Commit | Line | Data |
---|---|---|
984263bc MD |
1 | .\" Copyright (c) 1995 |
2 | .\" Jordan K. Hubbard | |
3 | .\" | |
4 | .\" Redistribution and use in source and binary forms, with or without | |
5 | .\" modification, are permitted provided that the following conditions | |
6 | .\" are met: | |
7 | .\" 1. Redistributions of source code must retain the above copyright | |
8 | .\" notice, this list of conditions and the following disclaimer. | |
9 | .\" 2. Redistributions in binary form must reproduce the above copyright | |
10 | .\" notice, this list of conditions and the following disclaimer in the | |
11 | .\" documentation and/or other materials provided with the distribution. | |
12 | .\" | |
13 | .\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND | |
14 | .\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | |
15 | .\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | |
16 | .\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE | |
17 | .\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | |
18 | .\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | |
19 | .\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | |
20 | .\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | |
21 | .\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | |
22 | .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | |
23 | .\" SUCH DAMAGE. | |
24 | .\" | |
445243bf | 25 | .\" $FreeBSD: src/share/man/man5/rc.conf.5,v 1.197 2003/07/28 13:56:00 mbr Exp $ |
2feb07f7 | 26 | .\" |
451640b7 | 27 | .Dd February 14, 2024 |
984263bc MD |
28 | .Dt RC.CONF 5 |
29 | .Os | |
30 | .Sh NAME | |
31 | .Nm rc.conf | |
32 | .Nd system configuration information | |
33 | .Sh DESCRIPTION | |
34 | The file | |
35 | .Nm | |
36 | contains descriptive information about the local host name, configuration | |
37 | details for any potential network interfaces and which services should be | |
445243bf RG |
38 | started up at system initial boot time. |
39 | In new installations, the | |
984263bc | 40 | .Nm |
d566b9ec | 41 | file is generally initialized by the installer. |
984263bc MD |
42 | .Pp |
43 | The purpose of | |
44 | .Nm | |
225e0ed5 SW |
45 | is not to run commands or perform system startup actions directly. |
46 | Instead, it is included by the various generic startup scripts in | |
984263bc MD |
47 | .Pa /etc |
48 | which conditionalize their | |
49 | internal actions according to the settings found there. | |
50 | .Pp | |
51 | The | |
717e8ef7 TN |
52 | .Pa /etc/defaults/rc.conf |
53 | file specifies the default settings for all the available options, | |
54 | the | |
984263bc | 55 | .Pa /etc/rc.conf |
717e8ef7 | 56 | file specifies override settings. |
445243bf | 57 | Options need only be specified in |
984263bc | 58 | .Pa /etc/rc.conf |
717e8ef7 | 59 | when the system administrator wishes to override the defaults. |
984263bc MD |
60 | The file |
61 | .Pa /etc/rc.conf.local | |
62 | is used to override settings in | |
63 | .Pa /etc/rc.conf | |
64 | for historical reasons. | |
e28efee1 SW |
65 | In addition to |
66 | .Pa /etc/rc.conf.local | |
67 | you can also place smaller configuration files for each | |
68 | .Xr rc 8 | |
69 | script in the | |
70 | .Pa /etc/rc.conf.d | |
71 | directory, which will be included by the | |
72 | .Va load_rc_config | |
73 | function. | |
74 | For jail configurations you could use the file | |
75 | .Pa /etc/rc.conf.d/jail | |
76 | to store jail specific configuration options. | |
77 | Also see the | |
445243bf RG |
78 | .Va rc_conf_files |
79 | variable below. | |
984263bc MD |
80 | .Pp |
81 | The following list provides a name and short description for each | |
82 | variable that can be set in the | |
83 | .Nm | |
10efbc86 SW |
84 | file. |
85 | To set a variable of | |
86 | .Vt bool | |
87 | type, specify either | |
88 | .Dq Li YES , | |
89 | .Dq Li TRUE , | |
90 | .Dq Li ON , | |
91 | or | |
92 | .Dq Li 1 . | |
93 | To unset, specify | |
94 | .Dq Li NO , | |
95 | .Dq Li FALSE , | |
96 | .Dq Li OFF , | |
97 | or | |
98 | .Dq Li 0 . | |
99 | These values are case insensitive. | |
100 | The | |
101 | .Va _enable | |
f0cc8c84 | 102 | postfix in the name of a variable for starting a service can be |
10efbc86 SW |
103 | omitted (as in |
104 | .Nx ) . | |
445243bf | 105 | .Bl -tag -width indent-two |
a1517f78 AL |
106 | .It Va rc_conf_files |
107 | .Pq Vt str | |
108 | This option is used to specify a list of files that will override | |
109 | the settings in | |
110 | .Pa /etc/defaults/rc.conf . | |
111 | The files will be read in the order in which they are specified and should | |
112 | include the full path to the file. | |
113 | By default, the files specified are | |
114 | .Pa /etc/rc.conf | |
115 | and | |
116 | .Pa /etc/rc.conf.local | |
445243bf RG |
117 | .It Va rc_debug |
118 | .Pq Vt bool | |
119 | If set to | |
120 | .Dq Li YES , | |
121 | enable output of debug messages from rc scripts. | |
122 | This variable can be helpful in diagnosing mistakes when | |
123 | editing or integrating new scripts. | |
124 | Beware that this produces copious output to the terminal and | |
125 | .Xr syslog 3 . | |
126 | .It Va rc_info | |
127 | .Pq Vt bool | |
128 | If set to | |
129 | .Dq Li NO , | |
130 | disable informational messages from the rc scripts. | |
131 | Informational messages are displayed when | |
225e0ed5 | 132 | a condition that is not serious enough to warrant a warning or an error occurs. |
212bd1a8 SW |
133 | .It Va rc_startmsgs |
134 | .Pq Vt bool | |
135 | If set to | |
136 | .Dq Li YES , | |
137 | show | |
138 | .Dq Starting foo: | |
139 | when faststart is used (e.g., at boot time). | |
984263bc MD |
140 | .It Va swapfile |
141 | .Pq Vt str | |
142 | If set to | |
445243bf RG |
143 | .Dq Li NO , |
144 | no swapfile is installed, otherwise the value is used as the full | |
984263bc | 145 | pathname to a file to use for additional swap space. |
3b12ce42 SW |
146 | The |
147 | .Xr vn 4 | |
148 | driver is needed for a swapfile and will be loaded if it is not | |
149 | already compiled into the kernel or loaded via | |
150 | .Xr loader.conf 5 . | |
105b5cd2 JH |
151 | .It Ao Ar module Ac Ns Ar _load |
152 | .Pq Vt bool | |
153 | If set to | |
154 | .Dq YES , | |
155 | that kernel module will be loaded. | |
156 | If no | |
157 | .Ao Ar module Ac Ns Ar _name | |
158 | is defined (see below), the | |
159 | module's name is taken to be | |
160 | .Aq Ar module . | |
161 | .It Ao Ar module Ac Ns Ar _name | |
162 | .Pq Vt str | |
163 | Defines the name of the module. | |
4b8c406a SW |
164 | .It Va devd_enable |
165 | .Pq Vt bool | |
166 | Run | |
167 | .Xr devd 8 | |
168 | to handle device added, removed or unknown events from the kernel. | |
169 | .It Va devd_flags | |
170 | .Pq Vt str | |
171 | If | |
172 | .Va devd_enable | |
173 | is set to | |
174 | .Dq Li YES , | |
175 | these are the flags to pass to the | |
176 | .Xr devd 8 | |
177 | daemon. | |
8861c912 SW |
178 | .It Va powerd_enable |
179 | .Pq Vt bool | |
180 | Set to | |
181 | .Dq Li NO | |
182 | by default. | |
183 | Setting this to | |
184 | .Dq Li YES | |
185 | enables | |
186 | .Xr powerd 8 , | |
187 | a CPU speed control daemon. | |
eb324b03 SW |
188 | .It Va powerd_flags |
189 | .Pq Vt str | |
190 | Empty by default. | |
191 | Additional flags passed to the | |
192 | .Xr powerd 8 | |
193 | program. | |
17f399fd MD |
194 | .Pp |
195 | If you are running a serial port at 115200 baud we recommend setting | |
196 | the flags to "-l 1500" as lower frequencies will cause characters to | |
197 | drop. | |
eb3a3472 HT |
198 | .It Va sensorsd_enable |
199 | .Pq Vt bool | |
200 | Set to | |
201 | .Dq Li NO | |
202 | by default. | |
203 | Setting this to | |
204 | .Dq Li YES | |
205 | enables | |
206 | .Xr sensorsd 8 , | |
207 | a sensors monitoring and logging daemon. | |
208 | .It Va sensorsd_flags | |
209 | .Pq Vt str | |
210 | Empty by default. | |
717e8ef7 | 211 | Additional flags passed to the |
eb3a3472 HT |
212 | .Xr sensorsd 8 |
213 | program. | |
d74b417d SW |
214 | .It Va sysvipcd_enable |
215 | .Pq Vt bool | |
216 | Set to | |
217 | .Dq Li NO | |
218 | by default. | |
219 | Setting this to | |
220 | .Dq Li YES | |
221 | enables | |
222 | .Xr sysvipcd 8 , | |
68e12e71 SW |
223 | a daemon needed for the userspace implementation of the XSI Interprocess |
224 | Communication functions. | |
d74b417d SW |
225 | .It Va sysvipcd_flags |
226 | .Pq Vt str | |
227 | Empty by default. | |
228 | Additional flags passed to the | |
229 | .Xr sysvipcd 8 | |
230 | program. | |
01b70f3f SW |
231 | .It Va hotplugd_enable |
232 | .Pq Vt bool | |
233 | Set to | |
234 | .Dq Li NO | |
235 | by default. | |
236 | Setting this to | |
237 | .Dq Li YES | |
238 | enables | |
239 | .Xr hotplugd 8 , | |
240 | a devices hot plugging monitoring daemon. | |
241 | .It Va hotplugd_flags | |
242 | .Pq Vt str | |
243 | Empty by default. | |
244 | Additional flags passed to the | |
245 | .Xr hotplugd 8 | |
246 | program. | |
984263bc MD |
247 | .It Va pccard_ifconfig |
248 | .Pq Vt str | |
249 | List of arguments to be passed to | |
250 | .Xr ifconfig 8 | |
225e0ed5 | 251 | at boot time or on insertion of the card (e.g.\& |
445243bf RG |
252 | .Dq Cm inet Li 192.168.1.1 Cm netmask Li 255.255.255.0 |
253 | for a fixed address or | |
254 | .Dq Li DHCP | |
255 | for a DHCP client). | |
445243bf RG |
256 | .It Va removable_interfaces |
257 | .Pq Vt str | |
258 | List of removable network interfaces to be supported by | |
259 | .Pa /etc/pccard_ether . | |
984263bc MD |
260 | .It Va local_startup |
261 | .Pq Vt str | |
262 | List of directories to search for startup script files. | |
263 | .It Va script_name_sep | |
264 | .Pq Vt str | |
265 | The field separator to use for breaking down the list of startup script files | |
266 | into individual filenames. | |
267 | The default is a space. | |
268 | It is not necessary to change this unless there are startup scripts with names | |
269 | containing spaces. | |
270 | .It Va hostname | |
271 | .Pq Vt str | |
445243bf | 272 | The fully qualified domain name (FQDN) of this host on the network. |
984263bc MD |
273 | This should almost certainly be set to something meaningful, even if |
274 | there is no network connection. | |
817cf585 | 275 | If DHCP is used to set the hostname, |
984263bc | 276 | this variable should be set to an empty string. |
445243bf RG |
277 | .It Va ipv6_enable |
278 | .Pq Vt bool | |
279 | Enable support for IPv6 networking. | |
280 | Note that this requires that the kernel have been compiled with | |
281 | .Cd "options INET6" . | |
984263bc MD |
282 | .It Va nisdomainname |
283 | .Pq Vt str | |
284 | The NIS domain name of this host, or | |
445243bf | 285 | .Dq Li NO |
984263bc | 286 | if NIS is not used. |
817cf585 AL |
287 | .It Va dhcp_client |
288 | .Pq Vt str | |
289 | Set the rc script that is called to start the DHCP client. | |
290 | This can be set to | |
291 | .Dq Li dhclient | |
292 | (default) or | |
293 | .Dq Li dhcpcd . | |
445243bf | 294 | .It Va dhclient_program |
984263bc | 295 | .Pq Vt str |
817cf585 AL |
296 | Path to the |
297 | .Xr dhclient 8 | |
298 | program (default | |
717e8ef7 | 299 | .Pa /sbin/dhclient ) . |
445243bf | 300 | .It Va dhclient_flags |
984263bc | 301 | .Pq Vt str |
4eba35c8 AL |
302 | Additional flags to pass to the |
303 | .Xr dhclient 8 | |
304 | program. | |
305 | .It Va dhcpcd_enable | |
306 | .Pq Vt bool | |
307 | Set to | |
308 | .Dq Li YES | |
309 | to run | |
310 | .Xr dhcpcd 8 | |
311 | in master mode (i.e., configure all available Ethernet interfaces) at startup. | |
312 | .It Va dhcpcd_program | |
313 | .Pq Vt str | |
314 | Path to the | |
315 | .Xr dhcpcd 8 | |
316 | program (default | |
317 | .Pa /sbin/dhcpcd ) . | |
318 | .It Va dhcpcd_flags | |
319 | .Pq Vt str | |
320 | Additional flags to pass to the | |
321 | .Xr dhcpcd 8 | |
322 | program. | |
d7d1b3cd AL |
323 | The default value is |
324 | .Fl b , | |
325 | i.e., tell | |
326 | .Xr dhcpcd 8 | |
327 | to go to background immediately. | |
27e9fed5 SW |
328 | .It Va pf_enable |
329 | .Pq Vt bool | |
330 | Set to | |
331 | .Dq Li YES | |
332 | to load | |
333 | .Xr pf 4 | |
334 | at startup. | |
335 | If the kernel was not built with | |
336 | .Cd "device pf" , | |
337 | the | |
338 | .Pa pf.ko | |
339 | kernel module will be loaded. | |
340 | See also | |
1cb3b2e4 | 341 | .Va firewall_enable . |
27e9fed5 SW |
342 | .It Va pf_rules |
343 | .Pq Vt str | |
344 | Path to the | |
345 | .Xr pf 4 | |
346 | ruleset definition file. | |
347 | .It Va pf_program | |
348 | .Pq Vt str | |
349 | Path to | |
350 | .Xr pfctl 8 . | |
351 | .It Va pf_flags | |
352 | .Pq Vt str | |
353 | If | |
354 | .Va pf_enable | |
355 | is set to | |
356 | .Dq Li YES , | |
357 | these are the flags to pass to | |
358 | .Xr pfctl 8 | |
359 | when loading the ruleset. | |
360 | .It Va pflog_enable | |
361 | .Pq Vt bool | |
362 | Set this to | |
363 | .Dq Li YES | |
364 | to enable | |
365 | .Xr pflogd 8 | |
366 | which logs packets from | |
367 | .Xr pf 4 . | |
368 | .It Va pflog_logfile | |
369 | .Pq Vt str | |
370 | If | |
371 | .Va pflog_enable | |
372 | is set to | |
373 | .Dq Li YES | |
374 | this specifies the path of the log file. | |
375 | .It Va pflog_program | |
376 | .Pq Vt str | |
377 | Path to | |
378 | .Xr pflogd 8 . | |
379 | .It Va pflog_flags | |
380 | .Pq Vt str | |
381 | If | |
382 | .Va pflog_enable | |
383 | is set to | |
384 | .Dq Li YES , | |
385 | these are the flags to pass to | |
386 | .Xr pflogd 8 . | |
984263bc MD |
387 | .It Va firewall_enable |
388 | .Pq Vt bool | |
389 | Set to | |
445243bf | 390 | .Dq Li YES |
984263bc MD |
391 | to load firewall rules at startup. |
392 | If the kernel was not built with | |
445243bf RG |
393 | .Cd "options IPFIREWALL" , |
394 | the | |
395 | .Pa ipfw.ko | |
984263bc MD |
396 | kernel module will be loaded. |
397 | See also | |
1cb3b2e4 | 398 | .Va pf_enable . |
445243bf RG |
399 | .It Va ipv6_firewall_enable |
400 | .Pq Vt bool | |
401 | The IPv6 equivalent of | |
402 | .Va firewall_enable . | |
403 | Set to | |
404 | .Dq Li YES | |
405 | to load IPv6 firewall rules at startup. | |
406 | If the kernel was not built with | |
407 | .Cd "options IPV6FIREWALL" , | |
408 | the | |
409 | .Pa ip6fw.ko | |
410 | kernel module will be loaded. | |
984263bc MD |
411 | .It Va firewall_script |
412 | .Pq Vt str | |
717e8ef7 TN |
413 | The full path to the firewall script to run |
414 | (default | |
415 | .Pa /etc/rc.firewall ) . | |
445243bf RG |
416 | .It Va ipv6_firewall_script |
417 | .Pq Vt str | |
418 | The IPv6 equivalent of | |
419 | .Va firewall_script . | |
984263bc MD |
420 | .It Va firewall_type |
421 | .Pq Vt str | |
422 | Names the firewall type from the selection in | |
423 | .Pa /etc/rc.firewall , | |
445243bf RG |
424 | or the file which contains the local firewall ruleset. |
425 | Valid selections from | |
426 | .Pa /etc/rc.firewall | |
427 | are: | |
428 | .Pp | |
429 | .Bl -tag -width ".Li simple" -compact | |
430 | .It Li open | |
431 | unrestricted IP access | |
432 | .It Li closed | |
433 | all IP services disabled, except via | |
434 | .Dq Li lo0 | |
435 | .It Li client | |
d7b5790d | 436 | basic protection for a workstation on a LAN |
445243bf | 437 | .It Li simple |
d7b5790d SW |
438 | alias for |
439 | .Li client . | |
445243bf RG |
440 | .El |
441 | .Pp | |
225e0ed5 | 442 | If a filename is specified, the full path must be given. |
d7b5790d | 443 | .It Va firewall_trusted_nets |
9534e380 | 444 | .Pq Vt str |
d7b5790d SW |
445 | List of trusted networks (if |
446 | .Va firewall_type | |
447 | is set to | |
448 | .Li client ) . | |
449 | .It Va firewall_trusted_interfaces | |
9534e380 | 450 | .Pq Vt str |
d7b5790d SW |
451 | List of trusted network interfaces (if |
452 | .Va firewall_type | |
453 | is set to | |
454 | .Li client ) . | |
455 | .It Va firewall_allowed_icmp_types | |
9534e380 | 456 | .Pq Vt str |
d7b5790d SW |
457 | List of allowed ICMP types (if |
458 | .Va firewall_type | |
459 | is set to | |
460 | .Li client ) . | |
461 | .It Va firewall_open_tcp_ports | |
9534e380 | 462 | .Pq Vt str |
d7b5790d SW |
463 | List of TCP ports to open (if |
464 | .Va firewall_type | |
465 | is set to | |
466 | .Li client ) . | |
467 | .It Va firewall_open_udp_ports | |
9534e380 | 468 | .Pq Vt str |
d7b5790d SW |
469 | List of UDP ports to open (if |
470 | .Va firewall_type | |
471 | is set to | |
472 | .Li client ) . | |
445243bf RG |
473 | .It Va ipv6_firewall_type |
474 | .Pq Vt str | |
475 | The IPv6 equivalent of | |
476 | .Va firewall_type . | |
984263bc MD |
477 | .It Va firewall_quiet |
478 | .Pq Vt bool | |
479 | Set to | |
445243bf RG |
480 | .Dq Li YES |
481 | to disable the display of firewall rules on the console during boot. | |
482 | .It Va ipv6_firewall_quiet | |
483 | .Pq Vt bool | |
484 | The IPv6 equivalent of | |
485 | .Va firewall_quiet . | |
984263bc MD |
486 | .It Va firewall_logging |
487 | .Pq Vt bool | |
488 | Set to | |
445243bf RG |
489 | .Dq Li YES |
490 | to enable firewall event logging. | |
984263bc MD |
491 | This is equivalent to the |
492 | .Dv IPFIREWALL_VERBOSE | |
493 | kernel option. | |
445243bf RG |
494 | .It Va ipv6_firewall_logging |
495 | .Pq Vt bool | |
496 | The IPv6 equivalent of | |
497 | .Va firewall_logging . | |
984263bc MD |
498 | .It Va firewall_flags |
499 | .Pq Vt str | |
500 | Flags passed to | |
501 | .Xr ipfw 8 | |
502 | if | |
503 | .Va firewall_type | |
504 | specifies a filename. | |
445243bf RG |
505 | .It Va ipv6_firewall_flags |
506 | .Pq Vt str | |
507 | The IPv6 equivalent of | |
508 | .Va firewall_flags . | |
6fd380c2 AL |
509 | .It Va ipfw3_enable |
510 | .Pq Vt bool | |
511 | Set to | |
512 | .Dq Li YES | |
513 | to enable | |
514 | .Xr ipfw3 8 . | |
515 | .It Va ipfw3_program | |
516 | .Pq Vt str | |
517 | Path to | |
518 | .Xr ipfw3 8 . | |
519 | .It Va ipfw3_script | |
520 | .Pq Vt str | |
521 | The full path to the shell script to run to set up the ipfw3 | |
522 | firewall rules (default | |
523 | .Pa /etc/ipfw3.rules ) . | |
524 | .It Va ipfw3_modules | |
525 | .Pq Vt str | |
526 | List of ipfw3 modules to be loaded before executing the above | |
527 | .Va ipfw3_script . | |
528 | (default | |
529 | .Dq Li ipfw3 ipfw3_basic ) . | |
984263bc MD |
530 | .It Va natd_program |
531 | .Pq Vt str | |
532 | Path to | |
533 | .Xr natd 8 . | |
534 | .It Va natd_enable | |
535 | .Pq Vt bool | |
536 | Set to | |
445243bf RG |
537 | .Dq Li YES |
538 | to enable | |
539 | .Xr natd 8 . | |
984263bc MD |
540 | .Va firewall_enable |
541 | must also be set to | |
445243bf | 542 | .Dq Li YES , |
984263bc MD |
543 | and |
544 | .Xr divert 4 | |
545 | sockets must be enabled in the kernel. | |
546 | .It Va natd_interface | |
547 | .Pq Vt str | |
445243bf RG |
548 | This is the name of the public interface on which |
549 | .Xr natd 8 | |
550 | should run. | |
984263bc MD |
551 | The interface may be given as an interface name or as an IP address. |
552 | .It Va natd_flags | |
553 | .Pq Vt str | |
445243bf RG |
554 | Additional |
555 | .Xr natd 8 | |
556 | flags should be placed here. | |
557 | The | |
984263bc MD |
558 | .Fl n |
559 | or | |
560 | .Fl a | |
561 | flag is automatically added with the above | |
562 | .Va natd_interface | |
563 | as an argument. | |
984263bc MD |
564 | .It Va tcp_extensions |
565 | .Pq Vt bool | |
566 | Set to | |
445243bf | 567 | .Dq Li YES |
984263bc | 568 | by default. |
445243bf RG |
569 | Setting this to |
570 | .Dq Li NO | |
571 | disables certain TCP options as described by | |
984263bc | 572 | .Rs |
445243bf | 573 | .%T "RFC 1323" |
984263bc MD |
574 | .Re |
575 | Setting this to | |
445243bf | 576 | .Dq Li NO |
984263bc MD |
577 | might help remedy such problems with connections as randomly hanging |
578 | or other weird behavior. | |
225e0ed5 | 579 | Some network devices are known to be broken with respect to these options. |
984263bc MD |
580 | .It Va log_in_vain |
581 | .Pq Vt int | |
582 | Set to 0 by default. | |
583 | The | |
584 | .Xr sysctl 8 | |
585 | variables, | |
445243bf | 586 | .Va net.inet.tcp.log_in_vain |
984263bc | 587 | and |
445243bf | 588 | .Va net.inet.udp.log_in_vain , |
984263bc MD |
589 | as described in |
590 | .Xr tcp 4 | |
591 | and | |
592 | .Xr udp 4 , | |
593 | are set to the given value. | |
594 | .It Va tcp_keepalive | |
595 | .Pq Vt bool | |
596 | Set to | |
445243bf | 597 | .Dq Li YES |
984263bc | 598 | by default. |
445243bf RG |
599 | Setting to |
600 | .Dq Li NO | |
601 | will disable probing idle TCP connections to verify that the | |
984263bc MD |
602 | peer is still up and reachable. |
603 | .It Va tcp_drop_synfin | |
604 | .Pq Vt bool | |
605 | Set to | |
445243bf | 606 | .Dq Li NO |
984263bc | 607 | by default. |
445243bf RG |
608 | Setting to |
609 | .Dq Li YES | |
610 | will cause the kernel to ignore TCP frames that have both | |
984263bc | 611 | the SYN and FIN flags set. |
225e0ed5 SW |
612 | This prevents OS fingerprinting, but may break some legitimate applications. |
613 | This option is only available if the kernel was built with the | |
984263bc MD |
614 | .Dv TCP_DROP_SYNFIN |
615 | option. | |
616 | .It Va icmp_drop_redirect | |
617 | .Pq Vt bool | |
618 | Set to | |
445243bf | 619 | .Dq Li NO |
984263bc | 620 | by default. |
445243bf RG |
621 | Setting to |
622 | .Dq Li YES | |
623 | will cause the kernel to ignore ICMP REDIRECT packets. | |
624 | Refer to | |
625 | .Xr icmp 4 | |
626 | for more information. | |
984263bc MD |
627 | .It Va icmp_log_redirect |
628 | .Pq Vt bool | |
629 | Set to | |
445243bf | 630 | .Dq Li NO |
984263bc | 631 | by default. |
445243bf RG |
632 | Setting to |
633 | .Dq Li YES | |
634 | will cause the kernel to log ICMP REDIRECT packets. | |
984263bc MD |
635 | Note that |
636 | the log messages are not rate-limited, so this option should only be used | |
637 | for troubleshooting networks. | |
445243bf RG |
638 | Refer to |
639 | .Xr icmp 4 | |
640 | for more information. | |
641 | .It Va icmp_bmcastecho | |
642 | .Pq Vt bool | |
643 | Set to | |
644 | .Dq Li YES | |
645 | to respond to broadcast or multicast ICMP ping packets. | |
646 | Refer to | |
647 | .Xr icmp 4 | |
648 | for more information. | |
649 | .It Va ip_portrange_first | |
650 | .Pq Vt int | |
651 | If not set to | |
652 | .Dq Li NO , | |
653 | this is the first port in the default portrange. | |
654 | Refer to | |
655 | .Xr ip 4 | |
656 | for more information. | |
657 | .It Va ip_portrange_last | |
658 | .Pq Vt int | |
659 | If not set to | |
660 | .Dq Li NO , | |
661 | this is the last port in the default portrange. | |
662 | Refer to | |
663 | .Xr ip 4 | |
664 | for more information. | |
717e8ef7 TN |
665 | .\" |
666 | .It Va ifconfig_ Ns Aq Ar interface | |
984263bc | 667 | .Pq Vt str |
717e8ef7 TN |
668 | Configuration for |
669 | .Dq interface . | |
670 | Typically includes IP address. | |
445243bf RG |
671 | Assuming that the interface in question was |
672 | .Li ed0 , | |
225e0ed5 | 673 | it might look something like this: |
984263bc | 674 | .Bd -literal |
717e8ef7 | 675 | ifconfig_ed0="inet 10.0.0.1 netmask 0xffff0000" |
984263bc MD |
676 | .Ed |
677 | .Pp | |
445243bf RG |
678 | If the |
679 | .Pa /etc/start_if. Ns Aq Ar interface | |
680 | file is present, it is read and executed by the | |
681 | .Xr sh 1 | |
225e0ed5 | 682 | interpreter before configuring the interface as specified in the |
445243bf RG |
683 | .Va ifconfig_ Ns Aq Ar interface |
684 | and | |
685 | .Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n | |
686 | variables. | |
687 | .Pp | |
f26c267a SW |
688 | It is possible to bring up an interface with DHCP by adding |
689 | .Dq Li DHCP | |
690 | to the | |
984263bc | 691 | .Va ifconfig_ Ns Aq Ar interface |
f26c267a | 692 | variable. |
445243bf RG |
693 | For instance, to initialize the |
694 | .Li ed0 | |
225e0ed5 | 695 | device via DHCP, it is possible to use something like: |
984263bc MD |
696 | .Bd -literal |
697 | ifconfig_ed0="DHCP" | |
698 | .Ed | |
f26c267a | 699 | .Pp |
4fe6477b | 700 | If a |
ccb8cebe AH |
701 | .Va vlans_ Ns Aq Ar interface |
702 | variable is set, | |
703 | a | |
704 | .Xr vlan 4 | |
705 | interface will be created for each item in the list with the | |
706 | .Ar vlandev | |
707 | argument set to | |
708 | .Ar interface . | |
709 | If a vlan interface's name is a number, | |
710 | then that number is used as the vlan tag and the new vlan interface is | |
711 | named | |
712 | .Ar interface . Ns Ar tag . | |
713 | Otherwise, | |
714 | the vlan tag must be specified via a | |
715 | .Va vlan | |
716 | parameter in the | |
717 | .Va create_args_ Ns Aq Ar interface | |
718 | variable. | |
719 | .Pp | |
720 | To create a vlan device named | |
721 | .Li em0.101 | |
722 | on | |
723 | .Li em0 | |
724 | with the vlan tag 101 and the optional the IPv4 address 192.0.2.1/24: | |
725 | .Bd -literal | |
726 | vlans_em0="101" | |
727 | ifconfig_em0_101="inet 192.0.2.1/24" | |
728 | .Ed | |
729 | .Pp | |
730 | To create a vlan device named | |
731 | .Li myvlan | |
732 | on | |
733 | .Li em0 | |
734 | with the vlan tag 102: | |
735 | .Bd -literal | |
736 | vlans_em0="myvlan" | |
737 | create_args_myvlan="vlan 102" | |
738 | .Ed | |
739 | .Pp | |
740 | If a | |
4fe6477b MS |
741 | .Va wlans_ Ns Aq Ar interface |
742 | variable is set, | |
743 | an | |
744 | .Xr wlan 4 | |
745 | interface will be created for each item in the list with the | |
746 | .Ar wlandev | |
747 | argument set to | |
748 | .Ar interface . | |
749 | Further wlan cloning arguments may be passed to the | |
750 | .Xr ifconfig 8 | |
751 | .Cm create | |
752 | command by setting the | |
753 | .Va create_args_ Ns Aq Ar interface | |
754 | variable. | |
755 | One or more | |
756 | .Xr wlan 4 | |
757 | devices must be created for each wireless devices as of | |
758 | .Dx 2.5 . | |
759 | Debugging flags for | |
760 | .Xr wlan 4 | |
761 | devices as set by | |
762 | .Xr wlandebug 8 | |
763 | may be specified with an | |
764 | .Va wlandebug_ Ns Aq Ar interface | |
765 | variable. | |
766 | The contents of this variable will be passed directly to | |
767 | .Xr wlandebug 8 . | |
768 | .Pp | |
f26c267a SW |
769 | Also, if your interface needs WPA authentication, it is possible to add |
770 | .Dq Li WPA | |
771 | to the | |
772 | .Va ifconfig_ Ns Aq Ar interface | |
773 | variable. | |
e7e53421 | 774 | This will start |
bd3478c4 | 775 | .Xr wpa_supplicant 8 . |
e7e53421 MS |
776 | See |
777 | .Xr wpa_supplicant.conf 5 | |
778 | for configuring authentication information. | |
8716355d DF |
779 | But see also |
780 | .Va wpa_supplicant_enable . | |
f26c267a SW |
781 | .Pp |
782 | Finally, you can add | |
783 | .Xr ifconfig 8 | |
784 | options in this variable, in addition to the | |
785 | .Pa /etc/start_if. Ns Aq Ar interface | |
786 | file. | |
787 | For instance, to initialize the | |
788 | .Li wi0 | |
789 | device via DHCP, using WPA authentication and 802.11b mode, it is | |
790 | possible to use something like: | |
791 | .Bd -literal | |
62f17e14 SW |
792 | wlans_wi0="wlan0" |
793 | ifconfig_wlan0="up DHCP WPA mode 11b" | |
f26c267a | 794 | .Ed |
717e8ef7 TN |
795 | .It Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n |
796 | .Pq Vt str | |
797 | Configuration to establish an additional network address for | |
798 | .Dq interface . | |
799 | Assuming that the interface in question was | |
800 | .Li ed0 , | |
801 | it might look something like this: | |
802 | .Bd -literal | |
803 | ifconfig_ed0_alias0="inet 127.0.0.253 netmask 0xffffffff" | |
804 | ifconfig_ed0_alias1="inet 127.0.0.254 netmask 0xffffffff" | |
805 | .Ed | |
806 | .Pp | |
807 | And so on. | |
808 | For each | |
809 | .Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n | |
810 | entry that is found, its contents are passed to | |
811 | .Xr ifconfig 8 . | |
812 | Execution stops at the first unsuccessful access, so if | |
813 | something like this is present: | |
814 | .Bd -literal | |
815 | ifconfig_ed0_alias0="inet 127.0.0.251 netmask 0xffffffff" | |
816 | ifconfig_ed0_alias1="inet 127.0.0.252 netmask 0xffffffff" | |
817 | ifconfig_ed0_alias2="inet 127.0.0.253 netmask 0xffffffff" | |
818 | ifconfig_ed0_alias4="inet 127.0.0.254 netmask 0xffffffff" | |
819 | .Ed | |
820 | .Pp | |
821 | Then note that alias4 would | |
822 | .Em not | |
823 | be added since the search would stop with the missing alias3 entry. | |
717e8ef7 TN |
824 | .It Va ifconfig_ Ns Ao Ar interface Ac Ns Va _name |
825 | .Pq Vt str | |
826 | New name for | |
827 | .Dq interface . | |
828 | It is possible to rename interface by doing: | |
f26c267a SW |
829 | .Bd -literal |
830 | ifconfig_ed0_name="net0" | |
831 | ifconfig_net0="inet 10.0.0.1 netmask 0xffff0000" | |
832 | .Ed | |
ef976ecc AL |
833 | .It Va netif_enable |
834 | .Pq Vt bool | |
835 | Set to | |
836 | .Dq Li YES | |
837 | by default. | |
838 | Setting to | |
839 | .Dq Li NO | |
840 | will disable the configuration of network interfaces. | |
717e8ef7 TN |
841 | .It Va network_interfaces |
842 | .Pq Vt str | |
843 | The list of network interfaces to configure on this host, | |
844 | or | |
845 | .Dq Li auto | |
846 | to configure all network interfaces | |
847 | (default | |
848 | .Dq Li auto ) . | |
849 | For example, if the only network devices to be configured are the loopback device | |
850 | .Pq Li lo0 | |
851 | and a NIC using the | |
79612498 | 852 | .Xr em 4 |
717e8ef7 | 853 | driver, this could be set to |
79612498 | 854 | .Dq Li "lo0 em0" . |
717e8ef7 TN |
855 | An |
856 | .Va ifconfig_ Ns Aq Ar interface | |
857 | variable is assumed to exist for each value of | |
858 | .Ar interface . | |
445243bf RG |
859 | .It Va ipv6_network_interfaces |
860 | .Pq Vt str | |
861 | This is the IPv6 equivalent of | |
862 | .Va network_interfaces . | |
863 | Instead of setting the ifconfig variables as | |
864 | .Va ifconfig_ Ns Aq Ar interface | |
865 | they should be set as | |
866 | .Va ipv6_ifconfig_ Ns Aq Ar interface . | |
867 | Aliases should be set as | |
868 | .Va ipv6_ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n . | |
445243bf RG |
869 | Interfaces that do not have a |
870 | .Va ipv6_ifconfig_ Ns Aq Ar interface | |
871 | setting will be auto configured by | |
872 | .Xr rtsol 8 | |
873 | if the | |
874 | .Va ipv6_gateway_enable | |
875 | is set to | |
876 | .Dq Li NO . | |
877 | Note that the IPv6 networking code does not support the | |
878 | .Pa /etc/start_if. Ns Aq Ar interface | |
879 | files. | |
717e8ef7 TN |
880 | .It Va ipv6_prefix_ Ns Aq Ar interface |
881 | .Pq Vt str | |
882 | Assign prefix to | |
883 | .Ar interface , | |
884 | prefixlen 64 is used. | |
445243bf RG |
885 | .It Va ipv6_default_interface |
886 | .Pq Vt str | |
887 | If not set to | |
888 | .Dq Li NO , | |
889 | this is the default output interface for scoped addresses. | |
890 | Now this works only for IPv6 link local multicast addresses. | |
03137732 AL |
891 | .It Va ip6addrctl_enable |
892 | .Pq Vt bool | |
d1dbb0fb | 893 | This variable is to enable configuring the default address selection policy table |
03137732 | 894 | .Pq RFC 3484 . |
d1dbb0fb AL |
895 | The default value is |
896 | .Dq Li YES , | |
817cf585 | 897 | and the policy table to be installed is specified by the |
03137732 | 898 | .Va ip6addrctl_policy |
d1dbb0fb AL |
899 | variable below. |
900 | .It Va ip6addrctl_policy | |
901 | .Pq Vt str | |
902 | This variable specifies the policy table to be installed, | |
903 | and can be one of the following keywords: | |
03137732 AL |
904 | .Dq Li ipv4_prefer , |
905 | .Dq Li ipv6_prefer , | |
906 | or | |
d1dbb0fb AL |
907 | .Dq Li AUTO |
908 | (default). | |
03137732 AL |
909 | .Pp |
910 | If | |
911 | .Dq Li ipv4_prefer | |
912 | or | |
913 | .Dq Li ipv6_prefer | |
914 | is specified, | |
915 | .Xr ip6addrctl 8 | |
916 | installs a pre-defined policy table described in Section 2.1 | |
917 | .Pq IPv6-preferred | |
918 | or 10.3 | |
919 | .Pq IPv4-preferred | |
920 | of RFC 3484. | |
921 | .Pp | |
922 | If | |
923 | .Dq Li AUTO | |
924 | is specified, it attempts to read a file | |
925 | .Pa /etc/ip6addrctl.conf | |
926 | first. | |
927 | If this file is found, | |
928 | .Xr ip6addrctl 8 | |
929 | reads and installs it. | |
930 | If not found, a policy is automatically set | |
931 | according to | |
932 | .Va ipv6_enable | |
933 | variable; if the variable is set to | |
934 | .Dq Li YES | |
935 | the IPv6-preferred one is used. | |
936 | Otherwise IPv4-preferred. | |
d1dbb0fb AL |
937 | .It Va ip6addrctl_verbose |
938 | .Pq Vt bool | |
939 | If set to | |
940 | .Dq Li YES , | |
941 | print the installed policy table after configuring. | |
942 | The default value is | |
943 | .Dq Li NO . | |
984263bc MD |
944 | .It Va cloned_interfaces |
945 | .Pq Vt str | |
946 | Set to the list of clonable network interfaces to create on this host. | |
947 | Entries in | |
948 | .Va cloned_interfaces | |
949 | are automatically appended to | |
950 | .Va network_interfaces | |
951 | for configuration. | |
952 | .It Va gif_interfaces | |
953 | .Pq Vt str | |
954 | Set to the list of | |
955 | .Xr gif 4 | |
956 | tunnel interfaces to configure on this host. | |
957 | A | |
958 | .Va gifconfig_ Ns Aq Ar interface | |
959 | variable is assumed to exist for each value of | |
960 | .Ar interface . | |
961 | The value of this variable is used to configure the link layer of the | |
962 | tunnel according to the syntax of the | |
963 | .Cm tunnel | |
964 | option to | |
965 | .Xr ifconfig 8 . | |
225e0ed5 | 966 | Additionally, this option ensures that each listed interface is created via the |
984263bc MD |
967 | .Cm create |
968 | option to | |
969 | .Xr ifconfig 8 | |
970 | before attempting to configure it. | |
445243bf RG |
971 | .It Va sppp_interfaces |
972 | .Pq Vt str | |
973 | Set to the list of | |
974 | .Xr sppp 4 | |
975 | interfaces to configure on this host. | |
976 | A | |
977 | .Va spppconfig_ Ns Aq Ar interface | |
978 | variable is assumed to exist for each value of | |
979 | .Ar interface . | |
980 | Each interface should also be configured by a general | |
981 | .Va ifconfig_ Ns Aq Ar interface | |
982 | setting. | |
983 | Refer to | |
984 | .Xr spppcontrol 8 | |
985 | for more information about available options. | |
984263bc MD |
986 | .It Va ppp_enable |
987 | .Pq Vt bool | |
988 | If set to | |
445243bf | 989 | .Dq Li YES , |
984263bc MD |
990 | run the |
991 | .Xr ppp 8 | |
992 | daemon. | |
993 | .It Va ppp_mode | |
994 | .Pq Vt str | |
995 | Mode in which to run the | |
996 | .Xr ppp 8 | |
445243bf RG |
997 | daemon. |
998 | Accepted modes are | |
999 | .Dq Li auto , | |
1000 | .Dq Li ddial , | |
1001 | .Dq Li direct | |
984263bc | 1002 | and |
445243bf | 1003 | .Dq Li dedicated . |
984263bc MD |
1004 | See the manual for a full description. |
1005 | .It Va ppp_nat | |
1006 | .Pq Vt bool | |
1007 | If set to | |
445243bf RG |
1008 | .Dq Li YES , |
1009 | enables network address translation. | |
984263bc MD |
1010 | Used in conjunction with |
1011 | .Va gateway_enable | |
1012 | allows hosts on private network addresses access to the Internet using | |
1013 | this host as a network address translating router. | |
1014 | .It Va ppp_profile | |
1015 | .Pq Vt str | |
1016 | The name of the profile to use from | |
1017 | .Pa /etc/ppp/ppp.conf . | |
519061ed AH |
1018 | Also used for per-profile overrides of |
1019 | .Va ppp_ Ns Ao Ar profile Ac Ns _unit . | |
1020 | Where the profile contains any of the characters | |
1021 | .Dq Li .-/+ | |
1022 | they are translated to | |
1023 | .Dq Li _ | |
1024 | for the purposes of the override variable names. | |
1025 | .It Va ppp_ Ns Ao Ar profile Ac Ns _unit | |
1026 | .Pq Vt int | |
1027 | Set the unit number to be used for this profile. | |
1028 | See the manual description of | |
1029 | .Fl unit Ns Ar N | |
1030 | in | |
1031 | .Xr ppp 8 | |
1032 | for details. | |
984263bc MD |
1033 | .It Va ppp_user |
1034 | .Pq Vt str | |
445243bf RG |
1035 | The name of the user under which |
1036 | .Xr ppp 8 | |
1037 | should be started. | |
225e0ed5 | 1038 | By default, |
445243bf RG |
1039 | .Xr ppp 8 |
1040 | is started as | |
1041 | .Dq Li root . | |
451640b7 AL |
1042 | .It Va wg_enable |
1043 | .Pq Vt bool | |
1044 | Set to | |
1045 | .Dq Li YES | |
1046 | to configure the | |
1047 | .Xr wg 4 | |
1048 | interfaces specified in | |
1049 | .Va wg_interfaces | |
1050 | below. | |
1051 | .It Va wg_interfaces | |
1052 | .Pq Vt str | |
1053 | Specify the list of | |
1054 | .Xr wg 4 | |
1055 | interfaces to configure. | |
1056 | Each listed interface is configured according to its config file at | |
1057 | .Pa /etc/wireguard/ Ns Ao Ar interface Ac Ns Pa .conf . | |
1058 | Refer to | |
1059 | .Xr wg.conf 5 | |
1060 | for more information. | |
1061 | .It Va wg_config_dir | |
1062 | .Pq Vt str | |
1063 | Specify the directory to find the config files for the | |
1064 | .Xr wg 4 | |
1065 | interfaces listed in | |
1066 | .Va wg_interfaces . | |
1067 | The default is | |
1068 | .Pa /etc/wireguard . | |
984263bc MD |
1069 | .It Va fsck_y_enable |
1070 | .Pq Vt bool | |
1071 | If set to | |
445243bf | 1072 | .Dq Li YES , |
984263bc | 1073 | .Xr fsck 8 |
445243bf RG |
1074 | will be run with the |
1075 | .Fl y | |
225e0ed5 | 1076 | flag if the initial preen of the file systems fails. |
445243bf RG |
1077 | .It Va netfs_types |
1078 | .Pq Vt str | |
1079 | List of file system types that are network-based. | |
1080 | This list should generally not be modified by end users. | |
1081 | Use | |
1082 | .Va extra_netfs_types | |
1083 | instead. | |
1084 | .It Va extra_netfs_types | |
1085 | .Pq Vt str | |
1086 | If set to something other than | |
1087 | .Dq Li NO | |
225e0ed5 | 1088 | (the default), this variable extends the list of file system types |
445243bf RG |
1089 | for which automatic mounting at startup by |
1090 | .Xr rc 8 | |
1091 | should be delayed until the network is initialized. | |
1092 | It should contain | |
1093 | a whitespace-separated list of network file system descriptor pairs, | |
1094 | each consisting of a file system type as passed to | |
1095 | .Xr mount 8 | |
225e0ed5 | 1096 | and a human-readable, one-word description, joined with a colon |
445243bf RG |
1097 | .Pq Ql \&: . |
1098 | Extending the default list in this way is only necessary | |
1099 | when third party file system types are used. | |
a46854c7 MS |
1100 | .It Va devfs_config_files |
1101 | .Pq Vt str | |
1102 | This option is used to specify a list of configuration files containing | |
1103 | .Xr devfs 5 | |
1104 | rules that will be applied by | |
1105 | .Xr devfsctl 8 | |
1106 | in the order in which they are specified and must include the full path | |
1107 | to the file. | |
80d125ea AL |
1108 | .It Va tmpfs_var_run |
1109 | .Pq Vt bool | |
1110 | If set to | |
1111 | .Dq Li YES , | |
1112 | a | |
1113 | .Xr tmpfs 5 | |
1114 | will be mounted at | |
1115 | .Pa /var/run . | |
1116 | Necessary directories under there will be automatically created. | |
1117 | .It Va tmpfs_tmp | |
1118 | .Pq Vt bool | |
1119 | If set to | |
1120 | .Dq Li YES , | |
1121 | a | |
1122 | .Xr tmpfs 5 | |
1123 | will be mounted at | |
1124 | .Pa /tmp . | |
984263bc MD |
1125 | .It Va syslogd_enable |
1126 | .Pq Vt bool | |
1127 | If set to | |
445243bf | 1128 | .Dq Li YES , |
984263bc MD |
1129 | run the |
1130 | .Xr syslogd 8 | |
1131 | daemon. | |
1132 | .It Va syslogd_program | |
1133 | .Pq Vt str | |
1134 | Path to | |
1135 | .Xr syslogd 8 | |
1136 | (default | |
1137 | .Pa /usr/sbin/syslogd ) . | |
1138 | .It Va syslogd_flags | |
1139 | .Pq Vt str | |
1140 | If | |
1141 | .Va syslogd_enable | |
1142 | is set to | |
445243bf | 1143 | .Dq Li YES , |
984263bc MD |
1144 | these are the flags to pass to |
1145 | .Xr syslogd 8 . | |
1146 | .It Va inetd_enable | |
1147 | .Pq Vt bool | |
1148 | If set to | |
445243bf | 1149 | .Dq Li YES , |
984263bc MD |
1150 | run the |
1151 | .Xr inetd 8 | |
1152 | daemon. | |
1153 | .It Va inetd_program | |
1154 | .Pq Vt str | |
1155 | Path to | |
1156 | .Xr inetd 8 | |
1157 | (default | |
1158 | .Pa /usr/sbin/inetd ) . | |
1159 | .It Va inetd_flags | |
1160 | .Pq Vt str | |
1161 | If | |
1162 | .Va inetd_enable | |
1163 | is set to | |
445243bf | 1164 | .Dq Li YES , |
984263bc MD |
1165 | these are the flags to pass to |
1166 | .Xr inetd 8 . | |
984263bc MD |
1167 | .It Va rwhod_enable |
1168 | .Pq Vt bool | |
1169 | If set to | |
445243bf | 1170 | .Dq Li YES , |
984263bc MD |
1171 | run the |
1172 | .Xr rwhod 8 | |
1173 | daemon at boot time. | |
1174 | .It Va rwhod_flags | |
1175 | .Pq Vt str | |
1176 | If | |
1177 | .Va rwhod_enable | |
1178 | is set to | |
445243bf | 1179 | .Dq Li YES , |
984263bc | 1180 | these are the flags to pass to it. |
984263bc MD |
1181 | .It Va update_motd |
1182 | .Pq Vt bool | |
1183 | If set to | |
445243bf | 1184 | .Dq Li YES , |
984263bc | 1185 | .Pa /etc/motd |
225e0ed5 | 1186 | will be updated at boot time to reflect the kernel release being run. |
445243bf RG |
1187 | If set to |
1188 | .Dq Li NO , | |
984263bc | 1189 | .Pa /etc/motd |
445243bf | 1190 | will not be updated. |
984263bc MD |
1191 | .It Va nfs_client_enable |
1192 | .Pq Vt bool | |
1193 | If set to | |
445243bf | 1194 | .Dq Li YES , |
14791e19 | 1195 | setup NFS client parameters at boot time. |
984263bc MD |
1196 | .It Va nfs_access_cache |
1197 | .Pq Vt int | |
1198 | If | |
1199 | .Va nfs_client_enable | |
1200 | is set to | |
445243bf | 1201 | .Dq Li YES , |
984263bc | 1202 | this can be set to |
445243bf | 1203 | .Dq Li 0 |
984263bc | 1204 | to disable NFS ACCESS RPC caching, or to the number of seconds for which |
225e0ed5 | 1205 | NFS ACCESS results should be cached. |
d615ff4f | 1206 | A value of 2-10 seconds will substantially reduce network traffic for |
225e0ed5 SW |
1207 | many NFS operations. |
1208 | The default is 5 seconds. | |
1209 | Note that the attribute cache holds stat information only. | |
1210 | The NFS data cache is independent of the attribute cache and is only | |
1211 | invalidated when the client detects that the server has modified the | |
1212 | underlying file. | |
1213 | This value specifies a maximum timeout. | |
1214 | The NFS client will automatically use a shorter timeout for files which | |
1215 | have been recently modified. | |
d615ff4f MD |
1216 | .It Va nfs_neg_cache |
1217 | .Pq Vt int | |
1218 | If | |
1219 | .Va nfs_client_enable | |
1220 | is set to | |
1221 | .Dq Li YES , | |
1222 | this can be set to | |
1223 | .Dq Li 0 | |
3f5e28f4 | 1224 | to disable the caching of NEGATIVE LOOKUPS (lookups of non-existent |
d615ff4f MD |
1225 | filenames), or to the number of seconds for which negative lookups should |
1226 | be cached. | |
984263bc | 1227 | A value of 2-10 seconds will substantially reduce network |
225e0ed5 SW |
1228 | traffic for many NFS operations, especially source code builds. |
1229 | The default is 3 seconds. | |
984263bc MD |
1230 | .It Va nfs_server_enable |
1231 | .Pq Vt bool | |
1232 | If set to | |
445243bf | 1233 | .Dq Li YES , |
984263bc MD |
1234 | run the NFS server daemons at boot time. |
1235 | .It Va nfs_server_flags | |
1236 | .Pq Vt str | |
1237 | If | |
1238 | .Va nfs_server_enable | |
1239 | is set to | |
445243bf | 1240 | .Dq Li YES , |
984263bc MD |
1241 | these are the flags to pass to the |
1242 | .Xr nfsd 8 | |
1243 | daemon. | |
445243bf | 1244 | .It Va mountd_enable |
984263bc MD |
1245 | .Pq Vt bool |
1246 | If set to | |
445243bf | 1247 | .Dq Li YES , |
984263bc MD |
1248 | and no |
1249 | .Va nfs_server_enable | |
1250 | is set, start | |
1251 | .Xr mountd 8 , | |
1252 | but not | |
1253 | .Xr nfsd 8 | |
1254 | daemon. | |
1255 | It is commonly needed to run CFS without real NFS used. | |
1256 | .It Va mountd_flags | |
1257 | .Pq Vt str | |
1258 | If | |
1259 | .Va mountd_enable | |
1260 | is set to | |
1261 | .Dq Li YES , | |
1262 | these are the flags to pass to the | |
445243bf | 1263 | .Xr mountd 8 |
984263bc MD |
1264 | daemon. |
1265 | .It Va weak_mountd_authentication | |
1266 | .Pq Vt bool | |
1267 | If set to | |
445243bf | 1268 | .Dq Li YES , |
225e0ed5 | 1269 | allow services like PCNFSD to make non-privileged mount requests. |
984263bc MD |
1270 | .It Va nfs_reserved_port_only |
1271 | .Pq Vt bool | |
1272 | If set to | |
445243bf | 1273 | .Dq Li YES , |
984263bc MD |
1274 | provide NFS services only on a secure port. |
1275 | .It Va nfs_bufpackets | |
1276 | .Pq Vt int | |
1277 | If set to a number, indicates the number of packets worth of | |
1278 | socket buffer space to reserve on an NFS client. | |
1279 | The kernel default is typically 4. | |
225e0ed5 SW |
1280 | Using a higher number may be useful on gigabit networks to improve performance. |
1281 | The minimum value is 2 and the maximum is 64. | |
72067a39 MD |
1282 | .It Va rpc_umntall_enable |
1283 | .Pq Vt bool | |
1284 | If set to | |
1285 | .Dq Li YES | |
1286 | (default) and we are also an NFS client, run | |
1287 | .Xr rpc.umntall 8 | |
1288 | at boot time to clear out old mounts on remote servers. | |
1289 | If set to | |
1290 | .Dq Li NO | |
1291 | then | |
1292 | .Xr rpc.umntall 8 | |
1293 | will not be run at boot time. | |
984263bc MD |
1294 | .It Va rpc_lockd_enable |
1295 | .Pq Vt bool | |
1296 | If set to | |
445243bf | 1297 | .Dq Li YES |
984263bc MD |
1298 | and also an NFS server, run |
1299 | .Xr rpc.lockd 8 | |
1300 | at boot time. | |
52163b73 SW |
1301 | .It Va rpc_lockd_flags |
1302 | .Pq Vt str | |
1303 | If | |
1304 | .Va rpc_lockd_enable | |
1305 | is set to | |
1306 | .Dq Li YES , | |
1307 | these are the flags to pass to | |
1308 | .Xr rpc.lockd 8 . | |
984263bc MD |
1309 | .It Va rpc_statd_enable |
1310 | .Pq Vt bool | |
1311 | If set to | |
445243bf | 1312 | .Dq Li YES |
984263bc MD |
1313 | and also an NFS server, run |
1314 | .Xr rpc.statd 8 | |
1315 | at boot time. | |
52163b73 SW |
1316 | .It Va rpc_statd_flags |
1317 | .Pq Vt str | |
1318 | If | |
1319 | .Va rpc_statd_enable | |
1320 | is set to | |
1321 | .Dq Li YES , | |
1322 | these are the flags to pass to | |
1323 | .Xr rpc.statd 8 . | |
445243bf | 1324 | .It Va rpcbind_program |
984263bc | 1325 | .Pq Vt str |
717e8ef7 | 1326 | Path to program for rpcbind daemon |
984263bc | 1327 | (default |
3b813696 | 1328 | .Pa /usr/sbin/rpcbind ) . |
445243bf | 1329 | .It Va rpcbind_enable |
984263bc MD |
1330 | .Pq Vt bool |
1331 | If set to | |
445243bf | 1332 | .Dq Li YES , |
717e8ef7 TN |
1333 | run |
1334 | .Va rpcbind_program | |
1335 | at boot time. | |
445243bf | 1336 | .It Va rpcbind_flags |
984263bc MD |
1337 | .Pq Vt str |
1338 | If | |
445243bf | 1339 | .Va rpcbind_enable |
984263bc | 1340 | is set to |
445243bf | 1341 | .Dq Li YES , |
717e8ef7 TN |
1342 | these are the flags to pass to |
1343 | .Va rpcbind_program . | |
445243bf | 1344 | .It Va keyserv_enable |
984263bc MD |
1345 | .Pq Vt bool |
1346 | If set to | |
445243bf RG |
1347 | .Dq Li YES , |
1348 | run the | |
1349 | .Xr keyserv 8 | |
1350 | daemon on boot for running Secure RPC. | |
1351 | .It Va keyserv_flags | |
984263bc MD |
1352 | .Pq Vt str |
1353 | If | |
445243bf | 1354 | .Va keyserv_enable |
984263bc | 1355 | is set to |
445243bf RG |
1356 | .Dq Li YES , |
1357 | these are the flags to pass to | |
1358 | .Xr keyserv 8 | |
984263bc MD |
1359 | daemon. |
1360 | .It Va pppoed_enable | |
1361 | .Pq Vt bool | |
1362 | If set to | |
445243bf RG |
1363 | .Dq Li YES , |
1364 | run the | |
984263bc MD |
1365 | .Xr pppoed 8 |
1366 | daemon at boot time to provide PPP over Ethernet services. | |
850afac2 | 1367 | .It Va pppoed_provider |
984263bc MD |
1368 | .Pq Vt str |
1369 | .Xr pppoed 8 | |
850afac2 | 1370 | listens to requests to this provider and ultimately runs |
984263bc MD |
1371 | .Xr ppp 8 |
1372 | with a | |
1373 | .Ar system | |
1374 | argument of the same name. | |
1375 | .It Va pppoed_flags | |
1376 | .Pq Vt str | |
1377 | Additional flags to pass to | |
1378 | .Xr pppoed 8 . | |
1379 | .It Va pppoed_interface | |
1380 | .Pq Vt str | |
445243bf RG |
1381 | The network interface to run |
1382 | .Xr pppoed 8 | |
1383 | on. | |
1384 | This is mandatory when | |
984263bc MD |
1385 | .Va pppoed_enable |
1386 | is set to | |
445243bf | 1387 | .Dq Li YES . |
850afac2 SW |
1388 | .It Va dntpd_enable |
1389 | .Pq Vt bool | |
1390 | If set to | |
1391 | .Dq Li YES , | |
1392 | run | |
1393 | .Xr dntpd 8 | |
1394 | at system boot time. | |
1395 | .It Va dntpd_program | |
1396 | .Pq Vt str | |
1397 | Path to | |
1398 | .Xr dntpd 8 | |
1399 | (default | |
1400 | .Pa /usr/sbin/dntpd ) . | |
1401 | .It Va dntpd_flags | |
1402 | .Pq Vt str | |
1403 | If | |
1404 | .Va dntpd_enable | |
1405 | is set to | |
1406 | .Dq Li YES , | |
1407 | these are the flags to pass to the | |
1408 | .Xr dntpd 8 | |
1409 | daemon. | |
5f834906 SW |
1410 | .It Va btconfig_enable |
1411 | .Pq Vt bool | |
1412 | If set to | |
1413 | .Dq Li YES , | |
1414 | configure Bluetooth devices via | |
1415 | .Xr btconfig 8 | |
1416 | at system boot time. | |
1417 | .It Va btconfig_devices | |
1418 | .Pq Vt str | |
1419 | If | |
1420 | .Va btconfig_enable | |
1421 | is set to | |
1422 | .Dq Li YES , | |
1423 | this is the list of Bluetooth devices to configure. | |
1424 | If | |
1425 | .Va btconfig_devices | |
1426 | is not specified, all devices known to the system will be configured. | |
1427 | A | |
1428 | .Va btconfig_ Ns Aq Ar device | |
1429 | variable can be set to specify parameters to be passed to | |
1430 | .Ar device . | |
1431 | .It Va btconfig_args | |
1432 | .Pq Vt str | |
1433 | If | |
1434 | .Va btconfig_enable | |
1435 | is set to | |
1436 | .Dq Li YES , | |
1437 | this is the list of configuration parameters to pass to all Bluetooth | |
1438 | devices. | |
1439 | .It Va sdpd_enable | |
1440 | .Pq Vt bool | |
1441 | If set to | |
1442 | .Dq Li YES , | |
1443 | run the Service Discovery Profile daemon | |
1444 | .Xr ( sdpd 8 ) | |
1445 | at system boot time. | |
1446 | .It Va sdpd_flags | |
1447 | .Pq Vt str | |
1448 | If | |
1449 | .Va sdpd_enable | |
1450 | is set to | |
1451 | .Dq Li YES , | |
1452 | these are the flags to pass to the | |
1453 | .Xr sdpd 8 | |
1454 | daemon. | |
ec4e37b7 HT |
1455 | .It Va bthcid_enable |
1456 | .Pq Vt bool | |
1457 | If set to | |
1458 | .Dq Li YES , | |
1459 | run the Bluetooth Link Key/PIN Code Manager daemon | |
1460 | .Xr ( bthcid 8 ) | |
1461 | at system boot time. | |
1462 | .It Va bthcid_flags | |
1463 | .Pq Vt str | |
1464 | If | |
1465 | .Va bthcid_enable | |
1466 | is set to | |
1467 | .Dq Li YES , | |
1468 | these are the flags to pass to the | |
1469 | .Xr bthcid 8 | |
1470 | daemon. | |
984263bc MD |
1471 | .It Va nis_client_enable |
1472 | .Pq Vt bool | |
1473 | If set to | |
445243bf RG |
1474 | .Dq Li YES , |
1475 | run the | |
984263bc MD |
1476 | .Xr ypbind 8 |
1477 | service at system boot time. | |
1478 | .It Va nis_client_flags | |
1479 | .Pq Vt str | |
1480 | If | |
1481 | .Va nis_client_enable | |
1482 | is set to | |
445243bf | 1483 | .Dq Li YES , |
984263bc MD |
1484 | these are the flags to pass to the |
1485 | .Xr ypbind 8 | |
1486 | service. | |
1487 | .It Va nis_ypset_enable | |
1488 | .Pq Vt bool | |
1489 | If set to | |
445243bf RG |
1490 | .Dq Li YES , |
1491 | run the | |
984263bc MD |
1492 | .Xr ypset 8 |
1493 | daemon at system boot time. | |
1494 | .It Va nis_ypset_flags | |
1495 | .Pq Vt str | |
1496 | If | |
1497 | .Va nis_ypset_enable | |
1498 | is set to | |
445243bf | 1499 | .Dq Li YES , |
984263bc MD |
1500 | these are the flags to pass to the |
1501 | .Xr ypset 8 | |
1502 | daemon. | |
1503 | .It Va nis_server_enable | |
1504 | .Pq Vt bool | |
1505 | If set to | |
445243bf RG |
1506 | .Dq Li YES , |
1507 | run the | |
984263bc MD |
1508 | .Xr ypserv 8 |
1509 | daemon at system boot time. | |
1510 | .It Va nis_server_flags | |
1511 | .Pq Vt str | |
1512 | If | |
1513 | .Va nis_server_enable | |
1514 | is set to | |
445243bf | 1515 | .Dq Li YES , |
984263bc MD |
1516 | these are the flags to pass to the |
1517 | .Xr ypserv 8 | |
1518 | daemon. | |
1519 | .It Va nis_ypxfrd_enable | |
1520 | .Pq Vt bool | |
1521 | If set to | |
445243bf RG |
1522 | .Dq Li YES , |
1523 | run the | |
984263bc MD |
1524 | .Xr rpc.ypxfrd 8 |
1525 | daemon at system boot time. | |
1526 | .It Va nis_ypxfrd_flags | |
1527 | .Pq Vt str | |
1528 | If | |
1529 | .Va nis_ypxfrd_enable | |
1530 | is set to | |
445243bf | 1531 | .Dq Li YES , |
984263bc MD |
1532 | these are the flags to pass to the |
1533 | .Xr rpc.ypxfrd 8 | |
1534 | daemon. | |
1535 | .It Va nis_yppasswdd_enable | |
1536 | .Pq Vt bool | |
1537 | If set to | |
445243bf RG |
1538 | .Dq Li YES , |
1539 | run the | |
984263bc MD |
1540 | .Xr rpc.yppasswdd 8 |
1541 | daemon at system boot time. | |
1542 | .It Va nis_yppasswdd_flags | |
1543 | .Pq Vt str | |
1544 | If | |
1545 | .Va nis_yppasswdd_enable | |
1546 | is set to | |
445243bf | 1547 | .Dq Li YES , |
984263bc MD |
1548 | these are the flags to pass to the |
1549 | .Xr rpc.yppasswdd 8 | |
1550 | daemon. | |
445243bf RG |
1551 | .It Va rpc_ypupdated_enable |
1552 | .Pq Vt bool | |
1553 | If set to | |
1554 | .Dq Li YES , | |
1555 | run the | |
1556 | .Nm rpc.ypupdated | |
1557 | daemon at system boot time. | |
984263bc MD |
1558 | .It Va defaultrouter |
1559 | .Pq Vt str | |
1560 | If not set to | |
445243bf RG |
1561 | .Dq Li NO , |
1562 | create a default route to this host name or IP address | |
984263bc MD |
1563 | (use an IP address if this router is also required to get to the |
1564 | name server!). | |
445243bf RG |
1565 | .It Va ipv6_defaultrouter |
1566 | .Pq Vt str | |
1567 | The IPv6 equivalent of | |
1568 | .Va defaultrouter . | |
984263bc MD |
1569 | .It Va static_routes |
1570 | .Pq Vt str | |
225e0ed5 | 1571 | Set to the list of static routes that are to be added at system boot time. |
445243bf RG |
1572 | If not set to |
1573 | .Dq Li NO | |
984263bc MD |
1574 | then for each whitespace separated |
1575 | .Ar element | |
1576 | in the value, a | |
1577 | .Va route_ Ns Aq Ar element | |
225e0ed5 | 1578 | variable is assumed to exist whose contents will later be passed to a |
445243bf RG |
1579 | .Dq Nm route Cm add |
1580 | operation. | |
314c92ec SW |
1581 | .It Va change_routes |
1582 | .Pq Vt str | |
1583 | Set to the list of static routes that are to be changed at system boot time | |
1584 | (such as those added by the kernel). | |
1585 | If not set to | |
1586 | .Dq Li NO | |
1587 | then for each whitespace separated | |
1588 | .Ar element | |
1589 | in the value, a | |
1590 | .Va change_route_ Ns Aq Ar element | |
1591 | variable is assumed to exist whose contents will later be passed to a | |
1592 | .Dq Nm route Cm change | |
1593 | operation. | |
445243bf RG |
1594 | .It Va ipv6_static_routes |
1595 | .Pq Vt str | |
1596 | The IPv6 equivalent of | |
1597 | .Va static_routes . | |
1598 | If not set to | |
1599 | .Dq Li NO | |
1600 | then for each whitespace separated | |
1601 | .Ar element | |
1602 | in the value, a | |
1603 | .Va ipv6_route_ Ns Aq Ar element | |
225e0ed5 | 1604 | variable is assumed to exist whose contents will later be passed to a |
445243bf | 1605 | .Dq Nm route Cm add Fl inet6 |
984263bc MD |
1606 | operation. |
1607 | .It Va gateway_enable | |
1608 | .Pq Vt bool | |
1609 | If set to | |
445243bf RG |
1610 | .Dq Li YES , |
1611 | configure host to act as an IP router, e.g. to forward packets | |
984263bc | 1612 | between interfaces. |
445243bf RG |
1613 | .It Va ipv6_gateway_enable |
1614 | .Pq Vt bool | |
1615 | The IPv6 equivalent of | |
1616 | .Va gateway_enable . | |
984263bc MD |
1617 | .It Va router_enable |
1618 | .Pq Vt bool | |
1619 | If set to | |
445243bf | 1620 | .Dq Li YES , |
225e0ed5 | 1621 | run a routing daemon of some sort, based on the settings of |
221b91ff | 1622 | .Va router_program |
984263bc MD |
1623 | and |
1624 | .Va router_flags . | |
445243bf RG |
1625 | .It Va ipv6_router_enable |
1626 | .Pq Vt bool | |
1627 | The IPv6 equivalent of | |
1628 | .Va router_enable . | |
1629 | If set to | |
1630 | .Dq Li YES , | |
225e0ed5 | 1631 | run a routing daemon of some sort, based on the settings of |
221b91ff | 1632 | .Va ipv6_router_program |
445243bf RG |
1633 | and |
1634 | .Va ipv6_router_flags . | |
221b91ff | 1635 | .It Va router_program |
984263bc MD |
1636 | .Pq Vt str |
1637 | If | |
1638 | .Va router_enable | |
1639 | is set to | |
445243bf | 1640 | .Dq Li YES , |
717e8ef7 TN |
1641 | this is the name of the routing daemon to use |
1642 | (default | |
1643 | .Pa /sbin/routed ) . | |
221b91ff | 1644 | .It Va ipv6_router_program |
445243bf RG |
1645 | .Pq Vt str |
1646 | The IPv6 equivalent of | |
717e8ef7 TN |
1647 | .Va router_program |
1648 | (default | |
1649 | .Pa /sbin/route6d ) . | |
984263bc MD |
1650 | .It Va router_flags |
1651 | .Pq Vt str | |
1652 | If | |
1653 | .Va router_enable | |
1654 | is set to | |
445243bf | 1655 | .Dq Li YES , |
984263bc | 1656 | these are the flags to pass to the routing daemon. |
445243bf RG |
1657 | .It Va ipv6_router_flags |
1658 | .Pq Vt str | |
1659 | The IPv6 equivalent of | |
1660 | .Va router_flags . | |
445243bf RG |
1661 | .It Va rtadvd_enable |
1662 | .Pq Vt bool | |
1663 | If set to | |
1664 | .Dq Li YES , | |
1665 | run the | |
1666 | .Xr rtadvd 8 | |
1667 | daemon at boot time. | |
1668 | .Xr rtadvd 8 | |
1669 | will only run if | |
1670 | .Va ipv6_gateway_enable | |
1671 | is also set to | |
1672 | .Dq Li YES . | |
1673 | The | |
1674 | .Xr rtadvd 8 | |
1675 | utility sends router advertisement packets to the interfaces specified in | |
1676 | .Va rtadvd_interfaces . | |
1677 | .Xr rtadvd 8 | |
1678 | and should only be enabled with great care. | |
1679 | You may want to fine-tune | |
1680 | .Xr rtadvd.conf 5 . | |
1681 | .It Va rtadvd_interfaces | |
1682 | .Pq Vt str | |
1683 | If | |
1684 | .Va rtadvd_enable | |
1685 | is set to | |
1686 | .Dq Li YES | |
1687 | this is the list of interfaces to use. | |
bdbd8a5b SW |
1688 | .It Va rtsold_enable |
1689 | .Pq Vt bool | |
1690 | If set to | |
1691 | .Dq Li YES , | |
1692 | run the | |
1693 | .Xr rtsold 8 | |
1694 | daemon at boot time. | |
1695 | The | |
1696 | .Xr rtsold 8 | |
1697 | daemon is used for automatic discovery of non-link local addresses. | |
1698 | .It Va rtsold_flags | |
1699 | .Pq Vt str | |
1700 | If | |
1701 | .Va rtsold_enable | |
1702 | is set to | |
1703 | .Dq Li YES , | |
1704 | these are the flags to pass to the | |
1705 | .Xr rtsold 8 | |
1706 | daemon. | |
984263bc MD |
1707 | .It Va arpproxy_all |
1708 | .Pq Vt bool | |
1709 | If set to | |
445243bf RG |
1710 | .Dq Li YES , |
1711 | enable global proxy ARP. | |
984263bc MD |
1712 | .It Va forward_sourceroute |
1713 | .Pq Vt bool | |
1714 | If set to | |
445243bf RG |
1715 | .Dq Li YES |
1716 | and | |
984263bc MD |
1717 | .Va gateway_enable |
1718 | is also set to | |
445243bf RG |
1719 | .Dq Li YES , |
1720 | source-routed packets are forwarded. | |
984263bc MD |
1721 | .It Va accept_sourceroute |
1722 | .Pq Vt bool | |
1723 | If set to | |
445243bf RG |
1724 | .Dq Li YES , |
1725 | the system will accept source-routed packets directed at it. | |
984263bc MD |
1726 | .It Va rarpd_enable |
1727 | .Pq Vt bool | |
1728 | If set to | |
445243bf RG |
1729 | .Dq Li YES , |
1730 | run the | |
984263bc MD |
1731 | .Xr rarpd 8 |
1732 | daemon at system boot time. | |
1733 | .It Va rarpd_flags | |
1734 | .Pq Vt str | |
1735 | If | |
1736 | .Va rarpd_enable | |
1737 | is set to | |
445243bf | 1738 | .Dq Li YES , |
984263bc MD |
1739 | these are the flags to pass to the |
1740 | .Xr rarpd 8 | |
1741 | daemon. | |
8716355d DF |
1742 | .It Va wpa_supplicant_enable |
1743 | .Pq Vt bool | |
1744 | If set to | |
1745 | .Dq Li YES , | |
1746 | run the | |
1747 | .Xr wpa_supplicant 8 | |
1748 | daemon in | |
1749 | .Dq interface matching mode | |
1750 | at system boot time. | |
1751 | .It Va wpa_supplicant_program | |
1752 | .Pq Vt str | |
1753 | Path to | |
1754 | .Xr wpa_supplicant 8 . | |
1755 | .It Va wpa_supplicant_flags | |
1756 | .Pq Vt str | |
1757 | If | |
1758 | .Va wpa_supplicant_enable | |
1759 | is set to | |
1760 | .Dq Li YES , | |
1761 | these are the flags to pass to the | |
1762 | .Xr wpa_supplicant 8 | |
1763 | daemon. | |
445243bf RG |
1764 | .It Va bootparamd_enable |
1765 | .Pq Vt bool | |
1766 | If set to | |
1767 | .Dq Li YES , | |
1768 | run the | |
1769 | .Xr bootparamd 8 | |
1770 | daemon at system boot time. | |
1771 | .It Va bootparamd_flags | |
1772 | .Pq Vt str | |
1773 | If | |
1774 | .Va bootparamd_enable | |
1775 | is set to | |
1776 | .Dq Li YES , | |
1777 | these are the flags to pass to the | |
1778 | .Xr bootparamd 8 | |
1779 | daemon. | |
1780 | .It Va stf_interface_ipv4addr | |
1781 | .Pq Vt str | |
1782 | If not set to | |
1783 | .Dq Li NO , | |
225e0ed5 | 1784 | this is the local IPv4 address for 6to4 (IPv6 over IPv4 tunneling interface). |
445243bf RG |
1785 | Specify this entry to enable the 6to4 interface. |
1786 | .It Va stf_interface_ipv4plen | |
1787 | .Pq Vt int | |
1788 | Prefix length for 6to4 IPv4 addresses, to limit peer address range. | |
1789 | An effective value is 0-31. | |
1790 | .It Va stf_interface_ipv6_ifid | |
1791 | .Pq Vt str | |
1792 | IPv6 interface ID for | |
1793 | .Xr stf 4 . | |
1794 | This can be set to | |
1795 | .Dq Li AUTO . | |
1796 | .It Va stf_interface_ipv6_slaid | |
1797 | .Pq Vt str | |
1798 | IPv6 Site Level Aggregator for | |
1799 | .Xr stf 4 . | |
445243bf RG |
1800 | .It Va keybell |
1801 | .Pq Vt str | |
1802 | The keyboard bell sound. | |
1803 | Set to | |
1804 | .Dq Li normal , | |
1805 | .Dq Li visual , | |
1806 | .Dq Li off , | |
1807 | or | |
1808 | .Dq Li NO | |
1809 | if the default behavior is desired. | |
1810 | For details, refer to the | |
1811 | .Xr kbdcontrol 1 | |
1812 | manpage. | |
984263bc MD |
1813 | .It Va keymap |
1814 | .Pq Vt str | |
1815 | If set to | |
445243bf RG |
1816 | .Dq Li NO , |
1817 | no keymap is installed, otherwise the value is used to install | |
984263bc | 1818 | the keymap file in |
445243bf | 1819 | .Pa /usr/share/syscons/keymaps/ Ns Ao Ar value Ac Ns Pa .kbd . |
984263bc MD |
1820 | .It Va keyrate |
1821 | .Pq Vt str | |
445243bf RG |
1822 | The keyboard repeat speed. |
1823 | Set to | |
1824 | .Dq Li slow , | |
1825 | .Dq Li normal , | |
1826 | .Dq Li fast , | |
984263bc | 1827 | or |
445243bf | 1828 | .Dq Li NO |
984263bc MD |
1829 | if the default behavior is desired. |
1830 | .It Va keychange | |
1831 | .Pq Vt str | |
1832 | If not set to | |
445243bf RG |
1833 | .Dq Li NO , |
1834 | attempt to program the function keys with the value. | |
225e0ed5 | 1835 | The value should be a single string of the form: |
445243bf | 1836 | .Dq Ar funkey_number new_value Op Ar funkey_number new_value ... . |
984263bc MD |
1837 | .It Va cursor |
1838 | .Pq Vt str | |
1839 | Can be set to the value of | |
445243bf RG |
1840 | .Dq Li normal , |
1841 | .Dq Li blink , | |
1842 | .Dq Li destructive , | |
984263bc | 1843 | or |
445243bf | 1844 | .Dq Li NO |
984263bc MD |
1845 | to set the cursor behavior explicitly or choose the default behavior. |
1846 | .It Va scrnmap | |
1847 | .Pq Vt str | |
1848 | If set to | |
445243bf RG |
1849 | .Dq Li NO , |
1850 | no screen map is installed, otherwise the value is used to install | |
984263bc | 1851 | the screen map file in |
445243bf | 1852 | .Pa /usr/share/syscons/scrnmaps/ Ns Aq Ar value . |
984263bc MD |
1853 | .It Va font8x16 |
1854 | .Pq Vt str | |
1855 | If set to | |
445243bf RG |
1856 | .Dq Li NO , |
1857 | the default 8x16 font value is used for screen size requests, otherwise | |
984263bc | 1858 | the value in |
445243bf | 1859 | .Pa /usr/share/syscons/fonts/ Ns Aq Ar value |
984263bc MD |
1860 | is used. |
1861 | .It Va font8x14 | |
1862 | .Pq Vt str | |
1863 | If set to | |
445243bf RG |
1864 | .Dq Li NO , |
1865 | the default 8x14 font value is used for screen size requests, otherwise | |
984263bc | 1866 | the value in |
445243bf | 1867 | .Pa /usr/share/syscons/fonts/ Ns Aq Ar value |
984263bc MD |
1868 | is used. |
1869 | .It Va font8x8 | |
1870 | .Pq Vt str | |
1871 | If set to | |
445243bf RG |
1872 | .Dq Li NO , |
1873 | the default 8x8 font value is used for screen size requests, otherwise | |
984263bc | 1874 | the value in |
445243bf | 1875 | .Pa /usr/share/syscons/fonts/ Ns Aq Ar value |
984263bc MD |
1876 | is used. |
1877 | .It Va blanktime | |
1878 | .Pq Vt int | |
1879 | If set to | |
445243bf | 1880 | .Dq Li NO , |
225e0ed5 | 1881 | the default screen blanking interval is used, otherwise it is set to |
984263bc MD |
1882 | .Ar value |
1883 | seconds. | |
1884 | .It Va saver | |
1885 | .Pq Vt str | |
1886 | If not set to | |
445243bf RG |
1887 | .Dq Li NO , |
1888 | this is the actual screen saver to use | |
1889 | .Li ( blank , snake , daemon , | |
1890 | etc). | |
9463ea91 SW |
1891 | .It Va moused_nondefault_enable |
1892 | .Pq Vt str | |
1893 | If set to | |
1894 | .Dq Li NO , | |
1895 | the mouse device specified on | |
1896 | the command line is not automatically treated as enabled by the | |
1897 | .Pa /etc/rc.d/moused | |
1898 | script. | |
1899 | Having this variable set to | |
1900 | .Dq Li YES | |
1901 | allows a | |
1902 | .Xr usb 4 | |
1903 | mouse, | |
1904 | for example, | |
1905 | to be enabled as soon as it is plugged in. | |
984263bc MD |
1906 | .It Va moused_enable |
1907 | .Pq Vt str | |
1908 | If set to | |
445243bf | 1909 | .Dq Li YES , |
984263bc MD |
1910 | the |
1911 | .Xr moused 8 | |
1912 | daemon is started for doing cut/paste selection on the console. | |
1913 | .It Va moused_type | |
1914 | .Pq Vt str | |
919b9462 SW |
1915 | If |
1916 | .Va moused_enable | |
1917 | is set to | |
1918 | .Dq Li YES , | |
1919 | this is the protocol type of the mouse connected to this host. | |
b89f8727 SW |
1920 | The default type is |
1921 | .Dq Li auto . | |
984263bc MD |
1922 | The |
1923 | .Xr moused 8 | |
1924 | daemon | |
1925 | is able to detect the appropriate mouse type automatically in many cases. | |
b89f8727 | 1926 | Leave this variable at the default |
445243bf | 1927 | .Dq Li auto |
984263bc MD |
1928 | to let the daemon detect it, or |
1929 | select one from the following list if the automatic detection fails. | |
1930 | .Pp | |
b89f8727 SW |
1931 | If the mouse is attached to the PS/2 mouse port, leave the variable at the |
1932 | default | |
445243bf | 1933 | .Dq Li auto |
b89f8727 | 1934 | or set it to |
445243bf RG |
1935 | .Dq Li ps/2 , |
1936 | regardless of the brand and model of the mouse. | |
b89f8727 | 1937 | Likewise, if the mouse is attached to the bus mouse port, leave it at |
445243bf | 1938 | .Dq Li auto |
b89f8727 | 1939 | or set it to |
445243bf | 1940 | .Dq Li busmouse . |
984263bc MD |
1941 | All other protocols are for serial mice and will not work with |
1942 | the PS/2 and bus mice. | |
1943 | If this is a USB mouse, | |
445243bf | 1944 | .Dq Li auto |
984263bc | 1945 | is the only protocol type which will work. |
445243bf RG |
1946 | .Pp |
1947 | .Bl -tag -width ".Li x10mouseremote" -compact | |
1948 | .It Li microsoft | |
1949 | Microsoft mouse (serial) | |
1950 | .It Li intellimouse | |
1951 | Microsoft IntelliMouse (serial) | |
1952 | .It Li mousesystems | |
1953 | Mouse systems Corp. mouse (serial) | |
1954 | .It Li mmseries | |
1955 | MM Series mouse (serial) | |
1956 | .It Li logitech | |
1957 | Logitech mouse (serial) | |
1958 | .It Li busmouse | |
1959 | A bus mouse | |
1960 | .It Li mouseman | |
1961 | Logitech MouseMan and TrackMan (serial) | |
1962 | .It Li glidepoint | |
1963 | ALPS GlidePoint (serial) | |
1964 | .It Li thinkingmouse | |
1965 | Kensington ThinkingMouse (serial) | |
1966 | .It Li ps/2 | |
1967 | PS/2 mouse | |
1968 | .It Li mmhittab | |
1969 | MM HitTablet (serial) | |
1970 | .It Li x10mouseremote | |
1971 | X10 MouseRemote (serial) | |
1972 | .It Li versapad | |
1973 | Interlink VersaPad (serial) | |
1974 | .El | |
984263bc MD |
1975 | .Pp |
1976 | Even if the mouse is not in the above list, it may be compatible | |
1977 | with one in the list. | |
1978 | Refer to the man page for | |
1979 | .Xr moused 8 | |
1980 | for compatibility information. | |
1981 | .Pp | |
1982 | It should also be noted that while this is enabled, any | |
1983 | other client of the mouse (such as an X server) should access | |
445243bf RG |
1984 | the mouse through the virtual mouse device, |
1985 | .Pa /dev/sysmouse , | |
1986 | and configure it as a | |
1987 | .Dq Li sysmouse | |
1988 | type mouse, since all | |
225e0ed5 | 1989 | mouse data is converted to this single canonical format when using |
984263bc | 1990 | .Xr moused 8 . |
445243bf RG |
1991 | If the client program does not support the |
1992 | .Dq Li sysmouse | |
225e0ed5 | 1993 | type, specify the |
445243bf RG |
1994 | .Dq Li mousesystems |
1995 | type. | |
984263bc MD |
1996 | It is the second preferred type. |
1997 | .It Va moused_port | |
1998 | .Pq Vt str | |
1999 | If | |
2000 | .Va moused_enable | |
2001 | is set to | |
445243bf | 2002 | .Dq Li YES , |
984263bc MD |
2003 | this is the actual port the mouse is on. |
2004 | It might be | |
2005 | .Pa /dev/cuaa0 | |
ad9f8794 | 2006 | for a COM1 serial mouse or |
984263bc | 2007 | .Pa /dev/psm0 |
ad9f8794 | 2008 | for a PS/2 mouse, for example. |
984263bc MD |
2009 | .It Va moused_flags |
2010 | .Pq Vt str | |
2011 | If | |
2012 | .Va moused_type | |
2013 | is set, these are the additional flags to pass to the | |
2014 | .Xr moused 8 | |
2015 | daemon. | |
445243bf RG |
2016 | .It Va mousechar_start |
2017 | .Pq Vt int | |
2018 | If set to | |
2019 | .Dq Li NO , | |
2020 | the default mouse cursor character range | |
2021 | .Li 0xd0 Ns - Ns Li 0xd3 | |
225e0ed5 | 2022 | is used, otherwise the range start is set to |
445243bf RG |
2023 | .Ar value |
2024 | character, see | |
2025 | .Xr vidcontrol 1 . | |
2026 | Use if the default range is occupied in the language code table. | |
850afac2 SW |
2027 | .It Va vidhistory |
2028 | .Pq Vt int | |
2029 | Set the size of the history (scrollback) buffer in lines. | |
984263bc MD |
2030 | .It Va allscreens_flags |
2031 | .Pq Vt str | |
2032 | If set, | |
2033 | .Xr vidcontrol 1 | |
2034 | is run with these options for each of the virtual terminals | |
2035 | .Pq Pa /dev/ttyv* . | |
2036 | For example, | |
445243bf | 2037 | .Dq Fl m Cm on |
225e0ed5 | 2038 | will enable the mouse pointer on all virtual terminals if |
984263bc MD |
2039 | .Va moused_enable |
2040 | is set to | |
445243bf RG |
2041 | .Dq Li YES . |
2042 | .It Va allscreens_kbdflags | |
2043 | .Pq Vt str | |
2044 | If set, | |
2045 | .Xr kbdcontrol 1 | |
2046 | is run with these options for each of the virtual terminals | |
2047 | .Pq Pa /dev/ttyv* . | |
2048 | For example, | |
2049 | .Dq Fl h Li 200 | |
2050 | will set the | |
2051 | .Xr syscons 4 | |
2052 | scrollback (history) buffer to 200 lines. | |
984263bc MD |
2053 | .It Va cron_enable |
2054 | .Pq Vt bool | |
2055 | If set to | |
445243bf RG |
2056 | .Dq Li YES , |
2057 | run the | |
984263bc MD |
2058 | .Xr cron 8 |
2059 | daemon at system boot time. | |
2060 | .It Va cron_program | |
2061 | .Pq Vt str | |
2062 | Path to | |
2063 | .Xr cron 8 | |
2064 | (default | |
2065 | .Pa /usr/sbin/cron ) . | |
2066 | .It Va cron_flags | |
2067 | .Pq Vt str | |
2068 | If | |
2069 | .Va cron_enable | |
2070 | is set to | |
445243bf | 2071 | .Dq Li YES , |
984263bc MD |
2072 | these are the flags to pass to |
2073 | .Xr cron 8 . | |
2074 | .It Va lpd_program | |
2075 | .Pq Vt str | |
2076 | Path to | |
2077 | .Xr lpd 8 | |
2078 | (default | |
2079 | .Pa /usr/sbin/lpd ) . | |
2080 | .It Va lpd_enable | |
2081 | .Pq Vt bool | |
2082 | If set to | |
445243bf RG |
2083 | .Dq Li YES , |
2084 | run the | |
984263bc MD |
2085 | .Xr lpd 8 |
2086 | daemon at system boot time. | |
2087 | .It Va lpd_flags | |
2088 | .Pq Vt str | |
2089 | If | |
2090 | .Va lpd_enable | |
2091 | is set to | |
445243bf | 2092 | .Dq Li YES , |
984263bc MD |
2093 | these are the flags to pass to the |
2094 | .Xr lpd 8 | |
2095 | daemon. | |
52163b73 SW |
2096 | .It Va nscd_enable |
2097 | .Pq Vt bool | |
2098 | If set to | |
2099 | .Dq Li YES , | |
2100 | run the | |
2101 | .Xr nscd 8 | |
2102 | daemon at system boot time. | |
850afac2 SW |
2103 | .It Va mixer_enable |
2104 | .Pq Vt bool | |
2105 | If set to | |
2106 | .Dq Li YES , | |
2107 | preserve | |
2108 | .Xr mixer 8 | |
2109 | settings across reboots. | |
984263bc MD |
2110 | .It Va mta_start_script |
2111 | .Pq Vt str | |
717e8ef7 | 2112 | The full path to the script to run to start |
984263bc MD |
2113 | a mail transfer agent. |
2114 | The default is | |
2115 | .Pa /etc/rc.sendmail . | |
2116 | The | |
2117 | .Va sendmail_* | |
2118 | variables which | |
2119 | .Pa /etc/rc.sendmail | |
2120 | uses are documented in the | |
2121 | .Xr rc.sendmail 8 | |
2122 | man page. | |
a12bb799 SW |
2123 | .It Va fixbootfile |
2124 | .Pq Vt bool | |
2125 | In a | |
2126 | .Sq HAMMER ROOT with UFS /boot | |
2127 | setup, the boot loader will not set up the | |
2128 | .Va kern.bootfile | |
2129 | sysctl correctly. | |
2130 | The system will attempt to fix this on its own. | |
2131 | Set this variable to | |
2132 | .Dq Li NO | |
2133 | to turn this behavior off. | |
984263bc MD |
2134 | .It Va dumpdev |
2135 | .Pq Vt str | |
2136 | Indicates the device (usually a swap partition) to which a crash dump | |
2137 | should be written in the event of a system crash. | |
2138 | The value of this variable is passed as the argument to | |
f8e9b4ce MD |
2139 | .Xr dumpon 8 |
2140 | and | |
2141 | .Xr savecore 8 . | |
984263bc | 2142 | To disable crash dumps, set this variable to |
445243bf | 2143 | .Dq Li NO . |
984263bc MD |
2144 | .It Va dumpdir |
2145 | .Pq Vt str | |
2146 | When the system reboots after a crash and a crash dump is found on the | |
2147 | device specified by the | |
2148 | .Va dumpdev | |
2149 | variable, | |
2150 | .Xr savecore 8 | |
2151 | will save that crash dump and a copy of the kernel to the directory | |
2152 | specified by the | |
2153 | .Va dumpdir | |
2154 | variable. | |
2155 | The default value is | |
445243bf | 2156 | .Pa /var/crash . |
984263bc | 2157 | Set to |
445243bf | 2158 | .Dq Li NO |
984263bc MD |
2159 | to not run |
2160 | .Xr savecore 8 | |
2161 | at boot time when | |
2162 | .Va dumpdir | |
2163 | is set. | |
2164 | .It Va savecore_flags | |
2165 | .Pq Vt str | |
2166 | If crash dumps are enabled, these are the flags to pass to the | |
2167 | .Xr savecore 8 | |
2168 | utility. | |
7fb3111b AH |
2169 | .It Va crashinfo_enable |
2170 | .Pq Vt bool | |
2171 | Set to | |
2172 | .Dq Li YES | |
2173 | to turn on automatic crash dump summary generation using the utility | |
2174 | specified by the | |
2175 | .Va crashinfo_program | |
2176 | variable. | |
2177 | .It Va crashinfo_program | |
2178 | .Pq Vt str | |
2179 | Program to run to generate a crash dump summary if the variable | |
2180 | .Va crashinfo_enable | |
2181 | is set to | |
2182 | .Dq Li YES . | |
2183 | The default value is | |
2184 | .Pa /usr/sbin/crashinfo . | |
984263bc MD |
2185 | .It Va enable_quotas |
2186 | .Pq Vt bool | |
2187 | Set to | |
445243bf | 2188 | .Dq Li YES |
984263bc MD |
2189 | to turn on user disk quotas on system startup via the |
2190 | .Xr quotaon 8 | |
2191 | command. | |
2192 | .It Va check_quotas | |
2193 | .Pq Vt bool | |
2194 | Set to | |
445243bf | 2195 | .Dq Li YES |
984263bc MD |
2196 | to enable user disk quota checking via the |
2197 | .Xr quotacheck 8 | |
2198 | command. | |
2199 | .It Va accounting_enable | |
2200 | .Pq Vt bool | |
2201 | Set to | |
445243bf | 2202 | .Dq Li YES |
984263bc MD |
2203 | to enable system accounting through the |
2204 | .Xr accton 8 | |
2205 | facility. | |
de5b97b6 MD |
2206 | .\" ----- cleanvar_enable setting-------------------------------- |
2207 | .It Va cleanvar_enable | |
2208 | .Pq Vt bool | |
2209 | Set to | |
2210 | .Dq Li YES | |
2211 | to have | |
2212 | .Pa /var/run , | |
2213 | .Pa /var/spool/lock | |
2214 | and | |
2215 | .Pa /var/spool/uucp/.Temp/* | |
2216 | cleaned at startup. | |
2217 | .\" ----- clear_tmp_enable setting------------------------------- | |
984263bc MD |
2218 | .It Va clear_tmp_enable |
2219 | .Pq Vt bool | |
2220 | Set to | |
445243bf | 2221 | .Dq Li YES |
984263bc MD |
2222 | to have |
2223 | .Pa /tmp | |
2224 | cleaned at startup. | |
de5b97b6 | 2225 | .\" ----- ldconfig_paths setting -------------------------------- |
984263bc MD |
2226 | .It Va ldconfig_paths |
2227 | .Pq Vt str | |
2228 | Set to the list of shared library paths to use with | |
2229 | .Xr ldconfig 8 . | |
2230 | NOTE: | |
2231 | .Pa /usr/lib | |
2232 | will always be added first, so it need not appear in this list. | |
2233 | .It Va ldconfig_insecure | |
2234 | .Pq Vt bool | |
2235 | The | |
2236 | .Xr ldconfig 8 | |
2237 | utility normally refuses to use directories | |
2238 | which are writable by anyone except root. | |
2239 | Set this variable to | |
445243bf | 2240 | .Dq Li YES |
984263bc | 2241 | to disable that security check during system startup. |
6496b71f PA |
2242 | .It Va ldconfig_local_dirs |
2243 | .Pq Vt str | |
2244 | Set to the list of local | |
2245 | .Xr ldconfig 8 | |
2246 | directories. | |
2247 | The names of all files in the directories listed will be | |
2248 | passed as arguments to | |
2249 | .Xr ldconfig 8 . | |
984263bc MD |
2250 | .It Va kern_securelevel |
2251 | .Pq Vt int | |
2252 | The kernel security level to set at startup. | |
2253 | The allowed range of | |
2254 | .Ar value | |
225e0ed5 | 2255 | ranges from \-1 (the compile time default) to 3 (the most secure). |
445243bf | 2256 | See |
984263bc | 2257 | .Xr init 8 |
225e0ed5 | 2258 | for the list of possible security levels and their effect on system operation. |
984263bc MD |
2259 | .It Va start_vinum |
2260 | .Pq Vt bool | |
2261 | Set to | |
445243bf | 2262 | .Dq Li YES |
984263bc MD |
2263 | to start |
2264 | .Xr vinum 8 | |
2265 | at system boot time. | |
984263bc MD |
2266 | .It Va sshd_enable |
2267 | .Pq Vt bool | |
2268 | Set to | |
445243bf | 2269 | .Dq Li YES |
984263bc MD |
2270 | to start |
2271 | .Xr sshd 8 | |
2272 | at system boot time. | |
850afac2 SW |
2273 | .It Va sshd_program |
2274 | .Pq Vt str | |
2275 | Path to the SSH server program | |
717e8ef7 TN |
2276 | (default |
2277 | .Pa /usr/sbin/sshd ) . | |
984263bc MD |
2278 | .It Va sshd_flags |
2279 | .Pq Vt str | |
2280 | If | |
2281 | .Va sshd_enable | |
2282 | is set to | |
445243bf | 2283 | .Dq Li YES , |
984263bc MD |
2284 | these are the flags to pass to the |
2285 | .Xr sshd 8 | |
2286 | daemon. | |
850afac2 SW |
2287 | .It Va ftpd_enable |
2288 | .Pq Vt bool | |
2289 | Set to | |
2290 | .Dq Li YES | |
2291 | to start | |
2292 | .Xr ftpd 8 | |
2293 | at system boot time. | |
2294 | .It Va ftpd_flags | |
2295 | .Pq Vt str | |
2296 | If | |
2297 | .Va ftpd_enable | |
2298 | is set to | |
2299 | .Dq Li YES , | |
2300 | these are the flags to pass to the | |
2301 | .Xr ftpd 8 | |
2302 | daemon. | |
445243bf RG |
2303 | .It Va watchdogd_enable |
2304 | .Pq Vt bool | |
2305 | If set to | |
2306 | .Dq Li YES , | |
2307 | start the | |
2308 | .Xr watchdogd 8 | |
2309 | daemon at boot time. | |
445243bf RG |
2310 | .It Va jail_enable |
2311 | .Pq Vt bool | |
2312 | If set to | |
2313 | .Dq Li NO , | |
2314 | any configured jails will not be started. | |
2315 | .It Va jail_list | |
2316 | .Pq Vt str | |
2317 | A space separated list of names for jails. | |
2318 | This is purely a configuration aid to help identify and | |
2319 | configure multiple jails. | |
2320 | The names specified in this list will be used to | |
2321 | identify settings common to an instance of a jail. | |
2322 | Assuming that the jail in question was named | |
2323 | .Li vjail , | |
56be8454 | 2324 | you would have the following dependent variables: |
445243bf RG |
2325 | .Bd -literal |
2326 | jail_vjail_hostname="jail.example.com" | |
2327 | jail_vjail_ip="192.168.1.100" | |
2328 | jail_vjail_rootdir="/var/jails/vjail/root" | |
445243bf | 2329 | .Ed |
b58abc5e SW |
2330 | .It Va jail_flags |
2331 | .Pq Vt str | |
2332 | Unset by default. | |
2333 | When set, use as default value for | |
2334 | .Va jail_ Ns Ao Ar jname Ac Ns Va _flags | |
2335 | for every jail in | |
2336 | .Va jail_list . | |
2337 | .It Va jail_interface | |
2338 | .Pq Vt str | |
2339 | Unset by default. | |
2340 | When set, use as default value for | |
2341 | .Va jail_ Ns Ao Ar jname Ac Ns Va _interface | |
2342 | for every jail in | |
2343 | .Va jail_list . | |
2344 | .It Va jail_fstab | |
2345 | .Pq Vt str | |
2346 | Unset by default. | |
2347 | When set, use as default value for | |
2348 | .Va jail_ Ns Ao Ar jname Ac Ns Va _fstab | |
2349 | for every jail in | |
2350 | .Va jail_list . | |
2351 | .It Va jail_mount_enable | |
2352 | .Pq Vt bool | |
2353 | Set to | |
2354 | .Dq Li NO | |
2355 | by default. | |
2356 | When set to | |
2357 | .Dq Li YES , | |
2358 | sets | |
2359 | .Va jail_ Ns Ao Ar jname Ac Ns Va _mount_enable | |
2360 | to | |
2361 | .Dq Li YES | |
2362 | by default for every jail in | |
2363 | .Va jail_list . | |
b58abc5e SW |
2364 | .It Va jail_procfs_enable |
2365 | .Pq Vt bool | |
2366 | Set to | |
2367 | .Dq Li NO | |
2368 | by default. | |
2369 | When set to | |
2370 | .Dq Li YES , | |
2371 | sets | |
36c417a0 | 2372 | .Va jail_ Ns Ao Ar jname Ac Ns Va _procfs_enable |
b58abc5e SW |
2373 | to |
2374 | .Dq Li YES | |
2375 | by default for every jail in | |
2376 | .Va jail_list . | |
f8ff0183 AHJ |
2377 | .It Va jail_devfs_enable |
2378 | .Pq Vt bool | |
2379 | Set to | |
2380 | .Dq Li NO | |
2381 | by default. | |
2382 | When set to | |
2383 | .Dq Li YES , | |
2384 | sets | |
2385 | .Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_enable | |
2386 | to | |
2387 | .Dq Li YES | |
2388 | by default for every jail in | |
2389 | .Va jail_list . | |
b58abc5e SW |
2390 | .It Va jail_exec_start |
2391 | .Pq Vt str | |
2392 | Unset by default. | |
2393 | When set, use as default value for | |
2394 | .Va jail_ Ns Ao Ar jname Ac Ns Va _exec_start | |
2395 | for every jail in | |
2396 | .Va jail_list . | |
2397 | .It Va jail_exec_stop | |
2398 | Unset by default. | |
2399 | When set, use as default value for | |
2400 | .Va jail_ Ns Ao Ar jname Ac Ns Va _exec_stop | |
2401 | for every jail in | |
2402 | .Va jail_list . | |
2403 | .It Va jail_ Ns Ao Ar jname Ac Ns Va _rootdir | |
2404 | .Pq Vt str | |
2405 | Unset by default. | |
2406 | Set to the root directory used by jail | |
2407 | .Va jname . | |
2408 | .It Va jail_ Ns Ao Ar jname Ac Ns Va _hostname | |
2409 | .Pq Vt str | |
2410 | Unset by default. | |
2411 | Set to the fully qualified domain name (FQDN) assigned to jail | |
2412 | .Va jname . | |
2413 | .It Va jail_ Ns Ao Ar jname Ac Ns Va _ip | |
2414 | .Pq Vt str | |
2415 | Unset by default. | |
2416 | Set to the IP address assigned to jail | |
2417 | .Va jname . | |
2418 | .It Va jail_ Ns Ao Ar jname Ac Ns Va _flags | |
2419 | .Pq Vt str | |
2420 | Set to | |
2421 | .Dq Li -l -U root | |
2422 | by default. | |
2423 | These are flags to pass to | |
20ab1ccc | 2424 | .Xr jail 8 . |
b58abc5e SW |
2425 | .It Va jail_ Ns Ao Ar jname Ac Ns Va _interface |
2426 | .Pq Vt str | |
2427 | Unset by default. | |
2428 | When set, sets the interface to use when setting IP address alias. | |
2429 | Note that the alias is created at jail startup and removed at jail shutdown. | |
2430 | .It Va jail_ Ns Ao Ar jname Ac Ns Va _fstab | |
2431 | .Pq Vt str | |
2432 | Set to | |
2433 | .Pa /etc/fstab. Ns Aq Ar jname | |
2434 | by default. | |
2435 | This is the file system information file to use for jail | |
2436 | .Va jname . | |
2437 | .It Va jail_ Ns Ao Ar jname Ac Ns Va _mount_enable | |
2438 | .Pq Vt bool | |
2439 | Set to | |
2440 | .Dq Li NO | |
2441 | by default. | |
2442 | When set to | |
2443 | .Dq Li YES , | |
2444 | mount all file systems from | |
2445 | .Va jail_ Ns Ao Ar jname Ac Ns Va _fstab | |
2446 | at jail startup. | |
b58abc5e SW |
2447 | .It Va jail_ Ns Ao Ar jname Ac Ns Va _procfs_enable |
2448 | .Pq Vt bool | |
2449 | Set to | |
2450 | .Dq Li NO | |
2451 | by default. | |
2452 | When set to | |
2453 | .Dq Li YES , | |
2454 | mount the process file system inside jail | |
2455 | .Ar jname | |
2456 | at jail startup. | |
f8ff0183 AHJ |
2457 | .It Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_enable |
2458 | .Pq Vt bool | |
2459 | Set to | |
2460 | .Dq Li NO | |
2461 | by default. | |
2462 | When set to | |
2463 | .Dq Li YES , | |
2464 | mount the device file system inside jail | |
2465 | .Ar jname | |
2466 | at jail startup. | |
b58abc5e SW |
2467 | .It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_start |
2468 | .Pq Vt str | |
2469 | Set to | |
2470 | .Dq Li /bin/sh /etc/rc | |
2471 | by default. | |
2472 | This is the command executed at jail startup. | |
2473 | .It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_stop | |
2474 | .Pq Vt str | |
2475 | Set to | |
2476 | .Dq Li /bin/sh /etc/rc.shutdown | |
2477 | by default. | |
2478 | This is the command executed at jail shutdown. | |
9432215f | 2479 | .It Va jail_default_set_hostname_allow |
445243bf RG |
2480 | .Pq Vt bool |
2481 | If set to | |
2482 | .Dq Li NO , | |
2483 | do not allow the root user in a jail to set its hostname. | |
9432215f | 2484 | .It Va jail_default_socket_unixiproute_only |
445243bf RG |
2485 | .Pq Vt bool |
2486 | If set to | |
b58abc5e SW |
2487 | .Dq Li YES , |
2488 | do not allow any sockets, | |
2489 | besides UNIX/IP/route sockets, | |
2490 | to be used within a jail. | |
9432215f | 2491 | .It Va jail_default_sysvipc_allow |
445243bf RG |
2492 | .Pq Vt bool |
2493 | If set to | |
2494 | .Dq Li YES , | |
2495 | allow applications within a jail to use System V IPC. | |
9432215f AHJ |
2496 | .It Va jail_default_chflags_allow |
2497 | .Pq Vt bool | |
2498 | If set to | |
2499 | .Dq Li YES , | |
2500 | allow applications within a jail to alter system file flags. | |
2501 | .It Va jail_default_raw_sockets_allow | |
2502 | .Pq Vt bool | |
2503 | If set to | |
2504 | .Dq Li YES , | |
2505 | allow applications within a jail to user raw sockets. | |
fe8bb091 AHJ |
2506 | .It Va jail_default_allow_listen_override |
2507 | .Pq Vt bool | |
2508 | If set to | |
2509 | .Dq Li YES , | |
2510 | allows both wildcard and non-wildcard listen sockets in the jail to | |
2511 | override wildcard listen sockets on the host. | |
0e132b2a AH |
2512 | .It Va lvm_enable |
2513 | .Pq Vt bool | |
2514 | If set to | |
2515 | .Dq Li YES | |
2516 | LVM volumes will be discovered and configured on boot. | |
842eea5b SW |
2517 | .It Va newsyslog_enable |
2518 | .Pq Vt bool | |
2519 | If set to | |
2520 | .Dq Li YES , | |
2521 | run | |
2522 | .Xr newsyslog 8 | |
2523 | before syslogd starts. | |
2524 | .It Va newsyslog_flags | |
2525 | .Pq Vt str | |
2526 | If | |
2527 | .Va newsyslog_enable | |
2528 | is set to | |
2529 | .Dq Li YES , | |
2530 | these are the flags passed to | |
2531 | .Xr newsyslog 8 . | |
850afac2 SW |
2532 | .It Va resident_enable |
2533 | .Pq Vt bool | |
2534 | If set to | |
2535 | .Dq Li YES , | |
2536 | make the dynamic binaries listed in | |
2537 | .Pa /etc/resident.conf | |
2538 | resident. | |
2539 | .It Va varsym_enable | |
2540 | .Pq Vt bool | |
2541 | If set to | |
2542 | .Dq Li YES , | |
2543 | process | |
2544 | .Pa /etc/varsym.conf | |
2545 | to set system-wide variables for variant symlinks. | |
705d55f1 | 2546 | .It Va rand_irqs |
850afac2 SW |
2547 | .Pq Vt str |
2548 | Set either to | |
2549 | .Dq Li NO | |
2550 | or a whitespace separated list of IRQ numbers which will be used as a source of | |
2551 | randomness. | |
984263bc | 2552 | .\" ----------------------------------------------------- |
445243bf RG |
2553 | .It Va entropy_dir |
2554 | .Pq Vt str | |
2555 | Set to | |
2556 | .Dq Li NO | |
2557 | to disable caching entropy via | |
2558 | .Xr cron 8 . | |
2559 | Otherwise set to the directory used to store entropy files in. | |
2560 | .It Va entropy_file | |
2561 | .Pq Vt str | |
2562 | Set to | |
2563 | .Dq Li NO | |
2564 | to disable caching entropy through reboots. | |
225e0ed5 | 2565 | Otherwise set to the filename used to store cached entropy through reboots. |
445243bf RG |
2566 | This file should be located on the root file system to seed the |
2567 | .Xr random 4 | |
2568 | device as early as possible in the boot process. | |
ceccfc6b AH |
2569 | .It Va entropy_save_sz |
2570 | .Pq Vt int | |
2571 | Determines the size of the entropy cache files used for entropy cached | |
2572 | through reboots and also entropy cached via | |
2573 | .Xr cron 8 . | |
2574 | The entropy is fed to the system in blocks of 512 bytes, so this number | |
2575 | should be large enough to fill as many of the entropy pools in the kernel | |
2576 | CSPRNG as possible. | |
2577 | By default, it is set to 16384, which should be able to seed all 32 entropy | |
2578 | pools in the Fortuna CSPRNG. | |
445243bf RG |
2579 | .It Va dmesg_enable |
2580 | .Pq Vt bool | |
2581 | Set to | |
2582 | .Dq Li YES | |
2583 | to save | |
2584 | .Xr dmesg 8 | |
2585 | to | |
2586 | .Pa /var/run/dmesg.boot | |
2587 | on boot. | |
2588 | .It Va rcshutdown_timeout | |
2589 | .Pq Vt int | |
2590 | If set, start a watchdog timer in the background which will terminate | |
2591 | .Pa rc.shutdown | |
2592 | if | |
2593 | .Xr shutdown 8 | |
2594 | has not completed within the specified time (in seconds). | |
699c19e3 SW |
2595 | Notice that in addition to this soft timeout, |
2596 | .Xr init 8 | |
2597 | also applies a hard timeout for the execution of | |
2598 | .Pa rc.shutdown . | |
2599 | This is configured via | |
2600 | .Xr sysctl 8 | |
2601 | variable | |
2602 | .Va kern.init_shutdown_timeout | |
2603 | and defaults to 120 seconds. Setting the value of | |
2604 | .Va rcshutdown_timeout | |
2605 | to more than 120 seconds will have no effect until the | |
2606 | .Xr sysctl 8 | |
2607 | variable | |
2608 | .Va kern.init_shutdown_timeout | |
2609 | is also increased. | |
0e132b2a AH |
2610 | .It Va udevd_enable |
2611 | .Pq Vt bool | |
2612 | If set to | |
2613 | .Dq Li YES , | |
2614 | the udevd daemon will be started on boot. | |
7f180e19 | 2615 | .It Va vfs_quota_enable |
9be2bba0 FT |
2616 | .Pq Vt bool |
2617 | If set to | |
2618 | .Dq Li YES , | |
7f180e19 FT |
2619 | vfs quota rc.d scripts will be run on boot. |
2620 | .It Va vfs_quota_sync | |
9be2bba0 FT |
2621 | .Pq Vt str |
2622 | List of mount points whose counters are to be synchronized with on-disk | |
a42bad2d SW |
2623 | usage during system startup. |
2624 | See also | |
9be2bba0 | 2625 | .Xr vquota 8 . |
ff625697 AHJ |
2626 | .It Va vknetd_enable |
2627 | .Pq Vt bool | |
b7610907 | 2628 | If set to |
ff625697 AHJ |
2629 | .Dq Li YES , |
2630 | .Xr vknetd 8 | |
2631 | will be started on boot. | |
2632 | .It Va vknetd_flags | |
2633 | .Pq Vt bool | |
2634 | Additional flags passed to | |
2635 | .Xr vknetd 8 . | |
2636 | Usually address/cidrbits is specified here. | |
2637 | When no flags are passed, default option | |
2638 | .Fl U | |
2639 | will be used. | |
2feb07f7 SW |
2640 | .It Va vkernel_enable |
2641 | .Pq Vt bool | |
2642 | If set to | |
2643 | .Dq Li NO , | |
2644 | any configured vkernels will not be started. | |
fa568972 R |
2645 | .It Va vkernel_kill_timeout |
2646 | .Pq Vt int | |
2647 | This defines the default number of seconds that we will wait for the | |
a42bad2d SW |
2648 | vkernel to shut down on its own. |
2649 | If after this time it's still alive, | |
fa568972 R |
2650 | it will be killed with SIGKILL. |
2651 | .It Va vkernel_bin | |
2652 | .Pq Vt str | |
2653 | Defines the default path to the vkernel binary. | |
2feb07f7 SW |
2654 | .It Va vkernel_list |
2655 | .Pq Vt str | |
2656 | A space separated list of names for vkernels. | |
2657 | This is purely a configuration aid to help identify and | |
2658 | configure multiple vkernels. | |
2659 | The names specified in this list will be used to | |
2660 | identify settings common to a vkernel instance. | |
2661 | Assuming that the vkernel in question was named | |
2662 | .Li example , | |
2663 | you would have the following dependent variables | |
2664 | (filled with reference values in this text): | |
2665 | .Bd -literal | |
dd7331fe | 2666 | vkernel_example_bin="/usr/obj/usr/src/sys/VKERNEL64/kernel.debug" |
2feb07f7 SW |
2667 | vkernel_example_memsize="64m" |
2668 | vkernel_example_rootimg_list="/var/vkernel/rootimg.01" | |
86dac8bc AHJ |
2669 | vkernel_example_memimg="/var/vkernel/memimg.000001" |
2670 | vkernel_example_user="myuser" | |
2feb07f7 SW |
2671 | vkernel_example_iface_list="auto:bridge0" |
2672 | vkernel_example_logfile="/dev/null" | |
2673 | vkernel_example_flags="-U" | |
fa568972 | 2674 | vkernel_example_kill_timeout="45" |
2feb07f7 SW |
2675 | .Ed |
2676 | .Pp | |
86dac8bc | 2677 | The last six are optional. |
2feb07f7 SW |
2678 | They default to an empty string if not set, except for logfile which defaults to |
2679 | .Pa /dev/null | |
2680 | if it is not set. | |
86dac8bc AHJ |
2681 | .Pp |
2682 | Note that in case | |
2683 | .Va vkernel_memimg | |
806019c7 SW |
2684 | is not set, the |
2685 | .Pa rc.d | |
2686 | script will create | |
2687 | .Pa /var/vkernel , | |
2688 | which is the vkernel's default directory for memory images, | |
2689 | with permissions of 1777, i.e. world writable with the sticky bit set | |
2690 | (see | |
2691 | .Xr sticky 8 ) . | |
e2950f41 TK |
2692 | .It Va autofs_enable |
2693 | .Pq Vt bool | |
2694 | If set to | |
2695 | .Dq Li YES , | |
2696 | start the | |
2697 | .Xr automount 8 | |
2698 | utility and the | |
2699 | .Xr automountd 8 | |
2700 | and | |
2701 | .Xr autounmountd 8 | |
2702 | daemons at boot time. | |
2703 | .It Va automount_flags | |
2704 | .Pq Vt str | |
2705 | If | |
2706 | .Va autofs_enable | |
2707 | is set to | |
2708 | .Dq Li YES , | |
2709 | these are the flags to pass to the | |
2710 | .Xr automount 8 | |
2711 | program. | |
2712 | By default no flags are passed. | |
2713 | .It Va automountd_flags | |
2714 | .Pq Vt str | |
2715 | If | |
2716 | .Va autofs_enable | |
2717 | is set to | |
2718 | .Dq Li YES , | |
2719 | these are the flags to pass to the | |
2720 | .Xr automountd 8 | |
2721 | daemon. | |
2722 | By default no flags are passed. | |
2723 | .It Va autounmountd_flags | |
2724 | .Pq Vt str | |
2725 | If | |
2726 | .Va autofs_enable | |
2727 | is set to | |
2728 | .Dq Li YES , | |
2729 | these are the flags to pass to the | |
2730 | .Xr autounmountd 8 | |
2731 | daemon. | |
2732 | By default no flags are passed. | |
984263bc MD |
2733 | .El |
2734 | .Sh FILES | |
717e8ef7 | 2735 | .Bl -tag -width ".Pa /etc/start_if. Ns Aq Ar interface" -compact |
984263bc MD |
2736 | .It Pa /etc/defaults/rc.conf |
2737 | .It Pa /etc/rc.conf | |
2738 | .It Pa /etc/rc.conf.local | |
717e8ef7 | 2739 | .It Pa /etc/start_if. Ns Aq Ar interface |
984263bc MD |
2740 | .El |
2741 | .Sh SEE ALSO | |
984263bc MD |
2742 | .Xr gdb 1 , |
2743 | .Xr info 1 , | |
445243bf | 2744 | .Xr kbdcontrol 1 , |
850afac2 | 2745 | .Xr varsym 1 , |
984263bc | 2746 | .Xr vidcontrol 1 , |
445243bf | 2747 | .Xr ip 4 , |
27e9fed5 | 2748 | .Xr ipfw 4 , |
445243bf | 2749 | .Xr kld 4 , |
27e9fed5 | 2750 | .Xr pf 4 , |
984263bc MD |
2751 | .Xr tcp 4 , |
2752 | .Xr udp 4 , | |
ccb8cebe | 2753 | .Xr vlan 4 , |
451640b7 | 2754 | .Xr wg 4 , |
71990c18 SW |
2755 | .Xr autofs 5 , |
2756 | .Xr auto_master 5 , | |
984263bc MD |
2757 | .Xr exports 5 , |
2758 | .Xr motd 5 , | |
850afac2 SW |
2759 | .Xr resident.conf 5 , |
2760 | .Xr varsym.conf 5 , | |
984263bc | 2761 | .Xr accton 8 , |
71990c18 SW |
2762 | .Xr automount 8 , |
2763 | .Xr automountd 8 , | |
2764 | .Xr autounmountd 8 , | |
5f834906 | 2765 | .Xr btconfig 8 , |
ec4e37b7 | 2766 | .Xr bthcid 8 , |
984263bc | 2767 | .Xr cron 8 , |
4b8c406a | 2768 | .Xr devd 8 , |
984263bc | 2769 | .Xr dhclient 8 , |
4eba35c8 | 2770 | .Xr dhcpcd 8 , |
c54db4b1 | 2771 | .Xr dntpd 8 , |
850afac2 | 2772 | .Xr ftpd 8 , |
984263bc MD |
2773 | .Xr ifconfig 8 , |
2774 | .Xr inetd 8 , | |
03137732 | 2775 | .Xr ip6addrctl 8 , |
b58abc5e | 2776 | .Xr jail 8 , |
984263bc | 2777 | .Xr lpd 8 , |
375d1659 | 2778 | .Xr makewhatis 8 , |
850afac2 | 2779 | .Xr mixer 8 , |
984263bc MD |
2780 | .Xr mountd 8 , |
2781 | .Xr moused 8 , | |
984263bc | 2782 | .Xr nfsd 8 , |
984263bc | 2783 | .Xr pcnfsd 8 , |
27e9fed5 SW |
2784 | .Xr pfctl 8 , |
2785 | .Xr pflogd 8 , | |
984263bc MD |
2786 | .Xr quotacheck 8 , |
2787 | .Xr quotaon 8 , | |
2788 | .Xr rc 8 , | |
2789 | .Xr rc.sendmail 8 , | |
850afac2 SW |
2790 | .Xr resident 8 , |
2791 | .Xr rndcontrol 8 , | |
984263bc MD |
2792 | .Xr route 8 , |
2793 | .Xr routed 8 , | |
3b813696 | 2794 | .Xr rpcbind 8 , |
984263bc MD |
2795 | .Xr rpc.lockd 8 , |
2796 | .Xr rpc.statd 8 , | |
717e8ef7 | 2797 | .Xr rtadvd 8 , |
bdbd8a5b | 2798 | .Xr rtsold 8 , |
984263bc MD |
2799 | .Xr rwhod 8 , |
2800 | .Xr savecore 8 , | |
5f834906 | 2801 | .Xr sdpd 8 , |
eb3a3472 | 2802 | .Xr sensorsd 8 , |
984263bc MD |
2803 | .Xr sshd 8 , |
2804 | .Xr swapon 8 , | |
2805 | .Xr sysctl 8 , | |
2806 | .Xr syslogd 8 , | |
57de1762 | 2807 | .Xr sysvipcd 8 , |
984263bc | 2808 | .Xr vinum 8 , |
8716355d | 2809 | .Xr wpa_supplicant 8 , |
984263bc MD |
2810 | .Xr yp 8 , |
2811 | .Xr ypbind 8 , | |
2812 | .Xr ypserv 8 , | |
71990c18 | 2813 | .Xr ypset 8 |
984263bc MD |
2814 | .Sh HISTORY |
2815 | The | |
2816 | .Nm | |
2817 | file appeared in | |
2818 | .Fx 2.2.2 . | |
2819 | .Sh AUTHORS | |
2820 | .An Jordan K. Hubbard . |