xref: /freebsd/sys/conf/NOTES (revision 32100375a661c1e16588ddfa7b90ca8d26cb9786)
1# $FreeBSD$
2#
3# NOTES -- Lines that can be cut/pasted into kernel and hints configs.
4#
5# Lines that begin with 'device', 'options', 'machine', 'ident', 'maxusers',
6# 'makeoptions', 'hints', etc. go into the kernel configuration that you
7# run config(8) with.
8#
9# Lines that begin with 'hint.' are NOT for config(8), they go into your
10# hints file.  See /boot/device.hints and/or the 'hints' config(8) directive.
11#
12# Please use ``make LINT'' to create an old-style LINT file if you want to
13# do kernel test-builds.
14#
15# This file contains machine independent kernel configuration notes.  For
16# machine dependent notes, look in /sys/<arch>/conf/NOTES.
17#
18
19#
20# NOTES conventions and style guide:
21#
22# Large block comments should begin and end with a line containing only a
23# comment character.
24#
25# To describe a particular object, a block comment (if it exists) should
26# come first.  Next should come device, options, and hints lines in that
27# order.  All device and option lines must be described by a comment that
28# doesn't just expand the device or option name.  Use only a concise
29# comment on the same line if possible.  Very detailed descriptions of
30# devices and subsystems belong in man pages.
31#
32# A space followed by a tab separates 'options' from an option name.  Two
33# spaces followed by a tab separate 'device' from a device name.  Comments
34# after an option or device should use one space after the comment character.
35# To comment out a negative option that disables code and thus should not be
36# enabled for LINT builds, precede 'options' with "#!".
37#
38
39#
40# This is the ``identification'' of the kernel.  Usually this should
41# be the same as the name of your kernel.
42#
43ident		LINT
44
45#
46# The `maxusers' parameter controls the static sizing of a number of
47# internal system tables by a formula defined in subr_param.c.
48# Omitting this parameter or setting it to 0 will cause the system to
49# auto-size based on physical memory.
50#
51maxusers	10
52
53# To statically compile in device wiring instead of /boot/device.hints
54#hints		"LINT.hints"		# Default places to look for devices.
55
56# Use the following to compile in values accessible to the kernel
57# through getenv() (or kenv(1) in userland). The format of the file
58# is 'variable=value', see kenv(1)
59#
60#env		"LINT.env"
61
62#
63# The `makeoptions' parameter allows variables to be passed to the
64# generated Makefile in the build area.
65#
66# CONF_CFLAGS gives some extra compiler flags that are added to ${CFLAGS}
67# after most other flags.  Here we use it to inhibit use of non-optimal
68# gcc built-in functions (e.g., memcmp).
69#
70# DEBUG happens to be magic.
71# The following is equivalent to 'config -g KERNELNAME' and creates
72# 'kernel.debug' compiled with -g debugging as well as a normal
73# 'kernel'.  Use 'make install.debug' to install the debug kernel
74# but that isn't normally necessary as the debug symbols are not loaded
75# by the kernel and are not useful there anyway.
76#
77# KERNEL can be overridden so that you can change the default name of your
78# kernel.
79#
80# MODULES_OVERRIDE can be used to limit modules built to a specific list.
81#
82makeoptions	CONF_CFLAGS=-fno-builtin  #Don't allow use of memcmp, etc.
83#makeoptions	DEBUG=-g		#Build kernel with gdb(1) debug symbols
84#makeoptions	KERNEL=foo		#Build kernel "foo" and install "/foo"
85# Only build ext2fs module plus those parts of the sound system I need.
86#makeoptions	MODULES_OVERRIDE="ext2fs sound/sound sound/driver/maestro3"
87makeoptions	DESTDIR=/tmp
88
89#
90# FreeBSD processes are subject to certain limits to their consumption
91# of system resources.  See getrlimit(2) for more details.  Each
92# resource limit has two values, a "soft" limit and a "hard" limit.
93# The soft limits can be modified during normal system operation, but
94# the hard limits are set at boot time.  Their default values are
95# in sys/<arch>/include/vmparam.h.  There are two ways to change them:
96#
97# 1.  Set the values at kernel build time.  The options below are one
98#     way to allow that limit to grow to 1GB.  They can be increased
99#     further by changing the parameters:
100#
101# 2.  In /boot/loader.conf, set the tunables kern.maxswzone,
102#     kern.maxbcache, kern.maxtsiz, kern.dfldsiz, kern.maxdsiz,
103#     kern.dflssiz, kern.maxssiz and kern.sgrowsiz.
104#
105# The options in /boot/loader.conf override anything in the kernel
106# configuration file.  See the function init_param1 in
107# sys/kern/subr_param.c for more details.
108#
109
110options 	MAXDSIZ=(1024UL*1024*1024)
111options 	MAXSSIZ=(128UL*1024*1024)
112options 	DFLDSIZ=(1024UL*1024*1024)
113
114#
115# BLKDEV_IOSIZE sets the default block size used in user block
116# device I/O.  Note that this value will be overridden by the label
117# when specifying a block device from a label with a non-0
118# partition blocksize.  The default is PAGE_SIZE.
119#
120options 	BLKDEV_IOSIZE=8192
121
122#
123# MAXPHYS and DFLTPHYS
124#
125# These are the maximal and safe 'raw' I/O block device access sizes.
126# Reads and writes will be split into MAXPHYS chunks for known good
127# devices and DFLTPHYS for the rest. Some applications have better
128# performance with larger raw I/O access sizes. Note that certain VM
129# parameters are derived from these values and making them too large
130# can make an unbootable kernel.
131#
132# The defaults are 64K and 128K respectively.
133options 	DFLTPHYS=(64*1024)
134options 	MAXPHYS=(128*1024)
135
136
137# This allows you to actually store this configuration file into
138# the kernel binary itself. See config(8) for more details.
139#
140options 	INCLUDE_CONFIG_FILE     # Include this file in kernel
141
142#
143# Compile-time defaults for various boot parameters
144#
145options 	BOOTVERBOSE=1
146options 	BOOTHOWTO=RB_MULTIPLE
147
148#
149# Compile-time defaults for dmesg boot tagging
150#
151# Default boot tag; may use 'kern.boot_tag' loader tunable to override.  The
152# current boot's tag is also exposed via the 'kern.boot_tag' sysctl.
153options 	BOOT_TAG=\"\"
154# Maximum boot tag size the kernel's static buffer should accomodate.  Maximum
155# size for both BOOT_TAG and the assocated tunable.
156options 	BOOT_TAG_SZ=32
157
158options 	GEOM_BDE		# Disk encryption.
159options 	GEOM_CACHE		# Disk cache.
160options 	GEOM_CONCAT		# Disk concatenation.
161options 	GEOM_ELI		# Disk encryption.
162options 	GEOM_GATE		# Userland services.
163options 	GEOM_JOURNAL		# Journaling.
164options 	GEOM_LABEL		# Providers labelization.
165options 	GEOM_LINUX_LVM		# Linux LVM2 volumes
166options 	GEOM_MAP		# Map based partitioning
167options 	GEOM_MIRROR		# Disk mirroring.
168options 	GEOM_MULTIPATH		# Disk multipath
169options 	GEOM_NOP		# Test class.
170options 	GEOM_PART_APM		# Apple partitioning
171options 	GEOM_PART_BSD		# BSD disklabel
172options 	GEOM_PART_BSD64		# BSD disklabel64
173options 	GEOM_PART_EBR		# Extended Boot Records
174options 	GEOM_PART_EBR_COMPAT	# Backward compatible partition names
175options 	GEOM_PART_GPT		# GPT partitioning
176options 	GEOM_PART_LDM		# Logical Disk Manager
177options 	GEOM_PART_MBR		# MBR partitioning
178options 	GEOM_PART_VTOC8		# SMI VTOC8 disk label
179options 	GEOM_RAID		# Soft RAID functionality.
180options 	GEOM_RAID3		# RAID3 functionality.
181options 	GEOM_SHSEC		# Shared secret.
182options 	GEOM_STRIPE		# Disk striping.
183options 	GEOM_UZIP		# Read-only compressed disks
184options 	GEOM_VINUM		# Vinum logical volume manager
185options 	GEOM_VIRSTOR		# Virtual storage.
186options 	GEOM_ZERO		# Performance testing helper.
187
188#
189# The root device and filesystem type can be compiled in;
190# this provides a fallback option if the root device cannot
191# be correctly guessed by the bootstrap code, or an override if
192# the RB_DFLTROOT flag (-r) is specified when booting the kernel.
193#
194options 	ROOTDEVNAME=\"ufs:da0s2e\"
195
196
197#####################################################################
198# Scheduler options:
199#
200# Specifying one of SCHED_4BSD or SCHED_ULE is mandatory.  These options
201# select which scheduler is compiled in.
202#
203# SCHED_4BSD is the historical, proven, BSD scheduler.  It has a global run
204# queue and no CPU affinity which makes it suboptimal for SMP.  It has very
205# good interactivity and priority selection.
206#
207# SCHED_ULE provides significant performance advantages over 4BSD on many
208# workloads on SMP machines.  It supports cpu-affinity, per-cpu runqueues
209# and scheduler locks.  It also has a stronger notion of interactivity
210# which leads to better responsiveness even on uniprocessor machines.  This
211# is the default scheduler.
212#
213# SCHED_STATS is a debugging option which keeps some stats in the sysctl
214# tree at 'kern.sched.stats' and is useful for debugging scheduling decisions.
215#
216options 	SCHED_4BSD
217options 	SCHED_STATS
218#options 	SCHED_ULE
219
220#####################################################################
221# SMP OPTIONS:
222#
223# SMP enables building of a Symmetric MultiProcessor Kernel.
224
225# Mandatory:
226options 	SMP			# Symmetric MultiProcessor Kernel
227
228# EARLY_AP_STARTUP releases the Application Processors earlier in the
229# kernel startup process (before devices are probed) rather than at the
230# end.  This is a temporary option for use during the transition from
231# late to early AP startup.
232options		EARLY_AP_STARTUP
233
234# MAXCPU defines the maximum number of CPUs that can boot in the system.
235# A default value should be already present, for every architecture.
236options 	MAXCPU=32
237
238# NUMA enables use of Non-Uniform Memory Access policies in various kernel
239# subsystems.
240options 	NUMA
241
242# MAXMEMDOM defines the maximum number of memory domains that can boot in the
243# system.  A default value should already be defined by every architecture.
244options 	MAXMEMDOM=2
245
246# ADAPTIVE_MUTEXES changes the behavior of blocking mutexes to spin
247# if the thread that currently owns the mutex is executing on another
248# CPU.  This behavior is enabled by default, so this option can be used
249# to disable it.
250options 	NO_ADAPTIVE_MUTEXES
251
252# ADAPTIVE_RWLOCKS changes the behavior of reader/writer locks to spin
253# if the thread that currently owns the rwlock is executing on another
254# CPU.  This behavior is enabled by default, so this option can be used
255# to disable it.
256options 	NO_ADAPTIVE_RWLOCKS
257
258# ADAPTIVE_SX changes the behavior of sx locks to spin if the thread that
259# currently owns the sx lock is executing on another CPU.
260# This behavior is enabled by default, so this option can be used to
261# disable it.
262options 	NO_ADAPTIVE_SX
263
264# MUTEX_NOINLINE forces mutex operations to call functions to perform each
265# operation rather than inlining the simple cases.  This can be used to
266# shrink the size of the kernel text segment.  Note that this behavior is
267# already implied by the INVARIANT_SUPPORT, INVARIANTS, KTR, LOCK_PROFILING,
268# and WITNESS options.
269options 	MUTEX_NOINLINE
270
271# RWLOCK_NOINLINE forces rwlock operations to call functions to perform each
272# operation rather than inlining the simple cases.  This can be used to
273# shrink the size of the kernel text segment.  Note that this behavior is
274# already implied by the INVARIANT_SUPPORT, INVARIANTS, KTR, LOCK_PROFILING,
275# and WITNESS options.
276options 	RWLOCK_NOINLINE
277
278# SX_NOINLINE forces sx lock operations to call functions to perform each
279# operation rather than inlining the simple cases.  This can be used to
280# shrink the size of the kernel text segment.  Note that this behavior is
281# already implied by the INVARIANT_SUPPORT, INVARIANTS, KTR, LOCK_PROFILING,
282# and WITNESS options.
283options 	SX_NOINLINE
284
285# SMP Debugging Options:
286#
287# CALLOUT_PROFILING enables rudimentary profiling of the callwheel data
288#	  structure used as backend in callout(9).
289# PREEMPTION allows the threads that are in the kernel to be preempted by
290#	  higher priority [interrupt] threads.  It helps with interactivity
291#	  and allows interrupt threads to run sooner rather than waiting.
292#	  WARNING! Only tested on amd64 and i386.
293# FULL_PREEMPTION instructs the kernel to preempt non-realtime kernel
294#	  threads.  Its sole use is to expose race conditions and other
295#	  bugs during development.  Enabling this option will reduce
296#	  performance and increase the frequency of kernel panics by
297#	  design.  If you aren't sure that you need it then you don't.
298#	  Relies on the PREEMPTION option.  DON'T TURN THIS ON.
299# SLEEPQUEUE_PROFILING enables rudimentary profiling of the hash table
300#	  used to hold active sleep queues as well as sleep wait message
301#	  frequency.
302# TURNSTILE_PROFILING enables rudimentary profiling of the hash table
303#	  used to hold active lock queues.
304# UMTX_PROFILING enables rudimentary profiling of the hash table used
305#	  to hold active lock queues.
306# WITNESS enables the witness code which detects deadlocks and cycles
307#         during locking operations.
308# WITNESS_KDB causes the witness code to drop into the kernel debugger if
309#	  a lock hierarchy violation occurs or if locks are held when going to
310#	  sleep.
311# WITNESS_SKIPSPIN disables the witness checks on spin mutexes.
312options 	PREEMPTION
313options 	FULL_PREEMPTION
314options 	WITNESS
315options 	WITNESS_KDB
316options 	WITNESS_SKIPSPIN
317
318# LOCK_PROFILING - Profiling locks.  See LOCK_PROFILING(9) for details.
319options 	LOCK_PROFILING
320# Set the number of buffers and the hash size.  The hash size MUST be larger
321# than the number of buffers.  Hash size should be prime.
322options 	MPROF_BUFFERS="1536"
323options 	MPROF_HASH_SIZE="1543"
324
325# Profiling for the callout(9) backend.
326options 	CALLOUT_PROFILING
327
328# Profiling for internal hash tables.
329options 	SLEEPQUEUE_PROFILING
330options 	TURNSTILE_PROFILING
331options 	UMTX_PROFILING
332
333
334#####################################################################
335# COMPATIBILITY OPTIONS
336
337# Old tty interface.
338options 	COMPAT_43TTY
339
340# Note that as a general rule, COMPAT_FREEBSD<n> depends on
341# COMPAT_FREEBSD<n+1>, COMPAT_FREEBSD<n+2>, etc.
342
343# Enable FreeBSD4 compatibility syscalls
344options 	COMPAT_FREEBSD4
345
346# Enable FreeBSD5 compatibility syscalls
347options 	COMPAT_FREEBSD5
348
349# Enable FreeBSD6 compatibility syscalls
350options 	COMPAT_FREEBSD6
351
352# Enable FreeBSD7 compatibility syscalls
353options 	COMPAT_FREEBSD7
354
355# Enable FreeBSD9 compatibility syscalls
356options 	COMPAT_FREEBSD9
357
358# Enable FreeBSD10 compatibility syscalls
359options 	COMPAT_FREEBSD10
360
361# Enable FreeBSD11 compatibility syscalls
362options 	COMPAT_FREEBSD11
363
364# Enable FreeBSD12 compatibility syscalls
365options 	COMPAT_FREEBSD12
366
367# Enable Linux Kernel Programming Interface
368options 	COMPAT_LINUXKPI
369
370#
371# These three options provide support for System V Interface
372# Definition-style interprocess communication, in the form of shared
373# memory, semaphores, and message queues, respectively.
374#
375options 	SYSVSHM
376options 	SYSVSEM
377options 	SYSVMSG
378
379
380#####################################################################
381# DEBUGGING OPTIONS
382
383#
384# Compile with kernel debugger related code.
385#
386options 	KDB
387
388#
389# Print a stack trace of the current thread on the console for a panic.
390#
391options 	KDB_TRACE
392
393#
394# Don't enter the debugger for a panic. Intended for unattended operation
395# where you may want to enter the debugger from the console, but still want
396# the machine to recover from a panic.
397#
398options 	KDB_UNATTENDED
399
400#
401# Enable the ddb debugger backend.
402#
403options 	DDB
404
405#
406# Print the numerical value of symbols in addition to the symbolic
407# representation.
408#
409options 	DDB_NUMSYM
410
411#
412# Enable the remote gdb debugger backend.
413#
414options 	GDB
415
416#
417# Trashes list pointers when they become invalid (i.e., the element is
418# removed from a list).  Relatively inexpensive to enable.
419#
420options 	QUEUE_MACRO_DEBUG_TRASH
421
422#
423# Stores information about the last caller to modify the list object
424# in the list object.  Requires additional memory overhead.
425#
426#options 	QUEUE_MACRO_DEBUG_TRACE
427
428#
429# SYSCTL_DEBUG enables a 'sysctl' debug tree that can be used to dump the
430# contents of the registered sysctl nodes on the console.  It is disabled by
431# default because it generates excessively verbose console output that can
432# interfere with serial console operation.
433#
434options 	SYSCTL_DEBUG
435
436#
437# Enable textdump by default, this disables kernel core dumps.
438#
439options		TEXTDUMP_PREFERRED
440
441#
442# Enable extra debug messages while performing textdumps.
443#
444options		TEXTDUMP_VERBOSE
445
446#
447# NO_SYSCTL_DESCR omits the sysctl node descriptions to save space in the
448# resulting kernel.
449options		NO_SYSCTL_DESCR
450
451#
452# MALLOC_DEBUG_MAXZONES enables multiple uma zones for malloc(9)
453# allocations that are smaller than a page.  The purpose is to isolate
454# different malloc types into hash classes, so that any buffer
455# overruns or use-after-free will usually only affect memory from
456# malloc types in that hash class.  This is purely a debugging tool;
457# by varying the hash function and tracking which hash class was
458# corrupted, the intersection of the hash classes from each instance
459# will point to a single malloc type that is being misused.  At this
460# point inspection or memguard(9) can be used to catch the offending
461# code.
462#
463options 	MALLOC_DEBUG_MAXZONES=8
464
465#
466# DEBUG_MEMGUARD builds and enables memguard(9), a replacement allocator
467# for the kernel used to detect modify-after-free scenarios.  See the
468# memguard(9) man page for more information on usage.
469#
470options 	DEBUG_MEMGUARD
471
472#
473# DEBUG_REDZONE enables buffer underflows and buffer overflows detection for
474# malloc(9).
475#
476options 	DEBUG_REDZONE
477
478#
479# EARLY_PRINTF enables support for calling a special printf (eprintf)
480# very early in the kernel (before cn_init() has been called).  This
481# should only be used for debugging purposes early in boot.  Normally,
482# it is not defined.  It is commented out here because this feature
483# isn't generally available. And the required eputc() isn't defined.
484#
485#options	EARLY_PRINTF
486
487#
488# KTRACE enables the system-call tracing facility ktrace(2).  To be more
489# SMP-friendly, KTRACE uses a worker thread to process most trace events
490# asynchronously to the thread generating the event.  This requires a
491# pre-allocated store of objects representing trace events.  The
492# KTRACE_REQUEST_POOL option specifies the initial size of this store.
493# The size of the pool can be adjusted both at boottime and runtime via
494# the kern.ktrace_request_pool tunable and sysctl.
495#
496options 	KTRACE			#kernel tracing
497options 	KTRACE_REQUEST_POOL=101
498
499#
500# KTR is a kernel tracing facility imported from BSD/OS.  It is
501# enabled with the KTR option.  KTR_ENTRIES defines the number of
502# entries in the circular trace buffer; it may be an arbitrary number.
503# KTR_BOOT_ENTRIES defines the number of entries during the early boot,
504# before malloc(9) is functional.
505# KTR_COMPILE defines the mask of events to compile into the kernel as
506# defined by the KTR_* constants in <sys/ktr.h>.  KTR_MASK defines the
507# initial value of the ktr_mask variable which determines at runtime
508# what events to trace.  KTR_CPUMASK determines which CPU's log
509# events, with bit X corresponding to CPU X.  The layout of the string
510# passed as KTR_CPUMASK must match a series of bitmasks each of them
511# separated by the "," character (ie:
512# KTR_CPUMASK=0xAF,0xFFFFFFFFFFFFFFFF).  KTR_VERBOSE enables
513# dumping of KTR events to the console by default.  This functionality
514# can be toggled via the debug.ktr_verbose sysctl and defaults to off
515# if KTR_VERBOSE is not defined.  See ktr(4) and ktrdump(8) for details.
516#
517options 	KTR
518options 	KTR_BOOT_ENTRIES=1024
519options 	KTR_ENTRIES=(128*1024)
520options 	KTR_COMPILE=(KTR_ALL)
521options 	KTR_MASK=KTR_INTR
522options 	KTR_CPUMASK=0x3
523options 	KTR_VERBOSE
524
525#
526# ALQ(9) is a facility for the asynchronous queuing of records from the kernel
527# to a vnode, and is employed by services such as ktr(4) to produce trace
528# files based on a kernel event stream.  Records are written asynchronously
529# in a worker thread.
530#
531options 	ALQ
532options 	KTR_ALQ
533
534#
535# The INVARIANTS option is used in a number of source files to enable
536# extra sanity checking of internal structures.  This support is not
537# enabled by default because of the extra time it would take to check
538# for these conditions, which can only occur as a result of
539# programming errors.
540#
541options 	INVARIANTS
542
543#
544# The INVARIANT_SUPPORT option makes us compile in support for
545# verifying some of the internal structures.  It is a prerequisite for
546# 'INVARIANTS', as enabling 'INVARIANTS' will make these functions be
547# called.  The intent is that you can set 'INVARIANTS' for single
548# source files (by changing the source file or specifying it on the
549# command line) if you have 'INVARIANT_SUPPORT' enabled.  Also, if you
550# wish to build a kernel module with 'INVARIANTS', then adding
551# 'INVARIANT_SUPPORT' to your kernel will provide all the necessary
552# infrastructure without the added overhead.
553#
554options 	INVARIANT_SUPPORT
555
556#
557# The KASSERT_PANIC_OPTIONAL option allows kasserts to fire without
558# necessarily inducing a panic.  Panic is the default behavior, but
559# runtime options can configure it either entirely off, or off with a
560# limit.
561#
562options 	KASSERT_PANIC_OPTIONAL
563
564#
565# The DIAGNOSTIC option is used to enable extra debugging information
566# and invariants checking.  The added checks are too expensive or noisy
567# for an INVARIANTS kernel and thus are disabled by default.  It is
568# expected that a kernel configured with DIAGNOSTIC will also have the
569# INVARIANTS option enabled.
570#
571options 	DIAGNOSTIC
572
573#
574# REGRESSION causes optional kernel interfaces necessary only for regression
575# testing to be enabled.  These interfaces may constitute security risks
576# when enabled, as they permit processes to easily modify aspects of the
577# run-time environment to reproduce unlikely or unusual (possibly normally
578# impossible) scenarios.
579#
580options 	REGRESSION
581
582#
583# This option lets some drivers co-exist that can't co-exist in a running
584# system.  This is used to be able to compile all kernel code in one go for
585# quality assurance purposes (like this file, which the option takes it name
586# from.)
587#
588options 	COMPILING_LINT
589
590#
591# STACK enables the stack(9) facility, allowing the capture of kernel stack
592# for the purpose of procinfo(1), etc.  stack(9) will also be compiled in
593# automatically if DDB(4) is compiled into the kernel.
594#
595options 	STACK
596
597#
598# The NUM_CORE_FILES option specifies the limit for the number of core
599# files generated by a particular process, when the core file format
600# specifier includes the %I pattern. Since we only have 1 character for
601# the core count in the format string, meaning the range will be 0-9, the
602# maximum value allowed for this option is 10.
603# This core file limit can be adjusted at runtime via the debug.ncores
604# sysctl.
605#
606options 	NUM_CORE_FILES=5
607
608#
609# The TSLOG option enables timestamped logging of events, especially
610# function entries/exits, in order to track the time spent by the kernel.
611# In particular, this is useful when investigating the early boot process,
612# before it is possible to use more sophisticated tools like DTrace.
613# The TSLOGSIZE option controls the size of the (preallocated, fixed
614# length) buffer used for storing these events (default: 262144 records).
615#
616# For security reasons the TSLOG option should not be enabled on systems
617# used in production.
618#
619options 	TSLOG
620options 	TSLOGSIZE=262144
621
622
623#####################################################################
624# PERFORMANCE MONITORING OPTIONS
625
626#
627# The hwpmc driver that allows the use of in-CPU performance monitoring
628# counters for performance monitoring.  The base kernel needs to be configured
629# with the 'options' line, while the hwpmc device can be either compiled
630# in or loaded as a loadable kernel module.
631#
632# Additional configuration options may be required on specific architectures,
633# please see hwpmc(4).
634
635device		hwpmc			# Driver (also a loadable module)
636options 	HWPMC_DEBUG
637options 	HWPMC_HOOKS		# Other necessary kernel hooks
638
639
640#####################################################################
641# NETWORKING OPTIONS
642
643#
644# Protocol families
645#
646options 	INET			#Internet communications protocols
647options 	INET6			#IPv6 communications protocols
648
649options		RATELIMIT		# TX rate limiting support
650
651options 	ROUTETABLES=2		# allocated fibs up to 65536. default is 1.
652					# but that would be a bad idea as they are large.
653
654options 	TCP_OFFLOAD		# TCP offload support.
655options		TCP_RFC7413		# TCP Fast Open
656
657options		TCPHPTS
658
659# In order to enable IPSEC you MUST also add device crypto to
660# your kernel configuration
661options 	IPSEC			#IP security (requires device crypto)
662
663# Option IPSEC_SUPPORT does not enable IPsec, but makes it possible to
664# load it as a kernel module. You still MUST add device crypto to your kernel
665# configuration.
666options		IPSEC_SUPPORT
667#options 	IPSEC_DEBUG		#debug for IP security
668
669
670# TLS framing and encryption of data transmitted over TCP sockets.
671options		KERN_TLS		# TLS transmit offload
672
673#
674# SMB/CIFS requester
675# NETSMB enables support for SMB protocol, it requires LIBMCHAIN and LIBICONV
676# options.
677options 	NETSMB			#SMB/CIFS requester
678
679# mchain library. It can be either loaded as KLD or compiled into kernel
680options 	LIBMCHAIN
681
682# libalias library, performing NAT
683options 	LIBALIAS
684
685#
686# SCTP is a NEW transport protocol defined by
687# RFC2960 updated by RFC3309 and RFC3758.. and
688# soon to have a new base RFC and many many more
689# extensions. This release supports all the extensions
690# including many drafts (most about to become RFC's).
691# It is the reference implementation of SCTP
692# and is quite well tested.
693#
694# Note YOU MUST have both INET and INET6 defined.
695# You don't have to enable V6, but SCTP is
696# dual stacked and so far we have not torn apart
697# the V6 and V4.. since an association can span
698# both a V6 and V4 address at the SAME time :-)
699#
700# The SCTP_SUPPORT option does not enable SCTP, but provides the necessary
701# support for loading SCTP as a loadable kernel module.
702#
703options 	SCTP
704options 	SCTP_SUPPORT
705
706# There are bunches of options:
707# this one turns on all sorts of
708# nastily printing that you can
709# do. It's all controlled by a
710# bit mask (settable by socket opt and
711# by sysctl). Including will not cause
712# logging until you set the bits.. but it
713# can be quite verbose.. so without this
714# option we don't do any of the tests for
715# bits and prints.. which makes the code run
716# faster.. if you are not debugging don't use.
717options 	SCTP_DEBUG
718
719#
720# All that options after that turn on specific types of
721# logging. You can monitor CWND growth, flight size
722# and all sorts of things. Go look at the code and
723# see. I have used this to produce interesting
724# charts and graphs as well :->
725#
726# I have not yet committed the tools to get and print
727# the logs, I will do that eventually .. before then
728# if you want them send me an email rrs@freebsd.org
729# You basically must have ktr(4) enabled for these
730# and you then set the sysctl to turn on/off various
731# logging bits. Use ktrdump(8) to pull the log and run
732# it through a display program.. and graphs and other
733# things too.
734#
735options 	SCTP_LOCK_LOGGING
736options 	SCTP_MBUF_LOGGING
737options 	SCTP_MBCNT_LOGGING
738options 	SCTP_PACKET_LOGGING
739options 	SCTP_LTRACE_CHUNKS
740options 	SCTP_LTRACE_ERRORS
741
742# altq(9). Enable the base part of the hooks with the ALTQ option.
743# Individual disciplines must be built into the base system and can not be
744# loaded as modules at this point. ALTQ requires a stable TSC so if yours is
745# broken or changes with CPU throttling then you must also have the ALTQ_NOPCC
746# option.
747options 	ALTQ
748options 	ALTQ_CBQ	# Class Based Queueing
749options 	ALTQ_RED	# Random Early Detection
750options 	ALTQ_RIO	# RED In/Out
751options 	ALTQ_CODEL	# CoDel Active Queueing
752options 	ALTQ_HFSC	# Hierarchical Packet Scheduler
753options 	ALTQ_FAIRQ	# Fair Packet Scheduler
754options 	ALTQ_CDNR	# Traffic conditioner
755options 	ALTQ_PRIQ	# Priority Queueing
756options 	ALTQ_NOPCC	# Required if the TSC is unusable
757options 	ALTQ_DEBUG
758
759# netgraph(4). Enable the base netgraph code with the NETGRAPH option.
760# Individual node types can be enabled with the corresponding option
761# listed below; however, this is not strictly necessary as netgraph
762# will automatically load the corresponding KLD module if the node type
763# is not already compiled into the kernel. Each type below has a
764# corresponding man page, e.g., ng_async(8).
765options 	NETGRAPH		# netgraph(4) system
766options 	NETGRAPH_DEBUG		# enable extra debugging, this
767					# affects netgraph(4) and nodes
768# Node types
769options 	NETGRAPH_ASYNC
770options 	NETGRAPH_ATMLLC
771options 	NETGRAPH_ATM_ATMPIF
772options 	NETGRAPH_BLUETOOTH		# ng_bluetooth(4)
773options 	NETGRAPH_BLUETOOTH_BT3C		# ng_bt3c(4)
774options 	NETGRAPH_BLUETOOTH_HCI		# ng_hci(4)
775options 	NETGRAPH_BLUETOOTH_L2CAP	# ng_l2cap(4)
776options 	NETGRAPH_BLUETOOTH_SOCKET	# ng_btsocket(4)
777options 	NETGRAPH_BLUETOOTH_UBT		# ng_ubt(4)
778options 	NETGRAPH_BLUETOOTH_UBTBCMFW	# ubtbcmfw(4)
779options 	NETGRAPH_BPF
780options 	NETGRAPH_BRIDGE
781options 	NETGRAPH_CAR
782options 	NETGRAPH_CHECKSUM
783options 	NETGRAPH_CISCO
784options 	NETGRAPH_DEFLATE
785options 	NETGRAPH_DEVICE
786options 	NETGRAPH_ECHO
787options 	NETGRAPH_EIFACE
788options 	NETGRAPH_ETHER
789options 	NETGRAPH_FRAME_RELAY
790options 	NETGRAPH_GIF
791options 	NETGRAPH_GIF_DEMUX
792options 	NETGRAPH_HOLE
793options 	NETGRAPH_IFACE
794options 	NETGRAPH_IP_INPUT
795options 	NETGRAPH_IPFW
796options 	NETGRAPH_KSOCKET
797options 	NETGRAPH_L2TP
798options 	NETGRAPH_LMI
799options 	NETGRAPH_MPPC_COMPRESSION
800options 	NETGRAPH_MPPC_ENCRYPTION
801options 	NETGRAPH_NETFLOW
802options 	NETGRAPH_NAT
803options 	NETGRAPH_ONE2MANY
804options 	NETGRAPH_PATCH
805options 	NETGRAPH_PIPE
806options 	NETGRAPH_PPP
807options 	NETGRAPH_PPPOE
808options 	NETGRAPH_PPTPGRE
809options 	NETGRAPH_PRED1
810options 	NETGRAPH_RFC1490
811options 	NETGRAPH_SOCKET
812options 	NETGRAPH_SPLIT
813options 	NETGRAPH_SPPP
814options 	NETGRAPH_TAG
815options 	NETGRAPH_TCPMSS
816options 	NETGRAPH_TEE
817options 	NETGRAPH_UI
818options 	NETGRAPH_VJC
819options 	NETGRAPH_VLAN
820
821# NgATM - Netgraph ATM
822options 	NGATM_ATM
823options 	NGATM_ATMBASE
824options 	NGATM_SSCOP
825options 	NGATM_SSCFU
826options 	NGATM_UNI
827options 	NGATM_CCATM
828
829device		mn	# Munich32x/Falc54 Nx64kbit/sec cards.
830
831# Network stack virtualization.
832options	VIMAGE
833options	VNET_DEBUG	# debug for VIMAGE
834
835#
836# Network interfaces:
837#  The `loop' device is MANDATORY when networking is enabled.
838device		loop
839
840#  The `ether' device provides generic code to handle
841#  Ethernets; it is MANDATORY when an Ethernet device driver is
842#  configured.
843device		ether
844
845#  The `vlan' device implements the VLAN tagging of Ethernet frames
846#  according to IEEE 802.1Q.
847device		vlan
848
849# The `vxlan' device implements the VXLAN encapsulation of Ethernet
850# frames in UDP packets according to RFC7348.
851device		vxlan
852
853#  The `wlan' device provides generic code to support 802.11
854#  drivers, including host AP mode; it is MANDATORY for the wi,
855#  and ath drivers and will eventually be required by all 802.11 drivers.
856device		wlan
857options 	IEEE80211_DEBUG		#enable debugging msgs
858options 	IEEE80211_SUPPORT_MESH	#enable 802.11s D3.0 support
859options 	IEEE80211_SUPPORT_TDMA	#enable TDMA support
860
861#  The `wlan_wep', `wlan_tkip', and `wlan_ccmp' devices provide
862#  support for WEP, TKIP, and AES-CCMP crypto protocols optionally
863#  used with 802.11 devices that depend on the `wlan' module.
864device		wlan_wep
865device		wlan_ccmp
866device		wlan_tkip
867
868#  The `wlan_xauth' device provides support for external (i.e. user-mode)
869#  authenticators for use with 802.11 drivers that use the `wlan'
870#  module and support 802.1x and/or WPA security protocols.
871device		wlan_xauth
872
873#  The `wlan_acl' device provides a MAC-based access control mechanism
874#  for use with 802.11 drivers operating in ap mode and using the
875#  `wlan' module.
876#  The 'wlan_amrr' device provides AMRR transmit rate control algorithm
877device		wlan_acl
878device		wlan_amrr
879
880#  The `sppp' device serves a similar role for certain types
881#  of synchronous PPP links (like `cx', `ar').
882device		sppp
883
884#  The `bpf' device enables the Berkeley Packet Filter.  Be
885#  aware of the legal and administrative consequences of enabling this
886#  option.  DHCP requires bpf.
887device		bpf
888
889#  The `netmap' device implements memory-mapped access to network
890#  devices from userspace, enabling wire-speed packet capture and
891#  generation even at 10Gbit/s. Requires support in the device
892#  driver. Supported drivers are ixgbe, e1000, re.
893device		netmap
894
895#  The `disc' device implements a minimal network interface,
896#  which throws away all packets sent and never receives any.  It is
897#  included for testing and benchmarking purposes.
898device		disc
899
900# The `epair' device implements a virtual back-to-back connected Ethernet
901# like interface pair.
902device		epair
903
904#  The `edsc' device implements a minimal Ethernet interface,
905#  which discards all packets sent and receives none.
906device		edsc
907
908#  The `tuntap' device implements (user-)ppp, nos-tun(8) and a pty-like virtual
909#  Ethernet interface
910device		tuntap
911
912#  The `gif' device implements IPv6 over IP4 tunneling,
913#  IPv4 over IPv6 tunneling, IPv4 over IPv4 tunneling and
914#  IPv6 over IPv6 tunneling.
915#  The `gre' device implements GRE (Generic Routing Encapsulation) tunneling,
916#  as specified in the RFC 2784 and RFC 2890.
917#  The `me' device implements Minimal Encapsulation within IPv4 as
918#  specified in the RFC 2004.
919#  The XBONEHACK option allows the same pair of addresses to be configured on
920#  multiple gif interfaces.
921device		gif
922device		gre
923device		me
924options 	XBONEHACK
925
926#  The `stf' device implements 6to4 encapsulation.
927device		stf
928
929# The pf packet filter consists of three devices:
930#  The `pf' device provides /dev/pf and the firewall code itself.
931#  The `pflog' device provides the pflog0 interface which logs packets.
932#  The `pfsync' device provides the pfsync0 interface used for
933#   synchronization of firewall state tables (over the net).
934device		pf
935device		pflog
936device		pfsync
937
938# Bridge interface.
939device		if_bridge
940
941# Common Address Redundancy Protocol. See carp(4) for more details.
942device		carp
943
944# IPsec interface.
945device		enc
946
947# Link aggregation interface.
948device		lagg
949
950#
951# Internet family options:
952#
953# MROUTING enables the kernel multicast packet forwarder, which works
954# with mrouted and XORP.
955#
956# IPFIREWALL enables support for IP firewall construction, in
957# conjunction with the `ipfw' program.  IPFIREWALL_VERBOSE sends
958# logged packets to the system logger.  IPFIREWALL_VERBOSE_LIMIT
959# limits the number of times a matching entry can be logged.
960#
961# WARNING:  IPFIREWALL defaults to a policy of "deny ip from any to any"
962# and if you do not add other rules during startup to allow access,
963# YOU WILL LOCK YOURSELF OUT.  It is suggested that you set firewall_type=open
964# in /etc/rc.conf when first enabling this feature, then refining the
965# firewall rules in /etc/rc.firewall after you've tested that the new kernel
966# feature works properly.
967#
968# IPFIREWALL_DEFAULT_TO_ACCEPT causes the default rule (at boot) to
969# allow everything.  Use with care, if a cracker can crash your
970# firewall machine, they can get to your protected machines.  However,
971# if you are using it as an as-needed filter for specific problems as
972# they arise, then this may be for you.  Changing the default to 'allow'
973# means that you won't get stuck if the kernel and /sbin/ipfw binary get
974# out of sync.
975#
976# IPDIVERT enables the divert IP sockets, used by ``ipfw divert''.  It
977# depends on IPFIREWALL if compiled into the kernel.
978#
979# IPFIREWALL_NAT adds support for in kernel nat in ipfw, and it requires
980# LIBALIAS.
981#
982# IPFIREWALL_NAT64 adds support for in kernel NAT64 in ipfw.
983#
984# IPFIREWALL_NPTV6 adds support for in kernel NPTv6 in ipfw.
985#
986# IPFIREWALL_PMOD adds support for protocols modification module. Currently
987# it supports only TCP MSS modification.
988#
989# IPSTEALTH enables code to support stealth forwarding (i.e., forwarding
990# packets without touching the TTL).  This can be useful to hide firewalls
991# from traceroute and similar tools.
992#
993# PF_DEFAULT_TO_DROP causes the default pf(4) rule to deny everything.
994#
995# TCPDEBUG enables code which keeps traces of the TCP state machine
996# for sockets with the SO_DEBUG option set, which can then be examined
997# using the trpt(8) utility.
998#
999# TCPPCAP enables code which keeps the last n packets sent and received
1000# on a TCP socket.
1001#
1002# TCP_BLACKBOX enables enhanced TCP event logging.
1003#
1004# TCP_HHOOK enables the hhook(9) framework hooks for the TCP stack.
1005#
1006# RADIX_MPATH provides support for equal-cost multi-path routing.
1007#
1008options 	MROUTING		# Multicast routing
1009options 	IPFIREWALL		#firewall
1010options 	IPFIREWALL_VERBOSE	#enable logging to syslogd(8)
1011options 	IPFIREWALL_VERBOSE_LIMIT=100	#limit verbosity
1012options 	IPFIREWALL_DEFAULT_TO_ACCEPT	#allow everything by default
1013options 	IPFIREWALL_NAT		#ipfw kernel nat support
1014options 	IPFIREWALL_NAT64	#ipfw kernel NAT64 support
1015options 	IPFIREWALL_NPTV6	#ipfw kernel IPv6 NPT support
1016options 	IPDIVERT		#divert sockets
1017options 	IPFILTER		#ipfilter support
1018options 	IPFILTER_LOG		#ipfilter logging
1019options 	IPFILTER_LOOKUP		#ipfilter pools
1020options 	IPFILTER_DEFAULT_BLOCK	#block all packets by default
1021options 	IPSTEALTH		#support for stealth forwarding
1022options 	PF_DEFAULT_TO_DROP	#drop everything by default
1023options 	TCPDEBUG
1024options 	TCPPCAP
1025options 	TCP_BLACKBOX
1026options 	TCP_HHOOK
1027options 	RADIX_MPATH
1028
1029# The MBUF_STRESS_TEST option enables options which create
1030# various random failures / extreme cases related to mbuf
1031# functions.  See mbuf(9) for a list of available test cases.
1032# MBUF_PROFILING enables code to profile the mbuf chains
1033# exiting the system (via participating interfaces) and
1034# return a logarithmic histogram of monitored parameters
1035# (e.g. packet size, wasted space, number of mbufs in chain).
1036options 	MBUF_STRESS_TEST
1037options 	MBUF_PROFILING
1038
1039# Statically link in accept filters
1040options 	ACCEPT_FILTER_DATA
1041options 	ACCEPT_FILTER_DNS
1042options 	ACCEPT_FILTER_HTTP
1043
1044# TCP_SIGNATURE adds support for RFC 2385 (TCP-MD5) digests. These are
1045# carried in TCP option 19. This option is commonly used to protect
1046# TCP sessions (e.g. BGP) where IPSEC is not available nor desirable.
1047# This is enabled on a per-socket basis using the TCP_MD5SIG socket option.
1048# This requires the use of 'device crypto' and either 'options IPSEC' or
1049# 'options IPSEC_SUPPORT'.
1050options 	TCP_SIGNATURE		#include support for RFC 2385
1051
1052# DUMMYNET enables the "dummynet" bandwidth limiter.  You need IPFIREWALL
1053# as well.  See dummynet(4) and ipfw(8) for more info.  When you run
1054# DUMMYNET it is advisable to also have at least "options HZ=1000" to achieve
1055# a smooth scheduling of the traffic.
1056options 	DUMMYNET
1057
1058# The DEBUGNET option enables a basic debug/panic-time networking API.  It
1059# is used by NETDUMP and NETGDB.
1060options 	DEBUGNET
1061
1062# The NETDUMP option enables netdump(4) client support in the kernel.
1063# This allows a panicking kernel to transmit a kernel dump to a remote host.
1064options 	NETDUMP
1065
1066# The NETGDB option enables netgdb(4) support in the kernel.  This allows a
1067# panicking kernel to be debugged as a GDB remote over the network.
1068options 	NETGDB
1069
1070#####################################################################
1071# FILESYSTEM OPTIONS
1072
1073#
1074# Only the root filesystem needs to be statically compiled or preloaded
1075# as module; everything else will be automatically loaded at mount
1076# time.  Some people still prefer to statically compile other
1077# filesystems as well.
1078#
1079# NB: The UNION filesystem was known to be buggy in the past.  It is now
1080# being actively maintained, although there are still some issues being
1081# resolved.
1082#
1083
1084# One of these is mandatory:
1085options 	FFS			#Fast filesystem
1086options 	NFSCL			#Network File System client
1087
1088# The rest are optional:
1089options 	AUTOFS			#Automounter filesystem
1090options 	CD9660			#ISO 9660 filesystem
1091options 	FDESCFS			#File descriptor filesystem
1092options 	FUSEFS			#FUSEFS support module
1093options 	MSDOSFS			#MS DOS File System (FAT, FAT32)
1094options 	NFSLOCKD		#Network Lock Manager
1095options 	NFSD			#Network Filesystem Server
1096options 	KGSSAPI			#Kernel GSSAPI implementation
1097
1098options 	NULLFS			#NULL filesystem
1099options 	PROCFS			#Process filesystem (requires PSEUDOFS)
1100options 	PSEUDOFS		#Pseudo-filesystem framework
1101options 	PSEUDOFS_TRACE		#Debugging support for PSEUDOFS
1102options 	SMBFS			#SMB/CIFS filesystem
1103options 	TMPFS			#Efficient memory filesystem
1104options 	UDF			#Universal Disk Format
1105options 	UNIONFS			#Union filesystem
1106# The xFS_ROOT options REQUIRE the associated ``options xFS''
1107options 	NFS_ROOT		#NFS usable as root device
1108
1109# Soft updates is a technique for improving filesystem speed and
1110# making abrupt shutdown less risky.
1111#
1112options 	SOFTUPDATES
1113
1114# Extended attributes allow additional data to be associated with files,
1115# and is used for ACLs, Capabilities, and MAC labels.
1116# See src/sys/ufs/ufs/README.extattr for more information.
1117options 	UFS_EXTATTR
1118options 	UFS_EXTATTR_AUTOSTART
1119
1120# Access Control List support for UFS filesystems.  The current ACL
1121# implementation requires extended attribute support, UFS_EXTATTR,
1122# for the underlying filesystem.
1123# See src/sys/ufs/ufs/README.acls for more information.
1124options 	UFS_ACL
1125
1126# Directory hashing improves the speed of operations on very large
1127# directories at the expense of some memory.
1128options 	UFS_DIRHASH
1129
1130# Gjournal-based UFS journaling support.
1131options 	UFS_GJOURNAL
1132
1133# Make space in the kernel for a root filesystem on a md device.
1134# Define to the number of kilobytes to reserve for the filesystem.
1135# This is now optional.
1136# If not defined, the root filesystem passed in as the MFS_IMAGE makeoption
1137# will be automatically embedded in the kernel during linking. Its exact size
1138# will be consumed within the kernel.
1139# If defined, the old way of embedding the filesystem in the kernel will be
1140# used. That is to say MD_ROOT_SIZE KB will be allocated in the kernel and
1141# later, the filesystem image passed in as the MFS_IMAGE makeoption will be
1142# dd'd into the reserved space if it fits.
1143options 	MD_ROOT_SIZE=10
1144
1145# Make the md device a potential root device, either with preloaded
1146# images of type mfs_root or md_root.
1147options 	MD_ROOT
1148
1149# Write-protect the md root device so that it may not be mounted writeable.
1150options 	MD_ROOT_READONLY
1151
1152# Allow to read MD image from external memory regions
1153options		MD_ROOT_MEM
1154
1155# Disk quotas are supported when this option is enabled.
1156options 	QUOTA			#enable disk quotas
1157
1158# If you are running a machine just as a fileserver for PC and MAC
1159# users, using SAMBA, you may consider setting this option
1160# and keeping all those users' directories on a filesystem that is
1161# mounted with the suiddir option. This gives new files the same
1162# ownership as the directory (similar to group). It's a security hole
1163# if you let these users run programs, so confine it to file-servers
1164# (but it'll save you lots of headaches in those cases). Root owned
1165# directories are exempt and X bits are cleared. The suid bit must be
1166# set on the directory as well; see chmod(1). PC owners can't see/set
1167# ownerships so they keep getting their toes trodden on. This saves
1168# you all the support calls as the filesystem it's used on will act as
1169# they expect: "It's my dir so it must be my file".
1170#
1171options 	SUIDDIR
1172
1173# NFS options:
1174options 	NFS_MINATTRTIMO=3	# VREG attrib cache timeout in sec
1175options 	NFS_MAXATTRTIMO=60
1176options 	NFS_MINDIRATTRTIMO=30	# VDIR attrib cache timeout in sec
1177options 	NFS_MAXDIRATTRTIMO=60
1178options 	NFS_DEBUG		# Enable NFS Debugging
1179
1180#
1181# Add support for the EXT2FS filesystem of Linux fame.  Be a bit
1182# careful with this - the ext2fs code has a tendency to lag behind
1183# changes and not be exercised very much, so mounting read/write could
1184# be dangerous (and even mounting read only could result in panics.)
1185#
1186options 	EXT2FS
1187
1188# The system memory devices; /dev/mem, /dev/kmem
1189device		mem
1190
1191# The kernel symbol table device; /dev/ksyms
1192device		ksyms
1193
1194# Optional character code conversion support with LIBICONV.
1195# Each option requires their base file system and LIBICONV.
1196options 	CD9660_ICONV
1197options 	MSDOSFS_ICONV
1198options 	UDF_ICONV
1199
1200
1201#####################################################################
1202# POSIX P1003.1B
1203
1204# Real time extensions added in the 1993 POSIX
1205# _KPOSIX_PRIORITY_SCHEDULING: Build in _POSIX_PRIORITY_SCHEDULING
1206
1207options 	_KPOSIX_PRIORITY_SCHEDULING
1208# p1003_1b_semaphores are very experimental,
1209# user should be ready to assist in debugging if problems arise.
1210options 	P1003_1B_SEMAPHORES
1211
1212# POSIX message queue
1213options 	P1003_1B_MQUEUE
1214
1215#####################################################################
1216# SECURITY POLICY PARAMETERS
1217
1218# Support for BSM audit
1219options 	AUDIT
1220
1221# Support for Mandatory Access Control (MAC):
1222options 	MAC
1223options 	MAC_BIBA
1224options 	MAC_BSDEXTENDED
1225options 	MAC_IFOFF
1226options 	MAC_LOMAC
1227options 	MAC_MLS
1228options 	MAC_NONE
1229options 	MAC_NTPD
1230options 	MAC_PARTITION
1231options 	MAC_PORTACL
1232options 	MAC_SEEOTHERUIDS
1233options 	MAC_STUB
1234options 	MAC_TEST
1235
1236# Support for Capsicum
1237options 	CAPABILITIES	# fine-grained rights on file descriptors
1238options 	CAPABILITY_MODE	# sandboxes with no global namespace access
1239
1240
1241#####################################################################
1242# CLOCK OPTIONS
1243
1244# The granularity of operation is controlled by the kernel option HZ whose
1245# default value (1000 on most architectures) means a granularity of 1ms
1246# (1s/HZ).  Historically, the default was 100, but finer granularity is
1247# required for DUMMYNET and other systems on modern hardware.  There are
1248# reasonable arguments that HZ should, in fact, be 100 still; consider,
1249# that reducing the granularity too much might cause excessive overhead in
1250# clock interrupt processing, potentially causing ticks to be missed and thus
1251# actually reducing the accuracy of operation.
1252
1253options 	HZ=100
1254
1255# Enable support for the kernel PLL to use an external PPS signal,
1256# under supervision of [x]ntpd(8)
1257# More info in ntpd documentation: http://www.eecis.udel.edu/~ntp
1258
1259options 	PPS_SYNC
1260
1261# Enable support for generic feed-forward clocks in the kernel.
1262# The feed-forward clock support is an alternative to the feedback oriented
1263# ntpd/system clock approach, and is to be used with a feed-forward
1264# synchronization algorithm such as the RADclock:
1265# More info here: http://www.synclab.org/radclock
1266
1267options 	FFCLOCK
1268
1269
1270#####################################################################
1271# SCSI DEVICES
1272
1273# SCSI DEVICE CONFIGURATION
1274
1275# The SCSI subsystem consists of the `base' SCSI code, a number of
1276# high-level SCSI device `type' drivers, and the low-level host-adapter
1277# device drivers.  The host adapters are listed in the ISA and PCI
1278# device configuration sections below.
1279#
1280# It is possible to wire down your SCSI devices so that a given bus,
1281# target, and LUN always come on line as the same device unit.  In
1282# earlier versions the unit numbers were assigned in the order that
1283# the devices were probed on the SCSI bus.  This means that if you
1284# removed a disk drive, you may have had to rewrite your /etc/fstab
1285# file, and also that you had to be careful when adding a new disk
1286# as it may have been probed earlier and moved your device configuration
1287# around.
1288
1289# This old behavior is maintained as the default behavior.  The unit
1290# assignment begins with the first non-wired down unit for a device
1291# type.  For example, if you wire a disk as "da3" then the first
1292# non-wired disk will be assigned da4.
1293
1294# The syntax for wiring down devices is:
1295
1296hint.scbus.0.at="ahc0"
1297hint.scbus.1.at="ahc1"
1298hint.scbus.1.bus="0"
1299hint.scbus.3.at="ahc2"
1300hint.scbus.3.bus="0"
1301hint.scbus.2.at="ahc2"
1302hint.scbus.2.bus="1"
1303hint.da.0.at="scbus0"
1304hint.da.0.target="0"
1305hint.da.0.unit="0"
1306hint.da.1.at="scbus3"
1307hint.da.1.target="1"
1308hint.da.2.at="scbus2"
1309hint.da.2.target="3"
1310hint.sa.1.at="scbus1"
1311hint.sa.1.target="6"
1312
1313# "units" (SCSI logical unit number) that are not specified are
1314# treated as if specified as LUN 0.
1315
1316# All SCSI devices allocate as many units as are required.
1317
1318# The ch driver drives SCSI Media Changer ("jukebox") devices.
1319#
1320# The da driver drives SCSI Direct Access ("disk") and Optical Media
1321# ("WORM") devices.
1322#
1323# The sa driver drives SCSI Sequential Access ("tape") devices.
1324#
1325# The cd driver drives SCSI Read Only Direct Access ("cd") devices.
1326#
1327# The ses driver drives SCSI Environment Services ("ses") and
1328# SAF-TE ("SCSI Accessible Fault-Tolerant Enclosure") devices.
1329#
1330# The pt driver drives SCSI Processor devices.
1331#
1332# The sg driver provides a passthrough API that is compatible with the
1333# Linux SG driver.  It will work in conjunction with the COMPAT_LINUX
1334# option to run linux SG apps.  It can also stand on its own and provide
1335# source level API compatibility for porting apps to FreeBSD.
1336#
1337# Target Mode support is provided here but also requires that a SIM
1338# (SCSI Host Adapter Driver) provide support as well.
1339#
1340# The targ driver provides target mode support as a Processor type device.
1341# It exists to give the minimal context necessary to respond to Inquiry
1342# commands. There is a sample user application that shows how the rest
1343# of the command support might be done in /usr/share/examples/scsi_target.
1344#
1345# The targbh driver provides target mode support and exists to respond
1346# to incoming commands that do not otherwise have a logical unit assigned
1347# to them.
1348#
1349# The pass driver provides a passthrough API to access the CAM subsystem.
1350
1351device		scbus		#base SCSI code
1352device		ch		#SCSI media changers
1353device		da		#SCSI direct access devices (aka disks)
1354device		sa		#SCSI tapes
1355device		cd		#SCSI CD-ROMs
1356device		ses		#Enclosure Services (SES and SAF-TE)
1357device		pt		#SCSI processor
1358device		targ		#SCSI Target Mode Code
1359device		targbh		#SCSI Target Mode Blackhole Device
1360device		pass		#CAM passthrough driver
1361device		sg		#Linux SCSI passthrough
1362device		ctl		#CAM Target Layer
1363
1364# CAM OPTIONS:
1365# debugging options:
1366# CAMDEBUG		Compile in all possible debugging.
1367# CAM_DEBUG_COMPILE	Debug levels to compile in.
1368# CAM_DEBUG_FLAGS	Debug levels to enable on boot.
1369# CAM_DEBUG_BUS		Limit debugging to the given bus.
1370# CAM_DEBUG_TARGET	Limit debugging to the given target.
1371# CAM_DEBUG_LUN		Limit debugging to the given lun.
1372# CAM_DEBUG_DELAY	Delay in us after printing each debug line.
1373# CAM_IO_STATS		Publish additional CAM device statics by sysctl
1374#
1375# CAM_MAX_HIGHPOWER: Maximum number of concurrent high power (start unit) cmds
1376# SCSI_NO_SENSE_STRINGS: When defined disables sense descriptions
1377# SCSI_NO_OP_STRINGS: When defined disables opcode descriptions
1378# SCSI_DELAY: The number of MILLISECONDS to freeze the SIM (scsi adapter)
1379#             queue after a bus reset, and the number of milliseconds to
1380#             freeze the device queue after a bus device reset.  This
1381#             can be changed at boot and runtime with the
1382#             kern.cam.scsi_delay tunable/sysctl.
1383options 	CAMDEBUG
1384options 	CAM_DEBUG_COMPILE=-1
1385options 	CAM_DEBUG_FLAGS=(CAM_DEBUG_INFO|CAM_DEBUG_PROBE|CAM_DEBUG_PERIPH)
1386options 	CAM_DEBUG_BUS=-1
1387options 	CAM_DEBUG_TARGET=-1
1388options 	CAM_DEBUG_LUN=-1
1389options 	CAM_DEBUG_DELAY=1
1390options 	CAM_MAX_HIGHPOWER=4
1391options 	SCSI_NO_SENSE_STRINGS
1392options 	SCSI_NO_OP_STRINGS
1393options 	SCSI_DELAY=5000	# Be pessimistic about Joe SCSI device
1394options 	CAM_IOSCHED_DYNAMIC
1395options		CAM_IO_STATS
1396options		CAM_TEST_FAILURE
1397
1398# Options for the CAM CDROM driver:
1399# CHANGER_MIN_BUSY_SECONDS: Guaranteed minimum time quantum for a changer LUN
1400# CHANGER_MAX_BUSY_SECONDS: Maximum time quantum per changer LUN, only
1401#                           enforced if there is I/O waiting for another LUN
1402# The compiled in defaults for these variables are 2 and 10 seconds,
1403# respectively.
1404#
1405# These can also be changed on the fly with the following sysctl variables:
1406# kern.cam.cd.changer.min_busy_seconds
1407# kern.cam.cd.changer.max_busy_seconds
1408#
1409options 	CHANGER_MIN_BUSY_SECONDS=2
1410options 	CHANGER_MAX_BUSY_SECONDS=10
1411
1412# Options for the CAM sequential access driver:
1413# SA_IO_TIMEOUT: Timeout for read/write/wfm  operations, in minutes
1414# SA_SPACE_TIMEOUT: Timeout for space operations, in minutes
1415# SA_REWIND_TIMEOUT: Timeout for rewind operations, in minutes
1416# SA_ERASE_TIMEOUT: Timeout for erase operations, in minutes
1417# SA_1FM_AT_EOD: Default to model which only has a default one filemark at EOT.
1418options 	SA_IO_TIMEOUT=4
1419options 	SA_SPACE_TIMEOUT=60
1420options 	SA_REWIND_TIMEOUT=(2*60)
1421options 	SA_ERASE_TIMEOUT=(4*60)
1422options 	SA_1FM_AT_EOD
1423
1424# Optional timeout for the CAM processor target (pt) device
1425# This is specified in seconds.  The default is 60 seconds.
1426options 	SCSI_PT_DEFAULT_TIMEOUT=60
1427
1428# Optional enable of doing SES passthrough on other devices (e.g., disks)
1429#
1430# Normally disabled because a lot of newer SCSI disks report themselves
1431# as having SES capabilities, but this can then clot up attempts to build
1432# a topology with the SES device that's on the box these drives are in....
1433options 	SES_ENABLE_PASSTHROUGH
1434
1435
1436#####################################################################
1437# MISCELLANEOUS DEVICES AND OPTIONS
1438
1439device		pty		#BSD-style compatibility pseudo ttys
1440device		nmdm		#back-to-back tty devices
1441device		md		#Memory/malloc disk
1442device		snp		#Snoop device - to look at pty/vty/etc..
1443device		ccd		#Concatenated disk driver
1444device		firmware	#firmware(9) support
1445
1446# Kernel side iconv library
1447options 	LIBICONV
1448
1449# Size of the kernel message buffer.  Should be N * pagesize.
1450options 	MSGBUF_SIZE=40960
1451
1452
1453#####################################################################
1454# HARDWARE BUS CONFIGURATION
1455
1456#
1457# PCI bus & PCI options:
1458#
1459device		pci
1460options 	PCI_HP			# PCI-Express native HotPlug
1461options 	PCI_IOV			# PCI SR-IOV support
1462
1463
1464#####################################################################
1465# HARDWARE DEVICE CONFIGURATION
1466
1467# For ISA the required hints are listed.
1468# PCI, CardBus, SD/MMC and pccard are self identifying buses, so
1469# no hints are needed.
1470
1471#
1472# Mandatory devices:
1473#
1474
1475# These options are valid for other keyboard drivers as well.
1476options 	KBD_DISABLE_KEYMAP_LOAD	# refuse to load a keymap
1477options 	KBD_INSTALL_CDEV	# install a CDEV entry in /dev
1478
1479device		kbdmux			# keyboard multiplexer
1480options		KBDMUX_DFLT_KEYMAP	# specify the built-in keymap
1481makeoptions	KBDMUX_DFLT_KEYMAP=it.iso
1482
1483options 	FB_DEBUG		# Frame buffer debugging
1484
1485# Enable experimental features of the syscons terminal emulator (teken).
1486options 	TEKEN_CONS25		# cons25-style terminal emulation
1487options 	TEKEN_UTF8		# UTF-8 output handling
1488
1489# The vt video console driver.
1490device		vt
1491options		VT_ALT_TO_ESC_HACK=1	# Prepend ESC sequence to ALT keys
1492options		VT_MAXWINDOWS=16	# Number of virtual consoles
1493options		VT_TWOBUTTON_MOUSE	# Use right mouse button to paste
1494
1495# The following options set the maximum framebuffer size.
1496options		VT_FB_MAX_HEIGHT=480
1497options		VT_FB_MAX_WIDTH=640
1498
1499# The following options will let you change the default vt terminal colors.
1500options		TERMINAL_NORM_ATTR=(FG_GREEN|BG_BLACK)
1501options		TERMINAL_KERN_ATTR=(FG_LIGHTRED|BG_BLACK)
1502
1503#
1504# Optional devices:
1505#
1506
1507#
1508# SCSI host adapters:
1509#
1510# aacraid: Adaptec by PMC RAID controllers, Series 6/7/8 and upcoming
1511#          families. Container interface, CAM required.
1512# ahc: Adaptec 274x/284x/2910/293x/294x/394x/3950x/3960x/398X/4944/
1513#      19160x/29160x, aic7770/aic78xx
1514# ahd: Adaptec 29320/39320 Controllers.
1515# esp: Emulex ESP, NCR 53C9x and QLogic FAS families based controllers
1516#      including the AMD Am53C974 (found on devices such as the Tekram
1517#      DC-390(T)) and the Sun ESP and FAS families of controllers
1518# isp: Qlogic ISP 1020, 1040 and 1040B PCI SCSI host adapters,
1519#      ISP 1240 Dual Ultra SCSI, ISP 1080 and 1280 (Dual) Ultra2,
1520#      ISP 12160 Ultra3 SCSI,
1521#      Qlogic ISP 2100 and ISP 2200 1Gb Fibre Channel host adapters.
1522#      Qlogic ISP 2300 and ISP 2312 2Gb Fibre Channel host adapters.
1523#      Qlogic ISP 2322 and ISP 6322 2Gb Fibre Channel host adapters.
1524# ispfw: Firmware module for Qlogic host adapters
1525# mpr: LSI-Logic MPT/Fusion Gen 3
1526# mps: LSI-Logic MPT/Fusion Gen 2
1527# mpt: LSI-Logic MPT/Fusion 53c1020 or 53c1030 Ultra4
1528#      or FC9x9 Fibre Channel host adapters.
1529# sym: Symbios/Logic 53C8XX family of PCI-SCSI I/O processors:
1530#      53C810, 53C810A, 53C815, 53C825,  53C825A, 53C860, 53C875,
1531#      53C876, 53C885,  53C895, 53C895A, 53C896,  53C897, 53C1510D,
1532#      53C1010-33, 53C1010-66.
1533
1534device		aacraid
1535device		ahc
1536device		ahd
1537device		esp
1538device		iscsi_initiator
1539device		isp
1540hint.isp.0.disable="1"
1541hint.isp.0.role="3"
1542hint.isp.0.prefer_iomap="1"
1543hint.isp.0.prefer_memmap="1"
1544hint.isp.0.fwload_disable="1"
1545hint.isp.0.ignore_nvram="1"
1546hint.isp.0.fullduplex="1"
1547hint.isp.0.topology="lport"
1548hint.isp.0.topology="nport"
1549hint.isp.0.topology="lport-only"
1550hint.isp.0.topology="nport-only"
1551# we can't get u_int64_t types, nor can we get strings if it's got
1552# a leading 0x, hence this silly dodge.
1553hint.isp.0.portwnn="w50000000aaaa0000"
1554hint.isp.0.nodewnn="w50000000aaaa0001"
1555device		ispfw
1556device		mpr			# LSI-Logic MPT-Fusion 3
1557device		mps			# LSI-Logic MPT-Fusion 2
1558device		mpt			# LSI-Logic MPT-Fusion
1559device		sym
1560
1561# The aic7xxx driver will attempt to use memory mapped I/O for all PCI
1562# controllers that have it configured only if this option is set. Unfortunately,
1563# this doesn't work on some motherboards, which prevents it from being the
1564# default.
1565options 	AHC_ALLOW_MEMIO
1566
1567# Dump the contents of the ahc controller configuration PROM.
1568options 	AHC_DUMP_EEPROM
1569
1570# Bitmap of units to enable targetmode operations.
1571options 	AHC_TMODE_ENABLE
1572
1573# Compile in Aic7xxx Debugging code.
1574options 	AHC_DEBUG
1575
1576# Aic7xxx driver debugging options. See sys/dev/aic7xxx/aic7xxx.h
1577options 	AHC_DEBUG_OPTS
1578
1579# Print register bitfields in debug output.  Adds ~128k to driver
1580# See ahc(4).
1581options 	AHC_REG_PRETTY_PRINT
1582
1583# Compile in aic79xx debugging code.
1584options 	AHD_DEBUG
1585
1586# Aic79xx driver debugging options.  Adds ~215k to driver.  See ahd(4).
1587options 	AHD_DEBUG_OPTS=0xFFFFFFFF
1588
1589# Print human-readable register definitions when debugging
1590options 	AHD_REG_PRETTY_PRINT
1591
1592# Bitmap of units to enable targetmode operations.
1593options 	AHD_TMODE_ENABLE
1594
1595# Options used in dev/iscsi (Software iSCSI stack)
1596#
1597options 	ISCSI_INITIATOR_DEBUG=9
1598
1599# Options used in dev/isp/ (Qlogic SCSI/FC driver).
1600#
1601#	ISP_TARGET_MODE		-	enable target mode operation
1602#
1603options 	ISP_TARGET_MODE=1
1604#
1605#	ISP_DEFAULT_ROLES	-	default role
1606#		none=0
1607#		target=1
1608#		initiator=2
1609#		both=3			(not supported currently)
1610#
1611#	ISP_INTERNAL_TARGET		(trivial internal disk target, for testing)
1612#
1613options 	ISP_DEFAULT_ROLES=0
1614
1615#options 	SYM_SETUP_SCSI_DIFF	#-HVD support for 825a, 875, 885
1616					# disabled:0 (default), enabled:1
1617#options 	SYM_SETUP_PCI_PARITY	#-PCI parity checking
1618					# disabled:0, enabled:1 (default)
1619#options 	SYM_SETUP_MAX_LUN	#-Number of LUNs supported
1620					# default:8, range:[1..64]
1621
1622#
1623# Compaq "CISS" RAID controllers (SmartRAID 5* series)
1624# These controllers have a SCSI-like interface, and require the
1625# CAM infrastructure.
1626#
1627device		ciss
1628
1629#
1630# Intel Integrated RAID controllers.
1631# This driver was developed and is maintained by Intel.  Contacts
1632# at Intel for this driver are
1633# "Kannanthanam, Boji T" <boji.t.kannanthanam@intel.com> and
1634# "Leubner, Achim" <achim.leubner@intel.com>.
1635#
1636device		iir
1637
1638#
1639# Mylex AcceleRAID and eXtremeRAID controllers with v6 and later
1640# firmware.  These controllers have a SCSI-like interface, and require
1641# the CAM infrastructure.
1642#
1643device		mly
1644
1645#
1646# Compaq Smart RAID, Mylex DAC960 and AMI MegaRAID controllers.  Only
1647# one entry is needed; the code will find and configure all supported
1648# controllers.
1649#
1650device		ida		# Compaq Smart RAID
1651device		mlx		# Mylex DAC960
1652device		amr		# AMI MegaRAID
1653device		amrp		# SCSI Passthrough interface (optional, CAM req.)
1654device		mfi		# LSI MegaRAID SAS
1655device		mfip		# LSI MegaRAID SAS passthrough, requires CAM
1656options 	MFI_DEBUG
1657device		mrsas		# LSI/Avago MegaRAID SAS/SATA, 6Gb/s and 12Gb/s
1658
1659#
1660# 3ware ATA RAID
1661#
1662device		twe		# 3ware ATA RAID
1663
1664#
1665# Serial ATA host controllers:
1666#
1667# ahci: Advanced Host Controller Interface (AHCI) compatible
1668# mvs:  Marvell 88SX50XX/88SX60XX/88SX70XX/SoC controllers
1669# siis: SiliconImage SiI3124/SiI3132/SiI3531 controllers
1670#
1671# These drivers are part of cam(4) subsystem. They supersede less featured
1672# ata(4) subsystem drivers, supporting same hardware.
1673
1674device		ahci
1675device		mvs
1676device		siis
1677
1678#
1679# The 'ATA' driver supports all legacy ATA/ATAPI controllers, including
1680# PC Card devices. You only need one "device ata" for it to find all
1681# PCI and PC Card ATA/ATAPI devices on modern machines.
1682# Alternatively, individual bus and chipset drivers may be chosen by using
1683# the 'atacore' driver then selecting the drivers on a per vendor basis.
1684# For example to build a system which only supports a VIA chipset,
1685# omit 'ata' and include the 'atacore', 'atapci' and 'atavia' drivers.
1686device		ata
1687
1688# Modular ATA
1689#device		atacore		# Core ATA functionality
1690#device		atapccard	# CARDBUS support
1691#device		ataisa		# ISA bus support
1692#device		atapci		# PCI bus support; only generic chipset support
1693
1694# PCI ATA chipsets
1695#device		ataacard	# ACARD
1696#device		ataacerlabs	# Acer Labs Inc. (ALI)
1697#device		ataamd		# American Micro Devices (AMD)
1698#device		ataati		# ATI
1699#device		atacenatek	# Cenatek
1700#device		atacypress	# Cypress
1701#device		atacyrix	# Cyrix
1702#device		atahighpoint	# HighPoint
1703#device		ataintel	# Intel
1704#device		ataite		# Integrated Technology Inc. (ITE)
1705#device		atajmicron	# JMicron
1706#device		atamarvell	# Marvell
1707#device		atamicron	# Micron
1708#device		atanational	# National
1709#device		atanetcell	# NetCell
1710#device		atanvidia	# nVidia
1711#device		atapromise	# Promise
1712#device		ataserverworks	# ServerWorks
1713#device		atasiliconimage	# Silicon Image Inc. (SiI) (formerly CMD)
1714#device		atasis		# Silicon Integrated Systems Corp.(SiS)
1715#device		atavia		# VIA Technologies Inc.
1716
1717#
1718# For older non-PCI, non-PnPBIOS systems, these are the hints lines to add:
1719hint.ata.0.at="isa"
1720hint.ata.0.port="0x1f0"
1721hint.ata.0.irq="14"
1722hint.ata.1.at="isa"
1723hint.ata.1.port="0x170"
1724hint.ata.1.irq="15"
1725
1726#
1727# uart: newbusified driver for serial interfaces.  It consolidates the sio(4),
1728#	sab(4) and zs(4) drivers.
1729#
1730device		uart
1731
1732# Options for uart(4)
1733options 	UART_PPS_ON_CTS		# Do time pulse capturing using CTS
1734					# instead of DCD.
1735options 	UART_POLL_FREQ		# Set polling rate, used when hw has
1736					# no interrupt support (50 Hz default).
1737
1738# The following hint should only be used for pure ISA devices.  It is not
1739# needed otherwise.  Use of hints is strongly discouraged.
1740hint.uart.0.at="isa"
1741
1742# The following 3 hints are used when the UART is a system device (i.e., a
1743# console or debug port), but only on platforms that don't have any other
1744# means to pass the information to the kernel.  The unit number of the hint
1745# is only used to bundle the hints together.  There is no relation to the
1746# unit number of the probed UART.
1747hint.uart.0.port="0x3f8"
1748hint.uart.0.flags="0x10"
1749hint.uart.0.baud="115200"
1750
1751# `flags' for serial drivers that support consoles like sio(4) and uart(4):
1752#	0x10	enable console support for this unit.  Other console flags
1753#		(if applicable) are ignored unless this is set.  Enabling
1754#		console support does not make the unit the preferred console.
1755#		Boot with -h or set boot_serial=YES in the loader.  For sio(4)
1756#		specifically, the 0x20 flag can also be set (see above).
1757#		Currently, at most one unit can have console support; the
1758#		first one (in config file order) with this flag set is
1759#		preferred.  Setting this flag for sio0 gives the old behavior.
1760#	0x80	use this port for serial line gdb support in ddb.  Also known
1761#		as debug port.
1762#
1763
1764# Options for serial drivers that support consoles:
1765options 	BREAK_TO_DEBUGGER	# A BREAK/DBG on the console goes to
1766					# ddb, if available.
1767
1768# Solaris implements a new BREAK which is initiated by a character
1769# sequence CR ~ ^b which is similar to a familiar pattern used on
1770# Sun servers by the Remote Console.  There are FreeBSD extensions:
1771# CR ~ ^p requests force panic and CR ~ ^r requests a clean reboot.
1772options 	ALT_BREAK_TO_DEBUGGER
1773
1774# Serial Communications Controller
1775# Supports the Siemens SAB 82532 and Zilog Z8530 multi-channel
1776# communications controllers.
1777device		scc
1778
1779# PCI Universal Communications driver
1780# Supports various multi port PCI I/O cards.
1781device		puc
1782
1783#
1784# Network interfaces:
1785#
1786# MII bus support is required for many PCI Ethernet NICs,
1787# namely those which use MII-compliant transceivers or implement
1788# transceiver control interfaces that operate like an MII.  Adding
1789# "device miibus" to the kernel config pulls in support for the generic
1790# miibus API, the common support for for bit-bang'ing the MII and all
1791# of the PHY drivers, including a generic one for PHYs that aren't
1792# specifically handled by an individual driver.  Support for specific
1793# PHYs may be built by adding "device mii", "device mii_bitbang" if
1794# needed by the NIC driver and then adding the appropriate PHY driver.
1795device  	mii		# Minimal MII support
1796device  	mii_bitbang	# Common module for bit-bang'ing the MII
1797device  	miibus		# MII support w/ bit-bang'ing and all PHYs
1798
1799device  	acphy		# Altima Communications AC101
1800device  	amphy		# AMD AM79c873 / Davicom DM910{1,2}
1801device  	atphy		# Attansic/Atheros F1
1802device  	axphy		# Asix Semiconductor AX88x9x
1803device  	bmtphy		# Broadcom BCM5201/BCM5202 and 3Com 3c905C
1804device		bnxt		# Broadcom NetXtreme-C/NetXtreme-E
1805device  	brgphy		# Broadcom BCM54xx/57xx 1000baseTX
1806device  	cgem		# Cadence GEM Gigabit Ethernet
1807device  	ciphy		# Cicada/Vitesse CS/VSC8xxx
1808device  	e1000phy	# Marvell 88E1000 1000/100/10-BT
1809device  	gentbi		# Generic 10-bit 1000BASE-{LX,SX} fiber ifaces
1810device  	icsphy		# ICS ICS1889-1893
1811device  	ip1000phy	# IC Plus IP1000A/IP1001
1812device  	jmphy		# JMicron JMP211/JMP202
1813device  	lxtphy		# Level One LXT-970
1814device  	mlphy		# Micro Linear 6692
1815device  	nsgphy		# NatSemi DP8361/DP83865/DP83891
1816device  	nsphy		# NatSemi DP83840A
1817device  	nsphyter	# NatSemi DP83843/DP83815
1818device  	pnaphy		# HomePNA
1819device  	qsphy		# Quality Semiconductor QS6612
1820device  	rdcphy		# RDC Semiconductor R6040
1821device  	rgephy		# RealTek 8169S/8110S/8211B/8211C
1822device  	rlphy		# RealTek 8139
1823device  	rlswitch	# RealTek 8305
1824device  	smcphy		# SMSC LAN91C111
1825device  	tdkphy		# TDK 89Q2120
1826device  	tlphy		# Texas Instruments ThunderLAN
1827device  	truephy		# LSI TruePHY
1828device		xmphy		# XaQti XMAC II
1829
1830# an:   Aironet 4500/4800 802.11 wireless adapters. Supports the PCMCIA,
1831#       PCI and ISA varieties.
1832# ae:   Support for gigabit ethernet adapters based on the Attansic/Atheros
1833#       L2 PCI-Express FastEthernet controllers.
1834# age:  Support for gigabit ethernet adapters based on the Attansic/Atheros
1835#       L1 PCI express gigabit ethernet controllers.
1836# alc:  Support for Atheros AR8131/AR8132 PCIe ethernet controllers.
1837# ale:  Support for Atheros AR8121/AR8113/AR8114 PCIe ethernet controllers.
1838# ath:  Atheros a/b/g WiFi adapters (requires ath_hal and wlan)
1839# bce:	Broadcom NetXtreme II (BCM5706/BCM5708) PCI/PCIe Gigabit Ethernet
1840#       adapters.
1841# bfe:	Broadcom BCM4401 Ethernet adapter.
1842# bge:	Support for gigabit ethernet adapters based on the Broadcom
1843#	BCM570x family of controllers, including the 3Com 3c996-T,
1844#	the Netgear GA302T, the SysKonnect SK-9D21 and SK-9D41, and
1845#	the embedded gigE NICs on Dell PowerEdge 2550 servers.
1846# bnxt:	Broadcom NetXtreme-C and NetXtreme-E PCIe 10/25/50G Ethernet adapters.
1847# bxe:	Broadcom NetXtreme II (BCM5771X/BCM578XX) PCIe 10Gb Ethernet
1848#       adapters.
1849# bwi:	Broadcom BCM430* and BCM431* family of wireless adapters.
1850# bwn:	Broadcom BCM43xx family of wireless adapters.
1851# cas:	Sun Cassini/Cassini+ and National Semiconductor DP83065 Saturn
1852# cxgb: Chelsio T3 based 1GbE/10GbE PCIe Ethernet adapters.
1853# cxgbe:Chelsio T4, T5, and T6-based 1/10/25/40/100GbE PCIe Ethernet
1854#	adapters.
1855# cxgbev: Chelsio T4, T5, and T6-based PCIe Virtual Functions.
1856# dc:   Support for PCI fast ethernet adapters based on the DEC/Intel 21143
1857#       and various workalikes including:
1858#       the ADMtek AL981 Comet and AN985 Centaur, the ASIX Electronics
1859#       AX88140A and AX88141, the Davicom DM9100 and DM9102, the Lite-On
1860#       82c168 and 82c169 PNIC, the Lite-On/Macronix LC82C115 PNIC II
1861#       and the Macronix 98713/98713A/98715/98715A/98725 PMAC. This driver
1862#       replaces the old al, ax, dm, pn and mx drivers.  List of brands:
1863#       Digital DE500-BA, Kingston KNE100TX, D-Link DFE-570TX, SOHOware SFA110,
1864#       SVEC PN102-TX, CNet Pro110B, 120A, and 120B, Compex RL100-TX,
1865#       LinkSys LNE100TX, LNE100TX V2.0, Jaton XpressNet, Alfa Inc GFC2204,
1866#       KNE110TX.
1867# em:   Intel Pro/1000 Gigabit Ethernet 82542, 82543, 82544 based adapters.
1868# fxp:  Intel EtherExpress Pro/100B
1869#	(hint of prefer_iomap can be done to prefer I/O instead of Mem mapping)
1870# gem:  Apple GMAC/Sun ERI/Sun GEM
1871# hme:  Sun HME (Happy Meal Ethernet)
1872# jme:  JMicron JMC260 Fast Ethernet/JMC250 Gigabit Ethernet based adapters.
1873# le:   AMD Am7900 LANCE and Am79C9xx PCnet
1874# lge:	Support for PCI gigabit ethernet adapters based on the Level 1
1875#	LXT1001 NetCellerator chipset. This includes the D-Link DGE-500SX,
1876#	SMC TigerCard 1000 (SMC9462SX), and some Addtron cards.
1877# lio:  Support for Cavium 23XX Ethernet adapters
1878# malo: Marvell Libertas wireless NICs.
1879# mwl:  Marvell 88W8363 802.11n wireless NICs.
1880#	Requires the mwl firmware module
1881# mwlfw: Marvell 88W8363 firmware
1882# msk:	Support for gigabit ethernet adapters based on the Marvell/SysKonnect
1883#	Yukon II Gigabit controllers, including 88E8021, 88E8022, 88E8061,
1884#	88E8062, 88E8035, 88E8036, 88E8038, 88E8050, 88E8052, 88E8053,
1885#	88E8055, 88E8056 and D-Link 560T/550SX.
1886# mlxfw: Mellanox firmware update module.
1887# mlx5:	Mellanox ConnectX-4 and ConnectX-4 LX IB and Eth shared code module.
1888# mlx5en:Mellanox ConnectX-4 and ConnectX-4 LX PCIe Ethernet adapters.
1889# my:	Myson Fast Ethernet (MTD80X, MTD89X)
1890# nge:	Support for PCI gigabit ethernet adapters based on the National
1891#	Semiconductor DP83820 and DP83821 chipset. This includes the
1892#	SMC EZ Card 1000 (SMC9462TX), D-Link DGE-500T, Asante FriendlyNet
1893#	GigaNIX 1000TA and 1000TPC, the Addtron AEG320T, the Surecom
1894#	EP-320G-TX and the Netgear GA622T.
1895# oce:	Emulex 10 Gbit adapters (OneConnect Ethernet)
1896# ral:	Ralink Technology IEEE 802.11 wireless adapter
1897# re:   RealTek 8139C+/8169/816xS/811xS/8101E PCI/PCIe Ethernet adapter
1898# rl:   Support for PCI fast ethernet adapters based on the RealTek 8129/8139
1899#       chipset.  Note that the RealTek driver defaults to using programmed
1900#       I/O to do register accesses because memory mapped mode seems to cause
1901#       severe lockups on SMP hardware.  This driver also supports the
1902#       Accton EN1207D `Cheetah' adapter, which uses a chip called
1903#       the MPX 5030/5038, which is either a RealTek in disguise or a
1904#       RealTek workalike.  Note that the D-Link DFE-530TX+ uses the RealTek
1905#       chipset and is supported by this driver, not the 'vr' driver.
1906# rtwn: RealTek wireless adapters.
1907# rtwnfw: RealTek wireless firmware.
1908# sge:  Silicon Integrated Systems SiS190/191 Fast/Gigabit Ethernet adapter
1909# sis:  Support for NICs based on the Silicon Integrated Systems SiS 900,
1910#       SiS 7016 and NS DP83815 PCI fast ethernet controller chips.
1911# sk:   Support for the SysKonnect SK-984x series PCI gigabit ethernet NICs.
1912#       This includes the SK-9841 and SK-9842 single port cards (single mode
1913#       and multimode fiber) and the SK-9843 and SK-9844 dual port cards
1914#       (also single mode and multimode).
1915#       The driver will autodetect the number of ports on the card and
1916#       attach each one as a separate network interface.
1917# ste:  Sundance Technologies ST201 PCI fast ethernet controller, includes
1918#       the D-Link DFE-550TX.
1919# stge: Support for gigabit ethernet adapters based on the Sundance/Tamarack
1920#       TC9021 family of controllers, including the Sundance ST2021/ST2023,
1921#       the Sundance/Tamarack TC9021, the D-Link DL-4000 and ASUS NX1101.
1922# ti:   Support for PCI gigabit ethernet NICs based on the Alteon Networks
1923#       Tigon 1 and Tigon 2 chipsets.  This includes the Alteon AceNIC, the
1924#       3Com 3c985, the Netgear GA620 and various others.  Note that you will
1925#       probably want to bump up kern.ipc.nmbclusters a lot to use this driver.
1926# vr:   Support for various fast ethernet adapters based on the VIA
1927#       Technologies VT3043 `Rhine I' and VT86C100A `Rhine II' chips,
1928#       including the D-Link DFE520TX and D-Link DFE530TX (see 'rl' for
1929#       DFE530TX+), the Hawking Technologies PN102TX, and the AOpen/Acer ALN-320.
1930# vte:  DM&P Vortex86 RDC R6040 Fast Ethernet
1931# wi:   Lucent WaveLAN/IEEE 802.11 PCMCIA adapters. Note: this supports both
1932#       the PCMCIA and ISA cards: the ISA card is really a PCMCIA to ISA
1933#       bridge with a PCMCIA adapter plugged into it.
1934# xl:   Support for the 3Com 3c900, 3c905, 3c905B and 3c905C (Fast)
1935#       Etherlink XL cards and integrated controllers.  This includes the
1936#       integrated 3c905B-TX chips in certain Dell Optiplex and Dell
1937#       Precision desktop machines and the integrated 3c905-TX chips
1938#       in Dell Latitude laptop docking stations.
1939#       Also supported: 3Com 3c980(C)-TX, 3Com 3cSOHO100-TX, 3Com 3c450-TX
1940
1941# Order for ISA devices is important here
1942
1943device		an
1944device		wi
1945
1946# PCI Ethernet NICs that use the common MII bus controller code.
1947device		ae		# Attansic/Atheros L2 FastEthernet
1948device		age		# Attansic/Atheros L1 Gigabit Ethernet
1949device		alc		# Atheros AR8131/AR8132 Ethernet
1950device		ale		# Atheros AR8121/AR8113/AR8114 Ethernet
1951device		bce		# Broadcom BCM5706/BCM5708 Gigabit Ethernet
1952device		bfe		# Broadcom BCM440x 10/100 Ethernet
1953device		bge		# Broadcom BCM570xx Gigabit Ethernet
1954device		cas		# Sun Cassini/Cassini+ and NS DP83065 Saturn
1955device		dc		# DEC/Intel 21143 and various workalikes
1956device		et		# Agere ET1310 10/100/Gigabit Ethernet
1957device		fxp		# Intel EtherExpress PRO/100B (82557, 82558)
1958hint.fxp.0.prefer_iomap="0"
1959device		gem		# Apple GMAC/Sun ERI/Sun GEM
1960device		hme		# Sun HME (Happy Meal Ethernet)
1961device		jme		# JMicron JMC250 Gigabit/JMC260 Fast Ethernet
1962device		lge		# Level 1 LXT1001 gigabit Ethernet
1963device		mlxfw		# Mellanox firmware update module
1964device		mlx5		# Shared code module between IB and Ethernet
1965device		mlx5en		# Mellanox ConnectX-4 and ConnectX-4 LX
1966device		msk		# Marvell/SysKonnect Yukon II Gigabit Ethernet
1967device		my		# Myson Fast Ethernet (MTD80X, MTD89X)
1968device		nge		# NatSemi DP83820 gigabit Ethernet
1969device		re		# RealTek 8139C+/8169/8169S/8110S
1970device		rl		# RealTek 8129/8139
1971device		sge		# Silicon Integrated Systems SiS190/191
1972device		sis		# Silicon Integrated Systems SiS 900/SiS 7016
1973device		sk		# SysKonnect SK-984x & SK-982x gigabit Ethernet
1974device		ste		# Sundance ST201 (D-Link DFE-550TX)
1975device		stge		# Sundance/Tamarack TC9021 gigabit Ethernet
1976device		vr		# VIA Rhine, Rhine II
1977device		vte		# DM&P Vortex86 RDC R6040 Fast Ethernet
1978device		xl		# 3Com 3c90x (``Boomerang'', ``Cyclone'')
1979
1980# PCI/PCI-X/PCIe Ethernet NICs that use iflib infrastructure
1981device		iflib
1982device		em		# Intel Pro/1000 Gigabit Ethernet
1983device		ix		# Intel Pro/10Gbe PCIE Ethernet
1984device		ixv		# Intel Pro/10Gbe PCIE Ethernet VF
1985
1986# PCI Ethernet NICs.
1987device		cxgb		# Chelsio T3 10 Gigabit Ethernet
1988device		cxgb_t3fw	# Chelsio T3 10 Gigabit Ethernet firmware
1989device		cxgbe		# Chelsio T4-T6 1/10/25/40/100 Gigabit Ethernet
1990device		cxgbev		# Chelsio T4-T6 Virtual Functions
1991device		le		# AMD Am7900 LANCE and Am79C9xx PCnet
1992device		mxge		# Myricom Myri-10G 10GbE NIC
1993device		oce		# Emulex 10 GbE (OneConnect Ethernet)
1994device		ti		# Alteon Networks Tigon I/II gigabit Ethernet
1995
1996# PCI IEEE 802.11 Wireless NICs
1997device		ath		# Atheros pci/cardbus NIC's
1998device		ath_hal		# pci/cardbus chip support
1999#device		ath_ar5210	# AR5210 chips
2000#device		ath_ar5211	# AR5211 chips
2001#device		ath_ar5212	# AR5212 chips
2002#device		ath_rf2413
2003#device		ath_rf2417
2004#device		ath_rf2425
2005#device		ath_rf5111
2006#device		ath_rf5112
2007#device		ath_rf5413
2008#device		ath_ar5416	# AR5416 chips
2009# All of the AR5212 parts have a problem when paired with the AR71xx
2010# CPUS.  These parts have a bug that triggers a fatal bus error on the AR71xx
2011# only.  Details of the exact nature of the bug are sketchy, but some can be
2012# found at https://forum.openwrt.org/viewtopic.php?pid=70060 on pages 4, 5 and
2013# 6.  This option enables this workaround.  There is a performance penalty
2014# for this work around, but without it things don't work at all.  The DMA
2015# from the card usually bursts 128 bytes, but on the affected CPUs, only
2016# 4 are safe.
2017options	   	AH_RXCFG_SDMAMW_4BYTES
2018#device		ath_ar9160	# AR9160 chips
2019#device		ath_ar9280	# AR9280 chips
2020#device		ath_ar9285	# AR9285 chips
2021device		ath_rate_sample	# SampleRate tx rate control for ath
2022device		bwi		# Broadcom BCM430* BCM431*
2023device		bwn		# Broadcom BCM43xx
2024device		malo		# Marvell Libertas wireless NICs.
2025device		mwl		# Marvell 88W8363 802.11n wireless NICs.
2026device		mwlfw
2027device		ral		# Ralink Technology RT2500 wireless NICs.
2028device		rtwn		# Realtek wireless NICs
2029device		rtwnfw
2030
2031# Use sf_buf(9) interface for jumbo buffers on ti(4) controllers.
2032#options 	TI_SF_BUF_JUMBO
2033# Turn on the header splitting option for the ti(4) driver firmware.  This
2034# only works for Tigon II chips, and has no effect for Tigon I chips.
2035# This option requires the TI_SF_BUF_JUMBO option above.
2036#options 	TI_JUMBO_HDRSPLIT
2037
2038# These two options allow manipulating the mbuf cluster size and mbuf size,
2039# respectively.  Be very careful with NIC driver modules when changing
2040# these from their default values, because that can potentially cause a
2041# mismatch between the mbuf size assumed by the kernel and the mbuf size
2042# assumed by a module.  The only driver that currently has the ability to
2043# detect a mismatch is ti(4).
2044options 	MCLSHIFT=12	# mbuf cluster shift in bits, 12 == 4KB
2045options 	MSIZE=512	# mbuf size in bytes
2046
2047#
2048# Sound drivers
2049#
2050# sound: The generic sound driver.
2051#
2052
2053device		sound
2054
2055#
2056# snd_*: Device-specific drivers.
2057#
2058# The flags of the device tell the device a bit more info about the
2059# device that normally is obtained through the PnP interface.
2060#	bit  2..0   secondary DMA channel;
2061#	bit  4      set if the board uses two dma channels;
2062#	bit 15..8   board type, overrides autodetection; leave it
2063#		    zero if don't know what to put in (and you don't,
2064#		    since this is unsupported at the moment...).
2065#
2066# snd_ad1816:		Analog Devices AD1816 ISA PnP/non-PnP.
2067# snd_als4000:		Avance Logic ALS4000 PCI.
2068# snd_atiixp:		ATI IXP 200/300/400 PCI.
2069# snd_cmi:		CMedia CMI8338/CMI8738 PCI.
2070# snd_cs4281:		Crystal Semiconductor CS4281 PCI.
2071# snd_csa:		Crystal Semiconductor CS461x/428x PCI. (except
2072#			4281)
2073# snd_ds1:		Yamaha DS-1 PCI.
2074# snd_emu10k1:		Creative EMU10K1 PCI and EMU10K2 (Audigy) PCI.
2075# snd_emu10kx:		Creative SoundBlaster Live! and Audigy
2076# snd_envy24:		VIA Envy24 and compatible, needs snd_spicds.
2077# snd_envy24ht:		VIA Envy24HT and compatible, needs snd_spicds.
2078# snd_es137x:		Ensoniq AudioPCI ES137x PCI.
2079# snd_ess:		Ensoniq ESS ISA PnP/non-PnP, to be used in
2080#			conjunction with snd_sbc.
2081# snd_fm801:		Forte Media FM801 PCI.
2082# snd_gusc:		Gravis UltraSound ISA PnP/non-PnP.
2083# snd_hda:		Intel High Definition Audio (Controller) and
2084#			compatible.
2085# snd_hdspe:		RME HDSPe AIO and RayDAT.
2086# snd_ich:		Intel ICH AC'97 and some more audio controllers
2087#			embedded in a chipset, for example nVidia
2088#			nForce controllers.
2089# snd_maestro:		ESS Technology Maestro-1/2x PCI.
2090# snd_maestro3:		ESS Technology Maestro-3/Allegro PCI.
2091# snd_mss:		Microsoft Sound System ISA PnP/non-PnP.
2092# snd_neomagic:		Neomagic 256 AV/ZX PCI.
2093# snd_sb16:		Creative SoundBlaster16, to be used in
2094#			conjunction with snd_sbc.
2095# snd_sb8:		Creative SoundBlaster (pre-16), to be used in
2096#			conjunction with snd_sbc.
2097# snd_sbc:		Creative SoundBlaster ISA PnP/non-PnP.
2098#			Supports ESS and Avance ISA chips as well.
2099# snd_solo:		ESS Solo-1x PCI.
2100# snd_spicds:		SPI codec driver, needed by Envy24/Envy24HT drivers.
2101# snd_t4dwave:		Trident 4DWave DX/NX PCI, Sis 7018 PCI and Acer Labs
2102#			M5451 PCI.
2103# snd_uaudio:		USB audio.
2104# snd_via8233:		VIA VT8233x PCI.
2105# snd_via82c686:	VIA VT82C686A PCI.
2106# snd_vibes:		S3 Sonicvibes PCI.
2107
2108device		snd_ad1816
2109device		snd_als4000
2110device		snd_atiixp
2111device		snd_cmi
2112device		snd_cs4281
2113device		snd_csa
2114device		snd_ds1
2115device		snd_emu10k1
2116device		snd_emu10kx
2117device		snd_envy24
2118device		snd_envy24ht
2119device		snd_es137x
2120device		snd_ess
2121device		snd_fm801
2122device		snd_gusc
2123device		snd_hda
2124device		snd_hdspe
2125device		snd_ich
2126device		snd_maestro
2127device		snd_maestro3
2128device		snd_mss
2129device		snd_neomagic
2130device		snd_sb16
2131device		snd_sb8
2132device		snd_sbc
2133device		snd_solo
2134device		snd_spicds
2135device		snd_t4dwave
2136device		snd_uaudio
2137device		snd_via8233
2138device		snd_via82c686
2139device		snd_vibes
2140
2141# For non-PnP sound cards:
2142hint.pcm.0.at="isa"
2143hint.pcm.0.irq="10"
2144hint.pcm.0.drq="1"
2145hint.pcm.0.flags="0x0"
2146hint.sbc.0.at="isa"
2147hint.sbc.0.port="0x220"
2148hint.sbc.0.irq="5"
2149hint.sbc.0.drq="1"
2150hint.sbc.0.flags="0x15"
2151hint.gusc.0.at="isa"
2152hint.gusc.0.port="0x220"
2153hint.gusc.0.irq="5"
2154hint.gusc.0.drq="1"
2155hint.gusc.0.flags="0x13"
2156
2157#
2158# Following options are intended for debugging/testing purposes:
2159#
2160# SND_DEBUG                    Enable extra debugging code that includes
2161#                              sanity checking and possible increase of
2162#                              verbosity.
2163#
2164# SND_DIAGNOSTIC               Similar in a spirit of INVARIANTS/DIAGNOSTIC,
2165#                              zero tolerance against inconsistencies.
2166#
2167# SND_FEEDER_MULTIFORMAT       By default, only 16/32 bit feeders are compiled
2168#                              in. This options enable most feeder converters
2169#                              except for 8bit. WARNING: May bloat the kernel.
2170#
2171# SND_FEEDER_FULL_MULTIFORMAT  Ditto, but includes 8bit feeders as well.
2172#
2173# SND_FEEDER_RATE_HP           (feeder_rate) High precision 64bit arithmetic
2174#                              as much as possible (the default trying to
2175#                              avoid it). Possible slowdown.
2176#
2177# SND_PCM_64                   (Only applicable for i386/32bit arch)
2178#                              Process 32bit samples through 64bit
2179#                              integer/arithmetic. Slight increase of dynamic
2180#                              range at a cost of possible slowdown.
2181#
2182# SND_OLDSTEREO                Only 2 channels are allowed, effectively
2183#                              disabling multichannel processing.
2184#
2185options		SND_DEBUG
2186options		SND_DIAGNOSTIC
2187options		SND_FEEDER_MULTIFORMAT
2188options		SND_FEEDER_FULL_MULTIFORMAT
2189options		SND_FEEDER_RATE_HP
2190options		SND_PCM_64
2191options		SND_OLDSTEREO
2192
2193#
2194# Miscellaneous hardware:
2195#
2196# cmx: OmniKey CardMan 4040 pccard smartcard reader
2197
2198device		cmx
2199
2200#
2201# PC Card/PCMCIA and Cardbus
2202#
2203# cbb: pci/cardbus bridge implementing YENTA interface
2204# pccard: pccard slots
2205# cardbus: cardbus slots
2206device		cbb
2207device		pccard
2208device		cardbus
2209
2210#
2211# MMC/SD
2212#
2213# mmc 		MMC/SD bus
2214# mmcsd		MMC/SD memory card
2215# sdhci		Generic PCI SD Host Controller
2216#
2217device		mmc
2218device		mmcsd
2219device		sdhci
2220
2221#
2222# SMB bus
2223#
2224# System Management Bus support is provided by the 'smbus' device.
2225# Access to the SMBus device is via the 'smb' device (/dev/smb*),
2226# which is a child of the 'smbus' device.
2227#
2228# Supported devices:
2229# smb		standard I/O through /dev/smb*
2230#
2231# Supported SMB interfaces:
2232# iicsmb	I2C to SMB bridge with any iicbus interface
2233# intpm		Intel PIIX4 (82371AB, 82443MX) Power Management Unit
2234# alpm		Acer Aladdin-IV/V/Pro2 Power Management Unit
2235# ichsmb	Intel ICH SMBus controller chips (82801AA, 82801AB, 82801BA)
2236# viapm		VIA VT82C586B/596B/686A and VT8233 Power Management Unit
2237# amdpm		AMD 756 Power Management Unit
2238# amdsmb	AMD 8111 SMBus 2.0 Controller
2239# nfpm		NVIDIA nForce Power Management Unit
2240# nfsmb		NVIDIA nForce2/3/4 MCP SMBus 2.0 Controller
2241# ismt		Intel SMBus 2.0 controller chips (on Atom S1200, C2000)
2242#
2243device		smbus		# Bus support, required for smb below.
2244
2245device		intpm
2246device		alpm
2247device		ichsmb
2248device		viapm
2249device		amdpm
2250device		amdsmb
2251device		nfpm
2252device		nfsmb
2253device		ismt
2254
2255device		smb
2256
2257# SMBus peripheral devices
2258#
2259# jedec_dimm	Asset and temperature reporting for DDR3 and DDR4 DIMMs
2260#
2261device		jedec_dimm
2262
2263# I2C Bus
2264#
2265# Philips i2c bus support is provided by the `iicbus' device.
2266#
2267# Supported devices:
2268# ic	i2c network interface
2269# iic	i2c standard io
2270# iicsmb i2c to smb bridge. Allow i2c i/o with smb commands.
2271# iicoc simple polling driver for OpenCores I2C controller
2272#
2273# Other:
2274# iicbb	generic I2C bit-banging code (needed by lpbb)
2275#
2276device		iicbus		# Bus support, required for ic/iic/iicsmb below.
2277device		iicbb		# bitbang driver; implements i2c on a pair of gpio pins
2278
2279device		ic
2280device		iic		# userland access to i2c slave devices via ioctl(8)
2281device		iicsmb		# smb over i2c bridge
2282device		iicoc		# OpenCores I2C controller support
2283
2284# I2C bus multiplexer (mux) devices
2285device		iicmux		# i2c mux core driver
2286device		iic_gpiomux	# i2c mux hardware controlled via gpio pins
2287device		ltc430x		# LTC4305 and LTC4306 i2c mux chips
2288
2289# I2C peripheral devices
2290#
2291device		ad7418		# Analog Devices temp and voltage sensor
2292device		ads111x		# Texas Instruments ADS101x and ADS111x ADCs
2293device		ds1307		# Dallas DS1307 RTC and compatible
2294device		ds13rtc		# All Dallas/Maxim ds13xx chips
2295device		ds1672		# Dallas DS1672 RTC
2296device		ds3231		# Dallas DS3231 RTC + temperature
2297device		icee		# AT24Cxxx and compatible EEPROMs
2298device		isl12xx		# Intersil ISL12xx RTC
2299device		lm75		# LM75 compatible temperature sensor
2300device		nxprtc		# NXP RTCs: PCA/PFC212x PCA/PCF85xx
2301device		rtc8583		# Epson RTC-8583
2302device		s35390a		# Seiko Instruments S-35390A RTC
2303device		sy8106a		# Silergy Corp. SY8106A buck regulator
2304device		syr827		# Silergy Corp. DC/DC regulator
2305
2306# Parallel-Port Bus
2307#
2308# Parallel port bus support is provided by the `ppbus' device.
2309# Multiple devices may be attached to the parallel port, devices
2310# are automatically probed and attached when found.
2311#
2312# Supported devices:
2313# lpt	Parallel Printer
2314# plip	Parallel network interface
2315# ppi	General-purpose I/O ("Geek Port") + IEEE1284 I/O
2316# pps	Pulse per second Timing Interface
2317# lpbb	Philips official parallel port I2C bit-banging interface
2318# pcfclock Parallel port clock driver.
2319#
2320# Supported interfaces:
2321# ppc	ISA-bus parallel port interfaces.
2322#
2323
2324options 	PPC_PROBE_CHIPSET # Enable chipset specific detection
2325				  # (see flags in ppc(4))
2326options 	DEBUG_1284	# IEEE1284 signaling protocol debug
2327options 	PERIPH_1284	# Makes your computer act as an IEEE1284
2328				# compliant peripheral
2329options 	DONTPROBE_1284	# Avoid boot detection of PnP parallel devices
2330options 	LPT_DEBUG	# Printer driver debug
2331options 	PPC_DEBUG	# Parallel chipset level debug
2332options 	PLIP_DEBUG	# Parallel network IP interface debug
2333options 	PCFCLOCK_VERBOSE         # Verbose pcfclock driver
2334options 	PCFCLOCK_MAX_RETRIES=5   # Maximum read tries (default 10)
2335
2336device		ppc
2337hint.ppc.0.at="isa"
2338hint.ppc.0.irq="7"
2339device		ppbus
2340device		lpt
2341device		plip
2342device		ppi
2343device		pps
2344device		lpbb
2345device		pcfclock
2346
2347# General Purpose I/O pins
2348device		dwgpio		# Synopsys DesignWare APB GPIO Controller
2349device  	gpio		# gpio interfaces and bus support
2350device  	gpiobacklight	# sysctl control of gpio-based backlight
2351device  	gpioiic		# i2c via gpio bitbang
2352device  	gpiokeys	# kbd(4) glue for gpio-based key input
2353device  	gpioled		# led(4) gpio glue
2354device  	gpiopower	# event handler for gpio-based powerdown
2355device  	gpiopps		# Pulse per second input from gpio pin
2356device  	gpioregulator	# extres/regulator glue for gpio pin
2357device  	gpiospi		# SPI via gpio bitbang
2358device  	gpioths		# 1-wire temp/humidity sensor on gpio pin
2359
2360# Pulse width modulation
2361device  	pwmbus		# pwm interface and bus support
2362device  	pwmc		# userland control access to pwm outputs
2363
2364#
2365# Etherswitch framework and drivers
2366#
2367# etherswitch	The etherswitch(4) framework
2368# miiproxy	Proxy device for miibus(4) functionality
2369#
2370# Switch hardware support:
2371# arswitch	Atheros switches
2372# ip17x 	IC+ 17x family switches
2373# rtl8366r	Realtek RTL8366 switches
2374# ukswitch	Multi-PHY switches
2375#
2376device		etherswitch
2377device		miiproxy
2378device		arswitch
2379device		ip17x
2380device		rtl8366rb
2381device		ukswitch
2382
2383# Kernel BOOTP support
2384
2385options 	BOOTP		# Use BOOTP to obtain IP address/hostname
2386				# Requires NFSCL and NFS_ROOT
2387options 	BOOTP_NFSROOT	# NFS mount root filesystem using BOOTP info
2388options 	BOOTP_NFSV3	# Use NFS v3 to NFS mount root
2389options 	BOOTP_COMPAT	# Workaround for broken bootp daemons.
2390options 	BOOTP_WIRED_TO=fxp0 # Use interface fxp0 for BOOTP
2391options 	BOOTP_BLOCKSIZE=8192 # Override NFS block size
2392
2393#
2394# Enable software watchdog routines, even if hardware watchdog is present.
2395# By default, software watchdog timer is enabled only if no hardware watchdog
2396# is present.
2397#
2398options 	SW_WATCHDOG
2399
2400#
2401# Add the software deadlock resolver thread.
2402#
2403options 	DEADLKRES
2404
2405#
2406# Disable swapping of stack pages.  This option removes all
2407# code which actually performs swapping, so it's not possible to turn
2408# it back on at run-time.
2409#
2410# This is sometimes usable for systems which don't have any swap space
2411# (see also sysctl "vm.disable_swapspace_pageouts")
2412#
2413#options 	NO_SWAPPING
2414
2415# Set the number of sf_bufs to allocate. sf_bufs are virtual buffers
2416# for sendfile(2) that are used to map file VM pages, and normally
2417# default to a quantity that is roughly 16*MAXUSERS+512. You would
2418# typically want about 4 of these for each simultaneous file send.
2419#
2420options 	NSFBUFS=1024
2421
2422#
2423# Enable extra debugging code for locks.  This stores the filename and
2424# line of whatever acquired the lock in the lock itself, and changes a
2425# number of function calls to pass around the relevant data.  This is
2426# not at all useful unless you are debugging lock code.  Note that
2427# modules should be recompiled as this option modifies KBI.
2428#
2429options 	DEBUG_LOCKS
2430
2431
2432#####################################################################
2433# USB support
2434# UHCI controller
2435device		uhci
2436# OHCI controller
2437device		ohci
2438# EHCI controller
2439device		ehci
2440# XHCI controller
2441device		xhci
2442# SL811 Controller
2443#device		slhci
2444# General USB code (mandatory for USB)
2445device		usb
2446#
2447# USB Double Bulk Pipe devices
2448device		udbp
2449# USB Fm Radio
2450device		ufm
2451# USB temperature meter
2452device		ugold
2453# USB LED
2454device		uled
2455# Human Interface Device (anything with buttons and dials)
2456device		uhid
2457# USB keyboard
2458device		ukbd
2459# USB printer
2460device		ulpt
2461# USB mass storage driver (Requires scbus and da)
2462device		umass
2463# USB mass storage driver for device-side mode
2464device		usfs
2465# USB support for Belkin F5U109 and Magic Control Technology serial adapters
2466device		umct
2467# USB modem support
2468device		umodem
2469# USB mouse
2470device		ums
2471# USB touchpad(s)
2472device		atp
2473device		wsp
2474# eGalax USB touch screen
2475device		uep
2476# Diamond Rio 500 MP3 player
2477device		urio
2478#
2479# USB serial support
2480device		ucom
2481# USB support for 3G modem cards by Option, Novatel, Huawei and Sierra
2482device		u3g
2483# USB support for Technologies ARK3116 based serial adapters
2484device		uark
2485# USB support for Belkin F5U103 and compatible serial adapters
2486device		ubsa
2487# USB support for serial adapters based on the FT8U100AX and FT8U232AM
2488device		uftdi
2489# USB support for some Windows CE based serial communication.
2490device		uipaq
2491# USB support for Prolific PL-2303 serial adapters
2492device		uplcom
2493# USB support for Silicon Laboratories CP2101/CP2102 based USB serial adapters
2494device		uslcom
2495# USB Visor and Palm devices
2496device		uvisor
2497# USB serial support for DDI pocket's PHS
2498device		uvscom
2499#
2500# USB ethernet support
2501device		uether
2502# ADMtek USB ethernet. Supports the LinkSys USB100TX,
2503# the Billionton USB100, the Melco LU-ATX, the D-Link DSB-650TX
2504# and the SMC 2202USB. Also works with the ADMtek AN986 Pegasus
2505# eval board.
2506device		aue
2507
2508# ASIX Electronics AX88172 USB 2.0 ethernet driver. Used in the
2509# LinkSys USB200M and various other adapters.
2510device		axe
2511# ASIX Electronics AX88178A/AX88179 USB 2.0/3.0 gigabit ethernet driver.
2512device		axge
2513
2514#
2515# Devices which communicate using Ethernet over USB, particularly
2516# Communication Device Class (CDC) Ethernet specification. Supports
2517# Sharp Zaurus PDAs, some DOCSIS cable modems and so on.
2518device		cdce
2519#
2520# CATC USB-EL1201A USB ethernet. Supports the CATC Netmate
2521# and Netmate II, and the Belkin F5U111.
2522device		cue
2523#
2524# Kawasaki LSI ethernet. Supports the LinkSys USB10T,
2525# Entrega USB-NET-E45, Peracom Ethernet Adapter, the
2526# 3Com 3c19250, the ADS Technologies USB-10BT, the ATen UC10T,
2527# the Netgear EA101, the D-Link DSB-650, the SMC 2102USB
2528# and 2104USB, and the Corega USB-T.
2529device		kue
2530#
2531# RealTek RTL8150 USB to fast ethernet. Supports the Melco LUA-KTX
2532# and the GREEN HOUSE GH-USB100B.
2533device		rue
2534#
2535# Davicom DM9601E USB to fast ethernet. Supports the Corega FEther USB-TXC.
2536device		udav
2537#
2538# RealTek RTL8152/RTL8153 USB Ethernet driver
2539device		ure
2540#
2541# Moschip MCS7730/MCS7840 USB to fast ethernet. Supports the Sitecom LN030.
2542device		mos
2543#
2544# HSxPA devices from Option N.V
2545device		uhso
2546
2547# Realtek RTL8188SU/RTL8191SU/RTL8192SU wireless driver
2548device		rsu
2549#
2550# Ralink Technology RT2501USB/RT2601USB wireless driver
2551device		rum
2552# Ralink Technology RT2700U/RT2800U/RT3000U wireless driver
2553device		run
2554#
2555# Atheros AR5523 wireless driver
2556device		uath
2557#
2558# Conexant/Intersil PrismGT wireless driver
2559device		upgt
2560#
2561# Ralink Technology RT2500USB wireless driver
2562device		ural
2563#
2564# RNDIS USB ethernet driver
2565device		urndis
2566# Realtek RTL8187B/L wireless driver
2567device		urtw
2568#
2569# ZyDas ZD1211/ZD1211B wireless driver
2570device		zyd
2571#
2572# Sierra USB wireless driver
2573device		usie
2574
2575#
2576# debugging options for the USB subsystem
2577#
2578options 	USB_DEBUG
2579options 	U3G_DEBUG
2580
2581# options for ukbd:
2582options 	UKBD_DFLT_KEYMAP	# specify the built-in keymap
2583makeoptions	UKBD_DFLT_KEYMAP=jp.106
2584
2585# options for uplcom:
2586options 	UPLCOM_INTR_INTERVAL=100	# interrupt pipe interval
2587						# in milliseconds
2588
2589# options for uvscom:
2590options 	UVSCOM_DEFAULT_OPKTSIZE=8	# default output packet size
2591options 	UVSCOM_INTR_INTERVAL=100	# interrupt pipe interval
2592						# in milliseconds
2593
2594#####################################################################
2595# FireWire support
2596
2597device		firewire	# FireWire bus code
2598device		sbp		# SCSI over Firewire (Requires scbus and da)
2599device		sbp_targ	# SBP-2 Target mode  (Requires scbus and targ)
2600device		fwe		# Ethernet over FireWire (non-standard!)
2601device		fwip		# IP over FireWire (RFC2734 and RFC3146)
2602
2603#####################################################################
2604# dcons support (Dumb Console Device)
2605
2606device		dcons			# dumb console driver
2607device		dcons_crom		# FireWire attachment
2608options 	DCONS_BUF_SIZE=16384	# buffer size
2609options 	DCONS_POLL_HZ=100	# polling rate
2610options 	DCONS_FORCE_CONSOLE=0	# force to be the primary console
2611options 	DCONS_FORCE_GDB=1	# force to be the gdb device
2612
2613#####################################################################
2614# crypto subsystem
2615#
2616# This is a port of the OpenBSD crypto framework.  Include this when
2617# configuring IPSEC and when you have a h/w crypto device to accelerate
2618# user applications that link to OpenSSL.
2619#
2620# Drivers are ports from OpenBSD with some simple enhancements that have
2621# been fed back to OpenBSD.
2622
2623device		crypto		# core crypto support
2624
2625# Only install the cryptodev device if you are running tests, or know
2626# specifically why you need it.  In most cases, it is not needed and
2627# will make things slower.
2628device		cryptodev	# /dev/crypto for access to h/w
2629
2630device		rndtest		# FIPS 140-2 entropy tester
2631
2632device		ccr		# Chelsio T6
2633
2634device		hifn		# Hifn 7951, 7781, etc.
2635options 	HIFN_DEBUG	# enable debugging support: hw.hifn.debug
2636options 	HIFN_RNDTEST	# enable rndtest support
2637
2638#####################################################################
2639
2640
2641#
2642# Embedded system options:
2643#
2644# An embedded system might want to run something other than init.
2645options 	INIT_PATH=/sbin/init:/rescue/init
2646
2647# Debug options
2648options 	BUS_DEBUG	# enable newbus debugging
2649options 	DEBUG_VFS_LOCKS	# enable VFS lock debugging
2650options 	SOCKBUF_DEBUG	# enable sockbuf last record/mb tail checking
2651options 	IFMEDIA_DEBUG	# enable debugging in net/if_media.c
2652
2653#
2654# Verbose SYSINIT
2655#
2656# Make the SYSINIT process performed by mi_startup() verbose.  This is very
2657# useful when porting to a new architecture.  If DDB is also enabled, this
2658# will print function names instead of addresses.  If defined with a value
2659# of zero, the verbose code is compiled-in but disabled by default, and can
2660# be enabled with the debug.verbose_sysinit=1 tunable.
2661options 	VERBOSE_SYSINIT
2662
2663#####################################################################
2664# SYSV IPC KERNEL PARAMETERS
2665#
2666# Maximum number of System V semaphores that can be used on the system at
2667# one time.
2668options 	SEMMNI=11
2669
2670# Total number of semaphores system wide
2671options 	SEMMNS=61
2672
2673# Total number of undo structures in system
2674options 	SEMMNU=31
2675
2676# Maximum number of System V semaphores that can be used by a single process
2677# at one time.
2678options 	SEMMSL=61
2679
2680# Maximum number of operations that can be outstanding on a single System V
2681# semaphore at one time.
2682options 	SEMOPM=101
2683
2684# Maximum number of undo operations that can be outstanding on a single
2685# System V semaphore at one time.
2686options 	SEMUME=11
2687
2688# Maximum number of shared memory pages system wide.
2689options 	SHMALL=1025
2690
2691# Maximum size, in bytes, of a single System V shared memory region.
2692options 	SHMMAX=(SHMMAXPGS*PAGE_SIZE+1)
2693options 	SHMMAXPGS=1025
2694
2695# Minimum size, in bytes, of a single System V shared memory region.
2696options 	SHMMIN=2
2697
2698# Maximum number of shared memory regions that can be used on the system
2699# at one time.
2700options 	SHMMNI=33
2701
2702# Maximum number of System V shared memory regions that can be attached to
2703# a single process at one time.
2704options 	SHMSEG=9
2705
2706# Set the amount of time (in seconds) the system will wait before
2707# rebooting automatically when a kernel panic occurs.  If set to (-1),
2708# the system will wait indefinitely until a key is pressed on the
2709# console.
2710options 	PANIC_REBOOT_WAIT_TIME=16
2711
2712# Attempt to bypass the buffer cache and put data directly into the
2713# userland buffer for read operation when O_DIRECT flag is set on the
2714# file.  Both offset and length of the read operation must be
2715# multiples of the physical media sector size.
2716#
2717options 	DIRECTIO
2718
2719# Specify a lower limit for the number of swap I/O buffers.  They are
2720# (among other things) used when bypassing the buffer cache due to
2721# DIRECTIO kernel option enabled and O_DIRECT flag set on file.
2722#
2723options 	NSWBUF_MIN=120
2724
2725#####################################################################
2726
2727# More undocumented options for linting.
2728# Note that documenting these is not considered an affront.
2729
2730options 	CAM_DEBUG_DELAY
2731
2732# VFS cluster debugging.
2733options 	CLUSTERDEBUG
2734
2735options 	DEBUG
2736
2737# Kernel filelock debugging.
2738options 	LOCKF_DEBUG
2739
2740# System V compatible message queues
2741# Please note that the values provided here are used to test kernel
2742# building.  The defaults in the sources provide almost the same numbers.
2743# MSGSSZ must be a power of 2 between 8 and 1024.
2744options 	MSGMNB=2049	# Max number of chars in queue
2745options 	MSGMNI=41	# Max number of message queue identifiers
2746options 	MSGSEG=2049	# Max number of message segments
2747options 	MSGSSZ=16	# Size of a message segment
2748options 	MSGTQL=41	# Max number of messages in system
2749
2750options 	NBUF=512	# Number of buffer headers
2751
2752options 	SC_DEBUG_LEVEL=5	# Syscons debug level
2753options 	SC_RENDER_DEBUG	# syscons rendering debugging
2754
2755options 	VFS_BIO_DEBUG	# VFS buffer I/O debugging
2756
2757options 	KSTACK_MAX_PAGES=32 # Maximum pages to give the kernel stack
2758options 	KSTACK_USAGE_PROF
2759
2760# Adaptec Array Controller driver options
2761options 	AAC_DEBUG	# Debugging levels:
2762				# 0 - quiet, only emit warnings
2763				# 1 - noisy, emit major function
2764				#     points and things done
2765				# 2 - extremely noisy, emit trace
2766				#     items in loops, etc.
2767
2768# Resource Accounting
2769options 	RACCT
2770
2771# Resource Limits
2772options 	RCTL
2773
2774# Yet more undocumented options for linting.
2775options 	MAXFILES=999
2776
2777# Random number generator
2778# Allow the CSPRNG algorithm to be loaded as a module.
2779#options 	RANDOM_LOADABLE
2780# Select this to allow high-rate but potentially expensive
2781# harvesting of Slab-Allocator entropy. In very high-rate
2782# situations the value of doing this is dubious at best.
2783options 	RANDOM_ENABLE_UMA	# slab allocator
2784
2785# Select this to allow high-rate but potentially expensive
2786# harvesting of of the m_next pointer in the mbuf. Note that
2787# the m_next pointer is NULL except when receiving > 4K
2788# jumbo frames or sustained bursts by way of LRO. Thus in
2789# the common case it is stirring zero in to the entropy
2790# pool. In cases where it is not NULL it is pointing to one
2791# of a small (in the thousands to 10s of thousands) number
2792# of 256 byte aligned mbufs. Hence it is, even in the best
2793# case, a poor source of entropy. And in the absence of actual
2794# runtime analysis of entropy collection may mislead the user in
2795# to believe that substantially more entropy is being collected
2796# than in fact is - leading to a different class of security
2797# risk. In high packet rate situations ethernet entropy
2798# collection is also very expensive, possibly leading to as
2799# much as a 50% drop in packets received.
2800# This option is present to maintain backwards compatibility
2801# if desired, however it cannot be recommended for use in any
2802# environment.
2803options 	RANDOM_ENABLE_ETHER	# ether_input
2804
2805# Module to enable execution of application via emulators like QEMU
2806options         IMAGACT_BINMISC
2807
2808# zlib I/O stream support
2809# This enables support for compressed core dumps.
2810options 	GZIO
2811
2812# zstd support
2813# This enables support for Zstd compressed core dumps and GEOM_UZIP images.
2814options 	ZSTDIO
2815
2816# BHND(4) drivers
2817options		BHND_LOGLEVEL	# Logging threshold level
2818
2819# evdev interface
2820device		evdev		# input event device support
2821options 	EVDEV_SUPPORT	# evdev support in legacy drivers
2822options 	EVDEV_DEBUG	# enable event debug msgs
2823device		uinput		# install /dev/uinput cdev
2824options 	UINPUT_DEBUG	# enable uinput debug msgs
2825
2826# Encrypted kernel crash dumps.
2827options 	EKCD
2828
2829# Serial Peripheral Interface (SPI) support.
2830device		spibus		# Bus support.
2831device		at45d		# DataFlash driver
2832device		cqspi		#
2833device		mx25l		# SPIFlash driver
2834device		n25q		#
2835device		spigen		# Generic access to SPI devices from userland.
2836# Enable legacy /dev/spigenN name aliases for /dev/spigenX.Y devices.
2837options 	SPIGEN_LEGACY_CDEVNAME # legacy device names for spigen
2838
2839# Compression supports.
2840device		zlib		# gzip/zlib compression/decompression library
2841device		xz		# xz_embedded LZMA de-compression library
2842
2843# Kernel support for stats(3).
2844options 	STATS
2845