GENERIC.common revision 1.17 1 #
2 # $NetBSD: GENERIC.common,v 1.17 2017/03/20 21:30:47 skrll Exp $
3 #
4 # GENERIC evbarm kernel config (template)
5 #
6
7 # estimated number of users
8
9 maxusers 32
10
11 # Standard system options
12
13 options RTC_OFFSET=0 # hardware clock is this many mins. west of GMT
14 #options NTP # NTP phase/frequency locked loop
15
16 # CPU options
17 options PMAPCOUNTERS
18
19 # Architecture options
20
21 # File systems
22 include "conf/filesystems.config"
23 no file-system LFS
24 no file-system CODA
25 no pseudo-device vcoda
26
27 # File system options
28 #options QUOTA # legacy UFS quotas
29 #options QUOTA2 # new, in-filesystem UFS quotas
30 #options DISKLABEL_EI # disklabel Endian Independent support
31 options FFS_EI # FFS Endian Independent support
32 options NFSSERVER
33 options WAPBL # File system journaling support
34 #options FFS_NO_SNAPSHOT # No FFS snapshot support
35
36 # Networking options
37
38 #options GATEWAY # packet forwarding
39 options INET # IP + ICMP + TCP + UDP
40 options INET6 # IPV6
41 options IPSEC # IP security
42 #options IPSEC_DEBUG # debug for IP security
43 #options MROUTING # IP multicast routing
44 #options PIM # Protocol Independent Multicast
45 #options NETATALK # AppleTalk networking
46 #options PPP_BSDCOMP # BSD-Compress compression support for PPP
47 #options PPP_DEFLATE # Deflate compression support for PPP
48 #options PPP_FILTER # Active filter support for PPP (requires bpf)
49 #options TCP_DEBUG # Record last TCP_NDEBUG packets with SO_DEBUG
50
51 # JIT compiler for bpfilter
52 #options SLJIT
53 options BPFJIT
54
55 #options NFS_BOOT_BOOTP
56 options NFS_BOOT_DHCP
57 #options NFS_BOOT_BOOTSTATIC
58 #options NFS_BOOTSTATIC_MYIP="\"192.168.1.4\""
59 #options NFS_BOOTSTATIC_GWIP="\"192.168.1.1\""
60 #options NFS_BOOTSTATIC_MASK="\"255.255.255.0\""
61 #options NFS_BOOTSTATIC_SERVADDR="\"192.168.1.1\""
62 #options NFS_BOOTSTATIC_SERVER="\"192.168.1.1:/nfs/sdp2430\""
63
64 options NFS_BOOT_RWSIZE=1024
65
66 # Compatibility options
67
68 options COMPAT_NETBSD32 # allow running arm (e.g. non-earm) binaries
69 #options COMPAT_43 # 4.3BSD compatibility.
70 #options COMPAT_09 # NetBSD 0.9,
71 #options COMPAT_10 # NetBSD 1.0,
72 #options COMPAT_11 # NetBSD 1.1,
73 #options COMPAT_12 # NetBSD 1.2,
74 #options COMPAT_13 # NetBSD 1.3,
75 #options COMPAT_14 # NetBSD 1.4,
76 #options COMPAT_15 # NetBSD 1.5,
77 #options COMPAT_16 # NetBSD 1.6,
78 #options COMPAT_20 # NetBSD 2.0,
79 #options COMPAT_30 # NetBSD 3.0,
80 #options COMPAT_40 # NetBSD 4.0,
81 #options COMPAT_50 # NetBSD 5.0,
82 options COMPAT_60 # NetBSD 6.0, and
83 options COMPAT_70 # NetBSD 7.0 binary compatibility.
84 #options TCP_COMPAT_42 # 4.2BSD TCP/IP bug compat. Not recommended.
85 #options COMPAT_BSDPTY # /dev/[pt]ty?? ptys.
86
87 # Shared memory options
88
89 options SYSVMSG # System V-like message queues
90 options SYSVSEM # System V-like semaphores
91 #options SEMMNI=10 # number of semaphore identifiers
92 #options SEMMNS=60 # number of semaphores in system
93 #options SEMUME=10 # max number of undo entries per process
94 #options SEMMNU=30 # number of undo structures in system
95 options SYSVSHM # System V-like memory sharing
96
97 # Device options
98
99 #options MEMORY_DISK_HOOKS # boottime setup of ramdisk
100 #options MEMORY_DISK_ROOT_SIZE=8192 # Size in blocks
101 #options MEMORY_DISK_DYNAMIC
102 #options MINIROOTSIZE=1000 # Size in blocks
103 #options MEMORY_DISK_IS_ROOT # use memory disk as root
104 #options MEMORY_DISK_FBFLAGS=RB_SINGLE
105
106 # Miscellaneous kernel options
107 options INSECURE # disable `kernel security level'
108 options KTRACE # system call tracing, a la ktrace(1)
109 #options SCSIVERBOSE # Verbose SCSI errors
110 #options MIIVERBOSE # Verbose MII autoconfuration messages
111 #options USERCONF # userconf(4) support
112 #options PIPE_SOCKETPAIR # smaller, but slower pipe(2)
113
114 # Wedge support
115 options DKWEDGE_AUTODISCOVER # Automatically add dk(4) instances
116 options DKWEDGE_METHOD_GPT # Supports GPT partitions as wedges
117
118 # Alternate buffer queue strategies for better responsiveness under high
119 # disk I/O load.
120 #options BUFQ_READPRIO
121 options BUFQ_PRIOCSCAN
122
123 # Development and Debugging options
124
125 #options PERFCTRS # performance counters
126 options DIAGNOSTIC # internal consistency checks
127 #options DEBUG
128 options KDTRACE_HOOKS # kernel DTrace hooks
129 #options LOCKDEBUG
130 #options PMAP_DEBUG # Enable pmap_debug_level code
131 #options IPKDB # remote kernel debugging
132 #options VERBOSE_INIT_ARM # verbose bootstraping messages
133 options DDB # in-kernel debugger
134 options DDB_ONPANIC=1
135 options DDB_HISTORY_SIZE=100 # Enable history editing in DDB
136 #options DDB_COMMANDONENTER="bt"
137 #options KGDB
138
139 # Pseudo-Devices
140
141 # crypto pseudo-devices
142 pseudo-device crypto # /dev/crypto device
143 pseudo-device swcrypto # software crypto implementation
144
145 # disk/mass storage pseudo-devices
146 #pseudo-device md # memory disk device (ramdisk)
147 pseudo-device vnd # disk-like interface to files
148 #pseudo-device fss # file system snapshot device
149 pseudo-device drvctl # driver control
150
151 # network pseudo-devices
152 pseudo-device bpfilter # Berkeley packet filter
153 pseudo-device loop # network loopback
154 pseudo-device bridge # simple inter-network bridging
155 pseudo-device vlan # IEEE 802.1q encapsulation
156 pseudo-device ppp # Point-to-Point Protocol
157 pseudo-device pppoe # PPP over Ethernet (RFC 2516)
158 pseudo-device tun # network tunneling over tty
159 pseudo-device tap # virtual Ethernet
160 pseudo-device gre # generic L3 over IP tunnel
161 pseudo-device npf # NPF packet filter
162
163 # miscellaneous pseudo-devices
164 pseudo-device pty # pseudo-terminals
165 #options RND_COM
166 #pseudo-device clockctl # user control of clock subsystem
167 pseudo-device ksyms # /dev/ksyms
168 pseudo-device lockstat # lock profiling
169
170 options FILEASSOC # fileassoc(9) - required for Veriexec
171 # and PAX_SEGVGUARD
172
173 # Veriexec
174 #
175 # a pseudo device needed for veriexec
176 pseudo-device veriexec
177 #
178 # Uncomment the fingerprint methods below that are desired. Note that
179 # removing fingerprint methods will have almost no impact on the kernel
180 # code size.
181 #
182 options VERIFIED_EXEC_FP_RMD160
183 options VERIFIED_EXEC_FP_SHA256
184 options VERIFIED_EXEC_FP_SHA384
185 options VERIFIED_EXEC_FP_SHA512
186 options VERIFIED_EXEC_FP_SHA1
187 options VERIFIED_EXEC_FP_MD5
188
189
190 options PAX_ASLR_DEBUG=1 # PaX ASLR debug
191 options PAX_SEGVGUARD=0 # PaX Segmentation fault guard
192 options PAX_MPROTECT=1 # PaX mprotect(2) restrictions
193 options PAX_MPROTECT_DEBUG=1 # PaX mprotect debug
194 options PAX_ASLR=1 # PaX Address Space Layout Randomization
195