rc.conf revision 1.139
1 # $NetBSD: rc.conf,v 1.139 2017/01/07 20:00:33 christos Exp $ 2 # 3 # /etc/defaults/rc.conf -- 4 # default configuration of /etc/rc.conf 5 # 6 # see rc.conf(5) for more information. 7 # 8 # DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE. 9 # EDIT /etc/rc.conf INSTEAD. 10 # 11 12 # 13 # Use program=YES to enable program, NO to disable it. program_flags are 14 # passed to the program on the command line. 15 # 16 17 # Uncomment this if you want to use local paths in rc. 18 # 19 #export PATH=$PATH:/usr/pkg/sbin:/usr/pkg/bin:/usr/local/sbin:/usr/local/bin 20 21 # Uncomment the following to execute each /etc/rc.d script in 22 # the current shell rather than in a subshell. This may be 23 # faster on very slow machines that have an expensive fork(2). 24 # NOTE: USE THIS AT YOUR OWN RISK; A ROGUE COMMAND 25 # MAY INADVERTENTLY PREVENT BOOT TO MULTIUSER. 26 # 27 #rc_fast_and_loose=YES 28 29 # If rc_silent is true then /etc/rc will suppress most output to 30 # the console. The default is taken from the AB_SILENT flag passed 31 # from the boot loader to the kernel in the boothowto(9) variable. 32 # 33 # rc_silent_cmd is executed once for each suppressed line of output. 34 # Useful values are ":" and "twiddle". 35 # 36 rc_silent=$( [ "$(( $(/sbin/sysctl -n kern.boothowto 2>/dev/null || echo 0) \ 37 & 0x40000 ))" != 0 ] && echo true || echo false ) 38 rc_silent_cmd=twiddle 39 40 # Additional flags to the rcorder(8) that's run by /etc/rc. 41 # 42 rc_rcorder_flags="" 43 44 # The directories searched for rc scripts. 45 # These directories must be part of the root file system. 46 rc_directories=/etc/rc.d 47 48 # If this is set to NO, shutdown(8) will not run /etc/rc.shutdown. 49 # 50 do_rcshutdown=YES 51 52 # Additional flags to the rcorder(8) that's run by /etc/rc.shutdown. 53 # 54 rcshutdown_rcorder_flags="" 55 56 # If this is non-blank, use as the number of seconds to run a watchdog 57 # timer which will terminate /etc/rc.shutdown if the timeout expires. 58 # 59 rcshutdown_timeout="" 60 61 62 # Basic network configuration 63 # 64 65 # Fully Qualified Internet Domain Name (a.k.a. hostname, e.g. foo.baz.edu). 66 # If blank, use /etc/myname. 67 # 68 hostname="" 69 70 # If there's only one way out of your IPv4 network, set this to the hostname 71 # or the IPv4 address of the router that will get your packets off the LAN. 72 # If blank, use /etc/mygate. 73 # 74 defaultroute="" 75 76 # Same thing for IPv6. If blank, use /etc/mygate6. 77 # 78 defaultroute6="" 79 80 # The NIS domain name (formerly known as Yellow Pages); not in any way 81 # related to Internet domain names. 82 # If blank, use /etc/defaultdomain. 83 # 84 domainname="" 85 86 # Filesystems to mount early in boot-up. 87 # Note that `/var' is needed in $critical_filesystems_local (or 88 # implied as part of `/') as certain services that need /var (such as 89 # dhclient) may be needed to get the network operational enough to mount 90 # the $critical_filesystems_remote. Prepending "OPTIONAL:" means it 91 # will not be an error if that file system is not present in fstab(5). 92 # 93 critical_filesystems_local="OPTIONAL:/var" 94 critical_filesystems_remote="OPTIONAL:/usr" 95 96 # Swap device controls. 97 # 98 no_swap=NO # Set to YES if you have purposefully setup no swap 99 # partitions and don't want to be warned about it. 100 swapoff=YES # Remove block-type swap partitions upon shutdown 101 # This defaults to yes, so that raids shutdown cleanly 102 103 # Concatenated disk driver. 104 # 105 ccd=YES 106 107 # RAIDframe driver (manually configured devices). 108 # 109 raidframe=YES 110 111 # Crypto file system. 112 # 113 cgd=YES 114 115 # Logical Volume Manager 116 # 117 lvm=NO 118 119 # One-time actions and programs on boot-up. 120 # 121 savecore=YES savecore_flags="-z" 122 savecore_dir="/var/crash" 123 resize_root=NO # resize root to fill partition 124 per_user_tmp=NO # per-user /tmp directories 125 per_user_tmp_dir="/private/tmp" # real storage for /tmp 126 clear_tmp=YES # clear /tmp after reboot 127 update_motd=YES # updates /etc/motd 128 dmesg=YES dmesg_flags="" # write /var/run/dmesg.boot 129 accounting=NO # uses /var/account/acct 130 newsyslog=NO newsyslog_flags="" # trim log files 131 quota=YES # check and enable quotas 132 ldconfig=YES # rebuild a.out ldconfig cache 133 sysdb=YES # build system databases 134 rndctl=NO rndctl_flags="" # configure rndctl(8) 135 gpio=NO # configure GPIO devices 136 modules=YES # process /etc/modules.conf 137 138 # cope with other OSes using the real time clock at localtime on this 139 # machine (by adjusting kern.rtc_offset at boot) 140 rtclocaltime=NO 141 142 # NOTE: default coredump name now set in /etc/sysctl.conf 143 144 # 145 # File system check flags; default to preen mode, checking file systems 146 # that are listed in /etc/fstab in parallel as the fsck pass number 147 # permits. Fix minor faults automatically, and exit with non 0 only 148 # when major errors occur. 149 # 150 fsck_flags=-p 151 152 # Security setting. If $securelevel is non-empty, the system securelevel 153 # is set to this value early in the boot sequence. Otherwise the default 154 # action is taken (see init(8)). 155 # 156 securelevel="" # securelevel to set to 157 158 # To set the IP address of an interface either use 159 # ifconfig_xxN="IP-NO" 160 # where xxN is the interface. If this variable is not set then 161 # contents of the file /etc/ifconfig.xxN is used. 162 163 # Networking startup. 164 # 165 # Wait up to 15 seconds for the tentative flag to clear from all addresses. 166 # Wait up to 5 seconds for the detached flag to clear from all addresses. 167 # Addresses are detached if there is no carrier, thus we have a small 168 # wait to see if we get a carrier. 169 # Even a wired interface may not recognise it has a carrier right away. 170 ifconfig_wait_dad_flags="-w 15 -W 5" 171 172 mdnsd=NO 173 npf=NO 174 npfd=NO 175 ipfilter=NO ipfilter_flags="" # uses /etc/ipf.conf 176 ipnat=NO # uses /etc/ipnat.conf 177 ipfs=NO ipfs_flags="" # save/load ipnat and ipf states 178 ipsec=NO # uses /etc/ipsec.conf 179 ipmon=NO ipmon_flags="-Dns" # syslog ipfilter messages 180 pf=NO pf_rules="/etc/pf.conf" pf_flags="" 181 pflogd=NO 182 ftp_proxy=NO 183 racoon=NO # IKE daemon 184 auto_ifconfig=YES # config all avail. interfaces 185 net_interfaces="" # used only if above is NO 186 flushroutes=YES # flush routes in netstart 187 dhcpcd=NO 188 dhcpcd_flags="-qM" # For ifconfig_XXX=dhcp. 189 dhclient=NO # behave as a DHCP client 190 dhclient_flags="" # blank: config all interfaces 191 ntpdate=NO ntpdate_flags="-b -s" # May need '-u' thru firewall 192 ppp=YES ppp_peers="" # /etc/ppp/peers to call 193 ip6mode=host # host, autohost or router 194 ip6uniquelocal=NO # IPv6 unique-local forwarding 195 196 # Special treatment for interfaces that need to be downed on 197 # shutdown (because they might cause unnecessary costs or block resources 198 # on the peer). All pppoe* interfaces are automatically included in this 199 # list, add others here manually. 200 #force_down_interfaces="" 201 202 ifwatchd=NO # execute up/down scripts for in-kernel PPPoE interfaces 203 ifwatchd_flags="-u /etc/ppp/ip-up -d /etc/ppp/ip-down pppoe0" 204 205 # ALTQ configuration/monitoring daemon 206 altqd=NO altqd_flags="" 207 208 # Daemons required by servers. These are not needed for strictly client use. 209 # 210 211 # inetd is used to start the IP-based services enabled in /etc/inetd.conf 212 # 213 inetd=YES inetd_flags="-l" # -l logs libwrap 214 215 # identd 216 # 217 identd=NO identd_flags="-b -l -u nobody" 218 219 # rpcbind (formerly known as 'portmap') is used to look up RPC-based services. 220 # 221 rpcbind=NO rpcbind_flags="-l" # -l logs libwrap 222 223 # Commonly used daemons. 224 # 225 syslogd=YES syslogd_flags="-s" # -s "secure" unix domain only 226 cron=YES 227 named=NO named_flags="" # see below for named_chrootdir 228 timed=NO timed_flags="" 229 ntpd=NO ntpd_flags="" # see below for ntpd_chrootdir 230 # The default setting for postfix here is YES, but gets re-examined by 231 # the rc.d/postfix startup script when it runs. The script sets 232 # _rc_d_postfix to "check", and then causes all rc.conf settings to 233 # be re-evaluated. If the value of $postfix after this is "check", 234 # the script then checks to see if /etc/mailer.conf selects the system 235 # postfix. If not, it does print a warning and does not start postfix 236 # to avoid conflict with a different MTA. 237 postfix=${_rc_d_postfix:-YES} 238 lpd=NO lpd_flags="-s" # -s "secure" unix domain only 239 sshd=NO sshd_flags="" 240 ssh_keygen_flags="" 241 ftpd=NO ftpd_flags="-ll" 242 httpd=NO httpd_flags="" 243 httpd_wwwdir="/var/www" 244 httpd_wwwuser="_httpd" 245 246 # To run the named(8) DNS server as an unprivileged user under a 247 # chroot(2) cage, uncomment the following after migrating the contents 248 # of /etc/namedb to /var/chroot/named/etc/namedb 249 # 250 #named_chrootdir="/var/chroot/named" 251 252 # To run the ntpd(8) NTP server as an unprivileged user under a 253 # chroot(2) cage, uncomment the following, after ensuring that: 254 # - The kernel has "pseudo-device clockctl" compiled in 255 # - /dev/clockctl is present 256 # 257 #ntpd_chrootdir="/var/chroot/ntpd" 258 259 # Routing daemons. 260 # 261 routed=NO routed_flags="-q" 262 gated=NO 263 mrouted=NO mrouted_flags="" 264 route6d=NO route6d_flags="" 265 ldpd=NO 266 267 # Daemons used to boot other hosts over a network. 268 # 269 rarpd=NO rarpd_flags="-a" 270 bootparamd=NO bootparamd_flags="" 271 dhcpd=NO dhcpd_flags="-q" 272 dhcrelay=NO dhcrelay_flags="" 273 rbootd=NO rbootd_flags="" 274 mopd=NO mopd_flags="-a" 275 ndbootd=NO ndbootd_flags="-s /tftpboot /tftpboot/bootyy" 276 rtadvd=NO rtadvd_flags="" 277 isibootd=NO isibootd_flags="" 278 279 # X11 daemons. 280 # 281 xfs=NO xfs_flags="" # X11 font server 282 xdm=NO xdm_flags="" # X11 display manager; needs 283 # wscons=YES for local displays. 284 285 # Update fontconfig cache at boot 286 fccache=YES 287 288 # YP (NIS) daemons. 289 # 290 ypbind=NO ypbind_flags="" 291 ypserv=NO ypserv_flags="-d" 292 yppasswdd=NO yppasswdd_flags="" 293 294 # NFS daemons and parameters. 295 # 296 mountd=NO mountd_flags="" # NFS mount requests daemon 297 nfs_client=NO # enable client daemons 298 nfs_server=NO # enable server daemons 299 nfsd_flags="" 300 lockd=NO lockd_flags="" 301 statd=NO statd_flags="" 302 amd=NO amd_flags="-l syslog -x error,noinfo,nostats" 303 amd_dir=/amd # mount dir 304 305 # Heimdal Kerberos 5 KDC (with Kerberos IV compatibility) 306 kdc=NO kdc_flags="--detach" 307 308 # iSCSI target 309 iscsi_target=NO iscsi_target_flags="" 310 # iSCSI kernel initiator 311 iscsid=NO 312 313 # WPA daemons. 314 hostapd=NO hostapd_flags="-B /etc/hostapd.conf" 315 wpa_supplicant=NO wpa_supplicant_flags="" # -i<if> -c<file> 316 317 # ISDN daemon 318 isdnd=NO isdnd_flags="" 319 320 # Bluetooth configuration 321 bluetooth=NO 322 # and the following are used when bluetooth=YES 323 btconfig_devices="" # all 324 bthcid=YES bthcid_flags="" 325 sdpd=YES sdpd_flags="" 326 327 # Other daemons. 328 # 329 rwhod=NO rwhod_flags="-u _rwhod" 330 devpubd=NO devpubd_flags="" # autocreate nodes for new devs 331 envsys=NO # Set /etc/envsys.conf preferences 332 333 # Hardware daemons. 334 # 335 apmd=NO apmd_flags="" # APM power management daemon. 336 powerd=NO powerd_flags="" # power management daemon 337 screenblank=NO screenblank_flags="" # wscons and FBIO screenblanker 338 339 moused=NO # serial mouse handler 340 moused_flags="-p /dev/tty00" 341 342 wdogctl=NO # watchdog timer control 343 # wdogctl_flags="-k devicename" 344 irdaattach=NO # attach serial lines to IrDA 345 irdaattach_flags="tty00" 346 347 # Configuration of "wscons" console driver virtual screens. 348 # 349 wscons=NO wscons_flags="" # setup wscons from wscons.conf 350 351 # Configuration of "wsmoused" console driver cut-n-paste support 352 # 353 wsmoused=NO wsmoused_flags="" 354 355 # Configuration of "tpctl" touch panel calibration utility 356 # 357 tpctl=NO tpctl_flags="" 358 359 # Mixer setting 360 # 361 mixerctl=NO mixerctl_mixers="" # "mixer0 mixer1" means saving 362 # and restoring their settings 363 364 # Vi recovery notification. Vi(1)'s -r option can recover files which were 365 # accidentally closed. See vi(1) for more details. 366 # 367 virecover=YES 368 369 # Veriexec signature loading. 370 # 371 veriexec=NO 372 veriexec_strict=0 373 veriexec_verbose=0 374 veriexec_flags="-k" 375 376 # Entropy load/save to/from /dev/random at startup/shutdown 377 # 378 random_seed=YES 379 380 # Creating / updating of man page index on boot 381 makemandb=YES 382 383 # blacklist daemon, needs npf 384 blacklistd=NO 385 386 # IPv6 address selection policy 387 ip6addrctl=NO 388 # ipv6_prefer, ipv4_prefer, auto 389 ip6addrctl_policy=auto 390 ip6addrctl_verbose=NO 391 392 # Unbound 393 unbound=NO 394 unbound_chrootdir=/var/chroot/unbound 395 396 # Nsd 397 nsd=NO 398 nsd_chrootdir=/var/chroot/nsd 399 nsd_flags="-t ${nsd_chrootdir}" 400
Indexes created Fri Oct 03 02:09:57 GMT 2025