Home | History | Annotate | Line # | Download | only in defaults
rc.conf revision 1.161
      1 #	$NetBSD: rc.conf,v 1.161 2021/01/10 23:24:25 riastradh Exp $
      2 #
      3 # /etc/defaults/rc.conf --
      4 #	default configuration of /etc/rc.conf
      5 #
      6 # see rc.conf(5) for more information.
      7 #
      8 # DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE.
      9 # EDIT /etc/rc.conf INSTEAD.
     10 #
     11 
     12 #
     13 # Use program=YES to enable program, NO to disable it. program_flags are
     14 # passed to the program on the command line.
     15 #
     16 
     17 # Uncomment this if you want to use local paths in rc.
     18 #
     19 #export PATH=$PATH:/usr/pkg/sbin:/usr/pkg/bin:/usr/local/sbin:/usr/local/bin
     20 
     21 # Uncomment the following to execute each /etc/rc.d script in
     22 # the current shell rather than in a subshell.  This may be
     23 # faster on very slow machines that have an expensive fork(2).
     24 #	NOTE:	USE THIS AT YOUR OWN RISK; A ROGUE COMMAND
     25 #		MAY INADVERTENTLY PREVENT BOOT TO MULTIUSER.
     26 #
     27 #rc_fast_and_loose=YES
     28 
     29 # If rc_silent is true then /etc/rc will suppress most output to
     30 # the console.  The default is taken from the AB_SILENT flag passed
     31 # from the boot loader to the kernel in the boothowto(9) variable.
     32 #
     33 # rc_silent_cmd is executed once for each suppressed line of output.
     34 # Useful values are ":" and "twiddle".
     35 #
     36 rc_silent=$( [ "$(( $(/sbin/sysctl -n kern.boothowto 2>/dev/null || echo 0) \
     37 		    & 0x40000 ))" != 0 ] && echo true || echo false )
     38 rc_silent_cmd=twiddle
     39 
     40 # Additional flags to the rcorder(8) that's run by /etc/rc.
     41 #
     42 rc_rcorder_flags=""
     43 
     44 # The directories searched for rc scripts.
     45 # These directories must be part of the root file system.
     46 rc_directories=/etc/rc.d 
     47 
     48 # If this is set to NO, shutdown(8) will not run /etc/rc.shutdown.
     49 #
     50 do_rcshutdown=YES
     51 
     52 # Additional flags to the rcorder(8) that's run by /etc/rc.shutdown.
     53 #
     54 rcshutdown_rcorder_flags=""
     55 
     56 # If this is non-blank, use as the number of seconds to run a watchdog
     57 # timer which will terminate /etc/rc.shutdown if the timeout expires.
     58 #
     59 rcshutdown_timeout=""
     60 
     61 
     62 # Basic network configuration
     63 #
     64 
     65 # Fully Qualified Internet Domain Name (a.k.a. hostname, e.g. foo.baz.edu).
     66 # If blank, use /etc/myname.
     67 #
     68 hostname=""
     69 
     70 # If there's only one way out of your IPv4 network, set this to the hostname
     71 # or the IPv4 address of the router that will get your packets off the LAN.
     72 # If blank, use /etc/mygate.
     73 #
     74 defaultroute=""
     75 
     76 # Same thing for IPv6.  If blank, use /etc/mygate6.
     77 #
     78 defaultroute6=""
     79 
     80 # The NIS domain name (formerly known as Yellow Pages); not in any way
     81 # related to Internet domain names.
     82 # If blank, use /etc/defaultdomain.
     83 #
     84 domainname=""
     85 
     86 # Filesystems to mount early in boot-up.
     87 # Note that `/var' is needed in $critical_filesystems_local (or
     88 # implied as part of `/') as certain services that need /var (such as
     89 # dhcpcd) may be needed to get the network operational enough to mount
     90 # the $critical_filesystems_remote.  Prepending "OPTIONAL:"  means it
     91 # will not be an error if that file system is not present in fstab(5).
     92 #
     93 critical_filesystems_local="OPTIONAL:/var"
     94 critical_filesystems_remote="OPTIONAL:/usr"
     95 
     96 # Swap device controls.
     97 #
     98 no_swap=NO		# Set to YES if you have purposefully setup no swap
     99 			# partitions and don't want to be warned about it.
    100 swapoff=YES		# Remove block-type swap partitions upon shutdown
    101 			# This defaults to yes, so that raids shutdown cleanly
    102 swapoff_umount=auto	# Set to 'manual' to umount the tmpfs partitions listed
    103 			# in swapoff_umount_fs before removing swap. Set to
    104 			# 'auto' to umount all tmpfs partitions that contain
    105 			# no device nodes.
    106 swapoff_umount_fs=	# space-separated list of tmpfs mount points to umount
    107 			# before removing swap if swapoff_umount=manual
    108 
    109 # Concatenated disk driver.
    110 #
    111 ccd=YES
    112 
    113 # RAIDframe driver (manually configured devices).
    114 #
    115 raidframe=YES
    116 
    117 # Crypto file system.
    118 #
    119 cgd=YES
    120 
    121 # Logical Volume Manager
    122 #
    123 lvm=NO
    124 
    125 # One-time actions and programs on boot-up.
    126 #
    127 savecore=YES		savecore_flags="-z"
    128 			savecore_dir="/var/crash"
    129 resize_disklabel=NO				# resize disklabel to fill disk
    130 resize_gpt=NO					# resize GPT to fill disk
    131 resize_root=NO					# resize root to fill partition
    132 per_user_tmp=NO					# per-user /tmp directories
    133 per_user_tmp_dir="/private/tmp"			# real storage for /tmp
    134 clear_tmp=YES					# clear /tmp after reboot
    135 update_motd=YES					# updates /etc/motd
    136 update_motd_release=NO	motd_release_tag=""	# release info in /etc/motd
    137 dmesg=YES		dmesg_flags="-t"	# write /var/run/dmesg.boot
    138 accounting=NO					# uses /var/account/acct
    139 newsyslog=NO		newsyslog_flags=""	# trim log files
    140 quota=YES					# check and enable quotas
    141 ldconfig=YES					# rebuild a.out ldconfig cache
    142 sysdb=YES					# build system databases
    143 rndctl=NO		rndctl_flags=""		# configure rndctl(8)
    144 gpio=NO						# configure GPIO devices
    145 modules=YES					# process /etc/modules.conf
    146 
    147 # cope with other OSes using the real time clock at localtime on this
    148 # machine (by adjusting kern.rtc_offset at boot)
    149 rtclocaltime=NO
    150 
    151 # NOTE: default coredump name now set in /etc/sysctl.conf
    152 
    153 #
    154 # File system check flags; default to preen mode, checking file systems
    155 # that are listed in /etc/fstab in parallel as the fsck pass number
    156 # permits. Fix minor faults automatically, and exit with non 0 only
    157 # when major errors occur.
    158 #
    159 fsck_flags=-p
    160 
    161 # Security setting.  If $securelevel is non-empty, the system securelevel
    162 # is set to this value early in the boot sequence.  Otherwise the default
    163 # action is taken (see init(8)).
    164 #
    165 securelevel=""					# securelevel to set to
    166 
    167 # To set the IP address of an interface either use
    168 #  ifconfig_xxN="IP-NO"
    169 # where xxN is the interface.  If this variable is not set then
    170 # contents of the file /etc/ifconfig.xxN is used.
    171 
    172 # Networking startup.
    173 #
    174 # Wait up to 15 seconds for the tentative flag to clear from all addresses.
    175 # Wait up to 5 seconds for the detached flag to clear from all addresses.
    176 # Addresses are detached if there is no carrier, thus we have a small
    177 # wait to see if we get a carrier.
    178 # Even a wired interface may not recognise it has a carrier right away.
    179 ifconfig_wait_dad_flags="-w 15 -W 5"
    180 
    181 mdnsd=NO
    182 npf=NO
    183 npfd=NO			npfd_flags=""
    184 ipfilter=NO		ipfilter_flags=""	# uses /etc/ipf.conf
    185 ipnat=NO					# uses /etc/ipnat.conf
    186 ipfs=NO			ipfs_flags=""		# save/load ipnat and ipf states
    187 ipsec=NO					# uses /etc/ipsec.conf
    188 ipmon=NO		ipmon_flags="-Dns"	# syslog ipfilter messages
    189 pf=NO			pf_rules="/etc/pf.conf" pf_flags=""
    190 pflogd=NO
    191 ftp_proxy=NO
    192 racoon=NO					# IKE daemon
    193 auto_ifconfig=YES				# config all avail. interfaces
    194 net_interfaces=""				# used only if above is NO
    195 flushroutes=YES					# flush routes in netstart
    196 dhcpcd=NO		dhcpcd_flags="-qM"	# For ifconfig_XXX=dhcp.
    197 ntpdate=NO  		ntpdate_flags="-b -s"	# May need '-u' thru firewall
    198 ppp=YES			ppp_peers=""		# /etc/ppp/peers to call
    199 ip6mode=host					# host, autohost or router
    200 ip6uniquelocal=NO				# IPv6 unique-local forwarding
    201 
    202 # Special treatment for interfaces that need to be downed on
    203 # shutdown (because they might cause unnecessary costs or block resources
    204 # on the peer). All pppoe* interfaces are automatically included in this
    205 # list, add others here manually.
    206 #force_down_interfaces=""
    207 
    208 ifwatchd=NO	# execute up/down scripts for in-kernel PPPoE interfaces
    209 	ifwatchd_flags="-u /etc/ppp/ip-up -d /etc/ppp/ip-down pppoe0"
    210 
    211 # ALTQ configuration/monitoring daemon
    212 altqd=NO		altqd_flags=""
    213 
    214 # Daemons required by servers.  These are not needed for strictly client use.
    215 #
    216 
    217 # inetd is used to start the IP-based services enabled in /etc/inetd.conf
    218 #
    219 inetd=YES		inetd_flags="-l"	# -l logs libwrap
    220 
    221 # identd
    222 #
    223 identd=NO		identd_flags="-b -l -u nobody"
    224 
    225 # rpcbind (formerly known as 'portmap') is used to look up RPC-based services.
    226 #
    227 rpcbind=NO		rpcbind_flags="-l"	# -l logs libwrap
    228 
    229 # Commonly used daemons.
    230 #
    231 syslogd=YES		syslogd_flags="-s"	# -s "secure" unix domain only
    232 cron=YES
    233 named=NO		named_flags=""		# see below for named_chrootdir
    234 timed=NO		timed_flags=""
    235 ntpd=NO			ntpd_flags=""		# see below for ntpd_chrootdir
    236 # The default setting for postfix here is YES, but gets re-examined by
    237 # the rc.d/postfix startup script when it runs.  The script sets
    238 # _rc_d_postfix to "check", and then causes all rc.conf settings to
    239 # be re-evaluated.  If the value of $postfix after this is "check",
    240 # the script then checks to see if /etc/mailer.conf selects the system
    241 # postfix. If not, it does print a warning and does not start postfix 
    242 # to avoid conflict with a different MTA.
    243 postfix=${_rc_d_postfix:-YES}
    244 lpd=NO			lpd_flags="-s"		# -s "secure" unix domain only
    245 sshd=NO			sshd_flags=""
    246 ssh_keygen_flags=""
    247 ftpd=NO			ftpd_flags="-ll"
    248 httpd=NO		httpd_flags=""
    249 			httpd_wwwdir="/var/www"
    250 			httpd_wwwuser="_httpd"
    251 
    252 # To run the named(8) DNS server as an unprivileged user under a
    253 # chroot(2) cage, uncomment the following after migrating the contents
    254 # of /etc/namedb to /var/chroot/named/etc/namedb
    255 #
    256 #named_chrootdir="/var/chroot/named"
    257 
    258 # To run the ntpd(8) NTP server as an unprivileged user under a
    259 # chroot(2) cage, uncomment the following, after ensuring that:
    260 #	- The kernel has "pseudo-device clockctl" compiled in
    261 #	- /dev/clockctl is present
    262 #
    263 #ntpd_chrootdir="/var/chroot/ntpd"
    264 
    265 # Routing daemons.
    266 #
    267 routed=NO		routed_flags="-q"
    268 gated=NO
    269 mrouted=NO		mrouted_flags=""
    270 route6d=NO		route6d_flags=""
    271 ldpd=NO
    272 
    273 # Daemons used to boot other hosts over a network.
    274 #
    275 rarpd=NO		rarpd_flags="-a"
    276 bootparamd=NO		bootparamd_flags=""
    277 dhcpd=NO		dhcpd_flags="-q"
    278 dhcpd6=NO		dhcpd6_flags="-q -cf /etc/dhcpd6.conf"
    279 dhcrelay=NO		dhcrelay_flags=""
    280 rbootd=NO		rbootd_flags=""
    281 mopd=NO			mopd_flags="-a"
    282 ndbootd=NO		ndbootd_flags="-s /tftpboot /tftpboot/bootyy"
    283 rtadvd=NO		rtadvd_flags=""
    284 isibootd=NO		isibootd_flags=""
    285 
    286 # X11 daemons.
    287 #
    288 xfs=NO			xfs_flags=""		# X11 font server
    289 xdm=NO			xdm_flags=""		# X11 display manager; needs
    290 						# wscons=YES for local displays.
    291 
    292 # Update fontconfig cache at boot
    293 fccache=YES
    294 
    295 # YP (NIS) daemons.
    296 #
    297 ypbind=NO		ypbind_flags=""
    298 ypserv=NO		ypserv_flags="-d"
    299 yppasswdd=NO		yppasswdd_flags=""
    300 
    301 # NFS daemons and parameters.
    302 #
    303 mountd=NO		mountd_flags=""		# NFS mount requests daemon
    304 nfs_client=NO					# enable client daemons
    305 nfs_server=NO					# enable server daemons
    306 			nfsd_flags=""
    307 lockd=NO		lockd_flags=""
    308 statd=NO		statd_flags=""
    309 amd=NO			amd_flags="-l syslog -x error,noinfo,nostats"
    310 			amd_dir=/amd			# mount dir
    311 
    312 # Heimdal Kerberos 5 KDC (with Kerberos IV compatibility)
    313 kdc=NO			kdc_flags="--detach"
    314 
    315 # iSCSI target
    316 iscsi_target=NO		iscsi_target_flags=""
    317 # iSCSI kernel initiator
    318 iscsid=NO
    319 
    320 # WPA daemons.
    321 hostapd=NO		hostapd_flags="-Bs /etc/hostapd.conf"
    322 wpa_supplicant=NO	wpa_supplicant_flags="-Ms -c /etc/wpa_supplicant.conf"
    323 
    324 # Bluetooth configuration
    325 bluetooth=NO
    326 # and the following are used when bluetooth=YES
    327 btconfig_devices=""                             # all
    328 bthcid=YES              bthcid_flags=""
    329 sdpd=YES                sdpd_flags=""
    330 
    331 # Other daemons.
    332 #
    333 rwhod=NO		rwhod_flags="-u _rwhod"
    334 devpubd=NO		devpubd_flags=""	# autocreate nodes for new devs
    335 envsys=NO					# Set /etc/envsys.conf preferences
    336 autofs=NO		automount_flags=""
    337 			automountd_flags=""
    338 			autounmountd_flags=""
    339 
    340 # Hardware daemons.
    341 #
    342 apmd=NO			apmd_flags=""		# APM power management daemon.
    343 powerd=NO		powerd_flags=""		# power management daemon
    344 screenblank=NO		screenblank_flags=""	# wscons and FBIO screenblanker
    345 
    346 moused=NO					# serial mouse handler
    347 			moused_flags="-p /dev/tty00"
    348 
    349 wdogctl=NO					# watchdog timer control
    350 #			wdogctl_flags="-k devicename"
    351 irdaattach=NO					# attach serial lines to IrDA 
    352 			irdaattach_flags="tty00"
    353 
    354 # Configuration of "wscons" console driver virtual screens.
    355 #
    356 wscons=NO		wscons_flags=""		# setup wscons from wscons.conf
    357 
    358 # Configuration of "wsmoused" console driver cut-n-paste support
    359 #
    360 wsmoused=NO		wsmoused_flags=""
    361 
    362 # Configuration of "tpctl" touch panel calibration utility
    363 #
    364 tpctl=NO		tpctl_flags=""
    365 
    366 # Mixer setting
    367 #
    368 mixerctl=NO		mixerctl_mixers=""	# "mixer0 mixer1" means saving
    369 						# and restoring their settings
    370 
    371 # Vi recovery notification.  Vi(1)'s -r option can recover files which were
    372 # accidentally closed.  See vi(1) for more details.
    373 # 
    374 virecover=YES
    375 
    376 # Veriexec signature loading.
    377 #
    378 veriexec=NO
    379 veriexec_strict=0
    380 veriexec_verbose=0
    381 veriexec_flags="-k"
    382 
    383 # Entropy load/save to/from /dev/random at startup/shutdown
    384 #
    385 random_seed=YES
    386 
    387 # Set to `check' to abort multi-user boot if not enough entropy, or
    388 # `wait' to wait until enough entropy.
    389 #
    390 entropy=""
    391 
    392 # Creating / updating of man page index on boot
    393 makemandb=YES
    394 
    395 # Disable Simultaneous Multi-Threading
    396 smtoff=NO
    397 
    398 # blocklist daemon, needs npf
    399 blocklistd=NO
    400 
    401 # IPv6 address selection policy
    402 ip6addrctl=NO
    403 # ipv6_prefer, ipv4_prefer, auto
    404 ip6addrctl_policy=auto
    405 ip6addrctl_verbose=NO
    406 
    407 # Unbound
    408 unbound=NO
    409 unbound_chrootdir=/var/chroot/unbound
    410 
    411 # Nsd
    412 nsd=NO
    413 nsd_chrootdir=/var/chroot/nsd
    414 nsd_flags="-t ${nsd_chrootdir}"
    415 
    416 # ZFS
    417 zfs=NO
    418