xref: /freebsd/share/man/man5/src.conf.5 (revision 4d3fc8b0)
1.\" DO NOT EDIT-- this file is @generated by tools/build/options/makeman.
2.Dd March 15, 2023
3.Dt SRC.CONF 5
4.Os
5.Sh NAME
6.Nm src.conf
7.Nd "source build options"
8.Sh DESCRIPTION
9The
10.Nm
11file contains variables that control what components will be generated during
12the build process of the
13.Fx
14source tree; see
15.Xr build 7 .
16.Pp
17The
18.Nm
19file uses the standard makefile syntax.
20However,
21.Nm
22should not specify any dependencies to
23.Xr make 1 .
24Instead,
25.Nm
26is to set
27.Xr make 1
28variables that control the aspects of how the system builds.
29.Pp
30The default location of
31.Nm
32is
33.Pa /etc/src.conf ,
34though an alternative location can be specified in the
35.Xr make 1
36variable
37.Va SRCCONF .
38Overriding the location of
39.Nm
40may be necessary if the system-wide settings are not suitable
41for a particular build.
42For instance, setting
43.Va SRCCONF
44to
45.Pa /dev/null
46effectively resets all build controls to their defaults.
47.Pp
48The only purpose of
49.Nm
50is to control the compilation of the
51.Fx
52source code, which is usually located in
53.Pa /usr/src .
54As a rule, the system administrator creates
55.Nm
56when the values of certain control variables need to be changed
57from their defaults.
58.Pp
59In addition, control variables can be specified
60for a particular build via the
61.Fl D
62option of
63.Xr make 1
64or in its environment; see
65.Xr environ 7 .
66.Pp
67The environment of
68.Xr make 1
69for the build can be controlled via the
70.Va SRC_ENV_CONF
71variable, which defaults to
72.Pa /etc/src-env.conf .
73Some examples that may only be set in this file are
74.Va WITH_DIRDEPS_BUILD ,
75and
76.Va WITH_META_MODE ,
77and
78.Va MAKEOBJDIRPREFIX
79as they are environment-only variables.
80.Pp
81The values of variables are ignored regardless of their setting;
82even if they would be set to
83.Dq Li FALSE
84or
85.Dq Li NO .
86The presence of an option causes
87it to be honored by
88.Xr make 1 .
89.Pp
90This list provides a name and short description for variables
91that can be used for source builds.
92.Bl -tag -width indent
93.It Va WITHOUT_ACCT
94Do not build process accounting tools such as
95.Xr accton 8
96and
97.Xr sa 8 .
98.It Va WITHOUT_ACPI
99Do not build
100.Xr acpiconf 8 ,
101.Xr acpidump 8
102and related programs.
103.It Va WITHOUT_APM
104Do not build
105.Xr apm 8 ,
106.Xr apmd 8
107and related programs.
108.It Va WITH_ASAN
109Build the base system with Address Sanitizer (ASan) to detect
110memory corruption bugs such as buffer overflows or use-after-free.
111Requires that Clang be used as the base system compiler
112and that the runtime support library is available.
113When set, it enforces these options:
114.Pp
115.Bl -item -compact
116.It
117.Va WITH_LLVM_BINUTILS
118.It
119.Va WITH_LLVM_CXXFILT
120.El
121.It Va WITHOUT_ASSERT_DEBUG
122Compile programs and libraries without the
123.Xr assert 3
124checks.
125.It Va WITHOUT_AT
126Do not build
127.Xr at 1
128and related utilities.
129.It Va WITHOUT_AUDIT
130Do not build audit support into system programs.
131.It Va WITHOUT_AUTHPF
132Do not build
133.Xr authpf 8 .
134.It Va WITHOUT_AUTOFS
135Do not build
136.Xr autofs 5
137related programs, libraries, and kernel modules.
138.It Va WITHOUT_AUTO_OBJ
139Disable automatic creation of objdirs.
140This is enabled by default if the wanted OBJDIR is writable by the current user.
141.Pp
142This must be set in the environment, make command line, or
143.Pa /etc/src-env.conf ,
144not
145.Pa /etc/src.conf .
146.It Va WITH_BEARSSL
147Build the BearSSL library.
148.Pp
149BearSSL is a tiny SSL library suitable for embedded environments.
150For details see
151.Lk https://www.BearSSL.org/
152.Pp
153This library is currently only used to perform
154signature verification and related operations
155for Verified Exec and
156.Xr loader 8 .
157When set, these options are also in effect:
158.Pp
159.Bl -inset -compact
160.It Va WITH_LOADER_EFI_SECUREBOOT
161(unless
162.Va WITHOUT_LOADER_EFI_SECUREBOOT
163is set explicitly)
164.It Va WITH_LOADER_VERIEXEC
165(unless
166.Va WITHOUT_LOADER_VERIEXEC
167is set explicitly)
168.It Va WITH_LOADER_VERIEXEC_VECTX
169(unless
170.Va WITHOUT_LOADER_VERIEXEC_VECTX
171is set explicitly)
172.It Va WITH_VERIEXEC
173(unless
174.Va WITHOUT_VERIEXEC
175is set explicitly)
176.El
177.It Va WITHOUT_BHYVE
178Do not build or install
179.Xr bhyve 8 ,
180associated utilities, and examples.
181.Pp
182This option only affects amd64/amd64.
183.It Va WITH_BHYVE_SNAPSHOT
184Include support for save and restore (snapshots) in
185.Xr bhyve 8
186and
187.Xr bhyvectl 8 .
188.Pp
189This option only affects amd64/amd64.
190.It Va WITH_BIND_NOW
191Build all binaries with the
192.Dv DF_BIND_NOW
193flag set to indicate that the run-time loader should perform all relocation
194processing at process startup rather than on demand.
195The combination of the
196.Va BIND_NOW
197and
198.Va RELRO
199options provide "full" Relocation Read-Only (RELRO) support.
200With full RELRO the entire GOT is made read-only after performing relocation at
201startup, avoiding GOT overwrite attacks.
202.It Va WITHOUT_BLACKLIST
203Set this if you do not want to build
204.Xr blacklistd 8
205and
206.Xr blacklistctl 8 .
207When set, these options are also in effect:
208.Pp
209.Bl -inset -compact
210.It Va WITHOUT_BLACKLIST_SUPPORT
211(unless
212.Va WITH_BLACKLIST_SUPPORT
213is set explicitly)
214.El
215.It Va WITHOUT_BLACKLIST_SUPPORT
216Build some programs without
217.Xr libblacklist 3
218support, like
219.Xr fingerd 8 ,
220.Xr ftpd 8 ,
221and
222.Xr sshd 8 .
223.It Va WITHOUT_BLUETOOTH
224Do not build Bluetooth related kernel modules, programs and libraries.
225.It Va WITHOUT_BOOT
226Do not build the boot blocks and loader.
227.It Va WITHOUT_BOOTPARAMD
228Do not build or install
229.Xr bootparamd 8 .
230.It Va WITHOUT_BOOTPD
231Do not build or install
232.Xr bootpd 8 .
233.It Va WITHOUT_BSDINSTALL
234Do not build
235.Xr bsdinstall 8 ,
236.Xr sade 8 ,
237and related programs.
238.It Va WITHOUT_BSD_CPIO
239Do not build the BSD licensed version of cpio based on
240.Xr libarchive 3 .
241.It Va WITHOUT_BSNMP
242Do not build or install
243.Xr bsnmpd 1
244and related libraries and data files.
245.It Va WITHOUT_BZIP2
246Do not build contributed bzip2 software as a part of the base system.
247.Bf -symbolic
248The option has no effect yet.
249.Ef
250When set, these options are also in effect:
251.Pp
252.Bl -inset -compact
253.It Va WITHOUT_BZIP2_SUPPORT
254(unless
255.Va WITH_BZIP2_SUPPORT
256is set explicitly)
257.El
258.It Va WITHOUT_BZIP2_SUPPORT
259Build some programs without optional bzip2 support.
260.It Va WITHOUT_CALENDAR
261Do not build
262.Xr calendar 1 .
263.It Va WITHOUT_CAPSICUM
264Do not build Capsicum support into system programs.
265When set, it enforces these options:
266.Pp
267.Bl -item -compact
268.It
269.Va WITHOUT_CASPER
270.El
271.It Va WITHOUT_CAROOT
272Do not add the trusted certificates from the Mozilla NSS bundle to
273base.
274.It Va WITHOUT_CASPER
275Do not build Casper program and related libraries.
276.It Va WITH_CCACHE_BUILD
277Use
278.Xr ccache 1
279for the build.
280No configuration is required except to install the
281.Sy devel/ccache
282package.
283When using with
284.Xr distcc 1 ,
285set
286.Sy CCACHE_PREFIX=/usr/local/bin/distcc .
287The default cache directory of
288.Pa $HOME/.ccache
289will be used, which can be overridden by setting
290.Sy CCACHE_DIR .
291The
292.Sy CCACHE_COMPILERCHECK
293option defaults to
294.Sy content
295when using the in-tree bootstrap compiler,
296and
297.Sy mtime
298when using an external compiler.
299The
300.Sy CCACHE_CPP2
301option is used for Clang but not GCC.
302.Pp
303Sharing a cache between multiple work directories requires using a layout
304similar to
305.Pa /some/prefix/src
306.Pa /some/prefix/obj
307and an environment such as:
308.Bd -literal -offset indent
309CCACHE_BASEDIR='${SRCTOP:H}' MAKEOBJDIRPREFIX='${SRCTOP:H}/obj'
310.Ed
311.Pp
312See
313.Xr ccache 1
314for more configuration options.
315.It Va WITHOUT_CCD
316Do not build
317.Xr geom_ccd 4
318and related utilities.
319.It Va WITHOUT_CDDL
320Do not build code licensed under Sun's CDDL.
321When set, it enforces these options:
322.Pp
323.Bl -item -compact
324.It
325.Va WITHOUT_CTF
326.It
327.Va WITHOUT_DTRACE
328.It
329.Va WITHOUT_LOADER_ZFS
330.It
331.Va WITHOUT_ZFS
332.El
333.It Va WITHOUT_CLANG
334Do not build the Clang C/C++ compiler during the regular phase of the build.
335When set, it enforces these options:
336.Pp
337.Bl -item -compact
338.It
339.Va WITHOUT_CLANG_EXTRAS
340.It
341.Va WITHOUT_CLANG_FORMAT
342.It
343.Va WITHOUT_CLANG_FULL
344.It
345.Va WITHOUT_LLVM_COV
346.El
347.Pp
348When set, these options are also in effect:
349.Pp
350.Bl -inset -compact
351.It Va WITHOUT_LLVM_TARGET_AARCH64
352(unless
353.Va WITH_LLVM_TARGET_AARCH64
354is set explicitly)
355.It Va WITHOUT_LLVM_TARGET_ALL
356(unless
357.Va WITH_LLVM_TARGET_ALL
358is set explicitly)
359.It Va WITHOUT_LLVM_TARGET_ARM
360(unless
361.Va WITH_LLVM_TARGET_ARM
362is set explicitly)
363.It Va WITHOUT_LLVM_TARGET_POWERPC
364(unless
365.Va WITH_LLVM_TARGET_POWERPC
366is set explicitly)
367.It Va WITHOUT_LLVM_TARGET_RISCV
368(unless
369.Va WITH_LLVM_TARGET_RISCV
370is set explicitly)
371.El
372.It Va WITHOUT_CLANG_BOOTSTRAP
373Do not build the Clang C/C++ compiler during the bootstrap phase of
374the build.
375To be able to build the system, either gcc or clang bootstrap must be
376enabled unless an alternate compiler is provided via XCC.
377.It Va WITH_CLANG_EXTRAS
378Build additional clang and llvm tools, such as bugpoint and
379clang-format.
380.It Va WITH_CLANG_FORMAT
381Build clang-format.
382.It Va WITHOUT_CLANG_FULL
383Avoid building the ARCMigrate, Rewriter and StaticAnalyzer components of
384the Clang C/C++ compiler.
385.It Va WITHOUT_CLEAN
386Do not clean before building world and/or kernel.
387.It Va WITHOUT_CPP
388Do not build
389.Xr cpp 1 .
390.It Va WITHOUT_CROSS_COMPILER
391Do not build any cross compiler in the cross-tools stage of buildworld.
392When compiling a different version of
393.Fx
394than what is installed on the system, provide an alternate
395compiler with XCC to ensure success.
396When compiling with an identical version of
397.Fx
398to the host, this option may be safely used.
399This option may also be safe when the host version of
400.Fx
401is close to the sources being built, but all bets are off if there have
402been any changes to the toolchain between the versions.
403When set, it enforces these options:
404.Pp
405.Bl -item -compact
406.It
407.Va WITHOUT_CLANG_BOOTSTRAP
408.It
409.Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
410.It
411.Va WITHOUT_LLD_BOOTSTRAP
412.El
413.It Va WITHOUT_CRYPT
414Do not build any crypto code.
415When set, it enforces these options:
416.Pp
417.Bl -item -compact
418.It
419.Va WITHOUT_DMAGENT
420.It
421.Va WITHOUT_KERBEROS
422.It
423.Va WITHOUT_KERBEROS_SUPPORT
424.It
425.Va WITHOUT_LDNS
426.It
427.Va WITHOUT_LDNS_UTILS
428.It
429.Va WITHOUT_LOADER_ZFS
430.It
431.Va WITHOUT_OPENSSH
432.It
433.Va WITHOUT_OPENSSL
434.It
435.Va WITHOUT_OPENSSL_KTLS
436.It
437.Va WITHOUT_PKGBOOTSTRAP
438.It
439.Va WITHOUT_UNBOUND
440.It
441.Va WITHOUT_ZFS
442.El
443.Pp
444When set, these options are also in effect:
445.Pp
446.Bl -inset -compact
447.It Va WITHOUT_GSSAPI
448(unless
449.Va WITH_GSSAPI
450is set explicitly)
451.El
452.It Va WITH_CTF
453Compile with CTF (Compact C Type Format) data.
454CTF data encapsulates a reduced form of debugging information
455similar to DWARF and the venerable stabs and is required for DTrace.
456.It Va WITHOUT_CUSE
457Do not build CUSE-related programs and libraries.
458.It Va WITHOUT_CXGBETOOL
459Do not build
460.Xr cxgbetool 8
461.Pp
462This is a default setting on
463arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
464.It Va WITH_CXGBETOOL
465Build
466.Xr cxgbetool 8
467.Pp
468This is a default setting on
469amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
470.It Va WITHOUT_DEBUG_FILES
471Avoid building or installing standalone debug files for each
472executable binary and shared library.
473.It Va WITH_DETECT_TZ_CHANGES
474Make the time handling code detect changes to the timezone files.
475.It Va WITHOUT_DIALOG
476Do not build
477.Xr dialog 1 ,
478.Xr dialog 3 ,
479.Xr dpv 1 ,
480and
481.Xr dpv 3 .
482When set, it enforces these options:
483.Pp
484.Bl -item -compact
485.It
486.Va WITHOUT_BSDINSTALL
487.El
488.It Va WITHOUT_DICT
489Do not build the Webster dictionary files.
490.It Va WITH_DIRDEPS_BUILD
491This is an experimental build system.
492For details see
493https://www.crufty.net/sjg/docs/freebsd-meta-mode.htm.
494Build commands can be seen from the top-level with:
495.Dl make show-valid-targets
496The build is driven by dirdeps.mk using
497.Va DIRDEPS
498stored in
499Makefile.depend files found in each directory.
500.Pp
501The build can be started from anywhere, and behaves the same.
502The initial instance of
503.Xr make 1
504recursively reads
505.Va DIRDEPS
506from
507.Pa Makefile.depend ,
508computing a graph of tree dependencies from the current origin.
509Setting
510.Va NO_DIRDEPS
511skips checking dirdep dependencies and will only build in the current
512and child directories.
513.Va NO_DIRDEPS_BELOW
514skips building any dirdeps and only build the current directory.
515.Pp
516This also utilizes the
517.Va WITH_META_MODE
518logic for incremental builds.
519.Pp
520The build hides commands executed unless
521.Va NO_SILENT
522is defined.
523.Pp
524Note that there is currently no mass install feature for this.
525.Pp
526When set, it enforces these options:
527.Pp
528.Bl -item -compact
529.It
530.Va WITH_INSTALL_AS_USER
531.El
532.Pp
533When set, these options are also in effect:
534.Pp
535.Bl -inset -compact
536.It Va WITH_META_MODE
537(unless
538.Va WITHOUT_META_MODE
539is set explicitly)
540.It Va WITH_STAGING
541(unless
542.Va WITHOUT_STAGING
543is set explicitly)
544.It Va WITH_STAGING_MAN
545(unless
546.Va WITHOUT_STAGING_MAN
547is set explicitly)
548.It Va WITH_STAGING_PROG
549(unless
550.Va WITHOUT_STAGING_PROG
551is set explicitly)
552.It Va WITH_SYSROOT
553(unless
554.Va WITHOUT_SYSROOT
555is set explicitly)
556.El
557.Pp
558This must be set in the environment, make command line, or
559.Pa /etc/src-env.conf ,
560not
561.Pa /etc/src.conf .
562.It Va WITH_DIRDEPS_CACHE
563Cache result of dirdeps.mk which can save significant time
564for subsequent builds.
565Depends on
566.Va WITH_DIRDEPS_BUILD .
567.Pp
568This must be set in the environment, make command line, or
569.Pa /etc/src-env.conf ,
570not
571.Pa /etc/src.conf .
572.It Va WITH_DISK_IMAGE_TOOLS_BOOTSTRAP
573Build
574.Xr etdump 1 ,
575.Xr makefs 8
576and
577.Xr mkimg 1
578as bootstrap tools.
579.It Va WITHOUT_DMAGENT
580Do not build dma Mail Transport Agent.
581.It Va WITHOUT_DOCCOMPRESS
582Do not install compressed system documentation.
583Only the uncompressed version will be installed.
584.It Va WITHOUT_DTRACE
585Do not build DTrace framework kernel modules, libraries, and user commands.
586When set, it enforces these options:
587.Pp
588.Bl -item -compact
589.It
590.Va WITHOUT_CTF
591.El
592.It Va WITH_DTRACE_TESTS
593Build and install the DTrace test suite in
594.Pa /usr/tests/cddl/usr.sbin/dtrace .
595This test suite is considered experimental on architectures other than
596amd64/amd64 and running it may cause system instability.
597.It Va WITHOUT_DYNAMICROOT
598Set this if you do not want to link
599.Pa /bin
600and
601.Pa /sbin
602dynamically.
603.It Va WITHOUT_EE
604Do not build and install
605.Xr edit 1 ,
606.Xr ee 1 ,
607and related programs.
608.It Va WITHOUT_EFI
609Set not to build
610.Xr efivar 3
611and
612.Xr efivar 8 .
613.Pp
614This is a default setting on
615powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
616.It Va WITH_EFI
617Build
618.Xr efivar 3
619and
620.Xr efivar 8 .
621.Pp
622This is a default setting on
623amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64 and i386/i386.
624.It Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
625Do not build ELF Tool Chain tools
626(addr2line, nm, size, strings and strip)
627as part of the bootstrap process.
628.Bf -symbolic
629An alternate bootstrap tool chain must be provided.
630.Ef
631.It Va WITHOUT_EXAMPLES
632Avoid installing examples to
633.Pa /usr/share/examples/ .
634.It Va WITH_EXPERIMENTAL
635Include experimental features in the build.
636.It Va WITH_EXTRA_TCP_STACKS
637Build extra TCP stack modules.
638.It Va WITHOUT_FDT
639Do not build Flattened Device Tree support as part of the base system.
640This includes the device tree compiler (dtc) and libfdt support library.
641.Pp
642This is a default setting on
643amd64/amd64 and i386/i386.
644.It Va WITH_FDT
645Build Flattened Device Tree support as part of the base system.
646This includes the device tree compiler (dtc) and libfdt support library.
647.Pp
648This is a default setting on
649arm/armv6, arm/armv7, arm64/aarch64, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
650.It Va WITHOUT_FILE
651Do not build
652.Xr file 1
653and related programs.
654.It Va WITHOUT_FINGER
655Do not build or install
656.Xr finger 1
657and
658.Xr fingerd 8 .
659.It Va WITHOUT_FLOPPY
660Do not build or install programs
661for operating floppy disk driver.
662.It Va WITHOUT_FORMAT_EXTENSIONS
663Do not enable
664.Fl fformat-extensions
665when compiling the kernel.
666Also disables all format checking.
667.It Va WITHOUT_FORTH
668Build bootloaders without Forth support.
669.It Va WITHOUT_FP_LIBC
670Build
671.Nm libc
672without floating-point support.
673.It Va WITHOUT_FREEBSD_UPDATE
674Do not build
675.Xr freebsd-update 8 .
676.It Va WITHOUT_FTP
677Do not build or install
678.Xr ftp 1
679and
680.Xr ftpd 8 .
681.It Va WITHOUT_GAMES
682Do not build games.
683.It Va WITHOUT_GH_BC
684Install the traditional FreeBSD
685.Xr bc 1
686and
687.Xr dc 1
688programs instead of the enhanced versions.
689.It Va WITHOUT_GNU_DIFF
690Do not build GNU
691.Xr diff3 1 .
692.It Va WITHOUT_GOOGLETEST
693Neither build nor install
694.Lb libgmock ,
695.Lb libgtest ,
696and dependent tests.
697.It Va WITHOUT_GPIO
698Do not build
699.Xr gpioctl 8
700as part of the base system.
701.It Va WITHOUT_GSSAPI
702Do not build libgssapi.
703.It Va WITHOUT_HAST
704Do not build
705.Xr hastd 8
706and related utilities.
707.It Va WITH_HESIOD
708Build Hesiod support.
709.It Va WITHOUT_HTML
710Do not build HTML docs.
711.It Va WITHOUT_HYPERV
712Do not build or install HyperV utilities.
713.Pp
714This is a default setting on
715arm/armv6, arm/armv7, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
716.It Va WITH_HYPERV
717Build or install HyperV utilities.
718.Pp
719This is a default setting on
720amd64/amd64, arm64/aarch64 and i386/i386.
721.It Va WITHOUT_ICONV
722Do not build iconv as part of libc.
723.It Va WITHOUT_INCLUDES
724Do not install header files.
725This option used to be spelled
726.Va NO_INCS .
727.Bf -symbolic
728The option does not work for build targets.
729.Ef
730.It Va WITHOUT_INET
731Do not build programs and libraries related to IPv4 networking.
732When set, it enforces these options:
733.Pp
734.Bl -item -compact
735.It
736.Va WITHOUT_INET_SUPPORT
737.El
738.It Va WITHOUT_INET6
739Do not build
740programs and libraries related to IPv6 networking.
741When set, it enforces these options:
742.Pp
743.Bl -item -compact
744.It
745.Va WITHOUT_INET6_SUPPORT
746.El
747.It Va WITHOUT_INET6_SUPPORT
748Build libraries, programs, and kernel modules without IPv6 support.
749.It Va WITHOUT_INETD
750Do not build
751.Xr inetd 8 .
752.It Va WITHOUT_INET_SUPPORT
753Build libraries, programs, and kernel modules without IPv4 support.
754.It Va WITH_INIT_ALL_PATTERN
755Build the base system or kernel with stack variables initialized to
756.Pq compiler defined
757debugging patterns on function entry.
758This option requires the clang compiler.
759.It Va WITH_INIT_ALL_ZERO
760Build the base system or kernel with stack variables initialized
761to zero on function entry.
762This option requires that the clang compiler be used.
763.It Va WITHOUT_INSTALLLIB
764Set this to not install optional libraries.
765For example, when creating a
766.Xr nanobsd 8
767image.
768.Bf -symbolic
769The option does not work for build targets.
770.Ef
771.It Va WITH_INSTALL_AS_USER
772Make install targets succeed for non-root users by installing
773files with owner and group attributes set to that of the user running
774the
775.Xr make 1
776command.
777The user still must set the
778.Va DESTDIR
779variable to point to a directory where the user has write permissions.
780.It Va WITHOUT_IPFILTER
781Do not build IP Filter package.
782.It Va WITHOUT_IPFW
783Do not build IPFW tools.
784.It Va WITHOUT_IPSEC_SUPPORT
785Do not build the kernel with
786.Xr ipsec 4
787support.
788This option is needed for
789.Xr ipsec 4
790and
791.Xr tcpmd5 4 .
792.It Va WITHOUT_ISCSI
793Do not build
794.Xr iscsid 8
795and related utilities.
796.It Va WITHOUT_JAIL
797Do not build tools for the support of jails; e.g.,
798.Xr jail 8 .
799.It Va WITHOUT_KDUMP
800Do not build
801.Xr kdump 1
802and
803.Xr truss 1 .
804.It Va WITHOUT_KERBEROS
805Set this to not build Kerberos 5 (KTH Heimdal).
806When set, these options are also in effect:
807.Pp
808.Bl -inset -compact
809.It Va WITHOUT_GSSAPI
810(unless
811.Va WITH_GSSAPI
812is set explicitly)
813.It Va WITHOUT_KERBEROS_SUPPORT
814(unless
815.Va WITH_KERBEROS_SUPPORT
816is set explicitly)
817.El
818.It Va WITHOUT_KERBEROS_SUPPORT
819Build some programs without Kerberos support, like
820.Xr ssh 1 ,
821.Xr telnet 1 ,
822and
823.Xr sshd 8 .
824.It Va WITH_KERNEL_RETPOLINE
825Enable the "retpoline" mitigation for CVE-2017-5715 in the kernel
826build.
827.It Va WITHOUT_KERNEL_SYMBOLS
828Do not install standalone kernel debug symbol files.
829This option has no effect at build time.
830.It Va WITHOUT_KVM
831Do not build the
832.Nm libkvm
833library as a part of the base system.
834.Bf -symbolic
835The option has no effect yet.
836.Ef
837When set, these options are also in effect:
838.Pp
839.Bl -inset -compact
840.It Va WITHOUT_KVM_SUPPORT
841(unless
842.Va WITH_KVM_SUPPORT
843is set explicitly)
844.El
845.It Va WITHOUT_KVM_SUPPORT
846Build some programs without optional
847.Nm libkvm
848support.
849.It Va WITHOUT_LDNS
850Setting this variable will prevent the LDNS library from being built.
851When set, it enforces these options:
852.Pp
853.Bl -item -compact
854.It
855.Va WITHOUT_LDNS_UTILS
856.It
857.Va WITHOUT_UNBOUND
858.El
859.It Va WITHOUT_LDNS_UTILS
860Setting this variable will prevent building the LDNS utilities
861.Xr drill 1
862and
863.Xr host 1 .
864.It Va WITHOUT_LEGACY_CONSOLE
865Do not build programs that support a legacy PC console; e.g.,
866.Xr kbdcontrol 1
867and
868.Xr vidcontrol 1 .
869.It Va WITHOUT_LIB32
870On 64-bit platforms, do not build 32-bit library set and a
871.Nm ld-elf32.so.1
872runtime linker.
873.Pp
874This is a default setting on
875arm/armv6, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
876.It Va WITH_LIB32
877On 64-bit platforms, build the 32-bit library set and a
878.Nm ld-elf32.so.1
879runtime linker.
880.Pp
881This is a default setting on
882amd64/amd64 and powerpc/powerpc64.
883.It Va WITHOUT_LLD
884Do not build LLVM's lld linker.
885.It Va WITHOUT_LLDB
886Do not build the LLDB debugger.
887.Pp
888This is a default setting on
889arm/armv6, arm/armv7, riscv/riscv64 and riscv/riscv64sf.
890.It Va WITH_LLDB
891Build the LLDB debugger.
892.Pp
893This is a default setting on
894amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
895.It Va WITHOUT_LLD_BOOTSTRAP
896Do not build the LLD linker during the bootstrap phase of
897the build.
898To be able to build the system an alternate linker must be provided via XLD.
899.It Va WITHOUT_LLD_IS_LD
900Do not install a
901.Pa /usr/bin/ld symlink
902to
903.Pa ld.lld .
904The system will not have a usable tool chain unless a linker is provided
905some other way.
906.It Va WITHOUT_LLVM_ASSERTIONS
907Disable debugging assertions in LLVM.
908.It Va WITH_LLVM_BINUTILS
909Install LLVM's binutils (ar, addr2line, nm, etc.) instead of ELF Tool Chain's.
910.It Va WITHOUT_LLVM_COV
911Do not build the
912.Xr llvm-cov 1
913tool.
914.It Va WITHOUT_LLVM_CXXFILT
915Install ELF Tool Chain's cxxfilt as c++filt, instead of LLVM's llvm-cxxfilt.
916.It Va WITHOUT_LLVM_TARGET_AARCH64
917Do not build LLVM target support for AArch64.
918The
919.Va LLVM_TARGET_ALL
920option should be used rather than this in most cases.
921.It Va WITHOUT_LLVM_TARGET_ALL
922Only build the required LLVM target support.
923This option is preferred to specific target support options.
924When set, these options are also in effect:
925.Pp
926.Bl -inset -compact
927.It Va WITHOUT_LLVM_TARGET_AARCH64
928(unless
929.Va WITH_LLVM_TARGET_AARCH64
930is set explicitly)
931.It Va WITHOUT_LLVM_TARGET_ARM
932(unless
933.Va WITH_LLVM_TARGET_ARM
934is set explicitly)
935.It Va WITHOUT_LLVM_TARGET_POWERPC
936(unless
937.Va WITH_LLVM_TARGET_POWERPC
938is set explicitly)
939.It Va WITHOUT_LLVM_TARGET_RISCV
940(unless
941.Va WITH_LLVM_TARGET_RISCV
942is set explicitly)
943.El
944.It Va WITHOUT_LLVM_TARGET_ARM
945Do not build LLVM target support for ARM.
946The
947.Va LLVM_TARGET_ALL
948option should be used rather than this in most cases.
949.It Va WITH_LLVM_TARGET_BPF
950Build LLVM target support for BPF.
951The
952.Va LLVM_TARGET_ALL
953option should be used rather than this in most cases.
954.It Va WITH_LLVM_TARGET_MIPS
955Build LLVM target support for MIPS.
956The
957.Va LLVM_TARGET_ALL
958option should be used rather than this in most cases.
959.It Va WITHOUT_LLVM_TARGET_POWERPC
960Do not build LLVM target support for PowerPC.
961The
962.Va LLVM_TARGET_ALL
963option should be used rather than this in most cases.
964.It Va WITHOUT_LLVM_TARGET_RISCV
965Do not build LLVM target support for RISC-V.
966The
967.Va LLVM_TARGET_ALL
968option should be used rather than this in most cases.
969.It Va WITHOUT_LLVM_TARGET_X86
970Do not build LLVM target support for X86.
971The
972.Va LLVM_TARGET_ALL
973option should be used rather than this in most cases.
974.It Va WITH_LOADER_EFI_SECUREBOOT
975Enable building
976.Xr loader 8
977with support for verification based on certificates obtained from UEFI.
978.It Va WITHOUT_LOADER_GELI
979Disable inclusion of GELI crypto support in the boot chain binaries.
980.Pp
981This is a default setting on
982powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
983.It Va WITH_LOADER_GELI
984Build GELI bootloader support.
985.Pp
986This is a default setting on
987amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
988.It Va WITHOUT_LOADER_KBOOT
989Do not build kboot, a linuxboot environment loader
990.Pp
991This is a default setting on
992arm/armv6, arm/armv7, i386/i386, powerpc/powerpc, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
993.It Va WITH_LOADER_KBOOT
994Build kboot, a linuxboot environment loader
995.Pp
996This is a default setting on
997amd64/amd64, arm64/aarch64 and powerpc/powerpc64.
998.It Va WITHOUT_LOADER_LUA
999Do not build LUA bindings for the boot loader.
1000.Pp
1001This is a default setting on
1002powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
1003.It Va WITH_LOADER_LUA
1004Build LUA bindings for the boot loader.
1005.Pp
1006This is a default setting on
1007amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
1008.It Va WITHOUT_LOADER_OFW
1009Disable building of openfirmware bootloader components.
1010.Pp
1011This is a default setting on
1012amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
1013.It Va WITH_LOADER_OFW
1014Build openfirmware bootloader components.
1015.Pp
1016This is a default setting on
1017powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
1018.It Va WITHOUT_LOADER_UBOOT
1019Disable building of ubldr.
1020.Pp
1021This is a default setting on
1022amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1023.It Va WITH_LOADER_UBOOT
1024Build ubldr.
1025.Pp
1026This is a default setting on
1027arm/armv6, arm/armv7, powerpc/powerpc and powerpc/powerpc64.
1028.It Va WITH_LOADER_VERBOSE
1029Build with extra verbose debugging in the loader.
1030May explode already nearly too large loader over the limit.
1031Use with care.
1032.It Va WITH_LOADER_VERIEXEC
1033Enable building
1034.Xr loader 8
1035with support for verification similar to Verified Exec.
1036.Pp
1037Depends on
1038.Va WITH_BEARSSL .
1039When set, these options are also in effect:
1040.Pp
1041.Bl -inset -compact
1042.It Va WITH_LOADER_EFI_SECUREBOOT
1043(unless
1044.Va WITHOUT_LOADER_EFI_SECUREBOOT
1045is set explicitly)
1046.It Va WITH_LOADER_VERIEXEC_VECTX
1047(unless
1048.Va WITHOUT_LOADER_VERIEXEC_VECTX
1049is set explicitly)
1050.El
1051.It Va WITH_LOADER_VERIEXEC_PASS_MANIFEST
1052Enable building
1053.Xr loader 8
1054with support to pass a verified manifest to the kernel.
1055The kernel has to be built with a module to parse the manifest.
1056.Pp
1057Depends on
1058.Va WITH_LOADER_VERIEXEC .
1059.It Va WITH_LOADER_VERIEXEC_VECTX
1060Enable building
1061.Xr loader 8
1062with support for hashing and verifying kernel and modules as a side effect
1063of loading.
1064.Pp
1065Depends on
1066.Va WITH_LOADER_VERIEXEC .
1067.It Va WITHOUT_LOADER_ZFS
1068Do not build ZFS file system boot loader support.
1069.It Va WITHOUT_LOCALES
1070Do not build localization files; see
1071.Xr locale 1 .
1072.It Va WITHOUT_LOCATE
1073Do not build
1074.Xr locate 1
1075and related programs.
1076.It Va WITHOUT_LPR
1077Do not build
1078.Xr lpr 1
1079and related programs.
1080.It Va WITHOUT_LS_COLORS
1081Build
1082.Xr ls 1
1083without support for colors to distinguish file types.
1084.It Va WITHOUT_MACHDEP_OPTIMIZATIONS
1085Prefer machine-independent non-assembler code in libc and libm.
1086.It Va WITHOUT_MAIL
1087Do not build any mail support (MUA or MTA).
1088When set, it enforces these options:
1089.Pp
1090.Bl -item -compact
1091.It
1092.Va WITHOUT_DMAGENT
1093.It
1094.Va WITHOUT_MAILWRAPPER
1095.It
1096.Va WITHOUT_SENDMAIL
1097.El
1098.It Va WITHOUT_MAILWRAPPER
1099Do not build the
1100.Xr mailwrapper 8
1101MTA selector.
1102.It Va WITHOUT_MAKE
1103Do not install
1104.Xr make 1
1105and related support files.
1106.It Va WITHOUT_MAKE_CHECK_USE_SANDBOX
1107Do not execute
1108.Dq Li "make check"
1109in limited sandbox mode.
1110This option should be paired with
1111.Va WITH_INSTALL_AS_USER
1112if executed as an unprivileged user.
1113See
1114.Xr tests 7
1115for more details.
1116.It Va WITH_MALLOC_PRODUCTION
1117Disable assertions and statistics gathering in
1118.Xr malloc 3 .
1119It also defaults the A and J runtime options to off.
1120.It Va WITHOUT_MAN
1121Do not build manual pages.
1122When set, these options are also in effect:
1123.Pp
1124.Bl -inset -compact
1125.It Va WITHOUT_MAN_UTILS
1126(unless
1127.Va WITH_MAN_UTILS
1128is set explicitly)
1129.El
1130.It Va WITHOUT_MANCOMPRESS
1131Do not install compressed man pages.
1132Only the uncompressed versions will be installed.
1133.It Va WITH_MANSPLITPKG
1134Split man pages into their own packages during make package.
1135.It Va WITHOUT_MAN_UTILS
1136Do not build utilities for manual pages,
1137.Xr apropos 1 ,
1138.Xr makewhatis 1 ,
1139.Xr man 1 ,
1140.Xr whatis 1 ,
1141.Xr manctl 8 ,
1142and related support files.
1143.It Va WITH_META_MODE
1144Create
1145.Xr make 1
1146meta files when building, which can provide a reliable incremental build when
1147using
1148.Xr filemon 4 .
1149The meta file is created in OBJDIR as
1150.Pa target.meta .
1151These meta files track the command that was executed, its output, and the
1152current directory.
1153The
1154.Xr filemon 4
1155module is required unless
1156.Va NO_FILEMON
1157is defined.
1158When the module is loaded, any files used by the commands executed are
1159tracked as dependencies for the target in its meta file.
1160The target is considered out-of-date and rebuilt if any of these
1161conditions are true compared to the last build:
1162.Bl -bullet -compact
1163.It
1164The command to execute changes.
1165.It
1166The current working directory changes.
1167.It
1168The target's meta file is missing.
1169.It
1170The target's meta file is missing filemon data when filemon is loaded
1171and a previous run did not have it loaded.
1172.It
1173[requires
1174.Xr filemon 4 ]
1175Files read, executed or linked to are newer than the target.
1176.It
1177[requires
1178.Xr filemon 4 ]
1179Files read, written, executed or linked are missing.
1180.El
1181The meta files can also be useful for debugging.
1182.Pp
1183The build hides commands that are executed unless
1184.Va NO_SILENT
1185is defined.
1186Errors cause
1187.Xr make 1
1188to show some of its environment for further debugging.
1189.Pp
1190The build operates as it normally would otherwise.
1191This option originally invoked a different build system but that was renamed
1192to
1193.Va WITH_DIRDEPS_BUILD .
1194.Pp
1195This must be set in the environment, make command line, or
1196.Pa /etc/src-env.conf ,
1197not
1198.Pa /etc/src.conf .
1199.It Va WITHOUT_MLX5TOOL
1200Do not build
1201.Xr mlx5tool 8
1202.Pp
1203This is a default setting on
1204arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
1205.It Va WITH_MLX5TOOL
1206Build
1207.Xr mlx5tool 8
1208.Pp
1209This is a default setting on
1210amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
1211.It Va WITHOUT_NETCAT
1212Do not build
1213.Xr nc 1
1214utility.
1215.It Va WITHOUT_NETGRAPH
1216Do not build applications to support
1217.Xr netgraph 4 .
1218When set, it enforces these options:
1219.Pp
1220.Bl -item -compact
1221.It
1222.Va WITHOUT_BLUETOOTH
1223.El
1224.Pp
1225When set, these options are also in effect:
1226.Pp
1227.Bl -inset -compact
1228.It Va WITHOUT_NETGRAPH_SUPPORT
1229(unless
1230.Va WITH_NETGRAPH_SUPPORT
1231is set explicitly)
1232.El
1233.It Va WITHOUT_NETGRAPH_SUPPORT
1234Build libraries, programs, and kernel modules without netgraph support.
1235.It Va WITHOUT_NIS
1236Do not build
1237.Xr NIS 8
1238support and related programs.
1239If set, you might need to adopt your
1240.Xr nsswitch.conf 5
1241and remove
1242.Sq nis
1243entries.
1244.It Va WITHOUT_NLS
1245Do not build NLS catalogs.
1246When set, it enforces these options:
1247.Pp
1248.Bl -item -compact
1249.It
1250.Va WITHOUT_NLS_CATALOGS
1251.El
1252.It Va WITHOUT_NLS_CATALOGS
1253Do not build NLS catalog support for
1254.Xr csh 1 .
1255.It Va WITHOUT_NS_CACHING
1256Disable name caching in the
1257.Pa nsswitch
1258subsystem.
1259The generic caching daemon,
1260.Xr nscd 8 ,
1261will not be built either if this option is set.
1262.It Va WITHOUT_NTP
1263Do not build
1264.Xr ntpd 8
1265and related programs.
1266.It Va WITHOUT_NVME
1267Do not build nvme related tools and kernel modules.
1268.Pp
1269This is a default setting on
1270arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
1271.It Va WITH_NVME
1272Build nvme related tools and kernel modules.
1273.Pp
1274This is a default setting on
1275amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
1276.It Va WITHOUT_OFED
1277Do not build the
1278.Dq "OpenFabrics Enterprise Distribution"
1279InfiniBand software stack, including kernel modules and userspace libraries.
1280.Pp
1281This is a default setting on
1282arm/armv6 and arm/armv7.
1283When set, it enforces these options:
1284.Pp
1285.Bl -item -compact
1286.It
1287.Va WITHOUT_OFED_EXTRA
1288.El
1289.It Va WITH_OFED
1290Build the
1291.Dq "OpenFabrics Enterprise Distribution"
1292InfiniBand software stack, including kernel modules and userspace libraries.
1293.Pp
1294This is a default setting on
1295amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1296.It Va WITH_OFED_EXTRA
1297Build the non-essential components of the
1298.Dq "OpenFabrics Enterprise Distribution"
1299Infiniband software stack, mostly examples.
1300.It Va WITH_OPENLDAP
1301Enable building LDAP support for kerberos using an openldap client from ports.
1302.It Va WITHOUT_OPENMP
1303Do not build LLVM's OpenMP runtime.
1304.Pp
1305This is a default setting on
1306arm/armv6, arm/armv7 and powerpc/powerpc.
1307.It Va WITH_OPENMP
1308Build LLVM's OpenMP runtime.
1309.Pp
1310This is a default setting on
1311amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1312.It Va WITHOUT_OPENSSH
1313Do not build OpenSSH.
1314.It Va WITHOUT_OPENSSL
1315Do not build OpenSSL.
1316When set, it enforces these options:
1317.Pp
1318.Bl -item -compact
1319.It
1320.Va WITHOUT_DMAGENT
1321.It
1322.Va WITHOUT_KERBEROS
1323.It
1324.Va WITHOUT_KERBEROS_SUPPORT
1325.It
1326.Va WITHOUT_LDNS
1327.It
1328.Va WITHOUT_LDNS_UTILS
1329.It
1330.Va WITHOUT_LOADER_ZFS
1331.It
1332.Va WITHOUT_OPENSSH
1333.It
1334.Va WITHOUT_OPENSSL_KTLS
1335.It
1336.Va WITHOUT_PKGBOOTSTRAP
1337.It
1338.Va WITHOUT_UNBOUND
1339.It
1340.Va WITHOUT_ZFS
1341.El
1342.Pp
1343When set, these options are also in effect:
1344.Pp
1345.Bl -inset -compact
1346.It Va WITHOUT_GSSAPI
1347(unless
1348.Va WITH_GSSAPI
1349is set explicitly)
1350.El
1351.It Va WITHOUT_OPENSSL_KTLS
1352Do not include kernel TLS support in OpenSSL.
1353.Pp
1354This is a default setting on
1355arm/armv6, arm/armv7, i386/i386, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
1356.It Va WITH_OPENSSL_KTLS
1357Include kernel TLS support in OpenSSL.
1358.Pp
1359This is a default setting on
1360amd64/amd64, arm64/aarch64, powerpc/powerpc64 and powerpc/powerpc64le.
1361.It Va WITHOUT_PAM
1362Do not build PAM library and modules.
1363.Bf -symbolic
1364This option is deprecated and does nothing.
1365.Ef
1366When set, these options are also in effect:
1367.Pp
1368.Bl -inset -compact
1369.It Va WITHOUT_PAM_SUPPORT
1370(unless
1371.Va WITH_PAM_SUPPORT
1372is set explicitly)
1373.El
1374.It Va WITHOUT_PAM_SUPPORT
1375Build some programs without PAM support, particularly
1376.Xr ftpd 8
1377and
1378.Xr ppp 8 .
1379.It Va WITHOUT_PF
1380Do not build PF firewall package.
1381When set, it enforces these options:
1382.Pp
1383.Bl -item -compact
1384.It
1385.Va WITHOUT_AUTHPF
1386.El
1387.It Va WITHOUT_PIE
1388Do not build dynamically linked binaries as
1389Position-Independent Executable (PIE).
1390.Pp
1391This is a default setting on
1392arm/armv6, arm/armv7, i386/i386 and powerpc/powerpc.
1393.It Va WITH_PIE
1394Build dynamically linked binaries as
1395Position-Independent Executable (PIE).
1396.Pp
1397This is a default setting on
1398amd64/amd64, arm64/aarch64, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1399.It Va WITHOUT_PKGBOOTSTRAP
1400Do not build
1401.Xr pkg 7
1402bootstrap tool.
1403.It Va WITHOUT_PMC
1404Do not build
1405.Xr pmccontrol 8
1406and related programs.
1407.It Va WITHOUT_PORTSNAP
1408Do not build or install
1409.Xr portsnap 8
1410and related files.
1411.It Va WITHOUT_PPP
1412Do not build
1413.Xr ppp 8
1414and related programs.
1415.It Va WITH_PROFILE
1416Build profiled libraries for use with
1417.Xr gprof 8 .
1418This option is deprecated and may not be present in a future version of
1419.Fx .
1420.It Va WITHOUT_QUOTAS
1421Do not build
1422.Xr quota 1
1423and related programs.
1424.It Va WITHOUT_RADIUS_SUPPORT
1425Do not build radius support into various applications, like
1426.Xr pam_radius 8
1427and
1428.Xr ppp 8 .
1429.It Va WITH_RATELIMIT
1430Build the system with rate limit support.
1431.Pp
1432This makes
1433.Dv SO_MAX_PACING_RATE
1434effective in
1435.Xr getsockopt 2 ,
1436and
1437.Ar txrlimit
1438support in
1439.Xr ifconfig 8 ,
1440by proxy.
1441.It Va WITHOUT_RBOOTD
1442Do not build or install
1443.Xr rbootd 8 .
1444.It Va WITHOUT_RELRO
1445Do not apply the Relocation Read-Only (RELRO) vulnerability mitigation.
1446See also the
1447.Va BIND_NOW
1448option.
1449.It Va WITH_REPRODUCIBLE_BUILD
1450Exclude build metadata (such as the build time, user, or host)
1451from the kernel, boot loaders, and uname output, so that builds produce
1452bit-for-bit identical output.
1453.It Va WITHOUT_RESCUE
1454Do not build
1455.Xr rescue 8 .
1456.It Va WITH_RETPOLINE
1457Build the base system with the retpoline speculative execution
1458vulnerability mitigation for CVE-2017-5715.
1459.It Va WITHOUT_ROUTED
1460Do not build
1461.Xr routed 8
1462utility.
1463.It Va WITH_RPCBIND_WARMSTART_SUPPORT
1464Build
1465.Xr rpcbind 8
1466with warmstart support.
1467.It Va WITHOUT_SCTP_SUPPORT
1468Disable support in the kernel for the
1469.Xr sctp 4
1470Stream Control Transmission Protocol
1471loadable kernel module.
1472.It Va WITHOUT_SENDMAIL
1473Do not build
1474.Xr sendmail 8
1475and related programs.
1476.It Va WITHOUT_SERVICESDB
1477Do not install
1478.Pa /var/db/services.db .
1479.It Va WITHOUT_SETUID_LOGIN
1480Set this to disable the installation of
1481.Xr login 1
1482as a set-user-ID root program.
1483.It Va WITHOUT_SHAREDOCS
1484Do not build the
1485.Bx 4.4
1486legacy docs.
1487.It Va WITHOUT_SHARED_TOOLCHAIN
1488Build the toolchain binaries as statically linked executables.
1489The set includes
1490.Xr cc 1 ,
1491.Xr make 1
1492and necessary utilities like assembler, linker and library archive manager.
1493.It Va WITH_SORT_THREADS
1494Enable threads in
1495.Xr sort 1 .
1496.It Va WITHOUT_SOURCELESS
1497Do not build kernel modules that include sourceless code (either microcode or native code for host CPU).
1498When set, it enforces these options:
1499.Pp
1500.Bl -item -compact
1501.It
1502.Va WITHOUT_SOURCELESS_HOST
1503.It
1504.Va WITHOUT_SOURCELESS_UCODE
1505.El
1506.It Va WITHOUT_SOURCELESS_HOST
1507Do not build kernel modules that include sourceless native code for host CPU.
1508.It Va WITHOUT_SOURCELESS_UCODE
1509Do not build kernel modules that include sourceless microcode.
1510.It Va WITHOUT_SPLIT_KERNEL_DEBUG
1511Do not build standalone kernel debug files.
1512Debug data (if enabled by the kernel configuration file)
1513will be included in the kernel and modules.
1514When set, it enforces these options:
1515.Pp
1516.Bl -item -compact
1517.It
1518.Va WITHOUT_KERNEL_SYMBOLS
1519.El
1520.It Va WITHOUT_SSP
1521Do not build world with propolice stack smashing protection.
1522.It Va WITH_STAGING
1523Enable staging of files to a stage tree.
1524This can be best thought of as auto-install to
1525.Va DESTDIR
1526with some extra meta data to ensure dependencies can be tracked.
1527Depends on
1528.Va WITH_DIRDEPS_BUILD .
1529When set, these options are also in effect:
1530.Pp
1531.Bl -inset -compact
1532.It Va WITH_STAGING_MAN
1533(unless
1534.Va WITHOUT_STAGING_MAN
1535is set explicitly)
1536.It Va WITH_STAGING_PROG
1537(unless
1538.Va WITHOUT_STAGING_PROG
1539is set explicitly)
1540.El
1541.Pp
1542This must be set in the environment, make command line, or
1543.Pa /etc/src-env.conf ,
1544not
1545.Pa /etc/src.conf .
1546.It Va WITH_STAGING_MAN
1547Enable staging of man pages to stage tree.
1548.It Va WITH_STAGING_PROG
1549Enable staging of PROGs to stage tree.
1550.It Va WITH_STALE_STAGED
1551Check staged files are not stale.
1552.It Va WITHOUT_STATS
1553Neither build nor install
1554.Lb libstats
1555and dependent binaries.
1556.It Va WITHOUT_SYSCONS
1557Do not build
1558.Xr syscons 4
1559support files such as keyboard maps, fonts, and screen output maps.
1560.It Va WITH_SYSROOT
1561Enable use of sysroot during build.
1562Depends on
1563.Va WITH_DIRDEPS_BUILD .
1564.Pp
1565This must be set in the environment, make command line, or
1566.Pa /etc/src-env.conf ,
1567not
1568.Pa /etc/src.conf .
1569.It Va WITHOUT_SYSTEM_COMPILER
1570Do not opportunistically skip building a cross-compiler during the
1571bootstrap phase of the build.
1572Normally, if the currently installed compiler matches the planned bootstrap
1573compiler type and revision, then it will not be built.
1574This does not prevent a compiler from being built for installation though,
1575only for building one for the build itself.
1576The
1577.Va WITHOUT_CLANG
1578option controls that.
1579.It Va WITHOUT_SYSTEM_LINKER
1580Do not opportunistically skip building a cross-linker during the
1581bootstrap phase of the build.
1582Normally, if the currently installed linker matches the planned bootstrap
1583linker type and revision, then it will not be built.
1584This does not prevent a linker from being built for installation though,
1585only for building one for the build itself.
1586The
1587.Va WITHOUT_LLD
1588option controls that.
1589.Pp
1590This option is only relevant when
1591.Va WITH_LLD_BOOTSTRAP
1592is set.
1593.It Va WITHOUT_TALK
1594Do not build or install
1595.Xr talk 1
1596and
1597.Xr talkd 8 .
1598.It Va WITHOUT_TCP_WRAPPERS
1599Do not build or install
1600.Xr tcpd 8 ,
1601and related utilities.
1602.It Va WITHOUT_TCSH
1603Do not build and install
1604.Pa /bin/csh
1605(which is
1606.Xr tcsh 1 ) .
1607.It Va WITHOUT_TELNET
1608Do not build
1609.Xr telnet 1
1610and related programs.
1611.It Va WITHOUT_TESTS
1612Do not build nor install the
1613.Fx
1614Test Suite in
1615.Pa /usr/tests/ .
1616See
1617.Xr tests 7
1618for more details.
1619This also disables the build of all test-related dependencies, including ATF.
1620When set, it enforces these options:
1621.Pp
1622.Bl -item -compact
1623.It
1624.Va WITHOUT_DTRACE_TESTS
1625.El
1626.Pp
1627When set, these options are also in effect:
1628.Pp
1629.Bl -inset -compact
1630.It Va WITHOUT_GOOGLETEST
1631(unless
1632.Va WITH_GOOGLETEST
1633is set explicitly)
1634.It Va WITHOUT_TESTS_SUPPORT
1635(unless
1636.Va WITH_TESTS_SUPPORT
1637is set explicitly)
1638.El
1639.It Va WITHOUT_TESTS_SUPPORT
1640Disable the build of all test-related dependencies, including ATF.
1641When set, it enforces these options:
1642.Pp
1643.Bl -item -compact
1644.It
1645.Va WITHOUT_GOOGLETEST
1646.El
1647.It Va WITHOUT_TEXTPROC
1648Do not build
1649programs used for text processing.
1650.It Va WITHOUT_TFTP
1651Do not build or install
1652.Xr tftp 1
1653and
1654.Xr tftpd 8 .
1655.It Va WITHOUT_TOOLCHAIN
1656Do not install header or
1657programs used for program development,
1658compilers, debuggers etc.
1659When set, it enforces these options:
1660.Pp
1661.Bl -item -compact
1662.It
1663.Va WITHOUT_CLANG
1664.It
1665.Va WITHOUT_CLANG_EXTRAS
1666.It
1667.Va WITHOUT_CLANG_FORMAT
1668.It
1669.Va WITHOUT_CLANG_FULL
1670.It
1671.Va WITHOUT_INCLUDES
1672.It
1673.Va WITHOUT_LLD
1674.It
1675.Va WITHOUT_LLDB
1676.It
1677.Va WITHOUT_LLVM_COV
1678.El
1679.It Va WITH_UBSAN
1680Build the base system with Undefined Behavior Sanitizer (UBSan) to detect
1681various kinds of undefined behavior at runtime.
1682Requires that Clang be used as the base system compiler
1683and that the runtime support library is available
1684.It Va WITHOUT_UNBOUND
1685Do not build
1686.Xr unbound 8
1687and related programs.
1688.It Va WITHOUT_UNIFIED_OBJDIR
1689Use the historical object directory format for
1690.Xr build 7
1691targets.
1692For native-builds and builds done directly in sub-directories the format of
1693.Pa ${MAKEOBJDIRPREFIX}/${.CURDIR}
1694is used,
1695while for cross-builds
1696.Pa ${MAKEOBJDIRPREFIX}/${TARGET}.${TARGET_ARCH}/${.CURDIR}
1697is used.
1698.Pp
1699This option is transitional and will be removed in a future version of
1700.Fx ,
1701at which time
1702.Va WITH_UNIFIED_OBJDIR
1703will be enabled permanently.
1704.Pp
1705This must be set in the environment, make command line, or
1706.Pa /etc/src-env.conf ,
1707not
1708.Pa /etc/src.conf .
1709.It Va WITHOUT_USB
1710Do not build USB-related programs and libraries.
1711.It Va WITHOUT_USB_GADGET_EXAMPLES
1712Do not build USB gadget kernel modules.
1713.It Va WITHOUT_UTMPX
1714Do not build user accounting tools such as
1715.Xr last 1 ,
1716.Xr users 1 ,
1717.Xr who 1 ,
1718.Xr ac 8 ,
1719.Xr lastlogin 8
1720and
1721.Xr utx 8 .
1722.It Va WITH_VERIEXEC
1723Enable building
1724.Xr veriexec 8
1725which loads the contents of verified manifests into the kernel
1726for use by
1727.Xr mac_veriexec 4
1728.Pp
1729Depends on
1730.Va WITH_BEARSSL .
1731.It Va WITHOUT_VI
1732Do not build and install vi, view, ex and related programs.
1733.It Va WITHOUT_VT
1734Do not build
1735.Xr vt 4
1736support files (fonts and keymaps).
1737.It Va WITHOUT_WARNS
1738Set this to not add warning flags to the compiler invocations.
1739Useful as a temporary workaround when code enters the tree
1740which triggers warnings in environments that differ from the
1741original developer.
1742.It Va WITHOUT_WERROR
1743Set this to not treat compiler warnings as errors.
1744Useful as a temporary workaround when working on fixing compiler warnings.
1745When set, warnings are still printed in the build log but do not fail the build.
1746.It Va WITHOUT_WIRELESS
1747Do not build programs used for 802.11 wireless networks; especially
1748.Xr wpa_supplicant 8
1749and
1750.Xr hostapd 8 .
1751When set, these options are also in effect:
1752.Pp
1753.Bl -inset -compact
1754.It Va WITHOUT_WIRELESS_SUPPORT
1755(unless
1756.Va WITH_WIRELESS_SUPPORT
1757is set explicitly)
1758.El
1759.It Va WITHOUT_WIRELESS_SUPPORT
1760Build libraries, programs, and kernel modules without
1761802.11 wireless support.
1762.It Va WITHOUT_WPA_SUPPLICANT_EAPOL
1763Build
1764.Xr wpa_supplicant 8
1765without support for the IEEE 802.1X protocol and without
1766support for EAP-PEAP, EAP-TLS, EAP-LEAP, and EAP-TTLS
1767protocols (usable only via 802.1X).
1768.It Va WITHOUT_ZFS
1769Do not build the ZFS file system kernel module, libraries such as
1770.Xr libbe 3 ,
1771and user commands such as
1772.Xr zpool 8
1773or
1774.Xr zfs 8 .
1775Also disable ZFS support in utilities and libraries which implement
1776ZFS-specific functionality.
1777.It Va WITHOUT_ZONEINFO
1778Do not build the timezone database.
1779When set, it enforces these options:
1780.Pp
1781.Bl -item -compact
1782.It
1783.Va WITHOUT_ZONEINFO_LEAPSECONDS_SUPPORT
1784.El
1785.It Va WITH_ZONEINFO_LEAPSECONDS_SUPPORT
1786Build leapsecond information in to the timezone database.
1787.El
1788.Sh FILES
1789.Bl -tag -compact -width Pa
1790.It Pa /etc/src.conf
1791.It Pa /etc/src-env.conf
1792.It Pa /usr/share/mk/bsd.own.mk
1793.El
1794.Sh SEE ALSO
1795.Xr make 1 ,
1796.Xr make.conf 5 ,
1797.Xr build 7 ,
1798.Xr ports 7
1799.Sh HISTORY
1800The
1801.Nm
1802file appeared in
1803.Fx 7.0 .
1804.Sh AUTHORS
1805This manual page was autogenerated by
1806.An tools/build/options/makeman .
1807