xref: /dragonfly/share/man/man5/rc.conf.5 (revision 07a2f99c)
1.\" Copyright (c) 1995
2.\"	Jordan K. Hubbard
3.\"
4.\" Redistribution and use in source and binary forms, with or without
5.\" modification, are permitted provided that the following conditions
6.\" are met:
7.\" 1. Redistributions of source code must retain the above copyright
8.\"    notice, this list of conditions and the following disclaimer.
9.\" 2. Redistributions in binary form must reproduce the above copyright
10.\"    notice, this list of conditions and the following disclaimer in the
11.\"    documentation and/or other materials provided with the distribution.
12.\"
13.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND
14.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
15.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
16.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR BE LIABLE
17.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
18.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
19.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
20.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
21.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
22.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
23.\" SUCH DAMAGE.
24.\"
25.\" $FreeBSD: src/share/man/man5/rc.conf.5,v 1.197 2003/07/28 13:56:00 mbr Exp $
26.\"
27.Dd December 7, 2012
28.Dt RC.CONF 5
29.Os
30.Sh NAME
31.Nm rc.conf
32.Nd system configuration information
33.Sh DESCRIPTION
34The file
35.Nm
36contains descriptive information about the local host name, configuration
37details for any potential network interfaces and which services should be
38started up at system initial boot time.
39In new installations, the
40.Nm
41file is generally initialized by the installer.
42.Pp
43The purpose of
44.Nm
45is not to run commands or perform system startup actions directly.
46Instead, it is included by the various generic startup scripts in
47.Pa /etc
48which conditionalize their
49internal actions according to the settings found there.
50.Pp
51The
52.Pa /etc/defaults/rc.conf
53file specifies the default settings for all the available options,
54the
55.Pa /etc/rc.conf
56file specifies override settings.
57Options need only be specified in
58.Pa /etc/rc.conf
59when the system administrator wishes to override the defaults.
60The file
61.Pa /etc/rc.conf.local
62is used to override settings in
63.Pa /etc/rc.conf
64for historical reasons.
65In addition to
66.Pa /etc/rc.conf.local
67you can also place smaller configuration files for each
68.Xr rc 8
69script in the
70.Pa /etc/rc.conf.d
71directory, which will be included by the
72.Va load_rc_config
73function.
74For jail configurations you could use the file
75.Pa /etc/rc.conf.d/jail
76to store jail specific configuration options.
77Also see the
78.Va rc_conf_files
79variable below.
80.Pp
81The following list provides a name and short description for each
82variable that can be set in the
83.Nm
84file.
85To set a variable of
86.Vt bool
87type, specify either
88.Dq Li YES ,
89.Dq Li TRUE ,
90.Dq Li ON ,
91or
92.Dq Li 1 .
93To unset, specify
94.Dq Li NO ,
95.Dq Li FALSE ,
96.Dq Li OFF ,
97or
98.Dq Li 0 .
99These values are case insensitive.
100The
101.Va _enable
102postfix in the name of a variable for starting a service can be
103omitted (as in
104.Nx ) .
105.Bl -tag -width indent-two
106.It Va rc_debug
107.Pq Vt bool
108If set to
109.Dq Li YES ,
110enable output of debug messages from rc scripts.
111This variable can be helpful in diagnosing mistakes when
112editing or integrating new scripts.
113Beware that this produces copious output to the terminal and
114.Xr syslog 3 .
115.It Va rc_info
116.Pq Vt bool
117If set to
118.Dq Li NO ,
119disable informational messages from the rc scripts.
120Informational messages are displayed when
121a condition that is not serious enough to warrant a warning or an error occurs.
122.It Va swapfile
123.Pq Vt str
124If set to
125.Dq Li NO ,
126no swapfile is installed, otherwise the value is used as the full
127pathname to a file to use for additional swap space.
128.It Va apm_enable
129.Pq Vt bool
130If set to
131.Dq Li YES ,
132enable support for Automatic Power Management with the
133.Xr apm 8
134command.
135.It Va apmd_enable
136.Pq Vt bool
137Run
138.Xr apmd 8
139to handle APM event from userland.
140This also enables support for APM.
141.It Va apmd_flags
142.Pq Vt str
143If
144.Va apmd_enable
145is set to
146.Dq Li YES ,
147these are the flags to pass to the
148.Xr apmd 8
149daemon.
150.It Va battd_enable
151Enable
152.Xr battd 8
153to monitor the status of batteries present in the system.
154This also enables support for APM.
155.It Va battd_flags
156.Pq Vt str
157If
158.Va battd_enable
159is set to
160.Dq Li YES ,
161these are the flags to pass to the
162.Xr battd 8
163daemon.
164.It Va devd_enable
165.Pq Vt bool
166Run
167.Xr devd 8
168to handle device added, removed or unknown events from the kernel.
169.It Va devd_flags
170.Pq Vt str
171If
172.Va devd_enable
173is set to
174.Dq Li YES ,
175these are the flags to pass to the
176.Xr devd 8
177daemon.
178.It Va powerd_enable
179.Pq Vt bool
180Set to
181.Dq Li NO
182by default.
183Setting this to
184.Dq Li YES
185enables
186.Xr powerd 8 ,
187a CPU speed control daemon.
188.It Va sensorsd_enable
189.Pq Vt bool
190Set to
191.Dq Li NO
192by default.
193Setting this to
194.Dq Li YES
195enables
196.Xr sensorsd 8 ,
197a sensors monitoring and logging daemon.
198.It Va sensorsd_flags
199.Pq Vt str
200Empty by default.
201Additional flags passed to the
202.Xr sensorsd 8
203program.
204.It Va hotplugd_enable
205.Pq Vt bool
206Set to
207.Dq Li NO
208by default.
209Setting this to
210.Dq Li YES
211enables
212.Xr hotplugd 8 ,
213a devices hot plugging monitoring daemon.
214.It Va hotplugd_flags
215.Pq Vt str
216Empty by default.
217Additional flags passed to the
218.Xr hotplugd 8
219program.
220.It Va pccard_ifconfig
221.Pq Vt str
222List of arguments to be passed to
223.Xr ifconfig 8
224at boot time or on insertion of the card (e.g.\&
225.Dq Cm inet Li 192.168.1.1 Cm netmask Li 255.255.255.0
226for a fixed address or
227.Dq Li DHCP
228for a DHCP client).
229.It Va pccard_ether_delay
230.Pq Vt str
231Set the delay before starting
232.Xr dhclient 8
233in the
234.Pa /etc/pccard_ether
235script.
236This defaults to 5 seconds to work around a bug in the
237.Xr ed 4
238driver which can lead to system hangs when using some newer
239.Xr ed 4
240based cards.
241.It Va removable_interfaces
242.Pq Vt str
243List of removable network interfaces to be supported by
244.Pa /etc/pccard_ether .
245.It Va local_startup
246.Pq Vt str
247List of directories to search for startup script files.
248.It Va script_name_sep
249.Pq Vt str
250The field separator to use for breaking down the list of startup script files
251into individual filenames.
252The default is a space.
253It is not necessary to change this unless there are startup scripts with names
254containing spaces.
255.It Va hostapd_enable
256.Pq Vt bool
257Set to
258.Dq Li YES
259to start
260.Xr hostapd 8
261at system boot time.
262.It Va hostname
263.Pq Vt str
264The fully qualified domain name (FQDN) of this host on the network.
265This should almost certainly be set to something meaningful, even if
266there is no network connection.
267If
268.Xr dhclient 8
269is used to set the hostname via DHCP,
270this variable should be set to an empty string.
271.It Va ipv6_enable
272.Pq Vt bool
273Enable support for IPv6 networking.
274Note that this requires that the kernel have been compiled with
275.Cd "options INET6" .
276.It Va nisdomainname
277.Pq Vt str
278The NIS domain name of this host, or
279.Dq Li NO
280if NIS is not used.
281.It Va dhclient_program
282.Pq Vt str
283Path to the DHCP client program
284(default
285.Pa /sbin/dhclient ) .
286.It Va dhclient_flags
287.Pq Vt str
288Additional flags to pass to the DHCP client program.
289.It Va pf_enable
290.Pq Vt bool
291Set to
292.Dq Li YES
293to load
294.Xr pf 4
295at startup.
296If the kernel was not built with
297.Cd "device pf" ,
298the
299.Pa pf.ko
300kernel module will be loaded.
301See also
302.Va firewall_enable .
303.It Va pf_rules
304.Pq Vt str
305Path to the
306.Xr pf 4
307ruleset definition file.
308.It Va pf_program
309.Pq Vt str
310Path to
311.Xr pfctl 8 .
312.It Va pf_flags
313.Pq Vt str
314If
315.Va pf_enable
316is set to
317.Dq Li YES ,
318these are the flags to pass to
319.Xr pfctl 8
320when loading the ruleset.
321.It Va pflog_enable
322.Pq Vt bool
323Set this to
324.Dq Li YES
325to enable
326.Xr pflogd 8
327which logs packets from
328.Xr pf 4 .
329.It Va pflog_logfile
330.Pq Vt str
331If
332.Va pflog_enable
333is set to
334.Dq Li YES
335this specifies the path of the log file.
336.It Va pflog_program
337.Pq Vt str
338Path to
339.Xr pflogd 8 .
340.It Va pflog_flags
341.Pq Vt str
342If
343.Va pflog_enable
344is set to
345.Dq Li YES ,
346these are the flags to pass to
347.Xr pflogd 8 .
348.It Va firewall_enable
349.Pq Vt bool
350Set to
351.Dq Li YES
352to load firewall rules at startup.
353If the kernel was not built with
354.Cd "options IPFIREWALL" ,
355the
356.Pa ipfw.ko
357kernel module will be loaded.
358See also
359.Va pf_enable .
360.It Va ipv6_firewall_enable
361.Pq Vt bool
362The IPv6 equivalent of
363.Va firewall_enable .
364Set to
365.Dq Li YES
366to load IPv6 firewall rules at startup.
367If the kernel was not built with
368.Cd "options IPV6FIREWALL" ,
369the
370.Pa ip6fw.ko
371kernel module will be loaded.
372.It Va firewall_script
373.Pq Vt str
374The full path to the firewall script to run
375(default
376.Pa /etc/rc.firewall ) .
377.It Va ipv6_firewall_script
378.Pq Vt str
379The IPv6 equivalent of
380.Va firewall_script .
381.It Va firewall_type
382.Pq Vt str
383Names the firewall type from the selection in
384.Pa /etc/rc.firewall ,
385or the file which contains the local firewall ruleset.
386Valid selections from
387.Pa /etc/rc.firewall
388are:
389.Pp
390.Bl -tag -width ".Li simple" -compact
391.It Li open
392unrestricted IP access
393.It Li closed
394all IP services disabled, except via
395.Dq Li lo0
396.It Li client
397basic protection for a workstation on a LAN
398.It Li simple
399alias for
400.Li client .
401.El
402.Pp
403If a filename is specified, the full path must be given.
404.It Va firewall_trusted_nets
405.Pq Vt str
406List of trusted networks (if
407.Va firewall_type
408is set to
409.Li client ) .
410.It Va firewall_trusted_interfaces
411.Pq Vt str
412List of trusted network interfaces (if
413.Va firewall_type
414is set to
415.Li client ) .
416.It Va firewall_allowed_icmp_types
417.Pq Vt str
418List of allowed ICMP types (if
419.Va firewall_type
420is set to
421.Li client ) .
422.It Va firewall_open_tcp_ports
423.Pq Vt str
424List of TCP ports to open (if
425.Va firewall_type
426is set to
427.Li client ) .
428.It Va firewall_open_udp_ports
429.Pq Vt str
430List of UDP ports to open (if
431.Va firewall_type
432is set to
433.Li client ) .
434.It Va ipv6_firewall_type
435.Pq Vt str
436The IPv6 equivalent of
437.Va firewall_type .
438.It Va firewall_quiet
439.Pq Vt bool
440Set to
441.Dq Li YES
442to disable the display of firewall rules on the console during boot.
443.It Va ipv6_firewall_quiet
444.Pq Vt bool
445The IPv6 equivalent of
446.Va firewall_quiet .
447.It Va firewall_logging
448.Pq Vt bool
449Set to
450.Dq Li YES
451to enable firewall event logging.
452This is equivalent to the
453.Dv IPFIREWALL_VERBOSE
454kernel option.
455.It Va ipv6_firewall_logging
456.Pq Vt bool
457The IPv6 equivalent of
458.Va firewall_logging .
459.It Va firewall_flags
460.Pq Vt str
461Flags passed to
462.Xr ipfw 8
463if
464.Va firewall_type
465specifies a filename.
466.It Va ipv6_firewall_flags
467.Pq Vt str
468The IPv6 equivalent of
469.Va firewall_flags .
470.It Va natd_program
471.Pq Vt str
472Path to
473.Xr natd 8 .
474.It Va natd_enable
475.Pq Vt bool
476Set to
477.Dq Li YES
478to enable
479.Xr natd 8 .
480.Va firewall_enable
481must also be set to
482.Dq Li YES ,
483and
484.Xr divert 4
485sockets must be enabled in the kernel.
486.It Va natd_interface
487.Pq Vt str
488This is the name of the public interface on which
489.Xr natd 8
490should run.
491The interface may be given as an interface name or as an IP address.
492.It Va natd_flags
493.Pq Vt str
494Additional
495.Xr natd 8
496flags should be placed here.
497The
498.Fl n
499or
500.Fl a
501flag is automatically added with the above
502.Va natd_interface
503as an argument.
504.It Va tcp_extensions
505.Pq Vt bool
506Set to
507.Dq Li YES
508by default.
509Setting this to
510.Dq Li NO
511disables certain TCP options as described by
512.Rs
513.%T "RFC 1323"
514.Re
515Setting this to
516.Dq Li NO
517might help remedy such problems with connections as randomly hanging
518or other weird behavior.
519Some network devices are known to be broken with respect to these options.
520.It Va log_in_vain
521.Pq Vt int
522Set to 0 by default.
523The
524.Xr sysctl 8
525variables,
526.Va net.inet.tcp.log_in_vain
527and
528.Va net.inet.udp.log_in_vain ,
529as described in
530.Xr tcp 4
531and
532.Xr udp 4 ,
533are set to the given value.
534.It Va tcp_keepalive
535.Pq Vt bool
536Set to
537.Dq Li YES
538by default.
539Setting to
540.Dq Li NO
541will disable probing idle TCP connections to verify that the
542peer is still up and reachable.
543.It Va tcp_drop_synfin
544.Pq Vt bool
545Set to
546.Dq Li NO
547by default.
548Setting to
549.Dq Li YES
550will cause the kernel to ignore TCP frames that have both
551the SYN and FIN flags set.
552This prevents OS fingerprinting, but may break some legitimate applications.
553This option is only available if the kernel was built with the
554.Dv TCP_DROP_SYNFIN
555option.
556.It Va icmp_drop_redirect
557.Pq Vt bool
558Set to
559.Dq Li NO
560by default.
561Setting to
562.Dq Li YES
563will cause the kernel to ignore ICMP REDIRECT packets.
564Refer to
565.Xr icmp 4
566for more information.
567.It Va icmp_log_redirect
568.Pq Vt bool
569Set to
570.Dq Li NO
571by default.
572Setting to
573.Dq Li YES
574will cause the kernel to log ICMP REDIRECT packets.
575Note that
576the log messages are not rate-limited, so this option should only be used
577for troubleshooting networks.
578Refer to
579.Xr icmp 4
580for more information.
581.It Va icmp_bmcastecho
582.Pq Vt bool
583Set to
584.Dq Li YES
585to respond to broadcast or multicast ICMP ping packets.
586Refer to
587.Xr icmp 4
588for more information.
589.It Va ip_portrange_first
590.Pq Vt int
591If not set to
592.Dq Li NO ,
593this is the first port in the default portrange.
594Refer to
595.Xr ip 4
596for more information.
597.It Va ip_portrange_last
598.Pq Vt int
599If not set to
600.Dq Li NO ,
601this is the last port in the default portrange.
602Refer to
603.Xr ip 4
604for more information.
605.\"
606.It Va ifconfig_ Ns Aq Ar interface
607.Pq Vt str
608Configuration for
609.Dq interface .
610Typically includes IP address.
611Assuming that the interface in question was
612.Li ed0 ,
613it might look something like this:
614.Bd -literal
615ifconfig_ed0="inet 10.0.0.1 netmask 0xffff0000"
616.Ed
617.Pp
618If the
619.Pa /etc/start_if. Ns Aq Ar interface
620file is present, it is read and executed by the
621.Xr sh 1
622interpreter before configuring the interface as specified in the
623.Va ifconfig_ Ns Aq Ar interface
624and
625.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n
626variables.
627.Pp
628It is possible to bring up an interface with DHCP by adding
629.Dq Li DHCP
630to the
631.Va ifconfig_ Ns Aq Ar interface
632variable.
633For instance, to initialize the
634.Li ed0
635device via DHCP, it is possible to use something like:
636.Bd -literal
637ifconfig_ed0="DHCP"
638.Ed
639.Pp
640If a
641.Va wlans_ Ns Aq Ar interface
642variable is set,
643an
644.Xr wlan 4
645interface will be created for each item in the list with the
646.Ar wlandev
647argument set to
648.Ar interface .
649Further wlan cloning arguments may be passed to the
650.Xr ifconfig 8
651.Cm create
652command by setting the
653.Va create_args_ Ns Aq Ar interface
654variable.
655One or more
656.Xr wlan 4
657devices must be created for each wireless devices as of
658.Dx 2.5 .
659Debugging flags for
660.Xr wlan 4
661devices as set by
662.Xr wlandebug 8
663may be specified with an
664.Va wlandebug_ Ns Aq Ar interface
665variable.
666The contents of this variable will be passed directly to
667.Xr wlandebug 8 .
668.Pp
669Also, if your interface needs WPA authentication, it is possible to add
670.Dq Li WPA
671to the
672.Va ifconfig_ Ns Aq Ar interface
673variable.
674This will start
675.Xr wpa_supplicant 8 .
676See
677.Xr wpa_supplicant.conf 5
678for configuring authentication information.
679.Pp
680Finally, you can add
681.Xr ifconfig 8
682options in this variable, in addition to the
683.Pa /etc/start_if. Ns Aq Ar interface
684file.
685For instance, to initialize the
686.Li wi0
687device via DHCP, using WPA authentication and 802.11b mode, it is
688possible to use something like:
689.Bd -literal
690wlans_wi0="wlan0"
691ifconfig_wlan0="up DHCP WPA mode 11b"
692.Ed
693.Pp
694.\"
695.It Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n
696.Pq Vt str
697Configuration to establish an additional network address for
698.Dq interface .
699Assuming that the interface in question was
700.Li ed0 ,
701it might look something like this:
702.Bd -literal
703ifconfig_ed0_alias0="inet 127.0.0.253 netmask 0xffffffff"
704ifconfig_ed0_alias1="inet 127.0.0.254 netmask 0xffffffff"
705.Ed
706.Pp
707And so on.
708For each
709.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n
710entry that is found, its contents are passed to
711.Xr ifconfig 8 .
712Execution stops at the first unsuccessful access, so if
713something like this is present:
714.Bd -literal
715ifconfig_ed0_alias0="inet 127.0.0.251 netmask 0xffffffff"
716ifconfig_ed0_alias1="inet 127.0.0.252 netmask 0xffffffff"
717ifconfig_ed0_alias2="inet 127.0.0.253 netmask 0xffffffff"
718ifconfig_ed0_alias4="inet 127.0.0.254 netmask 0xffffffff"
719.Ed
720.Pp
721Then note that alias4 would
722.Em not
723be added since the search would stop with the missing alias3 entry.
724.Pp
725.\"
726.It Va ifconfig_ Ns Ao Ar interface Ac Ns Va _name
727.Pq Vt str
728New name for
729.Dq interface .
730It is possible to rename interface by doing:
731.Bd -literal
732ifconfig_ed0_name="net0"
733ifconfig_net0="inet 10.0.0.1 netmask 0xffff0000"
734.Ed
735.It Va network_interfaces
736.Pq Vt str
737The list of network interfaces to configure on this host,
738or
739.Dq Li auto
740to configure all network interfaces
741(default
742.Dq Li auto ) .
743For example, if the only network devices to be configured are the loopback device
744.Pq Li lo0
745and a NIC using the
746.Xr ed 4
747driver, this could be set to
748.Dq Li "lo0 ed0" .
749An
750.Va ifconfig_ Ns Aq Ar interface
751variable is assumed to exist for each value of
752.Ar interface .
753.It Va ipv6_network_interfaces
754.Pq Vt str
755This is the IPv6 equivalent of
756.Va network_interfaces .
757Instead of setting the ifconfig variables as
758.Va ifconfig_ Ns Aq Ar interface
759they should be set as
760.Va ipv6_ifconfig_ Ns Aq Ar interface .
761Aliases should be set as
762.Va ipv6_ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n .
763Interfaces that do not have a
764.Va ipv6_ifconfig_ Ns Aq Ar interface
765setting will be auto configured by
766.Xr rtsol 8
767if the
768.Va ipv6_gateway_enable
769is set to
770.Dq Li NO .
771Note that the IPv6 networking code does not support the
772.Pa /etc/start_if. Ns Aq Ar interface
773files.
774.It Va ipv6_prefix_ Ns Aq Ar interface
775.Pq Vt str
776Assign prefix to
777.Ar interface ,
778prefixlen 64 is used.
779.It Va ipv6_default_interface
780.Pq Vt str
781If not set to
782.Dq Li NO ,
783this is the default output interface for scoped addresses.
784Now this works only for IPv6 link local multicast addresses.
785.It Va cloned_interfaces
786.Pq Vt str
787Set to the list of clonable network interfaces to create on this host.
788Entries in
789.Va cloned_interfaces
790are automatically appended to
791.Va network_interfaces
792for configuration.
793.It Va gif_interfaces
794.Pq Vt str
795Set to the list of
796.Xr gif 4
797tunnel interfaces to configure on this host.
798A
799.Va gifconfig_ Ns Aq Ar interface
800variable is assumed to exist for each value of
801.Ar interface .
802The value of this variable is used to configure the link layer of the
803tunnel according to the syntax of the
804.Cm tunnel
805option to
806.Xr ifconfig 8 .
807Additionally, this option ensures that each listed interface is created via the
808.Cm create
809option to
810.Xr ifconfig 8
811before attempting to configure it.
812.It Va sppp_interfaces
813.Pq Vt str
814Set to the list of
815.Xr sppp 4
816interfaces to configure on this host.
817A
818.Va spppconfig_ Ns Aq Ar interface
819variable is assumed to exist for each value of
820.Ar interface .
821Each interface should also be configured by a general
822.Va ifconfig_ Ns Aq Ar interface
823setting.
824Refer to
825.Xr spppcontrol 8
826for more information about available options.
827.It Va ppp_enable
828.Pq Vt bool
829If set to
830.Dq Li YES ,
831run the
832.Xr ppp 8
833daemon.
834.It Va ppp_mode
835.Pq Vt str
836Mode in which to run the
837.Xr ppp 8
838daemon.
839Accepted modes are
840.Dq Li auto ,
841.Dq Li ddial ,
842.Dq Li direct
843and
844.Dq Li dedicated .
845See the manual for a full description.
846.It Va ppp_nat
847.Pq Vt bool
848If set to
849.Dq Li YES ,
850enables network address translation.
851Used in conjunction with
852.Va gateway_enable
853allows hosts on private network addresses access to the Internet using
854this host as a network address translating router.
855.It Va ppp_profile
856.Pq Vt str
857The name of the profile to use from
858.Pa /etc/ppp/ppp.conf .
859.It Va ppp_user
860.Pq Vt str
861The name of the user under which
862.Xr ppp 8
863should be started.
864By default,
865.Xr ppp 8
866is started as
867.Dq Li root .
868.It Va rc_conf_files
869.Pq Vt str
870This option is used to specify a list of files that will override
871the settings in
872.Pa /etc/defaults/rc.conf .
873The files will be read in the order in which they are specified and should
874include the full path to the file.
875By default, the files specified are
876.Pa /etc/rc.conf
877and
878.Pa /etc/rc.conf.local
879.It Va fsck_y_enable
880.Pq Vt bool
881If set to
882.Dq Li YES ,
883.Xr fsck 8
884will be run with the
885.Fl y
886flag if the initial preen of the file systems fails.
887.It Va netfs_types
888.Pq Vt str
889List of file system types that are network-based.
890This list should generally not be modified by end users.
891Use
892.Va extra_netfs_types
893instead.
894.It Va extra_netfs_types
895.Pq Vt str
896If set to something other than
897.Dq Li NO
898(the default), this variable extends the list of file system types
899for which automatic mounting at startup by
900.Xr rc 8
901should be delayed until the network is initialized.
902It should contain
903a whitespace-separated list of network file system descriptor pairs,
904each consisting of a file system type as passed to
905.Xr mount 8
906and a human-readable, one-word description, joined with a colon
907.Pq Ql \&: .
908Extending the default list in this way is only necessary
909when third party file system types are used.
910.It Va devfs_config_files
911.Pq Vt str
912This option is used to specify a list of configuration files containing
913.Xr devfs 5
914rules that will be applied by
915.Xr devfsctl 8
916in the order in which they are specified and must include the full path
917to the file.
918.It Va syslogd_enable
919.Pq Vt bool
920If set to
921.Dq Li YES ,
922run the
923.Xr syslogd 8
924daemon.
925.It Va syslogd_program
926.Pq Vt str
927Path to
928.Xr syslogd 8
929(default
930.Pa /usr/sbin/syslogd ) .
931.It Va syslogd_flags
932.Pq Vt str
933If
934.Va syslogd_enable
935is set to
936.Dq Li YES ,
937these are the flags to pass to
938.Xr syslogd 8 .
939.It Va inetd_enable
940.Pq Vt bool
941If set to
942.Dq Li YES ,
943run the
944.Xr inetd 8
945daemon.
946.It Va inetd_program
947.Pq Vt str
948Path to
949.Xr inetd 8
950(default
951.Pa /usr/sbin/inetd ) .
952.It Va inetd_flags
953.Pq Vt str
954If
955.Va inetd_enable
956is set to
957.Dq Li YES ,
958these are the flags to pass to
959.Xr inetd 8 .
960.It Va rwhod_enable
961.Pq Vt bool
962If set to
963.Dq Li YES ,
964run the
965.Xr rwhod 8
966daemon at boot time.
967.It Va rwhod_flags
968.Pq Vt str
969If
970.Va rwhod_enable
971is set to
972.Dq Li YES ,
973these are the flags to pass to it.
974.It Va amd_enable
975.Pq Vt bool
976If set to
977.Dq Li YES ,
978run the
979.Xr amd 8
980daemon at boot time.
981.It Va amd_flags
982.Pq Vt str
983If
984.Va amd_enable
985is set to
986.Dq Li YES ,
987these are the flags to pass to it.
988See the
989.Xr amd 8
990manpage for more information.
991.It Va amd_map_program
992.Pq Vt str
993If set, the specified program is run to get the list of
994.Xr amd 8
995maps.
996For example, if the
997.Xr amd 8
998maps are stored in NIS, one can set this to run
999.Xr ypcat 1
1000to get a list of
1001.Xr amd 8
1002maps from the
1003.Pa amd.master
1004NIS map.
1005.It Va update_motd
1006.Pq Vt bool
1007If set to
1008.Dq Li YES ,
1009.Pa /etc/motd
1010will be updated at boot time to reflect the kernel release being run.
1011If set to
1012.Dq Li NO ,
1013.Pa /etc/motd
1014will not be updated.
1015.It Va nfs_client_enable
1016.Pq Vt bool
1017If set to
1018.Dq Li YES ,
1019setup NFS client parameters at boot time.
1020.It Va nfs_access_cache
1021.Pq Vt int
1022If
1023.Va nfs_client_enable
1024is set to
1025.Dq Li YES ,
1026this can be set to
1027.Dq Li 0
1028to disable NFS ACCESS RPC caching, or to the number of seconds for which
1029NFS ACCESS results should be cached.
1030A value of 2-10 seconds will substantially reduce network traffic for
1031many NFS operations.
1032The default is 5 seconds.
1033Note that the attribute cache holds stat information only.
1034The NFS data cache is independent of the attribute cache and is only
1035invalidated when the client detects that the server has modified the
1036underlying file.
1037This value specifies a maximum timeout.
1038The NFS client will automatically use a shorter timeout for files which
1039have been recently modified.
1040.It Va nfs_neg_cache
1041.Pq Vt int
1042If
1043.Va nfs_client_enable
1044is set to
1045.Dq Li YES ,
1046this can be set to
1047.Dq Li 0
1048to disable the caching of NEGATIVE LOOKUPS (lookups of non-existent
1049filenames), or to the number of seconds for which negative lookups should
1050be cached.
1051A value of 2-10 seconds will substantially reduce network
1052traffic for many NFS operations, especially source code builds.
1053The default is 3 seconds.
1054.It Va nfs_server_enable
1055.Pq Vt bool
1056If set to
1057.Dq Li YES ,
1058run the NFS server daemons at boot time.
1059.It Va nfs_server_flags
1060.Pq Vt str
1061If
1062.Va nfs_server_enable
1063is set to
1064.Dq Li YES ,
1065these are the flags to pass to the
1066.Xr nfsd 8
1067daemon.
1068.It Va mountd_enable
1069.Pq Vt bool
1070If set to
1071.Dq Li YES ,
1072and no
1073.Va nfs_server_enable
1074is set, start
1075.Xr mountd 8 ,
1076but not
1077.Xr nfsd 8
1078daemon.
1079It is commonly needed to run CFS without real NFS used.
1080.It Va mountd_flags
1081.Pq Vt str
1082If
1083.Va mountd_enable
1084is set to
1085.Dq Li YES ,
1086these are the flags to pass to the
1087.Xr mountd 8
1088daemon.
1089.It Va weak_mountd_authentication
1090.Pq Vt bool
1091If set to
1092.Dq Li YES ,
1093allow services like PCNFSD to make non-privileged mount requests.
1094.It Va nfs_reserved_port_only
1095.Pq Vt bool
1096If set to
1097.Dq Li YES ,
1098provide NFS services only on a secure port.
1099.It Va nfs_bufpackets
1100.Pq Vt int
1101If set to a number, indicates the number of packets worth of
1102socket buffer space to reserve on an NFS client.
1103The kernel default is typically 4.
1104Using a higher number may be useful on gigabit networks to improve performance.
1105The minimum value is 2 and the maximum is 64.
1106.It Va rpc_umntall_enable
1107.Pq Vt bool
1108If set to
1109.Dq Li YES
1110(default) and we are also an NFS client, run
1111.Xr rpc.umntall 8
1112at boot time to clear out old mounts on remote servers.
1113If set to
1114.Dq Li NO
1115then
1116.Xr rpc.umntall 8
1117will not be run at boot time.
1118.It Va rpc_lockd_enable
1119.Pq Vt bool
1120If set to
1121.Dq Li YES
1122and also an NFS server, run
1123.Xr rpc.lockd 8
1124at boot time.
1125.It Va rpc_lockd_flags
1126.Pq Vt str
1127If
1128.Va rpc_lockd_enable
1129is set to
1130.Dq Li YES ,
1131these are the flags to pass to
1132.Xr rpc.lockd 8 .
1133.It Va rpc_statd_enable
1134.Pq Vt bool
1135If set to
1136.Dq Li YES
1137and also an NFS server, run
1138.Xr rpc.statd 8
1139at boot time.
1140.It Va rpc_statd_flags
1141.Pq Vt str
1142If
1143.Va rpc_statd_enable
1144is set to
1145.Dq Li YES ,
1146these are the flags to pass to
1147.Xr rpc.statd 8 .
1148.It Va rpcbind_program
1149.Pq Vt str
1150Path to program for rpcbind daemon
1151(default
1152.Pa /usr/sbin/rpcbind ) .
1153.It Va rpcbind_enable
1154.Pq Vt bool
1155If set to
1156.Dq Li YES ,
1157run
1158.Va rpcbind_program
1159at boot time.
1160.It Va rpcbind_flags
1161.Pq Vt str
1162If
1163.Va rpcbind_enable
1164is set to
1165.Dq Li YES ,
1166these are the flags to pass to
1167.Va rpcbind_program .
1168.It Va keyserv_enable
1169.Pq Vt bool
1170If set to
1171.Dq Li YES ,
1172run the
1173.Xr keyserv 8
1174daemon on boot for running Secure RPC.
1175.It Va keyserv_flags
1176.Pq Vt str
1177If
1178.Va keyserv_enable
1179is set to
1180.Dq Li YES ,
1181these are the flags to pass to
1182.Xr keyserv 8
1183daemon.
1184.It Va pppoed_enable
1185.Pq Vt bool
1186If set to
1187.Dq Li YES ,
1188run the
1189.Xr pppoed 8
1190daemon at boot time to provide PPP over Ethernet services.
1191.It Va pppoed_provider
1192.Pq Vt str
1193.Xr pppoed 8
1194listens to requests to this provider and ultimately runs
1195.Xr ppp 8
1196with a
1197.Ar system
1198argument of the same name.
1199.It Va pppoed_flags
1200.Pq Vt str
1201Additional flags to pass to
1202.Xr pppoed 8 .
1203.It Va pppoed_interface
1204.Pq Vt str
1205The network interface to run
1206.Xr pppoed 8
1207on.
1208This is mandatory when
1209.Va pppoed_enable
1210is set to
1211.Dq Li YES .
1212.It Va timed_enable
1213.Pq Vt bool
1214If set to
1215.Dq Li YES ,
1216run the
1217.Xr timed 8
1218service at boot time.
1219This command is intended for networks of machines where a consistent
1220.Dq "network time"
1221for all hosts must be established.
1222This is often useful in large NFS environments where time stamps on
1223files are expected to be consistent network-wide.
1224.It Va timed_flags
1225.Pq Vt str
1226If
1227.Va timed_enable
1228is set to
1229.Dq Li YES ,
1230these are the flags to pass to the
1231.Xr timed 8
1232service.
1233.It Va dntpd_enable
1234.Pq Vt bool
1235If set to
1236.Dq Li YES ,
1237run
1238.Xr dntpd 8
1239at system boot time.
1240.It Va dntpd_program
1241.Pq Vt str
1242Path to
1243.Xr dntpd 8
1244(default
1245.Pa /usr/sbin/dntpd ) .
1246.It Va dntpd_flags
1247.Pq Vt str
1248If
1249.Va dntpd_enable
1250is set to
1251.Dq Li YES ,
1252these are the flags to pass to the
1253.Xr dntpd 8
1254daemon.
1255.It Va btconfig_enable
1256.Pq Vt bool
1257If set to
1258.Dq Li YES ,
1259configure Bluetooth devices via
1260.Xr btconfig 8
1261at system boot time.
1262.It Va btconfig_devices
1263.Pq Vt str
1264If
1265.Va btconfig_enable
1266is set to
1267.Dq Li YES ,
1268this is the list of Bluetooth devices to configure.
1269If
1270.Va btconfig_devices
1271is not specified, all devices known to the system will be configured.
1272A
1273.Va btconfig_ Ns Aq Ar device
1274variable can be set to specify parameters to be passed to
1275.Ar device .
1276.It Va btconfig_args
1277.Pq Vt str
1278If
1279.Va btconfig_enable
1280is set to
1281.Dq Li YES ,
1282this is the list of configuration parameters to pass to all Bluetooth
1283devices.
1284.It Va sdpd_enable
1285.Pq Vt bool
1286If set to
1287.Dq Li YES ,
1288run the Service Discovery Profile daemon
1289.Xr ( sdpd 8 )
1290at system boot time.
1291.It Va sdpd_flags
1292.Pq Vt str
1293If
1294.Va sdpd_enable
1295is set to
1296.Dq Li YES ,
1297these are the flags to pass to the
1298.Xr sdpd 8
1299daemon.
1300.It Va bthcid_enable
1301.Pq Vt bool
1302If set to
1303.Dq Li YES ,
1304run the Bluetooth Link Key/PIN Code Manager daemon
1305.Xr ( bthcid 8 )
1306at system boot time.
1307.It Va bthcid_flags
1308.Pq Vt str
1309If
1310.Va bthcid_enable
1311is set to
1312.Dq Li YES ,
1313these are the flags to pass to the
1314.Xr bthcid 8
1315daemon.
1316.It Va nis_client_enable
1317.Pq Vt bool
1318If set to
1319.Dq Li YES ,
1320run the
1321.Xr ypbind 8
1322service at system boot time.
1323.It Va nis_client_flags
1324.Pq Vt str
1325If
1326.Va nis_client_enable
1327is set to
1328.Dq Li YES ,
1329these are the flags to pass to the
1330.Xr ypbind 8
1331service.
1332.It Va nis_ypset_enable
1333.Pq Vt bool
1334If set to
1335.Dq Li YES ,
1336run the
1337.Xr ypset 8
1338daemon at system boot time.
1339.It Va nis_ypset_flags
1340.Pq Vt str
1341If
1342.Va nis_ypset_enable
1343is set to
1344.Dq Li YES ,
1345these are the flags to pass to the
1346.Xr ypset 8
1347daemon.
1348.It Va nis_server_enable
1349.Pq Vt bool
1350If set to
1351.Dq Li YES ,
1352run the
1353.Xr ypserv 8
1354daemon at system boot time.
1355.It Va nis_server_flags
1356.Pq Vt str
1357If
1358.Va nis_server_enable
1359is set to
1360.Dq Li YES ,
1361these are the flags to pass to the
1362.Xr ypserv 8
1363daemon.
1364.It Va nis_ypxfrd_enable
1365.Pq Vt bool
1366If set to
1367.Dq Li YES ,
1368run the
1369.Xr rpc.ypxfrd 8
1370daemon at system boot time.
1371.It Va nis_ypxfrd_flags
1372.Pq Vt str
1373If
1374.Va nis_ypxfrd_enable
1375is set to
1376.Dq Li YES ,
1377these are the flags to pass to the
1378.Xr rpc.ypxfrd 8
1379daemon.
1380.It Va nis_yppasswdd_enable
1381.Pq Vt bool
1382If set to
1383.Dq Li YES ,
1384run the
1385.Xr rpc.yppasswdd 8
1386daemon at system boot time.
1387.It Va nis_yppasswdd_flags
1388.Pq Vt str
1389If
1390.Va nis_yppasswdd_enable
1391is set to
1392.Dq Li YES ,
1393these are the flags to pass to the
1394.Xr rpc.yppasswdd 8
1395daemon.
1396.It Va rpc_ypupdated_enable
1397.Pq Vt bool
1398If set to
1399.Dq Li YES ,
1400run the
1401.Nm rpc.ypupdated
1402daemon at system boot time.
1403.It Va defaultrouter
1404.Pq Vt str
1405If not set to
1406.Dq Li NO ,
1407create a default route to this host name or IP address
1408(use an IP address if this router is also required to get to the
1409name server!).
1410.It Va ipv6_defaultrouter
1411.Pq Vt str
1412The IPv6 equivalent of
1413.Va defaultrouter .
1414.It Va static_routes
1415.Pq Vt str
1416Set to the list of static routes that are to be added at system boot time.
1417If not set to
1418.Dq Li NO
1419then for each whitespace separated
1420.Ar element
1421in the value, a
1422.Va route_ Ns Aq Ar element
1423variable is assumed to exist whose contents will later be passed to a
1424.Dq Nm route Cm add
1425operation.
1426.It Va change_routes
1427.Pq Vt str
1428Set to the list of static routes that are to be changed at system boot time
1429(such as those added by the kernel).
1430If not set to
1431.Dq Li NO
1432then for each whitespace separated
1433.Ar element
1434in the value, a
1435.Va change_route_ Ns Aq Ar element
1436variable is assumed to exist whose contents will later be passed to a
1437.Dq Nm route Cm change
1438operation.
1439.It Va ipv6_static_routes
1440.Pq Vt str
1441The IPv6 equivalent of
1442.Va static_routes .
1443If not set to
1444.Dq Li NO
1445then for each whitespace separated
1446.Ar element
1447in the value, a
1448.Va ipv6_route_ Ns Aq Ar element
1449variable is assumed to exist whose contents will later be passed to a
1450.Dq Nm route Cm add Fl inet6
1451operation.
1452.It Va gateway_enable
1453.Pq Vt bool
1454If set to
1455.Dq Li YES ,
1456configure host to act as an IP router, e.g. to forward packets
1457between interfaces.
1458.It Va ipv6_gateway_enable
1459.Pq Vt bool
1460The IPv6 equivalent of
1461.Va gateway_enable .
1462.It Va router_enable
1463.Pq Vt bool
1464If set to
1465.Dq Li YES ,
1466run a routing daemon of some sort, based on the settings of
1467.Va router_program
1468and
1469.Va router_flags .
1470.It Va ipv6_router_enable
1471.Pq Vt bool
1472The IPv6 equivalent of
1473.Va router_enable .
1474If set to
1475.Dq Li YES ,
1476run a routing daemon of some sort, based on the settings of
1477.Va ipv6_router_program
1478and
1479.Va ipv6_router_flags .
1480.It Va router_program
1481.Pq Vt str
1482If
1483.Va router_enable
1484is set to
1485.Dq Li YES ,
1486this is the name of the routing daemon to use
1487(default
1488.Pa /sbin/routed ) .
1489.It Va ipv6_router_program
1490.Pq Vt str
1491The IPv6 equivalent of
1492.Va router_program
1493(default
1494.Pa /sbin/route6d ) .
1495.It Va router_flags
1496.Pq Vt str
1497If
1498.Va router_enable
1499is set to
1500.Dq Li YES ,
1501these are the flags to pass to the routing daemon.
1502.It Va ipv6_router_flags
1503.Pq Vt str
1504The IPv6 equivalent of
1505.Va router_flags .
1506.It Va mrouted_enable
1507.Pq Vt bool
1508If set to
1509.Dq Li YES ,
1510run the multicast routing daemon,
1511.Xr mrouted 8 .
1512.It Va mroute6d_enable
1513.Pq Vt bool
1514The IPv6 equivalent of
1515.Va mrouted_enable .
1516If set to
1517.Dq Li YES ,
1518run the IPv6 multicast routing daemon.
1519Note that no IPv6 multicast routing daemon is included in the
1520.Dx
1521base system but
1522.Xr pim6dd 8
1523can be installed from the
1524.Xr pkgsrc 7
1525collection.
1526.It Va mrouted_flags
1527.Pq Vt str
1528If
1529.Va mrouted_enable
1530is set to
1531.Dq Li YES ,
1532these are the flags to pass to the
1533.Xr mrouted 8
1534daemon.
1535.It Va mroute6d_flags
1536.Pq Vt str
1537The IPv6 equivalent of
1538.Va mrouted_flags .
1539If
1540.Va mroute6d_enable
1541is set to
1542.Dq Li YES ,
1543these are the flags passed to the IPv6 multicast routing daemon.
1544.It Va mroute6d_program
1545.Pq Vt str
1546If
1547.Va mroute6d_enable
1548is set to
1549.Dq Li YES ,
1550this is the path to the IPv6 multicast routing daemon.
1551.It Va rtadvd_enable
1552.Pq Vt bool
1553If set to
1554.Dq Li YES ,
1555run the
1556.Xr rtadvd 8
1557daemon at boot time.
1558.Xr rtadvd 8
1559will only run if
1560.Va ipv6_gateway_enable
1561is also set to
1562.Dq Li YES .
1563The
1564.Xr rtadvd 8
1565utility sends router advertisement packets to the interfaces specified in
1566.Va rtadvd_interfaces .
1567.Xr rtadvd 8
1568and should only be enabled with great care.
1569You may want to fine-tune
1570.Xr rtadvd.conf 5 .
1571.It Va rtadvd_interfaces
1572.Pq Vt str
1573If
1574.Va rtadvd_enable
1575is set to
1576.Dq Li YES
1577this is the list of interfaces to use.
1578.It Va rtsold_enable
1579.Pq Vt bool
1580If set to
1581.Dq Li YES ,
1582run the
1583.Xr rtsold 8
1584daemon at boot time.
1585The
1586.Xr rtsold 8
1587daemon is used for automatic discovery of non-link local addresses.
1588.It Va rtsold_flags
1589.Pq Vt str
1590If
1591.Va rtsold_enable
1592is set to
1593.Dq Li YES ,
1594these are the flags to pass to the
1595.Xr rtsold 8
1596daemon.
1597.It Va ipxgateway_enable
1598.Pq Vt bool
1599If set to
1600.Dq Li YES ,
1601enable the routing of IPX traffic.
1602.It Va ipxrouted_enable
1603.Pq Vt bool
1604If set to
1605.Dq Li YES ,
1606run the
1607.Xr IPXrouted 8
1608daemon at system boot time.
1609.It Va ipxrouted_flags
1610.Pq Vt str
1611If
1612.Va ipxrouted_enable
1613is set to
1614.Dq Li YES ,
1615these are the flags to pass to the
1616.Xr IPXrouted 8
1617daemon.
1618.It Va arpproxy_all
1619.Pq Vt bool
1620If set to
1621.Dq Li YES ,
1622enable global proxy ARP.
1623.It Va forward_sourceroute
1624.Pq Vt bool
1625If set to
1626.Dq Li YES
1627and
1628.Va gateway_enable
1629is also set to
1630.Dq Li YES ,
1631source-routed packets are forwarded.
1632.It Va accept_sourceroute
1633.Pq Vt bool
1634If set to
1635.Dq Li YES ,
1636the system will accept source-routed packets directed at it.
1637.It Va rarpd_enable
1638.Pq Vt bool
1639If set to
1640.Dq Li YES ,
1641run the
1642.Xr rarpd 8
1643daemon at system boot time.
1644.It Va rarpd_flags
1645.Pq Vt str
1646If
1647.Va rarpd_enable
1648is set to
1649.Dq Li YES ,
1650these are the flags to pass to the
1651.Xr rarpd 8
1652daemon.
1653.It Va bootparamd_enable
1654.Pq Vt bool
1655If set to
1656.Dq Li YES ,
1657run the
1658.Xr bootparamd 8
1659daemon at system boot time.
1660.It Va bootparamd_flags
1661.Pq Vt str
1662If
1663.Va bootparamd_enable
1664is set to
1665.Dq Li YES ,
1666these are the flags to pass to the
1667.Xr bootparamd 8
1668daemon.
1669.It Va stf_interface_ipv4addr
1670.Pq Vt str
1671If not set to
1672.Dq Li NO ,
1673this is the local IPv4 address for 6to4 (IPv6 over IPv4 tunneling interface).
1674Specify this entry to enable the 6to4 interface.
1675.It Va stf_interface_ipv4plen
1676.Pq Vt int
1677Prefix length for 6to4 IPv4 addresses, to limit peer address range.
1678An effective value is 0-31.
1679.It Va stf_interface_ipv6_ifid
1680.Pq Vt str
1681IPv6 interface ID for
1682.Xr stf 4 .
1683This can be set to
1684.Dq Li AUTO .
1685.It Va stf_interface_ipv6_slaid
1686.Pq Vt str
1687IPv6 Site Level Aggregator for
1688.Xr stf 4 .
1689.It Va ipv6_faith_prefix
1690.Pq Vt str
1691If not set to
1692.Dq Li NO ,
1693this is the faith prefix to enable a FAITH IPv6-to-IPv4 TCP translator.
1694You also need
1695.Xr faithd 8
1696setup.
1697.It Va ipv6_ipv4mapping
1698.Pq Vt bool
1699If set to
1700.Dq Li YES
1701this enables IPv4 mapped IPv6 address communication (like
1702.Li ::ffff:a.b.c.d ) .
1703.It Va atm_enable
1704.Pq Vt bool
1705Set to
1706.Dq Li YES
1707to enable the configuration of ATM interfaces at system boot time.
1708For all of the ATM variables described below, please refer to the
1709.Xr atm 8
1710man page for further details on the available command parameters.
1711Also refer to the files in
1712.Pa /usr/share/examples/atm
1713for more detailed configuration information.
1714.It Va atm_netif_ Ns Aq Ar intf
1715.Pq Vt str
1716For the ATM physical interface
1717.Ar intf ,
1718this variable defines the name prefix and count for the ATM network
1719interfaces to be created.
1720The value will be passed as the parameters of an
1721.Dq Nm atm Cm "set netif" Ar intf
1722command.
1723.It Va atm_sigmgr_ Ns Aq Ar intf
1724.Pq Vt str
1725For the ATM physical interface
1726.Ar intf ,
1727this variable defines the ATM signalling manager to be used.
1728The value will be passed as the parameters of an
1729.Dq Nm atm Cm attach Ar intf
1730command.
1731.It Va atm_prefix_ Ns Aq Ar intf
1732.Pq Vt str
1733For the ATM physical interface
1734.Ar intf ,
1735this variable defines the NSAP prefix for interfaces using a UNI signalling
1736manager.
1737If set to
1738.Dq Li ILMI ,
1739the prefix will automatically be set via the
1740.Xr ilmid 8
1741daemon.
1742Otherwise, the value will be passed as the parameters of an
1743.Dq Nm atm Cm "set prefix" Ar intf
1744command.
1745.It Va atm_macaddr_ Ns Aq Ar intf
1746.Pq Vt str
1747For the ATM physical interface
1748.Ar intf ,
1749this variable defines the MAC address for interfaces using a UNI signalling
1750manager.
1751If set to
1752.Dq Li NO ,
1753the hardware MAC address contained in the ATM interface card will be used.
1754Otherwise, the value will be passed as the parameters of an
1755.Dq Nm atm Cm "set mac" Ar intf
1756command.
1757.It Va atm_arpserver_ Ns Aq Ar netif
1758.Pq Vt str
1759For the ATM network interface
1760.Ar netif ,
1761this variable defines the ATM address for a host which is to provide ATMARP
1762service.
1763This variable is only applicable to interfaces using a UNI signalling manager.
1764If set to
1765.Dq Li local ,
1766this host will become an ATMARP server.
1767The value will be passed as the parameters of an
1768.Dq Nm atm Cm "set arpserver" Ar netif
1769command.
1770.It Va atm_scsparp_ Ns Aq Ar netif
1771.Pq Vt bool
1772If set to
1773.Dq Li YES ,
1774SCSP/ATMARP service for the network interface
1775.Ar netif
1776will be initiated using the
1777.Xr scspd 8
1778and
1779.Xr atmarpd 8
1780daemons.
1781This variable is only applicable if
1782.Va atm_arpserver_ Ns Aq Ar netif
1783is set to
1784.Dq Li local .
1785.It Va atm_arps
1786.Pq Vt str
1787Set to the list of permanent ATM ARP entries to be added at system boot time.
1788For each whitespace separated
1789.Ar element
1790in the value, an
1791.Va atm_arp_ Ns Aq Ar element
1792variable is assumed to exist.
1793The value of each of these variables will be passed as the parameters of an
1794.Dq Nm atm Cm "add arp"
1795command.
1796.It Va keybell
1797.Pq Vt str
1798The keyboard bell sound.
1799Set to
1800.Dq Li normal ,
1801.Dq Li visual ,
1802.Dq Li off ,
1803or
1804.Dq Li NO
1805if the default behavior is desired.
1806For details, refer to the
1807.Xr kbdcontrol 1
1808manpage.
1809.It Va keymap
1810.Pq Vt str
1811If set to
1812.Dq Li NO ,
1813no keymap is installed, otherwise the value is used to install
1814the keymap file in
1815.Pa /usr/share/syscons/keymaps/ Ns Ao Ar value Ac Ns Pa .kbd .
1816.It Va keyrate
1817.Pq Vt str
1818The keyboard repeat speed.
1819Set to
1820.Dq Li slow ,
1821.Dq Li normal ,
1822.Dq Li fast ,
1823or
1824.Dq Li NO
1825if the default behavior is desired.
1826.It Va keychange
1827.Pq Vt str
1828If not set to
1829.Dq Li NO ,
1830attempt to program the function keys with the value.
1831The value should be a single string of the form:
1832.Dq Ar funkey_number new_value Op Ar funkey_number new_value ... .
1833.It Va cursor
1834.Pq Vt str
1835Can be set to the value of
1836.Dq Li normal ,
1837.Dq Li blink ,
1838.Dq Li destructive ,
1839or
1840.Dq Li NO
1841to set the cursor behavior explicitly or choose the default behavior.
1842.It Va scrnmap
1843.Pq Vt str
1844If set to
1845.Dq Li NO ,
1846no screen map is installed, otherwise the value is used to install
1847the screen map file in
1848.Pa /usr/share/syscons/scrnmaps/ Ns Aq Ar value .
1849.It Va font8x16
1850.Pq Vt str
1851If set to
1852.Dq Li NO ,
1853the default 8x16 font value is used for screen size requests, otherwise
1854the value in
1855.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1856is used.
1857.It Va font8x14
1858.Pq Vt str
1859If set to
1860.Dq Li NO ,
1861the default 8x14 font value is used for screen size requests, otherwise
1862the value in
1863.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1864is used.
1865.It Va font8x8
1866.Pq Vt str
1867If set to
1868.Dq Li NO ,
1869the default 8x8 font value is used for screen size requests, otherwise
1870the value in
1871.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1872is used.
1873.It Va blanktime
1874.Pq Vt int
1875If set to
1876.Dq Li NO ,
1877the default screen blanking interval is used, otherwise it is set to
1878.Ar value
1879seconds.
1880.It Va saver
1881.Pq Vt str
1882If not set to
1883.Dq Li NO ,
1884this is the actual screen saver to use
1885.Li ( blank , snake , daemon ,
1886etc).
1887.It Va moused_enable
1888.Pq Vt str
1889If set to
1890.Dq Li YES ,
1891the
1892.Xr moused 8
1893daemon is started for doing cut/paste selection on the console.
1894.It Va moused_type
1895.Pq Vt str
1896This is the protocol type of the mouse connected to this host.
1897This variable must be set if
1898.Va moused_enable
1899is set to
1900.Dq Li YES .
1901The
1902.Xr moused 8
1903daemon
1904is able to detect the appropriate mouse type automatically in many cases.
1905Set this variable to
1906.Dq Li auto
1907to let the daemon detect it, or
1908select one from the following list if the automatic detection fails.
1909.Pp
1910If the mouse is attached to the PS/2 mouse port, choose
1911.Dq Li auto
1912or
1913.Dq Li ps/2 ,
1914regardless of the brand and model of the mouse.
1915Likewise, if the mouse is attached to the bus mouse port, choose
1916.Dq Li auto
1917or
1918.Dq Li busmouse .
1919All other protocols are for serial mice and will not work with
1920the PS/2 and bus mice.
1921If this is a USB mouse,
1922.Dq Li auto
1923is the only protocol type which will work.
1924.Pp
1925.Bl -tag -width ".Li x10mouseremote" -compact
1926.It Li microsoft
1927Microsoft mouse (serial)
1928.It Li intellimouse
1929Microsoft IntelliMouse (serial)
1930.It Li mousesystems
1931Mouse systems Corp. mouse (serial)
1932.It Li mmseries
1933MM Series mouse (serial)
1934.It Li logitech
1935Logitech mouse (serial)
1936.It Li busmouse
1937A bus mouse
1938.It Li mouseman
1939Logitech MouseMan and TrackMan (serial)
1940.It Li glidepoint
1941ALPS GlidePoint (serial)
1942.It Li thinkingmouse
1943Kensington ThinkingMouse (serial)
1944.It Li ps/2
1945PS/2 mouse
1946.It Li mmhittab
1947MM HitTablet (serial)
1948.It Li x10mouseremote
1949X10 MouseRemote (serial)
1950.It Li versapad
1951Interlink VersaPad (serial)
1952.El
1953.Pp
1954Even if the mouse is not in the above list, it may be compatible
1955with one in the list.
1956Refer to the man page for
1957.Xr moused 8
1958for compatibility information.
1959.Pp
1960It should also be noted that while this is enabled, any
1961other client of the mouse (such as an X server) should access
1962the mouse through the virtual mouse device,
1963.Pa /dev/sysmouse ,
1964and configure it as a
1965.Dq Li sysmouse
1966type mouse, since all
1967mouse data is converted to this single canonical format when using
1968.Xr moused 8 .
1969If the client program does not support the
1970.Dq Li sysmouse
1971type, specify the
1972.Dq Li mousesystems
1973type.
1974It is the second preferred type.
1975.It Va moused_port
1976.Pq Vt str
1977If
1978.Va moused_enable
1979is set to
1980.Dq Li YES ,
1981this is the actual port the mouse is on.
1982It might be
1983.Pa /dev/cuaa0
1984for a COM1 serial mouse or
1985.Pa /dev/psm0
1986for a PS/2 mouse, for example.
1987.It Va moused_flags
1988.Pq Vt str
1989If
1990.Va moused_type
1991is set, these are the additional flags to pass to the
1992.Xr moused 8
1993daemon.
1994.It Va mousechar_start
1995.Pq Vt int
1996If set to
1997.Dq Li NO ,
1998the default mouse cursor character range
1999.Li 0xd0 Ns - Ns Li 0xd3
2000is used, otherwise the range start is set to
2001.Ar value
2002character, see
2003.Xr vidcontrol 1 .
2004Use if the default range is occupied in the language code table.
2005.It Va vidhistory
2006.Pq Vt int
2007Set the size of the history (scrollback) buffer in lines.
2008.It Va allscreens_flags
2009.Pq Vt str
2010If set,
2011.Xr vidcontrol 1
2012is run with these options for each of the virtual terminals
2013.Pq Pa /dev/ttyv* .
2014For example,
2015.Dq Fl m Cm on
2016will enable the mouse pointer on all virtual terminals if
2017.Va moused_enable
2018is set to
2019.Dq Li YES .
2020.It Va allscreens_kbdflags
2021.Pq Vt str
2022If set,
2023.Xr kbdcontrol 1
2024is run with these options for each of the virtual terminals
2025.Pq Pa /dev/ttyv* .
2026For example,
2027.Dq Fl h Li 200
2028will set the
2029.Xr syscons 4
2030scrollback (history) buffer to 200 lines.
2031.It Va cron_enable
2032.Pq Vt bool
2033If set to
2034.Dq Li YES ,
2035run the
2036.Xr cron 8
2037daemon at system boot time.
2038.It Va cron_program
2039.Pq Vt str
2040Path to
2041.Xr cron 8
2042(default
2043.Pa /usr/sbin/cron ) .
2044.It Va cron_flags
2045.Pq Vt str
2046If
2047.Va cron_enable
2048is set to
2049.Dq Li YES ,
2050these are the flags to pass to
2051.Xr cron 8 .
2052.It Va lpd_program
2053.Pq Vt str
2054Path to
2055.Xr lpd 8
2056(default
2057.Pa /usr/sbin/lpd ) .
2058.It Va lpd_enable
2059.Pq Vt bool
2060If set to
2061.Dq Li YES ,
2062run the
2063.Xr lpd 8
2064daemon at system boot time.
2065.It Va lpd_flags
2066.Pq Vt str
2067If
2068.Va lpd_enable
2069is set to
2070.Dq Li YES ,
2071these are the flags to pass to the
2072.Xr lpd 8
2073daemon.
2074.It Va nscd_enable
2075.Pq Vt bool
2076If set to
2077.Dq Li YES ,
2078run the
2079.Xr nscd 8
2080daemon at system boot time.
2081.It Va mixer_enable
2082.Pq Vt bool
2083If set to
2084.Dq Li YES ,
2085preserve
2086.Xr mixer 8
2087settings across reboots.
2088.It Va mta_start_script
2089.Pq Vt str
2090The full path to the script to run to start
2091a mail transfer agent.
2092The default is
2093.Pa /etc/rc.sendmail .
2094The
2095.Va sendmail_*
2096variables which
2097.Pa /etc/rc.sendmail
2098uses are documented in the
2099.Xr rc.sendmail 8
2100man page.
2101.It Va fixbootfile
2102.Pq Vt bool
2103In a
2104.Sq HAMMER ROOT with UFS /boot
2105setup, the boot loader will not set up the
2106.Va kern.bootfile
2107sysctl correctly.
2108The system will attempt to fix this on its own.
2109Set this variable to
2110.Dq Li NO
2111to turn this behavior off.
2112.It Va dumpdev
2113.Pq Vt str
2114Indicates the device (usually a swap partition) to which a crash dump
2115should be written in the event of a system crash.
2116The value of this variable is passed as the argument to
2117.Xr dumpon 8
2118and
2119.Xr savecore 8 .
2120To disable crash dumps, set this variable to
2121.Dq Li NO .
2122.It Va dumpdir
2123.Pq Vt str
2124When the system reboots after a crash and a crash dump is found on the
2125device specified by the
2126.Va dumpdev
2127variable,
2128.Xr savecore 8
2129will save that crash dump and a copy of the kernel to the directory
2130specified by the
2131.Va dumpdir
2132variable.
2133The default value is
2134.Pa /var/crash .
2135Set to
2136.Dq Li NO
2137to not run
2138.Xr savecore 8
2139at boot time when
2140.Va dumpdir
2141is set.
2142.It Va savecore_flags
2143.Pq Vt str
2144If crash dumps are enabled, these are the flags to pass to the
2145.Xr savecore 8
2146utility.
2147.It Va crashinfo_enable
2148.Pq Vt bool
2149Set to
2150.Dq Li YES
2151to turn on automatic crash dump summary generation using the utility
2152specified by the
2153.Va crashinfo_program
2154variable.
2155.It Va crashinfo_program
2156.Pq Vt str
2157Program to run to generate a crash dump summary if the variable
2158.Va crashinfo_enable
2159is set to
2160.Dq Li YES .
2161The default value is
2162.Pa /usr/sbin/crashinfo .
2163.It Va enable_quotas
2164.Pq Vt bool
2165Set to
2166.Dq Li YES
2167to turn on user disk quotas on system startup via the
2168.Xr quotaon 8
2169command.
2170.It Va check_quotas
2171.Pq Vt bool
2172Set to
2173.Dq Li YES
2174to enable user disk quota checking via the
2175.Xr quotacheck 8
2176command.
2177.It Va accounting_enable
2178.Pq Vt bool
2179Set to
2180.Dq Li YES
2181to enable system accounting through the
2182.Xr accton 8
2183facility.
2184.It Va linux_enable
2185.Pq Vt bool
2186Set to
2187.Dq Li YES
2188to enable Linux/ELF binary emulation at system initial boot time.
2189.It Va sysvipc_enable
2190.Pq Vt bool
2191If set to
2192.Dq Li YES ,
2193load System V IPC primitives at boot time.
2194.\" ----- cleanvar_enable setting--------------------------------
2195.It Va cleanvar_enable
2196.Pq Vt bool
2197Set to
2198.Dq Li YES
2199to have
2200.Pa /var/run ,
2201.Pa /var/spool/lock
2202and
2203.Pa /var/spool/uucp/.Temp/*
2204cleaned at startup.
2205.\" ----- clear_tmp_enable setting-------------------------------
2206.It Va clear_tmp_enable
2207.Pq Vt bool
2208Set to
2209.Dq Li YES
2210to have
2211.Pa /tmp
2212cleaned at startup.
2213.\" ----- ldconfig_paths setting --------------------------------
2214.It Va ldconfig_paths
2215.Pq Vt str
2216Set to the list of shared library paths to use with
2217.Xr ldconfig 8 .
2218NOTE:
2219.Pa /usr/lib
2220will always be added first, so it need not appear in this list.
2221.It Va ldconfig_insecure
2222.Pq Vt bool
2223The
2224.Xr ldconfig 8
2225utility normally refuses to use directories
2226which are writable by anyone except root.
2227Set this variable to
2228.Dq Li YES
2229to disable that security check during system startup.
2230.It Va kern_securelevel
2231.Pq Vt int
2232The kernel security level to set at startup.
2233The allowed range of
2234.Ar value
2235ranges from \-1 (the compile time default) to 3 (the most secure).
2236See
2237.Xr init 8
2238for the list of possible security levels and their effect on system operation.
2239.It Va start_vinum
2240.Pq Vt bool
2241Set to
2242.Dq Li YES
2243to start
2244.Xr vinum 8
2245at system boot time.
2246.It Va sshd_enable
2247.Pq Vt bool
2248Set to
2249.Dq Li YES
2250to start
2251.Xr sshd 8
2252at system boot time.
2253.It Va sshd_program
2254.Pq Vt str
2255Path to the SSH server program
2256(default
2257.Pa /usr/sbin/sshd ) .
2258.It Va sshd_flags
2259.Pq Vt str
2260If
2261.Va sshd_enable
2262is set to
2263.Dq Li YES ,
2264these are the flags to pass to the
2265.Xr sshd 8
2266daemon.
2267.It Va ftpd_enable
2268.Pq Vt bool
2269Set to
2270.Dq Li YES
2271to start
2272.Xr ftpd 8
2273at system boot time.
2274.It Va ftpd_flags
2275.Pq Vt str
2276If
2277.Va ftpd_enable
2278is set to
2279.Dq Li YES ,
2280these are the flags to pass to the
2281.Xr ftpd 8
2282daemon.
2283.It Va usbd_enable
2284.Pq Vt bool
2285If set to
2286.Dq Li YES ,
2287run the
2288.Xr usbd 8
2289daemon at boot time.
2290.It Va usbd_flags
2291.Pq Vt str
2292If
2293.Va usbd_enable
2294is set to
2295.Dq Li YES ,
2296these are the flags passed to
2297.Xr usbd 8
2298daemon.
2299.It Va watchdogd_enable
2300.Pq Vt bool
2301If set to
2302.Dq Li YES ,
2303start the
2304.Xr watchdogd 8
2305daemon at boot time.
2306This requires that the kernel have been compiled with
2307.Cd "options WATCHDOG" .
2308.It Va jail_enable
2309.Pq Vt bool
2310If set to
2311.Dq Li NO ,
2312any configured jails will not be started.
2313.It Va jail_list
2314.Pq Vt str
2315A space separated list of names for jails.
2316This is purely a configuration aid to help identify and
2317configure multiple jails.
2318The names specified in this list will be used to
2319identify settings common to an instance of a jail.
2320Assuming that the jail in question was named
2321.Li vjail ,
2322you would have the following dependent variables:
2323.Bd -literal
2324jail_vjail_hostname="jail.example.com"
2325jail_vjail_ip="192.168.1.100"
2326jail_vjail_rootdir="/var/jails/vjail/root"
2327.Ed
2328.Pp
2329.It Va jail_flags
2330.Pq Vt str
2331Unset by default.
2332When set, use as default value for
2333.Va jail_ Ns Ao Ar jname Ac Ns Va _flags
2334for every jail in
2335.Va jail_list .
2336.It Va jail_interface
2337.Pq Vt str
2338Unset by default.
2339When set, use as default value for
2340.Va jail_ Ns Ao Ar jname Ac Ns Va _interface
2341for every jail in
2342.Va jail_list .
2343.It Va jail_fstab
2344.Pq Vt str
2345Unset by default.
2346When set, use as default value for
2347.Va jail_ Ns Ao Ar jname Ac Ns Va _fstab
2348for every jail in
2349.Va jail_list .
2350.It Va jail_mount_enable
2351.Pq Vt bool
2352Set to
2353.Dq Li NO
2354by default.
2355When set to
2356.Dq Li YES ,
2357sets
2358.Va jail_ Ns Ao Ar jname Ac Ns Va _mount_enable
2359to
2360.Dq Li YES
2361by default for every jail in
2362.Va jail_list .
2363.It Va jail_fdesc_enable
2364.Pq Vt bool
2365Set to
2366.Dq Li NO
2367by default.
2368When set to
2369.Dq Li YES ,
2370sets
2371.Va jail_ Ns Ao Ar jname Ac Ns Va _fdesc_enable
2372to
2373.Dq Li YES
2374by default for every jail in
2375.Va jail_list .
2376.It Va jail_procfs_enable
2377.Pq Vt bool
2378Set to
2379.Dq Li NO
2380by default.
2381When set to
2382.Dq Li YES ,
2383sets
2384.Va jail_ Ns Ao Ar jname Ac Ns Va _procfs_enable
2385to
2386.Dq Li YES
2387by default for every jail in
2388.Va jail_list .
2389.It Va jail_devfs_enable
2390.Pq Vt bool
2391Set to
2392.Dq Li NO
2393by default.
2394When set to
2395.Dq Li YES ,
2396sets
2397.Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_enable
2398to
2399.Dq Li YES
2400by default for every jail in
2401.Va jail_list .
2402.It Va jail_exec_start
2403.Pq Vt str
2404Unset by default.
2405When set, use as default value for
2406.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_start
2407for every jail in
2408.Va jail_list .
2409.It Va jail_exec_stop
2410Unset by default.
2411When set, use as default value for
2412.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_stop
2413for every jail in
2414.Va jail_list .
2415.It Va jail_ Ns Ao Ar jname Ac Ns Va _rootdir
2416.Pq Vt str
2417Unset by default.
2418Set to the root directory used by jail
2419.Va jname .
2420.It Va jail_ Ns Ao Ar jname Ac Ns Va _hostname
2421.Pq Vt str
2422Unset by default.
2423Set to the fully qualified domain name (FQDN) assigned to jail
2424.Va jname .
2425.It Va jail_ Ns Ao Ar jname Ac Ns Va _ip
2426.Pq Vt str
2427Unset by default.
2428Set to the IP address assigned to jail
2429.Va jname .
2430.It Va jail_ Ns Ao Ar jname Ac Ns Va _flags
2431.Pq Vt str
2432Set to
2433.Dq Li -l -U root
2434by default.
2435These are flags to pass to
2436.Xr jail 8 .
2437.It Va jail_ Ns Ao Ar jname Ac Ns Va _interface
2438.Pq Vt str
2439Unset by default.
2440When set, sets the interface to use when setting IP address alias.
2441Note that the alias is created at jail startup and removed at jail shutdown.
2442.It Va jail_ Ns Ao Ar jname Ac Ns Va _fstab
2443.Pq Vt str
2444Set to
2445.Pa /etc/fstab. Ns Aq Ar jname
2446by default.
2447This is the file system information file to use for jail
2448.Va jname .
2449.It Va jail_ Ns Ao Ar jname Ac Ns Va _mount_enable
2450.Pq Vt bool
2451Set to
2452.Dq Li NO
2453by default.
2454When set to
2455.Dq Li YES ,
2456mount all file systems from
2457.Va jail_ Ns Ao Ar jname Ac Ns Va _fstab
2458at jail startup.
2459.It Va jail_ Ns Ao Ar jname Ac Ns Va _fdesc_enable
2460.Pq Vt bool
2461Set to
2462.Dq Li NO
2463by default.
2464When set to
2465.Dq Li YES ,
2466mount the file-descriptor file system inside jail
2467.Ar jname
2468at jail startup.
2469.It Va jail_ Ns Ao Ar jname Ac Ns Va _procfs_enable
2470.Pq Vt bool
2471Set to
2472.Dq Li NO
2473by default.
2474When set to
2475.Dq Li YES ,
2476mount the process file system inside jail
2477.Ar jname
2478at jail startup.
2479.It Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_enable
2480.Pq Vt bool
2481Set to
2482.Dq Li NO
2483by default.
2484When set to
2485.Dq Li YES ,
2486mount the device file system inside jail
2487.Ar jname
2488at jail startup.
2489.It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_start
2490.Pq Vt str
2491Set to
2492.Dq Li /bin/sh /etc/rc
2493by default.
2494This is the command executed at jail startup.
2495.It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_stop
2496.Pq Vt str
2497Set to
2498.Dq Li /bin/sh /etc/rc.shutdown
2499by default.
2500This is the command executed at jail shutdown.
2501.It Va jail_set_hostname_allow
2502.Pq Vt bool
2503If set to
2504.Dq Li NO ,
2505do not allow the root user in a jail to set its hostname.
2506.It Va jail_socket_unixiproute_only
2507.Pq Vt bool
2508If set to
2509.Dq Li YES ,
2510do not allow any sockets,
2511besides UNIX/IP/route sockets,
2512to be used within a jail.
2513.It Va jail_sysvipc_allow
2514.Pq Vt bool
2515If set to
2516.Dq Li YES ,
2517allow applications within a jail to use System V IPC.
2518.It Va lvm_enable
2519.Pq Vt bool
2520If set to
2521.Dq Li YES
2522LVM volumes will be discovered and configured on boot.
2523.It Va newsyslog_enable
2524.Pq Vt bool
2525If set to
2526.Dq Li YES ,
2527run
2528.Xr newsyslog 8
2529before syslogd starts.
2530.It Va newsyslog_flags
2531.Pq Vt str
2532If
2533.Va newsyslog_enable
2534is set to
2535.Dq Li YES ,
2536these are the flags passed to
2537.Xr newsyslog 8 .
2538.It Va resident_enable
2539.Pq Vt bool
2540If set to
2541.Dq Li YES ,
2542make the dynamic binaries listed in
2543.Pa /etc/resident.conf
2544resident.
2545.It Va varsym_enable
2546.Pq Vt bool
2547If set to
2548.Dq Li YES ,
2549process
2550.Pa /etc/varsym.conf
2551to set system-wide variables for variant symlinks.
2552.It Va rand_irqs
2553.Pq Vt str
2554Set either to
2555.Dq Li NO
2556or a whitespace separated list of IRQ numbers which will be used as a source of
2557randomness.
2558.\" -----------------------------------------------------
2559.It Va entropy_dir
2560.Pq Vt str
2561Set to
2562.Dq Li NO
2563to disable caching entropy via
2564.Xr cron 8 .
2565Otherwise set to the directory used to store entropy files in.
2566.It Va entropy_file
2567.Pq Vt str
2568Set to
2569.Dq Li NO
2570to disable caching entropy through reboots.
2571Otherwise set to the filename used to store cached entropy through reboots.
2572This file should be located on the root file system to seed the
2573.Xr random 4
2574device as early as possible in the boot process.
2575.It Va ipsec_enable
2576.Pq Vt bool
2577Set to
2578.Dq Li YES
2579to run
2580.Xr setkey 8
2581on
2582.Va ipsec_file
2583at boot time.
2584.It Va ipsec_file
2585.Pq Vt str
2586Configuration file for
2587.Xr setkey 8 .
2588.It Va dmesg_enable
2589.Pq Vt bool
2590Set to
2591.Dq Li YES
2592to save
2593.Xr dmesg 8
2594to
2595.Pa /var/run/dmesg.boot
2596on boot.
2597.It Va rcshutdown_timeout
2598.Pq Vt int
2599If set, start a watchdog timer in the background which will terminate
2600.Pa rc.shutdown
2601if
2602.Xr shutdown 8
2603has not completed within the specified time (in seconds).
2604Notice that in addition to this soft timeout,
2605.Xr init 8
2606also applies a hard timeout for the execution of
2607.Pa rc.shutdown .
2608This is configured via
2609.Xr sysctl 8
2610variable
2611.Va kern.init_shutdown_timeout
2612and defaults to 120 seconds. Setting the value of
2613.Va rcshutdown_timeout
2614to more than 120 seconds will have no effect until the
2615.Xr sysctl 8
2616variable
2617.Va kern.init_shutdown_timeout
2618is also increased.
2619.It Va udevd_enable
2620.Pq Vt bool
2621If set to
2622.Dq Li YES ,
2623the udevd daemon will be started on boot.
2624.It Va vfs_quota_enable
2625.Pq Vt bool
2626If set to
2627.Dq Li YES ,
2628vfs quota rc.d scripts will be run on boot.
2629.It Va vfs_quota_sync
2630.Pq Vt str
2631List of mount points whose counters are to be synchronized with on-disk
2632usage during system startup. See also
2633.Xr vquota 8 .
2634.It Va vknetd_enable
2635.Pq Vt bool
2636If set to
2637.Dq Li YES ,
2638.Xr vknetd 8
2639will be started on boot.
2640.It Va vknetd_flags
2641.Pq Vt bool
2642Additional flags passed to
2643.Xr vknetd 8 .
2644Usually address/cidrbits is specified here.
2645When no flags are passed, default option
2646.Fl U
2647will be used.
2648.It Va vkernel_enable
2649.Pq Vt bool
2650If set to
2651.Dq Li NO ,
2652any configured vkernels will not be started.
2653.It Va vkernel_kill_timeout
2654.Pq Vt int
2655This defines the default number of seconds that we will wait for the
2656vkernel to shut down on it's own. If after this time it's still alive,
2657it will be killed with SIGKILL.
2658.It Va vkernel_bin
2659.Pq Vt str
2660Defines the default path to the vkernel binary.
2661.It Va vkernel_list
2662.Pq Vt str
2663A space separated list of names for vkernels.
2664This is purely a configuration aid to help identify and
2665configure multiple vkernels.
2666The names specified in this list will be used to
2667identify settings common to a vkernel instance.
2668Assuming that the vkernel in question was named
2669.Li example ,
2670you would have the following dependent variables
2671(filled with reference values in this text):
2672.Bd -literal
2673vkernel_example_bin="/usr/obj/usr/src/sys/VKERNEL/kernel.debug"
2674vkernel_example_memsize="64m"
2675vkernel_example_rootimg_list="/var/vkernel/rootimg.01"
2676vkernel_example_iface_list="auto:bridge0"
2677vkernel_example_logfile="/dev/null"
2678vkernel_example_flags="-U"
2679vkernel_example_kill_timeout="45"
2680.Ed
2681.Pp
2682The last five are optional.
2683They default to an empty string if not set, except for logfile which defaults to
2684.Pa /dev/null
2685if it is not set.
2686.El
2687.Sh FILES
2688.Bl -tag -width ".Pa /etc/start_if. Ns Aq Ar interface" -compact
2689.It Pa /etc/defaults/rc.conf
2690.It Pa /etc/rc.conf
2691.It Pa /etc/rc.conf.local
2692.It Pa /etc/start_if. Ns Aq Ar interface
2693.El
2694.Sh SEE ALSO
2695.Xr catman 1 ,
2696.Xr gdb 1 ,
2697.Xr info 1 ,
2698.Xr kbdcontrol 1 ,
2699.Xr varsym 1 ,
2700.Xr vidcontrol 1 ,
2701.Xr ip 4 ,
2702.Xr ipfw 4 ,
2703.Xr kld 4 ,
2704.Xr pf 4 ,
2705.Xr tcp 4 ,
2706.Xr udp 4 ,
2707.Xr exports 5 ,
2708.Xr motd 5 ,
2709.Xr resident.conf 5 ,
2710.Xr varsym.conf 5 ,
2711.Xr accton 8 ,
2712.Xr amd 8 ,
2713.Xr apm 8 ,
2714.Xr atm 8 ,
2715.Xr btconfig 8 ,
2716.Xr bthcid 8 ,
2717.Xr cron 8 ,
2718.Xr devd 8 ,
2719.Xr dhclient 8 ,
2720.Xr dntpd 8 ,
2721.Xr ftpd 8 ,
2722.Xr ifconfig 8 ,
2723.Xr inetd 8 ,
2724.Xr jail 8 ,
2725.Xr lpd 8 ,
2726.Xr makewhatis 8 ,
2727.Xr mixer 8 ,
2728.Xr mountd 8 ,
2729.Xr moused 8 ,
2730.Xr mrouted 8 ,
2731.Xr named 8 ,
2732.Xr nfsd 8 ,
2733.Xr pcnfsd 8 ,
2734.Xr pfctl 8 ,
2735.Xr pflogd 8 ,
2736.Xr quotacheck 8 ,
2737.Xr quotaon 8 ,
2738.Xr rc 8 ,
2739.Xr rc.sendmail 8 ,
2740.Xr resident 8 ,
2741.Xr rndcontrol 8 ,
2742.Xr route 8 ,
2743.Xr routed 8 ,
2744.Xr rpcbind 8 ,
2745.Xr rpc.lockd 8 ,
2746.Xr rpc.statd 8 ,
2747.Xr rtadvd 8 ,
2748.Xr rtsold 8 ,
2749.Xr rwhod 8 ,
2750.Xr savecore 8 ,
2751.Xr sdpd 8 ,
2752.Xr sensorsd 8 ,
2753.Xr sshd 8 ,
2754.Xr swapon 8 ,
2755.Xr sysctl 8 ,
2756.Xr syslogd 8 ,
2757.Xr timed 8 ,
2758.Xr usbd 8 ,
2759.Xr vinum 8 ,
2760.Xr yp 8 ,
2761.Xr ypbind 8 ,
2762.Xr ypserv 8 ,
2763.Xr ypset 8
2764.Sh HISTORY
2765The
2766.Nm
2767file appeared in
2768.Fx 2.2.2 .
2769.Sh AUTHORS
2770.An Jordan K. Hubbard .
2771