xref: /freebsd/sys/conf/NOTES (revision 7259ca31048e5ced8e7f90657a3d7084aeafdf51)
1# $FreeBSD$
2#
3# NOTES -- Lines that can be cut/pasted into kernel and hints configs.
4#
5# Lines that begin with 'device', 'options', 'machine', 'ident', 'maxusers',
6# 'makeoptions', 'hints', etc. go into the kernel configuration that you
7# run config(8) with.
8#
9# Lines that begin with 'envvar hint.' should go into your hints file.
10# See /boot/device.hints and/or the 'hints' config(8) directive.
11#
12# Please use ``make LINT'' to create an old-style LINT file if you want to
13# do kernel test-builds.
14#
15# This file contains machine independent kernel configuration notes.  For
16# machine dependent notes, look in /sys/<arch>/conf/NOTES.
17#
18
19#
20# NOTES conventions and style guide:
21#
22# Large block comments should begin and end with a line containing only a
23# comment character.
24#
25# To describe a particular object, a block comment (if it exists) should
26# come first.  Next should come device, options, and hints lines in that
27# order.  All device and option lines must be described by a comment that
28# doesn't just expand the device or option name.  Use only a concise
29# comment on the same line if possible.  Very detailed descriptions of
30# devices and subsystems belong in man pages.
31#
32# A space followed by a tab separates 'options' from an option name.  Two
33# spaces followed by a tab separate 'device' from a device name.  Comments
34# after an option or device should use one space after the comment character.
35# To comment out a negative option that disables code and thus should not be
36# enabled for LINT builds, precede 'options' with "#!".
37#
38
39#
40# This is the ``identification'' of the kernel.  Usually this should
41# be the same as the name of your kernel.
42#
43ident		LINT
44
45#
46# The `maxusers' parameter controls the static sizing of a number of
47# internal system tables by a formula defined in subr_param.c.
48# Omitting this parameter or setting it to 0 will cause the system to
49# auto-size based on physical memory.
50#
51maxusers	10
52
53# To statically compile in device wiring instead of /boot/device.hints
54#hints		"LINT.hints"		# Default places to look for devices.
55
56# Use the following to compile in values accessible to the kernel
57# through getenv() (or kenv(1) in userland). The format of the file
58# is 'variable=value', see kenv(1)
59#
60#env		"LINT.env"
61
62#
63# The `makeoptions' parameter allows variables to be passed to the
64# generated Makefile in the build area.
65#
66# CONF_CFLAGS gives some extra compiler flags that are added to ${CFLAGS}
67# after most other flags.  Here we use it to inhibit use of non-optimal
68# gcc built-in functions (e.g., memcmp).
69#
70# DEBUG happens to be magic.
71# The following is equivalent to 'config -g KERNELNAME' and creates
72# 'kernel.debug' compiled with -g debugging as well as a normal
73# 'kernel'.  Use 'make install.debug' to install the debug kernel
74# but that isn't normally necessary as the debug symbols are not loaded
75# by the kernel and are not useful there anyway.
76#
77# KERNEL can be overridden so that you can change the default name of your
78# kernel.
79#
80# MODULES_OVERRIDE can be used to limit modules built to a specific list.
81#
82makeoptions	CONF_CFLAGS=-fno-builtin  #Don't allow use of memcmp, etc.
83#makeoptions	DEBUG=-g		#Build kernel with gdb(1) debug symbols
84#makeoptions	KERNEL=foo		#Build kernel "foo" and install "/foo"
85# Only build ext2fs module plus those parts of the sound system I need.
86#makeoptions	MODULES_OVERRIDE="ext2fs sound/sound sound/driver/maestro3"
87makeoptions	DESTDIR=/tmp
88
89#
90# FreeBSD processes are subject to certain limits to their consumption
91# of system resources.  See getrlimit(2) for more details.  Each
92# resource limit has two values, a "soft" limit and a "hard" limit.
93# The soft limits can be modified during normal system operation, but
94# the hard limits are set at boot time.  Their default values are
95# in sys/<arch>/include/vmparam.h.  There are two ways to change them:
96#
97# 1.  Set the values at kernel build time.  The options below are one
98#     way to allow that limit to grow to 1GB.  They can be increased
99#     further by changing the parameters:
100#
101# 2.  In /boot/loader.conf, set the tunables kern.maxswzone,
102#     kern.maxbcache, kern.maxtsiz, kern.dfldsiz, kern.maxdsiz,
103#     kern.dflssiz, kern.maxssiz and kern.sgrowsiz.
104#
105# The options in /boot/loader.conf override anything in the kernel
106# configuration file.  See the function init_param1 in
107# sys/kern/subr_param.c for more details.
108#
109
110options 	MAXDSIZ=(1024UL*1024*1024)
111options 	MAXSSIZ=(128UL*1024*1024)
112options 	DFLDSIZ=(1024UL*1024*1024)
113
114#
115# BLKDEV_IOSIZE sets the default block size used in user block
116# device I/O.  Note that this value will be overridden by the label
117# when specifying a block device from a label with a non-0
118# partition blocksize.  The default is PAGE_SIZE.
119#
120options 	BLKDEV_IOSIZE=8192
121
122#
123# MAXPHYS and DFLTPHYS
124#
125# These are the maximal and safe 'raw' I/O block device access sizes.
126# Reads and writes will be split into MAXPHYS chunks for known good
127# devices and DFLTPHYS for the rest. Some applications have better
128# performance with larger raw I/O access sizes. Note that certain VM
129# parameters are derived from these values and making them too large
130# can make an unbootable kernel.
131#
132# The defaults are 64K and 128K respectively.
133options 	DFLTPHYS=(64*1024)
134options 	MAXPHYS=(128*1024)
135
136
137# This allows you to actually store this configuration file into
138# the kernel binary itself. See config(8) for more details.
139#
140options 	INCLUDE_CONFIG_FILE     # Include this file in kernel
141
142#
143# Compile-time defaults for various boot parameters
144#
145options 	BOOTVERBOSE=1
146options 	BOOTHOWTO=RB_MULTIPLE
147
148#
149# Compile-time defaults for dmesg boot tagging
150#
151# Default boot tag; may use 'kern.boot_tag' loader tunable to override.  The
152# current boot's tag is also exposed via the 'kern.boot_tag' sysctl.
153options 	BOOT_TAG=\"\"
154# Maximum boot tag size the kernel's static buffer should accomodate.  Maximum
155# size for both BOOT_TAG and the assocated tunable.
156options 	BOOT_TAG_SZ=32
157
158options 	GEOM_BDE		# Disk encryption.
159options 	GEOM_CACHE		# Disk cache.
160options 	GEOM_CONCAT		# Disk concatenation.
161options 	GEOM_ELI		# Disk encryption.
162options 	GEOM_GATE		# Userland services.
163options 	GEOM_JOURNAL		# Journaling.
164options 	GEOM_LABEL		# Providers labelization.
165options 	GEOM_LINUX_LVM		# Linux LVM2 volumes
166options 	GEOM_MAP		# Map based partitioning
167options 	GEOM_MIRROR		# Disk mirroring.
168options 	GEOM_MULTIPATH		# Disk multipath
169options 	GEOM_NOP		# Test class.
170options 	GEOM_PART_APM		# Apple partitioning
171options 	GEOM_PART_BSD		# BSD disklabel
172options 	GEOM_PART_BSD64		# BSD disklabel64
173options 	GEOM_PART_EBR		# Extended Boot Records
174options 	GEOM_PART_GPT		# GPT partitioning
175options 	GEOM_PART_LDM		# Logical Disk Manager
176options 	GEOM_PART_MBR		# MBR partitioning
177options 	GEOM_PART_VTOC8		# SMI VTOC8 disk label
178options 	GEOM_RAID		# Soft RAID functionality.
179options 	GEOM_RAID3		# RAID3 functionality.
180options 	GEOM_SHSEC		# Shared secret.
181options 	GEOM_STRIPE		# Disk striping.
182options 	GEOM_UZIP		# Read-only compressed disks
183options 	GEOM_VINUM		# Vinum logical volume manager
184options 	GEOM_VIRSTOR		# Virtual storage.
185options 	GEOM_ZERO		# Performance testing helper.
186
187#
188# The root device and filesystem type can be compiled in;
189# this provides a fallback option if the root device cannot
190# be correctly guessed by the bootstrap code, or an override if
191# the RB_DFLTROOT flag (-r) is specified when booting the kernel.
192#
193options 	ROOTDEVNAME=\"ufs:da0s2e\"
194
195
196#####################################################################
197# Scheduler options:
198#
199# Specifying one of SCHED_4BSD or SCHED_ULE is mandatory.  These options
200# select which scheduler is compiled in.
201#
202# SCHED_4BSD is the historical, proven, BSD scheduler.  It has a global run
203# queue and no CPU affinity which makes it suboptimal for SMP.  It has very
204# good interactivity and priority selection.
205#
206# SCHED_ULE provides significant performance advantages over 4BSD on many
207# workloads on SMP machines.  It supports cpu-affinity, per-cpu runqueues
208# and scheduler locks.  It also has a stronger notion of interactivity
209# which leads to better responsiveness even on uniprocessor machines.  This
210# is the default scheduler.
211#
212# SCHED_STATS is a debugging option which keeps some stats in the sysctl
213# tree at 'kern.sched.stats' and is useful for debugging scheduling decisions.
214#
215options 	SCHED_4BSD
216options 	SCHED_STATS
217#options 	SCHED_ULE
218
219#####################################################################
220# SMP OPTIONS:
221#
222# SMP enables building of a Symmetric MultiProcessor Kernel.
223
224# Mandatory:
225options 	SMP			# Symmetric MultiProcessor Kernel
226
227# EARLY_AP_STARTUP releases the Application Processors earlier in the
228# kernel startup process (before devices are probed) rather than at the
229# end.  This is a temporary option for use during the transition from
230# late to early AP startup.
231options		EARLY_AP_STARTUP
232
233# MAXCPU defines the maximum number of CPUs that can boot in the system.
234# A default value should be already present, for every architecture.
235options 	MAXCPU=32
236
237# NUMA enables use of Non-Uniform Memory Access policies in various kernel
238# subsystems.
239options 	NUMA
240
241# MAXMEMDOM defines the maximum number of memory domains that can boot in the
242# system.  A default value should already be defined by every architecture.
243options 	MAXMEMDOM=2
244
245# ADAPTIVE_MUTEXES changes the behavior of blocking mutexes to spin
246# if the thread that currently owns the mutex is executing on another
247# CPU.  This behavior is enabled by default, so this option can be used
248# to disable it.
249options 	NO_ADAPTIVE_MUTEXES
250
251# ADAPTIVE_RWLOCKS changes the behavior of reader/writer locks to spin
252# if the thread that currently owns the rwlock is executing on another
253# CPU.  This behavior is enabled by default, so this option can be used
254# to disable it.
255options 	NO_ADAPTIVE_RWLOCKS
256
257# ADAPTIVE_SX changes the behavior of sx locks to spin if the thread that
258# currently owns the sx lock is executing on another CPU.
259# This behavior is enabled by default, so this option can be used to
260# disable it.
261options 	NO_ADAPTIVE_SX
262
263# MUTEX_NOINLINE forces mutex operations to call functions to perform each
264# operation rather than inlining the simple cases.  This can be used to
265# shrink the size of the kernel text segment.  Note that this behavior is
266# already implied by the INVARIANT_SUPPORT, INVARIANTS, KTR, LOCK_PROFILING,
267# and WITNESS options.
268options 	MUTEX_NOINLINE
269
270# RWLOCK_NOINLINE forces rwlock operations to call functions to perform each
271# operation rather than inlining the simple cases.  This can be used to
272# shrink the size of the kernel text segment.  Note that this behavior is
273# already implied by the INVARIANT_SUPPORT, INVARIANTS, KTR, LOCK_PROFILING,
274# and WITNESS options.
275options 	RWLOCK_NOINLINE
276
277# SX_NOINLINE forces sx lock operations to call functions to perform each
278# operation rather than inlining the simple cases.  This can be used to
279# shrink the size of the kernel text segment.  Note that this behavior is
280# already implied by the INVARIANT_SUPPORT, INVARIANTS, KTR, LOCK_PROFILING,
281# and WITNESS options.
282options 	SX_NOINLINE
283
284# SMP Debugging Options:
285#
286# CALLOUT_PROFILING enables rudimentary profiling of the callwheel data
287#	  structure used as backend in callout(9).
288# PREEMPTION allows the threads that are in the kernel to be preempted by
289#	  higher priority [interrupt] threads.  It helps with interactivity
290#	  and allows interrupt threads to run sooner rather than waiting.
291#	  WARNING! Only tested on amd64 and i386.
292# FULL_PREEMPTION instructs the kernel to preempt non-realtime kernel
293#	  threads.  Its sole use is to expose race conditions and other
294#	  bugs during development.  Enabling this option will reduce
295#	  performance and increase the frequency of kernel panics by
296#	  design.  If you aren't sure that you need it then you don't.
297#	  Relies on the PREEMPTION option.  DON'T TURN THIS ON.
298# SLEEPQUEUE_PROFILING enables rudimentary profiling of the hash table
299#	  used to hold active sleep queues as well as sleep wait message
300#	  frequency.
301# TURNSTILE_PROFILING enables rudimentary profiling of the hash table
302#	  used to hold active lock queues.
303# UMTX_PROFILING enables rudimentary profiling of the hash table used
304#	  to hold active lock queues.
305# WITNESS enables the witness code which detects deadlocks and cycles
306#         during locking operations.
307# WITNESS_KDB causes the witness code to drop into the kernel debugger if
308#	  a lock hierarchy violation occurs or if locks are held when going to
309#	  sleep.
310# WITNESS_SKIPSPIN disables the witness checks on spin mutexes.
311options 	PREEMPTION
312options 	FULL_PREEMPTION
313options 	WITNESS
314options 	WITNESS_KDB
315options 	WITNESS_SKIPSPIN
316
317# LOCK_PROFILING - Profiling locks.  See LOCK_PROFILING(9) for details.
318options 	LOCK_PROFILING
319# Set the number of buffers and the hash size.  The hash size MUST be larger
320# than the number of buffers.  Hash size should be prime.
321options 	MPROF_BUFFERS="1536"
322options 	MPROF_HASH_SIZE="1543"
323
324# Profiling for the callout(9) backend.
325options 	CALLOUT_PROFILING
326
327# Profiling for internal hash tables.
328options 	SLEEPQUEUE_PROFILING
329options 	TURNSTILE_PROFILING
330options 	UMTX_PROFILING
331
332# Debugging traces for epoch(9) misuse
333options 	EPOCH_TRACE
334
335#####################################################################
336# COMPATIBILITY OPTIONS
337
338# Old tty interface.
339options 	COMPAT_43TTY
340
341# Note that as a general rule, COMPAT_FREEBSD<n> depends on
342# COMPAT_FREEBSD<n+1>, COMPAT_FREEBSD<n+2>, etc.
343
344# Enable FreeBSD4 compatibility syscalls
345options 	COMPAT_FREEBSD4
346
347# Enable FreeBSD5 compatibility syscalls
348options 	COMPAT_FREEBSD5
349
350# Enable FreeBSD6 compatibility syscalls
351options 	COMPAT_FREEBSD6
352
353# Enable FreeBSD7 compatibility syscalls
354options 	COMPAT_FREEBSD7
355
356# Enable FreeBSD9 compatibility syscalls
357options 	COMPAT_FREEBSD9
358
359# Enable FreeBSD10 compatibility syscalls
360options 	COMPAT_FREEBSD10
361
362# Enable FreeBSD11 compatibility syscalls
363options 	COMPAT_FREEBSD11
364
365# Enable FreeBSD12 compatibility syscalls
366options 	COMPAT_FREEBSD12
367
368# Enable Linux Kernel Programming Interface
369options 	COMPAT_LINUXKPI
370
371#
372# These three options provide support for System V Interface
373# Definition-style interprocess communication, in the form of shared
374# memory, semaphores, and message queues, respectively.
375#
376options 	SYSVSHM
377options 	SYSVSEM
378options 	SYSVMSG
379
380
381#####################################################################
382# DEBUGGING OPTIONS
383
384#
385# Compile with kernel debugger related code.
386#
387options 	KDB
388
389#
390# Print a stack trace of the current thread on the console for a panic.
391#
392options 	KDB_TRACE
393
394#
395# Don't enter the debugger for a panic. Intended for unattended operation
396# where you may want to enter the debugger from the console, but still want
397# the machine to recover from a panic.
398#
399options 	KDB_UNATTENDED
400
401#
402# Enable the ddb debugger backend.
403#
404options 	DDB
405
406#
407# Print the numerical value of symbols in addition to the symbolic
408# representation.
409#
410options 	DDB_NUMSYM
411
412#
413# Enable the remote gdb debugger backend.
414#
415options 	GDB
416
417#
418# Trashes list pointers when they become invalid (i.e., the element is
419# removed from a list).  Relatively inexpensive to enable.
420#
421options 	QUEUE_MACRO_DEBUG_TRASH
422
423#
424# Stores information about the last caller to modify the list object
425# in the list object.  Requires additional memory overhead.
426#
427#options 	QUEUE_MACRO_DEBUG_TRACE
428
429#
430# SYSCTL_DEBUG enables a 'sysctl' debug tree that can be used to dump the
431# contents of the registered sysctl nodes on the console.  It is disabled by
432# default because it generates excessively verbose console output that can
433# interfere with serial console operation.
434#
435options 	SYSCTL_DEBUG
436
437#
438# Enable textdump by default, this disables kernel core dumps.
439#
440options		TEXTDUMP_PREFERRED
441
442#
443# Enable extra debug messages while performing textdumps.
444#
445options		TEXTDUMP_VERBOSE
446
447#
448# NO_SYSCTL_DESCR omits the sysctl node descriptions to save space in the
449# resulting kernel.
450options		NO_SYSCTL_DESCR
451
452#
453# MALLOC_DEBUG_MAXZONES enables multiple uma zones for malloc(9)
454# allocations that are smaller than a page.  The purpose is to isolate
455# different malloc types into hash classes, so that any buffer
456# overruns or use-after-free will usually only affect memory from
457# malloc types in that hash class.  This is purely a debugging tool;
458# by varying the hash function and tracking which hash class was
459# corrupted, the intersection of the hash classes from each instance
460# will point to a single malloc type that is being misused.  At this
461# point inspection or memguard(9) can be used to catch the offending
462# code.
463#
464options 	MALLOC_DEBUG_MAXZONES=8
465
466#
467# DEBUG_MEMGUARD builds and enables memguard(9), a replacement allocator
468# for the kernel used to detect modify-after-free scenarios.  See the
469# memguard(9) man page for more information on usage.
470#
471options 	DEBUG_MEMGUARD
472
473#
474# DEBUG_REDZONE enables buffer underflows and buffer overflows detection for
475# malloc(9).
476#
477options 	DEBUG_REDZONE
478
479#
480# EARLY_PRINTF enables support for calling a special printf (eprintf)
481# very early in the kernel (before cn_init() has been called).  This
482# should only be used for debugging purposes early in boot.  Normally,
483# it is not defined.  It is commented out here because this feature
484# isn't generally available. And the required eputc() isn't defined.
485#
486#options	EARLY_PRINTF
487
488#
489# KTRACE enables the system-call tracing facility ktrace(2).  To be more
490# SMP-friendly, KTRACE uses a worker thread to process most trace events
491# asynchronously to the thread generating the event.  This requires a
492# pre-allocated store of objects representing trace events.  The
493# KTRACE_REQUEST_POOL option specifies the initial size of this store.
494# The size of the pool can be adjusted both at boottime and runtime via
495# the kern.ktrace_request_pool tunable and sysctl.
496#
497options 	KTRACE			#kernel tracing
498options 	KTRACE_REQUEST_POOL=101
499
500#
501# KTR is a kernel tracing facility imported from BSD/OS.  It is
502# enabled with the KTR option.  KTR_ENTRIES defines the number of
503# entries in the circular trace buffer; it may be an arbitrary number.
504# KTR_BOOT_ENTRIES defines the number of entries during the early boot,
505# before malloc(9) is functional.
506# KTR_COMPILE defines the mask of events to compile into the kernel as
507# defined by the KTR_* constants in <sys/ktr.h>.  KTR_MASK defines the
508# initial value of the ktr_mask variable which determines at runtime
509# what events to trace.  KTR_CPUMASK determines which CPU's log
510# events, with bit X corresponding to CPU X.  The layout of the string
511# passed as KTR_CPUMASK must match a series of bitmasks each of them
512# separated by the "," character (ie:
513# KTR_CPUMASK=0xAF,0xFFFFFFFFFFFFFFFF).  KTR_VERBOSE enables
514# dumping of KTR events to the console by default.  This functionality
515# can be toggled via the debug.ktr_verbose sysctl and defaults to off
516# if KTR_VERBOSE is not defined.  See ktr(4) and ktrdump(8) for details.
517#
518options 	KTR
519options 	KTR_BOOT_ENTRIES=1024
520options 	KTR_ENTRIES=(128*1024)
521options 	KTR_COMPILE=(KTR_ALL)
522options 	KTR_MASK=KTR_INTR
523options 	KTR_CPUMASK=0x3
524options 	KTR_VERBOSE
525
526#
527# ALQ(9) is a facility for the asynchronous queuing of records from the kernel
528# to a vnode, and is employed by services such as ktr(4) to produce trace
529# files based on a kernel event stream.  Records are written asynchronously
530# in a worker thread.
531#
532options 	ALQ
533options 	KTR_ALQ
534
535#
536# The INVARIANTS option is used in a number of source files to enable
537# extra sanity checking of internal structures.  This support is not
538# enabled by default because of the extra time it would take to check
539# for these conditions, which can only occur as a result of
540# programming errors.
541#
542options 	INVARIANTS
543
544#
545# The INVARIANT_SUPPORT option makes us compile in support for
546# verifying some of the internal structures.  It is a prerequisite for
547# 'INVARIANTS', as enabling 'INVARIANTS' will make these functions be
548# called.  The intent is that you can set 'INVARIANTS' for single
549# source files (by changing the source file or specifying it on the
550# command line) if you have 'INVARIANT_SUPPORT' enabled.  Also, if you
551# wish to build a kernel module with 'INVARIANTS', then adding
552# 'INVARIANT_SUPPORT' to your kernel will provide all the necessary
553# infrastructure without the added overhead.
554#
555options 	INVARIANT_SUPPORT
556
557#
558# The KASSERT_PANIC_OPTIONAL option allows kasserts to fire without
559# necessarily inducing a panic.  Panic is the default behavior, but
560# runtime options can configure it either entirely off, or off with a
561# limit.
562#
563options 	KASSERT_PANIC_OPTIONAL
564
565#
566# The DIAGNOSTIC option is used to enable extra debugging information
567# and invariants checking.  The added checks are too expensive or noisy
568# for an INVARIANTS kernel and thus are disabled by default.  It is
569# expected that a kernel configured with DIAGNOSTIC will also have the
570# INVARIANTS option enabled.
571#
572options 	DIAGNOSTIC
573
574#
575# REGRESSION causes optional kernel interfaces necessary only for regression
576# testing to be enabled.  These interfaces may constitute security risks
577# when enabled, as they permit processes to easily modify aspects of the
578# run-time environment to reproduce unlikely or unusual (possibly normally
579# impossible) scenarios.
580#
581options 	REGRESSION
582
583#
584# This option lets some drivers co-exist that can't co-exist in a running
585# system.  This is used to be able to compile all kernel code in one go for
586# quality assurance purposes (like this file, which the option takes it name
587# from.)
588#
589options 	COMPILING_LINT
590
591#
592# STACK enables the stack(9) facility, allowing the capture of kernel stack
593# for the purpose of procinfo(1), etc.  stack(9) will also be compiled in
594# automatically if DDB(4) is compiled into the kernel.
595#
596options 	STACK
597
598#
599# The NUM_CORE_FILES option specifies the limit for the number of core
600# files generated by a particular process, when the core file format
601# specifier includes the %I pattern. Since we only have 1 character for
602# the core count in the format string, meaning the range will be 0-9, the
603# maximum value allowed for this option is 10.
604# This core file limit can be adjusted at runtime via the debug.ncores
605# sysctl.
606#
607options 	NUM_CORE_FILES=5
608
609#
610# The TSLOG option enables timestamped logging of events, especially
611# function entries/exits, in order to track the time spent by the kernel.
612# In particular, this is useful when investigating the early boot process,
613# before it is possible to use more sophisticated tools like DTrace.
614# The TSLOGSIZE option controls the size of the (preallocated, fixed
615# length) buffer used for storing these events (default: 262144 records).
616#
617# For security reasons the TSLOG option should not be enabled on systems
618# used in production.
619#
620options 	TSLOG
621options 	TSLOGSIZE=262144
622
623
624#####################################################################
625# PERFORMANCE MONITORING OPTIONS
626
627#
628# The hwpmc driver that allows the use of in-CPU performance monitoring
629# counters for performance monitoring.  The base kernel needs to be configured
630# with the 'options' line, while the hwpmc device can be either compiled
631# in or loaded as a loadable kernel module.
632#
633# Additional configuration options may be required on specific architectures,
634# please see hwpmc(4).
635
636device		hwpmc			# Driver (also a loadable module)
637options 	HWPMC_DEBUG
638options 	HWPMC_HOOKS		# Other necessary kernel hooks
639
640
641#####################################################################
642# NETWORKING OPTIONS
643
644#
645# Protocol families
646#
647options 	INET			#Internet communications protocols
648options 	INET6			#IPv6 communications protocols
649
650options		RATELIMIT		# TX rate limiting support
651
652options 	ROUTETABLES=2		# allocated fibs up to 65536. default is 1.
653					# but that would be a bad idea as they are large.
654
655options 	TCP_OFFLOAD		# TCP offload support.
656options		TCP_RFC7413		# TCP Fast Open
657
658options		TCPHPTS
659
660# In order to enable IPSEC you MUST also add device crypto to
661# your kernel configuration
662options 	IPSEC			#IP security (requires device crypto)
663
664# Option IPSEC_SUPPORT does not enable IPsec, but makes it possible to
665# load it as a kernel module. You still MUST add device crypto to your kernel
666# configuration.
667options		IPSEC_SUPPORT
668#options 	IPSEC_DEBUG		#debug for IP security
669
670
671# TLS framing and encryption/decryption of data over TCP sockets.
672options		KERN_TLS		# TLS transmit and receive offload
673
674#
675# SMB/CIFS requester
676# NETSMB enables support for SMB protocol, it requires LIBMCHAIN and LIBICONV
677# options.
678options 	NETSMB			#SMB/CIFS requester
679
680# mchain library. It can be either loaded as KLD or compiled into kernel
681options 	LIBMCHAIN
682
683# libalias library, performing NAT
684options 	LIBALIAS
685
686#
687# SCTP is a NEW transport protocol defined by
688# RFC2960 updated by RFC3309 and RFC3758.. and
689# soon to have a new base RFC and many many more
690# extensions. This release supports all the extensions
691# including many drafts (most about to become RFC's).
692# It is the reference implementation of SCTP
693# and is quite well tested.
694#
695# Note YOU MUST have both INET and INET6 defined.
696# You don't have to enable V6, but SCTP is
697# dual stacked and so far we have not torn apart
698# the V6 and V4.. since an association can span
699# both a V6 and V4 address at the SAME time :-)
700#
701# The SCTP_SUPPORT option does not enable SCTP, but provides the necessary
702# support for loading SCTP as a loadable kernel module.
703#
704options 	SCTP
705options 	SCTP_SUPPORT
706
707# There are bunches of options:
708# this one turns on all sorts of
709# nastily printing that you can
710# do. It's all controlled by a
711# bit mask (settable by socket opt and
712# by sysctl). Including will not cause
713# logging until you set the bits.. but it
714# can be quite verbose.. so without this
715# option we don't do any of the tests for
716# bits and prints.. which makes the code run
717# faster.. if you are not debugging don't use.
718options 	SCTP_DEBUG
719
720#
721# All that options after that turn on specific types of
722# logging. You can monitor CWND growth, flight size
723# and all sorts of things. Go look at the code and
724# see. I have used this to produce interesting
725# charts and graphs as well :->
726#
727# I have not yet committed the tools to get and print
728# the logs, I will do that eventually .. before then
729# if you want them send me an email rrs@freebsd.org
730# You basically must have ktr(4) enabled for these
731# and you then set the sysctl to turn on/off various
732# logging bits. Use ktrdump(8) to pull the log and run
733# it through a display program.. and graphs and other
734# things too.
735#
736options 	SCTP_LOCK_LOGGING
737options 	SCTP_MBUF_LOGGING
738options 	SCTP_MBCNT_LOGGING
739options 	SCTP_PACKET_LOGGING
740options 	SCTP_LTRACE_CHUNKS
741options 	SCTP_LTRACE_ERRORS
742
743# altq(9). Enable the base part of the hooks with the ALTQ option.
744# Individual disciplines must be built into the base system and can not be
745# loaded as modules at this point. ALTQ requires a stable TSC so if yours is
746# broken or changes with CPU throttling then you must also have the ALTQ_NOPCC
747# option.
748options 	ALTQ
749options 	ALTQ_CBQ	# Class Based Queueing
750options 	ALTQ_RED	# Random Early Detection
751options 	ALTQ_RIO	# RED In/Out
752options 	ALTQ_CODEL	# CoDel Active Queueing
753options 	ALTQ_HFSC	# Hierarchical Packet Scheduler
754options 	ALTQ_FAIRQ	# Fair Packet Scheduler
755options 	ALTQ_CDNR	# Traffic conditioner
756options 	ALTQ_PRIQ	# Priority Queueing
757options 	ALTQ_NOPCC	# Required if the TSC is unusable
758options 	ALTQ_DEBUG
759
760# netgraph(4). Enable the base netgraph code with the NETGRAPH option.
761# Individual node types can be enabled with the corresponding option
762# listed below; however, this is not strictly necessary as netgraph
763# will automatically load the corresponding KLD module if the node type
764# is not already compiled into the kernel. Each type below has a
765# corresponding man page, e.g., ng_async(8).
766options 	NETGRAPH		# netgraph(4) system
767options 	NETGRAPH_DEBUG		# enable extra debugging, this
768					# affects netgraph(4) and nodes
769# Node types
770options 	NETGRAPH_ASYNC
771options 	NETGRAPH_ATMLLC
772options 	NETGRAPH_ATM_ATMPIF
773options 	NETGRAPH_BLUETOOTH		# ng_bluetooth(4)
774options 	NETGRAPH_BLUETOOTH_HCI		# ng_hci(4)
775options 	NETGRAPH_BLUETOOTH_L2CAP	# ng_l2cap(4)
776options 	NETGRAPH_BLUETOOTH_SOCKET	# ng_btsocket(4)
777options 	NETGRAPH_BLUETOOTH_UBT		# ng_ubt(4)
778options 	NETGRAPH_BLUETOOTH_UBTBCMFW	# ubtbcmfw(4)
779options 	NETGRAPH_BPF
780options 	NETGRAPH_BRIDGE
781options 	NETGRAPH_CAR
782options 	NETGRAPH_CHECKSUM
783options 	NETGRAPH_CISCO
784options 	NETGRAPH_DEFLATE
785options 	NETGRAPH_DEVICE
786options 	NETGRAPH_ECHO
787options 	NETGRAPH_EIFACE
788options 	NETGRAPH_ETHER
789options 	NETGRAPH_FRAME_RELAY
790options 	NETGRAPH_GIF
791options 	NETGRAPH_GIF_DEMUX
792options 	NETGRAPH_HOLE
793options 	NETGRAPH_IFACE
794options 	NETGRAPH_IP_INPUT
795options 	NETGRAPH_IPFW
796options 	NETGRAPH_KSOCKET
797options 	NETGRAPH_L2TP
798options 	NETGRAPH_LMI
799options 	NETGRAPH_MPPC_COMPRESSION
800options 	NETGRAPH_MPPC_ENCRYPTION
801options 	NETGRAPH_NETFLOW
802options 	NETGRAPH_NAT
803options 	NETGRAPH_ONE2MANY
804options 	NETGRAPH_PATCH
805options 	NETGRAPH_PIPE
806options 	NETGRAPH_PPP
807options 	NETGRAPH_PPPOE
808options 	NETGRAPH_PPTPGRE
809options 	NETGRAPH_PRED1
810options 	NETGRAPH_RFC1490
811options 	NETGRAPH_SOCKET
812options 	NETGRAPH_SPLIT
813options 	NETGRAPH_SPPP
814options 	NETGRAPH_TAG
815options 	NETGRAPH_TCPMSS
816options 	NETGRAPH_TEE
817options 	NETGRAPH_UI
818options 	NETGRAPH_VJC
819options 	NETGRAPH_VLAN
820
821# NgATM - Netgraph ATM
822options 	NGATM_ATM
823options 	NGATM_ATMBASE
824options 	NGATM_SSCOP
825options 	NGATM_SSCFU
826options 	NGATM_UNI
827options 	NGATM_CCATM
828
829# Network stack virtualization.
830options	VIMAGE
831options	VNET_DEBUG	# debug for VIMAGE
832
833#
834# Network interfaces:
835#  The `loop' device is MANDATORY when networking is enabled.
836device		loop
837
838#  The `ether' device provides generic code to handle
839#  Ethernets; it is MANDATORY when an Ethernet device driver is
840#  configured.
841device		ether
842
843#  The `vlan' device implements the VLAN tagging of Ethernet frames
844#  according to IEEE 802.1Q.
845device		vlan
846
847# The `vxlan' device implements the VXLAN encapsulation of Ethernet
848# frames in UDP packets according to RFC7348.
849device		vxlan
850
851#  The `wlan' device provides generic code to support 802.11
852#  drivers, including host AP mode; it is MANDATORY for the wi,
853#  and ath drivers and will eventually be required by all 802.11 drivers.
854device		wlan
855options 	IEEE80211_DEBUG		#enable debugging msgs
856options 	IEEE80211_SUPPORT_MESH	#enable 802.11s D3.0 support
857options 	IEEE80211_SUPPORT_TDMA	#enable TDMA support
858
859#  The `wlan_wep', `wlan_tkip', and `wlan_ccmp' devices provide
860#  support for WEP, TKIP, and AES-CCMP crypto protocols optionally
861#  used with 802.11 devices that depend on the `wlan' module.
862device		wlan_wep
863device		wlan_ccmp
864device		wlan_tkip
865
866#  The `wlan_xauth' device provides support for external (i.e. user-mode)
867#  authenticators for use with 802.11 drivers that use the `wlan'
868#  module and support 802.1x and/or WPA security protocols.
869device		wlan_xauth
870
871#  The `wlan_acl' device provides a MAC-based access control mechanism
872#  for use with 802.11 drivers operating in ap mode and using the
873#  `wlan' module.
874#  The 'wlan_amrr' device provides AMRR transmit rate control algorithm
875device		wlan_acl
876device		wlan_amrr
877
878#  The `sppp' device serves a similar role for certain types
879#  of synchronous PPP links (like `cx', `ar').
880device		sppp
881
882#  The `bpf' device enables the Berkeley Packet Filter.  Be
883#  aware of the legal and administrative consequences of enabling this
884#  option.  DHCP requires bpf.
885device		bpf
886
887#  The `netmap' device implements memory-mapped access to network
888#  devices from userspace, enabling wire-speed packet capture and
889#  generation even at 10Gbit/s. Requires support in the device
890#  driver. Supported drivers are ixgbe, e1000, re.
891device		netmap
892
893#  The `disc' device implements a minimal network interface,
894#  which throws away all packets sent and never receives any.  It is
895#  included for testing and benchmarking purposes.
896device		disc
897
898# The `epair' device implements a virtual back-to-back connected Ethernet
899# like interface pair.
900device		epair
901
902#  The `edsc' device implements a minimal Ethernet interface,
903#  which discards all packets sent and receives none.
904device		edsc
905
906#  The `tuntap' device implements (user-)ppp, nos-tun(8) and a pty-like virtual
907#  Ethernet interface
908device		tuntap
909
910#  The `gif' device implements IPv6 over IP4 tunneling,
911#  IPv4 over IPv6 tunneling, IPv4 over IPv4 tunneling and
912#  IPv6 over IPv6 tunneling.
913#  The `gre' device implements GRE (Generic Routing Encapsulation) tunneling,
914#  as specified in the RFC 2784 and RFC 2890.
915#  The `me' device implements Minimal Encapsulation within IPv4 as
916#  specified in the RFC 2004.
917#  The XBONEHACK option allows the same pair of addresses to be configured on
918#  multiple gif interfaces.
919device		gif
920device		gre
921device		me
922options 	XBONEHACK
923
924#  The `stf' device implements 6to4 encapsulation.
925device		stf
926
927# The pf packet filter consists of three devices:
928#  The `pf' device provides /dev/pf and the firewall code itself.
929#  The `pflog' device provides the pflog0 interface which logs packets.
930#  The `pfsync' device provides the pfsync0 interface used for
931#   synchronization of firewall state tables (over the net).
932device		pf
933device		pflog
934device		pfsync
935
936# Bridge interface.
937device		if_bridge
938
939# Common Address Redundancy Protocol. See carp(4) for more details.
940device		carp
941
942# IPsec interface.
943device		enc
944
945# Link aggregation interface.
946device		lagg
947
948#
949# Internet family options:
950#
951# MROUTING enables the kernel multicast packet forwarder, which works
952# with mrouted and XORP.
953#
954# IPFIREWALL enables support for IP firewall construction, in
955# conjunction with the `ipfw' program.  IPFIREWALL_VERBOSE sends
956# logged packets to the system logger.  IPFIREWALL_VERBOSE_LIMIT
957# limits the number of times a matching entry can be logged.
958#
959# WARNING:  IPFIREWALL defaults to a policy of "deny ip from any to any"
960# and if you do not add other rules during startup to allow access,
961# YOU WILL LOCK YOURSELF OUT.  It is suggested that you set firewall_type=open
962# in /etc/rc.conf when first enabling this feature, then refining the
963# firewall rules in /etc/rc.firewall after you've tested that the new kernel
964# feature works properly.
965#
966# IPFIREWALL_DEFAULT_TO_ACCEPT causes the default rule (at boot) to
967# allow everything.  Use with care, if a cracker can crash your
968# firewall machine, they can get to your protected machines.  However,
969# if you are using it as an as-needed filter for specific problems as
970# they arise, then this may be for you.  Changing the default to 'allow'
971# means that you won't get stuck if the kernel and /sbin/ipfw binary get
972# out of sync.
973#
974# IPDIVERT enables the divert IP sockets, used by ``ipfw divert''.  It
975# depends on IPFIREWALL if compiled into the kernel.
976#
977# IPFIREWALL_NAT adds support for in kernel nat in ipfw, and it requires
978# LIBALIAS.
979#
980# IPFIREWALL_NAT64 adds support for in kernel NAT64 in ipfw.
981#
982# IPFIREWALL_NPTV6 adds support for in kernel NPTv6 in ipfw.
983#
984# IPFIREWALL_PMOD adds support for protocols modification module. Currently
985# it supports only TCP MSS modification.
986#
987# IPSTEALTH enables code to support stealth forwarding (i.e., forwarding
988# packets without touching the TTL).  This can be useful to hide firewalls
989# from traceroute and similar tools.
990#
991# PF_DEFAULT_TO_DROP causes the default pf(4) rule to deny everything.
992#
993# TCPDEBUG enables code which keeps traces of the TCP state machine
994# for sockets with the SO_DEBUG option set, which can then be examined
995# using the trpt(8) utility.
996#
997# TCPPCAP enables code which keeps the last n packets sent and received
998# on a TCP socket.
999#
1000# TCP_BLACKBOX enables enhanced TCP event logging.
1001#
1002# TCP_HHOOK enables the hhook(9) framework hooks for the TCP stack.
1003#
1004# ROUTE_MPATH provides support for multipath routing.
1005#
1006options 	MROUTING		# Multicast routing
1007options 	IPFIREWALL		#firewall
1008options 	IPFIREWALL_VERBOSE	#enable logging to syslogd(8)
1009options 	IPFIREWALL_VERBOSE_LIMIT=100	#limit verbosity
1010options 	IPFIREWALL_DEFAULT_TO_ACCEPT	#allow everything by default
1011options 	IPFIREWALL_NAT		#ipfw kernel nat support
1012options 	IPFIREWALL_NAT64	#ipfw kernel NAT64 support
1013options 	IPFIREWALL_NPTV6	#ipfw kernel IPv6 NPT support
1014options 	IPDIVERT		#divert sockets
1015options 	IPFILTER		#ipfilter support
1016options 	IPFILTER_LOG		#ipfilter logging
1017options 	IPFILTER_LOOKUP		#ipfilter pools
1018options 	IPFILTER_DEFAULT_BLOCK	#block all packets by default
1019options 	IPSTEALTH		#support for stealth forwarding
1020options 	PF_DEFAULT_TO_DROP	#drop everything by default
1021options 	TCPDEBUG
1022options 	TCPPCAP
1023options 	TCP_BLACKBOX
1024options 	TCP_HHOOK
1025options 	ROUTE_MPATH
1026
1027# The MBUF_STRESS_TEST option enables options which create
1028# various random failures / extreme cases related to mbuf
1029# functions.  See mbuf(9) for a list of available test cases.
1030# MBUF_PROFILING enables code to profile the mbuf chains
1031# exiting the system (via participating interfaces) and
1032# return a logarithmic histogram of monitored parameters
1033# (e.g. packet size, wasted space, number of mbufs in chain).
1034options 	MBUF_STRESS_TEST
1035options 	MBUF_PROFILING
1036
1037# Statically link in accept filters
1038options 	ACCEPT_FILTER_DATA
1039options 	ACCEPT_FILTER_DNS
1040options 	ACCEPT_FILTER_HTTP
1041
1042# TCP_SIGNATURE adds support for RFC 2385 (TCP-MD5) digests. These are
1043# carried in TCP option 19. This option is commonly used to protect
1044# TCP sessions (e.g. BGP) where IPSEC is not available nor desirable.
1045# This is enabled on a per-socket basis using the TCP_MD5SIG socket option.
1046# This requires the use of 'device crypto' and either 'options IPSEC' or
1047# 'options IPSEC_SUPPORT'.
1048options 	TCP_SIGNATURE		#include support for RFC 2385
1049
1050# DUMMYNET enables the "dummynet" bandwidth limiter.  You need IPFIREWALL
1051# as well.  See dummynet(4) and ipfw(8) for more info.  When you run
1052# DUMMYNET, HZ/kern.hz should be at least 1000 for adequate response.
1053options 	DUMMYNET
1054
1055# The DEBUGNET option enables a basic debug/panic-time networking API.  It
1056# is used by NETDUMP and NETGDB.
1057options 	DEBUGNET
1058
1059# The NETDUMP option enables netdump(4) client support in the kernel.
1060# This allows a panicking kernel to transmit a kernel dump to a remote host.
1061options 	NETDUMP
1062
1063# The NETGDB option enables netgdb(4) support in the kernel.  This allows a
1064# panicking kernel to be debugged as a GDB remote over the network.
1065options 	NETGDB
1066
1067#####################################################################
1068# FILESYSTEM OPTIONS
1069
1070#
1071# Only the root filesystem needs to be statically compiled or preloaded
1072# as module; everything else will be automatically loaded at mount
1073# time.  Some people still prefer to statically compile other
1074# filesystems as well.
1075#
1076# NB: The UNION filesystem was known to be buggy in the past.  It is now
1077# being actively maintained, although there are still some issues being
1078# resolved.
1079#
1080
1081# One of these is mandatory:
1082options 	FFS			#Fast filesystem
1083options 	NFSCL			#Network File System client
1084
1085# The rest are optional:
1086options 	AUTOFS			#Automounter filesystem
1087options 	CD9660			#ISO 9660 filesystem
1088options 	FDESCFS			#File descriptor filesystem
1089options 	FUSEFS			#FUSEFS support module
1090options 	MSDOSFS			#MS DOS File System (FAT, FAT32)
1091options 	NFSLOCKD		#Network Lock Manager
1092options 	NFSD			#Network Filesystem Server
1093options 	KGSSAPI			#Kernel GSSAPI implementation
1094
1095options 	NULLFS			#NULL filesystem
1096options 	PROCFS			#Process filesystem (requires PSEUDOFS)
1097options 	PSEUDOFS		#Pseudo-filesystem framework
1098options 	PSEUDOFS_TRACE		#Debugging support for PSEUDOFS
1099options 	SMBFS			#SMB/CIFS filesystem
1100options 	TMPFS			#Efficient memory filesystem
1101options 	UDF			#Universal Disk Format
1102options 	UNIONFS			#Union filesystem
1103# The xFS_ROOT options REQUIRE the associated ``options xFS''
1104options 	NFS_ROOT		#NFS usable as root device
1105
1106# Soft updates is a technique for improving filesystem speed and
1107# making abrupt shutdown less risky.
1108#
1109options 	SOFTUPDATES
1110
1111# Extended attributes allow additional data to be associated with files,
1112# and is used for ACLs, Capabilities, and MAC labels.
1113# See src/sys/ufs/ufs/README.extattr for more information.
1114options 	UFS_EXTATTR
1115options 	UFS_EXTATTR_AUTOSTART
1116
1117# Access Control List support for UFS filesystems.  The current ACL
1118# implementation requires extended attribute support, UFS_EXTATTR,
1119# for the underlying filesystem.
1120# See src/sys/ufs/ufs/README.acls for more information.
1121options 	UFS_ACL
1122
1123# Directory hashing improves the speed of operations on very large
1124# directories at the expense of some memory.
1125options 	UFS_DIRHASH
1126
1127# Gjournal-based UFS journaling support.
1128options 	UFS_GJOURNAL
1129
1130# Make space in the kernel for a root filesystem on a md device.
1131# Define to the number of kilobytes to reserve for the filesystem.
1132# This is now optional.
1133# If not defined, the root filesystem passed in as the MFS_IMAGE makeoption
1134# will be automatically embedded in the kernel during linking. Its exact size
1135# will be consumed within the kernel.
1136# If defined, the old way of embedding the filesystem in the kernel will be
1137# used. That is to say MD_ROOT_SIZE KB will be allocated in the kernel and
1138# later, the filesystem image passed in as the MFS_IMAGE makeoption will be
1139# dd'd into the reserved space if it fits.
1140options 	MD_ROOT_SIZE=10
1141
1142# Make the md device a potential root device, either with preloaded
1143# images of type mfs_root or md_root.
1144options 	MD_ROOT
1145
1146# Write-protect the md root device so that it may not be mounted writeable.
1147options 	MD_ROOT_READONLY
1148
1149# Allow to read MD image from external memory regions
1150options		MD_ROOT_MEM
1151
1152# Disk quotas are supported when this option is enabled.
1153options 	QUOTA			#enable disk quotas
1154
1155# If you are running a machine just as a fileserver for PC and MAC
1156# users, using SAMBA, you may consider setting this option
1157# and keeping all those users' directories on a filesystem that is
1158# mounted with the suiddir option. This gives new files the same
1159# ownership as the directory (similar to group). It's a security hole
1160# if you let these users run programs, so confine it to file-servers
1161# (but it'll save you lots of headaches in those cases). Root owned
1162# directories are exempt and X bits are cleared. The suid bit must be
1163# set on the directory as well; see chmod(1). PC owners can't see/set
1164# ownerships so they keep getting their toes trodden on. This saves
1165# you all the support calls as the filesystem it's used on will act as
1166# they expect: "It's my dir so it must be my file".
1167#
1168options 	SUIDDIR
1169
1170# NFS options:
1171options 	NFS_MINATTRTIMO=3	# VREG attrib cache timeout in sec
1172options 	NFS_MAXATTRTIMO=60
1173options 	NFS_MINDIRATTRTIMO=30	# VDIR attrib cache timeout in sec
1174options 	NFS_MAXDIRATTRTIMO=60
1175options 	NFS_DEBUG		# Enable NFS Debugging
1176
1177#
1178# Add support for the EXT2FS filesystem of Linux fame.  Be a bit
1179# careful with this - the ext2fs code has a tendency to lag behind
1180# changes and not be exercised very much, so mounting read/write could
1181# be dangerous (and even mounting read only could result in panics.)
1182#
1183options 	EXT2FS
1184
1185# The system memory devices; /dev/mem, /dev/kmem
1186device		mem
1187
1188# The kernel symbol table device; /dev/ksyms
1189device		ksyms
1190
1191# Optional character code conversion support with LIBICONV.
1192# Each option requires their base file system and LIBICONV.
1193options 	CD9660_ICONV
1194options 	MSDOSFS_ICONV
1195options 	UDF_ICONV
1196
1197
1198#####################################################################
1199# POSIX P1003.1B
1200
1201# Real time extensions added in the 1993 POSIX
1202# _KPOSIX_PRIORITY_SCHEDULING: Build in _POSIX_PRIORITY_SCHEDULING
1203
1204options 	_KPOSIX_PRIORITY_SCHEDULING
1205# p1003_1b_semaphores are very experimental,
1206# user should be ready to assist in debugging if problems arise.
1207options 	P1003_1B_SEMAPHORES
1208
1209# POSIX message queue
1210options 	P1003_1B_MQUEUE
1211
1212#####################################################################
1213# SECURITY POLICY PARAMETERS
1214
1215# Support for BSM audit
1216options 	AUDIT
1217
1218# Support for Mandatory Access Control (MAC):
1219options 	MAC
1220options 	MAC_BIBA
1221options 	MAC_BSDEXTENDED
1222options 	MAC_IFOFF
1223options 	MAC_LOMAC
1224options 	MAC_MLS
1225options 	MAC_NONE
1226options 	MAC_NTPD
1227options 	MAC_PARTITION
1228options 	MAC_PORTACL
1229options 	MAC_SEEOTHERUIDS
1230options 	MAC_STUB
1231options 	MAC_TEST
1232
1233# Support for Capsicum
1234options 	CAPABILITIES	# fine-grained rights on file descriptors
1235options 	CAPABILITY_MODE	# sandboxes with no global namespace access
1236
1237
1238#####################################################################
1239# CLOCK OPTIONS
1240
1241# The granularity of operation is controlled by the kernel option HZ (default
1242# frequency of 1000 Hz or a period 1ms between calls). Virtual machine guests
1243# use a value of 100. Lower values may lower overhead at the expense of accuracy
1244# of scheduling, though the adaptive tick code reduces that overhead.
1245
1246options 	HZ=100
1247
1248# Enable support for generic feed-forward clocks in the kernel.
1249# The feed-forward clock support is an alternative to the feedback oriented
1250# ntpd/system clock approach, and is to be used with a feed-forward
1251# synchronization algorithm such as the RADclock:
1252# More info here: http://www.synclab.org/radclock
1253
1254options 	FFCLOCK
1255
1256
1257#####################################################################
1258# SCSI DEVICES
1259
1260# SCSI DEVICE CONFIGURATION
1261
1262# The SCSI subsystem consists of the `base' SCSI code, a number of
1263# high-level SCSI device `type' drivers, and the low-level host-adapter
1264# device drivers.  The host adapters are listed in the ISA and PCI
1265# device configuration sections below.
1266#
1267# It is possible to wire down your SCSI devices so that a given bus,
1268# target, and LUN always come on line as the same device unit.  In
1269# earlier versions the unit numbers were assigned in the order that
1270# the devices were probed on the SCSI bus.  This means that if you
1271# removed a disk drive, you may have had to rewrite your /etc/fstab
1272# file, and also that you had to be careful when adding a new disk
1273# as it may have been probed earlier and moved your device configuration
1274# around.
1275
1276# This old behavior is maintained as the default behavior.  The unit
1277# assignment begins with the first non-wired down unit for a device
1278# type.  For example, if you wire a disk as "da3" then the first
1279# non-wired disk will be assigned da4.
1280
1281# The syntax for wiring down devices is:
1282
1283envvar		hint.scbus.0.at="ahc0"
1284envvar		hint.scbus.1.at="ahc1"
1285envvar		hint.scbus.1.bus="0"
1286envvar		hint.scbus.3.at="ahc2"
1287envvar		hint.scbus.3.bus="0"
1288envvar		hint.scbus.2.at="ahc2"
1289envvar		hint.scbus.2.bus="1"
1290envvar		hint.da.0.at="scbus0"
1291envvar		hint.da.0.target="0"
1292envvar		hint.da.0.unit="0"
1293envvar		hint.da.1.at="scbus3"
1294envvar		hint.da.1.target="1"
1295envvar		hint.da.2.at="scbus2"
1296envvar		hint.da.2.target="3"
1297envvar		hint.sa.1.at="scbus1"
1298envvar		hint.sa.1.target="6"
1299
1300# "units" (SCSI logical unit number) that are not specified are
1301# treated as if specified as LUN 0.
1302
1303# All SCSI devices allocate as many units as are required.
1304
1305# The ch driver drives SCSI Media Changer ("jukebox") devices.
1306#
1307# The da driver drives SCSI Direct Access ("disk") and Optical Media
1308# ("WORM") devices.
1309#
1310# The sa driver drives SCSI Sequential Access ("tape") devices.
1311#
1312# The cd driver drives SCSI Read Only Direct Access ("cd") devices.
1313#
1314# The ses driver drives SCSI Environment Services ("ses") and
1315# SAF-TE ("SCSI Accessible Fault-Tolerant Enclosure") devices.
1316#
1317# The pt driver drives SCSI Processor devices.
1318#
1319# The sg driver provides a passthrough API that is compatible with the
1320# Linux SG driver.  It will work in conjunction with the Linuxulator
1321# to run linux SG apps.  It can also stand on its own and provide
1322# source level API compatibility for porting apps to FreeBSD.
1323#
1324# Target Mode support is provided here but also requires that a SIM
1325# (SCSI Host Adapter Driver) provide support as well.
1326#
1327# The targ driver provides target mode support as a Processor type device.
1328# It exists to give the minimal context necessary to respond to Inquiry
1329# commands. There is a sample user application that shows how the rest
1330# of the command support might be done in /usr/share/examples/scsi_target.
1331#
1332# The targbh driver provides target mode support and exists to respond
1333# to incoming commands that do not otherwise have a logical unit assigned
1334# to them.
1335#
1336# The pass driver provides a passthrough API to access the CAM subsystem.
1337
1338device		scbus		#base SCSI code
1339device		ch		#SCSI media changers
1340device		da		#SCSI direct access devices (aka disks)
1341device		sa		#SCSI tapes
1342device		cd		#SCSI CD-ROMs
1343device		ses		#Enclosure Services (SES and SAF-TE)
1344device		pt		#SCSI processor
1345device		targ		#SCSI Target Mode Code
1346device		targbh		#SCSI Target Mode Blackhole Device
1347device		pass		#CAM passthrough driver
1348device		sg		#Linux SCSI passthrough
1349device		ctl		#CAM Target Layer
1350
1351# CAM OPTIONS:
1352# debugging options:
1353# CAMDEBUG		Compile in all possible debugging.
1354# CAM_DEBUG_COMPILE	Debug levels to compile in.
1355# CAM_DEBUG_FLAGS	Debug levels to enable on boot.
1356# CAM_DEBUG_BUS		Limit debugging to the given bus.
1357# CAM_DEBUG_TARGET	Limit debugging to the given target.
1358# CAM_DEBUG_LUN		Limit debugging to the given lun.
1359# CAM_DEBUG_DELAY	Delay in us after printing each debug line.
1360# CAM_IO_STATS		Publish additional CAM device statics by sysctl
1361#
1362# CAM_MAX_HIGHPOWER: Maximum number of concurrent high power (start unit) cmds
1363# SCSI_NO_SENSE_STRINGS: When defined disables sense descriptions
1364# SCSI_NO_OP_STRINGS: When defined disables opcode descriptions
1365# SCSI_DELAY: The number of MILLISECONDS to freeze the SIM (scsi adapter)
1366#             queue after a bus reset, and the number of milliseconds to
1367#             freeze the device queue after a bus device reset.  This
1368#             can be changed at boot and runtime with the
1369#             kern.cam.scsi_delay tunable/sysctl.
1370options 	CAMDEBUG
1371options 	CAM_DEBUG_COMPILE=-1
1372options 	CAM_DEBUG_FLAGS=(CAM_DEBUG_INFO|CAM_DEBUG_PROBE|CAM_DEBUG_PERIPH)
1373options 	CAM_DEBUG_BUS=-1
1374options 	CAM_DEBUG_TARGET=-1
1375options 	CAM_DEBUG_LUN=-1
1376options 	CAM_DEBUG_DELAY=1
1377options 	CAM_MAX_HIGHPOWER=4
1378options 	SCSI_NO_SENSE_STRINGS
1379options 	SCSI_NO_OP_STRINGS
1380options 	SCSI_DELAY=5000	# Be pessimistic about Joe SCSI device
1381options 	CAM_IOSCHED_DYNAMIC
1382options		CAM_IO_STATS
1383options		CAM_TEST_FAILURE
1384
1385# Options for the CAM CDROM driver:
1386# CHANGER_MIN_BUSY_SECONDS: Guaranteed minimum time quantum for a changer LUN
1387# CHANGER_MAX_BUSY_SECONDS: Maximum time quantum per changer LUN, only
1388#                           enforced if there is I/O waiting for another LUN
1389# The compiled in defaults for these variables are 2 and 10 seconds,
1390# respectively.
1391#
1392# These can also be changed on the fly with the following sysctl variables:
1393# kern.cam.cd.changer.min_busy_seconds
1394# kern.cam.cd.changer.max_busy_seconds
1395#
1396options 	CHANGER_MIN_BUSY_SECONDS=2
1397options 	CHANGER_MAX_BUSY_SECONDS=10
1398
1399# Options for the CAM sequential access driver:
1400# SA_IO_TIMEOUT: Timeout for read/write/wfm  operations, in minutes
1401# SA_SPACE_TIMEOUT: Timeout for space operations, in minutes
1402# SA_REWIND_TIMEOUT: Timeout for rewind operations, in minutes
1403# SA_ERASE_TIMEOUT: Timeout for erase operations, in minutes
1404# SA_1FM_AT_EOD: Default to model which only has a default one filemark at EOT.
1405options 	SA_IO_TIMEOUT=4
1406options 	SA_SPACE_TIMEOUT=60
1407options 	SA_REWIND_TIMEOUT=(2*60)
1408options 	SA_ERASE_TIMEOUT=(4*60)
1409options 	SA_1FM_AT_EOD
1410
1411# Optional timeout for the CAM processor target (pt) device
1412# This is specified in seconds.  The default is 60 seconds.
1413options 	SCSI_PT_DEFAULT_TIMEOUT=60
1414
1415# Optional enable of doing SES passthrough on other devices (e.g., disks)
1416#
1417# Normally disabled because a lot of newer SCSI disks report themselves
1418# as having SES capabilities, but this can then clot up attempts to build
1419# a topology with the SES device that's on the box these drives are in....
1420options 	SES_ENABLE_PASSTHROUGH
1421
1422
1423#####################################################################
1424# MISCELLANEOUS DEVICES AND OPTIONS
1425
1426device		pty		#BSD-style compatibility pseudo ttys
1427device		nmdm		#back-to-back tty devices
1428device		md		#Memory/malloc disk
1429device		snp		#Snoop device - to look at pty/vty/etc..
1430device		ccd		#Concatenated disk driver
1431device		firmware	#firmware(9) support
1432
1433# Kernel side iconv library
1434options 	LIBICONV
1435
1436# Size of the kernel message buffer.  Should be N * pagesize.
1437options 	MSGBUF_SIZE=40960
1438
1439
1440#####################################################################
1441# HARDWARE BUS CONFIGURATION
1442
1443#
1444# PCI bus & PCI options:
1445#
1446device		pci
1447options 	PCI_HP			# PCI-Express native HotPlug
1448options 	PCI_IOV			# PCI SR-IOV support
1449
1450
1451#####################################################################
1452# HARDWARE DEVICE CONFIGURATION
1453
1454# For ISA the required hints are listed.
1455# PCI, CardBus, and SD/MMC are self identifying buses, so
1456# no hints are needed.
1457
1458#
1459# Mandatory devices:
1460#
1461
1462# These options are valid for other keyboard drivers as well.
1463options 	KBD_DISABLE_KEYMAP_LOAD	# refuse to load a keymap
1464options 	KBD_INSTALL_CDEV	# install a CDEV entry in /dev
1465
1466device		kbdmux			# keyboard multiplexer
1467options		KBDMUX_DFLT_KEYMAP	# specify the built-in keymap
1468makeoptions	KBDMUX_DFLT_KEYMAP=it.iso
1469
1470options 	FB_DEBUG		# Frame buffer debugging
1471
1472# Enable experimental features of the syscons terminal emulator (teken).
1473options 	TEKEN_CONS25		# cons25-style terminal emulation
1474options 	TEKEN_UTF8		# UTF-8 output handling
1475
1476# The vt video console driver.
1477device		vt
1478options		VT_ALT_TO_ESC_HACK=1	# Prepend ESC sequence to ALT keys
1479options		VT_MAXWINDOWS=16	# Number of virtual consoles
1480options		VT_TWOBUTTON_MOUSE	# Use right mouse button to paste
1481
1482# The following options set the maximum framebuffer size.
1483options		VT_FB_MAX_HEIGHT=480
1484options		VT_FB_MAX_WIDTH=640
1485
1486# The following options will let you change the default vt terminal colors.
1487options		TERMINAL_NORM_ATTR=(FG_GREEN|BG_BLACK)
1488options		TERMINAL_KERN_ATTR=(FG_LIGHTRED|BG_BLACK)
1489
1490#
1491# Optional devices:
1492#
1493
1494#
1495# SCSI host adapters:
1496#
1497# aacraid: Adaptec by PMC RAID controllers, Series 6/7/8 and upcoming
1498#          families. Container interface, CAM required.
1499# ahc: Adaptec 274x/284x/2910/293x/294x/394x/3950x/3960x/398X/4944/
1500#      19160x/29160x, aic7770/aic78xx
1501# ahd: Adaptec 29320/39320 Controllers.
1502# esp: Emulex ESP, NCR 53C9x and QLogic FAS families based controllers
1503#      including the AMD Am53C974 (found on devices such as the Tekram
1504#      DC-390(T)) and the Sun ESP and FAS families of controllers
1505# isp: Qlogic ISP 1020, 1040 and 1040B PCI SCSI host adapters,
1506#      ISP 1240 Dual Ultra SCSI, ISP 1080 and 1280 (Dual) Ultra2,
1507#      ISP 12160 Ultra3 SCSI,
1508#      Qlogic ISP 2100 and ISP 2200 1Gb Fibre Channel host adapters.
1509#      Qlogic ISP 2300 and ISP 2312 2Gb Fibre Channel host adapters.
1510#      Qlogic ISP 2322 and ISP 6322 2Gb Fibre Channel host adapters.
1511# ispfw: Firmware module for Qlogic host adapters
1512# mpr: LSI-Logic MPT/Fusion Gen 3
1513# mps: LSI-Logic MPT/Fusion Gen 2
1514# mpt: LSI-Logic MPT/Fusion 53c1020 or 53c1030 Ultra4
1515#      or FC9x9 Fibre Channel host adapters.
1516# sym: Symbios/Logic 53C8XX family of PCI-SCSI I/O processors:
1517#      53C810, 53C810A, 53C815, 53C825,  53C825A, 53C860, 53C875,
1518#      53C876, 53C885,  53C895, 53C895A, 53C896,  53C897, 53C1510D,
1519#      53C1010-33, 53C1010-66.
1520
1521device		aacraid
1522device		ahc
1523device		ahd
1524device		esp
1525device		iscsi_initiator
1526device		isp
1527envvar		hint.isp.0.disable="1"
1528envvar		hint.isp.0.role="3"
1529envvar		hint.isp.0.prefer_iomap="1"
1530envvar		hint.isp.0.prefer_memmap="1"
1531envvar		hint.isp.0.fwload_disable="1"
1532envvar		hint.isp.0.ignore_nvram="1"
1533envvar		hint.isp.0.fullduplex="1"
1534envvar		hint.isp.0.topology="lport"
1535envvar		hint.isp.0.topology="nport"
1536envvar		hint.isp.0.topology="lport-only"
1537envvar		hint.isp.0.topology="nport-only"
1538# we can't get u_int64_t types, nor can we get strings if it's got
1539# a leading 0x, hence this silly dodge.
1540envvar		hint.isp.0.portwnn="w50000000aaaa0000"
1541envvar		hint.isp.0.nodewnn="w50000000aaaa0001"
1542device		ispfw
1543device		mpr			# LSI-Logic MPT-Fusion 3
1544device		mps			# LSI-Logic MPT-Fusion 2
1545device		mpt			# LSI-Logic MPT-Fusion
1546device		sym
1547
1548# The aic7xxx driver will attempt to use memory mapped I/O for all PCI
1549# controllers that have it configured only if this option is set. Unfortunately,
1550# this doesn't work on some motherboards, which prevents it from being the
1551# default.
1552options 	AHC_ALLOW_MEMIO
1553
1554# Dump the contents of the ahc controller configuration PROM.
1555options 	AHC_DUMP_EEPROM
1556
1557# Bitmap of units to enable targetmode operations.
1558options 	AHC_TMODE_ENABLE
1559
1560# Compile in Aic7xxx Debugging code.
1561options 	AHC_DEBUG
1562
1563# Aic7xxx driver debugging options. See sys/dev/aic7xxx/aic7xxx.h
1564options 	AHC_DEBUG_OPTS
1565
1566# Print register bitfields in debug output.  Adds ~128k to driver
1567# See ahc(4).
1568options 	AHC_REG_PRETTY_PRINT
1569
1570# Compile in aic79xx debugging code.
1571options 	AHD_DEBUG
1572
1573# Aic79xx driver debugging options.  Adds ~215k to driver.  See ahd(4).
1574options 	AHD_DEBUG_OPTS=0xFFFFFFFF
1575
1576# Print human-readable register definitions when debugging
1577options 	AHD_REG_PRETTY_PRINT
1578
1579# Bitmap of units to enable targetmode operations.
1580options 	AHD_TMODE_ENABLE
1581
1582# Options used in dev/iscsi (Software iSCSI stack)
1583#
1584options 	ISCSI_INITIATOR_DEBUG=9
1585
1586# Options used in dev/isp/ (Qlogic SCSI/FC driver).
1587#
1588#	ISP_TARGET_MODE		-	enable target mode operation
1589#
1590options 	ISP_TARGET_MODE=1
1591#
1592#	ISP_DEFAULT_ROLES	-	default role
1593#		none=0
1594#		target=1
1595#		initiator=2
1596#		both=3			(not supported currently)
1597#
1598#	ISP_INTERNAL_TARGET		(trivial internal disk target, for testing)
1599#
1600options 	ISP_DEFAULT_ROLES=0
1601
1602#options 	SYM_SETUP_SCSI_DIFF	#-HVD support for 825a, 875, 885
1603					# disabled:0 (default), enabled:1
1604#options 	SYM_SETUP_PCI_PARITY	#-PCI parity checking
1605					# disabled:0, enabled:1 (default)
1606#options 	SYM_SETUP_MAX_LUN	#-Number of LUNs supported
1607					# default:8, range:[1..64]
1608
1609#
1610# Compaq "CISS" RAID controllers (SmartRAID 5* series)
1611# These controllers have a SCSI-like interface, and require the
1612# CAM infrastructure.
1613#
1614device		ciss
1615
1616#
1617# Intel Integrated RAID controllers.
1618# This driver was developed and is maintained by Intel.  Contacts
1619# at Intel for this driver are
1620# "Kannanthanam, Boji T" <boji.t.kannanthanam@intel.com> and
1621# "Leubner, Achim" <achim.leubner@intel.com>.
1622#
1623device		iir
1624
1625#
1626# Mylex AcceleRAID and eXtremeRAID controllers with v6 and later
1627# firmware.  These controllers have a SCSI-like interface, and require
1628# the CAM infrastructure.
1629#
1630device		mly
1631
1632#
1633# Compaq Smart RAID, Mylex DAC960 and AMI MegaRAID controllers.  Only
1634# one entry is needed; the code will find and configure all supported
1635# controllers.
1636#
1637device		ida		# Compaq Smart RAID
1638device		mlx		# Mylex DAC960
1639device		amr		# AMI MegaRAID
1640device		amrp		# SCSI Passthrough interface (optional, CAM req.)
1641device		mfi		# LSI MegaRAID SAS
1642device		mfip		# LSI MegaRAID SAS passthrough, requires CAM
1643options 	MFI_DEBUG
1644device		mrsas		# LSI/Avago MegaRAID SAS/SATA, 6Gb/s and 12Gb/s
1645
1646#
1647# 3ware ATA RAID
1648#
1649device		twe		# 3ware ATA RAID
1650
1651#
1652# Serial ATA host controllers:
1653#
1654# ahci: Advanced Host Controller Interface (AHCI) compatible
1655# mvs:  Marvell 88SX50XX/88SX60XX/88SX70XX/SoC controllers
1656# siis: SiliconImage SiI3124/SiI3132/SiI3531 controllers
1657#
1658# These drivers are part of cam(4) subsystem. They supersede less featured
1659# ata(4) subsystem drivers, supporting same hardware.
1660
1661device		ahci
1662device		mvs
1663device		siis
1664
1665#
1666# The 'ATA' driver supports all legacy ATA/ATAPI controllers, including
1667# PC Card devices. You only need one "device ata" for it to find all
1668# PCI and PC Card ATA/ATAPI devices on modern machines.
1669# Alternatively, individual bus and chipset drivers may be chosen by using
1670# the 'atacore' driver then selecting the drivers on a per vendor basis.
1671# For example to build a system which only supports a VIA chipset,
1672# omit 'ata' and include the 'atacore', 'atapci' and 'atavia' drivers.
1673device		ata
1674
1675# Modular ATA
1676#device		atacore		# Core ATA functionality
1677#device		ataisa		# ISA bus support
1678#device		atapci		# PCI bus support; only generic chipset support
1679
1680# PCI ATA chipsets
1681#device		ataacard	# ACARD
1682#device		ataacerlabs	# Acer Labs Inc. (ALI)
1683#device		ataamd		# American Micro Devices (AMD)
1684#device		ataati		# ATI
1685#device		atacenatek	# Cenatek
1686#device		atacypress	# Cypress
1687#device		atacyrix	# Cyrix
1688#device		atahighpoint	# HighPoint
1689#device		ataintel	# Intel
1690#device		ataite		# Integrated Technology Inc. (ITE)
1691#device		atajmicron	# JMicron
1692#device		atamarvell	# Marvell
1693#device		atamicron	# Micron
1694#device		atanational	# National
1695#device		atanetcell	# NetCell
1696#device		atanvidia	# nVidia
1697#device		atapromise	# Promise
1698#device		ataserverworks	# ServerWorks
1699#device		atasiliconimage	# Silicon Image Inc. (SiI) (formerly CMD)
1700#device		atasis		# Silicon Integrated Systems Corp.(SiS)
1701#device		atavia		# VIA Technologies Inc.
1702
1703#
1704# For older non-PCI, non-PnPBIOS systems, these are the hints lines to add:
1705envvar		hint.ata.0.at="isa"
1706envvar		hint.ata.0.port="0x1f0"
1707envvar		hint.ata.0.irq="14"
1708envvar		hint.ata.1.at="isa"
1709envvar		hint.ata.1.port="0x170"
1710envvar		hint.ata.1.irq="15"
1711
1712#
1713# uart: newbusified driver for serial interfaces.  It consolidates the sio(4),
1714#	sab(4) and zs(4) drivers.
1715#
1716device		uart
1717
1718# Options for uart(4)
1719options 	UART_PPS_ON_CTS		# Do time pulse capturing using CTS
1720					# instead of DCD.
1721options 	UART_POLL_FREQ		# Set polling rate, used when hw has
1722					# no interrupt support (50 Hz default).
1723
1724# The following hint should only be used for pure ISA devices.  It is not
1725# needed otherwise.  Use of hints is strongly discouraged.
1726envvar		hint.uart.0.at="isa"
1727
1728# The following 3 hints are used when the UART is a system device (i.e., a
1729# console or debug port), but only on platforms that don't have any other
1730# means to pass the information to the kernel.  The unit number of the hint
1731# is only used to bundle the hints together.  There is no relation to the
1732# unit number of the probed UART.
1733envvar		hint.uart.0.port="0x3f8"
1734envvar		hint.uart.0.flags="0x10"
1735envvar		hint.uart.0.baud="115200"
1736
1737# `flags' for serial drivers that support consoles like sio(4) and uart(4):
1738#	0x10	enable console support for this unit.  Other console flags
1739#		(if applicable) are ignored unless this is set.  Enabling
1740#		console support does not make the unit the preferred console.
1741#		Boot with -h or set boot_serial=YES in the loader.  For sio(4)
1742#		specifically, the 0x20 flag can also be set (see above).
1743#		Currently, at most one unit can have console support; the
1744#		first one (in config file order) with this flag set is
1745#		preferred.  Setting this flag for sio0 gives the old behavior.
1746#	0x80	use this port for serial line gdb support in ddb.  Also known
1747#		as debug port.
1748#
1749
1750# Options for serial drivers that support consoles:
1751options 	BREAK_TO_DEBUGGER	# A BREAK/DBG on the console goes to
1752					# ddb, if available.
1753
1754# Solaris implements a new BREAK which is initiated by a character
1755# sequence CR ~ ^b which is similar to a familiar pattern used on
1756# Sun servers by the Remote Console.  There are FreeBSD extensions:
1757# CR ~ ^p requests force panic and CR ~ ^r requests a clean reboot.
1758options 	ALT_BREAK_TO_DEBUGGER
1759
1760# Serial Communications Controller
1761# Supports the Freescale/NXP QUad Integrated and Zilog Z8530 multi-channel
1762# communications controllers.
1763device		scc
1764
1765# PCI Universal Communications driver
1766# Supports various multi port PCI I/O cards.
1767device		puc
1768
1769#
1770# Network interfaces:
1771#
1772# MII bus support is required for many PCI Ethernet NICs,
1773# namely those which use MII-compliant transceivers or implement
1774# transceiver control interfaces that operate like an MII.  Adding
1775# "device miibus" to the kernel config pulls in support for the generic
1776# miibus API, the common support for for bit-bang'ing the MII and all
1777# of the PHY drivers, including a generic one for PHYs that aren't
1778# specifically handled by an individual driver.  Support for specific
1779# PHYs may be built by adding "device mii", "device mii_bitbang" if
1780# needed by the NIC driver and then adding the appropriate PHY driver.
1781device  	mii		# Minimal MII support
1782device  	mii_bitbang	# Common module for bit-bang'ing the MII
1783device  	miibus		# MII support w/ bit-bang'ing and all PHYs
1784
1785device  	acphy		# Altima Communications AC101
1786device  	amphy		# AMD AM79c873 / Davicom DM910{1,2}
1787device  	atphy		# Attansic/Atheros F1
1788device  	axphy		# Asix Semiconductor AX88x9x
1789device  	bmtphy		# Broadcom BCM5201/BCM5202 and 3Com 3c905C
1790device		bnxt		# Broadcom NetXtreme-C/NetXtreme-E
1791device  	brgphy		# Broadcom BCM54xx/57xx 1000baseTX
1792device  	cgem		# Cadence GEM Gigabit Ethernet
1793device  	ciphy		# Cicada/Vitesse CS/VSC8xxx
1794device  	e1000phy	# Marvell 88E1000 1000/100/10-BT
1795device  	gentbi		# Generic 10-bit 1000BASE-{LX,SX} fiber ifaces
1796device  	icsphy		# ICS ICS1889-1893
1797device  	ip1000phy	# IC Plus IP1000A/IP1001
1798device  	jmphy		# JMicron JMP211/JMP202
1799device  	lxtphy		# Level One LXT-970
1800device  	nsgphy		# NatSemi DP8361/DP83865/DP83891
1801device  	nsphy		# NatSemi DP83840A
1802device  	nsphyter	# NatSemi DP83843/DP83815
1803device  	pnaphy		# HomePNA
1804device  	qsphy		# Quality Semiconductor QS6612
1805device  	rdcphy		# RDC Semiconductor R6040
1806device  	rgephy		# RealTek 8169S/8110S/8211B/8211C
1807device  	rlphy		# RealTek 8139
1808device  	rlswitch	# RealTek 8305
1809device  	smcphy		# SMSC LAN91C111
1810device  	tdkphy		# TDK 89Q2120
1811device  	truephy		# LSI TruePHY
1812device		xmphy		# XaQti XMAC II
1813
1814# ae:   Support for gigabit ethernet adapters based on the Attansic/Atheros
1815#       L2 PCI-Express FastEthernet controllers.
1816# age:  Support for gigabit ethernet adapters based on the Attansic/Atheros
1817#       L1 PCI express gigabit ethernet controllers.
1818# alc:  Support for Atheros AR8131/AR8132 PCIe ethernet controllers.
1819# ale:  Support for Atheros AR8121/AR8113/AR8114 PCIe ethernet controllers.
1820# ath:  Atheros a/b/g WiFi adapters (requires ath_hal and wlan)
1821# bce:	Broadcom NetXtreme II (BCM5706/BCM5708) PCI/PCIe Gigabit Ethernet
1822#       adapters.
1823# bfe:	Broadcom BCM4401 Ethernet adapter.
1824# bge:	Support for gigabit ethernet adapters based on the Broadcom
1825#	BCM570x family of controllers, including the 3Com 3c996-T,
1826#	the Netgear GA302T, the SysKonnect SK-9D21 and SK-9D41, and
1827#	the embedded gigE NICs on Dell PowerEdge 2550 servers.
1828# bnxt:	Broadcom NetXtreme-C and NetXtreme-E PCIe 10/25/50G Ethernet adapters.
1829# bxe:	Broadcom NetXtreme II (BCM5771X/BCM578XX) PCIe 10Gb Ethernet
1830#       adapters.
1831# bwi:	Broadcom BCM430* and BCM431* family of wireless adapters.
1832# bwn:	Broadcom BCM43xx family of wireless adapters.
1833# cas:	Sun Cassini/Cassini+ and National Semiconductor DP83065 Saturn
1834# cxgb: Chelsio T3 based 1GbE/10GbE PCIe Ethernet adapters.
1835# cxgbe:Chelsio T4, T5, and T6-based 1/10/25/40/100GbE PCIe Ethernet
1836#	adapters.
1837# cxgbev: Chelsio T4, T5, and T6-based PCIe Virtual Functions.
1838# dc:   Support for PCI fast ethernet adapters based on the DEC/Intel 21143
1839#       and various workalikes including:
1840#       the ADMtek AL981 Comet and AN985 Centaur, the ASIX Electronics
1841#       AX88140A and AX88141, the Davicom DM9100 and DM9102, the Lite-On
1842#       82c168 and 82c169 PNIC, the Lite-On/Macronix LC82C115 PNIC II
1843#       and the Macronix 98713/98713A/98715/98715A/98725 PMAC. This driver
1844#       replaces the old al, ax, dm, pn and mx drivers.  List of brands:
1845#       Digital DE500-BA, Kingston KNE100TX, D-Link DFE-570TX, SOHOware SFA110,
1846#       SVEC PN102-TX, CNet Pro110B, 120A, and 120B, Compex RL100-TX,
1847#       LinkSys LNE100TX, LNE100TX V2.0, Jaton XpressNet, Alfa Inc GFC2204,
1848#       KNE110TX.
1849# em:   Intel Pro/1000 Gigabit Ethernet 82542, 82543, 82544 based adapters.
1850# fxp:  Intel EtherExpress Pro/100B
1851#	(hint of prefer_iomap can be done to prefer I/O instead of Mem mapping)
1852# gem:  Apple GMAC/Sun ERI/Sun GEM
1853# jme:  JMicron JMC260 Fast Ethernet/JMC250 Gigabit Ethernet based adapters.
1854# le:   AMD Am7900 LANCE and Am79C9xx PCnet
1855# lge:	Support for PCI gigabit ethernet adapters based on the Level 1
1856#	LXT1001 NetCellerator chipset. This includes the D-Link DGE-500SX,
1857#	SMC TigerCard 1000 (SMC9462SX), and some Addtron cards.
1858# lio:  Support for Cavium 23XX Ethernet adapters
1859# malo: Marvell Libertas wireless NICs.
1860# mwl:  Marvell 88W8363 802.11n wireless NICs.
1861#	Requires the mwl firmware module
1862# mwlfw: Marvell 88W8363 firmware
1863# msk:	Support for gigabit ethernet adapters based on the Marvell/SysKonnect
1864#	Yukon II Gigabit controllers, including 88E8021, 88E8022, 88E8061,
1865#	88E8062, 88E8035, 88E8036, 88E8038, 88E8050, 88E8052, 88E8053,
1866#	88E8055, 88E8056 and D-Link 560T/550SX.
1867# mlxfw: Mellanox firmware update module.
1868# mlx5:	Mellanox ConnectX-4 and ConnectX-4 LX IB and Eth shared code module.
1869# mlx5en:Mellanox ConnectX-4 and ConnectX-4 LX PCIe Ethernet adapters.
1870# my:	Myson Fast Ethernet (MTD80X, MTD89X)
1871# nge:	Support for PCI gigabit ethernet adapters based on the National
1872#	Semiconductor DP83820 and DP83821 chipset. This includes the
1873#	SMC EZ Card 1000 (SMC9462TX), D-Link DGE-500T, Asante FriendlyNet
1874#	GigaNIX 1000TA and 1000TPC, the Addtron AEG320T, the Surecom
1875#	EP-320G-TX and the Netgear GA622T.
1876# oce:	Emulex 10 Gbit adapters (OneConnect Ethernet)
1877# ral:	Ralink Technology IEEE 802.11 wireless adapter
1878# re:   RealTek 8139C+/8169/816xS/811xS/8101E PCI/PCIe Ethernet adapter
1879# rl:   Support for PCI fast ethernet adapters based on the RealTek 8129/8139
1880#       chipset.  Note that the RealTek driver defaults to using programmed
1881#       I/O to do register accesses because memory mapped mode seems to cause
1882#       severe lockups on SMP hardware.  This driver also supports the
1883#       Accton EN1207D `Cheetah' adapter, which uses a chip called
1884#       the MPX 5030/5038, which is either a RealTek in disguise or a
1885#       RealTek workalike.  Note that the D-Link DFE-530TX+ uses the RealTek
1886#       chipset and is supported by this driver, not the 'vr' driver.
1887# rtwn: RealTek wireless adapters.
1888# rtwnfw: RealTek wireless firmware.
1889# sge:  Silicon Integrated Systems SiS190/191 Fast/Gigabit Ethernet adapter
1890# sis:  Support for NICs based on the Silicon Integrated Systems SiS 900,
1891#       SiS 7016 and NS DP83815 PCI fast ethernet controller chips.
1892# sk:   Support for the SysKonnect SK-984x series PCI gigabit ethernet NICs.
1893#       This includes the SK-9841 and SK-9842 single port cards (single mode
1894#       and multimode fiber) and the SK-9843 and SK-9844 dual port cards
1895#       (also single mode and multimode).
1896#       The driver will autodetect the number of ports on the card and
1897#       attach each one as a separate network interface.
1898# ste:  Sundance Technologies ST201 PCI fast ethernet controller, includes
1899#       the D-Link DFE-550TX.
1900# stge: Support for gigabit ethernet adapters based on the Sundance/Tamarack
1901#       TC9021 family of controllers, including the Sundance ST2021/ST2023,
1902#       the Sundance/Tamarack TC9021, the D-Link DL-4000 and ASUS NX1101.
1903# ti:   Support for PCI gigabit ethernet NICs based on the Alteon Networks
1904#       Tigon 1 and Tigon 2 chipsets.  This includes the Alteon AceNIC, the
1905#       3Com 3c985, the Netgear GA620 and various others.  Note that you will
1906#       probably want to bump up kern.ipc.nmbclusters a lot to use this driver.
1907# vr:   Support for various fast ethernet adapters based on the VIA
1908#       Technologies VT3043 `Rhine I' and VT86C100A `Rhine II' chips,
1909#       including the D-Link DFE520TX and D-Link DFE530TX (see 'rl' for
1910#       DFE530TX+), the Hawking Technologies PN102TX, and the AOpen/Acer ALN-320.
1911# vte:  DM&P Vortex86 RDC R6040 Fast Ethernet
1912# xl:   Support for the 3Com 3c900, 3c905, 3c905B and 3c905C (Fast)
1913#       Etherlink XL cards and integrated controllers.  This includes the
1914#       integrated 3c905B-TX chips in certain Dell Optiplex and Dell
1915#       Precision desktop machines and the integrated 3c905-TX chips
1916#       in Dell Latitude laptop docking stations.
1917#       Also supported: 3Com 3c980(C)-TX, 3Com 3cSOHO100-TX, 3Com 3c450-TX
1918
1919# PCI Ethernet NICs that use the common MII bus controller code.
1920device		ae		# Attansic/Atheros L2 FastEthernet
1921device		age		# Attansic/Atheros L1 Gigabit Ethernet
1922device		alc		# Atheros AR8131/AR8132 Ethernet
1923device		ale		# Atheros AR8121/AR8113/AR8114 Ethernet
1924device		bce		# Broadcom BCM5706/BCM5708 Gigabit Ethernet
1925device		bfe		# Broadcom BCM440x 10/100 Ethernet
1926device		bge		# Broadcom BCM570xx Gigabit Ethernet
1927device		cas		# Sun Cassini/Cassini+ and NS DP83065 Saturn
1928device		dc		# DEC/Intel 21143 and various workalikes
1929device		et		# Agere ET1310 10/100/Gigabit Ethernet
1930device		fxp		# Intel EtherExpress PRO/100B (82557, 82558)
1931envvar		hint.fxp.0.prefer_iomap="0"
1932device		gem		# Apple GMAC/Sun ERI/Sun GEM
1933device		jme		# JMicron JMC250 Gigabit/JMC260 Fast Ethernet
1934device		lge		# Level 1 LXT1001 gigabit Ethernet
1935device		mlxfw		# Mellanox firmware update module
1936device		mlx5		# Shared code module between IB and Ethernet
1937device		mlx5en		# Mellanox ConnectX-4 and ConnectX-4 LX
1938device		msk		# Marvell/SysKonnect Yukon II Gigabit Ethernet
1939device		my		# Myson Fast Ethernet (MTD80X, MTD89X)
1940device		nge		# NatSemi DP83820 gigabit Ethernet
1941device		re		# RealTek 8139C+/8169/8169S/8110S
1942device		rl		# RealTek 8129/8139
1943device		sge		# Silicon Integrated Systems SiS190/191
1944device		sis		# Silicon Integrated Systems SiS 900/SiS 7016
1945device		sk		# SysKonnect SK-984x & SK-982x gigabit Ethernet
1946device		ste		# Sundance ST201 (D-Link DFE-550TX)
1947device		stge		# Sundance/Tamarack TC9021 gigabit Ethernet
1948device		vr		# VIA Rhine, Rhine II
1949device		vte		# DM&P Vortex86 RDC R6040 Fast Ethernet
1950device		xl		# 3Com 3c90x (``Boomerang'', ``Cyclone'')
1951
1952# PCI/PCI-X/PCIe Ethernet NICs that use iflib infrastructure
1953device		iflib
1954device		em		# Intel Pro/1000 Gigabit Ethernet
1955device		ix		# Intel Pro/10Gbe PCIE Ethernet
1956device		ixv		# Intel Pro/10Gbe PCIE Ethernet VF
1957
1958# PCI Ethernet NICs.
1959device		cxgb		# Chelsio T3 10 Gigabit Ethernet
1960device		cxgb_t3fw	# Chelsio T3 10 Gigabit Ethernet firmware
1961device		cxgbe		# Chelsio T4-T6 1/10/25/40/100 Gigabit Ethernet
1962device		cxgbev		# Chelsio T4-T6 Virtual Functions
1963device		le		# AMD Am7900 LANCE and Am79C9xx PCnet
1964device		mxge		# Myricom Myri-10G 10GbE NIC
1965device		oce		# Emulex 10 GbE (OneConnect Ethernet)
1966device		ti		# Alteon Networks Tigon I/II gigabit Ethernet
1967
1968# PCI IEEE 802.11 Wireless NICs
1969device		ath		# Atheros pci/cardbus NIC's
1970device		ath_hal		# pci/cardbus chip support
1971#device		ath_ar5210	# AR5210 chips
1972#device		ath_ar5211	# AR5211 chips
1973#device		ath_ar5212	# AR5212 chips
1974#device		ath_rf2413
1975#device		ath_rf2417
1976#device		ath_rf2425
1977#device		ath_rf5111
1978#device		ath_rf5112
1979#device		ath_rf5413
1980#device		ath_ar5416	# AR5416 chips
1981# All of the AR5212 parts have a problem when paired with the AR71xx
1982# CPUS.  These parts have a bug that triggers a fatal bus error on the AR71xx
1983# only.  Details of the exact nature of the bug are sketchy, but some can be
1984# found at https://forum.openwrt.org/viewtopic.php?pid=70060 on pages 4, 5 and
1985# 6.  This option enables this workaround.  There is a performance penalty
1986# for this work around, but without it things don't work at all.  The DMA
1987# from the card usually bursts 128 bytes, but on the affected CPUs, only
1988# 4 are safe.
1989options	   	AH_RXCFG_SDMAMW_4BYTES
1990#device		ath_ar9160	# AR9160 chips
1991#device		ath_ar9280	# AR9280 chips
1992#device		ath_ar9285	# AR9285 chips
1993device		ath_rate_sample	# SampleRate tx rate control for ath
1994device		bwi		# Broadcom BCM430* BCM431*
1995device		bwn		# Broadcom BCM43xx
1996device		malo		# Marvell Libertas wireless NICs.
1997device		mwl		# Marvell 88W8363 802.11n wireless NICs.
1998device		mwlfw
1999device		ral		# Ralink Technology RT2500 wireless NICs.
2000device		rtwn		# Realtek wireless NICs
2001device		rtwnfw
2002
2003# Use sf_buf(9) interface for jumbo buffers on ti(4) controllers.
2004#options 	TI_SF_BUF_JUMBO
2005# Turn on the header splitting option for the ti(4) driver firmware.  This
2006# only works for Tigon II chips, and has no effect for Tigon I chips.
2007# This option requires the TI_SF_BUF_JUMBO option above.
2008#options 	TI_JUMBO_HDRSPLIT
2009
2010# These two options allow manipulating the mbuf cluster size and mbuf size,
2011# respectively.  Be very careful with NIC driver modules when changing
2012# these from their default values, because that can potentially cause a
2013# mismatch between the mbuf size assumed by the kernel and the mbuf size
2014# assumed by a module.  The only driver that currently has the ability to
2015# detect a mismatch is ti(4).
2016options 	MCLSHIFT=12	# mbuf cluster shift in bits, 12 == 4KB
2017options 	MSIZE=512	# mbuf size in bytes
2018
2019#
2020# Sound drivers
2021#
2022# sound: The generic sound driver.
2023#
2024
2025device		sound
2026
2027#
2028# snd_*: Device-specific drivers.
2029#
2030# The flags of the device tell the device a bit more info about the
2031# device that normally is obtained through the PnP interface.
2032#	bit  2..0   secondary DMA channel;
2033#	bit  4      set if the board uses two dma channels;
2034#	bit 15..8   board type, overrides autodetection; leave it
2035#		    zero if don't know what to put in (and you don't,
2036#		    since this is unsupported at the moment...).
2037#
2038# snd_ad1816:		Analog Devices AD1816 ISA PnP/non-PnP.
2039# snd_als4000:		Avance Logic ALS4000 PCI.
2040# snd_atiixp:		ATI IXP 200/300/400 PCI.
2041# snd_cmi:		CMedia CMI8338/CMI8738 PCI.
2042# snd_cs4281:		Crystal Semiconductor CS4281 PCI.
2043# snd_csa:		Crystal Semiconductor CS461x/428x PCI. (except
2044#			4281)
2045# snd_ds1:		Yamaha DS-1 PCI.
2046# snd_emu10k1:		Creative EMU10K1 PCI and EMU10K2 (Audigy) PCI.
2047# snd_emu10kx:		Creative SoundBlaster Live! and Audigy
2048# snd_envy24:		VIA Envy24 and compatible, needs snd_spicds.
2049# snd_envy24ht:		VIA Envy24HT and compatible, needs snd_spicds.
2050# snd_es137x:		Ensoniq AudioPCI ES137x PCI.
2051# snd_ess:		Ensoniq ESS ISA PnP/non-PnP, to be used in
2052#			conjunction with snd_sbc.
2053# snd_fm801:		Forte Media FM801 PCI.
2054# snd_gusc:		Gravis UltraSound ISA PnP/non-PnP.
2055# snd_hda:		Intel High Definition Audio (Controller) and
2056#			compatible.
2057# snd_hdspe:		RME HDSPe AIO and RayDAT.
2058# snd_ich:		Intel ICH AC'97 and some more audio controllers
2059#			embedded in a chipset, for example nVidia
2060#			nForce controllers.
2061# snd_maestro:		ESS Technology Maestro-1/2x PCI.
2062# snd_maestro3:		ESS Technology Maestro-3/Allegro PCI.
2063# snd_mss:		Microsoft Sound System ISA PnP/non-PnP.
2064# snd_neomagic:		Neomagic 256 AV/ZX PCI.
2065# snd_sb16:		Creative SoundBlaster16, to be used in
2066#			conjunction with snd_sbc.
2067# snd_sb8:		Creative SoundBlaster (pre-16), to be used in
2068#			conjunction with snd_sbc.
2069# snd_sbc:		Creative SoundBlaster ISA PnP/non-PnP.
2070#			Supports ESS and Avance ISA chips as well.
2071# snd_solo:		ESS Solo-1x PCI.
2072# snd_spicds:		SPI codec driver, needed by Envy24/Envy24HT drivers.
2073# snd_t4dwave:		Trident 4DWave DX/NX PCI, Sis 7018 PCI and Acer Labs
2074#			M5451 PCI.
2075# snd_uaudio:		USB audio.
2076# snd_via8233:		VIA VT8233x PCI.
2077# snd_via82c686:	VIA VT82C686A PCI.
2078# snd_vibes:		S3 Sonicvibes PCI.
2079
2080device		snd_ad1816
2081device		snd_als4000
2082device		snd_atiixp
2083device		snd_cmi
2084device		snd_cs4281
2085device		snd_csa
2086device		snd_ds1
2087device		snd_emu10k1
2088device		snd_emu10kx
2089device		snd_envy24
2090device		snd_envy24ht
2091device		snd_es137x
2092device		snd_ess
2093device		snd_fm801
2094device		snd_gusc
2095device		snd_hda
2096device		snd_hdspe
2097device		snd_ich
2098device		snd_maestro
2099device		snd_maestro3
2100device		snd_mss
2101device		snd_neomagic
2102device		snd_sb16
2103device		snd_sb8
2104device		snd_sbc
2105device		snd_solo
2106device		snd_spicds
2107device		snd_t4dwave
2108device		snd_uaudio
2109device		snd_via8233
2110device		snd_via82c686
2111device		snd_vibes
2112
2113# For non-PnP sound cards:
2114envvar		hint.pcm.0.at="isa"
2115envvar		hint.pcm.0.irq="10"
2116envvar		hint.pcm.0.drq="1"
2117envvar		hint.pcm.0.flags="0x0"
2118envvar		hint.sbc.0.at="isa"
2119envvar		hint.sbc.0.port="0x220"
2120envvar		hint.sbc.0.irq="5"
2121envvar		hint.sbc.0.drq="1"
2122envvar		hint.sbc.0.flags="0x15"
2123envvar		hint.gusc.0.at="isa"
2124envvar		hint.gusc.0.port="0x220"
2125envvar		hint.gusc.0.irq="5"
2126envvar		hint.gusc.0.drq="1"
2127envvar		hint.gusc.0.flags="0x13"
2128
2129#
2130# Following options are intended for debugging/testing purposes:
2131#
2132# SND_DEBUG                    Enable extra debugging code that includes
2133#                              sanity checking and possible increase of
2134#                              verbosity.
2135#
2136# SND_DIAGNOSTIC               Similar in a spirit of INVARIANTS/DIAGNOSTIC,
2137#                              zero tolerance against inconsistencies.
2138#
2139# SND_FEEDER_MULTIFORMAT       By default, only 16/32 bit feeders are compiled
2140#                              in. This options enable most feeder converters
2141#                              except for 8bit. WARNING: May bloat the kernel.
2142#
2143# SND_FEEDER_FULL_MULTIFORMAT  Ditto, but includes 8bit feeders as well.
2144#
2145# SND_FEEDER_RATE_HP           (feeder_rate) High precision 64bit arithmetic
2146#                              as much as possible (the default trying to
2147#                              avoid it). Possible slowdown.
2148#
2149# SND_PCM_64                   (Only applicable for i386/32bit arch)
2150#                              Process 32bit samples through 64bit
2151#                              integer/arithmetic. Slight increase of dynamic
2152#                              range at a cost of possible slowdown.
2153#
2154# SND_OLDSTEREO                Only 2 channels are allowed, effectively
2155#                              disabling multichannel processing.
2156#
2157options		SND_DEBUG
2158options		SND_DIAGNOSTIC
2159options		SND_FEEDER_MULTIFORMAT
2160options		SND_FEEDER_FULL_MULTIFORMAT
2161options		SND_FEEDER_RATE_HP
2162options		SND_PCM_64
2163options		SND_OLDSTEREO
2164
2165#
2166# PC Card/PCMCIA and Cardbus
2167#
2168# cbb: pci/cardbus bridge implementing YENTA interface
2169# cardbus: cardbus slots
2170device		cbb
2171device		cardbus
2172
2173#
2174# MMC/SD
2175#
2176# mmc 		MMC/SD bus
2177# mmcsd		MMC/SD memory card
2178# sdhci		Generic PCI SD Host Controller
2179# rtsx		Realtek SD card reader (RTS5209, RTS5227, ...)
2180device		mmc
2181device		mmcsd
2182device		sdhci
2183device		rtsx
2184
2185#
2186# SMB bus
2187#
2188# System Management Bus support is provided by the 'smbus' device.
2189# Access to the SMBus device is via the 'smb' device (/dev/smb*),
2190# which is a child of the 'smbus' device.
2191#
2192# Supported devices:
2193# smb		standard I/O through /dev/smb*
2194#
2195# Supported SMB interfaces:
2196# iicsmb	I2C to SMB bridge with any iicbus interface
2197# intpm		Intel PIIX4 (82371AB, 82443MX) Power Management Unit
2198# alpm		Acer Aladdin-IV/V/Pro2 Power Management Unit
2199# ichsmb	Intel ICH SMBus controller chips (82801AA, 82801AB, 82801BA)
2200# viapm		VIA VT82C586B/596B/686A and VT8233 Power Management Unit
2201# amdpm		AMD 756 Power Management Unit
2202# amdsmb	AMD 8111 SMBus 2.0 Controller
2203# nfpm		NVIDIA nForce Power Management Unit
2204# nfsmb		NVIDIA nForce2/3/4 MCP SMBus 2.0 Controller
2205# ismt		Intel SMBus 2.0 controller chips (on Atom S1200, C2000)
2206#
2207device		smbus		# Bus support, required for smb below.
2208
2209device		intpm
2210device		alpm
2211device		ichsmb
2212device		viapm
2213device		amdpm
2214device		amdsmb
2215device		nfpm
2216device		nfsmb
2217device		ismt
2218
2219device		smb
2220
2221# SMBus peripheral devices
2222#
2223# jedec_dimm	Asset and temperature reporting for DDR3 and DDR4 DIMMs
2224#
2225device		jedec_dimm
2226
2227# I2C Bus
2228#
2229# Philips i2c bus support is provided by the `iicbus' device.
2230#
2231# Supported devices:
2232# ic	i2c network interface
2233# iic	i2c standard io
2234# iicsmb i2c to smb bridge. Allow i2c i/o with smb commands.
2235# iicoc simple polling driver for OpenCores I2C controller
2236#
2237# Other:
2238# iicbb	generic I2C bit-banging code (needed by lpbb)
2239#
2240device		iicbus		# Bus support, required for ic/iic/iicsmb below.
2241device		iicbb		# bitbang driver; implements i2c on a pair of gpio pins
2242
2243device		ic
2244device		iic		# userland access to i2c slave devices via ioctl(8)
2245device		iicsmb		# smb over i2c bridge
2246device		iicoc		# OpenCores I2C controller support
2247
2248# I2C bus multiplexer (mux) devices
2249device		iicmux		# i2c mux core driver
2250device		iic_gpiomux	# i2c mux hardware controlled via gpio pins
2251device		ltc430x		# LTC4305 and LTC4306 i2c mux chips
2252
2253# I2C peripheral devices
2254#
2255device		ad7418		# Analog Devices temp and voltage sensor
2256device		ads111x		# Texas Instruments ADS101x and ADS111x ADCs
2257device		ds1307		# Dallas DS1307 RTC and compatible
2258device		ds13rtc		# All Dallas/Maxim ds13xx chips
2259device		ds1672		# Dallas DS1672 RTC
2260device		ds3231		# Dallas DS3231 RTC + temperature
2261device		fan53555	# Fairchild Semi FAN53555/SYR82x Regulator
2262device		icee		# AT24Cxxx and compatible EEPROMs
2263device		isl12xx		# Intersil ISL12xx RTC
2264device		lm75		# LM75 compatible temperature sensor
2265device		nxprtc		# NXP RTCs: PCA/PFC212x PCA/PCF85xx
2266device		rtc8583		# Epson RTC-8583
2267device		s35390a		# Seiko Instruments S-35390A RTC
2268device		sy8106a		# Silergy Corp. SY8106A buck regulator
2269
2270# Parallel-Port Bus
2271#
2272# Parallel port bus support is provided by the `ppbus' device.
2273# Multiple devices may be attached to the parallel port, devices
2274# are automatically probed and attached when found.
2275#
2276# Supported devices:
2277# lpt	Parallel Printer
2278# plip	Parallel network interface
2279# ppi	General-purpose I/O ("Geek Port") + IEEE1284 I/O
2280# pps	Pulse per second Timing Interface
2281# lpbb	Philips official parallel port I2C bit-banging interface
2282# pcfclock Parallel port clock driver.
2283#
2284# Supported interfaces:
2285# ppc	ISA-bus parallel port interfaces.
2286#
2287
2288options 	PPC_PROBE_CHIPSET # Enable chipset specific detection
2289				  # (see flags in ppc(4))
2290options 	DEBUG_1284	# IEEE1284 signaling protocol debug
2291options 	PERIPH_1284	# Makes your computer act as an IEEE1284
2292				# compliant peripheral
2293options 	DONTPROBE_1284	# Avoid boot detection of PnP parallel devices
2294options 	LPT_DEBUG	# Printer driver debug
2295options 	PPC_DEBUG	# Parallel chipset level debug
2296options 	PLIP_DEBUG	# Parallel network IP interface debug
2297options 	PCFCLOCK_VERBOSE         # Verbose pcfclock driver
2298options 	PCFCLOCK_MAX_RETRIES=5   # Maximum read tries (default 10)
2299
2300device		ppc
2301envvar		hint.ppc.0.at="isa"
2302envvar		hint.ppc.0.irq="7"
2303device		ppbus
2304device		lpt
2305device		plip
2306device		ppi
2307device		pps
2308device		lpbb
2309device		pcfclock
2310
2311# General Purpose I/O pins
2312device		dwgpio		# Synopsys DesignWare APB GPIO Controller
2313device  	gpio		# gpio interfaces and bus support
2314device  	gpiobacklight	# sysctl control of gpio-based backlight
2315device  	gpioiic		# i2c via gpio bitbang
2316device  	gpiokeys	# kbd(4) glue for gpio-based key input
2317device  	gpioled		# led(4) gpio glue
2318device  	gpiopower	# event handler for gpio-based powerdown
2319device  	gpiopps		# Pulse per second input from gpio pin
2320device  	gpioregulator	# extres/regulator glue for gpio pin
2321device  	gpiospi		# SPI via gpio bitbang
2322device  	gpioths		# 1-wire temp/humidity sensor on gpio pin
2323
2324# Pulse width modulation
2325device  	pwmbus		# pwm interface and bus support
2326device  	pwmc		# userland control access to pwm outputs
2327
2328#
2329# Etherswitch framework and drivers
2330#
2331# etherswitch	The etherswitch(4) framework
2332# miiproxy	Proxy device for miibus(4) functionality
2333#
2334# Switch hardware support:
2335# arswitch	Atheros switches
2336# ip17x 	IC+ 17x family switches
2337# rtl8366r	Realtek RTL8366 switches
2338# ukswitch	Multi-PHY switches
2339#
2340device		etherswitch
2341device		miiproxy
2342device		arswitch
2343device		ip17x
2344device		rtl8366rb
2345device		ukswitch
2346
2347# Kernel BOOTP support
2348
2349options 	BOOTP		# Use BOOTP to obtain IP address/hostname
2350				# Requires NFSCL and NFS_ROOT
2351options 	BOOTP_NFSROOT	# NFS mount root filesystem using BOOTP info
2352options 	BOOTP_NFSV3	# Use NFS v3 to NFS mount root
2353options 	BOOTP_COMPAT	# Workaround for broken bootp daemons.
2354options 	BOOTP_WIRED_TO=fxp0 # Use interface fxp0 for BOOTP
2355options 	BOOTP_BLOCKSIZE=8192 # Override NFS block size
2356
2357#
2358# Enable software watchdog routines, even if hardware watchdog is present.
2359# By default, software watchdog timer is enabled only if no hardware watchdog
2360# is present.
2361#
2362options 	SW_WATCHDOG
2363
2364#
2365# Add the software deadlock resolver thread.
2366#
2367options 	DEADLKRES
2368
2369#
2370# Disable swapping of stack pages.  This option removes all
2371# code which actually performs swapping, so it's not possible to turn
2372# it back on at run-time.
2373#
2374# This is sometimes usable for systems which don't have any swap space
2375# (see also sysctl "vm.disable_swapspace_pageouts")
2376#
2377#options 	NO_SWAPPING
2378
2379# Set the number of sf_bufs to allocate. sf_bufs are virtual buffers
2380# for sendfile(2) that are used to map file VM pages, and normally
2381# default to a quantity that is roughly 16*MAXUSERS+512. You would
2382# typically want about 4 of these for each simultaneous file send.
2383#
2384options 	NSFBUFS=1024
2385
2386#
2387# Enable extra debugging code for locks.  This stores the filename and
2388# line of whatever acquired the lock in the lock itself, and changes a
2389# number of function calls to pass around the relevant data.  This is
2390# not at all useful unless you are debugging lock code.  Note that
2391# modules should be recompiled as this option modifies KBI.
2392#
2393options 	DEBUG_LOCKS
2394
2395#####################################################################
2396# HID support
2397device		hid		# Generic HID support
2398options 	HID_DEBUG	# enable debug msgs
2399device		hidbus		# HID bus
2400device		hidmap		# HID to evdev mapping
2401device		hidraw		# Raw access driver
2402options 	HIDRAW_MAKE_UHID_ALIAS	# install /dev/uhid alias
2403device		hconf		# Multitouch configuration TLC
2404device		hcons		# Consumer controls
2405device		hgame		# Generic game controllers
2406device		hkbd		# HID keyboard
2407device		hms		# HID mouse
2408device		hmt		# HID multitouch (MS-compatible)
2409device		hpen		# Generic pen driver
2410device		hsctrl		# System controls
2411device		ps4dshock	# Sony PS4 DualShock 4 gamepad driver
2412device		xb360gp		# XBox 360 gamepad driver
2413
2414#####################################################################
2415# USB support
2416# UHCI controller
2417device		uhci
2418# OHCI controller
2419device		ohci
2420# EHCI controller
2421device		ehci
2422# XHCI controller
2423device		xhci
2424# SL811 Controller
2425#device		slhci
2426# General USB code (mandatory for USB)
2427device		usb
2428#
2429# USB Double Bulk Pipe devices
2430device		udbp
2431# USB temperature meter
2432device		ugold
2433# USB LED
2434device		uled
2435# Human Interface Device (anything with buttons and dials)
2436device		uhid
2437# USB keyboard
2438device		ukbd
2439# USB printer
2440device		ulpt
2441# USB mass storage driver (Requires scbus and da)
2442device		umass
2443# USB mass storage driver for device-side mode
2444device		usfs
2445# USB support for Belkin F5U109 and Magic Control Technology serial adapters
2446device		umct
2447# USB modem support
2448device		umodem
2449# USB mouse
2450device		ums
2451# USB touchpad(s)
2452device		atp
2453device		wsp
2454# eGalax USB touch screen
2455device		uep
2456# Diamond Rio 500 MP3 player
2457device		urio
2458# HID-over-USB driver
2459device		usbhid
2460
2461#
2462# USB serial support
2463device		ucom
2464# USB support for 3G modem cards by Option, Novatel, Huawei and Sierra
2465device		u3g
2466# USB support for Technologies ARK3116 based serial adapters
2467device		uark
2468# USB support for Belkin F5U103 and compatible serial adapters
2469device		ubsa
2470# USB support for serial adapters based on the FT8U100AX and FT8U232AM
2471device		uftdi
2472# USB support for some Windows CE based serial communication.
2473device		uipaq
2474# USB support for Prolific PL-2303 serial adapters
2475device		uplcom
2476# USB support for Silicon Laboratories CP2101/CP2102 based USB serial adapters
2477device		uslcom
2478# USB Visor and Palm devices
2479device		uvisor
2480# USB serial support for DDI pocket's PHS
2481device		uvscom
2482#
2483# USB ethernet support
2484device		uether
2485# ADMtek USB ethernet. Supports the LinkSys USB100TX,
2486# the Billionton USB100, the Melco LU-ATX, the D-Link DSB-650TX
2487# and the SMC 2202USB. Also works with the ADMtek AN986 Pegasus
2488# eval board.
2489device		aue
2490
2491# ASIX Electronics AX88172 USB 2.0 ethernet driver. Used in the
2492# LinkSys USB200M and various other adapters.
2493device		axe
2494# ASIX Electronics AX88178A/AX88179 USB 2.0/3.0 gigabit ethernet driver.
2495device		axge
2496
2497#
2498# Devices which communicate using Ethernet over USB, particularly
2499# Communication Device Class (CDC) Ethernet specification. Supports
2500# Sharp Zaurus PDAs, some DOCSIS cable modems and so on.
2501device		cdce
2502#
2503# CATC USB-EL1201A USB ethernet. Supports the CATC Netmate
2504# and Netmate II, and the Belkin F5U111.
2505device		cue
2506#
2507# Kawasaki LSI ethernet. Supports the LinkSys USB10T,
2508# Entrega USB-NET-E45, Peracom Ethernet Adapter, the
2509# 3Com 3c19250, the ADS Technologies USB-10BT, the ATen UC10T,
2510# the Netgear EA101, the D-Link DSB-650, the SMC 2102USB
2511# and 2104USB, and the Corega USB-T.
2512device		kue
2513#
2514# RealTek RTL8150 USB to fast ethernet. Supports the Melco LUA-KTX
2515# and the GREEN HOUSE GH-USB100B.
2516device		rue
2517#
2518# Davicom DM9601E USB to fast ethernet. Supports the Corega FEther USB-TXC.
2519device		udav
2520#
2521# RealTek RTL8152/RTL8153 USB Ethernet driver
2522device		ure
2523#
2524# Moschip MCS7730/MCS7840 USB to fast ethernet. Supports the Sitecom LN030.
2525device		mos
2526#
2527# HSxPA devices from Option N.V
2528device		uhso
2529
2530# Realtek RTL8188SU/RTL8191SU/RTL8192SU wireless driver
2531device		rsu
2532#
2533# Ralink Technology RT2501USB/RT2601USB wireless driver
2534device		rum
2535# Ralink Technology RT2700U/RT2800U/RT3000U wireless driver
2536device		run
2537#
2538# Atheros AR5523 wireless driver
2539device		uath
2540#
2541# Conexant/Intersil PrismGT wireless driver
2542device		upgt
2543#
2544# Ralink Technology RT2500USB wireless driver
2545device		ural
2546#
2547# RNDIS USB ethernet driver
2548device		urndis
2549# Realtek RTL8187B/L wireless driver
2550device		urtw
2551#
2552# ZyDas ZD1211/ZD1211B wireless driver
2553device		zyd
2554#
2555# Sierra USB wireless driver
2556device		usie
2557
2558#
2559# debugging options for the USB subsystem
2560#
2561options 	USB_DEBUG
2562options 	U3G_DEBUG
2563
2564# options for ukbd:
2565options 	UKBD_DFLT_KEYMAP	# specify the built-in keymap
2566makeoptions	UKBD_DFLT_KEYMAP=jp.106
2567
2568# options for uplcom:
2569options 	UPLCOM_INTR_INTERVAL=100	# interrupt pipe interval
2570						# in milliseconds
2571
2572# options for uvscom:
2573options 	UVSCOM_DEFAULT_OPKTSIZE=8	# default output packet size
2574options 	UVSCOM_INTR_INTERVAL=100	# interrupt pipe interval
2575						# in milliseconds
2576
2577#####################################################################
2578# FireWire support
2579
2580device		firewire	# FireWire bus code
2581device		sbp		# SCSI over Firewire (Requires scbus and da)
2582device		sbp_targ	# SBP-2 Target mode  (Requires scbus and targ)
2583device		fwe		# Ethernet over FireWire (non-standard!)
2584device		fwip		# IP over FireWire (RFC2734 and RFC3146)
2585
2586#####################################################################
2587# dcons support (Dumb Console Device)
2588
2589device		dcons			# dumb console driver
2590device		dcons_crom		# FireWire attachment
2591options 	DCONS_BUF_SIZE=16384	# buffer size
2592options 	DCONS_POLL_HZ=100	# polling rate
2593options 	DCONS_FORCE_CONSOLE=0	# force to be the primary console
2594options 	DCONS_FORCE_GDB=1	# force to be the gdb device
2595
2596#####################################################################
2597# crypto subsystem
2598#
2599# This is a port of the OpenBSD crypto framework.  Include this when
2600# configuring IPSEC and when you have a h/w crypto device to accelerate
2601# user applications that link to OpenSSL.
2602#
2603# Drivers are ports from OpenBSD with some simple enhancements that have
2604# been fed back to OpenBSD.
2605
2606device		crypto		# core crypto support
2607
2608# Only install the cryptodev device if you are running tests, or know
2609# specifically why you need it.  In most cases, it is not needed and
2610# will make things slower.
2611device		cryptodev	# /dev/crypto for access to h/w
2612
2613device		rndtest		# FIPS 140-2 entropy tester
2614
2615device		ccr		# Chelsio T6
2616
2617device		hifn		# Hifn 7951, 7781, etc.
2618options 	HIFN_DEBUG	# enable debugging support: hw.hifn.debug
2619options 	HIFN_RNDTEST	# enable rndtest support
2620
2621#####################################################################
2622
2623
2624#
2625# Embedded system options:
2626#
2627# An embedded system might want to run something other than init.
2628options 	INIT_PATH=/sbin/init:/rescue/init
2629
2630# Debug options
2631options 	BUS_DEBUG	# enable newbus debugging
2632options 	DEBUG_VFS_LOCKS	# enable VFS lock debugging
2633options 	SOCKBUF_DEBUG	# enable sockbuf last record/mb tail checking
2634options 	IFMEDIA_DEBUG	# enable debugging in net/if_media.c
2635
2636#
2637# Verbose SYSINIT
2638#
2639# Make the SYSINIT process performed by mi_startup() verbose.  This is very
2640# useful when porting to a new architecture.  If DDB is also enabled, this
2641# will print function names instead of addresses.  If defined with a value
2642# of zero, the verbose code is compiled-in but disabled by default, and can
2643# be enabled with the debug.verbose_sysinit=1 tunable.
2644options 	VERBOSE_SYSINIT
2645
2646#####################################################################
2647# SYSV IPC KERNEL PARAMETERS
2648#
2649# Maximum number of System V semaphores that can be used on the system at
2650# one time.
2651options 	SEMMNI=11
2652
2653# Total number of semaphores system wide
2654options 	SEMMNS=61
2655
2656# Total number of undo structures in system
2657options 	SEMMNU=31
2658
2659# Maximum number of System V semaphores that can be used by a single process
2660# at one time.
2661options 	SEMMSL=61
2662
2663# Maximum number of operations that can be outstanding on a single System V
2664# semaphore at one time.
2665options 	SEMOPM=101
2666
2667# Maximum number of undo operations that can be outstanding on a single
2668# System V semaphore at one time.
2669options 	SEMUME=11
2670
2671# Maximum number of shared memory pages system wide.
2672options 	SHMALL=1025
2673
2674# Maximum size, in bytes, of a single System V shared memory region.
2675options 	SHMMAX=(SHMMAXPGS*PAGE_SIZE+1)
2676options 	SHMMAXPGS=1025
2677
2678# Minimum size, in bytes, of a single System V shared memory region.
2679options 	SHMMIN=2
2680
2681# Maximum number of shared memory regions that can be used on the system
2682# at one time.
2683options 	SHMMNI=33
2684
2685# Maximum number of System V shared memory regions that can be attached to
2686# a single process at one time.
2687options 	SHMSEG=9
2688
2689# Set the amount of time (in seconds) the system will wait before
2690# rebooting automatically when a kernel panic occurs.  If set to (-1),
2691# the system will wait indefinitely until a key is pressed on the
2692# console.
2693options 	PANIC_REBOOT_WAIT_TIME=16
2694
2695# Attempt to bypass the buffer cache and put data directly into the
2696# userland buffer for read operation when O_DIRECT flag is set on the
2697# file.  Both offset and length of the read operation must be
2698# multiples of the physical media sector size.
2699#
2700options 	DIRECTIO
2701
2702# Specify a lower limit for the number of swap I/O buffers.  They are
2703# (among other things) used when bypassing the buffer cache due to
2704# DIRECTIO kernel option enabled and O_DIRECT flag set on file.
2705#
2706options 	NSWBUF_MIN=120
2707
2708#####################################################################
2709
2710# More undocumented options for linting.
2711# Note that documenting these is not considered an affront.
2712
2713options 	CAM_DEBUG_DELAY
2714
2715options 	DEBUG
2716
2717# Kernel filelock debugging.
2718options 	LOCKF_DEBUG
2719
2720# System V compatible message queues
2721# Please note that the values provided here are used to test kernel
2722# building.  The defaults in the sources provide almost the same numbers.
2723# MSGSSZ must be a power of 2 between 8 and 1024.
2724options 	MSGMNB=2049	# Max number of chars in queue
2725options 	MSGMNI=41	# Max number of message queue identifiers
2726options 	MSGSEG=2049	# Max number of message segments
2727options 	MSGSSZ=16	# Size of a message segment
2728options 	MSGTQL=41	# Max number of messages in system
2729
2730options 	NBUF=512	# Number of buffer headers
2731
2732options 	SC_DEBUG_LEVEL=5	# Syscons debug level
2733options 	SC_RENDER_DEBUG	# syscons rendering debugging
2734
2735options 	VFS_BIO_DEBUG	# VFS buffer I/O debugging
2736
2737options 	KSTACK_MAX_PAGES=32 # Maximum pages to give the kernel stack
2738options 	KSTACK_USAGE_PROF
2739
2740# Adaptec Array Controller driver options
2741options 	AAC_DEBUG	# Debugging levels:
2742				# 0 - quiet, only emit warnings
2743				# 1 - noisy, emit major function
2744				#     points and things done
2745				# 2 - extremely noisy, emit trace
2746				#     items in loops, etc.
2747
2748# Resource Accounting
2749options 	RACCT
2750
2751# Resource Limits
2752options 	RCTL
2753
2754# Yet more undocumented options for linting.
2755options 	MAXFILES=999
2756
2757# Random number generator
2758# Alternative algorithm.
2759#options 	RANDOM_FENESTRASX
2760# Allow the CSPRNG algorithm to be loaded as a module.
2761#options 	RANDOM_LOADABLE
2762# Select this to allow high-rate but potentially expensive
2763# harvesting of Slab-Allocator entropy. In very high-rate
2764# situations the value of doing this is dubious at best.
2765options 	RANDOM_ENABLE_UMA	# slab allocator
2766
2767# Select this to allow high-rate but potentially expensive
2768# harvesting of of the m_next pointer in the mbuf. Note that
2769# the m_next pointer is NULL except when receiving > 4K
2770# jumbo frames or sustained bursts by way of LRO. Thus in
2771# the common case it is stirring zero in to the entropy
2772# pool. In cases where it is not NULL it is pointing to one
2773# of a small (in the thousands to 10s of thousands) number
2774# of 256 byte aligned mbufs. Hence it is, even in the best
2775# case, a poor source of entropy. And in the absence of actual
2776# runtime analysis of entropy collection may mislead the user in
2777# to believe that substantially more entropy is being collected
2778# than in fact is - leading to a different class of security
2779# risk. In high packet rate situations ethernet entropy
2780# collection is also very expensive, possibly leading to as
2781# much as a 50% drop in packets received.
2782# This option is present to maintain backwards compatibility
2783# if desired, however it cannot be recommended for use in any
2784# environment.
2785options 	RANDOM_ENABLE_ETHER	# ether_input
2786
2787# Module to enable execution of application via emulators like QEMU
2788options         IMAGACT_BINMISC
2789
2790# zlib I/O stream support
2791# This enables support for compressed core dumps.
2792options 	GZIO
2793
2794# zstd support
2795# This enables support for Zstd compressed core dumps, GEOM_UZIP images,
2796# and is required by zfs if statically linked.
2797options 	ZSTDIO
2798
2799# BHND(4) drivers
2800options		BHND_LOGLEVEL	# Logging threshold level
2801
2802# evdev interface
2803device		evdev		# input event device support
2804options 	EVDEV_SUPPORT	# evdev support in legacy drivers
2805options 	EVDEV_DEBUG	# enable event debug msgs
2806device		uinput		# install /dev/uinput cdev
2807options 	UINPUT_DEBUG	# enable uinput debug msgs
2808
2809# Encrypted kernel crash dumps.
2810options 	EKCD
2811
2812# Serial Peripheral Interface (SPI) support.
2813device		spibus		# Bus support.
2814device		at45d		# DataFlash driver
2815device		cqspi		#
2816device		mx25l		# SPIFlash driver
2817device		n25q		#
2818device		spigen		# Generic access to SPI devices from userland.
2819# Enable legacy /dev/spigenN name aliases for /dev/spigenX.Y devices.
2820options 	SPIGEN_LEGACY_CDEVNAME # legacy device names for spigen
2821
2822# Compression supports.
2823device		zlib		# gzip/zlib compression/decompression library
2824device		xz		# xz_embedded LZMA de-compression library
2825
2826# Kernel support for stats(3).
2827options 	STATS
2828