xref: /dragonfly/share/man/man5/rc.conf.5 (revision 926deccb)
1.\" Copyright (c) 1995
2.\"	Jordan K. Hubbard
3.\"
4.\" Redistribution and use in source and binary forms, with or without
5.\" modification, are permitted provided that the following conditions
6.\" are met:
7.\" 1. Redistributions of source code must retain the above copyright
8.\"    notice, this list of conditions and the following disclaimer.
9.\" 2. Redistributions in binary form must reproduce the above copyright
10.\"    notice, this list of conditions and the following disclaimer in the
11.\"    documentation and/or other materials provided with the distribution.
12.\"
13.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND
14.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
15.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
16.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR BE LIABLE
17.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
18.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
19.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
20.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
21.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
22.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
23.\" SUCH DAMAGE.
24.\"
25.\" $FreeBSD: src/share/man/man5/rc.conf.5,v 1.197 2003/07/28 13:56:00 mbr Exp $
26.\"
27.Dd February 18, 2013
28.Dt RC.CONF 5
29.Os
30.Sh NAME
31.Nm rc.conf
32.Nd system configuration information
33.Sh DESCRIPTION
34The file
35.Nm
36contains descriptive information about the local host name, configuration
37details for any potential network interfaces and which services should be
38started up at system initial boot time.
39In new installations, the
40.Nm
41file is generally initialized by the installer.
42.Pp
43The purpose of
44.Nm
45is not to run commands or perform system startup actions directly.
46Instead, it is included by the various generic startup scripts in
47.Pa /etc
48which conditionalize their
49internal actions according to the settings found there.
50.Pp
51The
52.Pa /etc/defaults/rc.conf
53file specifies the default settings for all the available options,
54the
55.Pa /etc/rc.conf
56file specifies override settings.
57Options need only be specified in
58.Pa /etc/rc.conf
59when the system administrator wishes to override the defaults.
60The file
61.Pa /etc/rc.conf.local
62is used to override settings in
63.Pa /etc/rc.conf
64for historical reasons.
65In addition to
66.Pa /etc/rc.conf.local
67you can also place smaller configuration files for each
68.Xr rc 8
69script in the
70.Pa /etc/rc.conf.d
71directory, which will be included by the
72.Va load_rc_config
73function.
74For jail configurations you could use the file
75.Pa /etc/rc.conf.d/jail
76to store jail specific configuration options.
77Also see the
78.Va rc_conf_files
79variable below.
80.Pp
81The following list provides a name and short description for each
82variable that can be set in the
83.Nm
84file.
85To set a variable of
86.Vt bool
87type, specify either
88.Dq Li YES ,
89.Dq Li TRUE ,
90.Dq Li ON ,
91or
92.Dq Li 1 .
93To unset, specify
94.Dq Li NO ,
95.Dq Li FALSE ,
96.Dq Li OFF ,
97or
98.Dq Li 0 .
99These values are case insensitive.
100The
101.Va _enable
102postfix in the name of a variable for starting a service can be
103omitted (as in
104.Nx ) .
105.Bl -tag -width indent-two
106.It Va rc_debug
107.Pq Vt bool
108If set to
109.Dq Li YES ,
110enable output of debug messages from rc scripts.
111This variable can be helpful in diagnosing mistakes when
112editing or integrating new scripts.
113Beware that this produces copious output to the terminal and
114.Xr syslog 3 .
115.It Va rc_info
116.Pq Vt bool
117If set to
118.Dq Li NO ,
119disable informational messages from the rc scripts.
120Informational messages are displayed when
121a condition that is not serious enough to warrant a warning or an error occurs.
122.It Va swapfile
123.Pq Vt str
124If set to
125.Dq Li NO ,
126no swapfile is installed, otherwise the value is used as the full
127pathname to a file to use for additional swap space.
128The
129.Xr vn 4
130driver is needed for a swapfile and will be loaded if it is not
131already compiled into the kernel or loaded via
132.Xr loader.conf 5 .
133.It Va apm_enable
134.Pq Vt bool
135If set to
136.Dq Li YES ,
137enable support for Automatic Power Management with the
138.Xr apm 8
139command.
140.It Va apmd_enable
141.Pq Vt bool
142Run
143.Xr apmd 8
144to handle APM event from userland.
145This also enables support for APM.
146.It Va apmd_flags
147.Pq Vt str
148If
149.Va apmd_enable
150is set to
151.Dq Li YES ,
152these are the flags to pass to the
153.Xr apmd 8
154daemon.
155.It Va battd_enable
156Enable
157.Xr battd 8
158to monitor the status of batteries present in the system.
159This also enables support for APM.
160.It Va battd_flags
161.Pq Vt str
162If
163.Va battd_enable
164is set to
165.Dq Li YES ,
166these are the flags to pass to the
167.Xr battd 8
168daemon.
169.It Va devd_enable
170.Pq Vt bool
171Run
172.Xr devd 8
173to handle device added, removed or unknown events from the kernel.
174.It Va devd_flags
175.Pq Vt str
176If
177.Va devd_enable
178is set to
179.Dq Li YES ,
180these are the flags to pass to the
181.Xr devd 8
182daemon.
183.It Va powerd_enable
184.Pq Vt bool
185Set to
186.Dq Li NO
187by default.
188Setting this to
189.Dq Li YES
190enables
191.Xr powerd 8 ,
192a CPU speed control daemon.
193.It Va sensorsd_enable
194.Pq Vt bool
195Set to
196.Dq Li NO
197by default.
198Setting this to
199.Dq Li YES
200enables
201.Xr sensorsd 8 ,
202a sensors monitoring and logging daemon.
203.It Va sensorsd_flags
204.Pq Vt str
205Empty by default.
206Additional flags passed to the
207.Xr sensorsd 8
208program.
209.It Va hotplugd_enable
210.Pq Vt bool
211Set to
212.Dq Li NO
213by default.
214Setting this to
215.Dq Li YES
216enables
217.Xr hotplugd 8 ,
218a devices hot plugging monitoring daemon.
219.It Va hotplugd_flags
220.Pq Vt str
221Empty by default.
222Additional flags passed to the
223.Xr hotplugd 8
224program.
225.It Va pccard_ifconfig
226.Pq Vt str
227List of arguments to be passed to
228.Xr ifconfig 8
229at boot time or on insertion of the card (e.g.\&
230.Dq Cm inet Li 192.168.1.1 Cm netmask Li 255.255.255.0
231for a fixed address or
232.Dq Li DHCP
233for a DHCP client).
234.It Va pccard_ether_delay
235.Pq Vt str
236Set the delay before starting
237.Xr dhclient 8
238in the
239.Pa /etc/pccard_ether
240script.
241This defaults to 5 seconds to work around a bug in the
242.Xr ed 4
243driver which can lead to system hangs when using some newer
244.Xr ed 4
245based cards.
246.It Va removable_interfaces
247.Pq Vt str
248List of removable network interfaces to be supported by
249.Pa /etc/pccard_ether .
250.It Va local_startup
251.Pq Vt str
252List of directories to search for startup script files.
253.It Va script_name_sep
254.Pq Vt str
255The field separator to use for breaking down the list of startup script files
256into individual filenames.
257The default is a space.
258It is not necessary to change this unless there are startup scripts with names
259containing spaces.
260.It Va hostapd_enable
261.Pq Vt bool
262Set to
263.Dq Li YES
264to start
265.Xr hostapd 8
266at system boot time.
267.It Va hostname
268.Pq Vt str
269The fully qualified domain name (FQDN) of this host on the network.
270This should almost certainly be set to something meaningful, even if
271there is no network connection.
272If
273.Xr dhclient 8
274is used to set the hostname via DHCP,
275this variable should be set to an empty string.
276.It Va ipv6_enable
277.Pq Vt bool
278Enable support for IPv6 networking.
279Note that this requires that the kernel have been compiled with
280.Cd "options INET6" .
281.It Va nisdomainname
282.Pq Vt str
283The NIS domain name of this host, or
284.Dq Li NO
285if NIS is not used.
286.It Va dhclient_program
287.Pq Vt str
288Path to the DHCP client program
289(default
290.Pa /sbin/dhclient ) .
291.It Va dhclient_flags
292.Pq Vt str
293Additional flags to pass to the DHCP client program.
294.It Va pf_enable
295.Pq Vt bool
296Set to
297.Dq Li YES
298to load
299.Xr pf 4
300at startup.
301If the kernel was not built with
302.Cd "device pf" ,
303the
304.Pa pf.ko
305kernel module will be loaded.
306See also
307.Va firewall_enable .
308.It Va pf_rules
309.Pq Vt str
310Path to the
311.Xr pf 4
312ruleset definition file.
313.It Va pf_program
314.Pq Vt str
315Path to
316.Xr pfctl 8 .
317.It Va pf_flags
318.Pq Vt str
319If
320.Va pf_enable
321is set to
322.Dq Li YES ,
323these are the flags to pass to
324.Xr pfctl 8
325when loading the ruleset.
326.It Va pflog_enable
327.Pq Vt bool
328Set this to
329.Dq Li YES
330to enable
331.Xr pflogd 8
332which logs packets from
333.Xr pf 4 .
334.It Va pflog_logfile
335.Pq Vt str
336If
337.Va pflog_enable
338is set to
339.Dq Li YES
340this specifies the path of the log file.
341.It Va pflog_program
342.Pq Vt str
343Path to
344.Xr pflogd 8 .
345.It Va pflog_flags
346.Pq Vt str
347If
348.Va pflog_enable
349is set to
350.Dq Li YES ,
351these are the flags to pass to
352.Xr pflogd 8 .
353.It Va firewall_enable
354.Pq Vt bool
355Set to
356.Dq Li YES
357to load firewall rules at startup.
358If the kernel was not built with
359.Cd "options IPFIREWALL" ,
360the
361.Pa ipfw.ko
362kernel module will be loaded.
363See also
364.Va pf_enable .
365.It Va ipv6_firewall_enable
366.Pq Vt bool
367The IPv6 equivalent of
368.Va firewall_enable .
369Set to
370.Dq Li YES
371to load IPv6 firewall rules at startup.
372If the kernel was not built with
373.Cd "options IPV6FIREWALL" ,
374the
375.Pa ip6fw.ko
376kernel module will be loaded.
377.It Va firewall_script
378.Pq Vt str
379The full path to the firewall script to run
380(default
381.Pa /etc/rc.firewall ) .
382.It Va ipv6_firewall_script
383.Pq Vt str
384The IPv6 equivalent of
385.Va firewall_script .
386.It Va firewall_type
387.Pq Vt str
388Names the firewall type from the selection in
389.Pa /etc/rc.firewall ,
390or the file which contains the local firewall ruleset.
391Valid selections from
392.Pa /etc/rc.firewall
393are:
394.Pp
395.Bl -tag -width ".Li simple" -compact
396.It Li open
397unrestricted IP access
398.It Li closed
399all IP services disabled, except via
400.Dq Li lo0
401.It Li client
402basic protection for a workstation on a LAN
403.It Li simple
404alias for
405.Li client .
406.El
407.Pp
408If a filename is specified, the full path must be given.
409.It Va firewall_trusted_nets
410.Pq Vt str
411List of trusted networks (if
412.Va firewall_type
413is set to
414.Li client ) .
415.It Va firewall_trusted_interfaces
416.Pq Vt str
417List of trusted network interfaces (if
418.Va firewall_type
419is set to
420.Li client ) .
421.It Va firewall_allowed_icmp_types
422.Pq Vt str
423List of allowed ICMP types (if
424.Va firewall_type
425is set to
426.Li client ) .
427.It Va firewall_open_tcp_ports
428.Pq Vt str
429List of TCP ports to open (if
430.Va firewall_type
431is set to
432.Li client ) .
433.It Va firewall_open_udp_ports
434.Pq Vt str
435List of UDP ports to open (if
436.Va firewall_type
437is set to
438.Li client ) .
439.It Va ipv6_firewall_type
440.Pq Vt str
441The IPv6 equivalent of
442.Va firewall_type .
443.It Va firewall_quiet
444.Pq Vt bool
445Set to
446.Dq Li YES
447to disable the display of firewall rules on the console during boot.
448.It Va ipv6_firewall_quiet
449.Pq Vt bool
450The IPv6 equivalent of
451.Va firewall_quiet .
452.It Va firewall_logging
453.Pq Vt bool
454Set to
455.Dq Li YES
456to enable firewall event logging.
457This is equivalent to the
458.Dv IPFIREWALL_VERBOSE
459kernel option.
460.It Va ipv6_firewall_logging
461.Pq Vt bool
462The IPv6 equivalent of
463.Va firewall_logging .
464.It Va firewall_flags
465.Pq Vt str
466Flags passed to
467.Xr ipfw 8
468if
469.Va firewall_type
470specifies a filename.
471.It Va ipv6_firewall_flags
472.Pq Vt str
473The IPv6 equivalent of
474.Va firewall_flags .
475.It Va natd_program
476.Pq Vt str
477Path to
478.Xr natd 8 .
479.It Va natd_enable
480.Pq Vt bool
481Set to
482.Dq Li YES
483to enable
484.Xr natd 8 .
485.Va firewall_enable
486must also be set to
487.Dq Li YES ,
488and
489.Xr divert 4
490sockets must be enabled in the kernel.
491.It Va natd_interface
492.Pq Vt str
493This is the name of the public interface on which
494.Xr natd 8
495should run.
496The interface may be given as an interface name or as an IP address.
497.It Va natd_flags
498.Pq Vt str
499Additional
500.Xr natd 8
501flags should be placed here.
502The
503.Fl n
504or
505.Fl a
506flag is automatically added with the above
507.Va natd_interface
508as an argument.
509.It Va tcp_extensions
510.Pq Vt bool
511Set to
512.Dq Li YES
513by default.
514Setting this to
515.Dq Li NO
516disables certain TCP options as described by
517.Rs
518.%T "RFC 1323"
519.Re
520Setting this to
521.Dq Li NO
522might help remedy such problems with connections as randomly hanging
523or other weird behavior.
524Some network devices are known to be broken with respect to these options.
525.It Va log_in_vain
526.Pq Vt int
527Set to 0 by default.
528The
529.Xr sysctl 8
530variables,
531.Va net.inet.tcp.log_in_vain
532and
533.Va net.inet.udp.log_in_vain ,
534as described in
535.Xr tcp 4
536and
537.Xr udp 4 ,
538are set to the given value.
539.It Va tcp_keepalive
540.Pq Vt bool
541Set to
542.Dq Li YES
543by default.
544Setting to
545.Dq Li NO
546will disable probing idle TCP connections to verify that the
547peer is still up and reachable.
548.It Va tcp_drop_synfin
549.Pq Vt bool
550Set to
551.Dq Li NO
552by default.
553Setting to
554.Dq Li YES
555will cause the kernel to ignore TCP frames that have both
556the SYN and FIN flags set.
557This prevents OS fingerprinting, but may break some legitimate applications.
558This option is only available if the kernel was built with the
559.Dv TCP_DROP_SYNFIN
560option.
561.It Va icmp_drop_redirect
562.Pq Vt bool
563Set to
564.Dq Li NO
565by default.
566Setting to
567.Dq Li YES
568will cause the kernel to ignore ICMP REDIRECT packets.
569Refer to
570.Xr icmp 4
571for more information.
572.It Va icmp_log_redirect
573.Pq Vt bool
574Set to
575.Dq Li NO
576by default.
577Setting to
578.Dq Li YES
579will cause the kernel to log ICMP REDIRECT packets.
580Note that
581the log messages are not rate-limited, so this option should only be used
582for troubleshooting networks.
583Refer to
584.Xr icmp 4
585for more information.
586.It Va icmp_bmcastecho
587.Pq Vt bool
588Set to
589.Dq Li YES
590to respond to broadcast or multicast ICMP ping packets.
591Refer to
592.Xr icmp 4
593for more information.
594.It Va ip_portrange_first
595.Pq Vt int
596If not set to
597.Dq Li NO ,
598this is the first port in the default portrange.
599Refer to
600.Xr ip 4
601for more information.
602.It Va ip_portrange_last
603.Pq Vt int
604If not set to
605.Dq Li NO ,
606this is the last port in the default portrange.
607Refer to
608.Xr ip 4
609for more information.
610.\"
611.It Va ifconfig_ Ns Aq Ar interface
612.Pq Vt str
613Configuration for
614.Dq interface .
615Typically includes IP address.
616Assuming that the interface in question was
617.Li ed0 ,
618it might look something like this:
619.Bd -literal
620ifconfig_ed0="inet 10.0.0.1 netmask 0xffff0000"
621.Ed
622.Pp
623If the
624.Pa /etc/start_if. Ns Aq Ar interface
625file is present, it is read and executed by the
626.Xr sh 1
627interpreter before configuring the interface as specified in the
628.Va ifconfig_ Ns Aq Ar interface
629and
630.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n
631variables.
632.Pp
633It is possible to bring up an interface with DHCP by adding
634.Dq Li DHCP
635to the
636.Va ifconfig_ Ns Aq Ar interface
637variable.
638For instance, to initialize the
639.Li ed0
640device via DHCP, it is possible to use something like:
641.Bd -literal
642ifconfig_ed0="DHCP"
643.Ed
644.Pp
645If a
646.Va wlans_ Ns Aq Ar interface
647variable is set,
648an
649.Xr wlan 4
650interface will be created for each item in the list with the
651.Ar wlandev
652argument set to
653.Ar interface .
654Further wlan cloning arguments may be passed to the
655.Xr ifconfig 8
656.Cm create
657command by setting the
658.Va create_args_ Ns Aq Ar interface
659variable.
660One or more
661.Xr wlan 4
662devices must be created for each wireless devices as of
663.Dx 2.5 .
664Debugging flags for
665.Xr wlan 4
666devices as set by
667.Xr wlandebug 8
668may be specified with an
669.Va wlandebug_ Ns Aq Ar interface
670variable.
671The contents of this variable will be passed directly to
672.Xr wlandebug 8 .
673.Pp
674Also, if your interface needs WPA authentication, it is possible to add
675.Dq Li WPA
676to the
677.Va ifconfig_ Ns Aq Ar interface
678variable.
679This will start
680.Xr wpa_supplicant 8 .
681See
682.Xr wpa_supplicant.conf 5
683for configuring authentication information.
684.Pp
685Finally, you can add
686.Xr ifconfig 8
687options in this variable, in addition to the
688.Pa /etc/start_if. Ns Aq Ar interface
689file.
690For instance, to initialize the
691.Li wi0
692device via DHCP, using WPA authentication and 802.11b mode, it is
693possible to use something like:
694.Bd -literal
695wlans_wi0="wlan0"
696ifconfig_wlan0="up DHCP WPA mode 11b"
697.Ed
698.Pp
699.\"
700.It Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n
701.Pq Vt str
702Configuration to establish an additional network address for
703.Dq interface .
704Assuming that the interface in question was
705.Li ed0 ,
706it might look something like this:
707.Bd -literal
708ifconfig_ed0_alias0="inet 127.0.0.253 netmask 0xffffffff"
709ifconfig_ed0_alias1="inet 127.0.0.254 netmask 0xffffffff"
710.Ed
711.Pp
712And so on.
713For each
714.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n
715entry that is found, its contents are passed to
716.Xr ifconfig 8 .
717Execution stops at the first unsuccessful access, so if
718something like this is present:
719.Bd -literal
720ifconfig_ed0_alias0="inet 127.0.0.251 netmask 0xffffffff"
721ifconfig_ed0_alias1="inet 127.0.0.252 netmask 0xffffffff"
722ifconfig_ed0_alias2="inet 127.0.0.253 netmask 0xffffffff"
723ifconfig_ed0_alias4="inet 127.0.0.254 netmask 0xffffffff"
724.Ed
725.Pp
726Then note that alias4 would
727.Em not
728be added since the search would stop with the missing alias3 entry.
729.Pp
730.\"
731.It Va ifconfig_ Ns Ao Ar interface Ac Ns Va _name
732.Pq Vt str
733New name for
734.Dq interface .
735It is possible to rename interface by doing:
736.Bd -literal
737ifconfig_ed0_name="net0"
738ifconfig_net0="inet 10.0.0.1 netmask 0xffff0000"
739.Ed
740.It Va network_interfaces
741.Pq Vt str
742The list of network interfaces to configure on this host,
743or
744.Dq Li auto
745to configure all network interfaces
746(default
747.Dq Li auto ) .
748For example, if the only network devices to be configured are the loopback device
749.Pq Li lo0
750and a NIC using the
751.Xr ed 4
752driver, this could be set to
753.Dq Li "lo0 ed0" .
754An
755.Va ifconfig_ Ns Aq Ar interface
756variable is assumed to exist for each value of
757.Ar interface .
758.It Va ipv6_network_interfaces
759.Pq Vt str
760This is the IPv6 equivalent of
761.Va network_interfaces .
762Instead of setting the ifconfig variables as
763.Va ifconfig_ Ns Aq Ar interface
764they should be set as
765.Va ipv6_ifconfig_ Ns Aq Ar interface .
766Aliases should be set as
767.Va ipv6_ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n .
768Interfaces that do not have a
769.Va ipv6_ifconfig_ Ns Aq Ar interface
770setting will be auto configured by
771.Xr rtsol 8
772if the
773.Va ipv6_gateway_enable
774is set to
775.Dq Li NO .
776Note that the IPv6 networking code does not support the
777.Pa /etc/start_if. Ns Aq Ar interface
778files.
779.It Va ipv6_prefix_ Ns Aq Ar interface
780.Pq Vt str
781Assign prefix to
782.Ar interface ,
783prefixlen 64 is used.
784.It Va ipv6_default_interface
785.Pq Vt str
786If not set to
787.Dq Li NO ,
788this is the default output interface for scoped addresses.
789Now this works only for IPv6 link local multicast addresses.
790.It Va cloned_interfaces
791.Pq Vt str
792Set to the list of clonable network interfaces to create on this host.
793Entries in
794.Va cloned_interfaces
795are automatically appended to
796.Va network_interfaces
797for configuration.
798.It Va gif_interfaces
799.Pq Vt str
800Set to the list of
801.Xr gif 4
802tunnel interfaces to configure on this host.
803A
804.Va gifconfig_ Ns Aq Ar interface
805variable is assumed to exist for each value of
806.Ar interface .
807The value of this variable is used to configure the link layer of the
808tunnel according to the syntax of the
809.Cm tunnel
810option to
811.Xr ifconfig 8 .
812Additionally, this option ensures that each listed interface is created via the
813.Cm create
814option to
815.Xr ifconfig 8
816before attempting to configure it.
817.It Va sppp_interfaces
818.Pq Vt str
819Set to the list of
820.Xr sppp 4
821interfaces to configure on this host.
822A
823.Va spppconfig_ Ns Aq Ar interface
824variable is assumed to exist for each value of
825.Ar interface .
826Each interface should also be configured by a general
827.Va ifconfig_ Ns Aq Ar interface
828setting.
829Refer to
830.Xr spppcontrol 8
831for more information about available options.
832.It Va ppp_enable
833.Pq Vt bool
834If set to
835.Dq Li YES ,
836run the
837.Xr ppp 8
838daemon.
839.It Va ppp_mode
840.Pq Vt str
841Mode in which to run the
842.Xr ppp 8
843daemon.
844Accepted modes are
845.Dq Li auto ,
846.Dq Li ddial ,
847.Dq Li direct
848and
849.Dq Li dedicated .
850See the manual for a full description.
851.It Va ppp_nat
852.Pq Vt bool
853If set to
854.Dq Li YES ,
855enables network address translation.
856Used in conjunction with
857.Va gateway_enable
858allows hosts on private network addresses access to the Internet using
859this host as a network address translating router.
860.It Va ppp_profile
861.Pq Vt str
862The name of the profile to use from
863.Pa /etc/ppp/ppp.conf .
864.It Va ppp_user
865.Pq Vt str
866The name of the user under which
867.Xr ppp 8
868should be started.
869By default,
870.Xr ppp 8
871is started as
872.Dq Li root .
873.It Va rc_conf_files
874.Pq Vt str
875This option is used to specify a list of files that will override
876the settings in
877.Pa /etc/defaults/rc.conf .
878The files will be read in the order in which they are specified and should
879include the full path to the file.
880By default, the files specified are
881.Pa /etc/rc.conf
882and
883.Pa /etc/rc.conf.local
884.It Va fsck_y_enable
885.Pq Vt bool
886If set to
887.Dq Li YES ,
888.Xr fsck 8
889will be run with the
890.Fl y
891flag if the initial preen of the file systems fails.
892.It Va netfs_types
893.Pq Vt str
894List of file system types that are network-based.
895This list should generally not be modified by end users.
896Use
897.Va extra_netfs_types
898instead.
899.It Va extra_netfs_types
900.Pq Vt str
901If set to something other than
902.Dq Li NO
903(the default), this variable extends the list of file system types
904for which automatic mounting at startup by
905.Xr rc 8
906should be delayed until the network is initialized.
907It should contain
908a whitespace-separated list of network file system descriptor pairs,
909each consisting of a file system type as passed to
910.Xr mount 8
911and a human-readable, one-word description, joined with a colon
912.Pq Ql \&: .
913Extending the default list in this way is only necessary
914when third party file system types are used.
915.It Va devfs_config_files
916.Pq Vt str
917This option is used to specify a list of configuration files containing
918.Xr devfs 5
919rules that will be applied by
920.Xr devfsctl 8
921in the order in which they are specified and must include the full path
922to the file.
923.It Va syslogd_enable
924.Pq Vt bool
925If set to
926.Dq Li YES ,
927run the
928.Xr syslogd 8
929daemon.
930.It Va syslogd_program
931.Pq Vt str
932Path to
933.Xr syslogd 8
934(default
935.Pa /usr/sbin/syslogd ) .
936.It Va syslogd_flags
937.Pq Vt str
938If
939.Va syslogd_enable
940is set to
941.Dq Li YES ,
942these are the flags to pass to
943.Xr syslogd 8 .
944.It Va inetd_enable
945.Pq Vt bool
946If set to
947.Dq Li YES ,
948run the
949.Xr inetd 8
950daemon.
951.It Va inetd_program
952.Pq Vt str
953Path to
954.Xr inetd 8
955(default
956.Pa /usr/sbin/inetd ) .
957.It Va inetd_flags
958.Pq Vt str
959If
960.Va inetd_enable
961is set to
962.Dq Li YES ,
963these are the flags to pass to
964.Xr inetd 8 .
965.It Va rwhod_enable
966.Pq Vt bool
967If set to
968.Dq Li YES ,
969run the
970.Xr rwhod 8
971daemon at boot time.
972.It Va rwhod_flags
973.Pq Vt str
974If
975.Va rwhod_enable
976is set to
977.Dq Li YES ,
978these are the flags to pass to it.
979.It Va amd_enable
980.Pq Vt bool
981If set to
982.Dq Li YES ,
983run the
984.Xr amd 8
985daemon at boot time.
986.It Va amd_flags
987.Pq Vt str
988If
989.Va amd_enable
990is set to
991.Dq Li YES ,
992these are the flags to pass to it.
993See the
994.Xr amd 8
995manpage for more information.
996.It Va amd_map_program
997.Pq Vt str
998If set, the specified program is run to get the list of
999.Xr amd 8
1000maps.
1001For example, if the
1002.Xr amd 8
1003maps are stored in NIS, one can set this to run
1004.Xr ypcat 1
1005to get a list of
1006.Xr amd 8
1007maps from the
1008.Pa amd.master
1009NIS map.
1010.It Va update_motd
1011.Pq Vt bool
1012If set to
1013.Dq Li YES ,
1014.Pa /etc/motd
1015will be updated at boot time to reflect the kernel release being run.
1016If set to
1017.Dq Li NO ,
1018.Pa /etc/motd
1019will not be updated.
1020.It Va nfs_client_enable
1021.Pq Vt bool
1022If set to
1023.Dq Li YES ,
1024setup NFS client parameters at boot time.
1025.It Va nfs_access_cache
1026.Pq Vt int
1027If
1028.Va nfs_client_enable
1029is set to
1030.Dq Li YES ,
1031this can be set to
1032.Dq Li 0
1033to disable NFS ACCESS RPC caching, or to the number of seconds for which
1034NFS ACCESS results should be cached.
1035A value of 2-10 seconds will substantially reduce network traffic for
1036many NFS operations.
1037The default is 5 seconds.
1038Note that the attribute cache holds stat information only.
1039The NFS data cache is independent of the attribute cache and is only
1040invalidated when the client detects that the server has modified the
1041underlying file.
1042This value specifies a maximum timeout.
1043The NFS client will automatically use a shorter timeout for files which
1044have been recently modified.
1045.It Va nfs_neg_cache
1046.Pq Vt int
1047If
1048.Va nfs_client_enable
1049is set to
1050.Dq Li YES ,
1051this can be set to
1052.Dq Li 0
1053to disable the caching of NEGATIVE LOOKUPS (lookups of non-existent
1054filenames), or to the number of seconds for which negative lookups should
1055be cached.
1056A value of 2-10 seconds will substantially reduce network
1057traffic for many NFS operations, especially source code builds.
1058The default is 3 seconds.
1059.It Va nfs_server_enable
1060.Pq Vt bool
1061If set to
1062.Dq Li YES ,
1063run the NFS server daemons at boot time.
1064.It Va nfs_server_flags
1065.Pq Vt str
1066If
1067.Va nfs_server_enable
1068is set to
1069.Dq Li YES ,
1070these are the flags to pass to the
1071.Xr nfsd 8
1072daemon.
1073.It Va mountd_enable
1074.Pq Vt bool
1075If set to
1076.Dq Li YES ,
1077and no
1078.Va nfs_server_enable
1079is set, start
1080.Xr mountd 8 ,
1081but not
1082.Xr nfsd 8
1083daemon.
1084It is commonly needed to run CFS without real NFS used.
1085.It Va mountd_flags
1086.Pq Vt str
1087If
1088.Va mountd_enable
1089is set to
1090.Dq Li YES ,
1091these are the flags to pass to the
1092.Xr mountd 8
1093daemon.
1094.It Va weak_mountd_authentication
1095.Pq Vt bool
1096If set to
1097.Dq Li YES ,
1098allow services like PCNFSD to make non-privileged mount requests.
1099.It Va nfs_reserved_port_only
1100.Pq Vt bool
1101If set to
1102.Dq Li YES ,
1103provide NFS services only on a secure port.
1104.It Va nfs_bufpackets
1105.Pq Vt int
1106If set to a number, indicates the number of packets worth of
1107socket buffer space to reserve on an NFS client.
1108The kernel default is typically 4.
1109Using a higher number may be useful on gigabit networks to improve performance.
1110The minimum value is 2 and the maximum is 64.
1111.It Va rpc_umntall_enable
1112.Pq Vt bool
1113If set to
1114.Dq Li YES
1115(default) and we are also an NFS client, run
1116.Xr rpc.umntall 8
1117at boot time to clear out old mounts on remote servers.
1118If set to
1119.Dq Li NO
1120then
1121.Xr rpc.umntall 8
1122will not be run at boot time.
1123.It Va rpc_lockd_enable
1124.Pq Vt bool
1125If set to
1126.Dq Li YES
1127and also an NFS server, run
1128.Xr rpc.lockd 8
1129at boot time.
1130.It Va rpc_lockd_flags
1131.Pq Vt str
1132If
1133.Va rpc_lockd_enable
1134is set to
1135.Dq Li YES ,
1136these are the flags to pass to
1137.Xr rpc.lockd 8 .
1138.It Va rpc_statd_enable
1139.Pq Vt bool
1140If set to
1141.Dq Li YES
1142and also an NFS server, run
1143.Xr rpc.statd 8
1144at boot time.
1145.It Va rpc_statd_flags
1146.Pq Vt str
1147If
1148.Va rpc_statd_enable
1149is set to
1150.Dq Li YES ,
1151these are the flags to pass to
1152.Xr rpc.statd 8 .
1153.It Va rpcbind_program
1154.Pq Vt str
1155Path to program for rpcbind daemon
1156(default
1157.Pa /usr/sbin/rpcbind ) .
1158.It Va rpcbind_enable
1159.Pq Vt bool
1160If set to
1161.Dq Li YES ,
1162run
1163.Va rpcbind_program
1164at boot time.
1165.It Va rpcbind_flags
1166.Pq Vt str
1167If
1168.Va rpcbind_enable
1169is set to
1170.Dq Li YES ,
1171these are the flags to pass to
1172.Va rpcbind_program .
1173.It Va keyserv_enable
1174.Pq Vt bool
1175If set to
1176.Dq Li YES ,
1177run the
1178.Xr keyserv 8
1179daemon on boot for running Secure RPC.
1180.It Va keyserv_flags
1181.Pq Vt str
1182If
1183.Va keyserv_enable
1184is set to
1185.Dq Li YES ,
1186these are the flags to pass to
1187.Xr keyserv 8
1188daemon.
1189.It Va pppoed_enable
1190.Pq Vt bool
1191If set to
1192.Dq Li YES ,
1193run the
1194.Xr pppoed 8
1195daemon at boot time to provide PPP over Ethernet services.
1196.It Va pppoed_provider
1197.Pq Vt str
1198.Xr pppoed 8
1199listens to requests to this provider and ultimately runs
1200.Xr ppp 8
1201with a
1202.Ar system
1203argument of the same name.
1204.It Va pppoed_flags
1205.Pq Vt str
1206Additional flags to pass to
1207.Xr pppoed 8 .
1208.It Va pppoed_interface
1209.Pq Vt str
1210The network interface to run
1211.Xr pppoed 8
1212on.
1213This is mandatory when
1214.Va pppoed_enable
1215is set to
1216.Dq Li YES .
1217.It Va timed_enable
1218.Pq Vt bool
1219If set to
1220.Dq Li YES ,
1221run the
1222.Xr timed 8
1223service at boot time.
1224This command is intended for networks of machines where a consistent
1225.Dq "network time"
1226for all hosts must be established.
1227This is often useful in large NFS environments where time stamps on
1228files are expected to be consistent network-wide.
1229.It Va timed_flags
1230.Pq Vt str
1231If
1232.Va timed_enable
1233is set to
1234.Dq Li YES ,
1235these are the flags to pass to the
1236.Xr timed 8
1237service.
1238.It Va dntpd_enable
1239.Pq Vt bool
1240If set to
1241.Dq Li YES ,
1242run
1243.Xr dntpd 8
1244at system boot time.
1245.It Va dntpd_program
1246.Pq Vt str
1247Path to
1248.Xr dntpd 8
1249(default
1250.Pa /usr/sbin/dntpd ) .
1251.It Va dntpd_flags
1252.Pq Vt str
1253If
1254.Va dntpd_enable
1255is set to
1256.Dq Li YES ,
1257these are the flags to pass to the
1258.Xr dntpd 8
1259daemon.
1260.It Va btconfig_enable
1261.Pq Vt bool
1262If set to
1263.Dq Li YES ,
1264configure Bluetooth devices via
1265.Xr btconfig 8
1266at system boot time.
1267.It Va btconfig_devices
1268.Pq Vt str
1269If
1270.Va btconfig_enable
1271is set to
1272.Dq Li YES ,
1273this is the list of Bluetooth devices to configure.
1274If
1275.Va btconfig_devices
1276is not specified, all devices known to the system will be configured.
1277A
1278.Va btconfig_ Ns Aq Ar device
1279variable can be set to specify parameters to be passed to
1280.Ar device .
1281.It Va btconfig_args
1282.Pq Vt str
1283If
1284.Va btconfig_enable
1285is set to
1286.Dq Li YES ,
1287this is the list of configuration parameters to pass to all Bluetooth
1288devices.
1289.It Va sdpd_enable
1290.Pq Vt bool
1291If set to
1292.Dq Li YES ,
1293run the Service Discovery Profile daemon
1294.Xr ( sdpd 8 )
1295at system boot time.
1296.It Va sdpd_flags
1297.Pq Vt str
1298If
1299.Va sdpd_enable
1300is set to
1301.Dq Li YES ,
1302these are the flags to pass to the
1303.Xr sdpd 8
1304daemon.
1305.It Va bthcid_enable
1306.Pq Vt bool
1307If set to
1308.Dq Li YES ,
1309run the Bluetooth Link Key/PIN Code Manager daemon
1310.Xr ( bthcid 8 )
1311at system boot time.
1312.It Va bthcid_flags
1313.Pq Vt str
1314If
1315.Va bthcid_enable
1316is set to
1317.Dq Li YES ,
1318these are the flags to pass to the
1319.Xr bthcid 8
1320daemon.
1321.It Va nis_client_enable
1322.Pq Vt bool
1323If set to
1324.Dq Li YES ,
1325run the
1326.Xr ypbind 8
1327service at system boot time.
1328.It Va nis_client_flags
1329.Pq Vt str
1330If
1331.Va nis_client_enable
1332is set to
1333.Dq Li YES ,
1334these are the flags to pass to the
1335.Xr ypbind 8
1336service.
1337.It Va nis_ypset_enable
1338.Pq Vt bool
1339If set to
1340.Dq Li YES ,
1341run the
1342.Xr ypset 8
1343daemon at system boot time.
1344.It Va nis_ypset_flags
1345.Pq Vt str
1346If
1347.Va nis_ypset_enable
1348is set to
1349.Dq Li YES ,
1350these are the flags to pass to the
1351.Xr ypset 8
1352daemon.
1353.It Va nis_server_enable
1354.Pq Vt bool
1355If set to
1356.Dq Li YES ,
1357run the
1358.Xr ypserv 8
1359daemon at system boot time.
1360.It Va nis_server_flags
1361.Pq Vt str
1362If
1363.Va nis_server_enable
1364is set to
1365.Dq Li YES ,
1366these are the flags to pass to the
1367.Xr ypserv 8
1368daemon.
1369.It Va nis_ypxfrd_enable
1370.Pq Vt bool
1371If set to
1372.Dq Li YES ,
1373run the
1374.Xr rpc.ypxfrd 8
1375daemon at system boot time.
1376.It Va nis_ypxfrd_flags
1377.Pq Vt str
1378If
1379.Va nis_ypxfrd_enable
1380is set to
1381.Dq Li YES ,
1382these are the flags to pass to the
1383.Xr rpc.ypxfrd 8
1384daemon.
1385.It Va nis_yppasswdd_enable
1386.Pq Vt bool
1387If set to
1388.Dq Li YES ,
1389run the
1390.Xr rpc.yppasswdd 8
1391daemon at system boot time.
1392.It Va nis_yppasswdd_flags
1393.Pq Vt str
1394If
1395.Va nis_yppasswdd_enable
1396is set to
1397.Dq Li YES ,
1398these are the flags to pass to the
1399.Xr rpc.yppasswdd 8
1400daemon.
1401.It Va rpc_ypupdated_enable
1402.Pq Vt bool
1403If set to
1404.Dq Li YES ,
1405run the
1406.Nm rpc.ypupdated
1407daemon at system boot time.
1408.It Va defaultrouter
1409.Pq Vt str
1410If not set to
1411.Dq Li NO ,
1412create a default route to this host name or IP address
1413(use an IP address if this router is also required to get to the
1414name server!).
1415.It Va ipv6_defaultrouter
1416.Pq Vt str
1417The IPv6 equivalent of
1418.Va defaultrouter .
1419.It Va static_routes
1420.Pq Vt str
1421Set to the list of static routes that are to be added at system boot time.
1422If not set to
1423.Dq Li NO
1424then for each whitespace separated
1425.Ar element
1426in the value, a
1427.Va route_ Ns Aq Ar element
1428variable is assumed to exist whose contents will later be passed to a
1429.Dq Nm route Cm add
1430operation.
1431.It Va change_routes
1432.Pq Vt str
1433Set to the list of static routes that are to be changed at system boot time
1434(such as those added by the kernel).
1435If not set to
1436.Dq Li NO
1437then for each whitespace separated
1438.Ar element
1439in the value, a
1440.Va change_route_ Ns Aq Ar element
1441variable is assumed to exist whose contents will later be passed to a
1442.Dq Nm route Cm change
1443operation.
1444.It Va ipv6_static_routes
1445.Pq Vt str
1446The IPv6 equivalent of
1447.Va static_routes .
1448If not set to
1449.Dq Li NO
1450then for each whitespace separated
1451.Ar element
1452in the value, a
1453.Va ipv6_route_ Ns Aq Ar element
1454variable is assumed to exist whose contents will later be passed to a
1455.Dq Nm route Cm add Fl inet6
1456operation.
1457.It Va gateway_enable
1458.Pq Vt bool
1459If set to
1460.Dq Li YES ,
1461configure host to act as an IP router, e.g. to forward packets
1462between interfaces.
1463.It Va ipv6_gateway_enable
1464.Pq Vt bool
1465The IPv6 equivalent of
1466.Va gateway_enable .
1467.It Va router_enable
1468.Pq Vt bool
1469If set to
1470.Dq Li YES ,
1471run a routing daemon of some sort, based on the settings of
1472.Va router_program
1473and
1474.Va router_flags .
1475.It Va ipv6_router_enable
1476.Pq Vt bool
1477The IPv6 equivalent of
1478.Va router_enable .
1479If set to
1480.Dq Li YES ,
1481run a routing daemon of some sort, based on the settings of
1482.Va ipv6_router_program
1483and
1484.Va ipv6_router_flags .
1485.It Va router_program
1486.Pq Vt str
1487If
1488.Va router_enable
1489is set to
1490.Dq Li YES ,
1491this is the name of the routing daemon to use
1492(default
1493.Pa /sbin/routed ) .
1494.It Va ipv6_router_program
1495.Pq Vt str
1496The IPv6 equivalent of
1497.Va router_program
1498(default
1499.Pa /sbin/route6d ) .
1500.It Va router_flags
1501.Pq Vt str
1502If
1503.Va router_enable
1504is set to
1505.Dq Li YES ,
1506these are the flags to pass to the routing daemon.
1507.It Va ipv6_router_flags
1508.Pq Vt str
1509The IPv6 equivalent of
1510.Va router_flags .
1511.It Va mrouted_enable
1512.Pq Vt bool
1513If set to
1514.Dq Li YES ,
1515run the multicast routing daemon,
1516.Xr mrouted 8 .
1517.It Va mroute6d_enable
1518.Pq Vt bool
1519The IPv6 equivalent of
1520.Va mrouted_enable .
1521If set to
1522.Dq Li YES ,
1523run the IPv6 multicast routing daemon.
1524Note that no IPv6 multicast routing daemon is included in the
1525.Dx
1526base system but
1527.Xr pim6dd 8
1528can be installed from the
1529.Xr pkgsrc 7
1530collection.
1531.It Va mrouted_flags
1532.Pq Vt str
1533If
1534.Va mrouted_enable
1535is set to
1536.Dq Li YES ,
1537these are the flags to pass to the
1538.Xr mrouted 8
1539daemon.
1540.It Va mroute6d_flags
1541.Pq Vt str
1542The IPv6 equivalent of
1543.Va mrouted_flags .
1544If
1545.Va mroute6d_enable
1546is set to
1547.Dq Li YES ,
1548these are the flags passed to the IPv6 multicast routing daemon.
1549.It Va mroute6d_program
1550.Pq Vt str
1551If
1552.Va mroute6d_enable
1553is set to
1554.Dq Li YES ,
1555this is the path to the IPv6 multicast routing daemon.
1556.It Va rtadvd_enable
1557.Pq Vt bool
1558If set to
1559.Dq Li YES ,
1560run the
1561.Xr rtadvd 8
1562daemon at boot time.
1563.Xr rtadvd 8
1564will only run if
1565.Va ipv6_gateway_enable
1566is also set to
1567.Dq Li YES .
1568The
1569.Xr rtadvd 8
1570utility sends router advertisement packets to the interfaces specified in
1571.Va rtadvd_interfaces .
1572.Xr rtadvd 8
1573and should only be enabled with great care.
1574You may want to fine-tune
1575.Xr rtadvd.conf 5 .
1576.It Va rtadvd_interfaces
1577.Pq Vt str
1578If
1579.Va rtadvd_enable
1580is set to
1581.Dq Li YES
1582this is the list of interfaces to use.
1583.It Va rtsold_enable
1584.Pq Vt bool
1585If set to
1586.Dq Li YES ,
1587run the
1588.Xr rtsold 8
1589daemon at boot time.
1590The
1591.Xr rtsold 8
1592daemon is used for automatic discovery of non-link local addresses.
1593.It Va rtsold_flags
1594.Pq Vt str
1595If
1596.Va rtsold_enable
1597is set to
1598.Dq Li YES ,
1599these are the flags to pass to the
1600.Xr rtsold 8
1601daemon.
1602.It Va ipxgateway_enable
1603.Pq Vt bool
1604If set to
1605.Dq Li YES ,
1606enable the routing of IPX traffic.
1607.It Va ipxrouted_enable
1608.Pq Vt bool
1609If set to
1610.Dq Li YES ,
1611run the
1612.Xr IPXrouted 8
1613daemon at system boot time.
1614.It Va ipxrouted_flags
1615.Pq Vt str
1616If
1617.Va ipxrouted_enable
1618is set to
1619.Dq Li YES ,
1620these are the flags to pass to the
1621.Xr IPXrouted 8
1622daemon.
1623.It Va arpproxy_all
1624.Pq Vt bool
1625If set to
1626.Dq Li YES ,
1627enable global proxy ARP.
1628.It Va forward_sourceroute
1629.Pq Vt bool
1630If set to
1631.Dq Li YES
1632and
1633.Va gateway_enable
1634is also set to
1635.Dq Li YES ,
1636source-routed packets are forwarded.
1637.It Va accept_sourceroute
1638.Pq Vt bool
1639If set to
1640.Dq Li YES ,
1641the system will accept source-routed packets directed at it.
1642.It Va rarpd_enable
1643.Pq Vt bool
1644If set to
1645.Dq Li YES ,
1646run the
1647.Xr rarpd 8
1648daemon at system boot time.
1649.It Va rarpd_flags
1650.Pq Vt str
1651If
1652.Va rarpd_enable
1653is set to
1654.Dq Li YES ,
1655these are the flags to pass to the
1656.Xr rarpd 8
1657daemon.
1658.It Va bootparamd_enable
1659.Pq Vt bool
1660If set to
1661.Dq Li YES ,
1662run the
1663.Xr bootparamd 8
1664daemon at system boot time.
1665.It Va bootparamd_flags
1666.Pq Vt str
1667If
1668.Va bootparamd_enable
1669is set to
1670.Dq Li YES ,
1671these are the flags to pass to the
1672.Xr bootparamd 8
1673daemon.
1674.It Va stf_interface_ipv4addr
1675.Pq Vt str
1676If not set to
1677.Dq Li NO ,
1678this is the local IPv4 address for 6to4 (IPv6 over IPv4 tunneling interface).
1679Specify this entry to enable the 6to4 interface.
1680.It Va stf_interface_ipv4plen
1681.Pq Vt int
1682Prefix length for 6to4 IPv4 addresses, to limit peer address range.
1683An effective value is 0-31.
1684.It Va stf_interface_ipv6_ifid
1685.Pq Vt str
1686IPv6 interface ID for
1687.Xr stf 4 .
1688This can be set to
1689.Dq Li AUTO .
1690.It Va stf_interface_ipv6_slaid
1691.Pq Vt str
1692IPv6 Site Level Aggregator for
1693.Xr stf 4 .
1694.It Va ipv6_faith_prefix
1695.Pq Vt str
1696If not set to
1697.Dq Li NO ,
1698this is the faith prefix to enable a FAITH IPv6-to-IPv4 TCP translator.
1699You also need
1700.Xr faithd 8
1701setup.
1702.It Va ipv6_ipv4mapping
1703.Pq Vt bool
1704If set to
1705.Dq Li YES
1706this enables IPv4 mapped IPv6 address communication (like
1707.Li ::ffff:a.b.c.d ) .
1708.It Va atm_enable
1709.Pq Vt bool
1710Set to
1711.Dq Li YES
1712to enable the configuration of ATM interfaces at system boot time.
1713For all of the ATM variables described below, please refer to the
1714.Xr atm 8
1715man page for further details on the available command parameters.
1716Also refer to the files in
1717.Pa /usr/share/examples/atm
1718for more detailed configuration information.
1719.It Va atm_netif_ Ns Aq Ar intf
1720.Pq Vt str
1721For the ATM physical interface
1722.Ar intf ,
1723this variable defines the name prefix and count for the ATM network
1724interfaces to be created.
1725The value will be passed as the parameters of an
1726.Dq Nm atm Cm "set netif" Ar intf
1727command.
1728.It Va atm_sigmgr_ Ns Aq Ar intf
1729.Pq Vt str
1730For the ATM physical interface
1731.Ar intf ,
1732this variable defines the ATM signalling manager to be used.
1733The value will be passed as the parameters of an
1734.Dq Nm atm Cm attach Ar intf
1735command.
1736.It Va atm_prefix_ Ns Aq Ar intf
1737.Pq Vt str
1738For the ATM physical interface
1739.Ar intf ,
1740this variable defines the NSAP prefix for interfaces using a UNI signalling
1741manager.
1742If set to
1743.Dq Li ILMI ,
1744the prefix will automatically be set via the
1745.Xr ilmid 8
1746daemon.
1747Otherwise, the value will be passed as the parameters of an
1748.Dq Nm atm Cm "set prefix" Ar intf
1749command.
1750.It Va atm_macaddr_ Ns Aq Ar intf
1751.Pq Vt str
1752For the ATM physical interface
1753.Ar intf ,
1754this variable defines the MAC address for interfaces using a UNI signalling
1755manager.
1756If set to
1757.Dq Li NO ,
1758the hardware MAC address contained in the ATM interface card will be used.
1759Otherwise, the value will be passed as the parameters of an
1760.Dq Nm atm Cm "set mac" Ar intf
1761command.
1762.It Va atm_arpserver_ Ns Aq Ar netif
1763.Pq Vt str
1764For the ATM network interface
1765.Ar netif ,
1766this variable defines the ATM address for a host which is to provide ATMARP
1767service.
1768This variable is only applicable to interfaces using a UNI signalling manager.
1769If set to
1770.Dq Li local ,
1771this host will become an ATMARP server.
1772The value will be passed as the parameters of an
1773.Dq Nm atm Cm "set arpserver" Ar netif
1774command.
1775.It Va atm_scsparp_ Ns Aq Ar netif
1776.Pq Vt bool
1777If set to
1778.Dq Li YES ,
1779SCSP/ATMARP service for the network interface
1780.Ar netif
1781will be initiated using the
1782.Xr scspd 8
1783and
1784.Xr atmarpd 8
1785daemons.
1786This variable is only applicable if
1787.Va atm_arpserver_ Ns Aq Ar netif
1788is set to
1789.Dq Li local .
1790.It Va atm_arps
1791.Pq Vt str
1792Set to the list of permanent ATM ARP entries to be added at system boot time.
1793For each whitespace separated
1794.Ar element
1795in the value, an
1796.Va atm_arp_ Ns Aq Ar element
1797variable is assumed to exist.
1798The value of each of these variables will be passed as the parameters of an
1799.Dq Nm atm Cm "add arp"
1800command.
1801.It Va keybell
1802.Pq Vt str
1803The keyboard bell sound.
1804Set to
1805.Dq Li normal ,
1806.Dq Li visual ,
1807.Dq Li off ,
1808or
1809.Dq Li NO
1810if the default behavior is desired.
1811For details, refer to the
1812.Xr kbdcontrol 1
1813manpage.
1814.It Va keymap
1815.Pq Vt str
1816If set to
1817.Dq Li NO ,
1818no keymap is installed, otherwise the value is used to install
1819the keymap file in
1820.Pa /usr/share/syscons/keymaps/ Ns Ao Ar value Ac Ns Pa .kbd .
1821.It Va keyrate
1822.Pq Vt str
1823The keyboard repeat speed.
1824Set to
1825.Dq Li slow ,
1826.Dq Li normal ,
1827.Dq Li fast ,
1828or
1829.Dq Li NO
1830if the default behavior is desired.
1831.It Va keychange
1832.Pq Vt str
1833If not set to
1834.Dq Li NO ,
1835attempt to program the function keys with the value.
1836The value should be a single string of the form:
1837.Dq Ar funkey_number new_value Op Ar funkey_number new_value ... .
1838.It Va cursor
1839.Pq Vt str
1840Can be set to the value of
1841.Dq Li normal ,
1842.Dq Li blink ,
1843.Dq Li destructive ,
1844or
1845.Dq Li NO
1846to set the cursor behavior explicitly or choose the default behavior.
1847.It Va scrnmap
1848.Pq Vt str
1849If set to
1850.Dq Li NO ,
1851no screen map is installed, otherwise the value is used to install
1852the screen map file in
1853.Pa /usr/share/syscons/scrnmaps/ Ns Aq Ar value .
1854.It Va font8x16
1855.Pq Vt str
1856If set to
1857.Dq Li NO ,
1858the default 8x16 font value is used for screen size requests, otherwise
1859the value in
1860.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1861is used.
1862.It Va font8x14
1863.Pq Vt str
1864If set to
1865.Dq Li NO ,
1866the default 8x14 font value is used for screen size requests, otherwise
1867the value in
1868.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1869is used.
1870.It Va font8x8
1871.Pq Vt str
1872If set to
1873.Dq Li NO ,
1874the default 8x8 font value is used for screen size requests, otherwise
1875the value in
1876.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1877is used.
1878.It Va blanktime
1879.Pq Vt int
1880If set to
1881.Dq Li NO ,
1882the default screen blanking interval is used, otherwise it is set to
1883.Ar value
1884seconds.
1885.It Va saver
1886.Pq Vt str
1887If not set to
1888.Dq Li NO ,
1889this is the actual screen saver to use
1890.Li ( blank , snake , daemon ,
1891etc).
1892.It Va moused_enable
1893.Pq Vt str
1894If set to
1895.Dq Li YES ,
1896the
1897.Xr moused 8
1898daemon is started for doing cut/paste selection on the console.
1899.It Va moused_type
1900.Pq Vt str
1901This is the protocol type of the mouse connected to this host.
1902This variable must be set if
1903.Va moused_enable
1904is set to
1905.Dq Li YES .
1906The
1907.Xr moused 8
1908daemon
1909is able to detect the appropriate mouse type automatically in many cases.
1910Set this variable to
1911.Dq Li auto
1912to let the daemon detect it, or
1913select one from the following list if the automatic detection fails.
1914.Pp
1915If the mouse is attached to the PS/2 mouse port, choose
1916.Dq Li auto
1917or
1918.Dq Li ps/2 ,
1919regardless of the brand and model of the mouse.
1920Likewise, if the mouse is attached to the bus mouse port, choose
1921.Dq Li auto
1922or
1923.Dq Li busmouse .
1924All other protocols are for serial mice and will not work with
1925the PS/2 and bus mice.
1926If this is a USB mouse,
1927.Dq Li auto
1928is the only protocol type which will work.
1929.Pp
1930.Bl -tag -width ".Li x10mouseremote" -compact
1931.It Li microsoft
1932Microsoft mouse (serial)
1933.It Li intellimouse
1934Microsoft IntelliMouse (serial)
1935.It Li mousesystems
1936Mouse systems Corp. mouse (serial)
1937.It Li mmseries
1938MM Series mouse (serial)
1939.It Li logitech
1940Logitech mouse (serial)
1941.It Li busmouse
1942A bus mouse
1943.It Li mouseman
1944Logitech MouseMan and TrackMan (serial)
1945.It Li glidepoint
1946ALPS GlidePoint (serial)
1947.It Li thinkingmouse
1948Kensington ThinkingMouse (serial)
1949.It Li ps/2
1950PS/2 mouse
1951.It Li mmhittab
1952MM HitTablet (serial)
1953.It Li x10mouseremote
1954X10 MouseRemote (serial)
1955.It Li versapad
1956Interlink VersaPad (serial)
1957.El
1958.Pp
1959Even if the mouse is not in the above list, it may be compatible
1960with one in the list.
1961Refer to the man page for
1962.Xr moused 8
1963for compatibility information.
1964.Pp
1965It should also be noted that while this is enabled, any
1966other client of the mouse (such as an X server) should access
1967the mouse through the virtual mouse device,
1968.Pa /dev/sysmouse ,
1969and configure it as a
1970.Dq Li sysmouse
1971type mouse, since all
1972mouse data is converted to this single canonical format when using
1973.Xr moused 8 .
1974If the client program does not support the
1975.Dq Li sysmouse
1976type, specify the
1977.Dq Li mousesystems
1978type.
1979It is the second preferred type.
1980.It Va moused_port
1981.Pq Vt str
1982If
1983.Va moused_enable
1984is set to
1985.Dq Li YES ,
1986this is the actual port the mouse is on.
1987It might be
1988.Pa /dev/cuaa0
1989for a COM1 serial mouse or
1990.Pa /dev/psm0
1991for a PS/2 mouse, for example.
1992.It Va moused_flags
1993.Pq Vt str
1994If
1995.Va moused_type
1996is set, these are the additional flags to pass to the
1997.Xr moused 8
1998daemon.
1999.It Va mousechar_start
2000.Pq Vt int
2001If set to
2002.Dq Li NO ,
2003the default mouse cursor character range
2004.Li 0xd0 Ns - Ns Li 0xd3
2005is used, otherwise the range start is set to
2006.Ar value
2007character, see
2008.Xr vidcontrol 1 .
2009Use if the default range is occupied in the language code table.
2010.It Va vidhistory
2011.Pq Vt int
2012Set the size of the history (scrollback) buffer in lines.
2013.It Va allscreens_flags
2014.Pq Vt str
2015If set,
2016.Xr vidcontrol 1
2017is run with these options for each of the virtual terminals
2018.Pq Pa /dev/ttyv* .
2019For example,
2020.Dq Fl m Cm on
2021will enable the mouse pointer on all virtual terminals if
2022.Va moused_enable
2023is set to
2024.Dq Li YES .
2025.It Va allscreens_kbdflags
2026.Pq Vt str
2027If set,
2028.Xr kbdcontrol 1
2029is run with these options for each of the virtual terminals
2030.Pq Pa /dev/ttyv* .
2031For example,
2032.Dq Fl h Li 200
2033will set the
2034.Xr syscons 4
2035scrollback (history) buffer to 200 lines.
2036.It Va cron_enable
2037.Pq Vt bool
2038If set to
2039.Dq Li YES ,
2040run the
2041.Xr cron 8
2042daemon at system boot time.
2043.It Va cron_program
2044.Pq Vt str
2045Path to
2046.Xr cron 8
2047(default
2048.Pa /usr/sbin/cron ) .
2049.It Va cron_flags
2050.Pq Vt str
2051If
2052.Va cron_enable
2053is set to
2054.Dq Li YES ,
2055these are the flags to pass to
2056.Xr cron 8 .
2057.It Va lpd_program
2058.Pq Vt str
2059Path to
2060.Xr lpd 8
2061(default
2062.Pa /usr/sbin/lpd ) .
2063.It Va lpd_enable
2064.Pq Vt bool
2065If set to
2066.Dq Li YES ,
2067run the
2068.Xr lpd 8
2069daemon at system boot time.
2070.It Va lpd_flags
2071.Pq Vt str
2072If
2073.Va lpd_enable
2074is set to
2075.Dq Li YES ,
2076these are the flags to pass to the
2077.Xr lpd 8
2078daemon.
2079.It Va nscd_enable
2080.Pq Vt bool
2081If set to
2082.Dq Li YES ,
2083run the
2084.Xr nscd 8
2085daemon at system boot time.
2086.It Va mixer_enable
2087.Pq Vt bool
2088If set to
2089.Dq Li YES ,
2090preserve
2091.Xr mixer 8
2092settings across reboots.
2093.It Va mta_start_script
2094.Pq Vt str
2095The full path to the script to run to start
2096a mail transfer agent.
2097The default is
2098.Pa /etc/rc.sendmail .
2099The
2100.Va sendmail_*
2101variables which
2102.Pa /etc/rc.sendmail
2103uses are documented in the
2104.Xr rc.sendmail 8
2105man page.
2106.It Va fixbootfile
2107.Pq Vt bool
2108In a
2109.Sq HAMMER ROOT with UFS /boot
2110setup, the boot loader will not set up the
2111.Va kern.bootfile
2112sysctl correctly.
2113The system will attempt to fix this on its own.
2114Set this variable to
2115.Dq Li NO
2116to turn this behavior off.
2117.It Va dumpdev
2118.Pq Vt str
2119Indicates the device (usually a swap partition) to which a crash dump
2120should be written in the event of a system crash.
2121The value of this variable is passed as the argument to
2122.Xr dumpon 8
2123and
2124.Xr savecore 8 .
2125To disable crash dumps, set this variable to
2126.Dq Li NO .
2127.It Va dumpdir
2128.Pq Vt str
2129When the system reboots after a crash and a crash dump is found on the
2130device specified by the
2131.Va dumpdev
2132variable,
2133.Xr savecore 8
2134will save that crash dump and a copy of the kernel to the directory
2135specified by the
2136.Va dumpdir
2137variable.
2138The default value is
2139.Pa /var/crash .
2140Set to
2141.Dq Li NO
2142to not run
2143.Xr savecore 8
2144at boot time when
2145.Va dumpdir
2146is set.
2147.It Va savecore_flags
2148.Pq Vt str
2149If crash dumps are enabled, these are the flags to pass to the
2150.Xr savecore 8
2151utility.
2152.It Va crashinfo_enable
2153.Pq Vt bool
2154Set to
2155.Dq Li YES
2156to turn on automatic crash dump summary generation using the utility
2157specified by the
2158.Va crashinfo_program
2159variable.
2160.It Va crashinfo_program
2161.Pq Vt str
2162Program to run to generate a crash dump summary if the variable
2163.Va crashinfo_enable
2164is set to
2165.Dq Li YES .
2166The default value is
2167.Pa /usr/sbin/crashinfo .
2168.It Va enable_quotas
2169.Pq Vt bool
2170Set to
2171.Dq Li YES
2172to turn on user disk quotas on system startup via the
2173.Xr quotaon 8
2174command.
2175.It Va check_quotas
2176.Pq Vt bool
2177Set to
2178.Dq Li YES
2179to enable user disk quota checking via the
2180.Xr quotacheck 8
2181command.
2182.It Va accounting_enable
2183.Pq Vt bool
2184Set to
2185.Dq Li YES
2186to enable system accounting through the
2187.Xr accton 8
2188facility.
2189.It Va linux_enable
2190.Pq Vt bool
2191Set to
2192.Dq Li YES
2193to enable Linux/ELF binary emulation at system initial boot time.
2194.It Va sysvipc_enable
2195.Pq Vt bool
2196If set to
2197.Dq Li YES ,
2198load System V IPC primitives at boot time.
2199.\" ----- cleanvar_enable setting--------------------------------
2200.It Va cleanvar_enable
2201.Pq Vt bool
2202Set to
2203.Dq Li YES
2204to have
2205.Pa /var/run ,
2206.Pa /var/spool/lock
2207and
2208.Pa /var/spool/uucp/.Temp/*
2209cleaned at startup.
2210.\" ----- clear_tmp_enable setting-------------------------------
2211.It Va clear_tmp_enable
2212.Pq Vt bool
2213Set to
2214.Dq Li YES
2215to have
2216.Pa /tmp
2217cleaned at startup.
2218.\" ----- ldconfig_paths setting --------------------------------
2219.It Va ldconfig_paths
2220.Pq Vt str
2221Set to the list of shared library paths to use with
2222.Xr ldconfig 8 .
2223NOTE:
2224.Pa /usr/lib
2225will always be added first, so it need not appear in this list.
2226.It Va ldconfig_insecure
2227.Pq Vt bool
2228The
2229.Xr ldconfig 8
2230utility normally refuses to use directories
2231which are writable by anyone except root.
2232Set this variable to
2233.Dq Li YES
2234to disable that security check during system startup.
2235.It Va ldconfig_local_dirs
2236.Pq Vt str
2237Set to the list of local
2238.Xr ldconfig 8
2239directories.
2240The names of all files in the directories listed will be
2241passed as arguments to
2242.Xr ldconfig 8 .
2243.It Va kern_securelevel
2244.Pq Vt int
2245The kernel security level to set at startup.
2246The allowed range of
2247.Ar value
2248ranges from \-1 (the compile time default) to 3 (the most secure).
2249See
2250.Xr init 8
2251for the list of possible security levels and their effect on system operation.
2252.It Va start_vinum
2253.Pq Vt bool
2254Set to
2255.Dq Li YES
2256to start
2257.Xr vinum 8
2258at system boot time.
2259.It Va sshd_enable
2260.Pq Vt bool
2261Set to
2262.Dq Li YES
2263to start
2264.Xr sshd 8
2265at system boot time.
2266.It Va sshd_program
2267.Pq Vt str
2268Path to the SSH server program
2269(default
2270.Pa /usr/sbin/sshd ) .
2271.It Va sshd_flags
2272.Pq Vt str
2273If
2274.Va sshd_enable
2275is set to
2276.Dq Li YES ,
2277these are the flags to pass to the
2278.Xr sshd 8
2279daemon.
2280.It Va ftpd_enable
2281.Pq Vt bool
2282Set to
2283.Dq Li YES
2284to start
2285.Xr ftpd 8
2286at system boot time.
2287.It Va ftpd_flags
2288.Pq Vt str
2289If
2290.Va ftpd_enable
2291is set to
2292.Dq Li YES ,
2293these are the flags to pass to the
2294.Xr ftpd 8
2295daemon.
2296.It Va usbd_enable
2297.Pq Vt bool
2298If set to
2299.Dq Li YES ,
2300run the
2301.Xr usbd 8
2302daemon at boot time.
2303.It Va usbd_flags
2304.Pq Vt str
2305If
2306.Va usbd_enable
2307is set to
2308.Dq Li YES ,
2309these are the flags passed to
2310.Xr usbd 8
2311daemon.
2312.It Va watchdogd_enable
2313.Pq Vt bool
2314If set to
2315.Dq Li YES ,
2316start the
2317.Xr watchdogd 8
2318daemon at boot time.
2319This requires that the kernel have been compiled with
2320.Cd "options WATCHDOG" .
2321.It Va jail_enable
2322.Pq Vt bool
2323If set to
2324.Dq Li NO ,
2325any configured jails will not be started.
2326.It Va jail_list
2327.Pq Vt str
2328A space separated list of names for jails.
2329This is purely a configuration aid to help identify and
2330configure multiple jails.
2331The names specified in this list will be used to
2332identify settings common to an instance of a jail.
2333Assuming that the jail in question was named
2334.Li vjail ,
2335you would have the following dependent variables:
2336.Bd -literal
2337jail_vjail_hostname="jail.example.com"
2338jail_vjail_ip="192.168.1.100"
2339jail_vjail_rootdir="/var/jails/vjail/root"
2340.Ed
2341.Pp
2342.It Va jail_flags
2343.Pq Vt str
2344Unset by default.
2345When set, use as default value for
2346.Va jail_ Ns Ao Ar jname Ac Ns Va _flags
2347for every jail in
2348.Va jail_list .
2349.It Va jail_interface
2350.Pq Vt str
2351Unset by default.
2352When set, use as default value for
2353.Va jail_ Ns Ao Ar jname Ac Ns Va _interface
2354for every jail in
2355.Va jail_list .
2356.It Va jail_fstab
2357.Pq Vt str
2358Unset by default.
2359When set, use as default value for
2360.Va jail_ Ns Ao Ar jname Ac Ns Va _fstab
2361for every jail in
2362.Va jail_list .
2363.It Va jail_mount_enable
2364.Pq Vt bool
2365Set to
2366.Dq Li NO
2367by default.
2368When set to
2369.Dq Li YES ,
2370sets
2371.Va jail_ Ns Ao Ar jname Ac Ns Va _mount_enable
2372to
2373.Dq Li YES
2374by default for every jail in
2375.Va jail_list .
2376.It Va jail_fdesc_enable
2377.Pq Vt bool
2378Set to
2379.Dq Li NO
2380by default.
2381When set to
2382.Dq Li YES ,
2383sets
2384.Va jail_ Ns Ao Ar jname Ac Ns Va _fdesc_enable
2385to
2386.Dq Li YES
2387by default for every jail in
2388.Va jail_list .
2389.It Va jail_procfs_enable
2390.Pq Vt bool
2391Set to
2392.Dq Li NO
2393by default.
2394When set to
2395.Dq Li YES ,
2396sets
2397.Va jail_ Ns Ao Ar jname Ac Ns Va _procfs_enable
2398to
2399.Dq Li YES
2400by default for every jail in
2401.Va jail_list .
2402.It Va jail_devfs_enable
2403.Pq Vt bool
2404Set to
2405.Dq Li NO
2406by default.
2407When set to
2408.Dq Li YES ,
2409sets
2410.Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_enable
2411to
2412.Dq Li YES
2413by default for every jail in
2414.Va jail_list .
2415.It Va jail_exec_start
2416.Pq Vt str
2417Unset by default.
2418When set, use as default value for
2419.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_start
2420for every jail in
2421.Va jail_list .
2422.It Va jail_exec_stop
2423Unset by default.
2424When set, use as default value for
2425.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_stop
2426for every jail in
2427.Va jail_list .
2428.It Va jail_ Ns Ao Ar jname Ac Ns Va _rootdir
2429.Pq Vt str
2430Unset by default.
2431Set to the root directory used by jail
2432.Va jname .
2433.It Va jail_ Ns Ao Ar jname Ac Ns Va _hostname
2434.Pq Vt str
2435Unset by default.
2436Set to the fully qualified domain name (FQDN) assigned to jail
2437.Va jname .
2438.It Va jail_ Ns Ao Ar jname Ac Ns Va _ip
2439.Pq Vt str
2440Unset by default.
2441Set to the IP address assigned to jail
2442.Va jname .
2443.It Va jail_ Ns Ao Ar jname Ac Ns Va _flags
2444.Pq Vt str
2445Set to
2446.Dq Li -l -U root
2447by default.
2448These are flags to pass to
2449.Xr jail 8 .
2450.It Va jail_ Ns Ao Ar jname Ac Ns Va _interface
2451.Pq Vt str
2452Unset by default.
2453When set, sets the interface to use when setting IP address alias.
2454Note that the alias is created at jail startup and removed at jail shutdown.
2455.It Va jail_ Ns Ao Ar jname Ac Ns Va _fstab
2456.Pq Vt str
2457Set to
2458.Pa /etc/fstab. Ns Aq Ar jname
2459by default.
2460This is the file system information file to use for jail
2461.Va jname .
2462.It Va jail_ Ns Ao Ar jname Ac Ns Va _mount_enable
2463.Pq Vt bool
2464Set to
2465.Dq Li NO
2466by default.
2467When set to
2468.Dq Li YES ,
2469mount all file systems from
2470.Va jail_ Ns Ao Ar jname Ac Ns Va _fstab
2471at jail startup.
2472.It Va jail_ Ns Ao Ar jname Ac Ns Va _fdesc_enable
2473.Pq Vt bool
2474Set to
2475.Dq Li NO
2476by default.
2477When set to
2478.Dq Li YES ,
2479mount the file-descriptor file system inside jail
2480.Ar jname
2481at jail startup.
2482.It Va jail_ Ns Ao Ar jname Ac Ns Va _procfs_enable
2483.Pq Vt bool
2484Set to
2485.Dq Li NO
2486by default.
2487When set to
2488.Dq Li YES ,
2489mount the process file system inside jail
2490.Ar jname
2491at jail startup.
2492.It Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_enable
2493.Pq Vt bool
2494Set to
2495.Dq Li NO
2496by default.
2497When set to
2498.Dq Li YES ,
2499mount the device file system inside jail
2500.Ar jname
2501at jail startup.
2502.It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_start
2503.Pq Vt str
2504Set to
2505.Dq Li /bin/sh /etc/rc
2506by default.
2507This is the command executed at jail startup.
2508.It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_stop
2509.Pq Vt str
2510Set to
2511.Dq Li /bin/sh /etc/rc.shutdown
2512by default.
2513This is the command executed at jail shutdown.
2514.It Va jail_set_hostname_allow
2515.Pq Vt bool
2516If set to
2517.Dq Li NO ,
2518do not allow the root user in a jail to set its hostname.
2519.It Va jail_socket_unixiproute_only
2520.Pq Vt bool
2521If set to
2522.Dq Li YES ,
2523do not allow any sockets,
2524besides UNIX/IP/route sockets,
2525to be used within a jail.
2526.It Va jail_sysvipc_allow
2527.Pq Vt bool
2528If set to
2529.Dq Li YES ,
2530allow applications within a jail to use System V IPC.
2531.It Va lvm_enable
2532.Pq Vt bool
2533If set to
2534.Dq Li YES
2535LVM volumes will be discovered and configured on boot.
2536.It Va newsyslog_enable
2537.Pq Vt bool
2538If set to
2539.Dq Li YES ,
2540run
2541.Xr newsyslog 8
2542before syslogd starts.
2543.It Va newsyslog_flags
2544.Pq Vt str
2545If
2546.Va newsyslog_enable
2547is set to
2548.Dq Li YES ,
2549these are the flags passed to
2550.Xr newsyslog 8 .
2551.It Va resident_enable
2552.Pq Vt bool
2553If set to
2554.Dq Li YES ,
2555make the dynamic binaries listed in
2556.Pa /etc/resident.conf
2557resident.
2558.It Va varsym_enable
2559.Pq Vt bool
2560If set to
2561.Dq Li YES ,
2562process
2563.Pa /etc/varsym.conf
2564to set system-wide variables for variant symlinks.
2565.It Va rand_irqs
2566.Pq Vt str
2567Set either to
2568.Dq Li NO
2569or a whitespace separated list of IRQ numbers which will be used as a source of
2570randomness.
2571.\" -----------------------------------------------------
2572.It Va entropy_dir
2573.Pq Vt str
2574Set to
2575.Dq Li NO
2576to disable caching entropy via
2577.Xr cron 8 .
2578Otherwise set to the directory used to store entropy files in.
2579.It Va entropy_file
2580.Pq Vt str
2581Set to
2582.Dq Li NO
2583to disable caching entropy through reboots.
2584Otherwise set to the filename used to store cached entropy through reboots.
2585This file should be located on the root file system to seed the
2586.Xr random 4
2587device as early as possible in the boot process.
2588.It Va ipsec_enable
2589.Pq Vt bool
2590Set to
2591.Dq Li YES
2592to run
2593.Xr setkey 8
2594on
2595.Va ipsec_file
2596at boot time.
2597.It Va ipsec_file
2598.Pq Vt str
2599Configuration file for
2600.Xr setkey 8 .
2601.It Va dmesg_enable
2602.Pq Vt bool
2603Set to
2604.Dq Li YES
2605to save
2606.Xr dmesg 8
2607to
2608.Pa /var/run/dmesg.boot
2609on boot.
2610.It Va rcshutdown_timeout
2611.Pq Vt int
2612If set, start a watchdog timer in the background which will terminate
2613.Pa rc.shutdown
2614if
2615.Xr shutdown 8
2616has not completed within the specified time (in seconds).
2617Notice that in addition to this soft timeout,
2618.Xr init 8
2619also applies a hard timeout for the execution of
2620.Pa rc.shutdown .
2621This is configured via
2622.Xr sysctl 8
2623variable
2624.Va kern.init_shutdown_timeout
2625and defaults to 120 seconds. Setting the value of
2626.Va rcshutdown_timeout
2627to more than 120 seconds will have no effect until the
2628.Xr sysctl 8
2629variable
2630.Va kern.init_shutdown_timeout
2631is also increased.
2632.It Va udevd_enable
2633.Pq Vt bool
2634If set to
2635.Dq Li YES ,
2636the udevd daemon will be started on boot.
2637.It Va vfs_quota_enable
2638.Pq Vt bool
2639If set to
2640.Dq Li YES ,
2641vfs quota rc.d scripts will be run on boot.
2642.It Va vfs_quota_sync
2643.Pq Vt str
2644List of mount points whose counters are to be synchronized with on-disk
2645usage during system startup. See also
2646.Xr vquota 8 .
2647.It Va vknetd_enable
2648.Pq Vt bool
2649If set to
2650.Dq Li YES ,
2651.Xr vknetd 8
2652will be started on boot.
2653.It Va vknetd_flags
2654.Pq Vt bool
2655Additional flags passed to
2656.Xr vknetd 8 .
2657Usually address/cidrbits is specified here.
2658When no flags are passed, default option
2659.Fl U
2660will be used.
2661.It Va vkernel_enable
2662.Pq Vt bool
2663If set to
2664.Dq Li NO ,
2665any configured vkernels will not be started.
2666.It Va vkernel_kill_timeout
2667.Pq Vt int
2668This defines the default number of seconds that we will wait for the
2669vkernel to shut down on it's own. If after this time it's still alive,
2670it will be killed with SIGKILL.
2671.It Va vkernel_bin
2672.Pq Vt str
2673Defines the default path to the vkernel binary.
2674.It Va vkernel_list
2675.Pq Vt str
2676A space separated list of names for vkernels.
2677This is purely a configuration aid to help identify and
2678configure multiple vkernels.
2679The names specified in this list will be used to
2680identify settings common to a vkernel instance.
2681Assuming that the vkernel in question was named
2682.Li example ,
2683you would have the following dependent variables
2684(filled with reference values in this text):
2685.Bd -literal
2686vkernel_example_bin="/usr/obj/usr/src/sys/VKERNEL/kernel.debug"
2687vkernel_example_memsize="64m"
2688vkernel_example_rootimg_list="/var/vkernel/rootimg.01"
2689vkernel_example_iface_list="auto:bridge0"
2690vkernel_example_logfile="/dev/null"
2691vkernel_example_flags="-U"
2692vkernel_example_kill_timeout="45"
2693.Ed
2694.Pp
2695The last five are optional.
2696They default to an empty string if not set, except for logfile which defaults to
2697.Pa /dev/null
2698if it is not set.
2699.El
2700.Sh FILES
2701.Bl -tag -width ".Pa /etc/start_if. Ns Aq Ar interface" -compact
2702.It Pa /etc/defaults/rc.conf
2703.It Pa /etc/rc.conf
2704.It Pa /etc/rc.conf.local
2705.It Pa /etc/start_if. Ns Aq Ar interface
2706.El
2707.Sh SEE ALSO
2708.Xr catman 1 ,
2709.Xr gdb 1 ,
2710.Xr info 1 ,
2711.Xr kbdcontrol 1 ,
2712.Xr varsym 1 ,
2713.Xr vidcontrol 1 ,
2714.Xr ip 4 ,
2715.Xr ipfw 4 ,
2716.Xr kld 4 ,
2717.Xr pf 4 ,
2718.Xr tcp 4 ,
2719.Xr udp 4 ,
2720.Xr exports 5 ,
2721.Xr motd 5 ,
2722.Xr resident.conf 5 ,
2723.Xr varsym.conf 5 ,
2724.Xr accton 8 ,
2725.Xr amd 8 ,
2726.Xr apm 8 ,
2727.Xr atm 8 ,
2728.Xr btconfig 8 ,
2729.Xr bthcid 8 ,
2730.Xr cron 8 ,
2731.Xr devd 8 ,
2732.Xr dhclient 8 ,
2733.Xr dntpd 8 ,
2734.Xr ftpd 8 ,
2735.Xr ifconfig 8 ,
2736.Xr inetd 8 ,
2737.Xr jail 8 ,
2738.Xr lpd 8 ,
2739.Xr makewhatis 8 ,
2740.Xr mixer 8 ,
2741.Xr mountd 8 ,
2742.Xr moused 8 ,
2743.Xr mrouted 8 ,
2744.Xr named 8 ,
2745.Xr nfsd 8 ,
2746.Xr pcnfsd 8 ,
2747.Xr pfctl 8 ,
2748.Xr pflogd 8 ,
2749.Xr quotacheck 8 ,
2750.Xr quotaon 8 ,
2751.Xr rc 8 ,
2752.Xr rc.sendmail 8 ,
2753.Xr resident 8 ,
2754.Xr rndcontrol 8 ,
2755.Xr route 8 ,
2756.Xr routed 8 ,
2757.Xr rpcbind 8 ,
2758.Xr rpc.lockd 8 ,
2759.Xr rpc.statd 8 ,
2760.Xr rtadvd 8 ,
2761.Xr rtsold 8 ,
2762.Xr rwhod 8 ,
2763.Xr savecore 8 ,
2764.Xr sdpd 8 ,
2765.Xr sensorsd 8 ,
2766.Xr sshd 8 ,
2767.Xr swapon 8 ,
2768.Xr sysctl 8 ,
2769.Xr syslogd 8 ,
2770.Xr timed 8 ,
2771.Xr usbd 8 ,
2772.Xr vinum 8 ,
2773.Xr yp 8 ,
2774.Xr ypbind 8 ,
2775.Xr ypserv 8 ,
2776.Xr ypset 8
2777.Sh HISTORY
2778The
2779.Nm
2780file appeared in
2781.Fx 2.2.2 .
2782.Sh AUTHORS
2783.An Jordan K. Hubbard .
2784