rc.conf revision 1.51 1 1.51 christos # $NetBSD: rc.conf,v 1.51 2003/10/20 15:02:15 christos Exp $
2 1.1 lukem #
3 1.1 lukem # /etc/defaults/rc.conf --
4 1.1 lukem # default configuration of /etc/rc.conf
5 1.1 lukem #
6 1.1 lukem # see rc.conf(5) for more information.
7 1.2 lukem #
8 1.2 lukem # DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE.
9 1.2 lukem # EDIT /etc/rc.conf INSTEAD.
10 1.1 lukem #
11 1.29 garbled # DEVELOPERS: Please edit share/sushi/system/rcconf/form when modifying this
12 1.29 garbled # file to keep it in sync.
13 1.1 lukem
14 1.1 lukem #
15 1.1 lukem # Use program=YES to enable program, NO to disable it. program_flags are
16 1.1 lukem # passed to the program on the command line.
17 1.1 lukem #
18 1.1 lukem
19 1.1 lukem # Uncomment this if you want to use local paths in rc.
20 1.1 lukem #
21 1.1 lukem #export PATH=$PATH:/usr/pkg/sbin:/usr/pkg/bin:/usr/local/sbin:/usr/local/bin
22 1.9 lukem
23 1.17 lukem # Uncomment the following to execute each /etc/rc.d script in
24 1.17 lukem # the current shell rather than in a subshell. This may be
25 1.17 lukem # faster on very slow machines that have an expensive fork(2).
26 1.9 lukem # NOTE: USE THIS AT YOUR OWN RISK; A ROGUE COMMAND
27 1.9 lukem # MAY INADVERTENTLY PREVENT BOOT TO MULTIUSER.
28 1.9 lukem #
29 1.9 lukem #rc_fast_and_loose=YES
30 1.1 lukem
31 1.37 lukem # Additional flags to the rcorder(8) that's run by /etc/rc.
32 1.37 lukem #
33 1.37 lukem rc_rcorder_flags=""
34 1.37 lukem
35 1.1 lukem # If this is set to NO, shutdown(8) will not run /etc/rc.shutdown.
36 1.1 lukem #
37 1.1 lukem do_rcshutdown=YES
38 1.37 lukem
39 1.37 lukem # Additional flags to the rcorder(8) that's run by /etc/rc.shutdown.
40 1.37 lukem #
41 1.37 lukem rcshutdown_rcorder_flags=""
42 1.17 lukem
43 1.17 lukem # If this is non-blank, use as the number of seconds to run a watchdog
44 1.17 lukem # timer which will terminate /etc/rc.shutdown if the timeout expires.
45 1.17 lukem #
46 1.17 lukem rcshutdown_timeout=""
47 1.17 lukem
48 1.1 lukem
49 1.1 lukem # Basic network configuration
50 1.1 lukem #
51 1.1 lukem
52 1.1 lukem # Fully Qualified Internet Domain Name (a.k.a. hostname, e.g. foo.baz.edu).
53 1.1 lukem # If blank, use /etc/myname.
54 1.1 lukem #
55 1.1 lukem hostname=""
56 1.1 lukem
57 1.1 lukem # If there's only one way out of your network, set this to the hostname
58 1.1 lukem # or the IP address of the router that will get your packets off the LAN.
59 1.1 lukem # If blank, use /etc/mygate.
60 1.1 lukem #
61 1.1 lukem defaultroute=""
62 1.1 lukem
63 1.1 lukem # The NIS domain name (formerly known as Yellow Pages); not in any way
64 1.1 lukem # related to Internet domain names.
65 1.1 lukem # If blank, use /etc/defaultdomain.
66 1.1 lukem #
67 1.1 lukem domainname=""
68 1.1 lukem
69 1.1 lukem # Filesystems to mount early in boot-up.
70 1.34 lukem # Note that `/var' is needed in $critical_filesystems_local (or
71 1.1 lukem # implied as part of `/') as certain services that need /var (such as
72 1.1 lukem # dhclient) may be needed to get the network operational enough to mount
73 1.34 lukem # the $critical_filesystems_remote.
74 1.1 lukem #
75 1.34 lukem critical_filesystems_local="/var"
76 1.34 lukem critical_filesystems_remote="/usr"
77 1.1 lukem
78 1.33 lukem # Swap device controls.
79 1.1 lukem #
80 1.33 lukem no_swap=NO # Set to YES if you have purposefully setup no swap
81 1.33 lukem # partitions and don't want to be warned about it.
82 1.33 lukem swapoff=NO # Remove block-type swap partitions upon shutdown
83 1.46 wiz
84 1.46 wiz # Concatenated disk driver.
85 1.46 wiz #
86 1.46 wiz ccd=YES
87 1.50 wiz
88 1.50 wiz # RAIDframe driver (manually configured devices).
89 1.50 wiz #
90 1.50 wiz raidframe=YES
91 1.45 wiz
92 1.45 wiz # Crypto file system.
93 1.45 wiz #
94 1.45 wiz cgd=YES
95 1.1 lukem
96 1.1 lukem # One-time actions and programs on boot-up.
97 1.1 lukem #
98 1.44 lukem lkm=NO # Run /etc/rc.lkm. /usr needs to be part of /, or
99 1.44 lukem # part of critical_filesystems_local.
100 1.44 lukem
101 1.1 lukem savecore=YES savecore_flags="-z"
102 1.1 lukem clear_tmp=YES # clear /tmp after reboot
103 1.1 lukem update_motd=YES # updates /etc/motd
104 1.1 lukem dmesg=YES dmesg_flags="" # write /var/run/dmesg.boot
105 1.14 jdolecek accounting=NO # uses /var/account/acct
106 1.1 lukem newsyslog=NO newsyslog_flags="" # trim log files
107 1.1 lukem
108 1.1 lukem # NOTE: default coredump name now set in /etc/sysctl.conf
109 1.51 christos
110 1.51 christos #
111 1.51 christos # File system check flags; default to preen mode, checking filesystems
112 1.51 christos # that are listed in /etc/fstab in parallel as the fsck pass number
113 1.51 christos # permits. Fix minor faults automatically, and exit with non 0 only
114 1.51 christos # when major errors occur.
115 1.51 christos #
116 1.51 christos fsck_flags=-p
117 1.1 lukem
118 1.1 lukem # Security setting. If $securelevel is non-empty, the system securelevel
119 1.1 lukem # is set to this value early in the boot sequence. Otherwise the default
120 1.1 lukem # action is taken (see init(8)).
121 1.1 lukem #
122 1.1 lukem securelevel="" # securelevel to set to
123 1.1 lukem
124 1.1 lukem # To set the IP address of an interface either use
125 1.1 lukem # ifconfig_xxN="IP-NO"
126 1.1 lukem # where xxN is the interface. If this variable is not set then
127 1.1 lukem # contents of the file /etc/ifconfig.xxN is used.
128 1.1 lukem
129 1.1 lukem # Networking startup.
130 1.1 lukem #
131 1.1 lukem ipfilter=NO # uses /etc/ipf.conf
132 1.1 lukem ipnat=NO # uses /etc/ipnat.conf
133 1.28 martti ipfs=NO ipfs_flags="" # save/load ipnat and ipf states
134 1.1 lukem ipsec=NO # uses /etc/ipsec.conf
135 1.31 lukem ipmon=NO ipmon_flags="-ns" # syslog ipfilter messages
136 1.8 thorpej racoon=NO # IKE daemon
137 1.1 lukem auto_ifconfig=YES # config all avail. interfaces
138 1.1 lukem net_interfaces="" # used only if above is NO
139 1.1 lukem flushroutes=YES # flush routes in netstart
140 1.1 lukem dhclient=NO # behave as a DHCP client
141 1.27 lukem dhclient_flags="" # blank: config all interfaces
142 1.1 lukem ntpdate=NO ntpdate_flags="-b -s" # May need '-u' thru firewall
143 1.1 lukem ppp_peers="" # /etc/ppp/peers to call
144 1.1 lukem ip6mode=host # host, autohost or router
145 1.4 itojun ip6sitelocal=NO # IPv6 sitelocal addrs
146 1.22 hubertf rtsol=NO rtsol_flags="-a" # for ip6mode=autohost only
147 1.20 martin
148 1.20 martin # Special treatment for interfaces that need to be downed on
149 1.20 martin # shutdown (because they might cause unecessary costs or block resources
150 1.20 martin # on the peer). All pppoe* interfaces are automatically included in this
151 1.20 martin # list, add others here manually.
152 1.44 lukem #force_down_interfaces=""
153 1.25 martin
154 1.25 martin ifwatchd=NO # execute up/down scripts for in-kernel PPPoE interfaces
155 1.25 martin ifwatchd_flags="-u /etc/ppp/ip-up -d /etc/ppp/ip-down pppoe0"
156 1.11 thorpej
157 1.11 thorpej # ALTQ configuration/monitoring daemon
158 1.11 thorpej altqd=NO altqd_flags=""
159 1.1 lukem
160 1.1 lukem # Daemons required by servers. These are not needed for strictly client use.
161 1.1 lukem #
162 1.1 lukem
163 1.1 lukem # inetd is used to start the IP-based services enabled in /etc/inetd.conf
164 1.1 lukem #
165 1.1 lukem inetd=YES inetd_flags="-l" # -l logs libwrap
166 1.1 lukem
167 1.1 lukem # rpcbind (formerly known as 'portmap') is used to look up RPC-based services.
168 1.1 lukem #
169 1.1 lukem rpcbind=NO rpcbind_flags="-l" # -l logs libwrap
170 1.1 lukem
171 1.1 lukem # Commonly used daemons.
172 1.1 lukem #
173 1.1 lukem syslogd=YES syslogd_flags="-s" # -s "secure" unix domain only
174 1.1 lukem cron=YES
175 1.10 lukem named=NO named_flags="" # see below for named_chrootdir
176 1.1 lukem timed=NO timed_flags=""
177 1.26 lukem ntpd=NO ntpd_flags="" # see below for ntpd_chrootdir
178 1.1 lukem postfix=NO
179 1.1 lukem lpd=NO lpd_flags="-s" # -s "secure" unix domain only
180 1.1 lukem sshd=NO sshd_flags=""
181 1.47 atatat
182 1.47 atatat # sendmail can now be run either as a suid root binary or as a sgid
183 1.47 atatat # smmsp binary. In the former case, you must not have the file
184 1.47 atatat # /etc/mail/submit.cf, otherwise sendmail will behave as if it was
185 1.47 atatat # sgid. This can result in mail not being delivered.
186 1.47 atatat #
187 1.47 atatat # For those people who wish only to send mail (locally or remotely),
188 1.47 atatat # but not receive mail (via the network) in the sgid case, you must
189 1.47 atatat # also run the sendmail daemon with one of the following two options:
190 1.47 atatat #
191 1.47 atatat # -ODaemonPortOptions=Family=inet,Addr=127.0.0.1,Name=MTA
192 1.47 atatat # -ODaemonPortOptions=Family=inet6,Addr=::1,Name=MTA6
193 1.47 atatat #
194 1.47 atatat # The smmsp process is a sendmail helper that periodically flushes the
195 1.48 atatat # "client" queue in the sgid case. If you are using sendmail as a
196 1.47 atatat # suid root program, then smmsp is not needed.
197 1.47 atatat #
198 1.47 atatat sendmail=NO sendmail_flags="-Lsm-mta -bd -q30m"
199 1.47 atatat sendmail_suidroot=NO
200 1.47 atatat smmsp=NO smmsp_flags="-Lsm-msp-queue -Ac -q30m"
201 1.47 atatat
202 1.10 lukem
203 1.10 lukem # To run the named(8) DNS server as an unprivileged user under a
204 1.10 lukem # chroot(2) cage, uncomment the following after migrating the contents
205 1.23 lukem # of /etc/namedb to /var/chroot/named/etc/namedb
206 1.10 lukem #
207 1.23 lukem #named_chrootdir="/var/chroot/named"
208 1.26 lukem
209 1.26 lukem # To run the ntpd(8) NTP server as an unprivileged user under a
210 1.39 lukem # chroot(2) cage, uncomment the following, after ensuring that:
211 1.39 lukem # - The kernel has "pseudo-device clockctl" compiled in
212 1.39 lukem # - /dev/clockctl is present
213 1.26 lukem #
214 1.26 lukem #ntpd_chrootdir="/var/chroot/ntpd"
215 1.1 lukem
216 1.1 lukem # Routing daemons.
217 1.1 lukem #
218 1.1 lukem routed=NO routed_flags="-q"
219 1.13 pk gated=NO
220 1.1 lukem mrouted=NO mrouted_flags=""
221 1.1 lukem route6d=NO route6d_flags=""
222 1.1 lukem rtsold=NO rtsold_flags="" # for ip6mode=autohost only
223 1.1 lukem
224 1.1 lukem # Daemons used to boot other hosts over a network.
225 1.1 lukem #
226 1.1 lukem rarpd=NO rarpd_flags="-a"
227 1.1 lukem bootparamd=NO bootparamd_flags=""
228 1.1 lukem dhcpd=NO dhcpd_flags="-q"
229 1.1 lukem dhcrelay=NO dhcrelay_flags=""
230 1.1 lukem rbootd=NO rbootd_flags=""
231 1.1 lukem mopd=NO mopd_flags="-a"
232 1.16 fredette ndbootd=NO ndbootd_flags="-s /tftpboot /tftpboot/bootyy"
233 1.1 lukem rtadvd=NO rtadvd_flags=""
234 1.1 lukem
235 1.1 lukem # X11 daemons.
236 1.1 lukem #
237 1.1 lukem xfs=NO xfs_flags="" # X11 font server
238 1.1 lukem xdm=NO xdm_flags="" # X11 display manager; needs
239 1.1 lukem # wscons=YES for local displays.
240 1.1 lukem
241 1.1 lukem # YP (NIS) daemons.
242 1.1 lukem #
243 1.1 lukem ypbind=NO ypbind_flags=""
244 1.1 lukem ypserv=NO ypserv_flags="-d"
245 1.1 lukem yppasswdd=NO yppasswdd_flags=""
246 1.1 lukem
247 1.1 lukem # NFS daemons and parameters.
248 1.1 lukem #
249 1.18 lukem mountd=NO mountd_flags="" # NFS mount requests daemon
250 1.1 lukem nfs_client=NO # enable client daemons
251 1.1 lukem nfs_server=NO # enable server daemons
252 1.1 lukem nfsd_flags="-6tun 4"
253 1.1 lukem lockd=NO lockd_flags=""
254 1.1 lukem statd=NO statd_flags=""
255 1.1 lukem amd=NO amd_flags="-l syslog -x error,noinfo,nostats"
256 1.1 lukem amd_dir=/amd # mount dir
257 1.1 lukem
258 1.1 lukem # Heimdal Kerberos 5 KDC (with Kerberos IV compatibility)
259 1.1 lukem kdc=NO kdc_flags=""
260 1.5 martin
261 1.5 martin # ISDN daemon
262 1.5 martin isdnd=NO isdnd_flags=""
263 1.1 lukem
264 1.1 lukem # Other daemons.
265 1.1 lukem #
266 1.1 lukem rwhod=NO
267 1.1 lukem
268 1.1 lukem # Hardware daemons.
269 1.1 lukem #
270 1.1 lukem apmd=NO apmd_flags="" # APM power management daemon.
271 1.7 minoura poffd=NO # x68k power switch monitor
272 1.7 minoura poffd_flags="'shutdown -p now'"
273 1.49 thorpej powerd=NO powerd_flags="" # power management daemon
274 1.1 lukem screenblank=NO screenblank_flags="" # wscons and FBIO screenblanker
275 1.24 augustss
276 1.24 augustss moused=NO # serial mouse handler
277 1.24 augustss moused_flags="-p /dev/tty00"
278 1.41 thorpej
279 1.41 thorpej wdogctl=NO # watchdog timer control
280 1.41 thorpej # wdogctl_flags="-k devicename"
281 1.1 lukem
282 1.1 lukem # Configuration of "wscons" console driver virtual screens.
283 1.1 lukem #
284 1.1 lukem wscons=NO wscons_flags="" # setup wscons from wscons.conf
285 1.40 christos
286 1.40 christos # Configuration of "wsmoused" console driver cut-n-paste support
287 1.40 christos #
288 1.40 christos wsmoused=NO wsmoused_flags=""
289 1.42 takemura
290 1.42 takemura # Configuration of "tpctl" touch panel calibration utility
291 1.42 takemura #
292 1.42 takemura tpctl=NO tpctl_flags=""
293 1.43 kent
294 1.43 kent # Mixer setting
295 1.43 kent #
296 1.43 kent mixerctl=NO mixerctl_mixers="" # "mixer0 mixer1" means saving
297 1.43 kent # and restoring their settings
298