xref: /freebsd/sys/conf/NOTES (revision a7623790fb345e6dc986dfd31df0ace115e6f2e4)
1# $FreeBSD$
2#
3# NOTES -- Lines that can be cut/pasted into kernel and hints configs.
4#
5# Lines that begin with 'device', 'options', 'machine', 'ident', 'maxusers',
6# 'makeoptions', 'hints', etc. go into the kernel configuration that you
7# run config(8) with.
8#
9# Lines that begin with 'envvar hint.' should go into your hints file.
10# See /boot/device.hints and/or the 'hints' config(8) directive.
11#
12# Please use ``make LINT'' to create an old-style LINT file if you want to
13# do kernel test-builds.
14#
15# This file contains machine independent kernel configuration notes.  For
16# machine dependent notes, look in /sys/<arch>/conf/NOTES.
17#
18
19#
20# NOTES conventions and style guide:
21#
22# Large block comments should begin and end with a line containing only a
23# comment character.
24#
25# To describe a particular object, a block comment (if it exists) should
26# come first.  Next should come device, options, and hints lines in that
27# order.  All device and option lines must be described by a comment that
28# doesn't just expand the device or option name.  Use only a concise
29# comment on the same line if possible.  Very detailed descriptions of
30# devices and subsystems belong in man pages.
31#
32# A space followed by a tab separates 'options' from an option name.  Two
33# spaces followed by a tab separate 'device' from a device name.  Comments
34# after an option or device should use one space after the comment character.
35# To comment out a negative option that disables code and thus should not be
36# enabled for LINT builds, precede 'options' with "#!".
37#
38
39#
40# This is the ``identification'' of the kernel.  Usually this should
41# be the same as the name of your kernel.
42#
43ident		LINT
44
45#
46# The `maxusers' parameter controls the static sizing of a number of
47# internal system tables by a formula defined in subr_param.c.
48# Omitting this parameter or setting it to 0 will cause the system to
49# auto-size based on physical memory.
50#
51maxusers	10
52
53# To statically compile in device wiring instead of /boot/device.hints
54#hints		"LINT.hints"		# Default places to look for devices.
55
56# Use the following to compile in values accessible to the kernel
57# through getenv() (or kenv(1) in userland). The format of the file
58# is 'variable=value', see kenv(1)
59#
60#env		"LINT.env"
61
62#
63# The `makeoptions' parameter allows variables to be passed to the
64# generated Makefile in the build area.
65#
66# CONF_CFLAGS gives some extra compiler flags that are added to ${CFLAGS}
67# after most other flags.  Here we use it to inhibit use of non-optimal
68# gcc built-in functions (e.g., memcmp).
69#
70# DEBUG happens to be magic.
71# The following is equivalent to 'config -g KERNELNAME' and creates
72# 'kernel.debug' compiled with -g debugging as well as a normal
73# 'kernel'.  Use 'make install.debug' to install the debug kernel
74# but that isn't normally necessary as the debug symbols are not loaded
75# by the kernel and are not useful there anyway.
76#
77# KERNEL can be overridden so that you can change the default name of your
78# kernel.
79#
80# MODULES_OVERRIDE can be used to limit modules built to a specific list.
81#
82makeoptions	CONF_CFLAGS=-fno-builtin  #Don't allow use of memcmp, etc.
83#makeoptions	DEBUG=-g		#Build kernel with gdb(1) debug symbols
84#makeoptions	KERNEL=foo		#Build kernel "foo" and install "/foo"
85# Only build ext2fs module plus those parts of the sound system I need.
86#makeoptions	MODULES_OVERRIDE="ext2fs sound/sound sound/driver/maestro3"
87makeoptions	DESTDIR=/tmp
88
89#
90# FreeBSD processes are subject to certain limits to their consumption
91# of system resources.  See getrlimit(2) for more details.  Each
92# resource limit has two values, a "soft" limit and a "hard" limit.
93# The soft limits can be modified during normal system operation, but
94# the hard limits are set at boot time.  Their default values are
95# in sys/<arch>/include/vmparam.h.  There are two ways to change them:
96#
97# 1.  Set the values at kernel build time.  The options below are one
98#     way to allow that limit to grow to 1GB.  They can be increased
99#     further by changing the parameters:
100#
101# 2.  In /boot/loader.conf, set the tunables kern.maxswzone,
102#     kern.maxbcache, kern.maxtsiz, kern.dfldsiz, kern.maxdsiz,
103#     kern.dflssiz, kern.maxssiz and kern.sgrowsiz.
104#
105# The options in /boot/loader.conf override anything in the kernel
106# configuration file.  See the function init_param1 in
107# sys/kern/subr_param.c for more details.
108#
109
110options 	MAXDSIZ=(1024UL*1024*1024)
111options 	MAXSSIZ=(128UL*1024*1024)
112options 	DFLDSIZ=(1024UL*1024*1024)
113
114#
115# BLKDEV_IOSIZE sets the default block size used in user block
116# device I/O.  Note that this value will be overridden by the label
117# when specifying a block device from a label with a non-0
118# partition blocksize.  The default is PAGE_SIZE.
119#
120options 	BLKDEV_IOSIZE=8192
121
122#
123# MAXPHYS and DFLTPHYS
124#
125# These are the maximal and safe 'raw' I/O block device access sizes.
126# Reads and writes will be split into MAXPHYS chunks for known good
127# devices and DFLTPHYS for the rest. Some applications have better
128# performance with larger raw I/O access sizes. Note that certain VM
129# parameters are derived from these values and making them too large
130# can make an unbootable kernel.
131#
132# The defaults are 64K and 128K respectively.
133options 	DFLTPHYS=(64*1024)
134options 	MAXPHYS=(128*1024)
135
136
137# This allows you to actually store this configuration file into
138# the kernel binary itself. See config(8) for more details.
139#
140options 	INCLUDE_CONFIG_FILE     # Include this file in kernel
141
142#
143# Compile-time defaults for various boot parameters
144#
145options 	BOOTVERBOSE=1
146options 	BOOTHOWTO=RB_MULTIPLE
147
148#
149# Compile-time defaults for dmesg boot tagging
150#
151# Default boot tag; may use 'kern.boot_tag' loader tunable to override.  The
152# current boot's tag is also exposed via the 'kern.boot_tag' sysctl.
153options 	BOOT_TAG=\"\"
154# Maximum boot tag size the kernel's static buffer should accomodate.  Maximum
155# size for both BOOT_TAG and the assocated tunable.
156options 	BOOT_TAG_SZ=32
157
158options 	GEOM_BDE		# Disk encryption.
159options 	GEOM_CACHE		# Disk cache.
160options 	GEOM_CONCAT		# Disk concatenation.
161options 	GEOM_ELI		# Disk encryption.
162options 	GEOM_GATE		# Userland services.
163options 	GEOM_JOURNAL		# Journaling.
164options 	GEOM_LABEL		# Providers labelization.
165options 	GEOM_LINUX_LVM		# Linux LVM2 volumes
166options 	GEOM_MAP		# Map based partitioning
167options 	GEOM_MIRROR		# Disk mirroring.
168options 	GEOM_MULTIPATH		# Disk multipath
169options 	GEOM_NOP		# Test class.
170options 	GEOM_PART_APM		# Apple partitioning
171options 	GEOM_PART_BSD		# BSD disklabel
172options 	GEOM_PART_BSD64		# BSD disklabel64
173options 	GEOM_PART_EBR		# Extended Boot Records
174options 	GEOM_PART_GPT		# GPT partitioning
175options 	GEOM_PART_LDM		# Logical Disk Manager
176options 	GEOM_PART_MBR		# MBR partitioning
177options 	GEOM_PART_VTOC8		# SMI VTOC8 disk label
178options 	GEOM_RAID		# Soft RAID functionality.
179options 	GEOM_RAID3		# RAID3 functionality.
180options 	GEOM_SHSEC		# Shared secret.
181options 	GEOM_STRIPE		# Disk striping.
182options 	GEOM_UZIP		# Read-only compressed disks
183options 	GEOM_VINUM		# Vinum logical volume manager
184options 	GEOM_VIRSTOR		# Virtual storage.
185options 	GEOM_ZERO		# Performance testing helper.
186
187#
188# The root device and filesystem type can be compiled in;
189# this provides a fallback option if the root device cannot
190# be correctly guessed by the bootstrap code, or an override if
191# the RB_DFLTROOT flag (-r) is specified when booting the kernel.
192#
193options 	ROOTDEVNAME=\"ufs:da0s2e\"
194
195
196#####################################################################
197# Scheduler options:
198#
199# Specifying one of SCHED_4BSD or SCHED_ULE is mandatory.  These options
200# select which scheduler is compiled in.
201#
202# SCHED_4BSD is the historical, proven, BSD scheduler.  It has a global run
203# queue and no CPU affinity which makes it suboptimal for SMP.  It has very
204# good interactivity and priority selection.
205#
206# SCHED_ULE provides significant performance advantages over 4BSD on many
207# workloads on SMP machines.  It supports cpu-affinity, per-cpu runqueues
208# and scheduler locks.  It also has a stronger notion of interactivity
209# which leads to better responsiveness even on uniprocessor machines.  This
210# is the default scheduler.
211#
212# SCHED_STATS is a debugging option which keeps some stats in the sysctl
213# tree at 'kern.sched.stats' and is useful for debugging scheduling decisions.
214#
215options 	SCHED_4BSD
216options 	SCHED_STATS
217#options 	SCHED_ULE
218
219#####################################################################
220# SMP OPTIONS:
221#
222# SMP enables building of a Symmetric MultiProcessor Kernel.
223
224# Mandatory:
225options 	SMP			# Symmetric MultiProcessor Kernel
226
227# EARLY_AP_STARTUP releases the Application Processors earlier in the
228# kernel startup process (before devices are probed) rather than at the
229# end.  This is a temporary option for use during the transition from
230# late to early AP startup.
231options		EARLY_AP_STARTUP
232
233# MAXCPU defines the maximum number of CPUs that can boot in the system.
234# A default value should be already present, for every architecture.
235options 	MAXCPU=32
236
237# NUMA enables use of Non-Uniform Memory Access policies in various kernel
238# subsystems.
239options 	NUMA
240
241# MAXMEMDOM defines the maximum number of memory domains that can boot in the
242# system.  A default value should already be defined by every architecture.
243options 	MAXMEMDOM=2
244
245# ADAPTIVE_MUTEXES changes the behavior of blocking mutexes to spin
246# if the thread that currently owns the mutex is executing on another
247# CPU.  This behavior is enabled by default, so this option can be used
248# to disable it.
249options 	NO_ADAPTIVE_MUTEXES
250
251# ADAPTIVE_RWLOCKS changes the behavior of reader/writer locks to spin
252# if the thread that currently owns the rwlock is executing on another
253# CPU.  This behavior is enabled by default, so this option can be used
254# to disable it.
255options 	NO_ADAPTIVE_RWLOCKS
256
257# ADAPTIVE_SX changes the behavior of sx locks to spin if the thread that
258# currently owns the sx lock is executing on another CPU.
259# This behavior is enabled by default, so this option can be used to
260# disable it.
261options 	NO_ADAPTIVE_SX
262
263# MUTEX_NOINLINE forces mutex operations to call functions to perform each
264# operation rather than inlining the simple cases.  This can be used to
265# shrink the size of the kernel text segment.  Note that this behavior is
266# already implied by the INVARIANT_SUPPORT, INVARIANTS, KTR, LOCK_PROFILING,
267# and WITNESS options.
268options 	MUTEX_NOINLINE
269
270# RWLOCK_NOINLINE forces rwlock operations to call functions to perform each
271# operation rather than inlining the simple cases.  This can be used to
272# shrink the size of the kernel text segment.  Note that this behavior is
273# already implied by the INVARIANT_SUPPORT, INVARIANTS, KTR, LOCK_PROFILING,
274# and WITNESS options.
275options 	RWLOCK_NOINLINE
276
277# SX_NOINLINE forces sx lock operations to call functions to perform each
278# operation rather than inlining the simple cases.  This can be used to
279# shrink the size of the kernel text segment.  Note that this behavior is
280# already implied by the INVARIANT_SUPPORT, INVARIANTS, KTR, LOCK_PROFILING,
281# and WITNESS options.
282options 	SX_NOINLINE
283
284# SMP Debugging Options:
285#
286# CALLOUT_PROFILING enables rudimentary profiling of the callwheel data
287#	  structure used as backend in callout(9).
288# PREEMPTION allows the threads that are in the kernel to be preempted by
289#	  higher priority [interrupt] threads.  It helps with interactivity
290#	  and allows interrupt threads to run sooner rather than waiting.
291#	  WARNING! Only tested on amd64 and i386.
292# FULL_PREEMPTION instructs the kernel to preempt non-realtime kernel
293#	  threads.  Its sole use is to expose race conditions and other
294#	  bugs during development.  Enabling this option will reduce
295#	  performance and increase the frequency of kernel panics by
296#	  design.  If you aren't sure that you need it then you don't.
297#	  Relies on the PREEMPTION option.  DON'T TURN THIS ON.
298# SLEEPQUEUE_PROFILING enables rudimentary profiling of the hash table
299#	  used to hold active sleep queues as well as sleep wait message
300#	  frequency.
301# TURNSTILE_PROFILING enables rudimentary profiling of the hash table
302#	  used to hold active lock queues.
303# UMTX_PROFILING enables rudimentary profiling of the hash table used
304#	  to hold active lock queues.
305# WITNESS enables the witness code which detects deadlocks and cycles
306#         during locking operations.
307# WITNESS_KDB causes the witness code to drop into the kernel debugger if
308#	  a lock hierarchy violation occurs or if locks are held when going to
309#	  sleep.
310# WITNESS_SKIPSPIN disables the witness checks on spin mutexes.
311options 	PREEMPTION
312options 	FULL_PREEMPTION
313options 	WITNESS
314options 	WITNESS_KDB
315options 	WITNESS_SKIPSPIN
316
317# LOCK_PROFILING - Profiling locks.  See LOCK_PROFILING(9) for details.
318options 	LOCK_PROFILING
319# Set the number of buffers and the hash size.  The hash size MUST be larger
320# than the number of buffers.  Hash size should be prime.
321options 	MPROF_BUFFERS="1536"
322options 	MPROF_HASH_SIZE="1543"
323
324# Profiling for the callout(9) backend.
325options 	CALLOUT_PROFILING
326
327# Profiling for internal hash tables.
328options 	SLEEPQUEUE_PROFILING
329options 	TURNSTILE_PROFILING
330options 	UMTX_PROFILING
331
332
333#####################################################################
334# COMPATIBILITY OPTIONS
335
336# Old tty interface.
337options 	COMPAT_43TTY
338
339# Note that as a general rule, COMPAT_FREEBSD<n> depends on
340# COMPAT_FREEBSD<n+1>, COMPAT_FREEBSD<n+2>, etc.
341
342# Enable FreeBSD4 compatibility syscalls
343options 	COMPAT_FREEBSD4
344
345# Enable FreeBSD5 compatibility syscalls
346options 	COMPAT_FREEBSD5
347
348# Enable FreeBSD6 compatibility syscalls
349options 	COMPAT_FREEBSD6
350
351# Enable FreeBSD7 compatibility syscalls
352options 	COMPAT_FREEBSD7
353
354# Enable FreeBSD9 compatibility syscalls
355options 	COMPAT_FREEBSD9
356
357# Enable FreeBSD10 compatibility syscalls
358options 	COMPAT_FREEBSD10
359
360# Enable FreeBSD11 compatibility syscalls
361options 	COMPAT_FREEBSD11
362
363# Enable FreeBSD12 compatibility syscalls
364options 	COMPAT_FREEBSD12
365
366# Enable Linux Kernel Programming Interface
367options 	COMPAT_LINUXKPI
368
369#
370# These three options provide support for System V Interface
371# Definition-style interprocess communication, in the form of shared
372# memory, semaphores, and message queues, respectively.
373#
374options 	SYSVSHM
375options 	SYSVSEM
376options 	SYSVMSG
377
378
379#####################################################################
380# DEBUGGING OPTIONS
381
382#
383# Compile with kernel debugger related code.
384#
385options 	KDB
386
387#
388# Print a stack trace of the current thread on the console for a panic.
389#
390options 	KDB_TRACE
391
392#
393# Don't enter the debugger for a panic. Intended for unattended operation
394# where you may want to enter the debugger from the console, but still want
395# the machine to recover from a panic.
396#
397options 	KDB_UNATTENDED
398
399#
400# Enable the ddb debugger backend.
401#
402options 	DDB
403
404#
405# Print the numerical value of symbols in addition to the symbolic
406# representation.
407#
408options 	DDB_NUMSYM
409
410#
411# Enable the remote gdb debugger backend.
412#
413options 	GDB
414
415#
416# Trashes list pointers when they become invalid (i.e., the element is
417# removed from a list).  Relatively inexpensive to enable.
418#
419options 	QUEUE_MACRO_DEBUG_TRASH
420
421#
422# Stores information about the last caller to modify the list object
423# in the list object.  Requires additional memory overhead.
424#
425#options 	QUEUE_MACRO_DEBUG_TRACE
426
427#
428# SYSCTL_DEBUG enables a 'sysctl' debug tree that can be used to dump the
429# contents of the registered sysctl nodes on the console.  It is disabled by
430# default because it generates excessively verbose console output that can
431# interfere with serial console operation.
432#
433options 	SYSCTL_DEBUG
434
435#
436# Enable textdump by default, this disables kernel core dumps.
437#
438options		TEXTDUMP_PREFERRED
439
440#
441# Enable extra debug messages while performing textdumps.
442#
443options		TEXTDUMP_VERBOSE
444
445#
446# NO_SYSCTL_DESCR omits the sysctl node descriptions to save space in the
447# resulting kernel.
448options		NO_SYSCTL_DESCR
449
450#
451# MALLOC_DEBUG_MAXZONES enables multiple uma zones for malloc(9)
452# allocations that are smaller than a page.  The purpose is to isolate
453# different malloc types into hash classes, so that any buffer
454# overruns or use-after-free will usually only affect memory from
455# malloc types in that hash class.  This is purely a debugging tool;
456# by varying the hash function and tracking which hash class was
457# corrupted, the intersection of the hash classes from each instance
458# will point to a single malloc type that is being misused.  At this
459# point inspection or memguard(9) can be used to catch the offending
460# code.
461#
462options 	MALLOC_DEBUG_MAXZONES=8
463
464#
465# DEBUG_MEMGUARD builds and enables memguard(9), a replacement allocator
466# for the kernel used to detect modify-after-free scenarios.  See the
467# memguard(9) man page for more information on usage.
468#
469options 	DEBUG_MEMGUARD
470
471#
472# DEBUG_REDZONE enables buffer underflows and buffer overflows detection for
473# malloc(9).
474#
475options 	DEBUG_REDZONE
476
477#
478# EARLY_PRINTF enables support for calling a special printf (eprintf)
479# very early in the kernel (before cn_init() has been called).  This
480# should only be used for debugging purposes early in boot.  Normally,
481# it is not defined.  It is commented out here because this feature
482# isn't generally available. And the required eputc() isn't defined.
483#
484#options	EARLY_PRINTF
485
486#
487# KTRACE enables the system-call tracing facility ktrace(2).  To be more
488# SMP-friendly, KTRACE uses a worker thread to process most trace events
489# asynchronously to the thread generating the event.  This requires a
490# pre-allocated store of objects representing trace events.  The
491# KTRACE_REQUEST_POOL option specifies the initial size of this store.
492# The size of the pool can be adjusted both at boottime and runtime via
493# the kern.ktrace_request_pool tunable and sysctl.
494#
495options 	KTRACE			#kernel tracing
496options 	KTRACE_REQUEST_POOL=101
497
498#
499# KTR is a kernel tracing facility imported from BSD/OS.  It is
500# enabled with the KTR option.  KTR_ENTRIES defines the number of
501# entries in the circular trace buffer; it may be an arbitrary number.
502# KTR_BOOT_ENTRIES defines the number of entries during the early boot,
503# before malloc(9) is functional.
504# KTR_COMPILE defines the mask of events to compile into the kernel as
505# defined by the KTR_* constants in <sys/ktr.h>.  KTR_MASK defines the
506# initial value of the ktr_mask variable which determines at runtime
507# what events to trace.  KTR_CPUMASK determines which CPU's log
508# events, with bit X corresponding to CPU X.  The layout of the string
509# passed as KTR_CPUMASK must match a series of bitmasks each of them
510# separated by the "," character (ie:
511# KTR_CPUMASK=0xAF,0xFFFFFFFFFFFFFFFF).  KTR_VERBOSE enables
512# dumping of KTR events to the console by default.  This functionality
513# can be toggled via the debug.ktr_verbose sysctl and defaults to off
514# if KTR_VERBOSE is not defined.  See ktr(4) and ktrdump(8) for details.
515#
516options 	KTR
517options 	KTR_BOOT_ENTRIES=1024
518options 	KTR_ENTRIES=(128*1024)
519options 	KTR_COMPILE=(KTR_ALL)
520options 	KTR_MASK=KTR_INTR
521options 	KTR_CPUMASK=0x3
522options 	KTR_VERBOSE
523
524#
525# ALQ(9) is a facility for the asynchronous queuing of records from the kernel
526# to a vnode, and is employed by services such as ktr(4) to produce trace
527# files based on a kernel event stream.  Records are written asynchronously
528# in a worker thread.
529#
530options 	ALQ
531options 	KTR_ALQ
532
533#
534# The INVARIANTS option is used in a number of source files to enable
535# extra sanity checking of internal structures.  This support is not
536# enabled by default because of the extra time it would take to check
537# for these conditions, which can only occur as a result of
538# programming errors.
539#
540options 	INVARIANTS
541
542#
543# The INVARIANT_SUPPORT option makes us compile in support for
544# verifying some of the internal structures.  It is a prerequisite for
545# 'INVARIANTS', as enabling 'INVARIANTS' will make these functions be
546# called.  The intent is that you can set 'INVARIANTS' for single
547# source files (by changing the source file or specifying it on the
548# command line) if you have 'INVARIANT_SUPPORT' enabled.  Also, if you
549# wish to build a kernel module with 'INVARIANTS', then adding
550# 'INVARIANT_SUPPORT' to your kernel will provide all the necessary
551# infrastructure without the added overhead.
552#
553options 	INVARIANT_SUPPORT
554
555#
556# The KASSERT_PANIC_OPTIONAL option allows kasserts to fire without
557# necessarily inducing a panic.  Panic is the default behavior, but
558# runtime options can configure it either entirely off, or off with a
559# limit.
560#
561options 	KASSERT_PANIC_OPTIONAL
562
563#
564# The DIAGNOSTIC option is used to enable extra debugging information
565# and invariants checking.  The added checks are too expensive or noisy
566# for an INVARIANTS kernel and thus are disabled by default.  It is
567# expected that a kernel configured with DIAGNOSTIC will also have the
568# INVARIANTS option enabled.
569#
570options 	DIAGNOSTIC
571
572#
573# REGRESSION causes optional kernel interfaces necessary only for regression
574# testing to be enabled.  These interfaces may constitute security risks
575# when enabled, as they permit processes to easily modify aspects of the
576# run-time environment to reproduce unlikely or unusual (possibly normally
577# impossible) scenarios.
578#
579options 	REGRESSION
580
581#
582# This option lets some drivers co-exist that can't co-exist in a running
583# system.  This is used to be able to compile all kernel code in one go for
584# quality assurance purposes (like this file, which the option takes it name
585# from.)
586#
587options 	COMPILING_LINT
588
589#
590# STACK enables the stack(9) facility, allowing the capture of kernel stack
591# for the purpose of procinfo(1), etc.  stack(9) will also be compiled in
592# automatically if DDB(4) is compiled into the kernel.
593#
594options 	STACK
595
596#
597# The NUM_CORE_FILES option specifies the limit for the number of core
598# files generated by a particular process, when the core file format
599# specifier includes the %I pattern. Since we only have 1 character for
600# the core count in the format string, meaning the range will be 0-9, the
601# maximum value allowed for this option is 10.
602# This core file limit can be adjusted at runtime via the debug.ncores
603# sysctl.
604#
605options 	NUM_CORE_FILES=5
606
607#
608# The TSLOG option enables timestamped logging of events, especially
609# function entries/exits, in order to track the time spent by the kernel.
610# In particular, this is useful when investigating the early boot process,
611# before it is possible to use more sophisticated tools like DTrace.
612# The TSLOGSIZE option controls the size of the (preallocated, fixed
613# length) buffer used for storing these events (default: 262144 records).
614#
615# For security reasons the TSLOG option should not be enabled on systems
616# used in production.
617#
618options 	TSLOG
619options 	TSLOGSIZE=262144
620
621
622#####################################################################
623# PERFORMANCE MONITORING OPTIONS
624
625#
626# The hwpmc driver that allows the use of in-CPU performance monitoring
627# counters for performance monitoring.  The base kernel needs to be configured
628# with the 'options' line, while the hwpmc device can be either compiled
629# in or loaded as a loadable kernel module.
630#
631# Additional configuration options may be required on specific architectures,
632# please see hwpmc(4).
633
634device		hwpmc			# Driver (also a loadable module)
635options 	HWPMC_DEBUG
636options 	HWPMC_HOOKS		# Other necessary kernel hooks
637
638
639#####################################################################
640# NETWORKING OPTIONS
641
642#
643# Protocol families
644#
645options 	INET			#Internet communications protocols
646options 	INET6			#IPv6 communications protocols
647
648options		RATELIMIT		# TX rate limiting support
649
650options 	ROUTETABLES=2		# allocated fibs up to 65536. default is 1.
651					# but that would be a bad idea as they are large.
652
653options 	TCP_OFFLOAD		# TCP offload support.
654options		TCP_RFC7413		# TCP Fast Open
655
656options		TCPHPTS
657
658# In order to enable IPSEC you MUST also add device crypto to
659# your kernel configuration
660options 	IPSEC			#IP security (requires device crypto)
661
662# Option IPSEC_SUPPORT does not enable IPsec, but makes it possible to
663# load it as a kernel module. You still MUST add device crypto to your kernel
664# configuration.
665options		IPSEC_SUPPORT
666#options 	IPSEC_DEBUG		#debug for IP security
667
668
669# TLS framing and encryption of data transmitted over TCP sockets.
670options		KERN_TLS		# TLS transmit offload
671
672#
673# SMB/CIFS requester
674# NETSMB enables support for SMB protocol, it requires LIBMCHAIN and LIBICONV
675# options.
676options 	NETSMB			#SMB/CIFS requester
677
678# mchain library. It can be either loaded as KLD or compiled into kernel
679options 	LIBMCHAIN
680
681# libalias library, performing NAT
682options 	LIBALIAS
683
684#
685# SCTP is a NEW transport protocol defined by
686# RFC2960 updated by RFC3309 and RFC3758.. and
687# soon to have a new base RFC and many many more
688# extensions. This release supports all the extensions
689# including many drafts (most about to become RFC's).
690# It is the reference implementation of SCTP
691# and is quite well tested.
692#
693# Note YOU MUST have both INET and INET6 defined.
694# You don't have to enable V6, but SCTP is
695# dual stacked and so far we have not torn apart
696# the V6 and V4.. since an association can span
697# both a V6 and V4 address at the SAME time :-)
698#
699# The SCTP_SUPPORT option does not enable SCTP, but provides the necessary
700# support for loading SCTP as a loadable kernel module.
701#
702options 	SCTP
703options 	SCTP_SUPPORT
704
705# There are bunches of options:
706# this one turns on all sorts of
707# nastily printing that you can
708# do. It's all controlled by a
709# bit mask (settable by socket opt and
710# by sysctl). Including will not cause
711# logging until you set the bits.. but it
712# can be quite verbose.. so without this
713# option we don't do any of the tests for
714# bits and prints.. which makes the code run
715# faster.. if you are not debugging don't use.
716options 	SCTP_DEBUG
717
718#
719# All that options after that turn on specific types of
720# logging. You can monitor CWND growth, flight size
721# and all sorts of things. Go look at the code and
722# see. I have used this to produce interesting
723# charts and graphs as well :->
724#
725# I have not yet committed the tools to get and print
726# the logs, I will do that eventually .. before then
727# if you want them send me an email rrs@freebsd.org
728# You basically must have ktr(4) enabled for these
729# and you then set the sysctl to turn on/off various
730# logging bits. Use ktrdump(8) to pull the log and run
731# it through a display program.. and graphs and other
732# things too.
733#
734options 	SCTP_LOCK_LOGGING
735options 	SCTP_MBUF_LOGGING
736options 	SCTP_MBCNT_LOGGING
737options 	SCTP_PACKET_LOGGING
738options 	SCTP_LTRACE_CHUNKS
739options 	SCTP_LTRACE_ERRORS
740
741# altq(9). Enable the base part of the hooks with the ALTQ option.
742# Individual disciplines must be built into the base system and can not be
743# loaded as modules at this point. ALTQ requires a stable TSC so if yours is
744# broken or changes with CPU throttling then you must also have the ALTQ_NOPCC
745# option.
746options 	ALTQ
747options 	ALTQ_CBQ	# Class Based Queueing
748options 	ALTQ_RED	# Random Early Detection
749options 	ALTQ_RIO	# RED In/Out
750options 	ALTQ_CODEL	# CoDel Active Queueing
751options 	ALTQ_HFSC	# Hierarchical Packet Scheduler
752options 	ALTQ_FAIRQ	# Fair Packet Scheduler
753options 	ALTQ_CDNR	# Traffic conditioner
754options 	ALTQ_PRIQ	# Priority Queueing
755options 	ALTQ_NOPCC	# Required if the TSC is unusable
756options 	ALTQ_DEBUG
757
758# netgraph(4). Enable the base netgraph code with the NETGRAPH option.
759# Individual node types can be enabled with the corresponding option
760# listed below; however, this is not strictly necessary as netgraph
761# will automatically load the corresponding KLD module if the node type
762# is not already compiled into the kernel. Each type below has a
763# corresponding man page, e.g., ng_async(8).
764options 	NETGRAPH		# netgraph(4) system
765options 	NETGRAPH_DEBUG		# enable extra debugging, this
766					# affects netgraph(4) and nodes
767# Node types
768options 	NETGRAPH_ASYNC
769options 	NETGRAPH_ATMLLC
770options 	NETGRAPH_ATM_ATMPIF
771options 	NETGRAPH_BLUETOOTH		# ng_bluetooth(4)
772options 	NETGRAPH_BLUETOOTH_BT3C		# ng_bt3c(4)
773options 	NETGRAPH_BLUETOOTH_HCI		# ng_hci(4)
774options 	NETGRAPH_BLUETOOTH_L2CAP	# ng_l2cap(4)
775options 	NETGRAPH_BLUETOOTH_SOCKET	# ng_btsocket(4)
776options 	NETGRAPH_BLUETOOTH_UBT		# ng_ubt(4)
777options 	NETGRAPH_BLUETOOTH_UBTBCMFW	# ubtbcmfw(4)
778options 	NETGRAPH_BPF
779options 	NETGRAPH_BRIDGE
780options 	NETGRAPH_CAR
781options 	NETGRAPH_CHECKSUM
782options 	NETGRAPH_CISCO
783options 	NETGRAPH_DEFLATE
784options 	NETGRAPH_DEVICE
785options 	NETGRAPH_ECHO
786options 	NETGRAPH_EIFACE
787options 	NETGRAPH_ETHER
788options 	NETGRAPH_FRAME_RELAY
789options 	NETGRAPH_GIF
790options 	NETGRAPH_GIF_DEMUX
791options 	NETGRAPH_HOLE
792options 	NETGRAPH_IFACE
793options 	NETGRAPH_IP_INPUT
794options 	NETGRAPH_IPFW
795options 	NETGRAPH_KSOCKET
796options 	NETGRAPH_L2TP
797options 	NETGRAPH_LMI
798options 	NETGRAPH_MPPC_COMPRESSION
799options 	NETGRAPH_MPPC_ENCRYPTION
800options 	NETGRAPH_NETFLOW
801options 	NETGRAPH_NAT
802options 	NETGRAPH_ONE2MANY
803options 	NETGRAPH_PATCH
804options 	NETGRAPH_PIPE
805options 	NETGRAPH_PPP
806options 	NETGRAPH_PPPOE
807options 	NETGRAPH_PPTPGRE
808options 	NETGRAPH_PRED1
809options 	NETGRAPH_RFC1490
810options 	NETGRAPH_SOCKET
811options 	NETGRAPH_SPLIT
812options 	NETGRAPH_SPPP
813options 	NETGRAPH_TAG
814options 	NETGRAPH_TCPMSS
815options 	NETGRAPH_TEE
816options 	NETGRAPH_UI
817options 	NETGRAPH_VJC
818options 	NETGRAPH_VLAN
819
820# NgATM - Netgraph ATM
821options 	NGATM_ATM
822options 	NGATM_ATMBASE
823options 	NGATM_SSCOP
824options 	NGATM_SSCFU
825options 	NGATM_UNI
826options 	NGATM_CCATM
827
828device		mn	# Munich32x/Falc54 Nx64kbit/sec cards.
829
830# Network stack virtualization.
831options	VIMAGE
832options	VNET_DEBUG	# debug for VIMAGE
833
834#
835# Network interfaces:
836#  The `loop' device is MANDATORY when networking is enabled.
837device		loop
838
839#  The `ether' device provides generic code to handle
840#  Ethernets; it is MANDATORY when an Ethernet device driver is
841#  configured.
842device		ether
843
844#  The `vlan' device implements the VLAN tagging of Ethernet frames
845#  according to IEEE 802.1Q.
846device		vlan
847
848# The `vxlan' device implements the VXLAN encapsulation of Ethernet
849# frames in UDP packets according to RFC7348.
850device		vxlan
851
852#  The `wlan' device provides generic code to support 802.11
853#  drivers, including host AP mode; it is MANDATORY for the wi,
854#  and ath drivers and will eventually be required by all 802.11 drivers.
855device		wlan
856options 	IEEE80211_DEBUG		#enable debugging msgs
857options 	IEEE80211_SUPPORT_MESH	#enable 802.11s D3.0 support
858options 	IEEE80211_SUPPORT_TDMA	#enable TDMA support
859
860#  The `wlan_wep', `wlan_tkip', and `wlan_ccmp' devices provide
861#  support for WEP, TKIP, and AES-CCMP crypto protocols optionally
862#  used with 802.11 devices that depend on the `wlan' module.
863device		wlan_wep
864device		wlan_ccmp
865device		wlan_tkip
866
867#  The `wlan_xauth' device provides support for external (i.e. user-mode)
868#  authenticators for use with 802.11 drivers that use the `wlan'
869#  module and support 802.1x and/or WPA security protocols.
870device		wlan_xauth
871
872#  The `wlan_acl' device provides a MAC-based access control mechanism
873#  for use with 802.11 drivers operating in ap mode and using the
874#  `wlan' module.
875#  The 'wlan_amrr' device provides AMRR transmit rate control algorithm
876device		wlan_acl
877device		wlan_amrr
878
879#  The `sppp' device serves a similar role for certain types
880#  of synchronous PPP links (like `cx', `ar').
881device		sppp
882
883#  The `bpf' device enables the Berkeley Packet Filter.  Be
884#  aware of the legal and administrative consequences of enabling this
885#  option.  DHCP requires bpf.
886device		bpf
887
888#  The `netmap' device implements memory-mapped access to network
889#  devices from userspace, enabling wire-speed packet capture and
890#  generation even at 10Gbit/s. Requires support in the device
891#  driver. Supported drivers are ixgbe, e1000, re.
892device		netmap
893
894#  The `disc' device implements a minimal network interface,
895#  which throws away all packets sent and never receives any.  It is
896#  included for testing and benchmarking purposes.
897device		disc
898
899# The `epair' device implements a virtual back-to-back connected Ethernet
900# like interface pair.
901device		epair
902
903#  The `edsc' device implements a minimal Ethernet interface,
904#  which discards all packets sent and receives none.
905device		edsc
906
907#  The `tuntap' device implements (user-)ppp, nos-tun(8) and a pty-like virtual
908#  Ethernet interface
909device		tuntap
910
911#  The `gif' device implements IPv6 over IP4 tunneling,
912#  IPv4 over IPv6 tunneling, IPv4 over IPv4 tunneling and
913#  IPv6 over IPv6 tunneling.
914#  The `gre' device implements GRE (Generic Routing Encapsulation) tunneling,
915#  as specified in the RFC 2784 and RFC 2890.
916#  The `me' device implements Minimal Encapsulation within IPv4 as
917#  specified in the RFC 2004.
918#  The XBONEHACK option allows the same pair of addresses to be configured on
919#  multiple gif interfaces.
920device		gif
921device		gre
922device		me
923options 	XBONEHACK
924
925#  The `stf' device implements 6to4 encapsulation.
926device		stf
927
928# The pf packet filter consists of three devices:
929#  The `pf' device provides /dev/pf and the firewall code itself.
930#  The `pflog' device provides the pflog0 interface which logs packets.
931#  The `pfsync' device provides the pfsync0 interface used for
932#   synchronization of firewall state tables (over the net).
933device		pf
934device		pflog
935device		pfsync
936
937# Bridge interface.
938device		if_bridge
939
940# Common Address Redundancy Protocol. See carp(4) for more details.
941device		carp
942
943# IPsec interface.
944device		enc
945
946# Link aggregation interface.
947device		lagg
948
949#
950# Internet family options:
951#
952# MROUTING enables the kernel multicast packet forwarder, which works
953# with mrouted and XORP.
954#
955# IPFIREWALL enables support for IP firewall construction, in
956# conjunction with the `ipfw' program.  IPFIREWALL_VERBOSE sends
957# logged packets to the system logger.  IPFIREWALL_VERBOSE_LIMIT
958# limits the number of times a matching entry can be logged.
959#
960# WARNING:  IPFIREWALL defaults to a policy of "deny ip from any to any"
961# and if you do not add other rules during startup to allow access,
962# YOU WILL LOCK YOURSELF OUT.  It is suggested that you set firewall_type=open
963# in /etc/rc.conf when first enabling this feature, then refining the
964# firewall rules in /etc/rc.firewall after you've tested that the new kernel
965# feature works properly.
966#
967# IPFIREWALL_DEFAULT_TO_ACCEPT causes the default rule (at boot) to
968# allow everything.  Use with care, if a cracker can crash your
969# firewall machine, they can get to your protected machines.  However,
970# if you are using it as an as-needed filter for specific problems as
971# they arise, then this may be for you.  Changing the default to 'allow'
972# means that you won't get stuck if the kernel and /sbin/ipfw binary get
973# out of sync.
974#
975# IPDIVERT enables the divert IP sockets, used by ``ipfw divert''.  It
976# depends on IPFIREWALL if compiled into the kernel.
977#
978# IPFIREWALL_NAT adds support for in kernel nat in ipfw, and it requires
979# LIBALIAS.
980#
981# IPFIREWALL_NAT64 adds support for in kernel NAT64 in ipfw.
982#
983# IPFIREWALL_NPTV6 adds support for in kernel NPTv6 in ipfw.
984#
985# IPFIREWALL_PMOD adds support for protocols modification module. Currently
986# it supports only TCP MSS modification.
987#
988# IPSTEALTH enables code to support stealth forwarding (i.e., forwarding
989# packets without touching the TTL).  This can be useful to hide firewalls
990# from traceroute and similar tools.
991#
992# PF_DEFAULT_TO_DROP causes the default pf(4) rule to deny everything.
993#
994# TCPDEBUG enables code which keeps traces of the TCP state machine
995# for sockets with the SO_DEBUG option set, which can then be examined
996# using the trpt(8) utility.
997#
998# TCPPCAP enables code which keeps the last n packets sent and received
999# on a TCP socket.
1000#
1001# TCP_BLACKBOX enables enhanced TCP event logging.
1002#
1003# TCP_HHOOK enables the hhook(9) framework hooks for the TCP stack.
1004#
1005# ROUTE_MPATH provides support for multipath routing.
1006#
1007options 	MROUTING		# Multicast routing
1008options 	IPFIREWALL		#firewall
1009options 	IPFIREWALL_VERBOSE	#enable logging to syslogd(8)
1010options 	IPFIREWALL_VERBOSE_LIMIT=100	#limit verbosity
1011options 	IPFIREWALL_DEFAULT_TO_ACCEPT	#allow everything by default
1012options 	IPFIREWALL_NAT		#ipfw kernel nat support
1013options 	IPFIREWALL_NAT64	#ipfw kernel NAT64 support
1014options 	IPFIREWALL_NPTV6	#ipfw kernel IPv6 NPT support
1015options 	IPDIVERT		#divert sockets
1016options 	IPFILTER		#ipfilter support
1017options 	IPFILTER_LOG		#ipfilter logging
1018options 	IPFILTER_LOOKUP		#ipfilter pools
1019options 	IPFILTER_DEFAULT_BLOCK	#block all packets by default
1020options 	IPSTEALTH		#support for stealth forwarding
1021options 	PF_DEFAULT_TO_DROP	#drop everything by default
1022options 	TCPDEBUG
1023options 	TCPPCAP
1024options 	TCP_BLACKBOX
1025options 	TCP_HHOOK
1026options 	ROUTE_MPATH
1027
1028# The MBUF_STRESS_TEST option enables options which create
1029# various random failures / extreme cases related to mbuf
1030# functions.  See mbuf(9) for a list of available test cases.
1031# MBUF_PROFILING enables code to profile the mbuf chains
1032# exiting the system (via participating interfaces) and
1033# return a logarithmic histogram of monitored parameters
1034# (e.g. packet size, wasted space, number of mbufs in chain).
1035options 	MBUF_STRESS_TEST
1036options 	MBUF_PROFILING
1037
1038# Statically link in accept filters
1039options 	ACCEPT_FILTER_DATA
1040options 	ACCEPT_FILTER_DNS
1041options 	ACCEPT_FILTER_HTTP
1042
1043# TCP_SIGNATURE adds support for RFC 2385 (TCP-MD5) digests. These are
1044# carried in TCP option 19. This option is commonly used to protect
1045# TCP sessions (e.g. BGP) where IPSEC is not available nor desirable.
1046# This is enabled on a per-socket basis using the TCP_MD5SIG socket option.
1047# This requires the use of 'device crypto' and either 'options IPSEC' or
1048# 'options IPSEC_SUPPORT'.
1049options 	TCP_SIGNATURE		#include support for RFC 2385
1050
1051# DUMMYNET enables the "dummynet" bandwidth limiter.  You need IPFIREWALL
1052# as well.  See dummynet(4) and ipfw(8) for more info.  When you run
1053# DUMMYNET it is advisable to also have at least "options HZ=1000" to achieve
1054# a smooth scheduling of the traffic.
1055options 	DUMMYNET
1056
1057# The DEBUGNET option enables a basic debug/panic-time networking API.  It
1058# is used by NETDUMP and NETGDB.
1059options 	DEBUGNET
1060
1061# The NETDUMP option enables netdump(4) client support in the kernel.
1062# This allows a panicking kernel to transmit a kernel dump to a remote host.
1063options 	NETDUMP
1064
1065# The NETGDB option enables netgdb(4) support in the kernel.  This allows a
1066# panicking kernel to be debugged as a GDB remote over the network.
1067options 	NETGDB
1068
1069#####################################################################
1070# FILESYSTEM OPTIONS
1071
1072#
1073# Only the root filesystem needs to be statically compiled or preloaded
1074# as module; everything else will be automatically loaded at mount
1075# time.  Some people still prefer to statically compile other
1076# filesystems as well.
1077#
1078# NB: The UNION filesystem was known to be buggy in the past.  It is now
1079# being actively maintained, although there are still some issues being
1080# resolved.
1081#
1082
1083# One of these is mandatory:
1084options 	FFS			#Fast filesystem
1085options 	NFSCL			#Network File System client
1086
1087# The rest are optional:
1088options 	AUTOFS			#Automounter filesystem
1089options 	CD9660			#ISO 9660 filesystem
1090options 	FDESCFS			#File descriptor filesystem
1091options 	FUSEFS			#FUSEFS support module
1092options 	MSDOSFS			#MS DOS File System (FAT, FAT32)
1093options 	NFSLOCKD		#Network Lock Manager
1094options 	NFSD			#Network Filesystem Server
1095options 	KGSSAPI			#Kernel GSSAPI implementation
1096
1097options 	NULLFS			#NULL filesystem
1098options 	PROCFS			#Process filesystem (requires PSEUDOFS)
1099options 	PSEUDOFS		#Pseudo-filesystem framework
1100options 	PSEUDOFS_TRACE		#Debugging support for PSEUDOFS
1101options 	SMBFS			#SMB/CIFS filesystem
1102options 	TMPFS			#Efficient memory filesystem
1103options 	UDF			#Universal Disk Format
1104options 	UNIONFS			#Union filesystem
1105# The xFS_ROOT options REQUIRE the associated ``options xFS''
1106options 	NFS_ROOT		#NFS usable as root device
1107
1108# Soft updates is a technique for improving filesystem speed and
1109# making abrupt shutdown less risky.
1110#
1111options 	SOFTUPDATES
1112
1113# Extended attributes allow additional data to be associated with files,
1114# and is used for ACLs, Capabilities, and MAC labels.
1115# See src/sys/ufs/ufs/README.extattr for more information.
1116options 	UFS_EXTATTR
1117options 	UFS_EXTATTR_AUTOSTART
1118
1119# Access Control List support for UFS filesystems.  The current ACL
1120# implementation requires extended attribute support, UFS_EXTATTR,
1121# for the underlying filesystem.
1122# See src/sys/ufs/ufs/README.acls for more information.
1123options 	UFS_ACL
1124
1125# Directory hashing improves the speed of operations on very large
1126# directories at the expense of some memory.
1127options 	UFS_DIRHASH
1128
1129# Gjournal-based UFS journaling support.
1130options 	UFS_GJOURNAL
1131
1132# Make space in the kernel for a root filesystem on a md device.
1133# Define to the number of kilobytes to reserve for the filesystem.
1134# This is now optional.
1135# If not defined, the root filesystem passed in as the MFS_IMAGE makeoption
1136# will be automatically embedded in the kernel during linking. Its exact size
1137# will be consumed within the kernel.
1138# If defined, the old way of embedding the filesystem in the kernel will be
1139# used. That is to say MD_ROOT_SIZE KB will be allocated in the kernel and
1140# later, the filesystem image passed in as the MFS_IMAGE makeoption will be
1141# dd'd into the reserved space if it fits.
1142options 	MD_ROOT_SIZE=10
1143
1144# Make the md device a potential root device, either with preloaded
1145# images of type mfs_root or md_root.
1146options 	MD_ROOT
1147
1148# Write-protect the md root device so that it may not be mounted writeable.
1149options 	MD_ROOT_READONLY
1150
1151# Allow to read MD image from external memory regions
1152options		MD_ROOT_MEM
1153
1154# Disk quotas are supported when this option is enabled.
1155options 	QUOTA			#enable disk quotas
1156
1157# If you are running a machine just as a fileserver for PC and MAC
1158# users, using SAMBA, you may consider setting this option
1159# and keeping all those users' directories on a filesystem that is
1160# mounted with the suiddir option. This gives new files the same
1161# ownership as the directory (similar to group). It's a security hole
1162# if you let these users run programs, so confine it to file-servers
1163# (but it'll save you lots of headaches in those cases). Root owned
1164# directories are exempt and X bits are cleared. The suid bit must be
1165# set on the directory as well; see chmod(1). PC owners can't see/set
1166# ownerships so they keep getting their toes trodden on. This saves
1167# you all the support calls as the filesystem it's used on will act as
1168# they expect: "It's my dir so it must be my file".
1169#
1170options 	SUIDDIR
1171
1172# NFS options:
1173options 	NFS_MINATTRTIMO=3	# VREG attrib cache timeout in sec
1174options 	NFS_MAXATTRTIMO=60
1175options 	NFS_MINDIRATTRTIMO=30	# VDIR attrib cache timeout in sec
1176options 	NFS_MAXDIRATTRTIMO=60
1177options 	NFS_DEBUG		# Enable NFS Debugging
1178
1179#
1180# Add support for the EXT2FS filesystem of Linux fame.  Be a bit
1181# careful with this - the ext2fs code has a tendency to lag behind
1182# changes and not be exercised very much, so mounting read/write could
1183# be dangerous (and even mounting read only could result in panics.)
1184#
1185options 	EXT2FS
1186
1187# The system memory devices; /dev/mem, /dev/kmem
1188device		mem
1189
1190# The kernel symbol table device; /dev/ksyms
1191device		ksyms
1192
1193# Optional character code conversion support with LIBICONV.
1194# Each option requires their base file system and LIBICONV.
1195options 	CD9660_ICONV
1196options 	MSDOSFS_ICONV
1197options 	UDF_ICONV
1198
1199
1200#####################################################################
1201# POSIX P1003.1B
1202
1203# Real time extensions added in the 1993 POSIX
1204# _KPOSIX_PRIORITY_SCHEDULING: Build in _POSIX_PRIORITY_SCHEDULING
1205
1206options 	_KPOSIX_PRIORITY_SCHEDULING
1207# p1003_1b_semaphores are very experimental,
1208# user should be ready to assist in debugging if problems arise.
1209options 	P1003_1B_SEMAPHORES
1210
1211# POSIX message queue
1212options 	P1003_1B_MQUEUE
1213
1214#####################################################################
1215# SECURITY POLICY PARAMETERS
1216
1217# Support for BSM audit
1218options 	AUDIT
1219
1220# Support for Mandatory Access Control (MAC):
1221options 	MAC
1222options 	MAC_BIBA
1223options 	MAC_BSDEXTENDED
1224options 	MAC_IFOFF
1225options 	MAC_LOMAC
1226options 	MAC_MLS
1227options 	MAC_NONE
1228options 	MAC_NTPD
1229options 	MAC_PARTITION
1230options 	MAC_PORTACL
1231options 	MAC_SEEOTHERUIDS
1232options 	MAC_STUB
1233options 	MAC_TEST
1234
1235# Support for Capsicum
1236options 	CAPABILITIES	# fine-grained rights on file descriptors
1237options 	CAPABILITY_MODE	# sandboxes with no global namespace access
1238
1239
1240#####################################################################
1241# CLOCK OPTIONS
1242
1243# The granularity of operation is controlled by the kernel option HZ whose
1244# default value (1000 on most architectures) means a granularity of 1ms
1245# (1s/HZ).  Historically, the default was 100, but finer granularity is
1246# required for DUMMYNET and other systems on modern hardware.  There are
1247# reasonable arguments that HZ should, in fact, be 100 still; consider,
1248# that reducing the granularity too much might cause excessive overhead in
1249# clock interrupt processing, potentially causing ticks to be missed and thus
1250# actually reducing the accuracy of operation.
1251
1252options 	HZ=100
1253
1254# Enable support for the kernel PLL to use an external PPS signal,
1255# under supervision of [x]ntpd(8)
1256# More info in ntpd documentation: http://www.eecis.udel.edu/~ntp
1257
1258options 	PPS_SYNC
1259
1260# Enable support for generic feed-forward clocks in the kernel.
1261# The feed-forward clock support is an alternative to the feedback oriented
1262# ntpd/system clock approach, and is to be used with a feed-forward
1263# synchronization algorithm such as the RADclock:
1264# More info here: http://www.synclab.org/radclock
1265
1266options 	FFCLOCK
1267
1268
1269#####################################################################
1270# SCSI DEVICES
1271
1272# SCSI DEVICE CONFIGURATION
1273
1274# The SCSI subsystem consists of the `base' SCSI code, a number of
1275# high-level SCSI device `type' drivers, and the low-level host-adapter
1276# device drivers.  The host adapters are listed in the ISA and PCI
1277# device configuration sections below.
1278#
1279# It is possible to wire down your SCSI devices so that a given bus,
1280# target, and LUN always come on line as the same device unit.  In
1281# earlier versions the unit numbers were assigned in the order that
1282# the devices were probed on the SCSI bus.  This means that if you
1283# removed a disk drive, you may have had to rewrite your /etc/fstab
1284# file, and also that you had to be careful when adding a new disk
1285# as it may have been probed earlier and moved your device configuration
1286# around.
1287
1288# This old behavior is maintained as the default behavior.  The unit
1289# assignment begins with the first non-wired down unit for a device
1290# type.  For example, if you wire a disk as "da3" then the first
1291# non-wired disk will be assigned da4.
1292
1293# The syntax for wiring down devices is:
1294
1295envvar		hint.scbus.0.at="ahc0"
1296envvar		hint.scbus.1.at="ahc1"
1297envvar		hint.scbus.1.bus="0"
1298envvar		hint.scbus.3.at="ahc2"
1299envvar		hint.scbus.3.bus="0"
1300envvar		hint.scbus.2.at="ahc2"
1301envvar		hint.scbus.2.bus="1"
1302envvar		hint.da.0.at="scbus0"
1303envvar		hint.da.0.target="0"
1304envvar		hint.da.0.unit="0"
1305envvar		hint.da.1.at="scbus3"
1306envvar		hint.da.1.target="1"
1307envvar		hint.da.2.at="scbus2"
1308envvar		hint.da.2.target="3"
1309envvar		hint.sa.1.at="scbus1"
1310envvar		hint.sa.1.target="6"
1311
1312# "units" (SCSI logical unit number) that are not specified are
1313# treated as if specified as LUN 0.
1314
1315# All SCSI devices allocate as many units as are required.
1316
1317# The ch driver drives SCSI Media Changer ("jukebox") devices.
1318#
1319# The da driver drives SCSI Direct Access ("disk") and Optical Media
1320# ("WORM") devices.
1321#
1322# The sa driver drives SCSI Sequential Access ("tape") devices.
1323#
1324# The cd driver drives SCSI Read Only Direct Access ("cd") devices.
1325#
1326# The ses driver drives SCSI Environment Services ("ses") and
1327# SAF-TE ("SCSI Accessible Fault-Tolerant Enclosure") devices.
1328#
1329# The pt driver drives SCSI Processor devices.
1330#
1331# The sg driver provides a passthrough API that is compatible with the
1332# Linux SG driver.  It will work in conjunction with the COMPAT_LINUX
1333# option to run linux SG apps.  It can also stand on its own and provide
1334# source level API compatibility for porting apps to FreeBSD.
1335#
1336# Target Mode support is provided here but also requires that a SIM
1337# (SCSI Host Adapter Driver) provide support as well.
1338#
1339# The targ driver provides target mode support as a Processor type device.
1340# It exists to give the minimal context necessary to respond to Inquiry
1341# commands. There is a sample user application that shows how the rest
1342# of the command support might be done in /usr/share/examples/scsi_target.
1343#
1344# The targbh driver provides target mode support and exists to respond
1345# to incoming commands that do not otherwise have a logical unit assigned
1346# to them.
1347#
1348# The pass driver provides a passthrough API to access the CAM subsystem.
1349
1350device		scbus		#base SCSI code
1351device		ch		#SCSI media changers
1352device		da		#SCSI direct access devices (aka disks)
1353device		sa		#SCSI tapes
1354device		cd		#SCSI CD-ROMs
1355device		ses		#Enclosure Services (SES and SAF-TE)
1356device		pt		#SCSI processor
1357device		targ		#SCSI Target Mode Code
1358device		targbh		#SCSI Target Mode Blackhole Device
1359device		pass		#CAM passthrough driver
1360device		sg		#Linux SCSI passthrough
1361device		ctl		#CAM Target Layer
1362
1363# CAM OPTIONS:
1364# debugging options:
1365# CAMDEBUG		Compile in all possible debugging.
1366# CAM_DEBUG_COMPILE	Debug levels to compile in.
1367# CAM_DEBUG_FLAGS	Debug levels to enable on boot.
1368# CAM_DEBUG_BUS		Limit debugging to the given bus.
1369# CAM_DEBUG_TARGET	Limit debugging to the given target.
1370# CAM_DEBUG_LUN		Limit debugging to the given lun.
1371# CAM_DEBUG_DELAY	Delay in us after printing each debug line.
1372# CAM_IO_STATS		Publish additional CAM device statics by sysctl
1373#
1374# CAM_MAX_HIGHPOWER: Maximum number of concurrent high power (start unit) cmds
1375# SCSI_NO_SENSE_STRINGS: When defined disables sense descriptions
1376# SCSI_NO_OP_STRINGS: When defined disables opcode descriptions
1377# SCSI_DELAY: The number of MILLISECONDS to freeze the SIM (scsi adapter)
1378#             queue after a bus reset, and the number of milliseconds to
1379#             freeze the device queue after a bus device reset.  This
1380#             can be changed at boot and runtime with the
1381#             kern.cam.scsi_delay tunable/sysctl.
1382options 	CAMDEBUG
1383options 	CAM_DEBUG_COMPILE=-1
1384options 	CAM_DEBUG_FLAGS=(CAM_DEBUG_INFO|CAM_DEBUG_PROBE|CAM_DEBUG_PERIPH)
1385options 	CAM_DEBUG_BUS=-1
1386options 	CAM_DEBUG_TARGET=-1
1387options 	CAM_DEBUG_LUN=-1
1388options 	CAM_DEBUG_DELAY=1
1389options 	CAM_MAX_HIGHPOWER=4
1390options 	SCSI_NO_SENSE_STRINGS
1391options 	SCSI_NO_OP_STRINGS
1392options 	SCSI_DELAY=5000	# Be pessimistic about Joe SCSI device
1393options 	CAM_IOSCHED_DYNAMIC
1394options		CAM_IO_STATS
1395options		CAM_TEST_FAILURE
1396
1397# Options for the CAM CDROM driver:
1398# CHANGER_MIN_BUSY_SECONDS: Guaranteed minimum time quantum for a changer LUN
1399# CHANGER_MAX_BUSY_SECONDS: Maximum time quantum per changer LUN, only
1400#                           enforced if there is I/O waiting for another LUN
1401# The compiled in defaults for these variables are 2 and 10 seconds,
1402# respectively.
1403#
1404# These can also be changed on the fly with the following sysctl variables:
1405# kern.cam.cd.changer.min_busy_seconds
1406# kern.cam.cd.changer.max_busy_seconds
1407#
1408options 	CHANGER_MIN_BUSY_SECONDS=2
1409options 	CHANGER_MAX_BUSY_SECONDS=10
1410
1411# Options for the CAM sequential access driver:
1412# SA_IO_TIMEOUT: Timeout for read/write/wfm  operations, in minutes
1413# SA_SPACE_TIMEOUT: Timeout for space operations, in minutes
1414# SA_REWIND_TIMEOUT: Timeout for rewind operations, in minutes
1415# SA_ERASE_TIMEOUT: Timeout for erase operations, in minutes
1416# SA_1FM_AT_EOD: Default to model which only has a default one filemark at EOT.
1417options 	SA_IO_TIMEOUT=4
1418options 	SA_SPACE_TIMEOUT=60
1419options 	SA_REWIND_TIMEOUT=(2*60)
1420options 	SA_ERASE_TIMEOUT=(4*60)
1421options 	SA_1FM_AT_EOD
1422
1423# Optional timeout for the CAM processor target (pt) device
1424# This is specified in seconds.  The default is 60 seconds.
1425options 	SCSI_PT_DEFAULT_TIMEOUT=60
1426
1427# Optional enable of doing SES passthrough on other devices (e.g., disks)
1428#
1429# Normally disabled because a lot of newer SCSI disks report themselves
1430# as having SES capabilities, but this can then clot up attempts to build
1431# a topology with the SES device that's on the box these drives are in....
1432options 	SES_ENABLE_PASSTHROUGH
1433
1434
1435#####################################################################
1436# MISCELLANEOUS DEVICES AND OPTIONS
1437
1438device		pty		#BSD-style compatibility pseudo ttys
1439device		nmdm		#back-to-back tty devices
1440device		md		#Memory/malloc disk
1441device		snp		#Snoop device - to look at pty/vty/etc..
1442device		ccd		#Concatenated disk driver
1443device		firmware	#firmware(9) support
1444
1445# Kernel side iconv library
1446options 	LIBICONV
1447
1448# Size of the kernel message buffer.  Should be N * pagesize.
1449options 	MSGBUF_SIZE=40960
1450
1451
1452#####################################################################
1453# HARDWARE BUS CONFIGURATION
1454
1455#
1456# PCI bus & PCI options:
1457#
1458device		pci
1459options 	PCI_HP			# PCI-Express native HotPlug
1460options 	PCI_IOV			# PCI SR-IOV support
1461
1462
1463#####################################################################
1464# HARDWARE DEVICE CONFIGURATION
1465
1466# For ISA the required hints are listed.
1467# PCI, CardBus, SD/MMC and pccard are self identifying buses, so
1468# no hints are needed.
1469
1470#
1471# Mandatory devices:
1472#
1473
1474# These options are valid for other keyboard drivers as well.
1475options 	KBD_DISABLE_KEYMAP_LOAD	# refuse to load a keymap
1476options 	KBD_INSTALL_CDEV	# install a CDEV entry in /dev
1477
1478device		kbdmux			# keyboard multiplexer
1479options		KBDMUX_DFLT_KEYMAP	# specify the built-in keymap
1480makeoptions	KBDMUX_DFLT_KEYMAP=it.iso
1481
1482options 	FB_DEBUG		# Frame buffer debugging
1483
1484# Enable experimental features of the syscons terminal emulator (teken).
1485options 	TEKEN_CONS25		# cons25-style terminal emulation
1486options 	TEKEN_UTF8		# UTF-8 output handling
1487
1488# The vt video console driver.
1489device		vt
1490options		VT_ALT_TO_ESC_HACK=1	# Prepend ESC sequence to ALT keys
1491options		VT_MAXWINDOWS=16	# Number of virtual consoles
1492options		VT_TWOBUTTON_MOUSE	# Use right mouse button to paste
1493
1494# The following options set the maximum framebuffer size.
1495options		VT_FB_MAX_HEIGHT=480
1496options		VT_FB_MAX_WIDTH=640
1497
1498# The following options will let you change the default vt terminal colors.
1499options		TERMINAL_NORM_ATTR=(FG_GREEN|BG_BLACK)
1500options		TERMINAL_KERN_ATTR=(FG_LIGHTRED|BG_BLACK)
1501
1502#
1503# Optional devices:
1504#
1505
1506#
1507# SCSI host adapters:
1508#
1509# aacraid: Adaptec by PMC RAID controllers, Series 6/7/8 and upcoming
1510#          families. Container interface, CAM required.
1511# ahc: Adaptec 274x/284x/2910/293x/294x/394x/3950x/3960x/398X/4944/
1512#      19160x/29160x, aic7770/aic78xx
1513# ahd: Adaptec 29320/39320 Controllers.
1514# esp: Emulex ESP, NCR 53C9x and QLogic FAS families based controllers
1515#      including the AMD Am53C974 (found on devices such as the Tekram
1516#      DC-390(T)) and the Sun ESP and FAS families of controllers
1517# isp: Qlogic ISP 1020, 1040 and 1040B PCI SCSI host adapters,
1518#      ISP 1240 Dual Ultra SCSI, ISP 1080 and 1280 (Dual) Ultra2,
1519#      ISP 12160 Ultra3 SCSI,
1520#      Qlogic ISP 2100 and ISP 2200 1Gb Fibre Channel host adapters.
1521#      Qlogic ISP 2300 and ISP 2312 2Gb Fibre Channel host adapters.
1522#      Qlogic ISP 2322 and ISP 6322 2Gb Fibre Channel host adapters.
1523# ispfw: Firmware module for Qlogic host adapters
1524# mpr: LSI-Logic MPT/Fusion Gen 3
1525# mps: LSI-Logic MPT/Fusion Gen 2
1526# mpt: LSI-Logic MPT/Fusion 53c1020 or 53c1030 Ultra4
1527#      or FC9x9 Fibre Channel host adapters.
1528# sym: Symbios/Logic 53C8XX family of PCI-SCSI I/O processors:
1529#      53C810, 53C810A, 53C815, 53C825,  53C825A, 53C860, 53C875,
1530#      53C876, 53C885,  53C895, 53C895A, 53C896,  53C897, 53C1510D,
1531#      53C1010-33, 53C1010-66.
1532
1533device		aacraid
1534device		ahc
1535device		ahd
1536device		esp
1537device		iscsi_initiator
1538device		isp
1539envvar		hint.isp.0.disable="1"
1540envvar		hint.isp.0.role="3"
1541envvar		hint.isp.0.prefer_iomap="1"
1542envvar		hint.isp.0.prefer_memmap="1"
1543envvar		hint.isp.0.fwload_disable="1"
1544envvar		hint.isp.0.ignore_nvram="1"
1545envvar		hint.isp.0.fullduplex="1"
1546envvar		hint.isp.0.topology="lport"
1547envvar		hint.isp.0.topology="nport"
1548envvar		hint.isp.0.topology="lport-only"
1549envvar		hint.isp.0.topology="nport-only"
1550# we can't get u_int64_t types, nor can we get strings if it's got
1551# a leading 0x, hence this silly dodge.
1552envvar		hint.isp.0.portwnn="w50000000aaaa0000"
1553envvar		hint.isp.0.nodewnn="w50000000aaaa0001"
1554device		ispfw
1555device		mpr			# LSI-Logic MPT-Fusion 3
1556device		mps			# LSI-Logic MPT-Fusion 2
1557device		mpt			# LSI-Logic MPT-Fusion
1558device		sym
1559
1560# The aic7xxx driver will attempt to use memory mapped I/O for all PCI
1561# controllers that have it configured only if this option is set. Unfortunately,
1562# this doesn't work on some motherboards, which prevents it from being the
1563# default.
1564options 	AHC_ALLOW_MEMIO
1565
1566# Dump the contents of the ahc controller configuration PROM.
1567options 	AHC_DUMP_EEPROM
1568
1569# Bitmap of units to enable targetmode operations.
1570options 	AHC_TMODE_ENABLE
1571
1572# Compile in Aic7xxx Debugging code.
1573options 	AHC_DEBUG
1574
1575# Aic7xxx driver debugging options. See sys/dev/aic7xxx/aic7xxx.h
1576options 	AHC_DEBUG_OPTS
1577
1578# Print register bitfields in debug output.  Adds ~128k to driver
1579# See ahc(4).
1580options 	AHC_REG_PRETTY_PRINT
1581
1582# Compile in aic79xx debugging code.
1583options 	AHD_DEBUG
1584
1585# Aic79xx driver debugging options.  Adds ~215k to driver.  See ahd(4).
1586options 	AHD_DEBUG_OPTS=0xFFFFFFFF
1587
1588# Print human-readable register definitions when debugging
1589options 	AHD_REG_PRETTY_PRINT
1590
1591# Bitmap of units to enable targetmode operations.
1592options 	AHD_TMODE_ENABLE
1593
1594# Options used in dev/iscsi (Software iSCSI stack)
1595#
1596options 	ISCSI_INITIATOR_DEBUG=9
1597
1598# Options used in dev/isp/ (Qlogic SCSI/FC driver).
1599#
1600#	ISP_TARGET_MODE		-	enable target mode operation
1601#
1602options 	ISP_TARGET_MODE=1
1603#
1604#	ISP_DEFAULT_ROLES	-	default role
1605#		none=0
1606#		target=1
1607#		initiator=2
1608#		both=3			(not supported currently)
1609#
1610#	ISP_INTERNAL_TARGET		(trivial internal disk target, for testing)
1611#
1612options 	ISP_DEFAULT_ROLES=0
1613
1614#options 	SYM_SETUP_SCSI_DIFF	#-HVD support for 825a, 875, 885
1615					# disabled:0 (default), enabled:1
1616#options 	SYM_SETUP_PCI_PARITY	#-PCI parity checking
1617					# disabled:0, enabled:1 (default)
1618#options 	SYM_SETUP_MAX_LUN	#-Number of LUNs supported
1619					# default:8, range:[1..64]
1620
1621#
1622# Compaq "CISS" RAID controllers (SmartRAID 5* series)
1623# These controllers have a SCSI-like interface, and require the
1624# CAM infrastructure.
1625#
1626device		ciss
1627
1628#
1629# Intel Integrated RAID controllers.
1630# This driver was developed and is maintained by Intel.  Contacts
1631# at Intel for this driver are
1632# "Kannanthanam, Boji T" <boji.t.kannanthanam@intel.com> and
1633# "Leubner, Achim" <achim.leubner@intel.com>.
1634#
1635device		iir
1636
1637#
1638# Mylex AcceleRAID and eXtremeRAID controllers with v6 and later
1639# firmware.  These controllers have a SCSI-like interface, and require
1640# the CAM infrastructure.
1641#
1642device		mly
1643
1644#
1645# Compaq Smart RAID, Mylex DAC960 and AMI MegaRAID controllers.  Only
1646# one entry is needed; the code will find and configure all supported
1647# controllers.
1648#
1649device		ida		# Compaq Smart RAID
1650device		mlx		# Mylex DAC960
1651device		amr		# AMI MegaRAID
1652device		amrp		# SCSI Passthrough interface (optional, CAM req.)
1653device		mfi		# LSI MegaRAID SAS
1654device		mfip		# LSI MegaRAID SAS passthrough, requires CAM
1655options 	MFI_DEBUG
1656device		mrsas		# LSI/Avago MegaRAID SAS/SATA, 6Gb/s and 12Gb/s
1657
1658#
1659# 3ware ATA RAID
1660#
1661device		twe		# 3ware ATA RAID
1662
1663#
1664# Serial ATA host controllers:
1665#
1666# ahci: Advanced Host Controller Interface (AHCI) compatible
1667# mvs:  Marvell 88SX50XX/88SX60XX/88SX70XX/SoC controllers
1668# siis: SiliconImage SiI3124/SiI3132/SiI3531 controllers
1669#
1670# These drivers are part of cam(4) subsystem. They supersede less featured
1671# ata(4) subsystem drivers, supporting same hardware.
1672
1673device		ahci
1674device		mvs
1675device		siis
1676
1677#
1678# The 'ATA' driver supports all legacy ATA/ATAPI controllers, including
1679# PC Card devices. You only need one "device ata" for it to find all
1680# PCI and PC Card ATA/ATAPI devices on modern machines.
1681# Alternatively, individual bus and chipset drivers may be chosen by using
1682# the 'atacore' driver then selecting the drivers on a per vendor basis.
1683# For example to build a system which only supports a VIA chipset,
1684# omit 'ata' and include the 'atacore', 'atapci' and 'atavia' drivers.
1685device		ata
1686
1687# Modular ATA
1688#device		atacore		# Core ATA functionality
1689#device		atapccard	# CARDBUS support
1690#device		ataisa		# ISA bus support
1691#device		atapci		# PCI bus support; only generic chipset support
1692
1693# PCI ATA chipsets
1694#device		ataacard	# ACARD
1695#device		ataacerlabs	# Acer Labs Inc. (ALI)
1696#device		ataamd		# American Micro Devices (AMD)
1697#device		ataati		# ATI
1698#device		atacenatek	# Cenatek
1699#device		atacypress	# Cypress
1700#device		atacyrix	# Cyrix
1701#device		atahighpoint	# HighPoint
1702#device		ataintel	# Intel
1703#device		ataite		# Integrated Technology Inc. (ITE)
1704#device		atajmicron	# JMicron
1705#device		atamarvell	# Marvell
1706#device		atamicron	# Micron
1707#device		atanational	# National
1708#device		atanetcell	# NetCell
1709#device		atanvidia	# nVidia
1710#device		atapromise	# Promise
1711#device		ataserverworks	# ServerWorks
1712#device		atasiliconimage	# Silicon Image Inc. (SiI) (formerly CMD)
1713#device		atasis		# Silicon Integrated Systems Corp.(SiS)
1714#device		atavia		# VIA Technologies Inc.
1715
1716#
1717# For older non-PCI, non-PnPBIOS systems, these are the hints lines to add:
1718envvar		hint.ata.0.at="isa"
1719envvar		hint.ata.0.port="0x1f0"
1720envvar		hint.ata.0.irq="14"
1721envvar		hint.ata.1.at="isa"
1722envvar		hint.ata.1.port="0x170"
1723envvar		hint.ata.1.irq="15"
1724
1725#
1726# uart: newbusified driver for serial interfaces.  It consolidates the sio(4),
1727#	sab(4) and zs(4) drivers.
1728#
1729device		uart
1730
1731# Options for uart(4)
1732options 	UART_PPS_ON_CTS		# Do time pulse capturing using CTS
1733					# instead of DCD.
1734options 	UART_POLL_FREQ		# Set polling rate, used when hw has
1735					# no interrupt support (50 Hz default).
1736
1737# The following hint should only be used for pure ISA devices.  It is not
1738# needed otherwise.  Use of hints is strongly discouraged.
1739envvar		hint.uart.0.at="isa"
1740
1741# The following 3 hints are used when the UART is a system device (i.e., a
1742# console or debug port), but only on platforms that don't have any other
1743# means to pass the information to the kernel.  The unit number of the hint
1744# is only used to bundle the hints together.  There is no relation to the
1745# unit number of the probed UART.
1746envvar		hint.uart.0.port="0x3f8"
1747envvar		hint.uart.0.flags="0x10"
1748envvar		hint.uart.0.baud="115200"
1749
1750# `flags' for serial drivers that support consoles like sio(4) and uart(4):
1751#	0x10	enable console support for this unit.  Other console flags
1752#		(if applicable) are ignored unless this is set.  Enabling
1753#		console support does not make the unit the preferred console.
1754#		Boot with -h or set boot_serial=YES in the loader.  For sio(4)
1755#		specifically, the 0x20 flag can also be set (see above).
1756#		Currently, at most one unit can have console support; the
1757#		first one (in config file order) with this flag set is
1758#		preferred.  Setting this flag for sio0 gives the old behavior.
1759#	0x80	use this port for serial line gdb support in ddb.  Also known
1760#		as debug port.
1761#
1762
1763# Options for serial drivers that support consoles:
1764options 	BREAK_TO_DEBUGGER	# A BREAK/DBG on the console goes to
1765					# ddb, if available.
1766
1767# Solaris implements a new BREAK which is initiated by a character
1768# sequence CR ~ ^b which is similar to a familiar pattern used on
1769# Sun servers by the Remote Console.  There are FreeBSD extensions:
1770# CR ~ ^p requests force panic and CR ~ ^r requests a clean reboot.
1771options 	ALT_BREAK_TO_DEBUGGER
1772
1773# Serial Communications Controller
1774# Supports the Siemens SAB 82532 and Zilog Z8530 multi-channel
1775# communications controllers.
1776device		scc
1777
1778# PCI Universal Communications driver
1779# Supports various multi port PCI I/O cards.
1780device		puc
1781
1782#
1783# Network interfaces:
1784#
1785# MII bus support is required for many PCI Ethernet NICs,
1786# namely those which use MII-compliant transceivers or implement
1787# transceiver control interfaces that operate like an MII.  Adding
1788# "device miibus" to the kernel config pulls in support for the generic
1789# miibus API, the common support for for bit-bang'ing the MII and all
1790# of the PHY drivers, including a generic one for PHYs that aren't
1791# specifically handled by an individual driver.  Support for specific
1792# PHYs may be built by adding "device mii", "device mii_bitbang" if
1793# needed by the NIC driver and then adding the appropriate PHY driver.
1794device  	mii		# Minimal MII support
1795device  	mii_bitbang	# Common module for bit-bang'ing the MII
1796device  	miibus		# MII support w/ bit-bang'ing and all PHYs
1797
1798device  	acphy		# Altima Communications AC101
1799device  	amphy		# AMD AM79c873 / Davicom DM910{1,2}
1800device  	atphy		# Attansic/Atheros F1
1801device  	axphy		# Asix Semiconductor AX88x9x
1802device  	bmtphy		# Broadcom BCM5201/BCM5202 and 3Com 3c905C
1803device		bnxt		# Broadcom NetXtreme-C/NetXtreme-E
1804device  	brgphy		# Broadcom BCM54xx/57xx 1000baseTX
1805device  	cgem		# Cadence GEM Gigabit Ethernet
1806device  	ciphy		# Cicada/Vitesse CS/VSC8xxx
1807device  	e1000phy	# Marvell 88E1000 1000/100/10-BT
1808device  	gentbi		# Generic 10-bit 1000BASE-{LX,SX} fiber ifaces
1809device  	icsphy		# ICS ICS1889-1893
1810device  	ip1000phy	# IC Plus IP1000A/IP1001
1811device  	jmphy		# JMicron JMP211/JMP202
1812device  	lxtphy		# Level One LXT-970
1813device  	mlphy		# Micro Linear 6692
1814device  	nsgphy		# NatSemi DP8361/DP83865/DP83891
1815device  	nsphy		# NatSemi DP83840A
1816device  	nsphyter	# NatSemi DP83843/DP83815
1817device  	pnaphy		# HomePNA
1818device  	qsphy		# Quality Semiconductor QS6612
1819device  	rdcphy		# RDC Semiconductor R6040
1820device  	rgephy		# RealTek 8169S/8110S/8211B/8211C
1821device  	rlphy		# RealTek 8139
1822device  	rlswitch	# RealTek 8305
1823device  	smcphy		# SMSC LAN91C111
1824device  	tdkphy		# TDK 89Q2120
1825device  	tlphy		# Texas Instruments ThunderLAN
1826device  	truephy		# LSI TruePHY
1827device		xmphy		# XaQti XMAC II
1828
1829# an:   Aironet 4500/4800 802.11 wireless adapters. Supports the PCMCIA,
1830#       PCI and ISA varieties.
1831# ae:   Support for gigabit ethernet adapters based on the Attansic/Atheros
1832#       L2 PCI-Express FastEthernet controllers.
1833# age:  Support for gigabit ethernet adapters based on the Attansic/Atheros
1834#       L1 PCI express gigabit ethernet controllers.
1835# alc:  Support for Atheros AR8131/AR8132 PCIe ethernet controllers.
1836# ale:  Support for Atheros AR8121/AR8113/AR8114 PCIe ethernet controllers.
1837# ath:  Atheros a/b/g WiFi adapters (requires ath_hal and wlan)
1838# bce:	Broadcom NetXtreme II (BCM5706/BCM5708) PCI/PCIe Gigabit Ethernet
1839#       adapters.
1840# bfe:	Broadcom BCM4401 Ethernet adapter.
1841# bge:	Support for gigabit ethernet adapters based on the Broadcom
1842#	BCM570x family of controllers, including the 3Com 3c996-T,
1843#	the Netgear GA302T, the SysKonnect SK-9D21 and SK-9D41, and
1844#	the embedded gigE NICs on Dell PowerEdge 2550 servers.
1845# bnxt:	Broadcom NetXtreme-C and NetXtreme-E PCIe 10/25/50G Ethernet adapters.
1846# bxe:	Broadcom NetXtreme II (BCM5771X/BCM578XX) PCIe 10Gb Ethernet
1847#       adapters.
1848# bwi:	Broadcom BCM430* and BCM431* family of wireless adapters.
1849# bwn:	Broadcom BCM43xx family of wireless adapters.
1850# cas:	Sun Cassini/Cassini+ and National Semiconductor DP83065 Saturn
1851# cxgb: Chelsio T3 based 1GbE/10GbE PCIe Ethernet adapters.
1852# cxgbe:Chelsio T4, T5, and T6-based 1/10/25/40/100GbE PCIe Ethernet
1853#	adapters.
1854# cxgbev: Chelsio T4, T5, and T6-based PCIe Virtual Functions.
1855# dc:   Support for PCI fast ethernet adapters based on the DEC/Intel 21143
1856#       and various workalikes including:
1857#       the ADMtek AL981 Comet and AN985 Centaur, the ASIX Electronics
1858#       AX88140A and AX88141, the Davicom DM9100 and DM9102, the Lite-On
1859#       82c168 and 82c169 PNIC, the Lite-On/Macronix LC82C115 PNIC II
1860#       and the Macronix 98713/98713A/98715/98715A/98725 PMAC. This driver
1861#       replaces the old al, ax, dm, pn and mx drivers.  List of brands:
1862#       Digital DE500-BA, Kingston KNE100TX, D-Link DFE-570TX, SOHOware SFA110,
1863#       SVEC PN102-TX, CNet Pro110B, 120A, and 120B, Compex RL100-TX,
1864#       LinkSys LNE100TX, LNE100TX V2.0, Jaton XpressNet, Alfa Inc GFC2204,
1865#       KNE110TX.
1866# em:   Intel Pro/1000 Gigabit Ethernet 82542, 82543, 82544 based adapters.
1867# fxp:  Intel EtherExpress Pro/100B
1868#	(hint of prefer_iomap can be done to prefer I/O instead of Mem mapping)
1869# gem:  Apple GMAC/Sun ERI/Sun GEM
1870# hme:  Sun HME (Happy Meal Ethernet)
1871# jme:  JMicron JMC260 Fast Ethernet/JMC250 Gigabit Ethernet based adapters.
1872# le:   AMD Am7900 LANCE and Am79C9xx PCnet
1873# lge:	Support for PCI gigabit ethernet adapters based on the Level 1
1874#	LXT1001 NetCellerator chipset. This includes the D-Link DGE-500SX,
1875#	SMC TigerCard 1000 (SMC9462SX), and some Addtron cards.
1876# lio:  Support for Cavium 23XX Ethernet adapters
1877# malo: Marvell Libertas wireless NICs.
1878# mwl:  Marvell 88W8363 802.11n wireless NICs.
1879#	Requires the mwl firmware module
1880# mwlfw: Marvell 88W8363 firmware
1881# msk:	Support for gigabit ethernet adapters based on the Marvell/SysKonnect
1882#	Yukon II Gigabit controllers, including 88E8021, 88E8022, 88E8061,
1883#	88E8062, 88E8035, 88E8036, 88E8038, 88E8050, 88E8052, 88E8053,
1884#	88E8055, 88E8056 and D-Link 560T/550SX.
1885# mlxfw: Mellanox firmware update module.
1886# mlx5:	Mellanox ConnectX-4 and ConnectX-4 LX IB and Eth shared code module.
1887# mlx5en:Mellanox ConnectX-4 and ConnectX-4 LX PCIe Ethernet adapters.
1888# my:	Myson Fast Ethernet (MTD80X, MTD89X)
1889# nge:	Support for PCI gigabit ethernet adapters based on the National
1890#	Semiconductor DP83820 and DP83821 chipset. This includes the
1891#	SMC EZ Card 1000 (SMC9462TX), D-Link DGE-500T, Asante FriendlyNet
1892#	GigaNIX 1000TA and 1000TPC, the Addtron AEG320T, the Surecom
1893#	EP-320G-TX and the Netgear GA622T.
1894# oce:	Emulex 10 Gbit adapters (OneConnect Ethernet)
1895# ral:	Ralink Technology IEEE 802.11 wireless adapter
1896# re:   RealTek 8139C+/8169/816xS/811xS/8101E PCI/PCIe Ethernet adapter
1897# rl:   Support for PCI fast ethernet adapters based on the RealTek 8129/8139
1898#       chipset.  Note that the RealTek driver defaults to using programmed
1899#       I/O to do register accesses because memory mapped mode seems to cause
1900#       severe lockups on SMP hardware.  This driver also supports the
1901#       Accton EN1207D `Cheetah' adapter, which uses a chip called
1902#       the MPX 5030/5038, which is either a RealTek in disguise or a
1903#       RealTek workalike.  Note that the D-Link DFE-530TX+ uses the RealTek
1904#       chipset and is supported by this driver, not the 'vr' driver.
1905# rtwn: RealTek wireless adapters.
1906# rtwnfw: RealTek wireless firmware.
1907# sge:  Silicon Integrated Systems SiS190/191 Fast/Gigabit Ethernet adapter
1908# sis:  Support for NICs based on the Silicon Integrated Systems SiS 900,
1909#       SiS 7016 and NS DP83815 PCI fast ethernet controller chips.
1910# sk:   Support for the SysKonnect SK-984x series PCI gigabit ethernet NICs.
1911#       This includes the SK-9841 and SK-9842 single port cards (single mode
1912#       and multimode fiber) and the SK-9843 and SK-9844 dual port cards
1913#       (also single mode and multimode).
1914#       The driver will autodetect the number of ports on the card and
1915#       attach each one as a separate network interface.
1916# ste:  Sundance Technologies ST201 PCI fast ethernet controller, includes
1917#       the D-Link DFE-550TX.
1918# stge: Support for gigabit ethernet adapters based on the Sundance/Tamarack
1919#       TC9021 family of controllers, including the Sundance ST2021/ST2023,
1920#       the Sundance/Tamarack TC9021, the D-Link DL-4000 and ASUS NX1101.
1921# ti:   Support for PCI gigabit ethernet NICs based on the Alteon Networks
1922#       Tigon 1 and Tigon 2 chipsets.  This includes the Alteon AceNIC, the
1923#       3Com 3c985, the Netgear GA620 and various others.  Note that you will
1924#       probably want to bump up kern.ipc.nmbclusters a lot to use this driver.
1925# vr:   Support for various fast ethernet adapters based on the VIA
1926#       Technologies VT3043 `Rhine I' and VT86C100A `Rhine II' chips,
1927#       including the D-Link DFE520TX and D-Link DFE530TX (see 'rl' for
1928#       DFE530TX+), the Hawking Technologies PN102TX, and the AOpen/Acer ALN-320.
1929# vte:  DM&P Vortex86 RDC R6040 Fast Ethernet
1930# wi:   Lucent WaveLAN/IEEE 802.11 PCMCIA adapters. Note: this supports both
1931#       the PCMCIA and ISA cards: the ISA card is really a PCMCIA to ISA
1932#       bridge with a PCMCIA adapter plugged into it.
1933# xl:   Support for the 3Com 3c900, 3c905, 3c905B and 3c905C (Fast)
1934#       Etherlink XL cards and integrated controllers.  This includes the
1935#       integrated 3c905B-TX chips in certain Dell Optiplex and Dell
1936#       Precision desktop machines and the integrated 3c905-TX chips
1937#       in Dell Latitude laptop docking stations.
1938#       Also supported: 3Com 3c980(C)-TX, 3Com 3cSOHO100-TX, 3Com 3c450-TX
1939
1940# Order for ISA devices is important here
1941
1942device		an
1943device		wi
1944
1945# PCI Ethernet NICs that use the common MII bus controller code.
1946device		ae		# Attansic/Atheros L2 FastEthernet
1947device		age		# Attansic/Atheros L1 Gigabit Ethernet
1948device		alc		# Atheros AR8131/AR8132 Ethernet
1949device		ale		# Atheros AR8121/AR8113/AR8114 Ethernet
1950device		bce		# Broadcom BCM5706/BCM5708 Gigabit Ethernet
1951device		bfe		# Broadcom BCM440x 10/100 Ethernet
1952device		bge		# Broadcom BCM570xx Gigabit Ethernet
1953device		cas		# Sun Cassini/Cassini+ and NS DP83065 Saturn
1954device		dc		# DEC/Intel 21143 and various workalikes
1955device		et		# Agere ET1310 10/100/Gigabit Ethernet
1956device		fxp		# Intel EtherExpress PRO/100B (82557, 82558)
1957envvar		hint.fxp.0.prefer_iomap="0"
1958device		gem		# Apple GMAC/Sun ERI/Sun GEM
1959device		hme		# Sun HME (Happy Meal Ethernet)
1960device		jme		# JMicron JMC250 Gigabit/JMC260 Fast Ethernet
1961device		lge		# Level 1 LXT1001 gigabit Ethernet
1962device		mlxfw		# Mellanox firmware update module
1963device		mlx5		# Shared code module between IB and Ethernet
1964device		mlx5en		# Mellanox ConnectX-4 and ConnectX-4 LX
1965device		msk		# Marvell/SysKonnect Yukon II Gigabit Ethernet
1966device		my		# Myson Fast Ethernet (MTD80X, MTD89X)
1967device		nge		# NatSemi DP83820 gigabit Ethernet
1968device		re		# RealTek 8139C+/8169/8169S/8110S
1969device		rl		# RealTek 8129/8139
1970device		sge		# Silicon Integrated Systems SiS190/191
1971device		sis		# Silicon Integrated Systems SiS 900/SiS 7016
1972device		sk		# SysKonnect SK-984x & SK-982x gigabit Ethernet
1973device		ste		# Sundance ST201 (D-Link DFE-550TX)
1974device		stge		# Sundance/Tamarack TC9021 gigabit Ethernet
1975device		vr		# VIA Rhine, Rhine II
1976device		vte		# DM&P Vortex86 RDC R6040 Fast Ethernet
1977device		xl		# 3Com 3c90x (``Boomerang'', ``Cyclone'')
1978
1979# PCI/PCI-X/PCIe Ethernet NICs that use iflib infrastructure
1980device		iflib
1981device		em		# Intel Pro/1000 Gigabit Ethernet
1982device		ix		# Intel Pro/10Gbe PCIE Ethernet
1983device		ixv		# Intel Pro/10Gbe PCIE Ethernet VF
1984
1985# PCI Ethernet NICs.
1986device		cxgb		# Chelsio T3 10 Gigabit Ethernet
1987device		cxgb_t3fw	# Chelsio T3 10 Gigabit Ethernet firmware
1988device		cxgbe		# Chelsio T4-T6 1/10/25/40/100 Gigabit Ethernet
1989device		cxgbev		# Chelsio T4-T6 Virtual Functions
1990device		le		# AMD Am7900 LANCE and Am79C9xx PCnet
1991device		mxge		# Myricom Myri-10G 10GbE NIC
1992device		oce		# Emulex 10 GbE (OneConnect Ethernet)
1993device		ti		# Alteon Networks Tigon I/II gigabit Ethernet
1994
1995# PCI IEEE 802.11 Wireless NICs
1996device		ath		# Atheros pci/cardbus NIC's
1997device		ath_hal		# pci/cardbus chip support
1998#device		ath_ar5210	# AR5210 chips
1999#device		ath_ar5211	# AR5211 chips
2000#device		ath_ar5212	# AR5212 chips
2001#device		ath_rf2413
2002#device		ath_rf2417
2003#device		ath_rf2425
2004#device		ath_rf5111
2005#device		ath_rf5112
2006#device		ath_rf5413
2007#device		ath_ar5416	# AR5416 chips
2008# All of the AR5212 parts have a problem when paired with the AR71xx
2009# CPUS.  These parts have a bug that triggers a fatal bus error on the AR71xx
2010# only.  Details of the exact nature of the bug are sketchy, but some can be
2011# found at https://forum.openwrt.org/viewtopic.php?pid=70060 on pages 4, 5 and
2012# 6.  This option enables this workaround.  There is a performance penalty
2013# for this work around, but without it things don't work at all.  The DMA
2014# from the card usually bursts 128 bytes, but on the affected CPUs, only
2015# 4 are safe.
2016options	   	AH_RXCFG_SDMAMW_4BYTES
2017#device		ath_ar9160	# AR9160 chips
2018#device		ath_ar9280	# AR9280 chips
2019#device		ath_ar9285	# AR9285 chips
2020device		ath_rate_sample	# SampleRate tx rate control for ath
2021device		bwi		# Broadcom BCM430* BCM431*
2022device		bwn		# Broadcom BCM43xx
2023device		malo		# Marvell Libertas wireless NICs.
2024device		mwl		# Marvell 88W8363 802.11n wireless NICs.
2025device		mwlfw
2026device		ral		# Ralink Technology RT2500 wireless NICs.
2027device		rtwn		# Realtek wireless NICs
2028device		rtwnfw
2029
2030# Use sf_buf(9) interface for jumbo buffers on ti(4) controllers.
2031#options 	TI_SF_BUF_JUMBO
2032# Turn on the header splitting option for the ti(4) driver firmware.  This
2033# only works for Tigon II chips, and has no effect for Tigon I chips.
2034# This option requires the TI_SF_BUF_JUMBO option above.
2035#options 	TI_JUMBO_HDRSPLIT
2036
2037# These two options allow manipulating the mbuf cluster size and mbuf size,
2038# respectively.  Be very careful with NIC driver modules when changing
2039# these from their default values, because that can potentially cause a
2040# mismatch between the mbuf size assumed by the kernel and the mbuf size
2041# assumed by a module.  The only driver that currently has the ability to
2042# detect a mismatch is ti(4).
2043options 	MCLSHIFT=12	# mbuf cluster shift in bits, 12 == 4KB
2044options 	MSIZE=512	# mbuf size in bytes
2045
2046#
2047# Sound drivers
2048#
2049# sound: The generic sound driver.
2050#
2051
2052device		sound
2053
2054#
2055# snd_*: Device-specific drivers.
2056#
2057# The flags of the device tell the device a bit more info about the
2058# device that normally is obtained through the PnP interface.
2059#	bit  2..0   secondary DMA channel;
2060#	bit  4      set if the board uses two dma channels;
2061#	bit 15..8   board type, overrides autodetection; leave it
2062#		    zero if don't know what to put in (and you don't,
2063#		    since this is unsupported at the moment...).
2064#
2065# snd_ad1816:		Analog Devices AD1816 ISA PnP/non-PnP.
2066# snd_als4000:		Avance Logic ALS4000 PCI.
2067# snd_atiixp:		ATI IXP 200/300/400 PCI.
2068# snd_cmi:		CMedia CMI8338/CMI8738 PCI.
2069# snd_cs4281:		Crystal Semiconductor CS4281 PCI.
2070# snd_csa:		Crystal Semiconductor CS461x/428x PCI. (except
2071#			4281)
2072# snd_ds1:		Yamaha DS-1 PCI.
2073# snd_emu10k1:		Creative EMU10K1 PCI and EMU10K2 (Audigy) PCI.
2074# snd_emu10kx:		Creative SoundBlaster Live! and Audigy
2075# snd_envy24:		VIA Envy24 and compatible, needs snd_spicds.
2076# snd_envy24ht:		VIA Envy24HT and compatible, needs snd_spicds.
2077# snd_es137x:		Ensoniq AudioPCI ES137x PCI.
2078# snd_ess:		Ensoniq ESS ISA PnP/non-PnP, to be used in
2079#			conjunction with snd_sbc.
2080# snd_fm801:		Forte Media FM801 PCI.
2081# snd_gusc:		Gravis UltraSound ISA PnP/non-PnP.
2082# snd_hda:		Intel High Definition Audio (Controller) and
2083#			compatible.
2084# snd_hdspe:		RME HDSPe AIO and RayDAT.
2085# snd_ich:		Intel ICH AC'97 and some more audio controllers
2086#			embedded in a chipset, for example nVidia
2087#			nForce controllers.
2088# snd_maestro:		ESS Technology Maestro-1/2x PCI.
2089# snd_maestro3:		ESS Technology Maestro-3/Allegro PCI.
2090# snd_mss:		Microsoft Sound System ISA PnP/non-PnP.
2091# snd_neomagic:		Neomagic 256 AV/ZX PCI.
2092# snd_sb16:		Creative SoundBlaster16, to be used in
2093#			conjunction with snd_sbc.
2094# snd_sb8:		Creative SoundBlaster (pre-16), to be used in
2095#			conjunction with snd_sbc.
2096# snd_sbc:		Creative SoundBlaster ISA PnP/non-PnP.
2097#			Supports ESS and Avance ISA chips as well.
2098# snd_solo:		ESS Solo-1x PCI.
2099# snd_spicds:		SPI codec driver, needed by Envy24/Envy24HT drivers.
2100# snd_t4dwave:		Trident 4DWave DX/NX PCI, Sis 7018 PCI and Acer Labs
2101#			M5451 PCI.
2102# snd_uaudio:		USB audio.
2103# snd_via8233:		VIA VT8233x PCI.
2104# snd_via82c686:	VIA VT82C686A PCI.
2105# snd_vibes:		S3 Sonicvibes PCI.
2106
2107device		snd_ad1816
2108device		snd_als4000
2109device		snd_atiixp
2110device		snd_cmi
2111device		snd_cs4281
2112device		snd_csa
2113device		snd_ds1
2114device		snd_emu10k1
2115device		snd_emu10kx
2116device		snd_envy24
2117device		snd_envy24ht
2118device		snd_es137x
2119device		snd_ess
2120device		snd_fm801
2121device		snd_gusc
2122device		snd_hda
2123device		snd_hdspe
2124device		snd_ich
2125device		snd_maestro
2126device		snd_maestro3
2127device		snd_mss
2128device		snd_neomagic
2129device		snd_sb16
2130device		snd_sb8
2131device		snd_sbc
2132device		snd_solo
2133device		snd_spicds
2134device		snd_t4dwave
2135device		snd_uaudio
2136device		snd_via8233
2137device		snd_via82c686
2138device		snd_vibes
2139
2140# For non-PnP sound cards:
2141envvar		hint.pcm.0.at="isa"
2142envvar		hint.pcm.0.irq="10"
2143envvar		hint.pcm.0.drq="1"
2144envvar		hint.pcm.0.flags="0x0"
2145envvar		hint.sbc.0.at="isa"
2146envvar		hint.sbc.0.port="0x220"
2147envvar		hint.sbc.0.irq="5"
2148envvar		hint.sbc.0.drq="1"
2149envvar		hint.sbc.0.flags="0x15"
2150envvar		hint.gusc.0.at="isa"
2151envvar		hint.gusc.0.port="0x220"
2152envvar		hint.gusc.0.irq="5"
2153envvar		hint.gusc.0.drq="1"
2154envvar		hint.gusc.0.flags="0x13"
2155
2156#
2157# Following options are intended for debugging/testing purposes:
2158#
2159# SND_DEBUG                    Enable extra debugging code that includes
2160#                              sanity checking and possible increase of
2161#                              verbosity.
2162#
2163# SND_DIAGNOSTIC               Similar in a spirit of INVARIANTS/DIAGNOSTIC,
2164#                              zero tolerance against inconsistencies.
2165#
2166# SND_FEEDER_MULTIFORMAT       By default, only 16/32 bit feeders are compiled
2167#                              in. This options enable most feeder converters
2168#                              except for 8bit. WARNING: May bloat the kernel.
2169#
2170# SND_FEEDER_FULL_MULTIFORMAT  Ditto, but includes 8bit feeders as well.
2171#
2172# SND_FEEDER_RATE_HP           (feeder_rate) High precision 64bit arithmetic
2173#                              as much as possible (the default trying to
2174#                              avoid it). Possible slowdown.
2175#
2176# SND_PCM_64                   (Only applicable for i386/32bit arch)
2177#                              Process 32bit samples through 64bit
2178#                              integer/arithmetic. Slight increase of dynamic
2179#                              range at a cost of possible slowdown.
2180#
2181# SND_OLDSTEREO                Only 2 channels are allowed, effectively
2182#                              disabling multichannel processing.
2183#
2184options		SND_DEBUG
2185options		SND_DIAGNOSTIC
2186options		SND_FEEDER_MULTIFORMAT
2187options		SND_FEEDER_FULL_MULTIFORMAT
2188options		SND_FEEDER_RATE_HP
2189options		SND_PCM_64
2190options		SND_OLDSTEREO
2191
2192#
2193# Miscellaneous hardware:
2194#
2195# cmx: OmniKey CardMan 4040 pccard smartcard reader
2196
2197device		cmx
2198
2199#
2200# PC Card/PCMCIA and Cardbus
2201#
2202# cbb: pci/cardbus bridge implementing YENTA interface
2203# pccard: pccard slots
2204# cardbus: cardbus slots
2205device		cbb
2206device		pccard
2207device		cardbus
2208
2209#
2210# MMC/SD
2211#
2212# mmc 		MMC/SD bus
2213# mmcsd		MMC/SD memory card
2214# sdhci		Generic PCI SD Host Controller
2215# rtsx		Realtek SD card reader (RTS5209, RTS5227, ...)
2216device		mmc
2217device		mmcsd
2218device		sdhci
2219device		rtsx
2220
2221#
2222# SMB bus
2223#
2224# System Management Bus support is provided by the 'smbus' device.
2225# Access to the SMBus device is via the 'smb' device (/dev/smb*),
2226# which is a child of the 'smbus' device.
2227#
2228# Supported devices:
2229# smb		standard I/O through /dev/smb*
2230#
2231# Supported SMB interfaces:
2232# iicsmb	I2C to SMB bridge with any iicbus interface
2233# intpm		Intel PIIX4 (82371AB, 82443MX) Power Management Unit
2234# alpm		Acer Aladdin-IV/V/Pro2 Power Management Unit
2235# ichsmb	Intel ICH SMBus controller chips (82801AA, 82801AB, 82801BA)
2236# viapm		VIA VT82C586B/596B/686A and VT8233 Power Management Unit
2237# amdpm		AMD 756 Power Management Unit
2238# amdsmb	AMD 8111 SMBus 2.0 Controller
2239# nfpm		NVIDIA nForce Power Management Unit
2240# nfsmb		NVIDIA nForce2/3/4 MCP SMBus 2.0 Controller
2241# ismt		Intel SMBus 2.0 controller chips (on Atom S1200, C2000)
2242#
2243device		smbus		# Bus support, required for smb below.
2244
2245device		intpm
2246device		alpm
2247device		ichsmb
2248device		viapm
2249device		amdpm
2250device		amdsmb
2251device		nfpm
2252device		nfsmb
2253device		ismt
2254
2255device		smb
2256
2257# SMBus peripheral devices
2258#
2259# jedec_dimm	Asset and temperature reporting for DDR3 and DDR4 DIMMs
2260#
2261device		jedec_dimm
2262
2263# I2C Bus
2264#
2265# Philips i2c bus support is provided by the `iicbus' device.
2266#
2267# Supported devices:
2268# ic	i2c network interface
2269# iic	i2c standard io
2270# iicsmb i2c to smb bridge. Allow i2c i/o with smb commands.
2271# iicoc simple polling driver for OpenCores I2C controller
2272#
2273# Other:
2274# iicbb	generic I2C bit-banging code (needed by lpbb)
2275#
2276device		iicbus		# Bus support, required for ic/iic/iicsmb below.
2277device		iicbb		# bitbang driver; implements i2c on a pair of gpio pins
2278
2279device		ic
2280device		iic		# userland access to i2c slave devices via ioctl(8)
2281device		iicsmb		# smb over i2c bridge
2282device		iicoc		# OpenCores I2C controller support
2283
2284# I2C bus multiplexer (mux) devices
2285device		iicmux		# i2c mux core driver
2286device		iic_gpiomux	# i2c mux hardware controlled via gpio pins
2287device		ltc430x		# LTC4305 and LTC4306 i2c mux chips
2288
2289# I2C peripheral devices
2290#
2291device		ad7418		# Analog Devices temp and voltage sensor
2292device		ads111x		# Texas Instruments ADS101x and ADS111x ADCs
2293device		ds1307		# Dallas DS1307 RTC and compatible
2294device		ds13rtc		# All Dallas/Maxim ds13xx chips
2295device		ds1672		# Dallas DS1672 RTC
2296device		ds3231		# Dallas DS3231 RTC + temperature
2297device		icee		# AT24Cxxx and compatible EEPROMs
2298device		isl12xx		# Intersil ISL12xx RTC
2299device		lm75		# LM75 compatible temperature sensor
2300device		nxprtc		# NXP RTCs: PCA/PFC212x PCA/PCF85xx
2301device		rtc8583		# Epson RTC-8583
2302device		s35390a		# Seiko Instruments S-35390A RTC
2303device		sy8106a		# Silergy Corp. SY8106A buck regulator
2304device		syr827		# Silergy Corp. DC/DC regulator
2305
2306# Parallel-Port Bus
2307#
2308# Parallel port bus support is provided by the `ppbus' device.
2309# Multiple devices may be attached to the parallel port, devices
2310# are automatically probed and attached when found.
2311#
2312# Supported devices:
2313# lpt	Parallel Printer
2314# plip	Parallel network interface
2315# ppi	General-purpose I/O ("Geek Port") + IEEE1284 I/O
2316# pps	Pulse per second Timing Interface
2317# lpbb	Philips official parallel port I2C bit-banging interface
2318# pcfclock Parallel port clock driver.
2319#
2320# Supported interfaces:
2321# ppc	ISA-bus parallel port interfaces.
2322#
2323
2324options 	PPC_PROBE_CHIPSET # Enable chipset specific detection
2325				  # (see flags in ppc(4))
2326options 	DEBUG_1284	# IEEE1284 signaling protocol debug
2327options 	PERIPH_1284	# Makes your computer act as an IEEE1284
2328				# compliant peripheral
2329options 	DONTPROBE_1284	# Avoid boot detection of PnP parallel devices
2330options 	LPT_DEBUG	# Printer driver debug
2331options 	PPC_DEBUG	# Parallel chipset level debug
2332options 	PLIP_DEBUG	# Parallel network IP interface debug
2333options 	PCFCLOCK_VERBOSE         # Verbose pcfclock driver
2334options 	PCFCLOCK_MAX_RETRIES=5   # Maximum read tries (default 10)
2335
2336device		ppc
2337envvar		hint.ppc.0.at="isa"
2338envvar		hint.ppc.0.irq="7"
2339device		ppbus
2340device		lpt
2341device		plip
2342device		ppi
2343device		pps
2344device		lpbb
2345device		pcfclock
2346
2347# General Purpose I/O pins
2348device		dwgpio		# Synopsys DesignWare APB GPIO Controller
2349device  	gpio		# gpio interfaces and bus support
2350device  	gpiobacklight	# sysctl control of gpio-based backlight
2351device  	gpioiic		# i2c via gpio bitbang
2352device  	gpiokeys	# kbd(4) glue for gpio-based key input
2353device  	gpioled		# led(4) gpio glue
2354device  	gpiopower	# event handler for gpio-based powerdown
2355device  	gpiopps		# Pulse per second input from gpio pin
2356device  	gpioregulator	# extres/regulator glue for gpio pin
2357device  	gpiospi		# SPI via gpio bitbang
2358device  	gpioths		# 1-wire temp/humidity sensor on gpio pin
2359
2360# Pulse width modulation
2361device  	pwmbus		# pwm interface and bus support
2362device  	pwmc		# userland control access to pwm outputs
2363
2364#
2365# Etherswitch framework and drivers
2366#
2367# etherswitch	The etherswitch(4) framework
2368# miiproxy	Proxy device for miibus(4) functionality
2369#
2370# Switch hardware support:
2371# arswitch	Atheros switches
2372# ip17x 	IC+ 17x family switches
2373# rtl8366r	Realtek RTL8366 switches
2374# ukswitch	Multi-PHY switches
2375#
2376device		etherswitch
2377device		miiproxy
2378device		arswitch
2379device		ip17x
2380device		rtl8366rb
2381device		ukswitch
2382
2383# Kernel BOOTP support
2384
2385options 	BOOTP		# Use BOOTP to obtain IP address/hostname
2386				# Requires NFSCL and NFS_ROOT
2387options 	BOOTP_NFSROOT	# NFS mount root filesystem using BOOTP info
2388options 	BOOTP_NFSV3	# Use NFS v3 to NFS mount root
2389options 	BOOTP_COMPAT	# Workaround for broken bootp daemons.
2390options 	BOOTP_WIRED_TO=fxp0 # Use interface fxp0 for BOOTP
2391options 	BOOTP_BLOCKSIZE=8192 # Override NFS block size
2392
2393#
2394# Enable software watchdog routines, even if hardware watchdog is present.
2395# By default, software watchdog timer is enabled only if no hardware watchdog
2396# is present.
2397#
2398options 	SW_WATCHDOG
2399
2400#
2401# Add the software deadlock resolver thread.
2402#
2403options 	DEADLKRES
2404
2405#
2406# Disable swapping of stack pages.  This option removes all
2407# code which actually performs swapping, so it's not possible to turn
2408# it back on at run-time.
2409#
2410# This is sometimes usable for systems which don't have any swap space
2411# (see also sysctl "vm.disable_swapspace_pageouts")
2412#
2413#options 	NO_SWAPPING
2414
2415# Set the number of sf_bufs to allocate. sf_bufs are virtual buffers
2416# for sendfile(2) that are used to map file VM pages, and normally
2417# default to a quantity that is roughly 16*MAXUSERS+512. You would
2418# typically want about 4 of these for each simultaneous file send.
2419#
2420options 	NSFBUFS=1024
2421
2422#
2423# Enable extra debugging code for locks.  This stores the filename and
2424# line of whatever acquired the lock in the lock itself, and changes a
2425# number of function calls to pass around the relevant data.  This is
2426# not at all useful unless you are debugging lock code.  Note that
2427# modules should be recompiled as this option modifies KBI.
2428#
2429options 	DEBUG_LOCKS
2430
2431
2432#####################################################################
2433# USB support
2434# UHCI controller
2435device		uhci
2436# OHCI controller
2437device		ohci
2438# EHCI controller
2439device		ehci
2440# XHCI controller
2441device		xhci
2442# SL811 Controller
2443#device		slhci
2444# General USB code (mandatory for USB)
2445device		usb
2446#
2447# USB Double Bulk Pipe devices
2448device		udbp
2449# USB temperature meter
2450device		ugold
2451# USB LED
2452device		uled
2453# Human Interface Device (anything with buttons and dials)
2454device		uhid
2455# USB keyboard
2456device		ukbd
2457# USB printer
2458device		ulpt
2459# USB mass storage driver (Requires scbus and da)
2460device		umass
2461# USB mass storage driver for device-side mode
2462device		usfs
2463# USB support for Belkin F5U109 and Magic Control Technology serial adapters
2464device		umct
2465# USB modem support
2466device		umodem
2467# USB mouse
2468device		ums
2469# USB touchpad(s)
2470device		atp
2471device		wsp
2472# eGalax USB touch screen
2473device		uep
2474# Diamond Rio 500 MP3 player
2475device		urio
2476#
2477# USB serial support
2478device		ucom
2479# USB support for 3G modem cards by Option, Novatel, Huawei and Sierra
2480device		u3g
2481# USB support for Technologies ARK3116 based serial adapters
2482device		uark
2483# USB support for Belkin F5U103 and compatible serial adapters
2484device		ubsa
2485# USB support for serial adapters based on the FT8U100AX and FT8U232AM
2486device		uftdi
2487# USB support for some Windows CE based serial communication.
2488device		uipaq
2489# USB support for Prolific PL-2303 serial adapters
2490device		uplcom
2491# USB support for Silicon Laboratories CP2101/CP2102 based USB serial adapters
2492device		uslcom
2493# USB Visor and Palm devices
2494device		uvisor
2495# USB serial support for DDI pocket's PHS
2496device		uvscom
2497#
2498# USB ethernet support
2499device		uether
2500# ADMtek USB ethernet. Supports the LinkSys USB100TX,
2501# the Billionton USB100, the Melco LU-ATX, the D-Link DSB-650TX
2502# and the SMC 2202USB. Also works with the ADMtek AN986 Pegasus
2503# eval board.
2504device		aue
2505
2506# ASIX Electronics AX88172 USB 2.0 ethernet driver. Used in the
2507# LinkSys USB200M and various other adapters.
2508device		axe
2509# ASIX Electronics AX88178A/AX88179 USB 2.0/3.0 gigabit ethernet driver.
2510device		axge
2511
2512#
2513# Devices which communicate using Ethernet over USB, particularly
2514# Communication Device Class (CDC) Ethernet specification. Supports
2515# Sharp Zaurus PDAs, some DOCSIS cable modems and so on.
2516device		cdce
2517#
2518# CATC USB-EL1201A USB ethernet. Supports the CATC Netmate
2519# and Netmate II, and the Belkin F5U111.
2520device		cue
2521#
2522# Kawasaki LSI ethernet. Supports the LinkSys USB10T,
2523# Entrega USB-NET-E45, Peracom Ethernet Adapter, the
2524# 3Com 3c19250, the ADS Technologies USB-10BT, the ATen UC10T,
2525# the Netgear EA101, the D-Link DSB-650, the SMC 2102USB
2526# and 2104USB, and the Corega USB-T.
2527device		kue
2528#
2529# RealTek RTL8150 USB to fast ethernet. Supports the Melco LUA-KTX
2530# and the GREEN HOUSE GH-USB100B.
2531device		rue
2532#
2533# Davicom DM9601E USB to fast ethernet. Supports the Corega FEther USB-TXC.
2534device		udav
2535#
2536# RealTek RTL8152/RTL8153 USB Ethernet driver
2537device		ure
2538#
2539# Moschip MCS7730/MCS7840 USB to fast ethernet. Supports the Sitecom LN030.
2540device		mos
2541#
2542# HSxPA devices from Option N.V
2543device		uhso
2544
2545# Realtek RTL8188SU/RTL8191SU/RTL8192SU wireless driver
2546device		rsu
2547#
2548# Ralink Technology RT2501USB/RT2601USB wireless driver
2549device		rum
2550# Ralink Technology RT2700U/RT2800U/RT3000U wireless driver
2551device		run
2552#
2553# Atheros AR5523 wireless driver
2554device		uath
2555#
2556# Conexant/Intersil PrismGT wireless driver
2557device		upgt
2558#
2559# Ralink Technology RT2500USB wireless driver
2560device		ural
2561#
2562# RNDIS USB ethernet driver
2563device		urndis
2564# Realtek RTL8187B/L wireless driver
2565device		urtw
2566#
2567# ZyDas ZD1211/ZD1211B wireless driver
2568device		zyd
2569#
2570# Sierra USB wireless driver
2571device		usie
2572
2573#
2574# debugging options for the USB subsystem
2575#
2576options 	USB_DEBUG
2577options 	U3G_DEBUG
2578
2579# options for ukbd:
2580options 	UKBD_DFLT_KEYMAP	# specify the built-in keymap
2581makeoptions	UKBD_DFLT_KEYMAP=jp.106
2582
2583# options for uplcom:
2584options 	UPLCOM_INTR_INTERVAL=100	# interrupt pipe interval
2585						# in milliseconds
2586
2587# options for uvscom:
2588options 	UVSCOM_DEFAULT_OPKTSIZE=8	# default output packet size
2589options 	UVSCOM_INTR_INTERVAL=100	# interrupt pipe interval
2590						# in milliseconds
2591
2592#####################################################################
2593# FireWire support
2594
2595device		firewire	# FireWire bus code
2596device		sbp		# SCSI over Firewire (Requires scbus and da)
2597device		sbp_targ	# SBP-2 Target mode  (Requires scbus and targ)
2598device		fwe		# Ethernet over FireWire (non-standard!)
2599device		fwip		# IP over FireWire (RFC2734 and RFC3146)
2600
2601#####################################################################
2602# dcons support (Dumb Console Device)
2603
2604device		dcons			# dumb console driver
2605device		dcons_crom		# FireWire attachment
2606options 	DCONS_BUF_SIZE=16384	# buffer size
2607options 	DCONS_POLL_HZ=100	# polling rate
2608options 	DCONS_FORCE_CONSOLE=0	# force to be the primary console
2609options 	DCONS_FORCE_GDB=1	# force to be the gdb device
2610
2611#####################################################################
2612# crypto subsystem
2613#
2614# This is a port of the OpenBSD crypto framework.  Include this when
2615# configuring IPSEC and when you have a h/w crypto device to accelerate
2616# user applications that link to OpenSSL.
2617#
2618# Drivers are ports from OpenBSD with some simple enhancements that have
2619# been fed back to OpenBSD.
2620
2621device		crypto		# core crypto support
2622
2623# Only install the cryptodev device if you are running tests, or know
2624# specifically why you need it.  In most cases, it is not needed and
2625# will make things slower.
2626device		cryptodev	# /dev/crypto for access to h/w
2627
2628device		rndtest		# FIPS 140-2 entropy tester
2629
2630device		ccr		# Chelsio T6
2631
2632device		hifn		# Hifn 7951, 7781, etc.
2633options 	HIFN_DEBUG	# enable debugging support: hw.hifn.debug
2634options 	HIFN_RNDTEST	# enable rndtest support
2635
2636#####################################################################
2637
2638
2639#
2640# Embedded system options:
2641#
2642# An embedded system might want to run something other than init.
2643options 	INIT_PATH=/sbin/init:/rescue/init
2644
2645# Debug options
2646options 	BUS_DEBUG	# enable newbus debugging
2647options 	DEBUG_VFS_LOCKS	# enable VFS lock debugging
2648options 	SOCKBUF_DEBUG	# enable sockbuf last record/mb tail checking
2649options 	IFMEDIA_DEBUG	# enable debugging in net/if_media.c
2650
2651#
2652# Verbose SYSINIT
2653#
2654# Make the SYSINIT process performed by mi_startup() verbose.  This is very
2655# useful when porting to a new architecture.  If DDB is also enabled, this
2656# will print function names instead of addresses.  If defined with a value
2657# of zero, the verbose code is compiled-in but disabled by default, and can
2658# be enabled with the debug.verbose_sysinit=1 tunable.
2659options 	VERBOSE_SYSINIT
2660
2661#####################################################################
2662# SYSV IPC KERNEL PARAMETERS
2663#
2664# Maximum number of System V semaphores that can be used on the system at
2665# one time.
2666options 	SEMMNI=11
2667
2668# Total number of semaphores system wide
2669options 	SEMMNS=61
2670
2671# Total number of undo structures in system
2672options 	SEMMNU=31
2673
2674# Maximum number of System V semaphores that can be used by a single process
2675# at one time.
2676options 	SEMMSL=61
2677
2678# Maximum number of operations that can be outstanding on a single System V
2679# semaphore at one time.
2680options 	SEMOPM=101
2681
2682# Maximum number of undo operations that can be outstanding on a single
2683# System V semaphore at one time.
2684options 	SEMUME=11
2685
2686# Maximum number of shared memory pages system wide.
2687options 	SHMALL=1025
2688
2689# Maximum size, in bytes, of a single System V shared memory region.
2690options 	SHMMAX=(SHMMAXPGS*PAGE_SIZE+1)
2691options 	SHMMAXPGS=1025
2692
2693# Minimum size, in bytes, of a single System V shared memory region.
2694options 	SHMMIN=2
2695
2696# Maximum number of shared memory regions that can be used on the system
2697# at one time.
2698options 	SHMMNI=33
2699
2700# Maximum number of System V shared memory regions that can be attached to
2701# a single process at one time.
2702options 	SHMSEG=9
2703
2704# Set the amount of time (in seconds) the system will wait before
2705# rebooting automatically when a kernel panic occurs.  If set to (-1),
2706# the system will wait indefinitely until a key is pressed on the
2707# console.
2708options 	PANIC_REBOOT_WAIT_TIME=16
2709
2710# Attempt to bypass the buffer cache and put data directly into the
2711# userland buffer for read operation when O_DIRECT flag is set on the
2712# file.  Both offset and length of the read operation must be
2713# multiples of the physical media sector size.
2714#
2715options 	DIRECTIO
2716
2717# Specify a lower limit for the number of swap I/O buffers.  They are
2718# (among other things) used when bypassing the buffer cache due to
2719# DIRECTIO kernel option enabled and O_DIRECT flag set on file.
2720#
2721options 	NSWBUF_MIN=120
2722
2723#####################################################################
2724
2725# More undocumented options for linting.
2726# Note that documenting these is not considered an affront.
2727
2728options 	CAM_DEBUG_DELAY
2729
2730# VFS cluster debugging.
2731options 	CLUSTERDEBUG
2732
2733options 	DEBUG
2734
2735# Kernel filelock debugging.
2736options 	LOCKF_DEBUG
2737
2738# System V compatible message queues
2739# Please note that the values provided here are used to test kernel
2740# building.  The defaults in the sources provide almost the same numbers.
2741# MSGSSZ must be a power of 2 between 8 and 1024.
2742options 	MSGMNB=2049	# Max number of chars in queue
2743options 	MSGMNI=41	# Max number of message queue identifiers
2744options 	MSGSEG=2049	# Max number of message segments
2745options 	MSGSSZ=16	# Size of a message segment
2746options 	MSGTQL=41	# Max number of messages in system
2747
2748options 	NBUF=512	# Number of buffer headers
2749
2750options 	SC_DEBUG_LEVEL=5	# Syscons debug level
2751options 	SC_RENDER_DEBUG	# syscons rendering debugging
2752
2753options 	VFS_BIO_DEBUG	# VFS buffer I/O debugging
2754
2755options 	KSTACK_MAX_PAGES=32 # Maximum pages to give the kernel stack
2756options 	KSTACK_USAGE_PROF
2757
2758# Adaptec Array Controller driver options
2759options 	AAC_DEBUG	# Debugging levels:
2760				# 0 - quiet, only emit warnings
2761				# 1 - noisy, emit major function
2762				#     points and things done
2763				# 2 - extremely noisy, emit trace
2764				#     items in loops, etc.
2765
2766# Resource Accounting
2767options 	RACCT
2768
2769# Resource Limits
2770options 	RCTL
2771
2772# Yet more undocumented options for linting.
2773options 	MAXFILES=999
2774
2775# Random number generator
2776# Alternative algorithm.
2777#options 	RANDOM_FENESTRASX
2778# Allow the CSPRNG algorithm to be loaded as a module.
2779#options 	RANDOM_LOADABLE
2780# Select this to allow high-rate but potentially expensive
2781# harvesting of Slab-Allocator entropy. In very high-rate
2782# situations the value of doing this is dubious at best.
2783options 	RANDOM_ENABLE_UMA	# slab allocator
2784
2785# Select this to allow high-rate but potentially expensive
2786# harvesting of of the m_next pointer in the mbuf. Note that
2787# the m_next pointer is NULL except when receiving > 4K
2788# jumbo frames or sustained bursts by way of LRO. Thus in
2789# the common case it is stirring zero in to the entropy
2790# pool. In cases where it is not NULL it is pointing to one
2791# of a small (in the thousands to 10s of thousands) number
2792# of 256 byte aligned mbufs. Hence it is, even in the best
2793# case, a poor source of entropy. And in the absence of actual
2794# runtime analysis of entropy collection may mislead the user in
2795# to believe that substantially more entropy is being collected
2796# than in fact is - leading to a different class of security
2797# risk. In high packet rate situations ethernet entropy
2798# collection is also very expensive, possibly leading to as
2799# much as a 50% drop in packets received.
2800# This option is present to maintain backwards compatibility
2801# if desired, however it cannot be recommended for use in any
2802# environment.
2803options 	RANDOM_ENABLE_ETHER	# ether_input
2804
2805# Module to enable execution of application via emulators like QEMU
2806options         IMAGACT_BINMISC
2807
2808# zlib I/O stream support
2809# This enables support for compressed core dumps.
2810options 	GZIO
2811
2812# zstd support
2813# This enables support for Zstd compressed core dumps, GEOM_UZIP images,
2814# and is required by zfs if statically linked.
2815options 	ZSTDIO
2816
2817# BHND(4) drivers
2818options		BHND_LOGLEVEL	# Logging threshold level
2819
2820# evdev interface
2821device		evdev		# input event device support
2822options 	EVDEV_SUPPORT	# evdev support in legacy drivers
2823options 	EVDEV_DEBUG	# enable event debug msgs
2824device		uinput		# install /dev/uinput cdev
2825options 	UINPUT_DEBUG	# enable uinput debug msgs
2826
2827# Encrypted kernel crash dumps.
2828options 	EKCD
2829
2830# Serial Peripheral Interface (SPI) support.
2831device		spibus		# Bus support.
2832device		at45d		# DataFlash driver
2833device		cqspi		#
2834device		mx25l		# SPIFlash driver
2835device		n25q		#
2836device		spigen		# Generic access to SPI devices from userland.
2837# Enable legacy /dev/spigenN name aliases for /dev/spigenX.Y devices.
2838options 	SPIGEN_LEGACY_CDEVNAME # legacy device names for spigen
2839
2840# Compression supports.
2841device		zlib		# gzip/zlib compression/decompression library
2842device		xz		# xz_embedded LZMA de-compression library
2843
2844# Kernel support for stats(3).
2845options 	STATS
2846