rc.conf revision 1.152
1 # $NetBSD: rc.conf,v 1.152 2019/09/15 19:38:09 brad Exp $ 2 # 3 # /etc/defaults/rc.conf -- 4 # default configuration of /etc/rc.conf 5 # 6 # see rc.conf(5) for more information. 7 # 8 # DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE. 9 # EDIT /etc/rc.conf INSTEAD. 10 # 11 12 # 13 # Use program=YES to enable program, NO to disable it. program_flags are 14 # passed to the program on the command line. 15 # 16 17 # Uncomment this if you want to use local paths in rc. 18 # 19 #export PATH=$PATH:/usr/pkg/sbin:/usr/pkg/bin:/usr/local/sbin:/usr/local/bin 20 21 # Uncomment the following to execute each /etc/rc.d script in 22 # the current shell rather than in a subshell. This may be 23 # faster on very slow machines that have an expensive fork(2). 24 # NOTE: USE THIS AT YOUR OWN RISK; A ROGUE COMMAND 25 # MAY INADVERTENTLY PREVENT BOOT TO MULTIUSER. 26 # 27 #rc_fast_and_loose=YES 28 29 # If rc_silent is true then /etc/rc will suppress most output to 30 # the console. The default is taken from the AB_SILENT flag passed 31 # from the boot loader to the kernel in the boothowto(9) variable. 32 # 33 # rc_silent_cmd is executed once for each suppressed line of output. 34 # Useful values are ":" and "twiddle". 35 # 36 rc_silent=$( [ "$(( $(/sbin/sysctl -n kern.boothowto 2>/dev/null || echo 0) \ 37 & 0x40000 ))" != 0 ] && echo true || echo false ) 38 rc_silent_cmd=twiddle 39 40 # Additional flags to the rcorder(8) that's run by /etc/rc. 41 # 42 rc_rcorder_flags="" 43 44 # The directories searched for rc scripts. 45 # These directories must be part of the root file system. 46 rc_directories=/etc/rc.d 47 48 # If this is set to NO, shutdown(8) will not run /etc/rc.shutdown. 49 # 50 do_rcshutdown=YES 51 52 # Additional flags to the rcorder(8) that's run by /etc/rc.shutdown. 53 # 54 rcshutdown_rcorder_flags="" 55 56 # If this is non-blank, use as the number of seconds to run a watchdog 57 # timer which will terminate /etc/rc.shutdown if the timeout expires. 58 # 59 rcshutdown_timeout="" 60 61 62 # Basic network configuration 63 # 64 65 # Fully Qualified Internet Domain Name (a.k.a. hostname, e.g. foo.baz.edu). 66 # If blank, use /etc/myname. 67 # 68 hostname="" 69 70 # If there's only one way out of your IPv4 network, set this to the hostname 71 # or the IPv4 address of the router that will get your packets off the LAN. 72 # If blank, use /etc/mygate. 73 # 74 defaultroute="" 75 76 # Same thing for IPv6. If blank, use /etc/mygate6. 77 # 78 defaultroute6="" 79 80 # The NIS domain name (formerly known as Yellow Pages); not in any way 81 # related to Internet domain names. 82 # If blank, use /etc/defaultdomain. 83 # 84 domainname="" 85 86 # Filesystems to mount early in boot-up. 87 # Note that `/var' is needed in $critical_filesystems_local (or 88 # implied as part of `/') as certain services that need /var (such as 89 # dhcpcd) may be needed to get the network operational enough to mount 90 # the $critical_filesystems_remote. Prepending "OPTIONAL:" means it 91 # will not be an error if that file system is not present in fstab(5). 92 # 93 critical_filesystems_local="OPTIONAL:/var" 94 critical_filesystems_remote="OPTIONAL:/usr" 95 96 # Swap device controls. 97 # 98 no_swap=NO # Set to YES if you have purposefully setup no swap 99 # partitions and don't want to be warned about it. 100 swapoff=YES # Remove block-type swap partitions upon shutdown 101 # This defaults to yes, so that raids shutdown cleanly 102 swapoff_umount=auto # Set to 'manual' to umount the tmpfs partitions listed 103 # in swapoff_umount_fs before removing swap. Set to 104 # 'auto' to umount all tmpfs paritions that contain 105 # no device nodes. 106 swapoff_umount_fs= # space-separated list of tmpfs mount points to umount 107 # before removing swap if swapoff_umount=manual 108 109 # Concatenated disk driver. 110 # 111 ccd=YES 112 113 # RAIDframe driver (manually configured devices). 114 # 115 raidframe=YES 116 117 # Crypto file system. 118 # 119 cgd=YES 120 121 # Logical Volume Manager 122 # 123 lvm=NO 124 125 # One-time actions and programs on boot-up. 126 # 127 savecore=YES savecore_flags="-z" 128 savecore_dir="/var/crash" 129 resize_disklabel=NO # resize partition to fill disk 130 resize_root=NO # resize root to fill partition 131 per_user_tmp=NO # per-user /tmp directories 132 per_user_tmp_dir="/private/tmp" # real storage for /tmp 133 clear_tmp=YES # clear /tmp after reboot 134 update_motd=YES # updates /etc/motd 135 dmesg=YES dmesg_flags="-t" # write /var/run/dmesg.boot 136 accounting=NO # uses /var/account/acct 137 newsyslog=NO newsyslog_flags="" # trim log files 138 quota=YES # check and enable quotas 139 ldconfig=YES # rebuild a.out ldconfig cache 140 sysdb=YES # build system databases 141 rndctl=NO rndctl_flags="" # configure rndctl(8) 142 gpio=NO # configure GPIO devices 143 modules=YES # process /etc/modules.conf 144 145 # cope with other OSes using the real time clock at localtime on this 146 # machine (by adjusting kern.rtc_offset at boot) 147 rtclocaltime=NO 148 149 # NOTE: default coredump name now set in /etc/sysctl.conf 150 151 # 152 # File system check flags; default to preen mode, checking file systems 153 # that are listed in /etc/fstab in parallel as the fsck pass number 154 # permits. Fix minor faults automatically, and exit with non 0 only 155 # when major errors occur. 156 # 157 fsck_flags=-p 158 159 # Security setting. If $securelevel is non-empty, the system securelevel 160 # is set to this value early in the boot sequence. Otherwise the default 161 # action is taken (see init(8)). 162 # 163 securelevel="" # securelevel to set to 164 165 # To set the IP address of an interface either use 166 # ifconfig_xxN="IP-NO" 167 # where xxN is the interface. If this variable is not set then 168 # contents of the file /etc/ifconfig.xxN is used. 169 170 # Networking startup. 171 # 172 # Wait up to 15 seconds for the tentative flag to clear from all addresses. 173 # Wait up to 5 seconds for the detached flag to clear from all addresses. 174 # Addresses are detached if there is no carrier, thus we have a small 175 # wait to see if we get a carrier. 176 # Even a wired interface may not recognise it has a carrier right away. 177 ifconfig_wait_dad_flags="-w 15 -W 5" 178 179 mdnsd=NO 180 npf=NO 181 npfd=NO 182 ipfilter=NO ipfilter_flags="" # uses /etc/ipf.conf 183 ipnat=NO # uses /etc/ipnat.conf 184 ipfs=NO ipfs_flags="" # save/load ipnat and ipf states 185 ipsec=NO # uses /etc/ipsec.conf 186 ipmon=NO ipmon_flags="-Dns" # syslog ipfilter messages 187 pf=NO pf_rules="/etc/pf.conf" pf_flags="" 188 pflogd=NO 189 ftp_proxy=NO 190 racoon=NO # IKE daemon 191 auto_ifconfig=YES # config all avail. interfaces 192 net_interfaces="" # used only if above is NO 193 flushroutes=YES # flush routes in netstart 194 dhcpcd=NO dhcpcd_flags="-qM" # For ifconfig_XXX=dhcp. 195 ntpdate=NO ntpdate_flags="-b -s" # May need '-u' thru firewall 196 ppp=YES ppp_peers="" # /etc/ppp/peers to call 197 ip6mode=host # host, autohost or router 198 ip6uniquelocal=NO # IPv6 unique-local forwarding 199 200 # Special treatment for interfaces that need to be downed on 201 # shutdown (because they might cause unnecessary costs or block resources 202 # on the peer). All pppoe* interfaces are automatically included in this 203 # list, add others here manually. 204 #force_down_interfaces="" 205 206 ifwatchd=NO # execute up/down scripts for in-kernel PPPoE interfaces 207 ifwatchd_flags="-u /etc/ppp/ip-up -d /etc/ppp/ip-down pppoe0" 208 209 # ALTQ configuration/monitoring daemon 210 altqd=NO altqd_flags="" 211 212 # Daemons required by servers. These are not needed for strictly client use. 213 # 214 215 # inetd is used to start the IP-based services enabled in /etc/inetd.conf 216 # 217 inetd=YES inetd_flags="-l" # -l logs libwrap 218 219 # identd 220 # 221 identd=NO identd_flags="-b -l -u nobody" 222 223 # rpcbind (formerly known as 'portmap') is used to look up RPC-based services. 224 # 225 rpcbind=NO rpcbind_flags="-l" # -l logs libwrap 226 227 # Commonly used daemons. 228 # 229 syslogd=YES syslogd_flags="-s" # -s "secure" unix domain only 230 cron=YES 231 named=NO named_flags="" # see below for named_chrootdir 232 timed=NO timed_flags="" 233 ntpd=NO ntpd_flags="" # see below for ntpd_chrootdir 234 # The default setting for postfix here is YES, but gets re-examined by 235 # the rc.d/postfix startup script when it runs. The script sets 236 # _rc_d_postfix to "check", and then causes all rc.conf settings to 237 # be re-evaluated. If the value of $postfix after this is "check", 238 # the script then checks to see if /etc/mailer.conf selects the system 239 # postfix. If not, it does print a warning and does not start postfix 240 # to avoid conflict with a different MTA. 241 postfix=${_rc_d_postfix:-YES} 242 lpd=NO lpd_flags="-s" # -s "secure" unix domain only 243 sshd=NO sshd_flags="" 244 ssh_keygen_flags="" 245 ftpd=NO ftpd_flags="-ll" 246 httpd=NO httpd_flags="" 247 httpd_wwwdir="/var/www" 248 httpd_wwwuser="_httpd" 249 250 # To run the named(8) DNS server as an unprivileged user under a 251 # chroot(2) cage, uncomment the following after migrating the contents 252 # of /etc/namedb to /var/chroot/named/etc/namedb 253 # 254 #named_chrootdir="/var/chroot/named" 255 256 # To run the ntpd(8) NTP server as an unprivileged user under a 257 # chroot(2) cage, uncomment the following, after ensuring that: 258 # - The kernel has "pseudo-device clockctl" compiled in 259 # - /dev/clockctl is present 260 # 261 #ntpd_chrootdir="/var/chroot/ntpd" 262 263 # Routing daemons. 264 # 265 routed=NO routed_flags="-q" 266 gated=NO 267 mrouted=NO mrouted_flags="" 268 route6d=NO route6d_flags="" 269 ldpd=NO 270 271 # Daemons used to boot other hosts over a network. 272 # 273 rarpd=NO rarpd_flags="-a" 274 bootparamd=NO bootparamd_flags="" 275 dhcpd=NO dhcpd_flags="-q" 276 dhcpd6=NO dhcpd6_flags="-q -cf /etc/dhcpd6.conf" 277 dhcrelay=NO dhcrelay_flags="" 278 rbootd=NO rbootd_flags="" 279 mopd=NO mopd_flags="-a" 280 ndbootd=NO ndbootd_flags="-s /tftpboot /tftpboot/bootyy" 281 rtadvd=NO rtadvd_flags="" 282 isibootd=NO isibootd_flags="" 283 284 # X11 daemons. 285 # 286 xfs=NO xfs_flags="" # X11 font server 287 xdm=NO xdm_flags="" # X11 display manager; needs 288 # wscons=YES for local displays. 289 290 # Update fontconfig cache at boot 291 fccache=YES 292 293 # YP (NIS) daemons. 294 # 295 ypbind=NO ypbind_flags="" 296 ypserv=NO ypserv_flags="-d" 297 yppasswdd=NO yppasswdd_flags="" 298 299 # NFS daemons and parameters. 300 # 301 mountd=NO mountd_flags="" # NFS mount requests daemon 302 nfs_client=NO # enable client daemons 303 nfs_server=NO # enable server daemons 304 nfsd_flags="" 305 lockd=NO lockd_flags="" 306 statd=NO statd_flags="" 307 amd=NO amd_flags="-l syslog -x error,noinfo,nostats" 308 amd_dir=/amd # mount dir 309 310 # Heimdal Kerberos 5 KDC (with Kerberos IV compatibility) 311 kdc=NO kdc_flags="--detach" 312 313 # iSCSI target 314 iscsi_target=NO iscsi_target_flags="" 315 # iSCSI kernel initiator 316 iscsid=NO 317 318 # WPA daemons. 319 hostapd=NO hostapd_flags="-B /etc/hostapd.conf" 320 wpa_supplicant=NO wpa_supplicant_flags="-Ms -c /etc/wpa_supplicant.conf" 321 322 # Bluetooth configuration 323 bluetooth=NO 324 # and the following are used when bluetooth=YES 325 btconfig_devices="" # all 326 bthcid=YES bthcid_flags="" 327 sdpd=YES sdpd_flags="" 328 329 # Other daemons. 330 # 331 rwhod=NO rwhod_flags="-u _rwhod" 332 devpubd=NO devpubd_flags="" # autocreate nodes for new devs 333 envsys=NO # Set /etc/envsys.conf preferences 334 autofs=NO automount_flags="" 335 automountd_flags="" 336 autounmountd_flags="" 337 338 # Hardware daemons. 339 # 340 apmd=NO apmd_flags="" # APM power management daemon. 341 powerd=NO powerd_flags="" # power management daemon 342 screenblank=NO screenblank_flags="" # wscons and FBIO screenblanker 343 344 moused=NO # serial mouse handler 345 moused_flags="-p /dev/tty00" 346 347 wdogctl=NO # watchdog timer control 348 # wdogctl_flags="-k devicename" 349 irdaattach=NO # attach serial lines to IrDA 350 irdaattach_flags="tty00" 351 352 # Configuration of "wscons" console driver virtual screens. 353 # 354 wscons=NO wscons_flags="" # setup wscons from wscons.conf 355 356 # Configuration of "wsmoused" console driver cut-n-paste support 357 # 358 wsmoused=NO wsmoused_flags="" 359 360 # Configuration of "tpctl" touch panel calibration utility 361 # 362 tpctl=NO tpctl_flags="" 363 364 # Mixer setting 365 # 366 mixerctl=NO mixerctl_mixers="" # "mixer0 mixer1" means saving 367 # and restoring their settings 368 369 # Vi recovery notification. Vi(1)'s -r option can recover files which were 370 # accidentally closed. See vi(1) for more details. 371 # 372 virecover=YES 373 374 # Veriexec signature loading. 375 # 376 veriexec=NO 377 veriexec_strict=0 378 veriexec_verbose=0 379 veriexec_flags="-k" 380 381 # Entropy load/save to/from /dev/random at startup/shutdown 382 # 383 random_seed=YES 384 385 # Creating / updating of man page index on boot 386 makemandb=YES 387 388 # Disable Simultaneous Multi-Threading 389 smtoff=NO 390 391 # blacklist daemon, needs npf 392 blacklistd=NO 393 394 # IPv6 address selection policy 395 ip6addrctl=NO 396 # ipv6_prefer, ipv4_prefer, auto 397 ip6addrctl_policy=auto 398 ip6addrctl_verbose=NO 399 400 # Unbound 401 unbound=NO 402 unbound_chrootdir=/var/chroot/unbound 403 404 # Nsd 405 nsd=NO 406 nsd_chrootdir=/var/chroot/nsd 407 nsd_flags="-t ${nsd_chrootdir}" 408 409 # ZFS 410 zfs=NO 411
Indexes created Tue Oct 14 01:09:49 GMT 2025