rc.conf revision 1.143
1 # $NetBSD: rc.conf,v 1.143 2018/05/25 20:48:54 uwe Exp $ 2 # 3 # /etc/defaults/rc.conf -- 4 # default configuration of /etc/rc.conf 5 # 6 # see rc.conf(5) for more information. 7 # 8 # DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE. 9 # EDIT /etc/rc.conf INSTEAD. 10 # 11 12 # 13 # Use program=YES to enable program, NO to disable it. program_flags are 14 # passed to the program on the command line. 15 # 16 17 # Uncomment this if you want to use local paths in rc. 18 # 19 #export PATH=$PATH:/usr/pkg/sbin:/usr/pkg/bin:/usr/local/sbin:/usr/local/bin 20 21 # Uncomment the following to execute each /etc/rc.d script in 22 # the current shell rather than in a subshell. This may be 23 # faster on very slow machines that have an expensive fork(2). 24 # NOTE: USE THIS AT YOUR OWN RISK; A ROGUE COMMAND 25 # MAY INADVERTENTLY PREVENT BOOT TO MULTIUSER. 26 # 27 #rc_fast_and_loose=YES 28 29 # If rc_silent is true then /etc/rc will suppress most output to 30 # the console. The default is taken from the AB_SILENT flag passed 31 # from the boot loader to the kernel in the boothowto(9) variable. 32 # 33 # rc_silent_cmd is executed once for each suppressed line of output. 34 # Useful values are ":" and "twiddle". 35 # 36 rc_silent=$( [ "$(( $(/sbin/sysctl -n kern.boothowto 2>/dev/null || echo 0) \ 37 & 0x40000 ))" != 0 ] && echo true || echo false ) 38 rc_silent_cmd=twiddle 39 40 # Additional flags to the rcorder(8) that's run by /etc/rc. 41 # 42 rc_rcorder_flags="" 43 44 # The directories searched for rc scripts. 45 # These directories must be part of the root file system. 46 rc_directories=/etc/rc.d 47 48 # If this is set to NO, shutdown(8) will not run /etc/rc.shutdown. 49 # 50 do_rcshutdown=YES 51 52 # Additional flags to the rcorder(8) that's run by /etc/rc.shutdown. 53 # 54 rcshutdown_rcorder_flags="" 55 56 # If this is non-blank, use as the number of seconds to run a watchdog 57 # timer which will terminate /etc/rc.shutdown if the timeout expires. 58 # 59 rcshutdown_timeout="" 60 61 62 # Basic network configuration 63 # 64 65 # Fully Qualified Internet Domain Name (a.k.a. hostname, e.g. foo.baz.edu). 66 # If blank, use /etc/myname. 67 # 68 hostname="" 69 70 # If there's only one way out of your IPv4 network, set this to the hostname 71 # or the IPv4 address of the router that will get your packets off the LAN. 72 # If blank, use /etc/mygate. 73 # 74 defaultroute="" 75 76 # Same thing for IPv6. If blank, use /etc/mygate6. 77 # 78 defaultroute6="" 79 80 # The NIS domain name (formerly known as Yellow Pages); not in any way 81 # related to Internet domain names. 82 # If blank, use /etc/defaultdomain. 83 # 84 domainname="" 85 86 # Filesystems to mount early in boot-up. 87 # Note that `/var' is needed in $critical_filesystems_local (or 88 # implied as part of `/') as certain services that need /var (such as 89 # dhclient) may be needed to get the network operational enough to mount 90 # the $critical_filesystems_remote. Prepending "OPTIONAL:" means it 91 # will not be an error if that file system is not present in fstab(5). 92 # 93 critical_filesystems_local="OPTIONAL:/var" 94 critical_filesystems_remote="OPTIONAL:/usr" 95 96 # Swap device controls. 97 # 98 no_swap=NO # Set to YES if you have purposefully setup no swap 99 # partitions and don't want to be warned about it. 100 swapoff=YES # Remove block-type swap partitions upon shutdown 101 # This defaults to yes, so that raids shutdown cleanly 102 103 # Concatenated disk driver. 104 # 105 ccd=YES 106 107 # RAIDframe driver (manually configured devices). 108 # 109 raidframe=YES 110 111 # Crypto file system. 112 # 113 cgd=YES 114 115 # Logical Volume Manager 116 # 117 lvm=NO 118 119 # One-time actions and programs on boot-up. 120 # 121 savecore=YES savecore_flags="-z" 122 savecore_dir="/var/crash" 123 resize_disklabel=NO # resize partion to fill disk 124 resize_root=NO # resize root to fill partition 125 per_user_tmp=NO # per-user /tmp directories 126 per_user_tmp_dir="/private/tmp" # real storage for /tmp 127 clear_tmp=YES # clear /tmp after reboot 128 update_motd=YES # updates /etc/motd 129 dmesg=YES dmesg_flags="-t" # write /var/run/dmesg.boot 130 accounting=NO # uses /var/account/acct 131 newsyslog=NO newsyslog_flags="" # trim log files 132 quota=YES # check and enable quotas 133 ldconfig=YES # rebuild a.out ldconfig cache 134 sysdb=YES # build system databases 135 rndctl=NO rndctl_flags="" # configure rndctl(8) 136 gpio=NO # configure GPIO devices 137 modules=YES # process /etc/modules.conf 138 139 # cope with other OSes using the real time clock at localtime on this 140 # machine (by adjusting kern.rtc_offset at boot) 141 rtclocaltime=NO 142 143 # NOTE: default coredump name now set in /etc/sysctl.conf 144 145 # 146 # File system check flags; default to preen mode, checking file systems 147 # that are listed in /etc/fstab in parallel as the fsck pass number 148 # permits. Fix minor faults automatically, and exit with non 0 only 149 # when major errors occur. 150 # 151 fsck_flags=-p 152 153 # Security setting. If $securelevel is non-empty, the system securelevel 154 # is set to this value early in the boot sequence. Otherwise the default 155 # action is taken (see init(8)). 156 # 157 securelevel="" # securelevel to set to 158 159 # To set the IP address of an interface either use 160 # ifconfig_xxN="IP-NO" 161 # where xxN is the interface. If this variable is not set then 162 # contents of the file /etc/ifconfig.xxN is used. 163 164 # Networking startup. 165 # 166 # Wait up to 15 seconds for the tentative flag to clear from all addresses. 167 # Wait up to 5 seconds for the detached flag to clear from all addresses. 168 # Addresses are detached if there is no carrier, thus we have a small 169 # wait to see if we get a carrier. 170 # Even a wired interface may not recognise it has a carrier right away. 171 ifconfig_wait_dad_flags="-w 15 -W 5" 172 173 mdnsd=NO 174 npf=NO 175 npfd=NO 176 ipfilter=NO ipfilter_flags="" # uses /etc/ipf.conf 177 ipnat=NO # uses /etc/ipnat.conf 178 ipfs=NO ipfs_flags="" # save/load ipnat and ipf states 179 ipsec=NO # uses /etc/ipsec.conf 180 ipmon=NO ipmon_flags="-Dns" # syslog ipfilter messages 181 pf=NO pf_rules="/etc/pf.conf" pf_flags="" 182 pflogd=NO 183 ftp_proxy=NO 184 racoon=NO # IKE daemon 185 auto_ifconfig=YES # config all avail. interfaces 186 net_interfaces="" # used only if above is NO 187 flushroutes=YES # flush routes in netstart 188 dhcpcd=NO 189 dhcpcd_flags="-qM" # For ifconfig_XXX=dhcp. 190 dhclient=NO # behave as a DHCP client 191 dhclient_flags="" # blank: config all interfaces 192 ntpdate=NO ntpdate_flags="-b -s" # May need '-u' thru firewall 193 ppp=YES ppp_peers="" # /etc/ppp/peers to call 194 ip6mode=host # host, autohost or router 195 ip6uniquelocal=NO # IPv6 unique-local forwarding 196 197 # Special treatment for interfaces that need to be downed on 198 # shutdown (because they might cause unnecessary costs or block resources 199 # on the peer). All pppoe* interfaces are automatically included in this 200 # list, add others here manually. 201 #force_down_interfaces="" 202 203 ifwatchd=NO # execute up/down scripts for in-kernel PPPoE interfaces 204 ifwatchd_flags="-u /etc/ppp/ip-up -d /etc/ppp/ip-down pppoe0" 205 206 # ALTQ configuration/monitoring daemon 207 altqd=NO altqd_flags="" 208 209 # Daemons required by servers. These are not needed for strictly client use. 210 # 211 212 # inetd is used to start the IP-based services enabled in /etc/inetd.conf 213 # 214 inetd=YES inetd_flags="-l" # -l logs libwrap 215 216 # identd 217 # 218 identd=NO identd_flags="-b -l -u nobody" 219 220 # rpcbind (formerly known as 'portmap') is used to look up RPC-based services. 221 # 222 rpcbind=NO rpcbind_flags="-l" # -l logs libwrap 223 224 # Commonly used daemons. 225 # 226 syslogd=YES syslogd_flags="-s" # -s "secure" unix domain only 227 cron=YES 228 named=NO named_flags="" # see below for named_chrootdir 229 timed=NO timed_flags="" 230 ntpd=NO ntpd_flags="" # see below for ntpd_chrootdir 231 # The default setting for postfix here is YES, but gets re-examined by 232 # the rc.d/postfix startup script when it runs. The script sets 233 # _rc_d_postfix to "check", and then causes all rc.conf settings to 234 # be re-evaluated. If the value of $postfix after this is "check", 235 # the script then checks to see if /etc/mailer.conf selects the system 236 # postfix. If not, it does print a warning and does not start postfix 237 # to avoid conflict with a different MTA. 238 postfix=${_rc_d_postfix:-YES} 239 lpd=NO lpd_flags="-s" # -s "secure" unix domain only 240 sshd=NO sshd_flags="" 241 ssh_keygen_flags="" 242 ftpd=NO ftpd_flags="-ll" 243 httpd=NO httpd_flags="" 244 httpd_wwwdir="/var/www" 245 httpd_wwwuser="_httpd" 246 247 # To run the named(8) DNS server as an unprivileged user under a 248 # chroot(2) cage, uncomment the following after migrating the contents 249 # of /etc/namedb to /var/chroot/named/etc/namedb 250 # 251 #named_chrootdir="/var/chroot/named" 252 253 # To run the ntpd(8) NTP server as an unprivileged user under a 254 # chroot(2) cage, uncomment the following, after ensuring that: 255 # - The kernel has "pseudo-device clockctl" compiled in 256 # - /dev/clockctl is present 257 # 258 #ntpd_chrootdir="/var/chroot/ntpd" 259 260 # Routing daemons. 261 # 262 routed=NO routed_flags="-q" 263 gated=NO 264 mrouted=NO mrouted_flags="" 265 route6d=NO route6d_flags="" 266 ldpd=NO 267 268 # Daemons used to boot other hosts over a network. 269 # 270 rarpd=NO rarpd_flags="-a" 271 bootparamd=NO bootparamd_flags="" 272 dhcpd=NO dhcpd_flags="-q" 273 dhcpd6=NO dhcpd6_flags="-q -cf /etc/dhcpd6.conf" 274 dhcrelay=NO dhcrelay_flags="" 275 rbootd=NO rbootd_flags="" 276 mopd=NO mopd_flags="-a" 277 ndbootd=NO ndbootd_flags="-s /tftpboot /tftpboot/bootyy" 278 rtadvd=NO rtadvd_flags="" 279 isibootd=NO isibootd_flags="" 280 281 # X11 daemons. 282 # 283 xfs=NO xfs_flags="" # X11 font server 284 xdm=NO xdm_flags="" # X11 display manager; needs 285 # wscons=YES for local displays. 286 287 # Update fontconfig cache at boot 288 fccache=YES 289 290 # YP (NIS) daemons. 291 # 292 ypbind=NO ypbind_flags="" 293 ypserv=NO ypserv_flags="-d" 294 yppasswdd=NO yppasswdd_flags="" 295 296 # NFS daemons and parameters. 297 # 298 mountd=NO mountd_flags="" # NFS mount requests daemon 299 nfs_client=NO # enable client daemons 300 nfs_server=NO # enable server daemons 301 nfsd_flags="" 302 lockd=NO lockd_flags="" 303 statd=NO statd_flags="" 304 amd=NO amd_flags="-l syslog -x error,noinfo,nostats" 305 amd_dir=/amd # mount dir 306 307 # Heimdal Kerberos 5 KDC (with Kerberos IV compatibility) 308 kdc=NO kdc_flags="--detach" 309 310 # iSCSI target 311 iscsi_target=NO iscsi_target_flags="" 312 # iSCSI kernel initiator 313 iscsid=NO 314 315 # WPA daemons. 316 hostapd=NO hostapd_flags="-B /etc/hostapd.conf" 317 wpa_supplicant=NO wpa_supplicant_flags="" # -i<if> -c<file> 318 319 # ISDN daemon 320 isdnd=NO isdnd_flags="" 321 322 # Bluetooth configuration 323 bluetooth=NO 324 # and the following are used when bluetooth=YES 325 btconfig_devices="" # all 326 bthcid=YES bthcid_flags="" 327 sdpd=YES sdpd_flags="" 328 329 # Other daemons. 330 # 331 rwhod=NO rwhod_flags="-u _rwhod" 332 devpubd=NO devpubd_flags="" # autocreate nodes for new devs 333 envsys=NO # Set /etc/envsys.conf preferences 334 autofs=NO automount_flags="" 335 automountd_flags="" 336 autounmountd_flags="" 337 338 # Hardware daemons. 339 # 340 apmd=NO apmd_flags="" # APM power management daemon. 341 powerd=NO powerd_flags="" # power management daemon 342 screenblank=NO screenblank_flags="" # wscons and FBIO screenblanker 343 344 moused=NO # serial mouse handler 345 moused_flags="-p /dev/tty00" 346 347 wdogctl=NO # watchdog timer control 348 # wdogctl_flags="-k devicename" 349 irdaattach=NO # attach serial lines to IrDA 350 irdaattach_flags="tty00" 351 352 # Configuration of "wscons" console driver virtual screens. 353 # 354 wscons=NO wscons_flags="" # setup wscons from wscons.conf 355 356 # Configuration of "wsmoused" console driver cut-n-paste support 357 # 358 wsmoused=NO wsmoused_flags="" 359 360 # Configuration of "tpctl" touch panel calibration utility 361 # 362 tpctl=NO tpctl_flags="" 363 364 # Mixer setting 365 # 366 mixerctl=NO mixerctl_mixers="" # "mixer0 mixer1" means saving 367 # and restoring their settings 368 369 # Vi recovery notification. Vi(1)'s -r option can recover files which were 370 # accidentally closed. See vi(1) for more details. 371 # 372 virecover=YES 373 374 # Veriexec signature loading. 375 # 376 veriexec=NO 377 veriexec_strict=0 378 veriexec_verbose=0 379 veriexec_flags="-k" 380 381 # Entropy load/save to/from /dev/random at startup/shutdown 382 # 383 random_seed=YES 384 385 # Creating / updating of man page index on boot 386 makemandb=YES 387 388 # blacklist daemon, needs npf 389 blacklistd=NO 390 391 # IPv6 address selection policy 392 ip6addrctl=NO 393 # ipv6_prefer, ipv4_prefer, auto 394 ip6addrctl_policy=auto 395 ip6addrctl_verbose=NO 396 397 # Unbound 398 unbound=NO 399 unbound_chrootdir=/var/chroot/unbound 400 401 # Nsd 402 nsd=NO 403 nsd_chrootdir=/var/chroot/nsd 404 nsd_flags="-t ${nsd_chrootdir}" 405
Indexes created Tue Oct 28 12:10:06 GMT 2025