1# $NetBSD: rc.conf,v 1.133 2015/03/30 10:58:37 chopps Exp $ 2# 3# /etc/defaults/rc.conf -- 4# default configuration of /etc/rc.conf 5# 6# see rc.conf(5) for more information. 7# 8# DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE. 9# EDIT /etc/rc.conf INSTEAD. 10# 11 12# 13# Use program=YES to enable program, NO to disable it. program_flags are 14# passed to the program on the command line. 15# 16 17# Uncomment this if you want to use local paths in rc. 18# 19#export PATH=$PATH:/usr/pkg/sbin:/usr/pkg/bin:/usr/local/sbin:/usr/local/bin 20 21# Uncomment the following to execute each /etc/rc.d script in 22# the current shell rather than in a subshell. This may be 23# faster on very slow machines that have an expensive fork(2). 24# NOTE: USE THIS AT YOUR OWN RISK; A ROGUE COMMAND 25# MAY INADVERTENTLY PREVENT BOOT TO MULTIUSER. 26# 27#rc_fast_and_loose=YES 28 29# If rc_silent is true then /etc/rc will suppress most output to 30# the console. The default is taken from the AB_SILENT flag passed 31# from the boot loader to the kernel in the boothowto(9) variable. 32# 33# rc_silent_cmd is executed once for each suppressed line of output. 34# Useful values are ":" and "twiddle". 35# 36rc_silent=$( [ "$(( $(/sbin/sysctl -n kern.boothowto 2>/dev/null || echo 0) \ 37 & 0x40000 ))" != 0 ] && echo true || echo false ) 38rc_silent_cmd=twiddle 39 40# Additional flags to the rcorder(8) that's run by /etc/rc. 41# 42rc_rcorder_flags="" 43 44# The directories searched for rc scripts. 45# These directories must be part of the root file system. 46rc_directories=/etc/rc.d 47 48# If this is set to NO, shutdown(8) will not run /etc/rc.shutdown. 49# 50do_rcshutdown=YES 51 52# Additional flags to the rcorder(8) that's run by /etc/rc.shutdown. 53# 54rcshutdown_rcorder_flags="" 55 56# If this is non-blank, use as the number of seconds to run a watchdog 57# timer which will terminate /etc/rc.shutdown if the timeout expires. 58# 59rcshutdown_timeout="" 60 61 62# Basic network configuration 63# 64 65# Fully Qualified Internet Domain Name (a.k.a. hostname, e.g. foo.baz.edu). 66# If blank, use /etc/myname. 67# 68hostname="" 69 70# If there's only one way out of your IPv4 network, set this to the hostname 71# or the IPv4 address of the router that will get your packets off the LAN. 72# If blank, use /etc/mygate. 73# 74defaultroute="" 75 76# Same thing for IPv6. If blank, use /etc/mygate6. 77# 78defaultroute6="" 79 80# The NIS domain name (formerly known as Yellow Pages); not in any way 81# related to Internet domain names. 82# If blank, use /etc/defaultdomain. 83# 84domainname="" 85 86# Filesystems to mount early in boot-up. 87# Note that `/var' is needed in $critical_filesystems_local (or 88# implied as part of `/') as certain services that need /var (such as 89# dhclient) may be needed to get the network operational enough to mount 90# the $critical_filesystems_remote. Prepending "OPTIONAL:" means it 91# will not be an error if that file system is not present in fstab(5). 92# 93critical_filesystems_local="OPTIONAL:/var" 94critical_filesystems_remote="OPTIONAL:/usr" 95 96# Swap device controls. 97# 98no_swap=NO # Set to YES if you have purposefully setup no swap 99 # partitions and don't want to be warned about it. 100swapoff=YES # Remove block-type swap partitions upon shutdown 101 # This defaults to yes, so that raids shutdown cleanly 102 103# Concatenated disk driver. 104# 105ccd=YES 106 107# RAIDframe driver (manually configured devices). 108# 109raidframe=YES 110 111# Crypto file system. 112# 113cgd=YES 114 115# Logical Volume Manager 116# 117lvm=NO 118 119# One-time actions and programs on boot-up. 120# 121savecore=YES savecore_flags="-z" 122 savecore_dir="/var/crash" 123resize_root=NO # resize root to fill partition 124per_user_tmp=NO # per-user /tmp directories 125per_user_tmp_dir="/private/tmp" # real storage for /tmp 126clear_tmp=YES # clear /tmp after reboot 127update_motd=YES # updates /etc/motd 128dmesg=YES dmesg_flags="" # write /var/run/dmesg.boot 129accounting=NO # uses /var/account/acct 130newsyslog=NO newsyslog_flags="" # trim log files 131quota=YES # check and enable quotas 132ldconfig=YES # rebuild a.out ldconfig cache 133sysdb=YES # build system databases 134rndctl=NO rndctl_flags="" # configure rndctl(8) 135gpio=NO # configure GPIO devices 136modules=YES # process /etc/modules.conf 137 138# cope with other OSes using the real time clock at localtime on this 139# machine (by adjusting kern.rtc_offset at boot) 140rtclocaltime=NO 141 142# NOTE: default coredump name now set in /etc/sysctl.conf 143 144# 145# File system check flags; default to preen mode, checking file systems 146# that are listed in /etc/fstab in parallel as the fsck pass number 147# permits. Fix minor faults automatically, and exit with non 0 only 148# when major errors occur. 149# 150fsck_flags=-p 151 152# Security setting. If $securelevel is non-empty, the system securelevel 153# is set to this value early in the boot sequence. Otherwise the default 154# action is taken (see init(8)). 155# 156securelevel="" # securelevel to set to 157 158# To set the IP address of an interface either use 159# ifconfig_xxN="IP-NO" 160# where xxN is the interface. If this variable is not set then 161# contents of the file /etc/ifconfig.xxN is used. 162 163# Networking startup. 164# 165mdnsd=NO 166npf=NO 167ipfilter=NO ipfilter_flags="" # uses /etc/ipf.conf 168ipnat=NO # uses /etc/ipnat.conf 169ipfs=NO ipfs_flags="" # save/load ipnat and ipf states 170ipsec=NO # uses /etc/ipsec.conf 171ipmon=NO ipmon_flags="-Dns" # syslog ipfilter messages 172pf=NO pf_rules="/etc/pf.conf" pf_flags="" 173pflogd=NO 174ftp_proxy=NO 175racoon=NO # IKE daemon 176auto_ifconfig=YES # config all avail. interfaces 177net_interfaces="" # used only if above is NO 178flushroutes=YES # flush routes in netstart 179dhcpcd=NO 180 dhcpcd_flags="-qM" # For ifconfig_XXX=dhcp. 181dhclient=NO # behave as a DHCP client 182 dhclient_flags="" # blank: config all interfaces 183ntpdate=NO ntpdate_flags="-b -s" # May need '-u' thru firewall 184ppp=YES ppp_peers="" # /etc/ppp/peers to call 185ip6mode=host # host, autohost or router 186ip6uniquelocal=NO # IPv6 unique-local forwarding 187 188# Special treatment for interfaces that need to be downed on 189# shutdown (because they might cause unnecessary costs or block resources 190# on the peer). All pppoe* interfaces are automatically included in this 191# list, add others here manually. 192#force_down_interfaces="" 193 194ifwatchd=NO # execute up/down scripts for in-kernel PPPoE interfaces 195 ifwatchd_flags="-u /etc/ppp/ip-up -d /etc/ppp/ip-down pppoe0" 196 197# ALTQ configuration/monitoring daemon 198altqd=NO altqd_flags="" 199 200# Daemons required by servers. These are not needed for strictly client use. 201# 202 203# inetd is used to start the IP-based services enabled in /etc/inetd.conf 204# 205inetd=YES inetd_flags="-l" # -l logs libwrap 206 207# identd 208# 209identd=NO identd_flags="-b -l -u nobody" 210 211# rpcbind (formerly known as 'portmap') is used to look up RPC-based services. 212# 213rpcbind=NO rpcbind_flags="-l" # -l logs libwrap 214 215# Commonly used daemons. 216# 217syslogd=YES syslogd_flags="-s" # -s "secure" unix domain only 218cron=YES 219named=NO named_flags="" # see below for named_chrootdir 220timed=NO timed_flags="" 221ntpd=NO ntpd_flags="" # see below for ntpd_chrootdir 222# The default setting for postfix here is YES, but gets re-examined by 223# the rc.d/postfix startup script when it runs. The script sets 224# _rc_d_postfix to "check", and then causes all rc.conf settings to 225# be re-evaluated. If the value of $postfix after this is "check", 226# the script then checks to see if /etc/mailer.conf selects the system 227# postfix. If not, it does print a warning and does not start postfix 228# to avoid conflict with a different MTA. 229postfix=${_rc_d_postfix:-YES} 230lpd=NO lpd_flags="-s" # -s "secure" unix domain only 231sshd=NO sshd_flags="" 232ssh_keygen_flags="" 233ftpd=NO ftpd_flags="-ll" 234httpd=NO httpd_flags="" 235 httpd_wwwdir="/var/www" 236 httpd_wwwuser="_httpd" 237 238# To run the named(8) DNS server as an unprivileged user under a 239# chroot(2) cage, uncomment the following after migrating the contents 240# of /etc/namedb to /var/chroot/named/etc/namedb 241# 242#named_chrootdir="/var/chroot/named" 243 244# To run the ntpd(8) NTP server as an unprivileged user under a 245# chroot(2) cage, uncomment the following, after ensuring that: 246# - The kernel has "pseudo-device clockctl" compiled in 247# - /dev/clockctl is present 248# 249#ntpd_chrootdir="/var/chroot/ntpd" 250 251# Routing daemons. 252# 253routed=NO routed_flags="-q" 254gated=NO 255mrouted=NO mrouted_flags="" 256route6d=NO route6d_flags="" 257ldpd=NO 258 259# Daemons used to boot other hosts over a network. 260# 261rarpd=NO rarpd_flags="-a" 262bootparamd=NO bootparamd_flags="" 263dhcpd=NO dhcpd_flags="-q" 264dhcrelay=NO dhcrelay_flags="" 265rbootd=NO rbootd_flags="" 266mopd=NO mopd_flags="-a" 267ndbootd=NO ndbootd_flags="-s /tftpboot /tftpboot/bootyy" 268rtadvd=NO rtadvd_flags="" 269isibootd=NO isibootd_flags="" 270 271# X11 daemons. 272# 273xfs=NO xfs_flags="" # X11 font server 274xdm=NO xdm_flags="" # X11 display manager; needs 275 # wscons=YES for local displays. 276 277# Update fontconfig cache at boot 278fccache=YES 279 280# YP (NIS) daemons. 281# 282ypbind=NO ypbind_flags="" 283ypserv=NO ypserv_flags="-d" 284yppasswdd=NO yppasswdd_flags="" 285 286# NFS daemons and parameters. 287# 288mountd=NO mountd_flags="" # NFS mount requests daemon 289nfs_client=NO # enable client daemons 290nfs_server=NO # enable server daemons 291 nfsd_flags="" 292lockd=NO lockd_flags="" 293statd=NO statd_flags="" 294amd=NO amd_flags="-l syslog -x error,noinfo,nostats" 295 amd_dir=/amd # mount dir 296 297# Heimdal Kerberos 5 KDC (with Kerberos IV compatibility) 298kdc=NO kdc_flags="--detach" 299 300# iSCSI target 301iscsi_target=NO iscsi_target_flags="" 302# iSCSI kernel initiator 303iscsid=NO 304 305# WPA daemons. 306hostapd=NO hostapd_flags="-B /etc/hostapd.conf" 307wpa_supplicant=NO wpa_supplicant_flags="" # -i<if> -c<file> 308 309# ISDN daemon 310isdnd=NO isdnd_flags="" 311 312# Bluetooth configuration 313bluetooth=NO 314# and the following are used when bluetooth=YES 315btconfig_devices="" # all 316bthcid=YES bthcid_flags="" 317sdpd=YES sdpd_flags="" 318 319# Other daemons. 320# 321rwhod=NO rwhod_flags="-u _rwhod" 322devpubd=NO devpubd_flags="" # autocreate nodes for new devs 323envsys=NO # Set /etc/envsys.conf preferences 324 325# Hardware daemons. 326# 327apmd=NO apmd_flags="" # APM power management daemon. 328powerd=NO powerd_flags="" # power management daemon 329screenblank=NO screenblank_flags="" # wscons and FBIO screenblanker 330 331moused=NO # serial mouse handler 332 moused_flags="-p /dev/tty00" 333 334wdogctl=NO # watchdog timer control 335# wdogctl_flags="-k devicename" 336irdaattach=NO # attach serial lines to IrDA 337 irdaattach_flags="tty00" 338 339# Configuration of "wscons" console driver virtual screens. 340# 341wscons=NO wscons_flags="" # setup wscons from wscons.conf 342 343# Configuration of "wsmoused" console driver cut-n-paste support 344# 345wsmoused=NO wsmoused_flags="" 346 347# Configuration of "tpctl" touch panel calibration utility 348# 349tpctl=NO tpctl_flags="" 350 351# Mixer setting 352# 353mixerctl=NO mixerctl_mixers="" # "mixer0 mixer1" means saving 354 # and restoring their settings 355 356# Vi recovery notification. Vi(1)'s -r option can recover files which were 357# accidentally closed. See vi(1) for more details. 358# 359virecover=YES 360 361# Veriexec signature loading. 362# 363veriexec=NO 364veriexec_strict=0 365veriexec_verbose=0 366veriexec_flags="-k" 367 368# Entropy load/save to/from /dev/random at startup/shutdown 369# 370random_seed=YES 371 372# Creating / updating of man page index on boot 373makemandb=YES 374 375# blacklist daemon, needs npf 376blacklistd=NO 377 378# Start of MINIX 3 specific settings block 379if [ -r /etc/defaults/minix.rc.conf ]; then 380 . /etc/defaults/minix.rc.conf 381fi 382# End of MINIX 3 specific settings block 383