1.\" DO NOT EDIT-- this file is @generated by tools/build/options/makeman. 2.Dd August 1, 2023 3.Dt SRC.CONF 5 4.Os 5.Sh NAME 6.Nm src.conf 7.Nd "source build options" 8.Sh DESCRIPTION 9The 10.Nm 11file contains variables that control what components will be generated during 12the build process of the 13.Fx 14source tree; see 15.Xr build 7 . 16.Pp 17The 18.Nm 19file uses the standard makefile syntax. 20However, 21.Nm 22should not specify any dependencies to 23.Xr make 1 . 24Instead, 25.Nm 26is to set 27.Xr make 1 28variables that control the aspects of how the system builds. 29.Pp 30The default location of 31.Nm 32is 33.Pa /etc/src.conf , 34though an alternative location can be specified in the 35.Xr make 1 36variable 37.Va SRCCONF . 38Overriding the location of 39.Nm 40may be necessary if the system-wide settings are not suitable 41for a particular build. 42For instance, setting 43.Va SRCCONF 44to 45.Pa /dev/null 46effectively resets all build controls to their defaults. 47.Pp 48The only purpose of 49.Nm 50is to control the compilation of the 51.Fx 52source code, which is usually located in 53.Pa /usr/src . 54As a rule, the system administrator creates 55.Nm 56when the values of certain control variables need to be changed 57from their defaults. 58.Pp 59In addition, control variables can be specified 60for a particular build via the 61.Fl D 62option of 63.Xr make 1 64or in its environment; see 65.Xr environ 7 . 66.Pp 67The environment of 68.Xr make 1 69for the build can be controlled via the 70.Va SRC_ENV_CONF 71variable, which defaults to 72.Pa /etc/src-env.conf . 73Some examples that may only be set in this file are 74.Va WITH_DIRDEPS_BUILD , 75and 76.Va WITH_META_MODE , 77and 78.Va MAKEOBJDIRPREFIX 79as they are environment-only variables. 80.Pp 81The values of variables are ignored regardless of their setting; 82even if they would be set to 83.Dq Li FALSE 84or 85.Dq Li NO . 86The presence of an option causes 87it to be honored by 88.Xr make 1 . 89.Pp 90This list provides a name and short description for variables 91that can be used for source builds. 92.Bl -tag -width indent 93.It Va WITHOUT_ACCT 94Do not build process accounting tools such as 95.Xr accton 8 96and 97.Xr sa 8 . 98.It Va WITHOUT_ACPI 99Do not build 100.Xr acpiconf 8 , 101.Xr acpidump 8 102and related programs. 103.It Va WITHOUT_APM 104Do not build 105.Xr apm 8 , 106.Xr apmd 8 107and related programs. 108.It Va WITH_ASAN 109Build the base system with Address Sanitizer (ASan) to detect 110memory corruption bugs such as buffer overflows or use-after-free. 111Requires that Clang be used as the base system compiler 112and that the runtime support library is available. 113When set, it enforces these options: 114.Pp 115.Bl -item -compact 116.It 117.Va WITH_LLVM_BINUTILS 118.It 119.Va WITH_LLVM_CXXFILT 120.El 121.It Va WITHOUT_ASSERT_DEBUG 122Compile programs and libraries without the 123.Xr assert 3 124checks. 125.It Va WITHOUT_AT 126Do not build 127.Xr at 1 128and related utilities. 129.It Va WITHOUT_AUDIT 130Do not build audit support into system programs. 131.It Va WITHOUT_AUTHPF 132Do not build 133.Xr authpf 8 . 134.It Va WITHOUT_AUTOFS 135Do not build 136.Xr autofs 5 137related programs, libraries, and kernel modules. 138.It Va WITHOUT_AUTO_OBJ 139Disable automatic creation of objdirs. 140This is enabled by default if the wanted OBJDIR is writable by the current user. 141.Pp 142This must be set in the environment, make command line, or 143.Pa /etc/src-env.conf , 144not 145.Pa /etc/src.conf . 146.It Va WITH_BEARSSL 147Build the BearSSL library. 148.Pp 149BearSSL is a tiny SSL library suitable for embedded environments. 150For details see 151.Lk https://www.BearSSL.org/ 152.Pp 153This library is currently only used to perform 154signature verification and related operations 155for Verified Exec and 156.Xr loader 8 . 157When set, these options are also in effect: 158.Pp 159.Bl -inset -compact 160.It Va WITH_LOADER_EFI_SECUREBOOT 161(unless 162.Va WITHOUT_LOADER_EFI_SECUREBOOT 163is set explicitly) 164.It Va WITH_LOADER_VERIEXEC 165(unless 166.Va WITHOUT_LOADER_VERIEXEC 167is set explicitly) 168.It Va WITH_LOADER_VERIEXEC_VECTX 169(unless 170.Va WITHOUT_LOADER_VERIEXEC_VECTX 171is set explicitly) 172.It Va WITH_VERIEXEC 173(unless 174.Va WITHOUT_VERIEXEC 175is set explicitly) 176.El 177.It Va WITHOUT_BHYVE 178Do not build or install 179.Xr bhyve 8 , 180associated utilities, and examples. 181.Pp 182This option only affects amd64/amd64. 183.It Va WITH_BHYVE_SNAPSHOT 184Include support for save and restore (snapshots) in 185.Xr bhyve 8 186and 187.Xr bhyvectl 8 . 188.Pp 189This option only affects amd64/amd64. 190.It Va WITH_BIND_NOW 191Build all binaries with the 192.Dv DF_BIND_NOW 193flag set to indicate that the run-time loader should perform all relocation 194processing at process startup rather than on demand. 195The combination of the 196.Va BIND_NOW 197and 198.Va RELRO 199options provide "full" Relocation Read-Only (RELRO) support. 200With full RELRO the entire GOT is made read-only after performing relocation at 201startup, avoiding GOT overwrite attacks. 202.It Va WITHOUT_BLACKLIST 203Set this if you do not want to build 204.Xr blacklistd 8 205and 206.Xr blacklistctl 8 . 207When set, these options are also in effect: 208.Pp 209.Bl -inset -compact 210.It Va WITHOUT_BLACKLIST_SUPPORT 211(unless 212.Va WITH_BLACKLIST_SUPPORT 213is set explicitly) 214.El 215.It Va WITHOUT_BLACKLIST_SUPPORT 216Build some programs without 217.Xr libblacklist 3 218support, like 219.Xr fingerd 8 , 220.Xr ftpd 8 , 221and 222.Xr sshd 8 . 223.It Va WITHOUT_BLUETOOTH 224Do not build Bluetooth related kernel modules, programs and libraries. 225.It Va WITHOUT_BOOT 226Do not build the boot blocks and loader. 227.It Va WITHOUT_BOOTPARAMD 228Do not build or install 229.Xr bootparamd 8 . 230.It Va WITHOUT_BOOTPD 231Do not build or install 232.Xr bootpd 8 . 233.It Va WITHOUT_BSDINSTALL 234Do not build 235.Xr bsdinstall 8 , 236.Xr sade 8 , 237and related programs. 238.It Va WITHOUT_BSD_CPIO 239Do not build the BSD licensed version of cpio based on 240.Xr libarchive 3 . 241.It Va WITHOUT_BSNMP 242Do not build or install 243.Xr bsnmpd 1 244and related libraries and data files. 245.It Va WITHOUT_BZIP2 246Do not build contributed bzip2 software as a part of the base system. 247.Bf -symbolic 248The option has no effect yet. 249.Ef 250When set, these options are also in effect: 251.Pp 252.Bl -inset -compact 253.It Va WITHOUT_BZIP2_SUPPORT 254(unless 255.Va WITH_BZIP2_SUPPORT 256is set explicitly) 257.El 258.It Va WITHOUT_BZIP2_SUPPORT 259Build some programs without optional bzip2 support. 260.It Va WITHOUT_CALENDAR 261Do not build 262.Xr calendar 1 . 263.It Va WITHOUT_CAPSICUM 264This option has no effect. 265.It Va WITHOUT_CAROOT 266Do not add the trusted certificates from the Mozilla NSS bundle to 267base. 268.It Va WITHOUT_CASPER 269This option has no effect. 270.It Va WITH_CCACHE_BUILD 271Use 272.Xr ccache 1 273for the build. 274No configuration is required except to install the 275.Sy devel/ccache 276package. 277When using with 278.Xr distcc 1 , 279set 280.Sy CCACHE_PREFIX=/usr/local/bin/distcc . 281The default cache directory of 282.Pa $HOME/.ccache 283will be used, which can be overridden by setting 284.Sy CCACHE_DIR . 285The 286.Sy CCACHE_COMPILERCHECK 287option defaults to 288.Sy content 289when using the in-tree bootstrap compiler, 290and 291.Sy mtime 292when using an external compiler. 293The 294.Sy CCACHE_CPP2 295option is used for Clang but not GCC. 296.Pp 297Sharing a cache between multiple work directories requires using a layout 298similar to 299.Pa /some/prefix/src 300.Pa /some/prefix/obj 301and an environment such as: 302.Bd -literal -offset indent 303CCACHE_BASEDIR='${SRCTOP:H}' MAKEOBJDIRPREFIX='${SRCTOP:H}/obj' 304.Ed 305.Pp 306See 307.Xr ccache 1 308for more configuration options. 309.It Va WITHOUT_CCD 310Do not build 311.Xr geom_ccd 4 312and related utilities. 313.It Va WITHOUT_CDDL 314Do not build code licensed under Sun's CDDL. 315When set, it enforces these options: 316.Pp 317.Bl -item -compact 318.It 319.Va WITHOUT_CTF 320.It 321.Va WITHOUT_DTRACE 322.It 323.Va WITHOUT_LOADER_ZFS 324.It 325.Va WITHOUT_ZFS 326.El 327.It Va WITHOUT_CLANG 328Do not build the Clang C/C++ compiler during the regular phase of the build. 329When set, it enforces these options: 330.Pp 331.Bl -item -compact 332.It 333.Va WITHOUT_CLANG_EXTRAS 334.It 335.Va WITHOUT_CLANG_FORMAT 336.It 337.Va WITHOUT_CLANG_FULL 338.It 339.Va WITHOUT_LLVM_COV 340.El 341.Pp 342When set, these options are also in effect: 343.Pp 344.Bl -inset -compact 345.It Va WITHOUT_LLVM_TARGET_AARCH64 346(unless 347.Va WITH_LLVM_TARGET_AARCH64 348is set explicitly) 349.It Va WITHOUT_LLVM_TARGET_ALL 350(unless 351.Va WITH_LLVM_TARGET_ALL 352is set explicitly) 353.It Va WITHOUT_LLVM_TARGET_ARM 354(unless 355.Va WITH_LLVM_TARGET_ARM 356is set explicitly) 357.It Va WITHOUT_LLVM_TARGET_POWERPC 358(unless 359.Va WITH_LLVM_TARGET_POWERPC 360is set explicitly) 361.It Va WITHOUT_LLVM_TARGET_RISCV 362(unless 363.Va WITH_LLVM_TARGET_RISCV 364is set explicitly) 365.El 366.It Va WITHOUT_CLANG_BOOTSTRAP 367Do not build the Clang C/C++ compiler during the bootstrap phase of 368the build. 369To be able to build the system, either gcc or clang bootstrap must be 370enabled unless an alternate compiler is provided via XCC. 371.It Va WITH_CLANG_EXTRAS 372Build additional clang and llvm tools, such as bugpoint and 373clang-format. 374.It Va WITH_CLANG_FORMAT 375Build clang-format. 376.It Va WITHOUT_CLANG_FULL 377Avoid building the ARCMigrate, Rewriter and StaticAnalyzer components of 378the Clang C/C++ compiler. 379.It Va WITHOUT_CLEAN 380Do not clean before building world and/or kernel. 381.It Va WITHOUT_CPP 382Do not build 383.Xr cpp 1 . 384.It Va WITHOUT_CROSS_COMPILER 385Do not build any cross compiler in the cross-tools stage of buildworld. 386When compiling a different version of 387.Fx 388than what is installed on the system, provide an alternate 389compiler with XCC to ensure success. 390When compiling with an identical version of 391.Fx 392to the host, this option may be safely used. 393This option may also be safe when the host version of 394.Fx 395is close to the sources being built, but all bets are off if there have 396been any changes to the toolchain between the versions. 397When set, it enforces these options: 398.Pp 399.Bl -item -compact 400.It 401.Va WITHOUT_CLANG_BOOTSTRAP 402.It 403.Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP 404.It 405.Va WITHOUT_LLD_BOOTSTRAP 406.El 407.It Va WITHOUT_CRYPT 408Do not build any crypto code. 409When set, it enforces these options: 410.Pp 411.Bl -item -compact 412.It 413.Va WITHOUT_DMAGENT 414.It 415.Va WITHOUT_KERBEROS 416.It 417.Va WITHOUT_KERBEROS_SUPPORT 418.It 419.Va WITHOUT_LDNS 420.It 421.Va WITHOUT_LDNS_UTILS 422.It 423.Va WITHOUT_LOADER_ZFS 424.It 425.Va WITHOUT_OPENSSH 426.It 427.Va WITHOUT_OPENSSL 428.It 429.Va WITHOUT_OPENSSL_KTLS 430.It 431.Va WITHOUT_PKGBOOTSTRAP 432.It 433.Va WITHOUT_UNBOUND 434.It 435.Va WITHOUT_ZFS 436.El 437.Pp 438When set, these options are also in effect: 439.Pp 440.Bl -inset -compact 441.It Va WITHOUT_GSSAPI 442(unless 443.Va WITH_GSSAPI 444is set explicitly) 445.El 446.It Va WITH_CTF 447Compile with CTF (Compact C Type Format) data. 448CTF data encapsulates a reduced form of debugging information 449similar to DWARF and the venerable stabs and is required for DTrace. 450.It Va WITHOUT_CUSE 451Do not build CUSE-related programs and libraries. 452.It Va WITHOUT_CXGBETOOL 453Do not build 454.Xr cxgbetool 8 455.Pp 456This is a default setting on 457arm/armv7, powerpc/powerpc and riscv/riscv64. 458.It Va WITH_CXGBETOOL 459Build 460.Xr cxgbetool 8 461.Pp 462This is a default setting on 463amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le. 464.It Va WITHOUT_DEBUG_FILES 465Avoid building or installing standalone debug files for each 466executable binary and shared library. 467.It Va WITH_DETECT_TZ_CHANGES 468Make the time handling code detect changes to the timezone files. 469.It Va WITHOUT_DIALOG 470Do not build 471.Xr dialog 1 , 472.Xr dialog 3 , 473.Xr dpv 1 , 474and 475.Xr dpv 3 . 476When set, it enforces these options: 477.Pp 478.Bl -item -compact 479.It 480.Va WITHOUT_BSDINSTALL 481.El 482.It Va WITHOUT_DICT 483Do not build the Webster dictionary files. 484.It Va WITH_DIRDEPS_BUILD 485This is an alternate build system. 486For details see 487https://www.crufty.net/sjg/docs/freebsd-meta-mode.htm. 488Build commands can be seen from the top-level with: 489.Dl make show-valid-targets 490The build is driven by dirdeps.mk using 491.Va DIRDEPS 492stored in 493Makefile.depend files found in each directory. 494.Pp 495The build can be started from anywhere, and behaves the same. 496The initial instance of 497.Xr make 1 498recursively reads 499.Va DIRDEPS 500from 501.Pa Makefile.depend , 502computing a graph of tree dependencies from the current origin. 503Setting 504.Va NO_DIRDEPS 505skips checking dirdep dependencies and will only build in the current 506and child directories. 507.Va NO_DIRDEPS_BELOW 508skips building any dirdeps and only build the current directory. 509.Pp 510This also utilizes the 511.Va WITH_META_MODE 512logic for incremental builds. 513.Pp 514The build hides commands executed unless 515.Va NO_SILENT 516is defined. 517.Pp 518Note that there is currently no mass install feature for this. 519This build is designed for producing packages, that can then be installed 520on a target system. 521.Pp 522The implementation in 523.Fx 524is incomplete. 525Completion would require leaf directories for building each kernel 526and package so that their dependencies can be tracked. 527When set, it enforces these options: 528.Pp 529.Bl -item -compact 530.It 531.Va WITH_INSTALL_AS_USER 532.El 533.Pp 534When set, these options are also in effect: 535.Pp 536.Bl -inset -compact 537.It Va WITH_META_ERROR_TARGET 538(unless 539.Va WITHOUT_META_ERROR_TARGET 540is set explicitly) 541.It Va WITH_META_MODE 542(unless 543.Va WITHOUT_META_MODE 544is set explicitly) 545.It Va WITH_STAGING 546(unless 547.Va WITHOUT_STAGING 548is set explicitly) 549.It Va WITH_STAGING_MAN 550(unless 551.Va WITHOUT_STAGING_MAN 552is set explicitly) 553.It Va WITH_STAGING_PROG 554(unless 555.Va WITHOUT_STAGING_PROG 556is set explicitly) 557.It Va WITH_SYSROOT 558(unless 559.Va WITHOUT_SYSROOT 560is set explicitly) 561.El 562.Pp 563This must be set in the environment, make command line, or 564.Pa /etc/src-env.conf , 565not 566.Pa /etc/src.conf . 567.It Va WITH_DIRDEPS_CACHE 568Cache result of dirdeps.mk which can save significant time 569for subsequent builds. 570Depends on 571.Va WITH_DIRDEPS_BUILD . 572.Pp 573This must be set in the environment, make command line, or 574.Pa /etc/src-env.conf , 575not 576.Pa /etc/src.conf . 577.It Va WITH_DISK_IMAGE_TOOLS_BOOTSTRAP 578Build 579.Xr etdump 1 , 580.Xr makefs 8 581and 582.Xr mkimg 1 583as bootstrap tools. 584.It Va WITHOUT_DMAGENT 585Do not build dma Mail Transport Agent. 586.It Va WITHOUT_DOCCOMPRESS 587Do not install compressed system documentation. 588Only the uncompressed version will be installed. 589.It Va WITHOUT_DTRACE 590Do not build DTrace framework kernel modules, libraries, and user commands. 591When set, it enforces these options: 592.Pp 593.Bl -item -compact 594.It 595.Va WITHOUT_CTF 596.El 597.It Va WITH_DTRACE_ASAN 598Compile userspace DTrace code (libdtrace, dtrace(1), lockstat(1), plockstat(1)) 599with address and undefined behavior sanitizers. 600Requires that Clang be used as the base system compiler 601and that the runtime support library is available. 602.It Va WITH_DTRACE_TESTS 603Build and install the DTrace test suite in 604.Pa /usr/tests/cddl/usr.sbin/dtrace . 605This test suite is considered experimental on architectures other than 606amd64/amd64 and running it may cause system instability. 607.It Va WITHOUT_DYNAMICROOT 608Set this if you do not want to link 609.Pa /bin 610and 611.Pa /sbin 612dynamically. 613.It Va WITHOUT_EE 614Do not build and install 615.Xr edit 1 , 616.Xr ee 1 , 617and related programs. 618.It Va WITHOUT_EFI 619Set not to build 620.Xr efivar 3 621and 622.Xr efivar 8 . 623.Pp 624This is a default setting on 625i386/i386, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 626.It Va WITH_EFI 627Build 628.Xr efivar 3 629and 630.Xr efivar 8 . 631.Pp 632This is a default setting on 633amd64/amd64, arm/armv7 and arm64/aarch64. 634.It Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP 635Do not build ELF Tool Chain tools 636(addr2line, nm, size, strings and strip) 637as part of the bootstrap process. 638.Bf -symbolic 639An alternate bootstrap tool chain must be provided. 640.Ef 641.It Va WITHOUT_EXAMPLES 642Avoid installing examples to 643.Pa /usr/share/examples/ . 644.It Va WITH_EXPERIMENTAL 645Include experimental features in the build. 646.It Va WITH_EXTRA_TCP_STACKS 647Build extra TCP stack modules. 648.It Va WITHOUT_FDT 649Do not build Flattened Device Tree support as part of the base system. 650This includes the device tree compiler (dtc) and libfdt support library. 651.Pp 652This is a default setting on 653amd64/amd64 and i386/i386. 654.It Va WITH_FDT 655Build Flattened Device Tree support as part of the base system. 656This includes the device tree compiler (dtc) and libfdt support library. 657.Pp 658This is a default setting on 659arm/armv7, arm64/aarch64, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 660.It Va WITHOUT_FILE 661Do not build 662.Xr file 1 663and related programs. 664.It Va WITHOUT_FINGER 665Do not build or install 666.Xr finger 1 667and 668.Xr fingerd 8 . 669.It Va WITHOUT_FLOPPY 670Do not build or install programs 671for operating floppy disk driver. 672.It Va WITHOUT_FORMAT_EXTENSIONS 673Do not enable 674.Fl fformat-extensions 675when compiling the kernel. 676Also disables all format checking. 677.It Va WITHOUT_FORTH 678Build bootloaders without Forth support. 679.It Va WITHOUT_FP_LIBC 680Build 681.Nm libc 682without floating-point support. 683.It Va WITHOUT_FREEBSD_UPDATE 684Do not build 685.Xr freebsd-update 8 . 686.It Va WITHOUT_FTP 687Do not build or install 688.Xr ftp 1 689and 690.Xr ftpd 8 . 691.It Va WITHOUT_GAMES 692Do not build games. 693.It Va WITHOUT_GH_BC 694Install the traditional FreeBSD 695.Xr bc 1 696and 697.Xr dc 1 698programs instead of the enhanced versions. 699.It Va WITHOUT_GNU_DIFF 700Do not build GNU 701.Xr diff3 1 . 702.It Va WITHOUT_GOOGLETEST 703Neither build nor install 704.Lb libgmock , 705.Lb libgtest , 706and dependent tests. 707.It Va WITHOUT_GPIO 708Do not build 709.Xr gpioctl 8 710as part of the base system. 711.It Va WITHOUT_GSSAPI 712Do not build libgssapi. 713.It Va WITHOUT_HAST 714Do not build 715.Xr hastd 8 716and related utilities. 717.It Va WITH_HESIOD 718Build Hesiod support. 719.It Va WITHOUT_HTML 720Do not build HTML docs. 721.It Va WITHOUT_HYPERV 722Do not build or install HyperV utilities. 723.Pp 724This is a default setting on 725arm/armv7, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 726.It Va WITH_HYPERV 727Build or install HyperV utilities. 728.Pp 729This is a default setting on 730amd64/amd64, arm64/aarch64 and i386/i386. 731.It Va WITHOUT_ICONV 732Do not build iconv as part of libc. 733.It Va WITHOUT_INCLUDES 734Do not install header files. 735This option used to be spelled 736.Va NO_INCS . 737.Bf -symbolic 738The option does not work for build targets. 739.Ef 740.It Va WITHOUT_INET 741Do not build programs and libraries related to IPv4 networking. 742When set, it enforces these options: 743.Pp 744.Bl -item -compact 745.It 746.Va WITHOUT_INET_SUPPORT 747.El 748.It Va WITHOUT_INET6 749Do not build 750programs and libraries related to IPv6 networking. 751When set, it enforces these options: 752.Pp 753.Bl -item -compact 754.It 755.Va WITHOUT_INET6_SUPPORT 756.El 757.It Va WITHOUT_INET6_SUPPORT 758Build libraries, programs, and kernel modules without IPv6 support. 759.It Va WITHOUT_INETD 760Do not build 761.Xr inetd 8 . 762.It Va WITHOUT_INET_SUPPORT 763Build libraries, programs, and kernel modules without IPv4 support. 764.It Va WITH_INIT_ALL_PATTERN 765Build the base system or kernel with stack variables initialized to 766.Pq compiler defined 767debugging patterns on function entry. 768This option requires the clang compiler. 769.It Va WITH_INIT_ALL_ZERO 770Build the base system or kernel with stack variables initialized 771to zero on function entry. 772This option requires that the clang compiler be used. 773.It Va WITHOUT_INSTALLLIB 774Set this to not install optional libraries. 775For example, when creating a 776.Xr nanobsd 8 777image. 778.Bf -symbolic 779The option does not work for build targets. 780.Ef 781.It Va WITH_INSTALL_AS_USER 782Make install targets succeed for non-root users by installing 783files with owner and group attributes set to that of the user running 784the 785.Xr make 1 786command. 787The user still must set the 788.Va DESTDIR 789variable to point to a directory where the user has write permissions. 790.It Va WITHOUT_IPFILTER 791Do not build IP Filter package. 792.It Va WITHOUT_IPFW 793Do not build IPFW tools. 794.It Va WITHOUT_IPSEC_SUPPORT 795Do not build the kernel with 796.Xr ipsec 4 797support. 798This option is needed for 799.Xr ipsec 4 800and 801.Xr tcpmd5 4 . 802.It Va WITHOUT_ISCSI 803Do not build 804.Xr iscsid 8 805and related utilities. 806.It Va WITHOUT_JAIL 807Do not build tools for the support of jails; e.g., 808.Xr jail 8 . 809.It Va WITHOUT_KDUMP 810Do not build 811.Xr kdump 1 812and 813.Xr truss 1 . 814.It Va WITHOUT_KERBEROS 815Set this to not build Kerberos 5 (KTH Heimdal). 816When set, these options are also in effect: 817.Pp 818.Bl -inset -compact 819.It Va WITHOUT_GSSAPI 820(unless 821.Va WITH_GSSAPI 822is set explicitly) 823.It Va WITHOUT_KERBEROS_SUPPORT 824(unless 825.Va WITH_KERBEROS_SUPPORT 826is set explicitly) 827.El 828.It Va WITHOUT_KERBEROS_SUPPORT 829Build some programs without Kerberos support, like 830.Xr ssh 1 , 831.Xr telnet 1 , 832and 833.Xr sshd 8 . 834.It Va WITH_KERNEL_RETPOLINE 835Enable the "retpoline" mitigation for CVE-2017-5715 in the kernel 836build. 837.It Va WITHOUT_KERNEL_SYMBOLS 838Do not install standalone kernel debug symbol files. 839This option has no effect at build time. 840.It Va WITHOUT_KVM 841Do not build the 842.Nm libkvm 843library as a part of the base system. 844.Bf -symbolic 845The option has no effect yet. 846.Ef 847When set, these options are also in effect: 848.Pp 849.Bl -inset -compact 850.It Va WITHOUT_KVM_SUPPORT 851(unless 852.Va WITH_KVM_SUPPORT 853is set explicitly) 854.El 855.It Va WITHOUT_KVM_SUPPORT 856Build some programs without optional 857.Nm libkvm 858support. 859.It Va WITHOUT_LDNS 860Setting this variable will prevent the LDNS library from being built. 861When set, it enforces these options: 862.Pp 863.Bl -item -compact 864.It 865.Va WITHOUT_LDNS_UTILS 866.It 867.Va WITHOUT_UNBOUND 868.El 869.It Va WITHOUT_LDNS_UTILS 870Setting this variable will prevent building the LDNS utilities 871.Xr drill 1 872and 873.Xr host 1 . 874.It Va WITHOUT_LEGACY_CONSOLE 875Do not build programs that support a legacy PC console; e.g., 876.Xr kbdcontrol 1 877and 878.Xr vidcontrol 1 . 879.It Va WITHOUT_LIB32 880On 64-bit platforms, do not build 32-bit library set and a 881.Nm ld-elf32.so.1 882runtime linker. 883.Pp 884This is a default setting on 885arm/armv7, i386/i386, powerpc/powerpc, powerpc/powerpc64le and riscv/riscv64. 886.It Va WITH_LIB32 887On 64-bit platforms, build the 32-bit library set and a 888.Nm ld-elf32.so.1 889runtime linker. 890.Pp 891This is a default setting on 892amd64/amd64, arm64/aarch64 and powerpc/powerpc64. 893.It Va WITHOUT_LLD 894Do not build LLVM's lld linker. 895.It Va WITHOUT_LLDB 896Do not build the LLDB debugger. 897.Pp 898This is a default setting on 899arm/armv7 and riscv/riscv64. 900.It Va WITH_LLDB 901Build the LLDB debugger. 902.Pp 903This is a default setting on 904amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le. 905.It Va WITHOUT_LLD_BOOTSTRAP 906Do not build the LLD linker during the bootstrap phase of 907the build. 908To be able to build the system an alternate linker must be provided via XLD. 909.It Va WITHOUT_LLD_IS_LD 910Do not install a 911.Pa /usr/bin/ld symlink 912to 913.Pa ld.lld . 914The system will not have a usable tool chain unless a linker is provided 915some other way. 916.It Va WITHOUT_LLVM_ASSERTIONS 917Disable debugging assertions in LLVM. 918.It Va WITH_LLVM_BINUTILS 919Install LLVM's binutils (without an llvm- prefix), 920instead of ELF Tool Chain's tools. 921This includes 922.Xr addr2line 1 , 923.Xr ar 1 , 924.Xr nm 1 , 925.Xr objcopy 1 , 926.Xr ranlib 1 , 927.Xr readelf 1 , 928.Xr size 1 , 929and 930.Xr strip 1 . 931Regardless of this setting, LLVM tools are used for 932.Xr c++filt 1 933and 934.Xr objdump 1 . 935.Xr strings 1 936is always provided by ELF Tool Chain. 937.It Va WITHOUT_LLVM_COV 938Do not build the 939.Xr llvm-cov 1 940tool. 941.It Va WITHOUT_LLVM_CXXFILT 942Install ELF Tool Chain's cxxfilt as c++filt, instead of LLVM's llvm-cxxfilt. 943.It Va WITHOUT_LLVM_TARGET_AARCH64 944Do not build LLVM target support for AArch64. 945The 946.Va LLVM_TARGET_ALL 947option should be used rather than this in most cases. 948.It Va WITHOUT_LLVM_TARGET_ALL 949Only build the required LLVM target support. 950This option is preferred to specific target support options. 951When set, these options are also in effect: 952.Pp 953.Bl -inset -compact 954.It Va WITHOUT_LLVM_TARGET_AARCH64 955(unless 956.Va WITH_LLVM_TARGET_AARCH64 957is set explicitly) 958.It Va WITHOUT_LLVM_TARGET_ARM 959(unless 960.Va WITH_LLVM_TARGET_ARM 961is set explicitly) 962.It Va WITHOUT_LLVM_TARGET_POWERPC 963(unless 964.Va WITH_LLVM_TARGET_POWERPC 965is set explicitly) 966.It Va WITHOUT_LLVM_TARGET_RISCV 967(unless 968.Va WITH_LLVM_TARGET_RISCV 969is set explicitly) 970.El 971.It Va WITHOUT_LLVM_TARGET_ARM 972Do not build LLVM target support for ARM. 973The 974.Va LLVM_TARGET_ALL 975option should be used rather than this in most cases. 976.It Va WITH_LLVM_TARGET_BPF 977Build LLVM target support for BPF. 978The 979.Va LLVM_TARGET_ALL 980option should be used rather than this in most cases. 981.It Va WITH_LLVM_TARGET_MIPS 982Build LLVM target support for MIPS. 983The 984.Va LLVM_TARGET_ALL 985option should be used rather than this in most cases. 986.It Va WITHOUT_LLVM_TARGET_POWERPC 987Do not build LLVM target support for PowerPC. 988The 989.Va LLVM_TARGET_ALL 990option should be used rather than this in most cases. 991.It Va WITHOUT_LLVM_TARGET_RISCV 992Do not build LLVM target support for RISC-V. 993The 994.Va LLVM_TARGET_ALL 995option should be used rather than this in most cases. 996.It Va WITHOUT_LLVM_TARGET_X86 997Do not build LLVM target support for X86. 998The 999.Va LLVM_TARGET_ALL 1000option should be used rather than this in most cases. 1001.It Va WITH_LOADER_EFI_SECUREBOOT 1002Enable building 1003.Xr loader 8 1004with support for verification based on certificates obtained from UEFI. 1005.It Va WITHOUT_LOADER_GELI 1006Disable inclusion of GELI crypto support in the boot chain binaries. 1007.Pp 1008This is a default setting on 1009powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le. 1010.It Va WITH_LOADER_GELI 1011Build GELI bootloader support. 1012.Pp 1013This is a default setting on 1014amd64/amd64, arm/armv7, arm64/aarch64, i386/i386 and riscv/riscv64. 1015.It Va WITHOUT_LOADER_KBOOT 1016Do not build kboot, a linuxboot environment loader 1017.Pp 1018This is a default setting on 1019arm/armv7, i386/i386, powerpc/powerpc, powerpc/powerpc64le and riscv/riscv64. 1020.It Va WITH_LOADER_KBOOT 1021Build kboot, a linuxboot environment loader 1022.Pp 1023This is a default setting on 1024amd64/amd64, arm64/aarch64 and powerpc/powerpc64. 1025.It Va WITHOUT_LOADER_LUA 1026Do not build LUA bindings for the boot loader. 1027.Pp 1028This is a default setting on 1029powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le. 1030.It Va WITH_LOADER_LUA 1031Build LUA bindings for the boot loader. 1032.Pp 1033This is a default setting on 1034amd64/amd64, arm/armv7, arm64/aarch64, i386/i386 and riscv/riscv64. 1035.It Va WITHOUT_LOADER_OFW 1036Disable building of openfirmware bootloader components. 1037.Pp 1038This is a default setting on 1039amd64/amd64, arm/armv7, arm64/aarch64, i386/i386 and riscv/riscv64. 1040.It Va WITH_LOADER_OFW 1041Build openfirmware bootloader components. 1042.Pp 1043This is a default setting on 1044powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le. 1045.It Va WITHOUT_LOADER_UBOOT 1046Disable building of ubldr. 1047.Pp 1048This is a default setting on 1049amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64le and riscv/riscv64. 1050.It Va WITH_LOADER_UBOOT 1051Build ubldr. 1052.Pp 1053This is a default setting on 1054arm/armv7, powerpc/powerpc and powerpc/powerpc64. 1055.It Va WITH_LOADER_VERBOSE 1056Build with extra verbose debugging in the loader. 1057May explode already nearly too large loader over the limit. 1058Use with care. 1059.It Va WITH_LOADER_VERIEXEC 1060Enable building 1061.Xr loader 8 1062with support for verification similar to Verified Exec. 1063.Pp 1064Depends on 1065.Va WITH_BEARSSL . 1066When set, these options are also in effect: 1067.Pp 1068.Bl -inset -compact 1069.It Va WITH_LOADER_EFI_SECUREBOOT 1070(unless 1071.Va WITHOUT_LOADER_EFI_SECUREBOOT 1072is set explicitly) 1073.It Va WITH_LOADER_VERIEXEC_VECTX 1074(unless 1075.Va WITHOUT_LOADER_VERIEXEC_VECTX 1076is set explicitly) 1077.El 1078.It Va WITH_LOADER_VERIEXEC_PASS_MANIFEST 1079Enable building 1080.Xr loader 8 1081with support to pass a verified manifest to the kernel. 1082The kernel has to be built with a module to parse the manifest. 1083.Pp 1084Depends on 1085.Va WITH_LOADER_VERIEXEC . 1086.It Va WITH_LOADER_VERIEXEC_VECTX 1087Enable building 1088.Xr loader 8 1089with support for hashing and verifying kernel and modules as a side effect 1090of loading. 1091.Pp 1092Depends on 1093.Va WITH_LOADER_VERIEXEC . 1094.It Va WITHOUT_LOADER_ZFS 1095Do not build ZFS file system boot loader support. 1096.It Va WITHOUT_LOCALES 1097Do not build localization files; see 1098.Xr locale 1 . 1099.It Va WITHOUT_LOCATE 1100Do not build 1101.Xr locate 1 1102and related programs. 1103.It Va WITHOUT_LPR 1104Do not build 1105.Xr lpr 1 1106and related programs. 1107.It Va WITHOUT_LS_COLORS 1108Build 1109.Xr ls 1 1110without support for colors to distinguish file types. 1111.It Va WITHOUT_MACHDEP_OPTIMIZATIONS 1112Prefer machine-independent non-assembler code in libc and libm. 1113.It Va WITHOUT_MAIL 1114Do not build any mail support (MUA or MTA). 1115When set, it enforces these options: 1116.Pp 1117.Bl -item -compact 1118.It 1119.Va WITHOUT_DMAGENT 1120.It 1121.Va WITHOUT_MAILWRAPPER 1122.It 1123.Va WITHOUT_SENDMAIL 1124.El 1125.It Va WITHOUT_MAILWRAPPER 1126Do not build the 1127.Xr mailwrapper 8 1128MTA selector. 1129.It Va WITHOUT_MAKE 1130Do not install 1131.Xr make 1 1132and related support files. 1133.It Va WITHOUT_MAKE_CHECK_USE_SANDBOX 1134Do not execute 1135.Dq Li "make check" 1136in limited sandbox mode. 1137This option should be paired with 1138.Va WITH_INSTALL_AS_USER 1139if executed as an unprivileged user. 1140See 1141.Xr tests 7 1142for more details. 1143.It Va WITH_MALLOC_PRODUCTION 1144Disable assertions and statistics gathering in 1145.Xr malloc 3 . 1146It also defaults the A and J runtime options to off. 1147.It Va WITHOUT_MAN 1148Do not build manual pages. 1149When set, these options are also in effect: 1150.Pp 1151.Bl -inset -compact 1152.It Va WITHOUT_MAN_UTILS 1153(unless 1154.Va WITH_MAN_UTILS 1155is set explicitly) 1156.El 1157.It Va WITHOUT_MANCOMPRESS 1158Do not install compressed man pages. 1159Only the uncompressed versions will be installed. 1160.It Va WITH_MANSPLITPKG 1161Split man pages into their own packages during make package. 1162.It Va WITHOUT_MAN_UTILS 1163Do not build utilities for manual pages, 1164.Xr apropos 1 , 1165.Xr makewhatis 1 , 1166.Xr man 1 , 1167.Xr whatis 1 , 1168.Xr manctl 8 , 1169and related support files. 1170.It Va WITH_META_ERROR_TARGET 1171Enable the META_MODE .ERROR target. 1172.Pp 1173This target will copy the meta file of a failed target 1174to 1175.Va ERROR_LOGDIR 1176(default is 1177.Ql ${SRCTOP:H}/error ) 1178to help with failure analysis. 1179Depends on 1180.Va WITH_META_MODE . 1181This default when 1182.Va WITH_DIRDEPS_BUILD 1183is set. 1184.Pp 1185This must be set in the environment, make command line, or 1186.Pa /etc/src-env.conf , 1187not 1188.Pa /etc/src.conf . 1189.It Va WITH_META_MODE 1190Create 1191.Xr make 1 1192meta files when building, which can provide a reliable incremental build when 1193using 1194.Xr filemon 4 . 1195The meta file is created in OBJDIR as 1196.Pa target.meta . 1197These meta files track the command that was executed, its output, and the 1198current directory. 1199The 1200.Xr filemon 4 1201module is required unless 1202.Va NO_FILEMON 1203is defined. 1204When the module is loaded, any files used by the commands executed are 1205tracked as dependencies for the target in its meta file. 1206The target is considered out-of-date and rebuilt if any of these 1207conditions are true compared to the last build: 1208.Bl -bullet -compact 1209.It 1210The command to execute changes. 1211.It 1212The current working directory changes. 1213.It 1214The target's meta file is missing. 1215.It 1216The target's meta file is missing filemon data when filemon is loaded 1217and a previous run did not have it loaded. 1218.It 1219[requires 1220.Xr filemon 4 ] 1221Files read, executed or linked to are newer than the target. 1222.It 1223[requires 1224.Xr filemon 4 ] 1225Files read, written, executed or linked are missing. 1226.El 1227The meta files can also be useful for debugging. 1228.Pp 1229The build hides commands that are executed unless 1230.Va NO_SILENT 1231is defined. 1232Errors cause 1233.Xr make 1 1234to show some of its environment for further debugging. 1235.Pp 1236The build operates as it normally would otherwise. 1237This option originally invoked a different build system but that was renamed 1238to 1239.Va WITH_DIRDEPS_BUILD . 1240.Pp 1241This must be set in the environment, make command line, or 1242.Pa /etc/src-env.conf , 1243not 1244.Pa /etc/src.conf . 1245.It Va WITHOUT_MLX5TOOL 1246Do not build 1247.Xr mlx5tool 8 1248.Pp 1249This is a default setting on 1250arm/armv7, powerpc/powerpc and riscv/riscv64. 1251.It Va WITH_MLX5TOOL 1252Build 1253.Xr mlx5tool 8 1254.Pp 1255This is a default setting on 1256amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le. 1257.It Va WITHOUT_NETCAT 1258Do not build 1259.Xr nc 1 1260utility. 1261.It Va WITHOUT_NETGRAPH 1262Do not build applications to support 1263.Xr netgraph 4 . 1264When set, it enforces these options: 1265.Pp 1266.Bl -item -compact 1267.It 1268.Va WITHOUT_BLUETOOTH 1269.El 1270.Pp 1271When set, these options are also in effect: 1272.Pp 1273.Bl -inset -compact 1274.It Va WITHOUT_NETGRAPH_SUPPORT 1275(unless 1276.Va WITH_NETGRAPH_SUPPORT 1277is set explicitly) 1278.El 1279.It Va WITHOUT_NETGRAPH_SUPPORT 1280Build libraries, programs, and kernel modules without netgraph support. 1281.It Va WITHOUT_NETLINK 1282Do not build 1283.Xr genl 1 1284utility. 1285.It Va WITHOUT_NETLINK_SUPPORT 1286Make libraries and programs use rtsock and 1287.Xr sysctl 3 1288interfaces instead of 1289.Xr snl 3 . 1290.It Va WITHOUT_NIS 1291Do not build 1292.Xr NIS 8 1293support and related programs. 1294If set, you might need to adopt your 1295.Xr nsswitch.conf 5 1296and remove 1297.Sq nis 1298entries. 1299.It Va WITHOUT_NLS 1300Do not build NLS catalogs. 1301When set, it enforces these options: 1302.Pp 1303.Bl -item -compact 1304.It 1305.Va WITHOUT_NLS_CATALOGS 1306.El 1307.It Va WITHOUT_NLS_CATALOGS 1308Do not build NLS catalog support for 1309.Xr csh 1 . 1310.It Va WITHOUT_NS_CACHING 1311Disable name caching in the 1312.Pa nsswitch 1313subsystem. 1314The generic caching daemon, 1315.Xr nscd 8 , 1316will not be built either if this option is set. 1317.It Va WITHOUT_NTP 1318Do not build 1319.Xr ntpd 8 1320and related programs. 1321.It Va WITHOUT_NVME 1322Do not build nvme related tools and kernel modules. 1323.Pp 1324This is a default setting on 1325arm/armv7, powerpc/powerpc and riscv/riscv64. 1326.It Va WITH_NVME 1327Build nvme related tools and kernel modules. 1328.Pp 1329This is a default setting on 1330amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le. 1331.It Va WITHOUT_OFED 1332Do not build the 1333.Dq "OpenFabrics Enterprise Distribution" 1334InfiniBand software stack, including kernel modules and userspace libraries. 1335.Pp 1336This is a default setting on 1337arm/armv7. 1338When set, it enforces these options: 1339.Pp 1340.Bl -item -compact 1341.It 1342.Va WITHOUT_OFED_EXTRA 1343.El 1344.It Va WITH_OFED 1345Build the 1346.Dq "OpenFabrics Enterprise Distribution" 1347InfiniBand software stack, including kernel modules and userspace libraries. 1348.Pp 1349This is a default setting on 1350amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 1351.It Va WITH_OFED_EXTRA 1352Build the non-essential components of the 1353.Dq "OpenFabrics Enterprise Distribution" 1354Infiniband software stack, mostly examples. 1355.It Va WITH_OPENLDAP 1356Enable building LDAP support for kerberos using an openldap client from ports. 1357.It Va WITHOUT_OPENMP 1358Do not build LLVM's OpenMP runtime. 1359.Pp 1360This is a default setting on 1361arm/armv7 and powerpc/powerpc. 1362.It Va WITH_OPENMP 1363Build LLVM's OpenMP runtime. 1364.Pp 1365This is a default setting on 1366amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 1367.It Va WITHOUT_OPENSSH 1368Do not build OpenSSH. 1369.It Va WITHOUT_OPENSSL 1370Do not build OpenSSL. 1371When set, it enforces these options: 1372.Pp 1373.Bl -item -compact 1374.It 1375.Va WITHOUT_DMAGENT 1376.It 1377.Va WITHOUT_KERBEROS 1378.It 1379.Va WITHOUT_KERBEROS_SUPPORT 1380.It 1381.Va WITHOUT_LDNS 1382.It 1383.Va WITHOUT_LDNS_UTILS 1384.It 1385.Va WITHOUT_LOADER_ZFS 1386.It 1387.Va WITHOUT_OPENSSH 1388.It 1389.Va WITHOUT_OPENSSL_KTLS 1390.It 1391.Va WITHOUT_PKGBOOTSTRAP 1392.It 1393.Va WITHOUT_UNBOUND 1394.It 1395.Va WITHOUT_ZFS 1396.El 1397.Pp 1398When set, these options are also in effect: 1399.Pp 1400.Bl -inset -compact 1401.It Va WITHOUT_GSSAPI 1402(unless 1403.Va WITH_GSSAPI 1404is set explicitly) 1405.El 1406.It Va WITHOUT_OPENSSL_KTLS 1407Do not include kernel TLS support in OpenSSL. 1408.Pp 1409This is a default setting on 1410arm/armv7, i386/i386, powerpc/powerpc and riscv/riscv64. 1411.It Va WITH_OPENSSL_KTLS 1412Include kernel TLS support in OpenSSL. 1413.Pp 1414This is a default setting on 1415amd64/amd64, arm64/aarch64, powerpc/powerpc64 and powerpc/powerpc64le. 1416.It Va WITHOUT_PAM 1417Do not build PAM library and modules. 1418.Bf -symbolic 1419This option is deprecated and does nothing. 1420.Ef 1421When set, these options are also in effect: 1422.Pp 1423.Bl -inset -compact 1424.It Va WITHOUT_PAM_SUPPORT 1425(unless 1426.Va WITH_PAM_SUPPORT 1427is set explicitly) 1428.El 1429.It Va WITHOUT_PAM_SUPPORT 1430Build some programs without PAM support, particularly 1431.Xr ftpd 8 1432and 1433.Xr ppp 8 . 1434.It Va WITHOUT_PF 1435Do not build PF firewall package. 1436When set, it enforces these options: 1437.Pp 1438.Bl -item -compact 1439.It 1440.Va WITHOUT_AUTHPF 1441.El 1442.It Va WITHOUT_PIE 1443Do not build dynamically linked binaries as 1444Position-Independent Executable (PIE). 1445.Pp 1446This is a default setting on 1447arm/armv7, i386/i386 and powerpc/powerpc. 1448.It Va WITH_PIE 1449Build dynamically linked binaries as 1450Position-Independent Executable (PIE). 1451.Pp 1452This is a default setting on 1453amd64/amd64, arm64/aarch64, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64. 1454.It Va WITHOUT_PKGBOOTSTRAP 1455Do not build 1456.Xr pkg 7 1457bootstrap tool. 1458.It Va WITHOUT_PMC 1459Do not build 1460.Xr pmccontrol 8 1461and related programs. 1462.It Va WITHOUT_PPP 1463Do not build 1464.Xr ppp 8 1465and related programs. 1466.It Va WITH_PROFILE 1467Build profiled libraries for use with 1468.Xr gprof 8 . 1469This option is deprecated and may not be present in a future version of 1470.Fx . 1471.It Va WITHOUT_PTHREADS_ASSERTIONS 1472Disable debugging assertions in pthreads library. 1473.It Va WITHOUT_QUOTAS 1474Do not build 1475.Xr quota 1 1476and related programs. 1477.It Va WITHOUT_RADIUS_SUPPORT 1478Do not build radius support into various applications, like 1479.Xr pam_radius 8 1480and 1481.Xr ppp 8 . 1482.It Va WITH_RATELIMIT 1483Build the system with rate limit support. 1484.Pp 1485This makes 1486.Dv SO_MAX_PACING_RATE 1487effective in 1488.Xr getsockopt 2 , 1489and 1490.Ar txrlimit 1491support in 1492.Xr ifconfig 8 , 1493by proxy. 1494.It Va WITHOUT_RBOOTD 1495Do not build or install 1496.Xr rbootd 8 . 1497.It Va WITHOUT_RELRO 1498Do not apply the Relocation Read-Only (RELRO) vulnerability mitigation. 1499See also the 1500.Va BIND_NOW 1501option. 1502.It Va WITH_REPRODUCIBLE_BUILD 1503Exclude build metadata (such as the build time, user, or host) 1504from the kernel, boot loaders, and uname output, so that builds produce 1505bit-for-bit identical output. 1506.It Va WITHOUT_RESCUE 1507Do not build 1508.Xr rescue 8 . 1509.It Va WITH_RETPOLINE 1510Build the base system with the retpoline speculative execution 1511vulnerability mitigation for CVE-2017-5715. 1512.It Va WITHOUT_ROUTED 1513Do not build 1514.Xr routed 8 1515utility. 1516.It Va WITH_RPCBIND_WARMSTART_SUPPORT 1517Build 1518.Xr rpcbind 8 1519with warmstart support. 1520.It Va WITHOUT_SCTP_SUPPORT 1521Disable support in the kernel for the 1522.Xr sctp 4 1523Stream Control Transmission Protocol 1524loadable kernel module. 1525.It Va WITHOUT_SENDMAIL 1526Do not build 1527.Xr sendmail 8 1528and related programs. 1529.It Va WITHOUT_SERVICESDB 1530Do not install 1531.Pa /var/db/services.db . 1532.It Va WITHOUT_SETUID_LOGIN 1533Set this to disable the installation of 1534.Xr login 1 1535as a set-user-ID root program. 1536.It Va WITHOUT_SHAREDOCS 1537Do not build the 1538.Bx 4.4 1539legacy docs. 1540.It Va WITH_SORT_THREADS 1541Enable threads in 1542.Xr sort 1 . 1543.It Va WITHOUT_SOURCELESS 1544Do not build kernel modules that include sourceless code (either microcode or native code for host CPU). 1545When set, it enforces these options: 1546.Pp 1547.Bl -item -compact 1548.It 1549.Va WITHOUT_SOURCELESS_HOST 1550.It 1551.Va WITHOUT_SOURCELESS_UCODE 1552.El 1553.It Va WITHOUT_SOURCELESS_HOST 1554Do not build kernel modules that include sourceless native code for host CPU. 1555.It Va WITHOUT_SOURCELESS_UCODE 1556Do not build kernel modules that include sourceless microcode. 1557.It Va WITHOUT_SPLIT_KERNEL_DEBUG 1558Do not build standalone kernel debug files. 1559Debug data (if enabled by the kernel configuration file) 1560will be included in the kernel and modules. 1561When set, it enforces these options: 1562.Pp 1563.Bl -item -compact 1564.It 1565.Va WITHOUT_KERNEL_SYMBOLS 1566.El 1567.It Va WITHOUT_SSP 1568Do not build world with propolice stack smashing protection. 1569.It Va WITH_STAGING 1570Enable staging of files to a stage tree. 1571This can be best thought of as auto-install to 1572.Va DESTDIR 1573with some extra meta data to ensure dependencies can be tracked. 1574Depends on 1575.Va WITH_DIRDEPS_BUILD . 1576When set, these options are also in effect: 1577.Pp 1578.Bl -inset -compact 1579.It Va WITH_STAGING_MAN 1580(unless 1581.Va WITHOUT_STAGING_MAN 1582is set explicitly) 1583.It Va WITH_STAGING_PROG 1584(unless 1585.Va WITHOUT_STAGING_PROG 1586is set explicitly) 1587.El 1588.Pp 1589This must be set in the environment, make command line, or 1590.Pa /etc/src-env.conf , 1591not 1592.Pa /etc/src.conf . 1593.It Va WITH_STAGING_MAN 1594Enable staging of man pages to stage tree. 1595.It Va WITH_STAGING_PROG 1596Enable staging of PROGs to stage tree. 1597.It Va WITH_STALE_STAGED 1598Check staged files are not stale. 1599.It Va WITHOUT_STATS 1600Neither build nor install 1601.Lb libstats 1602and dependent binaries. 1603.It Va WITHOUT_SYSCONS 1604Do not build 1605.Xr syscons 4 1606support files such as keyboard maps, fonts, and screen output maps. 1607.It Va WITH_SYSROOT 1608Enable use of sysroot during build. 1609Depends on 1610.Va WITH_DIRDEPS_BUILD . 1611.Pp 1612This must be set in the environment, make command line, or 1613.Pa /etc/src-env.conf , 1614not 1615.Pa /etc/src.conf . 1616.It Va WITHOUT_SYSTEM_COMPILER 1617Do not opportunistically skip building a cross-compiler during the 1618bootstrap phase of the build. 1619Normally, if the currently installed compiler matches the planned bootstrap 1620compiler type and revision, then it will not be built. 1621This does not prevent a compiler from being built for installation though, 1622only for building one for the build itself. 1623The 1624.Va WITHOUT_CLANG 1625option controls that. 1626.It Va WITHOUT_SYSTEM_LINKER 1627Do not opportunistically skip building a cross-linker during the 1628bootstrap phase of the build. 1629Normally, if the currently installed linker matches the planned bootstrap 1630linker type and revision, then it will not be built. 1631This does not prevent a linker from being built for installation though, 1632only for building one for the build itself. 1633The 1634.Va WITHOUT_LLD 1635option controls that. 1636.Pp 1637This option is only relevant when 1638.Va WITH_LLD_BOOTSTRAP 1639is set. 1640.It Va WITHOUT_TALK 1641Do not build or install 1642.Xr talk 1 1643and 1644.Xr talkd 8 . 1645.It Va WITHOUT_TCP_WRAPPERS 1646Do not build or install 1647.Xr tcpd 8 , 1648and related utilities. 1649.It Va WITHOUT_TCSH 1650Do not build and install 1651.Pa /bin/csh 1652(which is 1653.Xr tcsh 1 ) . 1654.It Va WITHOUT_TELNET 1655Do not build 1656.Xr telnet 1 1657and related programs. 1658.It Va WITHOUT_TESTS 1659Do not build nor install the 1660.Fx 1661Test Suite in 1662.Pa /usr/tests/ . 1663See 1664.Xr tests 7 1665for more details. 1666This also disables the build of all test-related dependencies, including ATF. 1667When set, it enforces these options: 1668.Pp 1669.Bl -item -compact 1670.It 1671.Va WITHOUT_DTRACE_TESTS 1672.El 1673.Pp 1674When set, these options are also in effect: 1675.Pp 1676.Bl -inset -compact 1677.It Va WITHOUT_GOOGLETEST 1678(unless 1679.Va WITH_GOOGLETEST 1680is set explicitly) 1681.It Va WITHOUT_TESTS_SUPPORT 1682(unless 1683.Va WITH_TESTS_SUPPORT 1684is set explicitly) 1685.El 1686.It Va WITHOUT_TESTS_SUPPORT 1687Disable the build of all test-related dependencies, including ATF. 1688When set, it enforces these options: 1689.Pp 1690.Bl -item -compact 1691.It 1692.Va WITHOUT_GOOGLETEST 1693.El 1694.It Va WITHOUT_TEXTPROC 1695Do not build 1696programs used for text processing. 1697.It Va WITHOUT_TFTP 1698Do not build or install 1699.Xr tftp 1 1700and 1701.Xr tftpd 8 . 1702.It Va WITHOUT_TOOLCHAIN 1703Do not install 1704programs used for program development, 1705compilers, debuggers etc. 1706When set, it enforces these options: 1707.Pp 1708.Bl -item -compact 1709.It 1710.Va WITHOUT_CLANG 1711.It 1712.Va WITHOUT_CLANG_EXTRAS 1713.It 1714.Va WITHOUT_CLANG_FORMAT 1715.It 1716.Va WITHOUT_CLANG_FULL 1717.It 1718.Va WITHOUT_LLD 1719.It 1720.Va WITHOUT_LLDB 1721.It 1722.Va WITHOUT_LLVM_COV 1723.El 1724.It Va WITH_UBSAN 1725Build the base system with Undefined Behavior Sanitizer (UBSan) to detect 1726various kinds of undefined behavior at runtime. 1727Requires that Clang be used as the base system compiler 1728and that the runtime support library is available 1729.It Va WITHOUT_UNBOUND 1730Do not build 1731.Xr unbound 8 1732and related programs. 1733.It Va WITHOUT_UNIFIED_OBJDIR 1734Use the historical object directory format for 1735.Xr build 7 1736targets. 1737For native-builds and builds done directly in sub-directories the format of 1738.Pa ${MAKEOBJDIRPREFIX}/${.CURDIR} 1739is used, 1740while for cross-builds 1741.Pa ${MAKEOBJDIRPREFIX}/${TARGET}.${TARGET_ARCH}/${.CURDIR} 1742is used. 1743.Pp 1744This option is transitional and will be removed in a future version of 1745.Fx , 1746at which time 1747.Va WITH_UNIFIED_OBJDIR 1748will be enabled permanently. 1749.Pp 1750This must be set in the environment, make command line, or 1751.Pa /etc/src-env.conf , 1752not 1753.Pa /etc/src.conf . 1754.It Va WITHOUT_USB 1755Do not build USB-related programs and libraries. 1756.It Va WITHOUT_USB_GADGET_EXAMPLES 1757Do not build USB gadget kernel modules. 1758.It Va WITHOUT_UTMPX 1759Do not build user accounting tools such as 1760.Xr last 1 , 1761.Xr users 1 , 1762.Xr who 1 , 1763.Xr ac 8 , 1764.Xr lastlogin 8 1765and 1766.Xr utx 8 . 1767.It Va WITH_VERIEXEC 1768Enable building 1769.Xr veriexec 8 1770which loads the contents of verified manifests into the kernel 1771for use by 1772.Xr mac_veriexec 4 1773.Pp 1774Depends on 1775.Va WITH_BEARSSL . 1776.It Va WITHOUT_VI 1777Do not build and install vi, view, ex and related programs. 1778.It Va WITHOUT_VT 1779Do not build 1780.Xr vt 4 1781support files (fonts and keymaps). 1782.It Va WITHOUT_WARNS 1783Set this to not add warning flags to the compiler invocations. 1784Useful as a temporary workaround when code enters the tree 1785which triggers warnings in environments that differ from the 1786original developer. 1787.It Va WITHOUT_WERROR 1788Set this to not treat compiler warnings as errors. 1789Useful as a temporary workaround when working on fixing compiler warnings. 1790When set, warnings are still printed in the build log but do not fail the build. 1791.It Va WITHOUT_WIRELESS 1792Do not build programs used for 802.11 wireless networks; especially 1793.Xr wpa_supplicant 8 1794and 1795.Xr hostapd 8 . 1796When set, these options are also in effect: 1797.Pp 1798.Bl -inset -compact 1799.It Va WITHOUT_WIRELESS_SUPPORT 1800(unless 1801.Va WITH_WIRELESS_SUPPORT 1802is set explicitly) 1803.El 1804.It Va WITHOUT_WIRELESS_SUPPORT 1805Build libraries, programs, and kernel modules without 1806802.11 wireless support. 1807.It Va WITHOUT_WPA_SUPPLICANT_EAPOL 1808Build 1809.Xr wpa_supplicant 8 1810without support for the IEEE 802.1X protocol and without 1811support for EAP-PEAP, EAP-TLS, EAP-LEAP, and EAP-TTLS 1812protocols (usable only via 802.1X). 1813.It Va WITHOUT_ZFS 1814Do not build the ZFS file system kernel module, libraries such as 1815.Xr libbe 3 , 1816and user commands such as 1817.Xr zpool 8 1818or 1819.Xr zfs 8 . 1820Also disable ZFS support in utilities and libraries which implement 1821ZFS-specific functionality. 1822.It Va WITHOUT_ZONEINFO 1823Do not build the timezone database. 1824When set, it enforces these options: 1825.Pp 1826.Bl -item -compact 1827.It 1828.Va WITHOUT_ZONEINFO_LEAPSECONDS_SUPPORT 1829.El 1830.It Va WITH_ZONEINFO_LEAPSECONDS_SUPPORT 1831Build leapsecond information in to the timezone database. 1832.El 1833.Sh FILES 1834.Bl -tag -compact -width Pa 1835.It Pa /etc/src.conf 1836.It Pa /etc/src-env.conf 1837.It Pa /usr/share/mk/bsd.own.mk 1838.El 1839.Sh SEE ALSO 1840.Xr make 1 , 1841.Xr make.conf 5 , 1842.Xr build 7 , 1843.Xr ports 7 1844.Sh HISTORY 1845The 1846.Nm 1847file appeared in 1848.Fx 7.0 . 1849.Sh AUTHORS 1850This manual page was autogenerated by 1851.An tools/build/options/makeman . 1852