- Copy stable/10 (r259064) to releng/10.0 as part of the
10.0-RELEASE cycle.
- Update __FreeBSD_version [1]
- Set branch name to -RC1

[1] 10.0-CURRENT __FreeBSD_version value ended at '55', so
start releng/10.0 at '100' so the branch is started with
a value ending in zero.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

MFC r258894: Make rc(8) re-source rc.conf upon receipt of SIGALRM.

The rc system aggressively caches the contents of /etc/rc.conf in order to
improve boot performance; this produces arguably astonishing (non-)results
if /etc/rc.conf is modified during the boot process. This commit provides
a mechanism for explicitly requesting that rc.conf be reloaded.

Approved by: re (rodrigc)

MFC r256775,r256776:
Add support for "first boot" rc.d scripts.

Document this new functionality in rc.conf(5) and rc(8).

Bump __FreeBSD_version so that ports can make use of this.

Approved by: re (gjb)

Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Refine the "nojail" rc keyword, adding "nojailvnet" for files that don't
apply to most jails but do apply to vnet jails. This includes adding
a new sysctl "security.jail.vnet" to identify vnet jails.

PR: conf/149050
Submitted by: mdodd
MFC after: 3 days

Hide stty(1) errors.

If rc(8) is executed without using a TTY, this error appears at the
beginning:

stty: stdin isn't a terminal

Because this is to be expected and of course not harmful, it is better
to simply hide the error message.

MFC after: 1 week

Rather than trusting that nothing is going to sneak in before the
early_late_divider in the second run (and thus be skipped altogether),
keep a list of the scripts run early, and use that list to skip things
in the second run.

This has the primary benefit of not skipping a local script that gets
ordered too early in the second run. It also gives an opportunity to
clean up/simplify the code a bit.

Use a space-separated list rather than the more traditional colon for
maximum insurance against creativity in local naming conventions.

Reviewed by: brooks

Remove pointless informational message.

Re-implement: do not silently fail when a command is not carried
out because the rc.conf(5) variable was not enabled. Display a
message that the command wasn't run and offer suggestions on
what the user can do.

Implement a quiet prefix, which will disable some diagnostics. The
fast prefix also implies quiet. During boot we use either fast or
quiet. For shutdown we already use 'faststop'. So, this informational
message should only appear during interactive use.

An additional benefit of having a quiet prefix is that we can start
putting some of our diagnostic messages behind this knob and start
"de-cluttering" the console during boot and shutdown.

Add a dummy script, FILESYSTEMS, which depends on root and mountcritlocal
and takes over mountcritlocal's role as the early / late divider. This
makes it far easier to add rc scripts which need to run early, such as a
startup script for zfs, which is right around the corner.

This change should be a no-op; I have verified that the only change in
rcorder's output is the insertion of FILESYSTEMS immediately after
mountcritlocal.

MFC after: 3 weeks

Attempt to make running the new rc in a jail more automatic by
resetting of early_late_divider to a more appropriate value if
the admin has not modified the default.

Reviewed by: brooks

Remove rcconf.sh from /etc/rc.d, and instead load the configuration
as part of rc. Doing this, and the sourcing of rc.subr after we have
determined if we are booting diskless (and correspondingly run
rc.initdiskless if necessary) are safe, and actually allow fewer files
to be needed on the diskless box. This also allows variables from
the configuration to be available to rc itself, such as ...

Add a variable to rc.conf, early_late_divider, which designates the
script which separates the early and late stages of the boot process.
Default this to mountcritlocal, and add text to etc/defaults/rc.conf,
rc.conf(5) and diskless(8) which describes how and why one might want
to change this.

Reviewed by: brooks

Introduce startup scripts from the local_startup directories to
the base rcorder. This is accomplished by running rcorder twice,
first to get all the disks mounted (through mountcritremote),
then again to include the local_startup directories.

This dramatically changes the behavior of rc.d/localpkg, as
all "local" scripts that have the new rc.d semantics are now
run in the base rcorder, so only scripts that have not been
converted yet will run in rc.d/localpkg.

Make a similar change in rc.shutdown, and add some functions in
rc.subr to support these changes.

Bump __FreeBSD_version to reflect this change.

To allow /etc to be as minimal as possible in a diskless setup, we need
to run initdiskless before we run rcorder on /etc/rc.d. To allow this,
move /etc/rc.d/initdiskless to /etc/rc.initdiskless and run it directly
from /etc/rc.

Remove /etc/rc.d/preseedrandom as it is no longer necessicary (we start
with entropy unblocked) and was only used by initdiskless when it
was needed.

Discussed on: freebsd-rc
Repocopy by: peter

Remove an unused variable.

Submitted by: Pawel Worach <pawel.worach@telia.com>

Remove the requirement for the FreeBSD keyword as it no longer
makes any sense.

Discussed with: dougb, brooks
MFC after: 3 days

Correct typo.

Submitted by: eik (and probably many others)

Restore pre-rcNG behaviour:
SIGINT (Ctrl-c) kills the current script
SIGQUIT (Ctrl-\) kills /etc/rc (dropping you into single-user)

Prodded by: harti

Fix skipping scripts with given keywords.
Proper syntax is '-s keyword1 -s keyword2', not '-s keyword1 keyword2'.

o Add support for detecting a jailed environment. If a script
cannot or does not want to be executed in a jail the
KEYWORDS line should contain the nojail keyword.
o Update Copyright

# I suggest people who use jails more extensively than I do
# make commits to the appropriate files.

Per previous announcement, remove the old version of the rc system.

All functionality from the previous system has been preserved, and
users should still customize their system boot with the familiar
methods, rc.conf, rc.conf.local, rc.firewall, sysctl.conf, etc.

Users who have customized versions of scripts that have been removed
should take great care when upgrading, since the compatibility code
that used those old scripts has also been removed.

Add a dire warning about the impending demise of the old rc system.

Suggested by: scottl

Set appropriate tag "fsck" to logger(1) for background fsck messages.

PR: 51174
Submitted by: Alex Popa <razor@ldc.ro>

Redo the initial rc_ng check to avoid rc.conf pollution occuring too early,
initdiskless may retarget /etc and various rc.conf files. The initial check
is now done in a subshell.
Reviewed by: Mike Makonnen <mtm@identd.net>

Do not unconditionally load the configuration files for the RCNG case.
Instead, load them as part of the rc.d system. This allows us to prioritize
the initidiskless script so it runs before the configuration files are loaded
and allows us to get rid of the exit 2 hack in /etc/rc. The exit 2 never
worked anyway since it did not unset the prior configuration, causing the
diskless code to not operate properly.

Do a major cleanup and revamping of the diskless code for RCNG. This will
be backported to the non-RCNG scripts as well as -stable.

With suggestions from: Mike Makonnen <mtm@identd.net>
MFC after: 7 days

Delay an optional amount of time after booting before starting a
background fsck. The delay defaults to sixty seconds to allow
large applications such as the X server to start before disk I/O
bandwidth is monopolized by fsck.

Submitted by: Brooks Davis <brooks@one-eyed-alien.net>
Sponsored by: DARPA & NAI Labs.

Update rc scripts to load mac_lomac instead of lomac.

Approved by: re
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories

Aesthetics: Most (all?) other messages output at boot time have
trailing periods, so why shouldn't this one?

Fix all whitespace style bugs where spaces have been used
where tabs should have been. Cut & paste disease?

Spotted by: vi(1) tabstop=4
MFC after: 2 weeks

In a diskless setup, rc.d/initdiskless may overwrite parts of /etc on
a per-machine or per-cluster (with different ways of expressing what's
part of a cluster) basis. In order for this to be effective, rc.conf
has to be reread after initdiskless is finished. Implement this by
adding a hook to etc/rc which rereads rc.conf by request. This can
also be implemented by renaming initdiskless to initdiskless.sh and
sourcing rc.conf there manually, but it was decided that, that would
be uglier than a hook in etc/rc.

Developed in concert with: gordon

Initiate deorbit burn for the i386-only a.out related support. Moves are
under way to move the remnants of the a.out toolchain to ports. As the
comment in src/Makefile said, this stuff is deprecated and one should not
expect this to remain beyond 4.0-REL. It has already lasted WAY beyond
that.

Notable exceptions:
gcc - I have not touched the a.out generation stuff there.
ldd/ldconfig - still have some code to interface with a.out rtld.
old as/ld/etc - I have not removed these yet, pending their move to ports.
some includes - necessary for ldd/ldconfig for now.

Tested on: i386 (extensively), alpha

Quiet warnings about non-existent scripts. My own fault for not testing my
own patches as well as I should.

Remove an accidental double chkdepend that snuck in during the last commit.

Submitted by: Mike Makonnen <makonnen@pacbell.net>

Don't export variables from /etc/rc when doing rc_ng because the scripts
are sourced in a subshell.

Submitted by: Mike Makonnen <makonnen@pacbell.net>

Clean up some variables that should have been done before:
xntpd_* -> ntpd_*
portmap_* -> rpcbind_*

Also change single_mountd_enable to mountd_enable.

We also include shims for all the old variable names.

Submitted by: Mike Makonnen <makonnen@pacbell.net>

Add the final bits that allow the use of rc.d. Note that you can toggle
between rc.d and the classic boot scripts based on the rcng variable in
your rc.conf. Defaults to classic boot scripts.

Submitted by: Mike Makonnen

Consistancy, file system > filesystem

It is dangerous to use globbing like so in startup scripts:

rm -f /tmp/.X11-unix/*

If /tmp/.X11-unix didn't already exist, a user could symlink it to a directory
with files that he wants to wipe out, and wait for next reboot.

Reported by: lumpy <lumpy@the.whole.net>

Rename the file used to specify the nextboot to make it clear that this
is a loader configuration file and can be used for more than just a
kernel name.

Submitted by: Gordon Tetlow <gordont@gnf.org>

Add a -k option to reboot to specify the kernel to boot next time
around. If the kernel boots successfully, the record of this kernel
is erased, it is intended to be a one-shot option for testing
kernels.

This could be improved by having the loader remove the record of
the next kernel to boot, it is currently removed in /etc/rc immediately
after disks are mounted r/w.

I'd like to MFC this before the 4.6 freeze unless there is violent
objection.

Reviewed by: Several on IRC
MFC after: 4 days

Do not use 'ps -e' for entropy gathering. It uses /proc/*/mem to rummage
around *user* memory to extract the environment variable strings. This
is problematic for us.

Submitted by: peter

Quoting Peter Wemm, "At great personal risk, touch the sendmail startup
again."

As an alternative to sendmail_enable=NONE, solve the boot time problem
for non-sendmail users completely by moving all of the sendmail startup
code from /etc/rc to /etc/rc.sendmail. The source for that script will
be kept in src/etc/sendmail/rc.sendmail so make.conf's NO_SENDMAIL will
prevent it from being installed. A new rc.conf variable,
mta_start_script specifies the script to run to start the user's
preferred MTA. For backward compatibility, it will default to
/etc/rc.sendmail. The specified script is called out of /etc/rc after
checking to make sure it exists. A new rc.sendmail.8 man page has also
been added which now houses the sendmail_* variable descriptions
formerly in rc.conf.5.

Use /etc/rc.sendmail in /etc/mail/Makefile to reduce code duplication.

Reviewed by: -current, -stable, obrien, peter, ru
MFC after: 1 week

Provide a way for users to completely prevent sendmail from trying to start
at boot time.

Instead of rc.conf's sendmail_enable only accepting YES or NO, it can now
also accept NONE. If set to NONE, none of the other sendmail related
startup items will be done.

Remove an extra queue running daemon might be started that wasn't necessary
(it didn't hurt anything but it wasn't needed).

The new logic is:

# MTA
if ${sendmail_enable} == NONE
# Do nothing
else if ${sendmail_enable} == YES
start sendmail with ${sendmail_flags}
else if ${sendmail_submit_enable} == YES
start sendmail with ${sendmail_submit_flags}
else if ${sendmail_outbound_enable} == YES
start sendmail with ${sendmail_outbound_flags}
endif
# MSP Queue Runner
if ${sendmail_enable} != NONE &&
[ -r /etc/mail/submit.cf] && ${sendmail_msp_queue_enable} == YES
start sendmail with ${sendmail_msp_queue_flags}
endif

Discussed with: Thomas Quinot <Thomas.Quinot@Cuivre.FR.EU.ORG>,
Christopher Schulte <schulte+freebsd@nospam.schulte.org>
MFC after: 1 week

Don't start any sendmail process in the back ground.

Requested by: gshapiro

Don't background the sendmail-clientmqueue process -- can give:
sm-queue[181]: NOQUEUE: SYSERR(root): fill_fd: before readcf: fd 1 not open: Bad file descriptor

Sendmail can be slow to startup.
So start it in the background to speed up booting.

Make sure that rc.syctl gets its own version of positional parameters

Submitted by: cjc

Distinguish between first and last passes of rc.sysctl, and only set
mibs whose values are not already what is specified in sysctl.conf.

Add a late rc.sysctl pass to catch sysctl's for things that were
not loaded yet on the first pass.

PR: conf/19629
Submitted by: Stephen J. Roznowski <sjr@home.com>

Only put standard FreeBSD directories in the PATH. If the
administrator wishes to run commands outside of the PATH, he should
use a full pathname for the executable or set the PATH as appropriate
in any local startup scripts.

PR: misc/35770

Allow LOMAC to be loaded as part of the boot scripts using "lomac_enable"
setting in rc.conf.

Extracted from the still clammy hands of: green
Sponsored by: DARPA, NAI Labs

Run dumpon(8) early so crashes during startup can be caught. In
addition, take out the checks on the $dumpdev. dumpon(8) behaves well
if given a non-existent filename. It gives a nice error message which
is better rather than the current silent failure.

Reviewed by: des

Don't protect savecore(8) from being run with a bad dumpdir
argument. Don't fail silently, but let savecore(8) make noise. It
won't behave badly, it doesn't need protection.

At the same time, allow the administrator to have dumpdev enabled
while dumpdir (savecore(8)) is disabled and document how to do it.

PR: conf/35725

Add infrastructure for sendmail 8.12. If users are not starting a daemon
at boot (sendmail_enable=NO), a localhost-only daemon may started
(sendmail_submit_enable) as it is needed to accept mail from command line
submissions. If this isn't desired, see etc/mail/README for more hints.

Optionally (sendmail_msp_queue_enable) start a queue runner for the
submission queue in case a daemon isn't available to accept command line
submitted mail at submission time.

Note that the syslog labels for all of these sendmail processes have been
uniquified for easier log parsing.

Remove check for sendmail.conf before even trying to start sendmail.

Checking for the existence of sendmail.cf is rather silly when someone
is using the mailwrapper(8) to run a mail daemon that is not actually
sendmail(8). It is also probably better to let sendmail(8) actually
try to start and error out if the administrator has
'sendmail_enable="YES"' but no sendmail.conf. At present, it would
fail silently.

Reviewed by: gshapiro
MFC after: 2 days

Use MACHINE_ARCH instead of MACHINE to check i386 arch.

MFC after: 3 days

(forced commit)

The previous change is subject to:

MFC after: 1 month

Register amd's dependency on NFS.

This change was submitted to the freebsd-audit mailing list for review
but received no feedback. Hindsight-enabled reviews are welcome.

PR: conf/31358
Submitted: Thomas Quinot <thomas@cuivre.fr.eu.org>

Don't require operators to override the list of network filesystem
types (networkfs_types) with a version that includes the original
list.

This increases the scope for user error and also means that systems with
networkfs_types set in /etc/rc.conf will not benefit from changes to the
list in /etc/defaults/rc.conf on upgrade.

Instead, store the default list in /etc/rc itself and allow the operator
to append to that list by specifying her own list in networkfs_types.

Rename networkfs_types to extra_netfs_types accordingly, as the new name
better describes the purpose of the variable. Default the value to
'NO'.

Re-introduce the fix that delays mounting of network filesystems until
the network is initialized. This was first implemented in rev 1.268
of src/etc/rc, but was backed out at wollman's request.

The objection was that the right place for the fix is in mount(8).
Having looked at that problem, I find it hard to believe that
the hoops one would have to jump through can be justified by the
desire for purity alone.

Note that there are reported issues surrounding nfsclient kernel
support and mount_nfs(8), which currently make NFS an ugly exception
to the general case.

With this change, systems with non-NFS network filesystems configured
for mounting on startup in /etc/fstab are no longer guaranteed to
fail on startup.

Don't assume that /var/run and /var/spool/lock are on the same
partition.

Submitted by: ru

Set the script_name_sep variable to a safe value if it is not
already set (e.g. a failed/skipped mergemaster run during an upgrade).
Without this, if script_name_sep was not set in the rc.conf files,
local scripts will not be executed on startup or shutdown.

PR: misc/32687
Submitted by: Nicholas Paufler <echofox@discordia.ca> (the problem)
Sheldon Hearn (the idea behind the fix)
Reviewed by: sheldonh
MFC after: 1 week

s/sysctl -w/sysctl/

Handle the lack of nfs server or client support in the kernel by
kldload'ing the appropriate modules before enabling the service.

Follow existing style a little better

Add a dumpdir variable that determines where savecore stores crash dumps.
I've had this on my development box for ages...

Sigh, fix the unfixed typo: s/-l/-L/.

Fix a typo: s/-or/-o/.

Add ()'s around the warning message when skipping a startup script.
Also don't give the whole path, just the script name.

Submitted by: des
Requested by: jhb

Tweak the Skipping ${script} logic to also handle symlinks.
Also echo with "-n".

Fix the problem that the startup directory is printed out if it
is empty.

Submitted by: Udo Schweigert <udo.schweigert@siemens.com>

Give people a chance to do things before fsck is run.

MFC after: 2 weeks

Run rc.devfs a little bit earlier.
Many people like to use generic devices in rc.syscons, etc..
So rc.devfs needs to run before those rc files.

Requested by: Jos Backus <josb@cncdsl.com>

Let people know when a startup script is skipped because it is not
executable.

Suggested by: gad

Back out rev 1.274. The previous behavior was documented in rc.8 and
the original commit of local_startup depended on the scripts being
executable; so there is too much precedence to change it now. About all
anyone could agree on is that rev 1.274 broke POLA and before rev 1.274
also broke POLA.

+ explicitly use the shell to run ${local_startup} so one does not have to
ensure the executable bit is set on the scripts.
+ Fix VCS ID's

Remove more vestages of diskcheckd, which is now in ports/sysutils.

Add a script_name_sep rc.conf knob to specify the IFS character
for separating the startup scripts' list into individual filenames.

Run the shutdown scripts in reverse alphabetical order, so dependent
services are stopped before the services they depend upon.

Reviewed by: -arch, -audit
MFC after: 3 weeks

Reduce chattiness of entropy file mechanism with extreme prejudice.

Reviewed by: USENIX Cabal (peter, jhb, wpaul, et al)

Introduce syslogd_program and inetd_program variables in case somebody
wants to replace one of those programs.

PR: 13609
Submitted by: Goran Lowkrantz <goran.lowkrantz@infologigruppen.se>

Back out rev 1.268.

Requested by: wollman, rwatson

Fix /etc/rc so that all remote filesystems, not just NFS, are mounted
after the network is configured.

Future remote filesystem types should be added to remote_fstypes, which
is a whitespace-delimited list of type:description pairs.

The specific problem this fixes right now is that smbfs mounts described
in /etc/ftsab were failing.

Add diskcheckd to /etc/rc with a knob in rc.conf.

Make the default setting YES for now to get some experience with it.

Note: If people starts seeing disk errors because of this then it
should not be backed.

Don't confuse the admin with spurious error messages
about non-existent mount directories (which would come
into existence after the real mount has occured) when just
testing for if there are any NFS filesystems in /etc/fstab.

PR: bin/26597
Submitted by: Dmitry Morozovsky <marck@rinet.ru>
MFC after: 3 days

Introduce a background_fsck rc.conf option which allows the user to
enable or disable background fsck'ing all in one shot. Default is
currently 'YES'.

Reviewed by: jkh

Back out rev 1.260. The 'streams' module is a registered dependency of
the 'svr4' module already. This was a 4.x-only problem and should not
have been MFS'ed.

Update the fsck command in /etc/rc to use the new background
fsck checking. Applying these changes (typically via mergemaster)
will cause your system to start running background checks on all
your soft update enabled filesystems (provided that you have
a kernel with the required functionality, e.g., one built since
the end of April). Please report any and all problems to
mckusick@mckusick.com (not mckusick@freebsd.org which I read
infrequently). See the comment above the fsck command in /etc/rc
for instructions on how to disable background checking should it
cause you too much trouble.

Several FAQs:

1) Can I reboot before the background checks are done?

Ans) Yes, when the system restarts the checks will pick up
where they left off.

2) Can a crash during checking corrupt my filesystem?

Ans) No, recovered resources are returned to the system using soft
updates which ensure that the freeing is done in a safe order.

3) How will I know if any background checks are being done?

Ans) Filesystems that are to be checked in background will be listed
as `DEFER FOR BACKGROUND CHECKING' at the usual fsck check time
during system startup.

4) What happens to the output of the background checks?

Ans) It is sent to syslog `daemon' facility log level `notice'.

5) When will this feature be available in the 4.X kernel?

Ans) Never. It is much too radical and extensive a change to be
MFC'ed. Besides, it needs many months of experience and
tuning before it is ready for widespread use.

6) What happens if a background fsck fails (i.e., fsck finds
errors that would normally require a manual fsck)?

Ans) The filesystem will be marked as needing a manual fsck.
At the next system reboot, the check will be done in
foreground and the usual actions taken (usually a failure
to go multi-user until fsck has been run by hand on the
affected filesystem).

Delete everything that's not a directory in /var/run and /var/spool/lock
at boot time.

MFC after: 3 weeks

In the /etc/rc startup script a soft link is created from /var/run/log to
/dev/log like this: if [ ! -h /dev/log ];
The man page for test(1) says that the -h switch is depracated and that
users should NOT rely on it being available. It suggest the -L switch instead.
They both do the same thing: check for the existence of the symbolic link.

PR: 26596
Submitted by: mikem <mike_makonnen@yahoo.com>

MFS: deal with svr4 module's dependency on streams module

vnconfig(8) -> mdconfig(8).

Reviewed by: phk

Remove sockets found in /var/run or /var/spool/lock at boot time
(as well as files).

At great personal risk, touch the sendmail startup again. This adds easy
seperate knobs for inbound (accepting SMTP connections) and outbound (just
occasionally dequeueing) sendmail daemon startup.

Add flags option for savecore.

Submitted by: David A. Panariti <davep@who.net>

The /dev/random harvesting sysctls have had a name change.
Reflect this.

Avoid complicated tests of whether devices are present or not, and
enable all harvesting options by default since having them on for
devices not present doesn't hurt anything. Leave them on by default
since for the most part they are not producing noticable slowdown,
and are about to get a lot more efficient.

Re-order part of the cheesy entropy process in preparation for
its complete removal.

Add code to turn on the entropy harvesting sysctl's as early as possible
during the boot process. We're turning it on by default, based on the
actual presence of a configured ethernet card, and/or ppp/tun devices.
Of course, it's easy to disable in rc.conf.

Introduce the option of running fsck -y if the initial preen fails.
Defaults to off.

Obtained from: Yahoo!

Run purgedir (a local function) on /var/run instead of rm /var/run/*

PR: 24612
Submitted by: David Drum <david@mu.org>

Add the options of which cron program to run, and specifying flags
to it.

PR: conf/24358
Submitted by: Gerhard Sittig <Gerhard.Sittig@gmx.net>

Add a sysvipc_enable variable that causes the SysV IPC modules to be loaded.

Reviewed by: dougb

Move the process of storing entropy from /dev/random and reseeding with
it at boot time closer to the way we want it to be in the final version.

* Move the default directory to /var/db/entropy
* Run the entropy saving cron job every 11 minutes. This seems
to be a better default, although still bikeshed material.
* Feed /dev/random some cheesy "entropy" from various commands
and files before the disks are mounted. This gives /dev/random
a better chance of running without blocking early.
* Move the reseeding with previously stored entropy to the point
immediately after the disks are mounted.
* Make the harvesting script a little safer in regards to the
possibility of accidentally overwriting something other
than a regular file.

Add a system to save entropy from /dev/random periodically so that
it can be used to reseed at boot time. This will greatly increase
the chances that there will be sufficient entropy available at
boot time to prevent long delays.

For /etc/rc, remove the vmstat and iostat runs from the attempt
to provide some cheesy randomness if the files fail, since
those programs are dynamically linked, and ldd seems to want
some randomness to do its magic.

Guidance and parameters for this project were provided by
Mark Murray, based on the requirements of the Yarrow
algorithm. Some helpful suggestions for implementation
(including the tip about iostat and vmstat) were provided
by Sheldon Hearn. All blame for problems or mistakes is
mine of course.

Add portmap as a dependency for NIS client and server.

Requested by: gallatin

Move the syscons configuration to a machine independent rc.syscons. The
syscons sh code was identical on both platforms except for whitespace
differences.

In addition to:
Apply a more consistent style to the echo statements in /etc/ scripts.
* Put quotes around each line
* Single quotes for lines with no variable interpolation
* Double quotes if there is
* Capitalize each word that begins a line
* Make echo -n 'Doing foo:' ... echo '.' more of a standard

Also:
* Use rm -f on /var/run/dev.db so if it's not there (devfs) it doesn't error
* Shorten the ldconfig messages so that the default fits on one line
* Test whether /var/msgs/bounds is a link before overwriting it
* Generally futz around with whitespace

Flesh out a simple framework for dependency checking rc.conf enabled
services. Simple YES/NO style *_enable services are supported.

Reviewed by: obrien

If portmap is started as a dependancy, echo a notice during boot.

Approved by: obrien

Set portmap_enable if Amd or running as an NFS server is enabled.
This bites too many systems upgrading from our change in defaults.

Do a better job of preserving the value rc is called with
in the face of possible corruption by rc.diskless*.

PR: misc/21904
Submitted by: Anton Voronin, anton@urc.ac.ru

On DEVFS machines, the device name database is no use.

Redirect the stderr of dd to /dev/null so the user doesn't see rather
weird dd output on bootup as /dev/random is being reseeded. Also,
can't this happen in the background since /dev/random blocks?

Use dd to better block the data being sent to /dev/random.
Note: I am not redirecting stdout so that the amount of
data being transferred can be seen (22k and 576k currently).

Style fix only.

init 6 vs. /sbin/reboot problem still exists (pr 14829)

Submitted by: Doug Barton <DougB@gorean.org>

Having played with this commit request for a few hours, I've
convinced myself that it's better then what we have, but still
not perfect.

/etc/rc : Attempt to seed /dev/random with multiple backoffs.

/etc/rc.shutdown : Attempt to write the entropy_file.

In debugging the above changes, I've run into some
inconsistancies... rc.shutdown is run via 'init 6', but
does not appear to be run via '/sbin/reboot'. Thus, this
set of changes improves life depending on the mechanism
used to shut the system down.

Submitted by: Doug Barton <DougB@gorean.org>
Approved by: markm

Reseed the random device as early as possible to prevent hangs,
and provide some form of entropy in case there is no seed file
to prevent a reboot from hanging unnecessarily.

"fix" savecore by moving dev_mkdb before it to allow device name sensing

Turn the verbose mode on for dumpon(8).

Add copyright notices. Other systems have been barrowing our /etc files
w/o giving any credit.

Only whack pseudo-terminals into shape if they exist. They might
not yet exist in the DEVFS case.

After some discussion with markm, back out most of rev 1.221,
which really wasn't such a hot idea in retrospect.

If the random device isn't available, it probably isn't wanted.
If it's wanted, it should be enabled in loader.conf.

(forced commit)

The previous change should have been attributed to:

PR: 20692
Submitted by: Andre Albsmeier <andre.albsmeier@mchp.siemens.de>

The output of this script got a little broken in rev 1.225, with
the output for the linux_enable and svr4_enable stuff "floating
in the middle of nowhere".

Give them their own section, called "additional ABI support".

Don't rely on a shell scripts to do the simple job of loading
kernel modules for ibcs2_enable and svr4_enable.

Don't rely on a shell script to do the neglibly less simple
job of loading a kernel module and running one command for
linux_enable.

These shell scripts are going away.

Move the running of the Linux and SVR4 compat bits to the arch independent
location.

Sponsored by: LinuxWorld frustration

Add an rc.conf knob "ldconfig_insecure" to disable ldconfig's
security checks. Set the default to NO, i.e., secure.

Submitted by: Maxime Henrion <mhenrion@cybercable.fr>

Improve purgedir():

Fix leading & trailing space handling

Suggested by: ben

Handle files beginning with - correctly
Don't follow symlinks (cd /var/spool/lock; ln -s /. horror)

Don't use find(1) before nfs filesystems have been mounted as
it lives in /usr/bin. Instead, locate files manually.

Note, only *files* under /var/spool/lock are now deleted rather
than everything that's not a directory. I think this is more
correct, but if anyone disagrees please feel free to change it.

Problem pointed out by: bde

If the initial attempt to write ${entropy_file} to /dev/random fails
and the randomdev.ko module is not resident, try to load the module and
perform the write again.

Reviewed by: markm

Improve on previous commit:

Don't inhibit the trailing newline for entropy-related messages.
Try harder to save the seed file on shutdown.

Reviewed by: markm

Add entropy caching. With this, some entropy is cached at shutdown
time, and this is used to reseed the random number generator at
boot time.

NOTE - this has no hope of working if you halt(); you need to
execute rc.shutdown to get the entropy stash.

Don't attempt to rm directories under /var/spool/lock.

Sanitise NFS fs mounting for /usr NFS mounts.

Submitted by: Doug Barton <DougB@gorean.org>
Reviewed by: bde

Pedantic change: "reboot" -> "boot"

Add to defaults/rc.conf a new function source_rc_confs which rc
scripts may use to source safely overrides in ${rc_conf_files}
files.

This protects users who insist on the bad practice of copying
/etc/defaults/rc.conf to /etc/rc.conf from a recursive loop
that exhausts available file descriptors.

Several people have expressed interest in breaking this function
out into its own shell script. Anyone who wants to embark on
such an undertaking would do well to study the attributed PR.

PR: 17595
Reported by: adrian
Submitted by: Doug Barton <Doug@gorean.org>

s/grep/grep -q

Submitted by: ru

Only tell the user that we're Mounting NFS file systems when we have NFS
file systems to mount.

PR: 17594
Submitted by: Doug Barton <Doug@gorean.org>

Get the order of things right; the keys need to be generated
early to allow entropy to replenish.
sshd must start late to catch the full effects of ldconfig.

Add IPv6 configuration scripts.

Initial version created by, and kindly much tested by:
bmah@CA.Sandia.GOV (Bruce A. Mah)

Approved by: jkh

Reviewed by: bmah@CA.Sandia.GOV (Bruce A. Mah),
Ollivier Robert <roberto@keltia.freenix.fr>
Obtained from: KAME project

/dev/vn0b is a character device now.

Approved by: jkh

This is another in Martin Blapp's N-series of mount-related cleanups :)
Changes are:
- rpc.umntall is called at the right places now in /etc/rc*
- rpc.umntall timeout has been lowered from two days (too high) to one
- verbose messages in rpc.umntall have been clarified
- kill double entries in /var/db/mounttab when rpc.umntall is invoked
- ${early_nfs_mounts} has been removed from /etc/rc
- patched mount(8) -p to print different pass/dump values for ufs filesystems.
(last patch recieved from dan <bugg@bugg.strangled.net>)

Submitted by: Martin Blapp <mbr@imp.ch>, dan <bugg@bugg.strangled.net>

Third try.. Avoid filenames with spaces in them.

PR: 15937
Pointed out by: Koga Youichirou <y-koga@jp.FreeBSD.org>

Missed a filename variable quote in rc

Quote arguments in vi recover script.

PR: 15901
Submitted by: KOJIMA Hajime <kjm@rins.ryukoku.ac.jp>

Remove kvm_mkdb as it isn't installed anymore. libkvm asks directly
via kldsym(2), and crash dumps use nlist directly (and always have).

Install sendmail.cf into /etc/mail.

The current offical Sendmail Inc. version uses /var/mail/ and when we upgrade
our repository to that version, we will get the change. It is best to make
the path change in 4.0-R (which may not have the latest Sendmail Inc. version,
than to change in mid-4.x stream when we may upgrade.

Ok'ed by: Peter (quite a while ago)

Call rpc.umntall only if nfs_client_enable, hang occurse otherwise

Finish up umntall support. init now passed an argument to the
rundown script 'reboot' or 'single'. ISO support (which never
worked) has been removed from mount_nfs. mount_nfs and umount
now use mounttab, which allows umntall to work properly. The
rc scripts now call umntall as appropriate.

Submitted by: Martin Blapp <mb@imp.ch>

Add network pass4 - after all local (/usr/local/etc/rc.d f.e.)
daemons started. Move log_in_vain option there. It is needed to avoid
lot of connections to port 80 logged on production WWW server prior
Apache started from /usr/local/etc/rc.d

Slight reordering of /etc/rc order: It now goes

...
recover vi
msgs/bounds
update MOTD
rc.{arch}
rc.devfs
rc.local
$local.startup
securelevel

The motive behind this is to delay rc.{arch} as long as possible,
as it loads the screensaver, which kills the splash screen.
But at the same time, it can't be done after rc.devfs, as
that might depend on arch specific actions. rc.local and local.startup
also should come after these, and securelevel must be last of all.

Remove the "vinum_drives" rc.conf knob. According to Greg <grog@lemis.com>
this is no longer the right way to start Vinum unless you are doing some
kind of maintenance, and that's not the sort of thing that would go into
rc.conf.

Apply a consistent style to most of the etc scripts. Particularly, use
case instead of test where appropriate, since case allows case is a sh
builtin and (as a side-effect) allows case-insensitivity.

Changes discussed on freebsd-hackers.

Submitted by: Doug Barton <Doug@gorean.org>

This fix adds checking for the existance of the /var/msgs
directory before attempting to create the bounds file.

PR: bin/13184
Submitted by: "Stephen J. Roznowski" <sjr@home.net>

Remove all non-file like things in /var/tmp/vi.recover on reboot.

$Id$ -> $FreeBSD$

Style clean-up:

* All variables are now embraced: ${foo}

* All comparisons against some value now take the form:
[ "${foo}" ? "value" ]
where ? is a comparison operator

* All empty string tests now take the form:
[ -z "${foo}" ]

* All non-empty string tests now take the form:
[ -n "${foo}" ]

Submitted by: jkh

Perhaps I should have looked at the whole file rather than just the delta.
Use -eq rather than -ne.

Obtained from: OpenBSD (millert, etc/rc rev 1.104)

I don't think `customify' is a real word.

Don't use /tmp/_motd in the aftermath of the chflags(2) revelations.

Obtained from: OpenBSD (millert etc/rc rev 1.102 and hugh)

Clear flags on psuedo terminals before trying to chmod and chown them.

Don't allow users to prevent the updating of /etc/motd on machines for
which /tmp is not mounted in MFS, clear_tmp_enable="NO" and
update_motd="YES".

PR: 10005
Submitted by: Anton Voronin <anton@urc.ac.ru>

Ignore the quota.user and quota.group files rather than the
``quotas'' file when cleaning /tmp.

Break lines to be < 80 chars.

Submitted by: BDE

Add variable start_vinum. If set to YES, it will start vinum and
automagically find all the partitions. This is to be preferred to the
somewhat emetic usage of vinum_slices and the equally obnoxious 'vinum
read' command.

Use new -T switch to turn on immediate interruptibilty in shell
scripts. Also, the ugly 'echo -n' hack to prevent sh from a wrong
optimization isn't needed anymore.

Add two features:
log_in_vain:
log_in_vain turns on logging for packets to ports for which
there is no listener.
rc.sysctl:
A generic way to set sysctl values. It reads /etc/syslog.conf
and sets values based on that. No /etc/syslog.conf has been
checked in yet, and I've not added this to the makefile yet
until I get more feedback.

Reviewed by: -current, -hackers and bde especially

Split check_quotas into check_quotas and enable_quotas

enable_quotas - use quotas on your system
check_quotas - check for violations on startup

By assuming that a system was neat and without violation before it booted
we can skip a long (and at that point needless) process.

Submitted by: Alex Perel <veers@disturbed.net>

Fix bogons in previous commit.

Chown the pty device nodes back to root:tty.

Add ${lpd_program} and ${portmap_program} as variables in rc.conf, with
suitable defaults pointing to the FreeBSD-shipped versions. This will allow
for easier integration of third-party replacements for these daemons.
Reviewed by: Several members of -committers

Correct various mentions of rc.conf

Use /etc/defaults/rc.conf everywhere, falling back to /etc/rc.conf
as necessary (for half-assed upgrades).

Revamp rc.diskless. Split into rc.diskless1 and rc.diskless2. provide
more opportunities for overriding. Clean up /etc/rc ( remove conf_dir,
remove startup mount special cases, remove other special cases )

Get rid of $conf_dir

Change variable name vinum_slices to vinum_drives to match the variable
we set in rc.conf.

Background: the `vinum read' command has changed. For a short period
of time, it required the names of the slices on which vinum was
stored. Now it requires the names of the drives.

If vfs.nfs.diskless_valid does not exist, the conditional fails
and spews an error message we'd rather not spew. Fixed.

Submitted by: Kevin Street <street@iname.com>

Move reading of rc.conf sooner as requested by Greg. I'm a tad nervous
about this becase that makes it get run *before* the filesystems are
mounted. If people have added stuff to their rc.conf or rc.conf.local
that uses stuff outside of /bin and /sbin, this will break.

The vinum setup tool automatically loads the vinum module if it's needed,
there is no need to duplicate the logic here.

XXX rc.conf needs to be read sooner..

Finish up /etc/rc adjustments to handle diskless read-only-root booting.
This will be followed up by rc.diskless and documentation.

Introduce rc script for BOOTP 'diskless' boot. Well, not quite diskless
since the kernel must be booted from something ( like a floppy ). This
script must occur near the beginning of the rc file in order to support
read-only NFS mounts, which in turn allows all the BOOTP machines to use
the same / and /usr.

The companion rc.diskless script is forthcoming.

nuke dset from here.

Reminded by: peter

Only start vinum if vinum_slices variable is non-empty

Reported-by: roberto

Add hooks for starting vinum at boot time. Set the variable
vinum_slices to the names of all slices (block device) which are under
the control of vinum. The configuration will be read in from each in
turn, starting with the most recently updated.

Reviewed-by: jkh

Move nologin from /etc to /var/run. This means one less file that has
to be written to /etc.

The only essential change is in paths.h, so any third-party software
written correctly will pick it up in the next rebuild.

Reviewed by: the committers list (actually an old version)

Added starting of usbd

We load kld's in preference to LKM's, these do not need the root fs to be
read/write to load.

Reviewed by: cvs-current

Commit changes to rc and rc.local, removing the remaining minimal
functionality of rc.local into rc and commenting it out of rc.local
prior to the deletion of rc.local from the CVS tree.

Should be sysctl -n. Yesterday wasn't one of my better days. Doh.

Reported by: Ben Smithurst & Makoto Matsushita

Add a test for hw.machine == i386 before trying to run ldconfig for
legacy aout support.

Hand me the pointy hat, and make it big.

Remove all references to tickadj(8) from rc, rc.conf and rc.conf.5.

Disable building tickadj(8) by removing util from SUBDIR in the xntpd
Makefile. Note that the sources are still there and tickadj can still
be built and installed by doing:

# cd /usr/src/usr.sbin/xntpd/util
# make all install

There are enough references to tickadj in e.g. the xntpd documentation
(not to mention the sysctl variables it uses etc.) that I don't feel
up to implementing the final solution right now.

Kinda-approved-by: phk

Put guard shells around stuff started from $local_startup. If you type
SIGINT (C-c), you'll get control passed to the next script even if
the current one blocks signals. The child is not killed, though.

Spaces -> tabs, don't use touch before it's available
Pointed out by: bde

Fix up the boot-time ldconfig handling to deal with dual object
file formats. I have added a new rc.conf variable ${ldconfig_paths_aout}
which is like ${ldconfig_paths}, but only for a.out shared libraries.

On a "standard" ELF system, the ELF ldconfig path is taken from
${ldconfig_paths}, while the a.out ldconfig path is taken from
${ldconfig_paths_aout}.

On a not-yet-converted a.out system, only the a.out ldconfig path
is set, and it is taken from ${ldconfig_paths_aout}. If that
variable is unset, /etc/rc defaults it to the value of ${ldconfig_paths},
on the assumption that the system's "/etc/rc.conf" file hasn't been
updated.

Make /dev/vga a softlink to /dev/ttyv0 under DEVFS using /etc/rc.devfs

Remove the hack from syscons that added a /dev/vga node in DEVFS
it broke root acces on ttyv0 because dev_mkdb screwed up.

Disable kernel_secure_level unless explicitly set in rc.conf. Previously,
it was enabled unless explicitly unset, creating a pitfall for people
like me who upgraded /etc/rc without upgrading /etc/rc.conf.

Remove X11 lock files at boot time even if $clear_tmp_enable is not set.
PR: conf/7366
Submitted by: Thomas David Rivers rivers@dignus.com

Explicitly pass the "-aout" option to ldconfig, until I've had a
chance to work out a better scheme to handle the separate
invocations necessary for a.out and ELF.

Don't try to run ldconfig if it doesn't exist. Useful for elf platforms.

Fix my blunder in my previous commit here.

Add "Mounting NFS file systems" progress indicator

PR: 7605
Reviewed by: phk
Submitted by Nick Hibma <nick.hibma@jrc.it>:

Don't blat /var/run and /var/spool/lock *after* network_pass1()
unless /var is nfs-mounted.
This was removing ppps device lock (when ppp's started in
/etc/start_if.tun0 in -ddial or -dedicated mode) and allowing
other programs (such as mgetty) to confuse ppp by playing with
the modem while ppp's using it.

People that nfs-mount /var had better not start ppp in this
way....

make a bounds file for msgs(1) if there isn't one already
PR: bin/3023
Reviewed by: jkh@FreeBSD.ORG

Add rc.conf option to set kernel security level and modify "/etc/rc" to
use this.

Requested by: max, andreas

Note: This change just provides a convenient way to exercise existing
functionality. Whether `kern.securelevel' is effective in increasing
system security is another issue, and one that has been well thrashed
out in the lists.

Cut through the discussions and settle the issue: Everything in /var/run
is blown away at boot. If sudo or other programs needs directories, they
had better make them in /usr/local/etc/rc.d/mumble.sh

PR: 4138 5619 6793

ELF preparation step 2:

Move a.out libraries to /usr/lib/aout to make space for ELF libs.
Make rtld usr /usr/lib/aout as default library path.
Make ldconfig reject /usr/lib as an a.out library path.
Fix various Makefiles for LIBDIR!=/usr/lib breakage.

This will after a make world & reboot give a system that no
longer uses /usr/lib/*, infact one could remove all the old
libraries there, they are not used anymore.

We are getting close to an ELF make world, but I'll let this
all settle for a week or two...

Start syslogd before savecore, so savecore's messages will be logged
properly. Only users of 4 MB machines might not want it this way (to
prevent accidentally clobbering the coredump), but they are somewhat
in the minority these days.

Add a ldconfig_paths variable that specifies the shared library paths
to be given to ldconfig(8).

PR: 5178
Submitted by: Evan Champion <evanc@synapse.net>

Back out last commit re dmesg.boot

Make rc record boottime dmesg to /var/log/dmesg.boot, so the data
is preserved after it scrolls out of the dmesg buffer.

Resurrect a modified version of the /tmp clearing code from rev 1.119.
Enable this by setting clear_tmp_enable in rc.conf to YES. Beware
there can be serious side-effects of enabling this, so use at you own
risk.

PR: misc/4982, misc/5054

Unspam rev 1.114 that got spammed when someone commited the rc.conf
changes: drop `savecore_enable' now that our savecore obeyes the
minfree file.

Change the not-specified-default for inetd & cron
to "enabled". This will avoid breaking things for
idiots like me who update /etc/rc without paying
attention and updating rc.conf too.

Don't redirect "mount -t -o nfs" to null

Ooops. Wrong branch, back out previous commit.

MFC: rev 1.125, remove old PID files at startup

Back out ld.so.conf change until the question is resolved.

Use /etc/ld.so.conf as a library path override, if it exists.
Submitted by: Hans Zuidam <hans@brandinnovators.com>

Execute rc.local in a subshell instead of sourcing it.

Requested by: dima

sh /etc/rc.local -> . /etc/rc.local

Add cron_enable and inetd_enable flags to rc.conf.
WARNING: don't update rc and forget to update rc.conf, or you won't be
able to telnet back into your box after a reboot.

Remove /var/run/* now instead of *.pid

Restore /var/run/*.pid cleaning, gated already moved off the way
and innd store its .pid inside its own directories

Back out /var/run/*.pid cleaning since some programms (like innd)
use .pid to detect crash

Add rm -f /var/run/*.pid to prevent random process killing due to
picking old .pid file

Neaten up some things which were inconsistent, add a few more flags
to things which need them, general cleanup.
Submitted by: Brian Somers <brian@awfulhak.org>

Use full path to sendmail for security reasons.
Submitted by: Ollivier Robert <roberto@keltia.freenix.fr>

Add inetd_flags and way of passing ipfw a configuration file
(if firewall = "somefilename").

Fix typo fixes and URLs which were accidently nuked out of this
file (submitted by: soil@quick.net via PR#3501).

Submitted by: "Danny J. Zerkel" <dzerkel@phofarm.com>

re-enabled: . /etc/rc.${arch}
PR:
Reviewed by: bruce
Submitted by:
Obtained from:

Fixed sourcing of /etc/etc.${arch}/rc.${arch} on startup.
PR:
Reviewed by:
Submitted by:
Obtained from:

Update the etc world from RELENG_2_2 which is now more up-to-date
(gotta get myself -current again, this is a drag).

Also-fixes-problems-noted-by: Wolfgang Helbig & Joerg Wunsch

Clean up the output a bit.

Bring in rc file changes from -current.

Make a sysconfig variable controlling if teh kernel should accept
nfs requests from non-privileged ports.

Change mountd such that it does never set this variable, but only clears
it when run with -n. Also document this in the man page.

Add portmapflags and syslogd flags.
Reviewed by: jkh

Having two knobs until you get a kernel core dump saved is silly.
Leave dumpdev, but kill the savecore variable. Thus, it's still off
by default, but all you need is enabling dumpdev now.

phk's old argument that savecore might inadvertendly fill up the disk
no longer counts, savecore now correctly obeyes a `minfree' file, and
we ship our systems with such a file that even has a reasonable
default.

Revert $FreeBSD$ to $Id$

Make sure newly created /var/account/acct file is 0600 mode.

Make the long-awaited change from $Id$ to $FreeBSD$

This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.

Boy, I'm glad we're not using sup anymore. This update would have been
insane otherwise.

Put dmesg.boot in /var/run instead of /var/tmp

Suggested by: joerg & peter

Now that uptimes run into months on a regular basis, I often find myself
wondering what the hw-config of a machine is, and the logs have been
rotated many times since reboot already.

Added:
/sbin/dmesg > /var/tmp/dmesg.boot
to /etc/rc

2.2 candidate

Extend the set of ptys to chmod at boot time.

Closes PR # conf/1957: not all perms of ptys...

Submitted by: gurney_j@efn.org (John-Mark Gurney)

Add /usr/local/sbin to the rc $PATH. Things like GateD are located there.

start rpc.statd for nfs_server case.
add warning and commented out line for rpc.lockd

/dev/vn0b is supposed to be a block device, so don't test(1) whether
it's a plain file.

Submitted by: brian@awfulhak.demon.co.uk (Brian Somers)

Update to use the recommended recovery procedure from nvi-1.76.
This is a lot more robust and handles errors a lot better. It also cleans
up stray, hopeless, or unmodified files rather than leaving them there
forever.

Correct the startup sequence for syslogd:

. crate the symlink for /dev/log if required, then
. remove the old socket (savecore might have already created it
accidentally), then
. start syslogd.

(Btw., our test(1) misses an option to test for a socket.)

Add hooks for rpc.ypxfrd in /etc/sysconfig and /etc/rc. Also change
a couple of benign cases of 'yppasswdd' to 'rpc.yppasswdd.' (Like
rpc.yppasswdd, rpc.ypxfrd should only be run on NIS master servers.)

Add a -p to the amd invocation, it's not optional since we are expecting
the pid on stdout for /var/run/amd.pid. The example in sysconfig had
forgotten -p anyway...

Some tweaks after having run a YP-only system with quotas:
- split the "starting network daemons" in half.
- The first half starts things necessary to get full name service up.
- The quota check etc moved from "before network" to after the name
services are running. quotacheck does a while(p=getpwent()) which
isn't real good without YP running...
- moved rwhod a little later to put it with the other network stuff.
- deferred inetd a tad so that it's after ldconfig and dev_mkdb,
otherwise you get logins before you're ready.

Unresolved: named is started before ypserv/ypbind still, but named does
a while(s = getservent()) and while (p=getprotoent()) to suck in the
entire database into memory. This means you cannot have a "+" in the
/etc/services or /etc/protocols files or you get a long hang at boot.

Fix a possible syntax error in rc when swapfile isn't defined at all.
This can happen when the user is upgrading from an older version and
his/her sysconfig file doesn't have swapfile defined to be NO in it.

Add support for shlibs in /usr/lib/compat that the linker will not find
at compile time, but ldd will at runtime.

Add a new "swapfile" variable so that you can add a file as a additional
swap as the system is coming up.

Edit this for consistency's sake (though it's syntactically identical).
Noticed-By: "William A. Gill" <bill@duchess.wagill.com>

Move things up a bit to make startup pretty

Start sendmail after ldconfig. Put the nail in the coffin on misc/1346.
Submitted by: Hiroharu Tamaru <tamaru@ap.t.u-tokyo.ac.jp>

Start vi.recovery processing after ldconfig.
Closes misc/1346 which has bitten me more times than I care to remember.

Add a few hints about the cleaning policy of /tmp, including an example
(commented out) for how to purge it regularly.

Cosmetic tweaks.

Remove obsoleted comment about adjkerntz

Nuke the nasty cleaning of /var/run after netstart starts - it nukes
gated's pid file, for one thing, and is just generally BAD.

Bring in ccd support.

Call ccdconfig before swapon if /etc/ccd.conf exists.

Obtained from: NetBSD

Renamed the relevant PC-Card support files to reflect the newest release.

PC-CARD hooks. Someday it will actually enable working code. :)

Reviewed by: phk
Submitted by: Tatsumi Hosokawa <hosokawa@mt.cs.keio.ac.jp> & BSD Nomads

I re-wrote alot of this, but the ideas are based on the code from the
most recent pccard-snapshot.

rpc.yppasswdd instead of yppasswdd

Close PR conf/589 - amd should only evaluate ${amdflags}.
While I'm at it, add a commented-out sample amd flags line to sysconfig
and drop a sample amd.map file in this directory for easy copying.
I know that this file's contents are highly site-variable, but the one I've
chosen for an example is also the one I've seen on 99.9% of the amd-using
sites I've visited. I think it's a fair default.

Add an option to start mrouted. Off by default

Add (at long last) an option to say if you want to run the printer
daemon (lpd) or not. Set to run it by default.

added the "-p" option to amd so that it writes it's pid to
/var/run/amd.pid and added the "-l /var/log/amd.log" option there too

added an entry for the "rotation" of /var/log/amd.log to newsyslog.conf

Go to new scheme for local_startup variable. Now one can specify multiple
directories to check in looking for port startup scripts. The specific gunge
for apache httpd, gated and pcnfsd in /etc/sysconfig and /etc/netstart is
gone now. Note that pcnfsd's troubles aren't necessarily over (and probably
why NetBSD brought it into their sources) - anyone adding pcnfsd will STILL
have to tweak /etc/sysconfig in order to set the new variable
`weak_mountd_authentication' to YES. The flags to mountd are directly affected
by pcnfsd's requirements for non-root mounts, unfortunately! :-(
Submitted by: paul & jkh

Use absolute path for sendmail daemon or sendmail can't find
itself on SIGHUP.

remove path in front of kadmind, path already set correctly

Don't have ldconfig look in /usr/gnu/lib since it was removed before 2.0R.

If accounting becomes enabled and /var/account/acct
not exist, touch it, or accounting is never started
(it must be pre-existen file).

Use back-quotes in `echo ...recover.*`

Recover vi recovery files on reboot.
Closes pr misc/556 and others.

local_startup=/usr/local/etc/rc.d
[ As suggested by Satoshi - rc.local.d was pretty redundant under /usr/local;
duh! :-)]

[ -f /etc/rc.local ] && sh /etc/rc.local
For backwards compatibilty with non-executable rc.local files. Sorry, Bruce!

Submitted by: asami & bde & jkh

Bring my fixes over from 2.1.

Removed startup code for pcnfsd and apache. These don't even exist
in FreeBSD and should never have got in here.

Removed hard-coded /etc/rc.local.d hacks and implemented a more flexible
solution.

Added a local configuration area to sysconfig.

Add support for /etc/rc.local.d directory, ala SYSV. If the purists
don't like it, they don't have to use it. The check makes sure that
/etc/rc.local.d exists before attempting to do anything with it. Now
packages will be able to add their startups as /etc/rc.local.d/<pkgname>.sh
in order to get local startup behavior. Maybe we can stop adding
knobs to /etc/sysconfig for ports/packages now?
Submitted by: wollman & jkh

Add checks for pcnfsd (flag to mountd must be added in this case)
and Apache httpd, so a user can be brought up to speed quickly.

Not sure if Rod is still working in these or not, so here goes.

Add nis_ypsetflags sysconfig entry and appropriate code in rc to call
ypset if needed. Should probably automatically add `-ypsetme' to ypbind
flags if this is set.

Optionally set the dump device.

The ``mount -a -t nfs'' should never have been backgrounded. If you
have non-critical nfs volumes in /etc/fstab they should have option bg
on them. The behavior of the system is more tuneable this way, and
allows a slow mounting /usr over nfs to work.

Submitted by: bde

Fixed incompleteness that would allow dirty filesystems to get mounted
when the single user shell was terminated. These changes disallow mounting
or R/W upgrading filesystems that are dirty unless "-f" (force) option
is used with mount. /etc/rc has been modified to abort the startup if
one or more non-nfs partitions fail to mount.

Reviewed by: Poul-Henning Kamp, Rod Grimes

Document the fact that almost all the user configuration stuff is now
in /etc/sysconfig, per Luigi's suggestion.

Add -r to rm -f /var/spool/uucp/.Temp/*

Remove obsolete comments about my-name and my-network.

Have netstart directly source sysconfig so that it stands on its own.
Do not source netstart in rc, run it with sh.

Rework the dangerous /etc/hostname.* so that it uses a variable with
a list of interfaces and a variable for each interface in that list.
The files /etc/hostname.* become obsolete with this change, the
information is now stored in /etc/sysconfig.

Source any /etc/start_if.${ifn} files so they can export things to
netstart (plans for future enhancements in this area.)

Obsolete /etc/defaultrouter, this is now down with $defaultrouter from
sysconfig.

This is a purely cosmetic clean up. Fix many cut and paste problems that
had turned tabs into spaces.

This is the rc work as provided by pts, I will me makeing some additional
changes to it based upon other outstanding bug reports and commits made
after his work.

Comments:

(a) sysconfig is still used to do all configuration. I was not going to
change that out from under you.... a user never need edit netstart
or rc* unless they're being very weird.

(b) rc.maint has been folded back into rc. It is just unworkable as
a separate chunk because of ordering bogosities

(c) netstart does what it says... it starts up enough of the network to
get up, it doesn't start every bloody daemon that might talk to a
socket... netstart ifconfig's the devices and sets up routing if
configured to do so.

(d) nfs disks are mounted immediately after netstart completes

(e) syslog is started as early as possible (right after nfs) so that error
messages can get logged to remote syslog servers properly

(f) named is started (there is an argument that says that named should be
started before syslogd because if you are the dns server for your domain,
you'd like named to resolve remote hosts in syslog.conf, but this is
a minority case and the trivial workarround is to put the syslog host
in /etc/hosts or use an /etc/resolv.conf -- why? because you want syslog
to catch named errors, which is a MUCH more important and likely occurance)

(g) NOW all of the rest of the network daemons such as the time stuff, RPC,
NIS, NFS, Kerberos and inetd are started

(h) the rest of the generic stuff is done (cron/printer/sendmail)

(i) shared libraries are set

(j) /etc/rc.i386 is run (this does FreeBSD/386 specific stuff like ibcs2,
xtend, and all of the syscons stuff
(this is actually started as /etc/rc.`uname -m`

(k) the syscons stuff has gotten a serious cleaning to make it consistent
with rc conventions

(l) rc.local has had the comments about syscons removed (they are not relevant
to this file now) and the full name of the kernel has been restored to
/etc/motd

Submitted by: pts

Add function keys change setup

Move the invocation of rc.maint ahead of netstart. This is actually OK
since /var wouldn't be mounted at this point anyway - the mount of NFS
comes after both of them are run. This closes misc/276.

1. Add missing -n's to echo lines, closing misc/278
2. Make output of spaces follow conventions used elsewhere.
3. Inform user of a few things being started that were silent before.

Make syslogd work again: in needs to be started in netstart right
before the rest of the system daemons are brought up and *after* the
network interfaces have been configured.

Also fix one other potential problem: the NIS services need to be started
relavively early since some of the other daemons might need them. The
automounter is a good example: if you use amd with NIS-based maps, you'd
better have NIS running before you start it. :) I think mountd might
need it too, now that netgroups can be read via NIS as well.

start syslog earlier
add optional ibcs2 startup

Correct a few spelling bogons.
Submitted by: phk

Get around problem of not exporting variables in sysconfig

rc.netstart -> netstart

Another pass through our rc files in an attempt to eliminate historical
crufy and generally make all of this easier to understand and modify.

Almost full syscons setup via rc & sysconfig

Change named starting convention to use $namedflags like most other
daemons that take command-line arguments. Correct /etc/namedb installation
to use the correct files.

Begin a long-overdue cleanup of this whole mess.

1. Move all system configuration variables into /etc/sysconfig
2. Adapt other files to use it.
3. Add a host of new variables for micro-managing your system in various
ways. For 2.1, /etc/sysconfig will be machine-edited so that the user
doesn't even have to care at all about the various funny names we picked.
4. Enable dset. We won't get it debugged if we never use it, and no one
has said anything negative about it yet, so here goes!
5. Try to use one consistent style throughout.

Remove extra fi that caused this script to fail during boot.

Semi-major RC file cleanup:

- Do ntp right
- Move recenrly-added and long-standing junk from rc.local into rc, so
. that rc.local truly is LOCAL.
- Fix named invocation to use the correct boot file location.

Disable dset for now - Bruce says it hoses the show.

Add dset call to rc file, right after the databases are rebuilt.

timedflags quoted
Submitted by: root@uglabgw.ug.cs.sunysb.edu

Add yet one locale example, this time ISO8859-1 as most common example.
Add reference where find full locales list

Call rc.local with . instead of sh to pass variables
Submitted by: John Capo

fix if test for rwhod.

Only so savecore if people ask for it.

Restore back -i for adjkerntz

Remove -i options from adjkerntz call

Add commented out startup locale setup, needed for some daemons
like comsat

Moved swapon -a to before the fsck. It isn't possible to run fsck on
moderately sized filesystems on 4MB machines otherwise.

Add nfs_client and amdflags

Remove elvis editor preserve stuff. We don't have elvis in 2.0 (nor am
I aware of anyone who wants it given that we have nvi).

Don't pass a filename to kvm_mkdb, it can figure out the correct file
on its own.

root must be remounted read/write fairly early in the startup procedure
both for NFS diskless and for VFS LKMs.

fbtab: Pulled down from Attic, fixed spaces to tabs.

make.conf: Pulled in the following changes that had been commited
to share/examples/etc:
----------------------------
revision 1.6
date: 1994/09/20 22:30:33; author: adam; state: Exp; lines: +3 -3
BOOTWAIT example converted to milliseconds calibration
----------------------------
revision 1.4
date: 1994/09/19 21:35:28; author: wollman; state: Exp; lines: +7 -1
Document NO_SHARED_LIBCC_INT.
----------------------------
revision 1.3
date: 1994/09/19 21:28:11; author: wollman; state: Exp; lines: +12 -17
Install /etc from the same source as /usr/share/examples/etc (mostly).
----------------------------
revision 1.2
date: 1994/09/19 02:05:08; author: ache; state: Exp; lines: +1 -11
Remove STARTUP_LOCALE, obsoleted now
----------------------------
revision 1.1
date: 1994/09/08 19:08:59; author: jkh; state: Exp;
Add a sample make.conf. Also document the new X11BASE variable, and
expand some of the documentation for other entries.
Submitted by: jkh
----------------------------

manpath.config: Pulled down from Attic, and merged share/examples/etc
changes.

rc: Pulled in the following change from share/examples/etc:
----------------------------
revision 1.2
date: 1994/09/19 23:13:37; author: ache; state: Exp; lines: +1 -2
Remove warning about adjkerntz /var/run file
----------------------------

nfsiod should be started if this is a NFS-client, not if it is a server.

look for "nfs" in etc/fstab, and start it if we see it. Not quite perfect,
but better. mount_nfs should start it, if it isn't running.

1) adapted to a world without "fastboot" and "fasthalt".
2) updated to work with 2.0/4.4 binaries.

check for diskless boot, and remount / RW in that case.

Comment out the startup of the xtend daemon by default.

Now rc.serial used for initial setup of serial lines

Added
if [ -x /usr/libexec/xtend ]; then
echo -n ' xtend'; /usr/libexec/xtend
fi

to etc/rc

Path of uucp lock/temp corrected

Fix to handle routed with multiple args from Andy J. Chichak.
This should go into 1.1 Release if it's not too late.

Add /usr/X11R6/lib to the ldconfig path if it exists.

Added tickadj to start of xntpd, this improves performance to nominal.

Correction so that elvisrecover finds the right files!
>From: chmr@edvz.tu-graz.ac.at (Christoph Robitschko)
Date: Fri, 21 Feb 1992 09:40:35 +0100 (MET)

The last version expected elvis* files in /var/tmp, while elvis puts
elv* files there.

Move ldconfig stuff to be after nfs mounts.

Put back in elvis recovery stuff, we still ship elvis with 1.1 as a fall
back editor!

Add nvi recovery precedure from man page.

Fix ntpdate echo lines so that it looks pretty (ntpdate spits out 1 line
of output that makes the system boot up look real ugly if you do it
echo -n, so I chaged it to echo, and then added a
echo -n 'starting more network daemons:' so any addition daemon starts
look normal.

Use find -d to clear /tmp, to stop warnings.
Removed elvispreserve command, nvi does not use it, and it was also wrong
for elvis.

This is Vixie cron 3.0. This version fixes all known security bugs.
Further it implements crontab -e.
I moved cron from /usr/libexec to /usr/sbin where most daemons are
that are run from rc. That also gets rid of the ugly path crond
used to have in ps(1) outputs. Further I renamed it to cron, as
Paul Vixie likes it and is done by NetBSD.

NOTE VERY WELL THE FOLLOWING:

1) Systems crontab changed. Every users crontab resides in /var/cron
*EXCEPT* root's. This is a special crontab as it resides in
/etc. Further it is the *ONLY* crontab file in which you specify
usernames. See /usr/src/etc/crontab. This is also done by BSDI's
BSD/386 as far as I know (they provided the patches for it anyway)
2) So you *must* delete root's crontab and reinstall the copy
in /etc from /usr/src/etc.
'Must' is to much: the old installed crontab will work but cron
will also try to 'run' /etc/crontab.
3) Last but not least: cron's logging is now done via syslog. Note
that logging by cron is done lowercase when it logs about itsself
and uppercase when it logs user events, like installing a new crontab.
The default logfile file is the same as before:
syslog.conf:cron.* /var/cron/log

-Guido

Move "mount -a -t nfs" *after* network daemons,
must be at least after named & gated for proper name resolution.

Add warning comment line (rm anything into /var/run)

Added more robust ldconfig setting in rc, removed redundant ldconfig in
rc.local.

Support for automatically running ntpdate and xntpd.

Fix sendmail_flags, long ago it was imported from /etc/netstart
with this bug.

adjkerntz call added with explanation comment

Moved startup of portmap to be the first network daemon.

allow spaces in $sendmail_flags.

Don't start update daemon; it's now internel to the kernel.

/var/run is cleared on boot. Rerun 'ldconfig /usr/X386/lib' after
clearing /var/run if /sbin/ldconfig exists.

Added a new flag variable to /etc/netstart, $sendmail_flags, which
gives the flags to be passed to sendmail when it is started. (If it is
"NO", sendmail is not started.) Also, always start the portmapper regardless
of the value of $nfs_server; this should prevent the inetd complaints we
have seen from recurring.

Changed -r /fastboot to -e /fastboot. File just needs to exist for fastboot.
Otherwise, doesn't work for non-root owner of /fastboot.

Removed the foreground/background escape sequences that cause headaches
if you are using a com console or a non pc3 console.

This commit was generated by cvs2svn to compensate for changes in r37,
which included commits to RCS files with non-trunk default branches.

Initial import of 386BSD 0.1 othersrc/etc