rc.conf revision 1.157
1 # $NetBSD: rc.conf,v 1.157 2020/06/05 17:10:44 christos Exp $ 2 # 3 # /etc/defaults/rc.conf -- 4 # default configuration of /etc/rc.conf 5 # 6 # see rc.conf(5) for more information. 7 # 8 # DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE. 9 # EDIT /etc/rc.conf INSTEAD. 10 # 11 12 # 13 # Use program=YES to enable program, NO to disable it. program_flags are 14 # passed to the program on the command line. 15 # 16 17 # Uncomment this if you want to use local paths in rc. 18 # 19 #export PATH=$PATH:/usr/pkg/sbin:/usr/pkg/bin:/usr/local/sbin:/usr/local/bin 20 21 # Uncomment the following to execute each /etc/rc.d script in 22 # the current shell rather than in a subshell. This may be 23 # faster on very slow machines that have an expensive fork(2). 24 # NOTE: USE THIS AT YOUR OWN RISK; A ROGUE COMMAND 25 # MAY INADVERTENTLY PREVENT BOOT TO MULTIUSER. 26 # 27 #rc_fast_and_loose=YES 28 29 # If rc_silent is true then /etc/rc will suppress most output to 30 # the console. The default is taken from the AB_SILENT flag passed 31 # from the boot loader to the kernel in the boothowto(9) variable. 32 # 33 # rc_silent_cmd is executed once for each suppressed line of output. 34 # Useful values are ":" and "twiddle". 35 # 36 rc_silent=$( [ "$(( $(/sbin/sysctl -n kern.boothowto 2>/dev/null || echo 0) \ 37 & 0x40000 ))" != 0 ] && echo true || echo false ) 38 rc_silent_cmd=twiddle 39 40 # Additional flags to the rcorder(8) that's run by /etc/rc. 41 # 42 rc_rcorder_flags="" 43 44 # The directories searched for rc scripts. 45 # These directories must be part of the root file system. 46 rc_directories=/etc/rc.d 47 48 # If this is set to NO, shutdown(8) will not run /etc/rc.shutdown. 49 # 50 do_rcshutdown=YES 51 52 # Additional flags to the rcorder(8) that's run by /etc/rc.shutdown. 53 # 54 rcshutdown_rcorder_flags="" 55 56 # If this is non-blank, use as the number of seconds to run a watchdog 57 # timer which will terminate /etc/rc.shutdown if the timeout expires. 58 # 59 rcshutdown_timeout="" 60 61 62 # Basic network configuration 63 # 64 65 # Fully Qualified Internet Domain Name (a.k.a. hostname, e.g. foo.baz.edu). 66 # If blank, use /etc/myname. 67 # 68 hostname="" 69 70 # If there's only one way out of your IPv4 network, set this to the hostname 71 # or the IPv4 address of the router that will get your packets off the LAN. 72 # If blank, use /etc/mygate. 73 # 74 defaultroute="" 75 76 # Same thing for IPv6. If blank, use /etc/mygate6. 77 # 78 defaultroute6="" 79 80 # The NIS domain name (formerly known as Yellow Pages); not in any way 81 # related to Internet domain names. 82 # If blank, use /etc/defaultdomain. 83 # 84 domainname="" 85 86 # Filesystems to mount early in boot-up. 87 # Note that `/var' is needed in $critical_filesystems_local (or 88 # implied as part of `/') as certain services that need /var (such as 89 # dhcpcd) may be needed to get the network operational enough to mount 90 # the $critical_filesystems_remote. Prepending "OPTIONAL:" means it 91 # will not be an error if that file system is not present in fstab(5). 92 # 93 critical_filesystems_local="OPTIONAL:/var" 94 critical_filesystems_remote="OPTIONAL:/usr" 95 96 # Swap device controls. 97 # 98 no_swap=NO # Set to YES if you have purposefully setup no swap 99 # partitions and don't want to be warned about it. 100 swapoff=YES # Remove block-type swap partitions upon shutdown 101 # This defaults to yes, so that raids shutdown cleanly 102 swapoff_umount=auto # Set to 'manual' to umount the tmpfs partitions listed 103 # in swapoff_umount_fs before removing swap. Set to 104 # 'auto' to umount all tmpfs paritions that contain 105 # no device nodes. 106 swapoff_umount_fs= # space-separated list of tmpfs mount points to umount 107 # before removing swap if swapoff_umount=manual 108 109 # Concatenated disk driver. 110 # 111 ccd=YES 112 113 # RAIDframe driver (manually configured devices). 114 # 115 raidframe=YES 116 117 # Crypto file system. 118 # 119 cgd=YES 120 121 # Logical Volume Manager 122 # 123 lvm=NO 124 125 # One-time actions and programs on boot-up. 126 # 127 savecore=YES savecore_flags="-z" 128 savecore_dir="/var/crash" 129 resize_disklabel=NO # resize disklabel to fill disk 130 resize_gpt=NO # resize GPT to fill disk 131 resize_root=NO # resize root to fill partition 132 per_user_tmp=NO # per-user /tmp directories 133 per_user_tmp_dir="/private/tmp" # real storage for /tmp 134 clear_tmp=YES # clear /tmp after reboot 135 update_motd=YES # updates /etc/motd 136 dmesg=YES dmesg_flags="-t" # write /var/run/dmesg.boot 137 accounting=NO # uses /var/account/acct 138 newsyslog=NO newsyslog_flags="" # trim log files 139 quota=YES # check and enable quotas 140 ldconfig=YES # rebuild a.out ldconfig cache 141 sysdb=YES # build system databases 142 rndctl=NO rndctl_flags="" # configure rndctl(8) 143 gpio=NO # configure GPIO devices 144 modules=YES # process /etc/modules.conf 145 146 # cope with other OSes using the real time clock at localtime on this 147 # machine (by adjusting kern.rtc_offset at boot) 148 rtclocaltime=NO 149 150 # NOTE: default coredump name now set in /etc/sysctl.conf 151 152 # 153 # File system check flags; default to preen mode, checking file systems 154 # that are listed in /etc/fstab in parallel as the fsck pass number 155 # permits. Fix minor faults automatically, and exit with non 0 only 156 # when major errors occur. 157 # 158 fsck_flags=-p 159 160 # Security setting. If $securelevel is non-empty, the system securelevel 161 # is set to this value early in the boot sequence. Otherwise the default 162 # action is taken (see init(8)). 163 # 164 securelevel="" # securelevel to set to 165 166 # To set the IP address of an interface either use 167 # ifconfig_xxN="IP-NO" 168 # where xxN is the interface. If this variable is not set then 169 # contents of the file /etc/ifconfig.xxN is used. 170 171 # Networking startup. 172 # 173 # Wait up to 15 seconds for the tentative flag to clear from all addresses. 174 # Wait up to 5 seconds for the detached flag to clear from all addresses. 175 # Addresses are detached if there is no carrier, thus we have a small 176 # wait to see if we get a carrier. 177 # Even a wired interface may not recognise it has a carrier right away. 178 ifconfig_wait_dad_flags="-w 15 -W 5" 179 180 mdnsd=NO 181 npf=NO 182 npfd=NO npfd_flags="" 183 ipfilter=NO ipfilter_flags="" # uses /etc/ipf.conf 184 ipnat=NO # uses /etc/ipnat.conf 185 ipfs=NO ipfs_flags="" # save/load ipnat and ipf states 186 ipsec=NO # uses /etc/ipsec.conf 187 ipmon=NO ipmon_flags="-Dns" # syslog ipfilter messages 188 pf=NO pf_rules="/etc/pf.conf" pf_flags="" 189 pflogd=NO 190 ftp_proxy=NO 191 racoon=NO # IKE daemon 192 auto_ifconfig=YES # config all avail. interfaces 193 net_interfaces="" # used only if above is NO 194 flushroutes=YES # flush routes in netstart 195 dhcpcd=NO dhcpcd_flags="-qM" # For ifconfig_XXX=dhcp. 196 ntpdate=NO ntpdate_flags="-b -s" # May need '-u' thru firewall 197 ppp=YES ppp_peers="" # /etc/ppp/peers to call 198 ip6mode=host # host, autohost or router 199 ip6uniquelocal=NO # IPv6 unique-local forwarding 200 201 # Special treatment for interfaces that need to be downed on 202 # shutdown (because they might cause unnecessary costs or block resources 203 # on the peer). All pppoe* interfaces are automatically included in this 204 # list, add others here manually. 205 #force_down_interfaces="" 206 207 ifwatchd=NO # execute up/down scripts for in-kernel PPPoE interfaces 208 ifwatchd_flags="-u /etc/ppp/ip-up -d /etc/ppp/ip-down pppoe0" 209 210 # ALTQ configuration/monitoring daemon 211 altqd=NO altqd_flags="" 212 213 # Daemons required by servers. These are not needed for strictly client use. 214 # 215 216 # inetd is used to start the IP-based services enabled in /etc/inetd.conf 217 # 218 inetd=YES inetd_flags="-l" # -l logs libwrap 219 220 # identd 221 # 222 identd=NO identd_flags="-b -l -u nobody" 223 224 # rpcbind (formerly known as 'portmap') is used to look up RPC-based services. 225 # 226 rpcbind=NO rpcbind_flags="-l" # -l logs libwrap 227 228 # Commonly used daemons. 229 # 230 syslogd=YES syslogd_flags="-s" # -s "secure" unix domain only 231 cron=YES 232 named=NO named_flags="" # see below for named_chrootdir 233 timed=NO timed_flags="" 234 ntpd=NO ntpd_flags="" # see below for ntpd_chrootdir 235 # The default setting for postfix here is YES, but gets re-examined by 236 # the rc.d/postfix startup script when it runs. The script sets 237 # _rc_d_postfix to "check", and then causes all rc.conf settings to 238 # be re-evaluated. If the value of $postfix after this is "check", 239 # the script then checks to see if /etc/mailer.conf selects the system 240 # postfix. If not, it does print a warning and does not start postfix 241 # to avoid conflict with a different MTA. 242 postfix=${_rc_d_postfix:-YES} 243 lpd=NO lpd_flags="-s" # -s "secure" unix domain only 244 sshd=NO sshd_flags="" 245 ssh_keygen_flags="" 246 ftpd=NO ftpd_flags="-ll" 247 httpd=NO httpd_flags="" 248 httpd_wwwdir="/var/www" 249 httpd_wwwuser="_httpd" 250 251 # To run the named(8) DNS server as an unprivileged user under a 252 # chroot(2) cage, uncomment the following after migrating the contents 253 # of /etc/namedb to /var/chroot/named/etc/namedb 254 # 255 #named_chrootdir="/var/chroot/named" 256 257 # To run the ntpd(8) NTP server as an unprivileged user under a 258 # chroot(2) cage, uncomment the following, after ensuring that: 259 # - The kernel has "pseudo-device clockctl" compiled in 260 # - /dev/clockctl is present 261 # 262 #ntpd_chrootdir="/var/chroot/ntpd" 263 264 # Routing daemons. 265 # 266 routed=NO routed_flags="-q" 267 gated=NO 268 mrouted=NO mrouted_flags="" 269 route6d=NO route6d_flags="" 270 ldpd=NO 271 272 # Daemons used to boot other hosts over a network. 273 # 274 rarpd=NO rarpd_flags="-a" 275 bootparamd=NO bootparamd_flags="" 276 dhcpd=NO dhcpd_flags="-q" 277 dhcpd6=NO dhcpd6_flags="-q -cf /etc/dhcpd6.conf" 278 dhcrelay=NO dhcrelay_flags="" 279 rbootd=NO rbootd_flags="" 280 mopd=NO mopd_flags="-a" 281 ndbootd=NO ndbootd_flags="-s /tftpboot /tftpboot/bootyy" 282 rtadvd=NO rtadvd_flags="" 283 isibootd=NO isibootd_flags="" 284 285 # X11 daemons. 286 # 287 xfs=NO xfs_flags="" # X11 font server 288 xdm=NO xdm_flags="" # X11 display manager; needs 289 # wscons=YES for local displays. 290 291 # Update fontconfig cache at boot 292 fccache=YES 293 294 # YP (NIS) daemons. 295 # 296 ypbind=NO ypbind_flags="" 297 ypserv=NO ypserv_flags="-d" 298 yppasswdd=NO yppasswdd_flags="" 299 300 # NFS daemons and parameters. 301 # 302 mountd=NO mountd_flags="" # NFS mount requests daemon 303 nfs_client=NO # enable client daemons 304 nfs_server=NO # enable server daemons 305 nfsd_flags="" 306 lockd=NO lockd_flags="" 307 statd=NO statd_flags="" 308 amd=NO amd_flags="-l syslog -x error,noinfo,nostats" 309 amd_dir=/amd # mount dir 310 311 # Heimdal Kerberos 5 KDC (with Kerberos IV compatibility) 312 kdc=NO kdc_flags="--detach" 313 314 # iSCSI target 315 iscsi_target=NO iscsi_target_flags="" 316 # iSCSI kernel initiator 317 iscsid=NO 318 319 # WPA daemons. 320 hostapd=NO hostapd_flags="-Bs /etc/hostapd.conf" 321 wpa_supplicant=NO wpa_supplicant_flags="-Ms -c /etc/wpa_supplicant.conf" 322 323 # Bluetooth configuration 324 bluetooth=NO 325 # and the following are used when bluetooth=YES 326 btconfig_devices="" # all 327 bthcid=YES bthcid_flags="" 328 sdpd=YES sdpd_flags="" 329 330 # Other daemons. 331 # 332 rwhod=NO rwhod_flags="-u _rwhod" 333 devpubd=NO devpubd_flags="" # autocreate nodes for new devs 334 envsys=NO # Set /etc/envsys.conf preferences 335 autofs=NO automount_flags="" 336 automountd_flags="" 337 autounmountd_flags="" 338 339 # Hardware daemons. 340 # 341 apmd=NO apmd_flags="" # APM power management daemon. 342 powerd=NO powerd_flags="" # power management daemon 343 screenblank=NO screenblank_flags="" # wscons and FBIO screenblanker 344 345 moused=NO # serial mouse handler 346 moused_flags="-p /dev/tty00" 347 348 wdogctl=NO # watchdog timer control 349 # wdogctl_flags="-k devicename" 350 irdaattach=NO # attach serial lines to IrDA 351 irdaattach_flags="tty00" 352 353 # Configuration of "wscons" console driver virtual screens. 354 # 355 wscons=NO wscons_flags="" # setup wscons from wscons.conf 356 357 # Configuration of "wsmoused" console driver cut-n-paste support 358 # 359 wsmoused=NO wsmoused_flags="" 360 361 # Configuration of "tpctl" touch panel calibration utility 362 # 363 tpctl=NO tpctl_flags="" 364 365 # Mixer setting 366 # 367 mixerctl=NO mixerctl_mixers="" # "mixer0 mixer1" means saving 368 # and restoring their settings 369 370 # Vi recovery notification. Vi(1)'s -r option can recover files which were 371 # accidentally closed. See vi(1) for more details. 372 # 373 virecover=YES 374 375 # Veriexec signature loading. 376 # 377 veriexec=NO 378 veriexec_strict=0 379 veriexec_verbose=0 380 veriexec_flags="-k" 381 382 # Entropy load/save to/from /dev/random at startup/shutdown 383 # 384 random_seed=YES 385 386 # Creating / updating of man page index on boot 387 makemandb=YES 388 389 # Disable Simultaneous Multi-Threading 390 smtoff=NO 391 392 # blacklist daemon, needs npf 393 blacklistd=NO 394 395 # IPv6 address selection policy 396 ip6addrctl=NO 397 # ipv6_prefer, ipv4_prefer, auto 398 ip6addrctl_policy=auto 399 ip6addrctl_verbose=NO 400 401 # Unbound 402 unbound=NO 403 unbound_chrootdir=/var/chroot/unbound 404 405 # Nsd 406 nsd=NO 407 nsd_chrootdir=/var/chroot/nsd 408 nsd_flags="-t ${nsd_chrootdir}" 409 410 # ZFS 411 zfs=NO 412
Indexes created Thu Oct 02 14:10:14 GMT 2025