all: fix "Invalid internal option" warning from make

Remove MKCRYPTO option.

Originally, MKCRYPTO was introduced because the United States
classified cryptography as a munition and restricted its export. The
export controls were substantially relaxed fifteen years ago, and are
essentially irrelevant for software with published source code.

In the intervening time, nobody bothered to remove the option after
its motivation -- the US export restriction -- was eliminated. I'm
not aware of any other operating system that has a similar option; I
expect it is mainly out of apathy for churn that we still have it.
Today, cryptography is an essential part of modern computing -- you
can't use the internet responsibly without cryptography.

The position of the TNF board of directors is that TNF makes no
representation that MKCRYPTO=no satisfies any country's cryptography
regulations.

My personal position is that the availability of cryptography is a
basic human right; that any local laws restricting it to a privileged
few are fundamentally immoral; and that it is wrong for developers to
spend effort crippling cryptography to work around such laws.

As proposed on tech-crypto, tech-security, and tech-userlevel to no
objections:

https://mail-index.netbsd.org/tech-crypto/2017/05/06/msg000719.html
https://mail-index.netbsd.org/tech-security/2017/05/06/msg000928.html
https://mail-index.netbsd.org/tech-userlevel/2017/05/06/msg010547.html

P.S. Reviewing all the uses of MKCRYPTO in src revealed a lot of
*bad* crypto that was conditional on it, e.g. DES in telnet... That
should probably be removed too, but on the grounds that it is bad,
not on the grounds that it is (nominally) crypto.

Omit cgd based ramdisks and miniroot modules if MKCRYPTO=no

Final part of PR kern/51282

Obey MKKMOD=no.
From Rin Okuyama in PR install/50061.

This is the i386 version of the support for full-disk encryption; this commit allows building the ramdisk required as well as the associated kernel module (to be loaded in the kernel by the bootloader).

This was tested on my Lenovo ThinkPad X301 just like for the amd64 port.

XXX implement support for full-disk encryption installs in sysinst

branches: 1.9.6;
Add "live-image" and "install-image" target support to build.sh.

"live-image" target builds pre-installed disk images that can be used on
emulators or boot from USB memory sticks to try NetBSD without installation.
Currently amd64, i386, pmax, sparc, sparc64, sun2, sun3, and vax
(which have working emulators and don't require extra tools like preparing
msdosfs or partitioning MD label structures) support this target.

"install-image" target builds an bootable installation disk image that can
be used as an install CD but burned into USB memory sticks etc.
Current only amd64 and i386 (which would support USB boot) have this target.

For more details (and known issue) see following posts on netbsd-bugs@:
http://mail-index.NetBSD.org/netbsd-bugs/2011/08/06/msg023639.html
http://mail-index.NetBSD.org/netbsd-bugs/2011/09/23/msg024207.html
http://mail-index.NetBSD.org/netbsd-bugs/2011/12/07/msg025166.html
http://mail-index.NetBSD.org/netbsd-bugs/2011/12/08/msg025178.html

No particular comments about implementation, and
"go ahead" comments from mrg@, riz@ and christos@.

Closes PR toolchain/45153 and PR misc/45155.

branches: 1.8.8;
Resurrect miniroot.kmod for bespoke installs.

Switch the i386 installation CDs away from RAM disks and instead use the
CD-ROM as the root file system. It contains a limited subset of $DESTDIR
along with sysinst. This will help to massively reduce the amount of memory
needed to install from CD or netboot, and allow us to continue using the
generic kernel on the CDs.

Put the GENERIC kernel onto i386 installation CDs and load a kernel module
from the boot loader to provide the miniroot.

branches: 1.5.12; 1.5.14;
Use the new common/Makefile.bootcd to make i386 and amd64 bootable ISO
images. amd64 gets a single kernel; i386 images gets 3 kernels:
- netbsd, copy from netbsd-INSTALL_LARGE.gz, loaded by default
- nbsd-l, copy from netbsd-INSTALL_LAPTOP.gz
- nbsd-i, copy from netbsd-INSTALL.gz for those who want the traditionnal
non-ACPI kernel
- drop the bootcd-laptop image
both gets an installcd image, which is the same as bootcd but with the
binary sets in addition to kernels.

branches: 1.4.4;
Add & enable boot-CDs (with ramdisk kernels only, no install sets),
built as part of a regular release. For more information, see
http://mail-index.netbsd.org/tech-install/2006/05/11/0001.html

OK: core@

Prepare creation of boot CDs:

* Move files in distrib/i386:

floppies/instkernel/Makefile -> instkernel/Makefile
floppies/ramdisk-big/Makefile -> ramdisks/ramdisk-big/Makefile
floppies/ramdisk-big/disktab.preinstall -> ramdisks/ramdisk-big/disktab.preinstall
floppies/ramdisk-big/list -> ramdisks/ramdisk-big/list
floppies/ramdisk-big/list.inet6 -> ramdisks/ramdisk-big/list.inet6
floppies/ramdisk-rescuetiny/Makefile -> ramdisks/ramdisk-rescuetiny/Makefile
floppies/ramdisk-rescuetiny/list -> ramdisks/ramdisk-rescuetiny/list
floppies/ramdisk-small/Makefile -> ramdisks/ramdisk-small/Makefile
floppies/ramdisk-small/list -> ramdisks/ramdisk-small/list
floppies/ramdisk-tiny/Makefile -> ramdisks/ramdisk-tiny/Makefile
floppies/ramdisk-tiny/list -> ramdisks/ramdisk-tiny/list
floppies/common/Makefile.ramdisk -> ramdisks/common/Makefile.ramdisk
floppies/common/dot.profile -> ramdisks/common/dot.profile
floppies/common/list.ramdisk -> ramdisks/common/list.ramdisk
floppies/common/termcap.mini -> ramdisks/common/termcap.mini

* Adjust paths

yet another distrib overhaul:
- move guts of distrib/Makefile.inc to distrib/common/Makefile.distrib
(fixes problem caused by implicit include of ../Makefile.inc in certain
submake conditions triggered by makefiles not yet in tree)
- removed mkdir of ${RELEASEDIR}/*; rely upon "snap_pre" target of
etc/Makefile to create all the release directories
- renamed RELINSTALL to RELEASE_INSTALL
- renamed FLOPPYINSTDIR to FLOPPY_RELEASEDIR
- renamed MDSETDIR to MDSET_RELEASEDIR
- removed ITARGET
- move release target from top level to appropriate subdirectory
- ensure release target has correct depends
- replace miniroot's IMAGE_MD_POST with common/Makefile.image IMAGEPOSTBUILD
- Makefile.image: add realall: ${IMAGE}

branches: 1.1.6;
Provide a Makefile here so that the previous level will traverse down.