GENERIC.common revision 1.16 1 #
2 # $NetBSD: GENERIC.common,v 1.16 2017/03/20 21:08:55 skrll Exp $
3 #
4 # GENERIC evbarm kernel config (template)
5 #
6
7 # estimated number of users
8
9 maxusers 32
10
11 # Standard system options
12
13 options RTC_OFFSET=0 # hardware clock is this many mins. west of GMT
14 #options NTP # NTP phase/frequency locked loop
15
16 # CPU options
17 options PMAPCOUNTERS
18
19 # Architecture options
20
21 # File systems
22 include "conf/filesystems.config"
23 no file-system LFS
24 no file-system CODA
25 no pseudo-device vcoda
26
27 # File system options
28 #options QUOTA # legacy UFS quotas
29 #options QUOTA2 # new, in-filesystem UFS quotas
30 #options DISKLABEL_EI # disklabel Endian Independent support
31 options FFS_EI # FFS Endian Independent support
32 options NFSSERVER
33 options WAPBL # File system journaling support
34 #options FFS_NO_SNAPSHOT # No FFS snapshot support
35
36 # Networking options
37
38 #options GATEWAY # packet forwarding
39 options INET # IP + ICMP + TCP + UDP
40 options INET6 # IPV6
41 options IPSEC # IP security
42 #options IPSEC_DEBUG # debug for IP security
43 #options MROUTING # IP multicast routing
44 #options PIM # Protocol Independent Multicast
45 #options NETATALK # AppleTalk networking
46 #options PPP_BSDCOMP # BSD-Compress compression support for PPP
47 #options PPP_DEFLATE # Deflate compression support for PPP
48 #options PPP_FILTER # Active filter support for PPP (requires bpf)
49 #options TCP_DEBUG # Record last TCP_NDEBUG packets with SO_DEBUG
50
51 # JIT compiler for bpfilter
52 #options SLJIT
53 options BPFJIT
54
55 #options NFS_BOOT_BOOTP
56 options NFS_BOOT_DHCP
57 #options NFS_BOOT_BOOTSTATIC
58 #options NFS_BOOTSTATIC_MYIP="\"192.168.1.4\""
59 #options NFS_BOOTSTATIC_GWIP="\"192.168.1.1\""
60 #options NFS_BOOTSTATIC_MASK="\"255.255.255.0\""
61 #options NFS_BOOTSTATIC_SERVADDR="\"192.168.1.1\""
62 #options NFS_BOOTSTATIC_SERVER="\"192.168.1.1:/nfs/sdp2430\""
63
64 options NFS_BOOT_RWSIZE=1024
65
66 # Compatibility options
67
68 options COMPAT_NETBSD32 # allow running arm (e.g. non-earm) binaries
69 #options COMPAT_43 # 4.3BSD compatibility.
70 #options COMPAT_09 # NetBSD 0.9,
71 #options COMPAT_10 # NetBSD 1.0,
72 #options COMPAT_11 # NetBSD 1.1,
73 #options COMPAT_12 # NetBSD 1.2,
74 #options COMPAT_13 # NetBSD 1.3,
75 #options COMPAT_14 # NetBSD 1.4,
76 #options COMPAT_15 # NetBSD 1.5,
77 #options COMPAT_16 # NetBSD 1.6,
78 #options COMPAT_20 # NetBSD 2.0,
79 #options COMPAT_30 # NetBSD 3.0,
80 #options COMPAT_40 # NetBSD 4.0,
81 #options COMPAT_50 # NetBSD 5.0,
82 options COMPAT_60 # NetBSD 6.0, and
83 options COMPAT_70 # NetBSD 7.0 binary compatibility.
84 #options TCP_COMPAT_42 # 4.2BSD TCP/IP bug compat. Not recommended.
85 #options COMPAT_BSDPTY # /dev/[pt]ty?? ptys.
86
87 # Shared memory options
88
89 options SYSVMSG # System V-like message queues
90 options SYSVSEM # System V-like semaphores
91 #options SEMMNI=10 # number of semaphore identifiers
92 #options SEMMNS=60 # number of semaphores in system
93 #options SEMUME=10 # max number of undo entries per process
94 #options SEMMNU=30 # number of undo structures in system
95 options SYSVSHM # System V-like memory sharing
96
97 # Device options
98
99 #options MEMORY_DISK_HOOKS # boottime setup of ramdisk
100 #options MEMORY_DISK_ROOT_SIZE=8192 # Size in blocks
101 #options MEMORY_DISK_DYNAMIC
102 #options MINIROOTSIZE=1000 # Size in blocks
103 #options MEMORY_DISK_IS_ROOT # use memory disk as root
104 #options MEMORY_DISK_FBFLAGS=RB_SINGLE
105
106 # Miscellaneous kernel options
107 options KTRACE # system call tracing, a la ktrace(1)
108 #options SCSIVERBOSE # Verbose SCSI errors
109 #options MIIVERBOSE # Verbose MII autoconfuration messages
110 #options USERCONF # userconf(4) support
111 #options PIPE_SOCKETPAIR # smaller, but slower pipe(2)
112
113 # Wedge support
114 options DKWEDGE_AUTODISCOVER # Automatically add dk(4) instances
115 options DKWEDGE_METHOD_GPT # Supports GPT partitions as wedges
116
117 # Alternate buffer queue strategies for better responsiveness under high
118 # disk I/O load.
119 #options BUFQ_READPRIO
120 options BUFQ_PRIOCSCAN
121
122 # Development and Debugging options
123
124 #options PERFCTRS # performance counters
125 options DIAGNOSTIC # internal consistency checks
126 #options DEBUG
127 #options LOCKDEBUG
128 #options PMAP_DEBUG # Enable pmap_debug_level code
129 #options IPKDB # remote kernel debugging
130 #options VERBOSE_INIT_ARM # verbose bootstraping messages
131 options DDB # in-kernel debugger
132 options DDB_ONPANIC=1
133 options DDB_HISTORY_SIZE=100 # Enable history editing in DDB
134 #options DDB_COMMANDONENTER="bt"
135 #options KGDB
136
137 # Pseudo-Devices
138
139 # crypto pseudo-devices
140 pseudo-device crypto # /dev/crypto device
141 pseudo-device swcrypto # software crypto implementation
142
143 # disk/mass storage pseudo-devices
144 #pseudo-device md # memory disk device (ramdisk)
145 pseudo-device vnd # disk-like interface to files
146 #pseudo-device fss # file system snapshot device
147 pseudo-device drvctl # driver control
148
149 # network pseudo-devices
150 pseudo-device bpfilter # Berkeley packet filter
151 pseudo-device loop # network loopback
152 pseudo-device bridge # simple inter-network bridging
153 pseudo-device vlan # IEEE 802.1q encapsulation
154 pseudo-device ppp # Point-to-Point Protocol
155 pseudo-device pppoe # PPP over Ethernet (RFC 2516)
156 pseudo-device tun # network tunneling over tty
157 pseudo-device tap # virtual Ethernet
158 pseudo-device gre # generic L3 over IP tunnel
159 pseudo-device npf # NPF packet filter
160
161 # miscellaneous pseudo-devices
162 pseudo-device pty # pseudo-terminals
163 #options RND_COM
164 #pseudo-device clockctl # user control of clock subsystem
165 pseudo-device ksyms # /dev/ksyms
166 pseudo-device lockstat # lock profiling
167
168 options FILEASSOC # fileassoc(9) - required for Veriexec
169 # and PAX_SEGVGUARD
170
171 # Veriexec
172 #
173 # a pseudo device needed for veriexec
174 pseudo-device veriexec
175 #
176 # Uncomment the fingerprint methods below that are desired. Note that
177 # removing fingerprint methods will have almost no impact on the kernel
178 # code size.
179 #
180 options VERIFIED_EXEC_FP_RMD160
181 options VERIFIED_EXEC_FP_SHA256
182 options VERIFIED_EXEC_FP_SHA384
183 options VERIFIED_EXEC_FP_SHA512
184 options VERIFIED_EXEC_FP_SHA1
185 options VERIFIED_EXEC_FP_MD5
186
187
188 options PAX_ASLR_DEBUG=1 # PaX ASLR debug
189 options PAX_SEGVGUARD=0 # PaX Segmentation fault guard
190 options PAX_MPROTECT=1 # PaX mprotect(2) restrictions
191 options PAX_MPROTECT_DEBUG=1 # PaX mprotect debug
192 options PAX_ASLR=1 # PaX Address Space Layout Randomization
193