772
773# Make the md device a potential root device, either with preloaded
774# images of type mfs_root or md_root.
775options 	MD_ROOT
776
777# Disk quotas are supported when this option is enabled.
778options 	QUOTA			#enable disk quotas
779
780# If you are running a machine just as a fileserver for PC and MAC
781# users, using SAMBA or Netatalk, you may consider setting this option
782# and keeping all those users' directories on a filesystem that is
783# mounted with the suiddir option. This gives new files the same
784# ownership as the directory (similar to group). It's a security hole
785# if you let these users run programs, so confine it to file-servers
786# (but it'll save you lots of headaches in those cases). Root owned
787# directories are exempt and X bits are cleared. The suid bit must be
788# set on the directory as well; see chmod(1) PC owners can't see/set
789# ownerships so they keep getting their toes trodden on. This saves
790# you all the support calls as the filesystem it's used on will act as
791# they expect: "It's my dir so it must be my file".
792#
793options 	SUIDDIR
794
795# NFS options:
796options 	NFS_MINATTRTIMO=3	# VREG attrib cache timeout in sec
797options 	NFS_MAXATTRTIMO=60
798options 	NFS_MINDIRATTRTIMO=30	# VDIR attrib cache timeout in sec
799options 	NFS_MAXDIRATTRTIMO=60
800options 	NFS_GATHERDELAY=10	# Default write gather delay (msec)
801options 	NFS_WDELAYHASHSIZ=16	# and with this
802options 	NFS_DEBUG		# Enable NFS Debugging
803
804# Coda stuff:
805options 	CODA			#CODA filesystem.
806device		vcoda	4		#coda minicache <-> venus comm.
807# Use the old Coda 5.x venus<->kernel interface instead of the new
808# realms-aware 6.x protocol.
809#options 	CODA_COMPAT_5
810
811#
812# Add support for the EXT2FS filesystem of Linux fame.  Be a bit
813# careful with this - the ext2fs code has a tendency to lag behind
814# changes and not be exercised very much, so mounting read/write could
815# be dangerous (and even mounting read only could result in panics.)
816#
817options 	EXT2FS
818
819# Use real implementations of the aio_* system calls.  There are numerous
820# stability and security issues in the current aio code that make it
821# unsuitable for inclusion on machines with untrusted local users.
822options 	VFS_AIO
823
824# Cryptographically secure random number generator; /dev/[u]random
825device		random
826
827# Optional character code conversion support with LIBICONV.
828# Each option requires their base file system and LIBICONV.
829options 	CD9660_ICONV
830options 	MSDOSFS_ICONV
831options 	NTFS_ICONV
832options 	UDF_ICONV
833
834
835#####################################################################
836# POSIX P1003.1B
837
838# Real time extensions added in the 1993 Posix
839# _KPOSIX_PRIORITY_SCHEDULING: Build in _POSIX_PRIORITY_SCHEDULING
840
841options 	_KPOSIX_PRIORITY_SCHEDULING
842# p1003_1b_semaphores are very experimental,
843# user should be ready to assist in debugging if problems arise.
844options 	P1003_1B_SEMAPHORES
845
846
847#####################################################################
848# SECURITY POLICY PARAMETERS
849
850# Support for Mandatory Access Control (MAC):
851options 	MAC
852options 	MAC_BIBA
853options 	MAC_BSDEXTENDED
854options 	MAC_DEBUG
855options 	MAC_IFOFF
856options 	MAC_LOMAC
857options 	MAC_MLS
858options 	MAC_NONE
859options 	MAC_PARTITION
860options 	MAC_PORTACL
861options 	MAC_SEEOTHERUIDS
862options 	MAC_STUB
863options 	MAC_TEST
864
865
866#####################################################################
867# CLOCK OPTIONS
868
869# The granularity of operation is controlled by the kernel option HZ whose
870# default value (100) means a granularity of 10ms (1s/HZ).
871# Some subsystems, such as DUMMYNET, might benefit from a smaller
872# granularity such as 1ms or less, for a smoother scheduling of packets.
873# Consider, however, that reducing the granularity too much might
874# cause excessive overhead in clock interrupt processing,
875# potentially causing ticks to be missed and thus actually reducing
876# the accuracy of operation.
877
878options 	HZ=100
879
880# Enable support for the kernel PLL to use an external PPS signal,
881# under supervision of [x]ntpd(8)
882# More info in ntpd documentation: http://www.eecis.udel.edu/~ntp
883
884options 	PPS_SYNC
885
886
887#####################################################################
888# SCSI DEVICES
889
890# SCSI DEVICE CONFIGURATION
891
892# The SCSI subsystem consists of the `base' SCSI code, a number of
893# high-level SCSI device `type' drivers, and the low-level host-adapter
894# device drivers.  The host adapters are listed in the ISA and PCI
895# device configuration sections below.
896#
897# It is possible to wire down your SCSI devices so that a given bus,
898# target, and LUN always come on line as the same device unit.  In
899# earlier versions the unit numbers were assigned in the order that
900# the devices were probed on the SCSI bus.  This means that if you
901# removed a disk drive, you may have had to rewrite your /etc/fstab
902# file, and also that you had to be careful when adding a new disk
903# as it may have been probed earlier and moved your device configuration
904# around.  (See also option GEOM_VOL for a different solution to this
905# problem.)
906
907# This old behavior is maintained as the default behavior.  The unit
908# assignment begins with the first non-wired down unit for a device
909# type.  For example, if you wire a disk as "da3" then the first
910# non-wired disk will be assigned da4.
911
912# The syntax for wiring down devices is:
913
914hint.scbus.0.at="ahc0"
915hint.scbus.1.at="ahc1"
916hint.scbus.1.bus="0"
917hint.scbus.3.at="ahc2"
918hint.scbus.3.bus="0"
919hint.scbus.2.at="ahc2"
920hint.scbus.2.bus="1"
921hint.da.0.at="scbus0"
922hint.da.0.target="0"
923hint.da.0.unit="0"
924hint.da.1.at="scbus3"
925hint.da.1.target="1"
926hint.da.2.at="scbus2"
927hint.da.2.target="3"
928hint.sa.1.at="scbus1"
929hint.sa.1.target="6"
930
931# "units" (SCSI logical unit number) that are not specified are
932# treated as if specified as LUN 0.
933
934# All SCSI devices allocate as many units as are required.
935
936# The ch driver drives SCSI Media Changer ("jukebox") devices.
937#
938# The da driver drives SCSI Direct Access ("disk") and Optical Media
939# ("WORM") devices.
940#
941# The sa driver drives SCSI Sequential Access ("tape") devices.
942#
943# The cd driver drives SCSI Read Only Direct Access ("cd") devices.
944#
945# The ses driver drives SCSI Environment Services ("ses") and
946# SAF-TE ("SCSI Accessible Fault-Tolerant Enclosure") devices.
947#
948# The pt driver drives SCSI Processor devices.
949#
950#
951# Target Mode support is provided here but also requires that a SIM
952# (SCSI Host Adapter Driver) provide support as well.
953#
954# The targ driver provides target mode support as a Processor type device.
955# It exists to give the minimal context necessary to respond to Inquiry
956# commands. There is a sample user application that shows how the rest
957# of the command support might be done in /usr/share/examples/scsi_target.
958#
959# The targbh driver provides target mode support and exists to respond
960# to incoming commands that do not otherwise have a logical unit assigned
961# to them.
962#
963# The "unknown" device (uk? in pre-2.0.5) is now part of the base SCSI
964# configuration as the "pass" driver.
965
966device		scbus		#base SCSI code
967device		ch		#SCSI media changers
968device		da		#SCSI direct access devices (aka disks)
969device		sa		#SCSI tapes
970device		cd		#SCSI CD-ROMs
971device		ses		#SCSI Environmental Services (and SAF-TE)
972device		pt		#SCSI processor
973device		targ		#SCSI Target Mode Code
974device		targbh		#SCSI Target Mode Blackhole Device
975device		pass		#CAM passthrough driver
976
977# CAM OPTIONS:
978# debugging options:
979# -- NOTE --  If you specify one of the bus/target/lun options, you must
980#             specify them all!
981# CAMDEBUG: When defined enables debugging macros
982# CAM_DEBUG_BUS:  Debug the given bus.  Use -1 to debug all busses.
983# CAM_DEBUG_TARGET:  Debug the given target.  Use -1 to debug all targets.
984# CAM_DEBUG_LUN:  Debug the given lun.  Use -1 to debug all luns.
985# CAM_DEBUG_FLAGS:  OR together CAM_DEBUG_INFO, CAM_DEBUG_TRACE,
986#                   CAM_DEBUG_SUBTRACE, and CAM_DEBUG_CDB
987#
988# CAM_MAX_HIGHPOWER: Maximum number of concurrent high power (start unit) cmds
989# CAM_NEW_TRAN_CODE: this is the new transport layer code that will be switched
990#			to soon
991# SCSI_NO_SENSE_STRINGS: When defined disables sense descriptions
992# SCSI_NO_OP_STRINGS: When defined disables opcode descriptions
993# SCSI_DELAY: The number of MILLISECONDS to freeze the SIM (scsi adapter)
994#             queue after a bus reset, and the number of milliseconds to
995#             freeze the device queue after a bus device reset.  This
996#             can be changed at boot and runtime with the
997#             kern.cam.scsi_delay tunable/sysctl.
998options 	CAMDEBUG
999options 	CAM_DEBUG_BUS=-1
1000options 	CAM_DEBUG_TARGET=-1
1001options 	CAM_DEBUG_LUN=-1
1002options 	CAM_DEBUG_FLAGS=(CAM_DEBUG_INFO|CAM_DEBUG_TRACE|CAM_DEBUG_CDB)
1003options 	CAM_MAX_HIGHPOWER=4
1004options 	SCSI_NO_SENSE_STRINGS
1005options 	SCSI_NO_OP_STRINGS
1006options 	SCSI_DELAY=8000	# Be pessimistic about Joe SCSI device
1007
1008# Options for the CAM CDROM driver:
1009# CHANGER_MIN_BUSY_SECONDS: Guaranteed minimum time quantum for a changer LUN
1010# CHANGER_MAX_BUSY_SECONDS: Maximum time quantum per changer LUN, only
1011#                           enforced if there is I/O waiting for another LUN
1012# The compiled in defaults for these variables are 2 and 10 seconds,
1013# respectively.
1014#
1015# These can also be changed on the fly with the following sysctl variables:
1016# kern.cam.cd.changer.min_busy_seconds
1017# kern.cam.cd.changer.max_busy_seconds
1018#
1019options 	CHANGER_MIN_BUSY_SECONDS=2
1020options 	CHANGER_MAX_BUSY_SECONDS=10
1021
1022# Options for the CAM sequential access driver:
1023# SA_IO_TIMEOUT: Timeout for read/write/wfm  operations, in minutes
1024# SA_SPACE_TIMEOUT: Timeout for space operations, in minutes
1025# SA_REWIND_TIMEOUT: Timeout for rewind operations, in minutes
1026# SA_ERASE_TIMEOUT: Timeout for erase operations, in minutes
1027# SA_1FM_AT_EOD: Default to model which only has a default one filemark at EOT.
1028options 	SA_IO_TIMEOUT=4
1029options 	SA_SPACE_TIMEOUT=60
1030options 	SA_REWIND_TIMEOUT=(2*60)
1031options 	SA_ERASE_TIMEOUT=(4*60)
1032options 	SA_1FM_AT_EOD
1033
1034# Optional timeout for the CAM processor target (pt) device
1035# This is specified in seconds.  The default is 60 seconds.
1036options 	SCSI_PT_DEFAULT_TIMEOUT=60
1037
1038# Optional enable of doing SES passthrough on other devices (e.g., disks)
1039#
1040# Normally disabled because a lot of newer SCSI disks report themselves
1041# as having SES capabilities, but this can then clot up attempts to build
1042# build a topology with the SES device that's on the box these drives
1043# are in....
1044options 	SES_ENABLE_PASSTHROUGH
1045
1046
1047#####################################################################
1048# MISCELLANEOUS DEVICES AND OPTIONS
1049
1050# The `pty' device usually turns out to be ``effectively mandatory'',
1051# as it is required for `telnetd', `rlogind', `screen', `emacs', and
1052# `xterm', among others.
1053
1054device		pty		#Pseudo ttys
1055device		nmdm		#back-to-back tty devices
1056device		md		#Memory/malloc disk
1057device		snp		#Snoop device - to look at pty/vty/etc..
1058device		ccd		#Concatenated disk driver
1059
1060# Configuring Vinum into the kernel is not necessary, since the kld
1061# module gets started automatically when vinum(8) starts.  This
1062# device is also untested.  Use at your own risk.
1063#
1064# The option VINUMDEBUG must match the value set in CFLAGS
1065# in src/sbin/vinum/Makefile.  Failure to do so will result in
1066# the following message from vinum(8):
1067#
1068# Can't get vinum config: Invalid argument
1069#
1070# see vinum(4) for more reasons not to use these options.
1071device		vinum		#Vinum concat/mirror/raid driver
1072options 	VINUMDEBUG	#enable Vinum debugging hooks
1073
1074# Kernel side iconv library
1075options 	LIBICONV
1076
1077# Size of the kernel message buffer.  Should be N * pagesize.
1078options 	MSGBUF_SIZE=40960
1079
1080# Maximum size of a tty or pty input buffer.
1081options 	TTYHOG=8193
1082
1083
1084#####################################################################
1085# HARDWARE DEVICE CONFIGURATION
1086
1087# For ISA the required hints are listed.
1088# EISA, MCA, PCI and pccard are self identifying buses, so no hints
1089# are needed.
1090
1091#
1092# Mandatory devices:
1093#
1094
1095# The keyboard controller; it controls the keyboard and the PS/2 mouse.
1096device		atkbdc
1097hint.atkbdc.0.at="isa"
1098hint.atkbdc.0.port="0x060"
1099
1100# The AT keyboard
1101device		atkbd
1102hint.atkbd.0.at="atkbdc"
1103hint.atkbd.0.irq="1"
1104
1105# Options for atkbd:
1106options 	ATKBD_DFLT_KEYMAP	# specify the built-in keymap
1107makeoptions	ATKBD_DFLT_KEYMAP=jp.106
1108
1109# These options are valid for other keyboard drivers as well.
1110options 	KBD_DISABLE_KEYMAP_LOAD	# refuse to load a keymap
1111options 	KBD_INSTALL_CDEV	# install a CDEV entry in /dev
1112
1113# `flags' for atkbd:
1114#       0x01    Force detection of keyboard, else we always assume a keyboard
1115#       0x02    Don't reset keyboard, useful for some newer ThinkPads
1116#	0x03	Force detection and avoid reset, might help with certain
1117#		dockingstations
1118#       0x04    Old-style (XT) keyboard support, useful for older ThinkPads
1119
1120# PS/2 mouse
1121device		psm
1122hint.psm.0.at="atkbdc"
1123hint.psm.0.irq="12"
1124
1125# Options for psm:
1126options 	PSM_HOOKRESUME		#hook the system resume event, useful
1127					#for some laptops
1128options 	PSM_RESETAFTERSUSPEND	#reset the device at the resume event
1129
1130# Video card driver for VGA adapters.
1131device		vga
1132hint.vga.0.at="isa"
1133
1134# Options for vga:
1135# Try the following option if the mouse pointer is not drawn correctly
1136# or font does not seem to be loaded properly.  May cause flicker on
1137# some systems.
1138options 	VGA_ALT_SEQACCESS
1139
1140# If you can dispense with some vga driver features, you may want to
1141# use the following options to save some memory.
1142#options 	VGA_NO_FONT_LOADING	# don't save/load font
1143#options 	VGA_NO_MODE_CHANGE	# don't change video modes
1144
1145# Older video cards may require this option for proper operation.
1146options 	VGA_SLOW_IOACCESS	# do byte-wide i/o's to TS and GDC regs
1147
1148# The following option probably won't work with the LCD displays.
1149options 	VGA_WIDTH90		# support 90 column modes
1150
1151options 	FB_DEBUG		# Frame buffer debugging
1152
1153device		splash			# Splash screen and screen saver support
1154
1155# Various screen savers.
1156device		blank_saver
1157device		daemon_saver
1158device		fade_saver
1159device		fire_saver
1160device		green_saver
1161device		logo_saver
1162device		rain_saver
1163device		star_saver
1164device		warp_saver
1165
1166# The syscons console driver (sco color console compatible).
1167device		sc
1168hint.sc.0.at="isa"
1169options 	MAXCONS=16		# number of virtual consoles
1170options 	SC_ALT_MOUSE_IMAGE	# simplified mouse cursor in text mode
1171options 	SC_DFLT_FONT		# compile font in
1172makeoptions	SC_DFLT_FONT=cp850
1173options 	SC_DISABLE_DDBKEY	# disable `debug' key
1174options 	SC_DISABLE_REBOOT	# disable reboot key sequence
1175options 	SC_HISTORY_SIZE=200	# number of history buffer lines
1176options 	SC_MOUSE_CHAR=0x3	# char code for text mode mouse cursor
1177options 	SC_PIXEL_MODE		# add support for the raster text mode
1178
1179# The following options will let you change the default colors of syscons.
1180options 	SC_NORM_ATTR=(FG_GREEN|BG_BLACK)
1181options 	SC_NORM_REV_ATTR=(FG_YELLOW|BG_GREEN)
1182options 	SC_KERNEL_CONS_ATTR=(FG_RED|BG_BLACK)
1183options 	SC_KERNEL_CONS_REV_ATTR=(FG_BLACK|BG_RED)
1184
1185# The following options will let you change the default behaviour of
1186# cut-n-paste feature
1187options 	SC_CUT_SPACES2TABS	# convert leading spaces into tabs
1188options 	SC_CUT_SEPCHARS=\"x09\"	# set of characters that delimit words
1189					# (default is single space - \"x20\")
1190
1191# If you have a two button mouse, you may want to add the following option
1192# to use the right button of the mouse to paste text.
1193options 	SC_TWOBUTTON_MOUSE
1194
1195# You can selectively disable features in syscons.
1196options 	SC_NO_CUTPASTE
1197options 	SC_NO_FONT_LOADING
1198options 	SC_NO_HISTORY
1199options 	SC_NO_SYSMOUSE
1200options 	SC_NO_SUSPEND_VTYSWITCH
1201
1202# `flags' for sc
1203#	0x80	Put the video card in the VESA 800x600 dots, 16 color mode
1204#	0x100	Probe for a keyboard device periodically if one is not present
1205
1206#
1207# Optional devices:
1208#
1209
1210#
1211# SCSI host adapters:
1212#
1213# adv: All Narrow SCSI bus AdvanSys controllers.
1214# adw: Second Generation AdvanSys controllers including the ADV940UW.
1215# aha: Adaptec 154x/1535/1640
1216# ahb: Adaptec 174x EISA controllers
1217# ahc: Adaptec 274x/284x/2910/293x/294x/394x/3950x/3960x/398X/4944/
1218#      19160x/29160x, aic7770/aic78xx
1219# ahd: Adaptec 29320/39320 Controllers.
1220# aic: Adaptec 6260/6360, APA-1460 (PC Card), NEC PC9801-100 (C-BUS)
1221# amd: Support for the AMD 53C974 SCSI host adapter chip as found on devices
1222#      such as the Tekram DC-390(T).
1223# bt:  Most Buslogic controllers: including BT-445, BT-54x, BT-64x, BT-74x,
1224#      BT-75x, BT-946, BT-948, BT-956, BT-958, SDC3211B, SDC3211F, SDC3222F
1225# esp: NCR53c9x.  Only for SBUS hardware right now.
1226# isp: Qlogic ISP 1020, 1040 and 1040B PCI SCSI host adapters,
1227#      ISP 1240 Dual Ultra SCSI, ISP 1080 and 1280 (Dual) Ultra2,
1228#      ISP 12160 Ultra3 SCSI,
1229#      Qlogic ISP 2100 and ISP 2200 1Gb Fibre Channel host adapters.
1230#      Qlogic ISP 2300 and ISP 2312 2Gb Fibre Channel host adapters.
1231# ispfw: Firmware module for Qlogic host adapters
1232# mpt: LSI-Logic MPT/Fusion 53c1020 or 53c1030 Ultra4
1233#      or FC9x9 Fibre Channel host adapters.
1234# ncr: NCR 53C810, 53C825 self-contained SCSI host adapters.
1235# sym: Symbios/Logic 53C8XX family of PCI-SCSI I/O processors:
1236#      53C810, 53C810A, 53C815, 53C825,  53C825A, 53C860, 53C875,
1237#      53C876, 53C885,  53C895, 53C895A, 53C896,  53C897, 53C1510D,
1238#      53C1010-33, 53C1010-66.
1239# trm: Tekram DC395U/UW/F DC315U adapters.
1240# wds: WD7000
1241
1242#
1243# Note that the order is important in order for Buslogic ISA/EISA cards to be
1244# probed correctly.
1245#
1246device		bt
1247hint.bt.0.at="isa"
1248hint.bt.0.port="0x330"
1249device		adv
1250hint.adv.0.at="isa"
1251device		adw
1252device		aha
1253hint.aha.0.at="isa"
1254device		aic
1255hint.aic.0.at="isa"
1256device		ahb
1257device		ahc
1258device		ahd
1259device		amd
1260device		esp
1261device		isp
1262hint.isp.0.disable="1"
1263hint.isp.0.role="3"
1264hint.isp.0.prefer_iomap="1"
1265hint.isp.0.prefer_memmap="1"
1266hint.isp.0.fwload_disable="1"
1267hint.isp.0.ignore_nvram="1"
1268hint.isp.0.fullduplex="1"
1269hint.isp.0.topology="lport"
1270hint.isp.0.topology="nport"
1271hint.isp.0.topology="lport-only"
1272hint.isp.0.topology="nport-only"
1273# we can't get u_int64_t types, nor can we get strings if it's got
1274# a leading 0x, hence this silly dodge.
1275hint.isp.0.portwnn="w50000000aaaa0000"
1276hint.isp.0.nodewnn="w50000000aaaa0001"
1277device		ispfw
1278device		mpt
1279device		ncr
1280device		sym
1281device		trm
1282device		wds
1283hint.wds.0.at="isa"
1284hint.wds.0.port="0x350"
1285hint.wds.0.irq="11"
1286hint.wds.0.drq="6"
1287
1288# The aic7xxx driver will attempt to use memory mapped I/O for all PCI
1289# controllers that have it configured only if this option is set. Unfortunately,
1290# this doesn't work on some motherboards, which prevents it from being the
1291# default.
1292options 	AHC_ALLOW_MEMIO
1293
1294# Dump the contents of the ahc controller configuration PROM.
1295options 	AHC_DUMP_EEPROM
1296
1297# Bitmap of units to enable targetmode operations.
1298options 	AHC_TMODE_ENABLE
1299
1300# Compile in Aic7xxx Debugging code.
1301options		AHC_DEBUG
1302
1303# Aic7xxx driver debugging options. See sys/dev/aic7xxx/aic7xxx.h
1304options		AHC_DEBUG_OPTS
1305
1306# Print register bitfields in debug output.  Adds ~128k to driver
1307# See ahc(4).
1308options		AHC_REG_PRETTY_PRINT
1309
1310# Compile in aic79xx debugging code.
1311options 	AHD_DEBUG
1312
1313# Aic79xx driver debugging options.  Adds ~215k to driver.  See ahd(4).
1314options 	AHD_DEBUG_OPTS=0xFFFFFFFF
1315
1316# Print human-readable register definitions when debugging
1317options 	AHD_REG_PRETTY_PRINT
1318
1319# Bitmap of units to enable targetmode operations.
1320options		AHD_TMODE_ENABLE
1321
1322# The adw driver will attempt to use memory mapped I/O for all PCI
1323# controllers that have it configured only if this option is set.
1324options 	ADW_ALLOW_MEMIO
1325
1326# Options used in dev/isp/ (Qlogic SCSI/FC driver).
1327#
1328#	ISP_TARGET_MODE		-	enable target mode operation
1329#
1330options 	ISP_TARGET_MODE=1
1331
1332# Options used in dev/sym/ (Symbios SCSI driver).
1333#options 	SYM_SETUP_LP_PROBE_MAP	#-Low Priority Probe Map (bits)
1334					# Allows the ncr to take precedence
1335					# 1 (1<<0) -> 810a, 860
1336					# 2 (1<<1) -> 825a, 875, 885, 895
1337					# 4 (1<<2) -> 895a, 896, 1510d
1338#options 	SYM_SETUP_SCSI_DIFF	#-HVD support for 825a, 875, 885
1339					# disabled:0 (default), enabled:1
1340#options 	SYM_SETUP_PCI_PARITY	#-PCI parity checking
1341					# disabled:0, enabled:1 (default)
1342#options 	SYM_SETUP_MAX_LUN	#-Number of LUNs supported
1343					# default:8, range:[1..64]
1344
1345# The 'asr' driver provides support for current DPT/Adaptec SCSI RAID
1346# controllers (SmartRAID V and VI and later).
1347# These controllers require the CAM infrastructure.
1348#
1349device		asr
1350
1351# The 'dpt' driver provides support for old DPT controllers (http://www.dpt.com/).
1352# These have hardware RAID-{0,1,5} support, and do multi-initiator I/O.
1353# The DPT controllers are commonly re-licensed under other brand-names -
1354# some controllers by Olivetti, Dec, HP, AT&T, SNI, AST, Alphatronic, NEC and
1355# Compaq are actually DPT controllers.
1356#
1357# See src/sys/dev/dpt for debugging and other subtle options.
1358#   DPT_MEASURE_PERFORMANCE Enables a set of (semi)invasive metrics. Various
1359#                           instruments are enabled.  The tools in
1360#                           /usr/sbin/dpt_* assume these to be enabled.
1361#   DPT_HANDLE_TIMEOUTS     Normally device timeouts are handled by the DPT.
1362#                           If you ant the driver to handle timeouts, enable
1363#                           this option.  If your system is very busy, this
1364#                           option will create more trouble than solve.
1365#   DPT_TIMEOUT_FACTOR      Used to compute the excessive amount of time to
1366#                           wait when timing out with the above option.
1367#  DPT_DEBUG_xxxx           These are controllable from sys/dev/dpt/dpt.h
1368#  DPT_LOST_IRQ             When enabled, will try, once per second, to catch
1369#                           any interrupt that got lost.  Seems to help in some
1370#                           DPT-firmware/Motherboard combinations.  Minimal
1371#                           cost, great benefit.
1372#  DPT_RESET_HBA            Make "reset" actually reset the controller
1373#                           instead of fudging it.  Only enable this if you
1374#			    are 100% certain you need it.
1375
1376device		dpt
1377
1378# DPT options
1379#!CAM# options 	DPT_MEASURE_PERFORMANCE
1380#!CAM# options 	DPT_HANDLE_TIMEOUTS
1381options 	DPT_TIMEOUT_FACTOR=4
1382options 	DPT_LOST_IRQ
1383options 	DPT_RESET_HBA
1384
1385#
1386# Compaq "CISS" RAID controllers (SmartRAID 5* series)
1387# These controllers have a SCSI-like interface, and require the
1388# CAM infrastructure.
1389#
1390device		ciss
1391
1392#
1393# Intel Integrated RAID controllers.
1394# This driver was developed and is maintained by Intel.  Contacts
1395# at Intel for this driver are
1396# "Kannanthanam, Boji T" <boji.t.kannanthanam@intel.com> and
1397# "Leubner, Achim" <achim.leubner@intel.com>.
1398#
1399device		iir
1400
1401#
1402# Mylex AcceleRAID and eXtremeRAID controllers with v6 and later
1403# firmware.  These controllers have a SCSI-like interface, and require
1404# the CAM infrastructure.
1405#
1406device		mly
1407
1408#
1409# Compaq Smart RAID, Mylex DAC960 and AMI MegaRAID controllers.  Only
1410# one entry is needed; the code will find and configure all supported
1411# controllers.
1412#
1413device		ida		# Compaq Smart RAID
1414device		mlx		# Mylex DAC960
1415device		amr		# AMI MegaRAID
1416
1417#
1418# 3ware ATA RAID
1419#
1420device		twe		# 3ware ATA RAID
1421
1422#
1423# The 'ATA' driver supports all ATA and ATAPI devices, including PC Card
1424# devices. You only need one "device ata" for it to find all
1425# PCI and PC Card ATA/ATAPI devices on modern machines.
1426device		ata
1427device		atadisk		# ATA disk drives
1428device		ataraid		# ATA RAID drives
1429device		atapicd		# ATAPI CDROM drives
1430device		atapifd		# ATAPI floppy drives
1431device		atapist		# ATAPI tape drives
1432device		atapicam	# emulate ATAPI devices as SCSI ditto via CAM
1433				# needs CAM to be present (scbus & pass)
1434#
1435# For older non-PCI, non-PnPBIOS systems, these are the hints lines to add:
1436hint.ata.0.at="isa"
1437hint.ata.0.port="0x1f0"
1438hint.ata.0.irq="14"
1439hint.ata.1.at="isa"
1440hint.ata.1.port="0x170"
1441hint.ata.1.irq="15"
1442
1443#
1444# The following options are valid on the ATA driver:
1445#
1446# ATA_STATIC_ID:	controller numbering is static ie depends on location
1447#			else the device numbers are dynamically allocated.
1448
1449options 	ATA_STATIC_ID
1450
1451#
1452# Standard floppy disk controllers and floppy tapes, supports
1453# the Y-E DATA External FDD (PC Card)
1454#
1455device		fdc
1456hint.fdc.0.at="isa"
1457hint.fdc.0.port="0x3F0"
1458hint.fdc.0.irq="6"
1459hint.fdc.0.drq="2"
1460#
1461# FDC_DEBUG enables floppy debugging.  Since the debug output is huge, you
1462# gotta turn it actually on by setting the variable fd_debug with DDB,
1463# however.
1464options 	FDC_DEBUG
1465#
1466# Activate this line if you happen to have an Insight floppy tape.
1467# Probing them proved to be dangerous for people with floppy disks only,
1468# so it's "hidden" behind a flag:
1469#hint.fdc.0.flags="1"
1470
1471# Specify floppy devices
1472hint.fd.0.at="fdc0"
1473hint.fd.0.drive="0"
1474hint.fd.1.at="fdc0"
1475hint.fd.1.drive="1"
1476
1477#
1478# sio: serial ports (see sio(4)), including support for various
1479#      PC Card devices, such as Modem and NICs (see etc/defaults/pccard.conf)
1480#
1481device		sio
1482hint.sio.0.at="isa"
1483hint.sio.0.port="0x3F8"
1484hint.sio.0.flags="0x10"
1485hint.sio.0.irq="4"
1486
1487# Options for sio:
1488options 	COM_ESP			# Code for Hayes ESP.
1489options 	COM_MULTIPORT		# Code for some cards with shared IRQs.
1490options 	CONSPEED=115200		# Speed for serial console
1491					# (default 9600).
1492
1493# `flags' specific to sio(4).  See below for flags used by both sio(4) and
1494# uart(4).
1495#	0x20	force this unit to be the console (unless there is another
1496#		higher priority console).  This replaces the COMCONSOLE option.
1497#	0x40	reserve this unit for low level console operations.  Do not
1498#		access the device in any normal way.
1499# PnP `flags'
1500#	0x1	disable probing of this device.  Used to prevent your modem
1501#		from being attached as a PnP modem.
1502# Other flags for sio that aren't documented in the man page.
1503#	0x20000	enable hardware RTS/CTS and larger FIFOs.  Only works for
1504#		ST16650A-compatible UARTs.
1505
1506#
1507# uart: newbusified driver for serial interfaces.  It consolidates the sio(4),
1508#	sab(4) and zs(4) drivers.
1509#
1510device		uart
1511
1512# Options for uart(4)
1513options 	UART_PPS_ON_CTS		# Do time pulse capturing using CTS
1514					# instead of DCD.
1515
1516# The following hint should only be used for pure ISA devices.  It is not
1517# needed otherwise.  Use of hints is strongly discouraged.
1518hint.uart.0.at="isa"
1519
1520# The following 3 hints are used when the UART is a system device (i.e., a
1521# console or debug port), but only on platforms that don't have any other
1522# means to pass the information to the kernel.  The unit number of the hint
1523# is only used to bundle the hints together.  There is no relation to the
1524# unit number of the probed UART.
1525hint.uart.0.port="0x3f8"
1526hint.uart.0.flags="0x10"
1527hint.uart.0.baud="115200"
1528
1529# `flags' for serial drivers that support consoles like sio(4) and uart(4):
1530#	0x10	enable console support for this unit.  Other console flags
1531#		(if applicable) are ignored unless this is set.  Enabling
1532#		console support does not make the unit the preferred console.
1533#		Boot with -h or set boot_serial=YES in the loader.  For sio(4)
1534#		specifically, the 0x20 flag can also be set (see above).
1535#		Currently, at most one unit can have console support; the
1536#		first one (in config file order) with this flag set is
1537#		preferred.  Setting this flag for sio0 gives the old behaviour.
1538#	0x80	use this port for serial line gdb support in ddb.  Also known
1539#		as debug port.
1540#
1541
1542# Options for serial drivers that support consoles:
1543options 	BREAK_TO_DEBUGGER	# A BREAK on a serial console goes to
1544					# ddb, if available.
1545
1546# Solaris implements a new BREAK which is initiated by a character
1547# sequence CR ~ ^b which is similar to a familiar pattern used on
1548# Sun servers by the Remote Console.
1549options 	ALT_BREAK_TO_DEBUGGER
1550
1551# PCI Universal Communications driver
1552# Supports various single and multi port PCI serial cards. Maybe later
1553# also the parallel ports on combination serial/parallel cards. New cards
1554# can be added in src/sys/dev/puc/pucdata.c.
1555#
1556# If the PUC_FASTINTR option is used the driver will try to use fast
1557# interrupts. The card must then be the only user of that interrupt.
1558# Interrupts cannot be shared when using PUC_FASTINTR.
1559device		puc
1560options 	PUC_FASTINTR
1561
1562#
1563# Network interfaces:
1564#
1565# MII bus support is required for some PCI 10/100 ethernet NICs,
1566# namely those which use MII-compliant transceivers or implement
1567# transceiver control interfaces that operate like an MII. Adding
1568# "device miibus0" to the kernel config pulls in support for
1569# the generic miibus API and all of the PHY drivers, including a
1570# generic one for PHYs that aren't specifically handled by an
1571# individual driver.
1572device		miibus
1573
1574# an:   Aironet 4500/4800 802.11 wireless adapters. Supports the PCMCIA,
1575#       PCI and ISA varieties.
1576# awi:  Support for IEEE 802.11 PC Card devices using the AMD Am79C930 and
1577#       Harris (Intersil) Chipset with PCnetMobile firmware by AMD.
1578# bge:	Support for gigabit ethernet adapters based on the Broadcom
1579#	BCM570x family of controllers, including the 3Com 3c996-T,
1580#	the Netgear GA302T, the SysKonnect SK-9D21 and SK-9D41, and
1581#	the embedded gigE NICs on Dell PowerEdge 2550 servers.
1582# cm:	Arcnet SMC COM90c26 / SMC COM90c56
1583#	(and SMC COM90c66 in '56 compatibility mode) adapters.
1584# cnw:  Xircom CNW/Netware Airsurfer PC Card adapter
1585# cs:   IBM Etherjet and other Crystal Semi CS89x0-based adapters
1586# dc:   Support for PCI fast ethernet adapters based on the DEC/Intel 21143
1587#       and various workalikes including:
1588#       the ADMtek AL981 Comet and AN985 Centaur, the ASIX Electronics
1589#       AX88140A and AX88141, the Davicom DM9100 and DM9102, the Lite-On
1590#       82c168 and 82c169 PNIC, the Lite-On/Macronix LC82C115 PNIC II
1591#       and the Macronix 98713/98713A/98715/98715A/98725 PMAC. This driver
1592#       replaces the old al, ax, dm, pn and mx drivers.  List of brands:
1593#       Digital DE500-BA, Kingston KNE100TX, D-Link DFE-570TX, SOHOware SFA110,
1594#       SVEC PN102-TX, CNet Pro110B, 120A, and 120B, Compex RL100-TX,
1595#       LinkSys LNE100TX, LNE100TX V2.0, Jaton XpressNet, Alfa Inc GFC2204,
1596#       KNE110TX.
1597# de:   Digital Equipment DC21040
1598# em:   Intel Pro/1000 Gigabit Ethernet 82542, 82543, 82544 based adapters.
1599# ep:   3Com 3C509, 3C529, 3C556, 3C562D, 3C563D, 3C572, 3C574X, 3C579, 3C589
1600#       and PC Card devices using these chipsets.
1601# ex:   Intel EtherExpress Pro/10 and other i82595-based adapters,
1602#       Olicom Ethernet PC Card devices.
1603# fe:   Fujitsu MB86960A/MB86965A Ethernet
1604# fea:  DEC DEFEA EISA FDDI adapter
1605# fpa:  Support for the Digital DEFPA PCI FDDI. `device fddi' is also needed.
1606# fxp:  Intel EtherExpress Pro/100B
1607#	(hint of prefer_iomap can be done to prefer I/O instead of Mem mapping)
1608# gx:   Intel Pro/1000 Gigabit Ethernet (82542, 82543-F, 82543-T)
1609# lge:	Support for PCI gigabit ethernet adapters based on the Level 1
1610#	LXT1001 NetCellerator chipset. This includes the D-Link DGE-500SX,
1611#	SMC TigerCard 1000 (SMC9462SX), and some Addtron cards.
1612# my:	Myson Fast Ethernet (MTD80X, MTD89X)
1613# nge:	Support for PCI gigabit ethernet adapters based on the National
1614#	Semiconductor DP83820 and DP83821 chipset. This includes the
1615#	SMC EZ Card 1000 (SMC9462TX), D-Link DGE-500T, Asante FriendlyNet
1616#	GigaNIX 1000TA and 1000TPC, the Addtron AEG320T, the LinkSys
1617#	EG1032 and EG1064, the Surecom EP-320G-TX and the Netgear GA622T.
1618# pcn:	Support for PCI fast ethernet adapters based on the AMD Am79c97x
1619#	chipsets, including the PCnet/FAST, PCnet/FAST+, PCnet/PRO and
1620#	PCnet/Home. These were previously handled by the lnc driver (and
1621#	still will be if you leave this driver out of the kernel).
1622# rl:   Support for PCI fast ethernet adapters based on the RealTek 8129/8139
1623#       chipset.  Note that the RealTek driver defaults to using programmed
1624#       I/O to do register accesses because memory mapped mode seems to cause
1625#       severe lockups on SMP hardware.  This driver also supports the
1626#       Accton EN1207D `Cheetah' adapter, which uses a chip called
1627#       the MPX 5030/5038, which is either a RealTek in disguise or a
1628#       RealTek workalike.  Note that the D-Link DFE-530TX+ uses the RealTek
1629#       chipset and is supported by this driver, not the 'vr' driver.
1630# sf:   Support for Adaptec Duralink PCI fast ethernet adapters based on the
1631#       Adaptec AIC-6915 "starfire" controller.
1632#       This includes dual and quad port cards, as well as one 100baseFX card.
1633#       Most of these are 64-bit PCI devices, except for one single port
1634#       card which is 32-bit.
1635# sis:  Support for NICs based on the Silicon Integrated Systems SiS 900,
1636#       SiS 7016 and NS DP83815 PCI fast ethernet controller chips.
1637# sbsh:	Support for Granch SBNI16 SHDSL modem PCI adapters
1638# sk:   Support for the SysKonnect SK-984x series PCI gigabit ethernet NICs.
1639#       This includes the SK-9841 and SK-9842 single port cards (single mode
1640#       and multimode fiber) and the SK-9843 and SK-9844 dual port cards
1641#       (also single mode and multimode).
1642#       The driver will autodetect the number of ports on the card and
1643#       attach each one as a separate network interface.
1644# sn:   Support for ISA and PC Card Ethernet devices using the
1645#       SMC91C90/92/94/95 chips.
1646# ste:  Sundance Technologies ST201 PCI fast ethernet controller, includes
1647#       the D-Link DFE-550TX.
1648# ti:   Support for PCI gigabit ethernet NICs based on the Alteon Networks
1649#       Tigon 1 and Tigon 2 chipsets.  This includes the Alteon AceNIC, the
1650#       3Com 3c985, the Netgear GA620 and various others.  Note that you will
1651#       probably want to bump up NMBCLUSTERS a lot to use this driver.
1652# tl:   Support for the Texas Instruments TNETE100 series 'ThunderLAN'
1653#       cards and integrated ethernet controllers.  This includes several
1654#       Compaq Netelligent 10/100 cards and the built-in ethernet controllers
1655#       in several Compaq Prosignia, Proliant and Deskpro systems.  It also
1656#       supports several Olicom 10Mbps and 10/100 boards.
1657# tx:   SMC 9432 TX, BTX and FTX cards. (SMC EtherPower II series)
1658# txp:	Support for 3Com 3cR990 cards with the "Typhoon" chipset
1659# vr:   Support for various fast ethernet adapters based on the VIA
1660#       Technologies VT3043 `Rhine I' and VT86C100A `Rhine II' chips,
1661#       including the D-Link DFE530TX (see 'rl' for DFE530TX+), the Hawking
1662#       Technologies PN102TX, and the AOpen/Acer ALN-320.
1663# vx:   3Com 3C590 and 3C595
1664# wb:   Support for fast ethernet adapters based on the Winbond W89C840F chip.
1665#       Note: this is not the same as the Winbond W89C940F, which is a
1666#       NE2000 clone.
1667# wi:   Lucent WaveLAN/IEEE 802.11 PCMCIA adapters. Note: this supports both
1668#       the PCMCIA and ISA cards: the ISA card is really a PCMCIA to ISA
1669#       bridge with a PCMCIA adapter plugged into it.
1670# xe:   Xircom/Intel EtherExpress Pro100/16 PC Card ethernet controller,
1671#       Accton Fast EtherCard-16, Compaq Netelligent 10/100 PC Card,
1672#       Toshiba 10/100 Ethernet PC Card, Xircom 16-bit Ethernet + Modem 56
1673# xl:   Support for the 3Com 3c900, 3c905, 3c905B and 3c905C (Fast)
1674#       Etherlink XL cards and integrated controllers.  This includes the
1675#       integrated 3c905B-TX chips in certain Dell Optiplex and Dell
1676#       Precision desktop machines and the integrated 3c905-TX chips
1677#       in Dell Latitude laptop docking stations.
1678#       Also supported: 3Com 3c980(C)-TX, 3Com 3cSOHO100-TX, 3Com 3c450-TX
1679
1680# Order for ISA/EISA devices is important here
1681
1682device		cm
1683hint.cm.0.at="isa"
1684hint.cm.0.port="0x2e0"
1685hint.cm.0.irq="9"
1686hint.cm.0.maddr="0xdc000"
1687device		cs
1688hint.cs.0.at="isa"
1689hint.cs.0.port="0x300"
1690device		ep
1691device		ex
1692device		fe
1693hint.fe.0.at="isa"
1694hint.fe.0.port="0x300"
1695device		fea
1696device		sn
1697hint.sn.0.at="isa"
1698hint.sn.0.port="0x300"
1699hint.sn.0.irq="10"
1700device		an
1701device		awi
1702device		cnw
1703device		wi
1704device		xe
1705
1706# PCI Ethernet NICs that use the common MII bus controller code.
1707device		dc		# DEC/Intel 21143 and various workalikes
1708device		fxp		# Intel EtherExpress PRO/100B (82557, 82558)
1709hint.fxp.0.prefer_iomap="0"
1710device		my		# Myson Fast Ethernet (MTD80X, MTD89X)
1711device		rl		# RealTek 8129/8139
1712device		pcn		# AMD Am79C97x PCI 10/100 NICs
1713device		sf		# Adaptec AIC-6915 (``Starfire'')
1714device		sbsh		# Granch SBNI16 SHDSL modem
1715device		sis		# Silicon Integrated Systems SiS 900/SiS 7016
1716device		ste		# Sundance ST201 (D-Link DFE-550TX)
1717device		tl		# Texas Instruments ThunderLAN
1718device		tx		# SMC EtherPower II (83c170 ``EPIC'')
1719device		vr		# VIA Rhine, Rhine II
1720device		wb		# Winbond W89C840F
1721device		xl		# 3Com 3c90x (``Boomerang'', ``Cyclone'')
1722
1723# PCI Ethernet NICs.
1724device		de		# DEC/Intel DC21x4x (``Tulip'')
1725device		txp		# 3Com 3cR990 (``Typhoon'')
1726device		vx		# 3Com 3c590, 3c595 (``Vortex'')
1727
1728# PCI Gigabit & FDDI NICs.
1729device		bge
1730device		gx
1731device		lge
1732device		nge
1733device		sk
1734device		ti
1735device		fpa
1736
1737# Use "private" jumbo buffers allocated exclusively for the ti(4) driver.
1738# This option is incompatible with the TI_JUMBO_HDRSPLIT option below.
1739#options 	TI_PRIVATE_JUMBOS
1740# Turn on the header splitting option for the ti(4) driver firmware.  This
1741# only works for Tigon II chips, and has no effect for Tigon I chips.
1742options 	TI_JUMBO_HDRSPLIT
1743
1744# These two options allow manipulating the mbuf cluster size and mbuf size,
1745# respectively.  Be very careful with NIC driver modules when changing
1746# these from their default values, because that can potentially cause a
1747# mismatch between the mbuf size assumed by the kernel and the mbuf size
1748# assumed by a module.  The only driver that currently has the ability to
1749# detect a mismatch is ti(4).
1750options 	MCLSHIFT=12	# mbuf cluster shift in bits, 12 == 4KB
1751options 	MSIZE=512	# mbuf size in bytes
1752
1753#
1754# ATM related options (Cranor version)
1755# (note: this driver cannot be used with the HARP ATM stack)
1756#
1757# The `en' device provides support for Efficient Networks (ENI)
1758# ENI-155 PCI midway cards, and the Adaptec 155Mbps PCI ATM cards (ANA-59x0).
1759#
1760# The `hatm' device provides support for Fore/Marconi HE155 and HE622
1761# ATM PCI cards.
1762#
1763# The `fatm' device provides support for Fore PCA200E ATM PCI cards.
1764#
1765# The `patm' device provides support for IDT77252 based cards like
1766# ProSum's ProATM-155 and ProATM-25 and IDT's evaluation boards.
1767#
1768# atm device provides generic atm functions and is required for
1769# atm devices.
1770# NATM enables the netnatm protocol family that can be used to
1771# bypass TCP/IP.
1772#
1773# utopia provides the access to the ATM PHY chips and is required for en,
1774# hatm and fatm.
1775#
1776# the current driver supports only PVC operations (no atm-arp, no multicast).
1777# for more details, please read the original documents at
1778# http://www.ccrc.wustl.edu/pub/chuck/tech/bsdatm/bsdatm.html
1779#
1780device		atm
1781device		en
1782device		fatm			#Fore PCA200E
1783device		hatm			#Fore/Marconi HE155/622
1784device		patm			#IDT77252 cards (ProATM and IDT)
1785device		utopia			#ATM PHY driver
1786options 	NATM			#native ATM
1787
1788options 	LIBMBPOOL		#needed by patm, iatm
1789
1790#
1791# Audio drivers: `pcm', `sbc', `gusc'
1792#
1793# pcm: PCM audio through various sound cards.
1794#
1795# This has support for a large number of new audio cards, based on
1796# CS423x, OPTi931, Yamaha OPL-SAx, and also for SB16, GusPnP.
1797# For more information about this driver and supported cards, see pcm(4).
1798#
1799# The flags of the device tells the device a bit more info about the
1800# device that normally is obtained through the PnP interface.
1801#	bit  2..0   secondary DMA channel;
1802#	bit  4      set if the board uses two dma channels;
1803#	bit 15..8   board type, overrides autodetection; leave it
1804#		    zero if don't know what to put in (and you don't,
1805#		    since this is unsupported at the moment...).
1806#
1807# Supported cards include:
1808# Creative SoundBlaster ISA PnP/non-PnP
1809# Supports ESS and Avance ISA chips as well.
1810# Gravis UltraSound ISA PnP/non-PnP
1811# Crystal Semiconductor CS461x/428x PCI
1812# Neomagic 256AV (ac97)
1813# Most of the more common ISA/PnP sb/mss/ess compatible cards.
1814
1815device		pcm
1816
1817# For non-pnp sound cards with no bridge drivers only:
1818hint.pcm.0.at="isa"
1819hint.pcm.0.irq="10"
1820hint.pcm.0.drq="1"
1821hint.pcm.0.flags="0x0"
1822
1823# The bridge drivers for sound cards.  These can be separately configured
1824# for providing services to the likes of new-midi.
1825# When used with 'device pcm' they also provide pcm sound services.
1826#
1827# sbc:  Creative SoundBlaster ISA PnP/non-PnP
1828#	Supports ESS and Avance ISA chips as well.
1829# gusc: Gravis UltraSound ISA PnP/non-PnP
1830# csa:  Crystal Semiconductor CS461x/428x PCI
1831
1832# For non-PnP cards:
1833device		sbc
1834hint.sbc.0.at="isa"
1835hint.sbc.0.port="0x220"
1836hint.sbc.0.irq="5"
1837hint.sbc.0.drq="1"
1838hint.sbc.0.flags="0x15"
1839device		gusc
1840hint.gusc.0.at="isa"
1841hint.gusc.0.port="0x220"
1842hint.gusc.0.irq="5"
1843hint.gusc.0.drq="1"
1844hint.gusc.0.flags="0x13"
1845
1846#
1847# Miscellaneous hardware:
1848#
1849# scd: Sony CD-ROM using proprietary (non-ATAPI) interface
1850# mcd: Mitsumi CD-ROM using proprietary (non-ATAPI) interface
1851# bktr: Brooktree bt848/848a/849a/878/879 video capture and TV Tuner board
1852# cy: Cyclades serial driver
1853# joy: joystick (including IO DATA PCJOY PC Card joystick)
1854# rc: RISCom/8 multiport card
1855# rp: Comtrol Rocketport(ISA/PCI) - single card
1856# si: Specialix SI/XIO 4-32 port terminal multiplexor
1857# nmdm: nullmodem terminal driver (see nmdm(4))
1858
1859# Notes on the Comtrol Rocketport driver:
1860#
1861# The exact values used for rp0 depend on how many boards you have
1862# in the system.  The manufacturer's sample configs are listed as:
1863#
1864#               device  rp	# core driver support
1865#
1866#   Comtrol Rocketport ISA single card
1867#		hint.rp.0.at="isa"
1868#		hint.rp.0.port="0x280"
1869#
1870#   If instead you have two ISA cards, one installed at 0x100 and the
1871#   second installed at 0x180, then you should add the following to
1872#   your kernel probe hints:
1873#		hint.rp.0.at="isa"
1874#		hint.rp.0.port="0x100"
1875#		hint.rp.1.at="isa"
1876#		hint.rp.1.port="0x180"
1877#
1878#   For 4 ISA cards, it might be something like this:
1879#		hint.rp.0.at="isa"
1880#		hint.rp.0.port="0x180"
1881#		hint.rp.1.at="isa"
1882#		hint.rp.1.port="0x100"
1883#		hint.rp.2.at="isa"
1884#		hint.rp.2.port="0x340"
1885#		hint.rp.3.at="isa"
1886#		hint.rp.3.port="0x240"
1887#
1888#   For PCI cards, you need no hints.
1889
1890# Mitsumi CD-ROM
1891device		mcd
1892hint.mcd.0.at="isa"
1893hint.mcd.0.port="0x300"
1894# for the Sony CDU31/33A CDROM
1895device		scd
1896hint.scd.0.at="isa"
1897hint.scd.0.port="0x230"
1898device		joy			# PnP aware, hints for nonpnp only
1899hint.joy.0.at="isa"
1900hint.joy.0.port="0x201"
1901device		rc
1902hint.rc.0.at="isa"
1903hint.rc.0.port="0x220"
1904hint.rc.0.irq="12"
1905device		rp
1906hint.rp.0.at="isa"
1907hint.rp.0.port="0x280"
1908device		si
1909options 	SI_DEBUG
1910hint.si.0.at="isa"
1911hint.si.0.maddr="0xd0000"
1912hint.si.0.irq="12"
1913device		nmdm
1914
1915#
1916# The 'bktr' device is a PCI video capture device using the Brooktree
1917# bt848/bt848a/bt849a/bt878/bt879 chipset. When used with a TV Tuner it forms a
1918# TV card, eg Miro PC/TV, Hauppauge WinCast/TV WinTV, VideoLogic Captivator,
1919# Intel Smart Video III, AverMedia, IMS Turbo, FlyVideo.
1920#
1921# options 	OVERRIDE_CARD=xxx
1922# options 	OVERRIDE_TUNER=xxx
1923# options 	OVERRIDE_MSP=1
1924# options 	OVERRIDE_DBX=1
1925# These options can be used to override the auto detection
1926# The current values for xxx are found in src/sys/dev/bktr/bktr_card.h
1927# Using sysctl(8) run-time overrides on a per-card basis can be made
1928#
1929# options 	BROOKTREE_SYSTEM_DEFAULT=BROOKTREE_PAL
1930# or
1931# options 	BROOKTREE_SYSTEM_DEFAULT=BROOKTREE_NTSC
1932# Specifies the default video capture mode.
1933# This is required for Dual Crystal (28&35Mhz) boards where PAL is used
1934# to prevent hangs during initialisation.  eg VideoLogic Captivator PCI.
1935#
1936# options 	BKTR_USE_PLL
1937# PAL or SECAM users who have a 28Mhz crystal (and no 35Mhz crystal)
1938# must enable PLL mode with this option. eg some new Bt878 cards.
1939#
1940# options 	BKTR_GPIO_ACCESS
1941# This enable IOCTLs which give user level access to the GPIO port.
1942#
1943# options 	BKTR_NO_MSP_RESET
1944# Prevents the MSP34xx reset. Good if you initialise the MSP in another OS first
1945#
1946# options 	BKTR_430_FX_MODE
1947# Switch Bt878/879 cards into Intel 430FX chipset compatibility mode.
1948#
1949# options 	BKTR_SIS_VIA_MODE
1950# Switch Bt878/879 cards into SIS/VIA chipset compatibility mode which is
1951# needed for some old SiS and VIA chipset motherboards.
1952# This also allows Bt878/879 chips to work on old OPTi (<1997) chipset
1953# motherboards and motherboards with bad or incomplete PCI 2.1 support.
1954# As a rough guess, old = before 1998
1955#
1956# options 	BKTR_NEW_MSP34XX_DRIVER
1957# Use new, more complete initialization scheme for the msp34* soundchip.
1958# Should fix stereo autodetection if the old driver does only output
1959# mono sound.
1960
1961#
1962# options	BKTR_USE_FREEBSD_SMBUS
1963# Compile with FreeBSD SMBus implementation
1964#
1965# Brooktree driver has been ported to the new I2C framework. Thus,
1966# you'll need to have the following 3 lines in the kernel config.
1967#     device smbus
1968#     device iicbus
1969#     device iicbb
1970#     device iicsmb
1971# The iic and smb devices are only needed if you want to control other
1972# I2C slaves connected to the external connector of some cards.
1973#
1974device		bktr
1975
1976#
1977# PC Card/PCMCIA
1978# (OLDCARD)
1979#
1980# card: pccard slots
1981# pcic: isa/pccard bridge
1982#device		pcic
1983#hint.pcic.0.at="isa"
1984#hint.pcic.1.at="isa"
1985#device		card	1
1986
1987#
1988# PC Card/PCMCIA and Cardbus
1989# (NEWCARD)
1990#
1991# Note that NEWCARD and OLDCARD are incompatible.  Do not use both at the same
1992# time.
1993#
1994# pccbb: pci/cardbus bridge implementing YENTA interface
1995# pccard: pccard slots
1996# cardbus: cardbus slots
1997device		cbb
1998device		pccard
1999device		cardbus
2000#device		pcic		ISA attachment currently busted
2001#hint.pcic.0.at="isa"
2002#hint.pcic.1.at="isa"
2003
2004#
2005# SMB bus
2006#
2007# System Management Bus support is provided by the 'smbus' device.
2008# Access to the SMBus device is via the 'smb' device (/dev/smb*),
2009# which is a child of the 'smbus' device.
2010#
2011# Supported devices:
2012# smb		standard io through /dev/smb*
2013#
2014# Supported SMB interfaces:
2015# iicsmb	I2C to SMB bridge with any iicbus interface
2016# bktr		brooktree848 I2C hardware interface
2017# intpm		Intel PIIX4 (82371AB, 82443MX) Power Management Unit
2018# alpm		Acer Aladdin-IV/V/Pro2 Power Management Unit
2019# ichsmb	Intel ICH SMBus controller chips (82801AA, 82801AB, 82801BA)
2020# viapm		VIA VT82C586B/596B/686A and VT8233 Power Management Unit
2021# amdpm		AMD 756 Power Management Unit
2022# nfpm		NVIDIA nForce Power Management Unit
2023#
2024device		smbus		# Bus support, required for smb below.
2025
2026device		intpm
2027device		alpm
2028device		ichsmb
2029device		viapm
2030device		amdpm
2031device		nfpm
2032
2033device		smb
2034
2035#
2036# I2C Bus
2037#
2038# Philips i2c bus support is provided by the `iicbus' device.
2039#
2040# Supported devices:
2041# ic	i2c network interface
2042# iic	i2c standard io
2043# iicsmb i2c to smb bridge. Allow i2c i/o with smb commands.
2044#
2045# Supported interfaces:
2046# bktr	brooktree848 I2C software interface
2047#
2048# Other:
2049# iicbb	generic I2C bit-banging code (needed by lpbb, bktr)
2050#
2051device		iicbus		# Bus support, required for ic/iic/iicsmb below.
2052device		iicbb
2053
2054device		ic
2055device		iic
2056device		iicsmb		# smb over i2c bridge
2057
2058# Parallel-Port Bus
2059#
2060# Parallel port bus support is provided by the `ppbus' device.
2061# Multiple devices may be attached to the parallel port, devices
2062# are automatically probed and attached when found.
2063#
2064# Supported devices:
2065# vpo	Iomega Zip Drive
2066#	Requires SCSI disk support ('scbus' and 'da'), best
2067#	performance is achieved with ports in EPP 1.9 mode.
2068# lpt	Parallel Printer
2069# plip	Parallel network interface
2070# ppi	General-purpose I/O ("Geek Port") + IEEE1284 I/O
2071# pps	Pulse per second Timing Interface
2072# lpbb	Philips official parallel port I2C bit-banging interface
2073#
2074# Supported interfaces:
2075# ppc	ISA-bus parallel port interfaces.
2076#
2077
2078options 	PPC_PROBE_CHIPSET # Enable chipset specific detection
2079				  # (see flags in ppc(4))
2080options 	DEBUG_1284	# IEEE1284 signaling protocol debug
2081options 	PERIPH_1284	# Makes your computer act as an IEEE1284
2082				# compliant peripheral
2083options 	DONTPROBE_1284	# Avoid boot detection of PnP parallel devices
2084options 	VP0_DEBUG	# ZIP/ZIP+ debug
2085options 	LPT_DEBUG	# Printer driver debug
2086options 	PPC_DEBUG	# Parallel chipset level debug
2087options 	PLIP_DEBUG	# Parallel network IP interface debug
2088options 	PCFCLOCK_VERBOSE         # Verbose pcfclock driver
2089options 	PCFCLOCK_MAX_RETRIES=5   # Maximum read tries (default 10)
2090
2091device		ppc
2092hint.ppc.0.at="isa"
2093hint.ppc.0.irq="7"
2094device		ppbus
2095device		vpo
2096device		lpt
2097device		plip
2098device		ppi
2099device		pps
2100device		lpbb
2101device		pcfclock
2102
2103# Kernel BOOTP support
2104
2105options 	BOOTP		# Use BOOTP to obtain IP address/hostname
2106				# Requires NFSCLIENT and NFS_ROOT
2107options 	BOOTP_NFSROOT	# NFS mount root filesystem using BOOTP info
2108options 	BOOTP_NFSV3	# Use NFS v3 to NFS mount root
2109options 	BOOTP_COMPAT	# Workaround for broken bootp daemons.
2110options 	BOOTP_WIRED_TO=fxp0 # Use interface fxp0 for BOOTP
2111
2112#
2113# Add tie-ins for a hardware watchdog.  This only enables the hooks;
2114# the user must still supply the actual driver.
2115#
2116options 	HW_WDOG
2117
2118#
2119# Add software watchdog routines.
2120#
2121options 	SW_WATCHDOG
2122
2123#
2124# Disable swapping of upages and stack pages.  This option removes all
2125# code which actually performs swapping, so it's not possible to turn
2126# it back on at run-time.
2127#
2128# This is sometimes usable for systems which don't have any swap space
2129# (see also sysctls "vm.defer_swapspace_pageouts" and
2130# "vm.disable_swapspace_pageouts")
2131#
2132#options 	NO_SWAPPING
2133
2134# Set the number of sf_bufs to allocate. sf_bufs are virtual buffers
2135# for sendfile(2) that are used to map file VM pages, and normally
2136# default to a quantity that is roughly 16*MAXUSERS+512. You would
2137# typically want about 4 of these for each simultaneous file send.
2138#
2139options 	NSFBUFS=1024
2140
2141#
2142# Enable extra debugging code for locks.  This stores the filename and
2143# line of whatever acquired the lock in the lock itself, and change a
2144# number of function calls to pass around the relevant data.  This is
2145# not at all useful unless you are debugging lock code.  Also note
2146# that it is likely to break e.g. fstat(1) unless you recompile your
2147# userland with -DDEBUG_LOCKS as well.
2148#
2149options 	DEBUG_LOCKS
2150
2151
2152#####################################################################
2153# USB support
2154# UHCI controller
2155device		uhci
2156# OHCI controller
2157device		ohci
2158# EHCI controller
2159device		ehci
2160# General USB code (mandatory for USB)
2161device		usb
2162#
2163# USB Double Bulk Pipe devices
2164device		udbp
2165# USB Fm Radio
2166device		ufm
2167# Generic USB device driver
2168device		ugen
2169# Human Interface Device (anything with buttons and dials)
2170device		uhid
2171# USB keyboard
2172device		ukbd
2173# USB printer
2174device		ulpt
2175# USB Iomega Zip 100 Drive (Requires scbus and da)
2176device		umass
2177# USB support for Belkin F5U109 and Magic Control Technology serial adapters
2178device		umct
2179# USB modem support
2180device		umodem
2181# USB mouse
2182device		ums
2183# Diamond Rio 500 Mp3 player
2184device		urio
2185# USB scanners
2186device		uscanner
2187#
2188# USB serial support
2189device		ucom
2190# USB support for Belkin F5U103 and compatible serial adapters
2191device		ubsa
2192# USB support for BWCT console serial adapters
2193device		ubser
2194# USB support for serial adapters based on the FT8U100AX and FT8U232AM
2195device		uftdi
2196# USB support for Prolific PL-2303 serial adapters
2197device		uplcom
2198# USB Visor and Palm devices
2199device		uvisor
2200# USB serial support for DDI pocket's PHS
2201device		uvscom
2202#
2203# ADMtek USB ethernet. Supports the LinkSys USB100TX,
2204# the Billionton USB100, the Melco LU-ATX, the D-Link DSB-650TX
2205# and the SMC 2202USB. Also works with the ADMtek AN986 Pegasus
2206# eval board.
2207device		aue
2208#
2209# CATC USB-EL1201A USB ethernet. Supports the CATC Netmate
2210# and Netmate II, and the Belkin F5U111.
2211device		cue
2212#
2213# Kawasaki LSI ethernet. Supports the LinkSys USB10T,
2214# Entrega USB-NET-E45, Peracom Ethernet Adapter, the
2215# 3Com 3c19250, the ADS Technologies USB-10BT, the ATen UC10T,
2216# the Netgear EA101, the D-Link DSB-650, the SMC 2102USB
2217# and 2104USB, and the Corega USB-T.
2218device		kue
2219#
2220# RealTek RTL8150 USB to fast ethernet. Supports the Melco LUA-KTX
2221# and the GREEN HOUSE GH-USB100B.
2222device		rue
2223#
2224# Davicom DM9601E USB to fast ethernet. Supports the Corega FEther USB-TXC.
2225device		udav
2226
2227
2228# debugging options for the USB subsystem
2229#
2230options 	USB_DEBUG
2231
2232# options for ukbd:
2233options 	UKBD_DFLT_KEYMAP	# specify the built-in keymap
2234makeoptions	UKBD_DFLT_KEYMAP=it.iso
2235
2236# options for uplcom:
2237options 	UPLCOM_INTR_INTERVAL=100	# interrupt pipe interval
2238						# in milliseconds
2239
2240# options for uvscom:
2241options 	UVSCOM_DEFAULT_OPKTSIZE=8	# default output packet size
2242options 	UVSCOM_INTR_INTERVAL=100	# interrupt pipe interval
2243						# in milliseconds
2244
2245#####################################################################
2246# FireWire support
2247
2248device		firewire	# FireWire bus code
2249device		sbp		# SCSI over Firewire (Requires scbus and da)
2250device		sbp_targ	# SBP-2 Target mode  (Requires scbus and targ)
2251device		fwe		# Ethernet over FireWire (non-standard!)
2252device		fwip		# IP over FireWire (rfc2734 and rfc3146)
2253
2254#####################################################################
2255# dcons support (Dumb Console Device)
2256
2257device		dcons			# dumb console driver
2258device		dcons_crom		# FireWire attachment
2259options 	DCONS_BUF_SIZE=16384	# buffer size
2260options 	DCONS_POLL_HZ=100	# polling rate
2261options 	DCONS_FORCE_CONSOLE=0	# force to be the primary console
2262options 	DCONS_FORCE_GDB=1	# force to be the gdb device
2263
2264#####################################################################
2265# crypto subsystem
2266#
2267# This is a port of the openbsd crypto framework.  Include this when
2268# configuring FAST_IPSEC and when you have a h/w crypto device to accelerate
2269# user applications that link to openssl.
2270#
2271# Drivers are ports from openbsd with some simple enhancements that have
2272# been fed back to openbsd.
2273
2274device		crypto		# core crypto support
2275device		cryptodev	# /dev/crypto for access to h/w
2276
2277device		rndtest		# FIPS 140-2 entropy tester
2278
2279device		hifn		# Hifn 7951, 7781, etc.
2280options 	HIFN_DEBUG	# enable debugging support: hw.hifn.debug
2281options 	HIFN_RNDTEST	# enable rndtest support
2282
2283device		ubsec		# Broadcom 5501, 5601, 58xx
2284options 	UBSEC_DEBUG	# enable debugging support: hw.ubsec.debug
2285options 	UBSEC_RNDTEST	# enable rndtest support
2286
2287#####################################################################
2288
2289
2290#
2291# Embedded system options:
2292#
2293# An embedded system might want to run something other than init.
2294options 	INIT_PATH=/sbin/init:/stand/sysinstall
2295
2296# Debug options
2297options 	BUS_DEBUG	# enable newbus debugging
2298options 	DEBUG_VFS_LOCKS	# enable vfs lock debugging
2299options 	SOCKBUF_DEBUG	# enable sockbuf last record/mb tail checking
2300
2301#####################################################################
2302# SYSV IPC KERNEL PARAMETERS
2303#
2304# Maximum number of entries in a semaphore map.
2305options 	SEMMAP=31
2306
2307# Maximum number of System V semaphores that can be used on the system at
2308# one time.
2309options 	SEMMNI=11
2310
2311# Total number of semaphores system wide
2312options 	SEMMNS=61
2313
2314# Total number of undo structures in system
2315options 	SEMMNU=31
2316
2317# Maximum number of System V semaphores that can be used by a single process
2318# at one time.
2319options 	SEMMSL=61
2320
2321# Maximum number of operations that can be outstanding on a single System V
2322# semaphore at one time.
2323options 	SEMOPM=101
2324
2325# Maximum number of undo operations that can be outstanding on a single
2326# System V semaphore at one time.
2327options 	SEMUME=11
2328
2329# Maximum number of shared memory pages system wide.
2330options 	SHMALL=1025
2331
2332# Maximum size, in bytes, of a single System V shared memory region.
2333options 	SHMMAX=(SHMMAXPGS*PAGE_SIZE+1)
2334options 	SHMMAXPGS=1025
2335
2336# Minimum size, in bytes, of a single System V shared memory region.
2337options 	SHMMIN=2
2338
2339# Maximum number of shared memory regions that can be used on the system
2340# at one time.
2341options 	SHMMNI=33
2342
2343# Maximum number of System V shared memory regions that can be attached to
2344# a single process at one time.
2345options 	SHMSEG=9
2346
2347# Set the amount of time (in seconds) the system will wait before
2348# rebooting automatically when a kernel panic occurs.  If set to (-1),
2349# the system will wait indefinitely until a key is pressed on the
2350# console.
2351options 	PANIC_REBOOT_WAIT_TIME=16
2352
2353# Attempt to bypass the buffer cache and put data directly into the
2354# userland buffer for read operation when O_DIRECT flag is set on the
2355# file.  Both offset and length of the read operation must be
2356# multiples of the physical media sector size.
2357#
2358#options 	DIRECTIO
2359
2360# Specify a lower limit for the number of swap I/O buffers.  They are
2361# (among other things) used when bypassing the buffer cache due to
2362# DIRECTIO kernel option enabled and O_DIRECT flag set on file.
2363#
2364#options 	NSWBUF_MIN=120
2365
2366#####################################################################
2367
2368# More undocumented options for linting.
2369# Note that documenting these are not considered an affront.
2370
2371options 	CAM_DEBUG_DELAY
2372
2373# VFS cluster debugging.
2374options 	CLUSTERDEBUG
2375
2376options 	DEBUG
2377
2378# Kernel filelock debugging.
2379options 	LOCKF_DEBUG
2380
2381# System V compatible message queues
2382# Please note that the values provided here are used to test kernel
2383# building.  The defaults in the sources provide almost the same numbers.
2384# MSGSSZ must be a power of 2 between 8 and 1024.
2385options 	MSGMNB=2049	# Max number of chars in queue
2386options 	MSGMNI=41	# Max number of message queue identifiers
2387options 	MSGSEG=2049	# Max number of message segments
2388options 	MSGSSZ=16	# Size of a message segment
2389options 	MSGTQL=41	# Max number of messages in system
2390
2391options 	NBUF=512	# Number of buffer headers
2392
2393options 	NMBCLUSTERS=1024	# Number of mbuf clusters
2394
2395options 	SCSI_NCR_DEBUG
2396options 	SCSI_NCR_MAX_SYNC=10000
2397options 	SCSI_NCR_MAX_WIDE=1
2398options 	SCSI_NCR_MYADDR=7
2399
2400options 	SC_DEBUG_LEVEL=5	# Syscons debug level
2401options 	SC_RENDER_DEBUG	# syscons rendering debugging
2402
2403options 	SHOW_BUSYBUFS	# List buffers that prevent root unmount
2404options 	SLIP_IFF_OPTS
2405options 	VFS_BIO_DEBUG	# VFS buffer I/O debugging
2406
2407options 	KSTACK_MAX_PAGES=32 # Maximum pages to give the kernel stack
2408
2409# Adaptec Array Controller driver options
2410options		AAC_DEBUG	# Debugging levels:
2411				# 0 - quiet, only emit warnings
2412				# 1 - noisy, emit major function
2413				#     points and things done
2414				# 2 - extremely noisy, emit trace
2415				#     items in loops, etc.
2416
2417# Yet more undocumented options for linting.
2418# BKTR_ALLOC_PAGES has no effect except to cause warnings, and
2419# BROOKTREE_ALLOC_PAGES hasn't actually been superseded by it, since the
2420# driver still mostly spells this option BROOKTREE_ALLOC_PAGES.
2421##options 	BKTR_ALLOC_PAGES=(217*4+1)
2422options 	BROOKTREE_ALLOC_PAGES=(217*4+1)
2423options 	MAXFILES=999
2424options 	NDEVFSINO=1025
2425options 	NDEVFSOVERFLOW=32769
2426
2427# Yet more undocumented options for linting.
2428options 	VGA_DEBUG
2429