GENERIC.common revision 1.27
1#
2#	$NetBSD: GENERIC.common,v 1.27 2018/01/10 19:56:47 jakllsch Exp $
3#
4#	GENERIC evbarm kernel config (template)
5#
6
7# estimated number of users
8
9maxusers	32
10
11# Standard system options
12
13options 	RTC_OFFSET=0	# hardware clock is this many mins. west of GMT
14options 	NTP		# NTP phase/frequency locked loop
15
16# CPU options
17options 	PMAPCOUNTERS
18
19# Architecture options
20
21# File systems
22include "conf/filesystems.config"
23no file-system 	LFS
24no file-system 	CODA
25no pseudo-device vcoda
26
27# File system options
28#options 	QUOTA		# legacy UFS quotas
29#options 	QUOTA2		# new, in-filesystem UFS quotas
30#options 	DISKLABEL_EI	# disklabel Endian Independent support
31options 	FFS_EI		# FFS Endian Independent support
32options 	NFSSERVER
33options 	WAPBL		# File system journaling support
34#options 	FFS_NO_SNAPSHOT	# No FFS snapshot support
35
36# Networking options
37
38#options 	GATEWAY		# packet forwarding
39options 	INET		# IP + ICMP + TCP + UDP
40options 	INET6		# IPV6
41options 	IPSEC		# IP security
42#options 	IPSEC_DEBUG	# debug for IP security
43#options 	MROUTING	# IP multicast routing
44#options 	PIM		# Protocol Independent Multicast
45#options 	NETATALK	# AppleTalk networking
46#options 	PPP_BSDCOMP	# BSD-Compress compression support for PPP
47#options 	PPP_DEFLATE	# Deflate compression support for PPP
48#options 	PPP_FILTER	# Active filter support for PPP (requires bpf)
49#options 	TCP_DEBUG	# Record last TCP_NDEBUG packets with SO_DEBUG
50
51# JIT compiler for bpfilter
52#options 	SLJIT
53options 	BPFJIT
54
55#options 	NFS_BOOT_BOOTP
56options 	NFS_BOOT_DHCP
57#options 	NFS_BOOT_BOOTSTATIC
58#options 	NFS_BOOTSTATIC_MYIP="\"192.168.1.4\""
59#options 	NFS_BOOTSTATIC_GWIP="\"192.168.1.1\""
60#options 	NFS_BOOTSTATIC_MASK="\"255.255.255.0\""
61#options 	NFS_BOOTSTATIC_SERVADDR="\"192.168.1.1\""
62#options 	NFS_BOOTSTATIC_SERVER="\"192.168.1.1:/nfs/sdp2430\""
63
64options 	NFS_BOOT_RWSIZE=1024
65
66# Compatibility options
67
68include 	"conf/compat_netbsd60.config"
69options 	COMPAT_NETBSD32	# allow running arm (e.g. non-earm) binaries
70
71# Shared memory options
72
73options 	SYSVMSG		# System V-like message queues
74options 	SYSVSEM		# System V-like semaphores
75#options 	SEMMNI=10	# number of semaphore identifiers
76#options 	SEMMNS=60	# number of semaphores in system
77#options 	SEMUME=10	# max number of undo entries per process
78#options 	SEMMNU=30	# number of undo structures in system
79options 	SYSVSHM		# System V-like memory sharing
80
81# Device options
82
83#options 	MEMORY_DISK_HOOKS	# boottime setup of ramdisk
84#options 	MEMORY_DISK_ROOT_SIZE=8192	# Size in blocks
85#options 	MEMORY_DISK_DYNAMIC
86#options 	MINIROOTSIZE=1000	# Size in blocks
87#options 	MEMORY_DISK_IS_ROOT	# use memory disk as root
88#options 	MEMORY_DISK_FBFLAGS=RB_SINGLE
89
90# Miscellaneous kernel options
91options 	KTRACE			# system call tracing, a la ktrace(1)
92#options 	SCSIVERBOSE		# Verbose SCSI errors
93#options 	MIIVERBOSE		# Verbose MII autoconfuration messages
94#options 	USERCONF		# userconf(4) support
95#options 	PIPE_SOCKETPAIR		# smaller, but slower pipe(2)
96
97# Wedge support
98options 	DKWEDGE_AUTODISCOVER	# Automatically add dk(4) instances
99options 	DKWEDGE_METHOD_GPT	# Supports GPT partitions as wedges
100
101# Alternate buffer queue strategies for better responsiveness under high
102# disk I/O load.
103#options 	BUFQ_READPRIO
104options 	BUFQ_PRIOCSCAN
105
106# Development and Debugging options
107
108#options 	PERFCTRS	# performance counters
109options 	DIAGNOSTIC	# internal consistency checks
110#options 	DEBUG
111options 	KDTRACE_HOOKS	# kernel DTrace hooks
112#options 	LOCKDEBUG
113#options 	PMAP_DEBUG	# Enable pmap_debug_level code
114#options 	IPKDB		# remote kernel debugging
115#options 	VERBOSE_INIT_ARM # verbose bootstraping messages
116options 	DDB		# in-kernel debugger
117options 	DDB_ONPANIC=1
118options 	DDB_HISTORY_SIZE=100	# Enable history editing in DDB
119#options 	DDB_COMMANDONENTER="bt"
120#options 	KGDB
121
122# Pseudo-Devices
123
124# crypto pseudo-devices
125pseudo-device	crypto			# /dev/crypto device
126pseudo-device	swcrypto		# software crypto implementation
127
128# disk/mass storage pseudo-devices
129#pseudo-device	md			# memory disk device (ramdisk)
130pseudo-device	vnd			# disk-like interface to files
131#pseudo-device	fss			# file system snapshot device
132pseudo-device	drvctl			# driver control
133
134# network pseudo-devices
135pseudo-device	bpfilter		# Berkeley packet filter
136pseudo-device	loop			# network loopback
137pseudo-device	bridge			# simple inter-network bridging
138pseudo-device	vlan			# IEEE 802.1q encapsulation
139pseudo-device	ppp			# Point-to-Point Protocol
140pseudo-device	pppoe			# PPP over Ethernet (RFC 2516)
141pseudo-device	tun			# network tunneling over tty
142pseudo-device	tap			# virtual Ethernet
143pseudo-device	gif			# IPv[46] over IPv[46] tunnel (RFC 1933)
144pseudo-device	ipsecif			# interface for routing-based ipsec
145pseudo-device	gre			# generic L3 over IP tunnel
146pseudo-device	npf			# NPF packet filter
147
148# miscellaneous pseudo-devices
149pseudo-device	pty			# pseudo-terminals
150#options 	RND_COM
151#pseudo-device	clockctl		# user control of clock subsystem
152pseudo-device	ksyms			# /dev/ksyms
153pseudo-device	lockstat		# lock profiling
154
155options 	FILEASSOC		# fileassoc(9) - required for Veriexec
156					# and PAX_SEGVGUARD
157
158# Veriexec
159#
160# a pseudo device needed for veriexec
161pseudo-device   veriexec
162#
163# Uncomment the fingerprint methods below that are desired. Note that
164# removing fingerprint methods will have almost no impact on the kernel
165# code size.
166#
167options VERIFIED_EXEC_FP_SHA256
168options VERIFIED_EXEC_FP_SHA384
169options VERIFIED_EXEC_FP_SHA512
170
171options 	PAX_ASLR_DEBUG=1	# PaX ASLR debug
172options 	PAX_SEGVGUARD=0		# PaX Segmentation fault guard
173options 	PAX_MPROTECT=1		# PaX mprotect(2) restrictions
174options 	PAX_MPROTECT_DEBUG=1	# PaX mprotect debug
175options 	PAX_ASLR=1		# PaX Address Space Layout Randomization
176