GENERIC.common revision 1.30
1#
2#	$NetBSD: GENERIC.common,v 1.30 2018/07/14 15:09:41 maxv Exp $
3#
4#	GENERIC evbarm kernel config (template)
5#
6
7# estimated number of users
8
9maxusers	32
10
11# Standard system options
12
13options 	RTC_OFFSET=0	# hardware clock is this many mins. west of GMT
14options 	NTP		# NTP phase/frequency locked loop
15
16# CPU options
17options 	PMAPCOUNTERS
18
19# Architecture options
20
21# File systems
22include "conf/filesystems.config"
23no file-system 	LFS
24no file-system 	CODA
25no pseudo-device vcoda
26
27# File system options
28#options 	QUOTA		# legacy UFS quotas
29#options 	QUOTA2		# new, in-filesystem UFS quotas
30#options 	DISKLABEL_EI	# disklabel Endian Independent support
31options 	FFS_EI		# FFS Endian Independent support
32options 	NFSSERVER
33options 	WAPBL		# File system journaling support
34#options 	FFS_NO_SNAPSHOT	# No FFS snapshot support
35
36# Networking options
37
38#options 	GATEWAY		# packet forwarding
39options 	INET		# IP + ICMP + TCP + UDP
40options 	INET6		# IPV6
41options 	IPSEC		# IP security
42#options 	IPSEC_DEBUG	# debug for IP security
43#options 	MROUTING	# IP multicast routing
44#options 	PIM		# Protocol Independent Multicast
45#options 	NETATALK	# AppleTalk networking
46#options 	PPP_BSDCOMP	# BSD-Compress compression support for PPP
47#options 	PPP_DEFLATE	# Deflate compression support for PPP
48#options 	PPP_FILTER	# Active filter support for PPP (requires bpf)
49#options 	TCP_DEBUG	# Record last TCP_NDEBUG packets with SO_DEBUG
50
51# JIT compiler for bpfilter
52#options 	SLJIT
53options 	BPFJIT
54
55#options 	NFS_BOOT_BOOTP
56options 	NFS_BOOT_DHCP
57#options 	NFS_BOOT_BOOTSTATIC
58#options 	NFS_BOOTSTATIC_MYIP="\"192.168.1.4\""
59#options 	NFS_BOOTSTATIC_GWIP="\"192.168.1.1\""
60#options 	NFS_BOOTSTATIC_MASK="\"255.255.255.0\""
61#options 	NFS_BOOTSTATIC_SERVADDR="\"192.168.1.1\""
62#options 	NFS_BOOTSTATIC_SERVER="\"192.168.1.1:/nfs/sdp2430\""
63
64options 	NFS_BOOT_RWSIZE=1024
65
66# Compatibility options
67
68include 	"conf/compat_netbsd60.config"
69options 	COMPAT_NETBSD32	# allow running arm (e.g. non-earm) binaries on arm
70				# or arm binaries on arm64
71
72# Shared memory options
73
74options 	SYSVMSG		# System V-like message queues
75options 	SYSVSEM		# System V-like semaphores
76#options 	SEMMNI=10	# number of semaphore identifiers
77#options 	SEMMNS=60	# number of semaphores in system
78#options 	SEMUME=10	# max number of undo entries per process
79#options 	SEMMNU=30	# number of undo structures in system
80options 	SYSVSHM		# System V-like memory sharing
81
82# Device options
83
84#options 	MEMORY_DISK_HOOKS	# boottime setup of ramdisk
85#options 	MEMORY_DISK_ROOT_SIZE=8192	# Size in blocks
86#options 	MEMORY_DISK_DYNAMIC
87#options 	MINIROOTSIZE=1000	# Size in blocks
88#options 	MEMORY_DISK_IS_ROOT	# use memory disk as root
89#options 	MEMORY_DISK_FBFLAGS=RB_SINGLE
90
91# Miscellaneous kernel options
92options 	KTRACE			# system call tracing, a la ktrace(1)
93#options 	SCSIVERBOSE		# Verbose SCSI errors
94#options 	MIIVERBOSE		# Verbose MII autoconfuration messages
95#options 	USERCONF		# userconf(4) support
96#options 	PIPE_SOCKETPAIR		# smaller, but slower pipe(2)
97
98# Wedge support
99options 	DKWEDGE_AUTODISCOVER	# Automatically add dk(4) instances
100options 	DKWEDGE_METHOD_GPT	# Supports GPT partitions as wedges
101
102# Alternate buffer queue strategies for better responsiveness under high
103# disk I/O load.
104#options 	BUFQ_READPRIO
105options 	BUFQ_PRIOCSCAN
106
107# Development and Debugging options
108
109options 	DIAGNOSTIC	# internal consistency checks
110#options 	DEBUG
111options 	KDTRACE_HOOKS	# kernel DTrace hooks
112#options 	LOCKDEBUG
113#options 	PMAP_DEBUG	# Enable pmap_debug_level code
114#options 	VERBOSE_INIT_ARM # verbose bootstraping messages
115options 	DDB		# in-kernel debugger
116options 	DDB_ONPANIC=1
117options 	DDB_HISTORY_SIZE=100	# Enable history editing in DDB
118#options 	DDB_COMMANDONENTER="bt"
119#options 	KGDB
120
121# Pseudo-Devices
122
123# crypto pseudo-devices
124pseudo-device	crypto			# /dev/crypto device
125pseudo-device	swcrypto		# software crypto implementation
126
127# disk/mass storage pseudo-devices
128#pseudo-device	md			# memory disk device (ramdisk)
129pseudo-device	vnd			# disk-like interface to files
130#pseudo-device	fss			# file system snapshot device
131pseudo-device	drvctl			# driver control
132
133# network pseudo-devices
134pseudo-device	bpfilter		# Berkeley packet filter
135pseudo-device	loop			# network loopback
136pseudo-device	bridge			# simple inter-network bridging
137pseudo-device	vlan			# IEEE 802.1q encapsulation
138pseudo-device	ppp			# Point-to-Point Protocol
139pseudo-device	pppoe			# PPP over Ethernet (RFC 2516)
140pseudo-device	tun			# network tunneling over tty
141pseudo-device	tap			# virtual Ethernet
142pseudo-device	gif			# IPv[46] over IPv[46] tunnel (RFC 1933)
143pseudo-device	ipsecif			# interface for routing-based ipsec
144pseudo-device	gre			# generic L3 over IP tunnel
145pseudo-device	npf			# NPF packet filter
146
147# miscellaneous pseudo-devices
148pseudo-device	pty			# pseudo-terminals
149#options 	RND_COM
150#pseudo-device	clockctl		# user control of clock subsystem
151pseudo-device	ksyms			# /dev/ksyms
152pseudo-device	lockstat		# lock profiling
153
154options 	FILEASSOC		# fileassoc(9) - required for Veriexec
155					# and PAX_SEGVGUARD
156
157# Veriexec
158#
159# a pseudo device needed for veriexec
160pseudo-device   veriexec
161#
162# Uncomment the fingerprint methods below that are desired. Note that
163# removing fingerprint methods will have almost no impact on the kernel
164# code size.
165#
166options VERIFIED_EXEC_FP_SHA256
167options VERIFIED_EXEC_FP_SHA384
168options VERIFIED_EXEC_FP_SHA512
169
170options 	PAX_ASLR_DEBUG=1	# PaX ASLR debug
171options 	PAX_SEGVGUARD=0		# PaX Segmentation fault guard
172options 	PAX_MPROTECT=1		# PaX mprotect(2) restrictions
173options 	PAX_MPROTECT_DEBUG=1	# PaX mprotect debug
174options 	PAX_ASLR=1		# PaX Address Space Layout Randomization
175