xref: /dflybsd-src/share/man/man5/rc.conf.5 (revision 7f3d8d5546c701eceefe4437a49ffa6f01c7aa09)
1.\" Copyright (c) 1995
2.\"	Jordan K. Hubbard
3.\"
4.\" Redistribution and use in source and binary forms, with or without
5.\" modification, are permitted provided that the following conditions
6.\" are met:
7.\" 1. Redistributions of source code must retain the above copyright
8.\"    notice, this list of conditions and the following disclaimer.
9.\" 2. Redistributions in binary form must reproduce the above copyright
10.\"    notice, this list of conditions and the following disclaimer in the
11.\"    documentation and/or other materials provided with the distribution.
12.\"
13.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND
14.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
15.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
16.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR BE LIABLE
17.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
18.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
19.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
20.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
21.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
22.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
23.\" SUCH DAMAGE.
24.\"
25.\" $FreeBSD: src/share/man/man5/rc.conf.5,v 1.197 2003/07/28 13:56:00 mbr Exp $
26.\"
27.Dd February 18, 2013
28.Dt RC.CONF 5
29.Os
30.Sh NAME
31.Nm rc.conf
32.Nd system configuration information
33.Sh DESCRIPTION
34The file
35.Nm
36contains descriptive information about the local host name, configuration
37details for any potential network interfaces and which services should be
38started up at system initial boot time.
39In new installations, the
40.Nm
41file is generally initialized by the installer.
42.Pp
43The purpose of
44.Nm
45is not to run commands or perform system startup actions directly.
46Instead, it is included by the various generic startup scripts in
47.Pa /etc
48which conditionalize their
49internal actions according to the settings found there.
50.Pp
51The
52.Pa /etc/defaults/rc.conf
53file specifies the default settings for all the available options,
54the
55.Pa /etc/rc.conf
56file specifies override settings.
57Options need only be specified in
58.Pa /etc/rc.conf
59when the system administrator wishes to override the defaults.
60The file
61.Pa /etc/rc.conf.local
62is used to override settings in
63.Pa /etc/rc.conf
64for historical reasons.
65In addition to
66.Pa /etc/rc.conf.local
67you can also place smaller configuration files for each
68.Xr rc 8
69script in the
70.Pa /etc/rc.conf.d
71directory, which will be included by the
72.Va load_rc_config
73function.
74For jail configurations you could use the file
75.Pa /etc/rc.conf.d/jail
76to store jail specific configuration options.
77Also see the
78.Va rc_conf_files
79variable below.
80.Pp
81The following list provides a name and short description for each
82variable that can be set in the
83.Nm
84file.
85To set a variable of
86.Vt bool
87type, specify either
88.Dq Li YES ,
89.Dq Li TRUE ,
90.Dq Li ON ,
91or
92.Dq Li 1 .
93To unset, specify
94.Dq Li NO ,
95.Dq Li FALSE ,
96.Dq Li OFF ,
97or
98.Dq Li 0 .
99These values are case insensitive.
100The
101.Va _enable
102postfix in the name of a variable for starting a service can be
103omitted (as in
104.Nx ) .
105.Bl -tag -width indent-two
106.It Va rc_debug
107.Pq Vt bool
108If set to
109.Dq Li YES ,
110enable output of debug messages from rc scripts.
111This variable can be helpful in diagnosing mistakes when
112editing or integrating new scripts.
113Beware that this produces copious output to the terminal and
114.Xr syslog 3 .
115.It Va rc_info
116.Pq Vt bool
117If set to
118.Dq Li NO ,
119disable informational messages from the rc scripts.
120Informational messages are displayed when
121a condition that is not serious enough to warrant a warning or an error occurs.
122.It Va swapfile
123.Pq Vt str
124If set to
125.Dq Li NO ,
126no swapfile is installed, otherwise the value is used as the full
127pathname to a file to use for additional swap space.
128The
129.Xr vn 4
130driver is needed for a swapfile and will be loaded if it is not
131already compiled into the kernel or loaded via
132.Xr loader.conf 5 .
133.It Va apm_enable
134.Pq Vt bool
135If set to
136.Dq Li YES ,
137enable support for Automatic Power Management with the
138.Xr apm 8
139command.
140.It Va apmd_enable
141.Pq Vt bool
142Run
143.Xr apmd 8
144to handle APM event from userland.
145This also enables support for APM.
146.It Va apmd_flags
147.Pq Vt str
148If
149.Va apmd_enable
150is set to
151.Dq Li YES ,
152these are the flags to pass to the
153.Xr apmd 8
154daemon.
155.It Va battd_enable
156Enable
157.Xr battd 8
158to monitor the status of batteries present in the system.
159This also enables support for APM.
160.It Va battd_flags
161.Pq Vt str
162If
163.Va battd_enable
164is set to
165.Dq Li YES ,
166these are the flags to pass to the
167.Xr battd 8
168daemon.
169.It Va devd_enable
170.Pq Vt bool
171Run
172.Xr devd 8
173to handle device added, removed or unknown events from the kernel.
174.It Va devd_flags
175.Pq Vt str
176If
177.Va devd_enable
178is set to
179.Dq Li YES ,
180these are the flags to pass to the
181.Xr devd 8
182daemon.
183.It Va powerd_enable
184.Pq Vt bool
185Set to
186.Dq Li NO
187by default.
188Setting this to
189.Dq Li YES
190enables
191.Xr powerd 8 ,
192a CPU speed control daemon.
193.It Va sensorsd_enable
194.Pq Vt bool
195Set to
196.Dq Li NO
197by default.
198Setting this to
199.Dq Li YES
200enables
201.Xr sensorsd 8 ,
202a sensors monitoring and logging daemon.
203.It Va sensorsd_flags
204.Pq Vt str
205Empty by default.
206Additional flags passed to the
207.Xr sensorsd 8
208program.
209.It Va hotplugd_enable
210.Pq Vt bool
211Set to
212.Dq Li NO
213by default.
214Setting this to
215.Dq Li YES
216enables
217.Xr hotplugd 8 ,
218a devices hot plugging monitoring daemon.
219.It Va hotplugd_flags
220.Pq Vt str
221Empty by default.
222Additional flags passed to the
223.Xr hotplugd 8
224program.
225.It Va pccard_ifconfig
226.Pq Vt str
227List of arguments to be passed to
228.Xr ifconfig 8
229at boot time or on insertion of the card (e.g.\&
230.Dq Cm inet Li 192.168.1.1 Cm netmask Li 255.255.255.0
231for a fixed address or
232.Dq Li DHCP
233for a DHCP client).
234.It Va pccard_ether_delay
235.Pq Vt str
236Set the delay before starting
237.Xr dhclient 8
238in the
239.Pa /etc/pccard_ether
240script.
241This defaults to 5 seconds to work around a bug in the
242.Xr ed 4
243driver which can lead to system hangs when using some newer
244.Xr ed 4
245based cards.
246.It Va removable_interfaces
247.Pq Vt str
248List of removable network interfaces to be supported by
249.Pa /etc/pccard_ether .
250.It Va local_startup
251.Pq Vt str
252List of directories to search for startup script files.
253.It Va script_name_sep
254.Pq Vt str
255The field separator to use for breaking down the list of startup script files
256into individual filenames.
257The default is a space.
258It is not necessary to change this unless there are startup scripts with names
259containing spaces.
260.It Va hostapd_enable
261.Pq Vt bool
262Set to
263.Dq Li YES
264to start
265.Xr hostapd 8
266at system boot time.
267.It Va hostname
268.Pq Vt str
269The fully qualified domain name (FQDN) of this host on the network.
270This should almost certainly be set to something meaningful, even if
271there is no network connection.
272If
273.Xr dhclient 8
274is used to set the hostname via DHCP,
275this variable should be set to an empty string.
276.It Va ipv6_enable
277.Pq Vt bool
278Enable support for IPv6 networking.
279Note that this requires that the kernel have been compiled with
280.Cd "options INET6" .
281.It Va nisdomainname
282.Pq Vt str
283The NIS domain name of this host, or
284.Dq Li NO
285if NIS is not used.
286.It Va dhclient_program
287.Pq Vt str
288Path to the DHCP client program
289(default
290.Pa /sbin/dhclient ) .
291.It Va dhclient_flags
292.Pq Vt str
293Additional flags to pass to the DHCP client program.
294.It Va pf_enable
295.Pq Vt bool
296Set to
297.Dq Li YES
298to load
299.Xr pf 4
300at startup.
301If the kernel was not built with
302.Cd "device pf" ,
303the
304.Pa pf.ko
305kernel module will be loaded.
306See also
307.Va firewall_enable .
308.It Va pf_rules
309.Pq Vt str
310Path to the
311.Xr pf 4
312ruleset definition file.
313.It Va pf_program
314.Pq Vt str
315Path to
316.Xr pfctl 8 .
317.It Va pf_flags
318.Pq Vt str
319If
320.Va pf_enable
321is set to
322.Dq Li YES ,
323these are the flags to pass to
324.Xr pfctl 8
325when loading the ruleset.
326.It Va pflog_enable
327.Pq Vt bool
328Set this to
329.Dq Li YES
330to enable
331.Xr pflogd 8
332which logs packets from
333.Xr pf 4 .
334.It Va pflog_logfile
335.Pq Vt str
336If
337.Va pflog_enable
338is set to
339.Dq Li YES
340this specifies the path of the log file.
341.It Va pflog_program
342.Pq Vt str
343Path to
344.Xr pflogd 8 .
345.It Va pflog_flags
346.Pq Vt str
347If
348.Va pflog_enable
349is set to
350.Dq Li YES ,
351these are the flags to pass to
352.Xr pflogd 8 .
353.It Va firewall_enable
354.Pq Vt bool
355Set to
356.Dq Li YES
357to load firewall rules at startup.
358If the kernel was not built with
359.Cd "options IPFIREWALL" ,
360the
361.Pa ipfw.ko
362kernel module will be loaded.
363See also
364.Va pf_enable .
365.It Va ipv6_firewall_enable
366.Pq Vt bool
367The IPv6 equivalent of
368.Va firewall_enable .
369Set to
370.Dq Li YES
371to load IPv6 firewall rules at startup.
372If the kernel was not built with
373.Cd "options IPV6FIREWALL" ,
374the
375.Pa ip6fw.ko
376kernel module will be loaded.
377.It Va firewall_script
378.Pq Vt str
379The full path to the firewall script to run
380(default
381.Pa /etc/rc.firewall ) .
382.It Va ipv6_firewall_script
383.Pq Vt str
384The IPv6 equivalent of
385.Va firewall_script .
386.It Va firewall_type
387.Pq Vt str
388Names the firewall type from the selection in
389.Pa /etc/rc.firewall ,
390or the file which contains the local firewall ruleset.
391Valid selections from
392.Pa /etc/rc.firewall
393are:
394.Pp
395.Bl -tag -width ".Li simple" -compact
396.It Li open
397unrestricted IP access
398.It Li closed
399all IP services disabled, except via
400.Dq Li lo0
401.It Li client
402basic protection for a workstation on a LAN
403.It Li simple
404alias for
405.Li client .
406.El
407.Pp
408If a filename is specified, the full path must be given.
409.It Va firewall_trusted_nets
410.Pq Vt str
411List of trusted networks (if
412.Va firewall_type
413is set to
414.Li client ) .
415.It Va firewall_trusted_interfaces
416.Pq Vt str
417List of trusted network interfaces (if
418.Va firewall_type
419is set to
420.Li client ) .
421.It Va firewall_allowed_icmp_types
422.Pq Vt str
423List of allowed ICMP types (if
424.Va firewall_type
425is set to
426.Li client ) .
427.It Va firewall_open_tcp_ports
428.Pq Vt str
429List of TCP ports to open (if
430.Va firewall_type
431is set to
432.Li client ) .
433.It Va firewall_open_udp_ports
434.Pq Vt str
435List of UDP ports to open (if
436.Va firewall_type
437is set to
438.Li client ) .
439.It Va ipv6_firewall_type
440.Pq Vt str
441The IPv6 equivalent of
442.Va firewall_type .
443.It Va firewall_quiet
444.Pq Vt bool
445Set to
446.Dq Li YES
447to disable the display of firewall rules on the console during boot.
448.It Va ipv6_firewall_quiet
449.Pq Vt bool
450The IPv6 equivalent of
451.Va firewall_quiet .
452.It Va firewall_logging
453.Pq Vt bool
454Set to
455.Dq Li YES
456to enable firewall event logging.
457This is equivalent to the
458.Dv IPFIREWALL_VERBOSE
459kernel option.
460.It Va ipv6_firewall_logging
461.Pq Vt bool
462The IPv6 equivalent of
463.Va firewall_logging .
464.It Va firewall_flags
465.Pq Vt str
466Flags passed to
467.Xr ipfw 8
468if
469.Va firewall_type
470specifies a filename.
471.It Va ipv6_firewall_flags
472.Pq Vt str
473The IPv6 equivalent of
474.Va firewall_flags .
475.It Va natd_program
476.Pq Vt str
477Path to
478.Xr natd 8 .
479.It Va natd_enable
480.Pq Vt bool
481Set to
482.Dq Li YES
483to enable
484.Xr natd 8 .
485.Va firewall_enable
486must also be set to
487.Dq Li YES ,
488and
489.Xr divert 4
490sockets must be enabled in the kernel.
491.It Va natd_interface
492.Pq Vt str
493This is the name of the public interface on which
494.Xr natd 8
495should run.
496The interface may be given as an interface name or as an IP address.
497.It Va natd_flags
498.Pq Vt str
499Additional
500.Xr natd 8
501flags should be placed here.
502The
503.Fl n
504or
505.Fl a
506flag is automatically added with the above
507.Va natd_interface
508as an argument.
509.It Va tcp_extensions
510.Pq Vt bool
511Set to
512.Dq Li YES
513by default.
514Setting this to
515.Dq Li NO
516disables certain TCP options as described by
517.Rs
518.%T "RFC 1323"
519.Re
520Setting this to
521.Dq Li NO
522might help remedy such problems with connections as randomly hanging
523or other weird behavior.
524Some network devices are known to be broken with respect to these options.
525.It Va log_in_vain
526.Pq Vt int
527Set to 0 by default.
528The
529.Xr sysctl 8
530variables,
531.Va net.inet.tcp.log_in_vain
532and
533.Va net.inet.udp.log_in_vain ,
534as described in
535.Xr tcp 4
536and
537.Xr udp 4 ,
538are set to the given value.
539.It Va tcp_keepalive
540.Pq Vt bool
541Set to
542.Dq Li YES
543by default.
544Setting to
545.Dq Li NO
546will disable probing idle TCP connections to verify that the
547peer is still up and reachable.
548.It Va tcp_drop_synfin
549.Pq Vt bool
550Set to
551.Dq Li NO
552by default.
553Setting to
554.Dq Li YES
555will cause the kernel to ignore TCP frames that have both
556the SYN and FIN flags set.
557This prevents OS fingerprinting, but may break some legitimate applications.
558This option is only available if the kernel was built with the
559.Dv TCP_DROP_SYNFIN
560option.
561.It Va icmp_drop_redirect
562.Pq Vt bool
563Set to
564.Dq Li NO
565by default.
566Setting to
567.Dq Li YES
568will cause the kernel to ignore ICMP REDIRECT packets.
569Refer to
570.Xr icmp 4
571for more information.
572.It Va icmp_log_redirect
573.Pq Vt bool
574Set to
575.Dq Li NO
576by default.
577Setting to
578.Dq Li YES
579will cause the kernel to log ICMP REDIRECT packets.
580Note that
581the log messages are not rate-limited, so this option should only be used
582for troubleshooting networks.
583Refer to
584.Xr icmp 4
585for more information.
586.It Va icmp_bmcastecho
587.Pq Vt bool
588Set to
589.Dq Li YES
590to respond to broadcast or multicast ICMP ping packets.
591Refer to
592.Xr icmp 4
593for more information.
594.It Va ip_portrange_first
595.Pq Vt int
596If not set to
597.Dq Li NO ,
598this is the first port in the default portrange.
599Refer to
600.Xr ip 4
601for more information.
602.It Va ip_portrange_last
603.Pq Vt int
604If not set to
605.Dq Li NO ,
606this is the last port in the default portrange.
607Refer to
608.Xr ip 4
609for more information.
610.\"
611.It Va ifconfig_ Ns Aq Ar interface
612.Pq Vt str
613Configuration for
614.Dq interface .
615Typically includes IP address.
616Assuming that the interface in question was
617.Li ed0 ,
618it might look something like this:
619.Bd -literal
620ifconfig_ed0="inet 10.0.0.1 netmask 0xffff0000"
621.Ed
622.Pp
623If the
624.Pa /etc/start_if. Ns Aq Ar interface
625file is present, it is read and executed by the
626.Xr sh 1
627interpreter before configuring the interface as specified in the
628.Va ifconfig_ Ns Aq Ar interface
629and
630.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n
631variables.
632.Pp
633It is possible to bring up an interface with DHCP by adding
634.Dq Li DHCP
635to the
636.Va ifconfig_ Ns Aq Ar interface
637variable.
638For instance, to initialize the
639.Li ed0
640device via DHCP, it is possible to use something like:
641.Bd -literal
642ifconfig_ed0="DHCP"
643.Ed
644.Pp
645If a
646.Va wlans_ Ns Aq Ar interface
647variable is set,
648an
649.Xr wlan 4
650interface will be created for each item in the list with the
651.Ar wlandev
652argument set to
653.Ar interface .
654Further wlan cloning arguments may be passed to the
655.Xr ifconfig 8
656.Cm create
657command by setting the
658.Va create_args_ Ns Aq Ar interface
659variable.
660One or more
661.Xr wlan 4
662devices must be created for each wireless devices as of
663.Dx 2.5 .
664Debugging flags for
665.Xr wlan 4
666devices as set by
667.Xr wlandebug 8
668may be specified with an
669.Va wlandebug_ Ns Aq Ar interface
670variable.
671The contents of this variable will be passed directly to
672.Xr wlandebug 8 .
673.Pp
674Also, if your interface needs WPA authentication, it is possible to add
675.Dq Li WPA
676to the
677.Va ifconfig_ Ns Aq Ar interface
678variable.
679This will start
680.Xr wpa_supplicant 8 .
681See
682.Xr wpa_supplicant.conf 5
683for configuring authentication information.
684.Pp
685Finally, you can add
686.Xr ifconfig 8
687options in this variable, in addition to the
688.Pa /etc/start_if. Ns Aq Ar interface
689file.
690For instance, to initialize the
691.Li wi0
692device via DHCP, using WPA authentication and 802.11b mode, it is
693possible to use something like:
694.Bd -literal
695wlans_wi0="wlan0"
696ifconfig_wlan0="up DHCP WPA mode 11b"
697.Ed
698.It Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n
699.Pq Vt str
700Configuration to establish an additional network address for
701.Dq interface .
702Assuming that the interface in question was
703.Li ed0 ,
704it might look something like this:
705.Bd -literal
706ifconfig_ed0_alias0="inet 127.0.0.253 netmask 0xffffffff"
707ifconfig_ed0_alias1="inet 127.0.0.254 netmask 0xffffffff"
708.Ed
709.Pp
710And so on.
711For each
712.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n
713entry that is found, its contents are passed to
714.Xr ifconfig 8 .
715Execution stops at the first unsuccessful access, so if
716something like this is present:
717.Bd -literal
718ifconfig_ed0_alias0="inet 127.0.0.251 netmask 0xffffffff"
719ifconfig_ed0_alias1="inet 127.0.0.252 netmask 0xffffffff"
720ifconfig_ed0_alias2="inet 127.0.0.253 netmask 0xffffffff"
721ifconfig_ed0_alias4="inet 127.0.0.254 netmask 0xffffffff"
722.Ed
723.Pp
724Then note that alias4 would
725.Em not
726be added since the search would stop with the missing alias3 entry.
727.It Va ifconfig_ Ns Ao Ar interface Ac Ns Va _name
728.Pq Vt str
729New name for
730.Dq interface .
731It is possible to rename interface by doing:
732.Bd -literal
733ifconfig_ed0_name="net0"
734ifconfig_net0="inet 10.0.0.1 netmask 0xffff0000"
735.Ed
736.It Va network_interfaces
737.Pq Vt str
738The list of network interfaces to configure on this host,
739or
740.Dq Li auto
741to configure all network interfaces
742(default
743.Dq Li auto ) .
744For example, if the only network devices to be configured are the loopback device
745.Pq Li lo0
746and a NIC using the
747.Xr ed 4
748driver, this could be set to
749.Dq Li "lo0 ed0" .
750An
751.Va ifconfig_ Ns Aq Ar interface
752variable is assumed to exist for each value of
753.Ar interface .
754.It Va ipv6_network_interfaces
755.Pq Vt str
756This is the IPv6 equivalent of
757.Va network_interfaces .
758Instead of setting the ifconfig variables as
759.Va ifconfig_ Ns Aq Ar interface
760they should be set as
761.Va ipv6_ifconfig_ Ns Aq Ar interface .
762Aliases should be set as
763.Va ipv6_ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n .
764Interfaces that do not have a
765.Va ipv6_ifconfig_ Ns Aq Ar interface
766setting will be auto configured by
767.Xr rtsol 8
768if the
769.Va ipv6_gateway_enable
770is set to
771.Dq Li NO .
772Note that the IPv6 networking code does not support the
773.Pa /etc/start_if. Ns Aq Ar interface
774files.
775.It Va ipv6_prefix_ Ns Aq Ar interface
776.Pq Vt str
777Assign prefix to
778.Ar interface ,
779prefixlen 64 is used.
780.It Va ipv6_default_interface
781.Pq Vt str
782If not set to
783.Dq Li NO ,
784this is the default output interface for scoped addresses.
785Now this works only for IPv6 link local multicast addresses.
786.It Va cloned_interfaces
787.Pq Vt str
788Set to the list of clonable network interfaces to create on this host.
789Entries in
790.Va cloned_interfaces
791are automatically appended to
792.Va network_interfaces
793for configuration.
794.It Va gif_interfaces
795.Pq Vt str
796Set to the list of
797.Xr gif 4
798tunnel interfaces to configure on this host.
799A
800.Va gifconfig_ Ns Aq Ar interface
801variable is assumed to exist for each value of
802.Ar interface .
803The value of this variable is used to configure the link layer of the
804tunnel according to the syntax of the
805.Cm tunnel
806option to
807.Xr ifconfig 8 .
808Additionally, this option ensures that each listed interface is created via the
809.Cm create
810option to
811.Xr ifconfig 8
812before attempting to configure it.
813.It Va sppp_interfaces
814.Pq Vt str
815Set to the list of
816.Xr sppp 4
817interfaces to configure on this host.
818A
819.Va spppconfig_ Ns Aq Ar interface
820variable is assumed to exist for each value of
821.Ar interface .
822Each interface should also be configured by a general
823.Va ifconfig_ Ns Aq Ar interface
824setting.
825Refer to
826.Xr spppcontrol 8
827for more information about available options.
828.It Va ppp_enable
829.Pq Vt bool
830If set to
831.Dq Li YES ,
832run the
833.Xr ppp 8
834daemon.
835.It Va ppp_mode
836.Pq Vt str
837Mode in which to run the
838.Xr ppp 8
839daemon.
840Accepted modes are
841.Dq Li auto ,
842.Dq Li ddial ,
843.Dq Li direct
844and
845.Dq Li dedicated .
846See the manual for a full description.
847.It Va ppp_nat
848.Pq Vt bool
849If set to
850.Dq Li YES ,
851enables network address translation.
852Used in conjunction with
853.Va gateway_enable
854allows hosts on private network addresses access to the Internet using
855this host as a network address translating router.
856.It Va ppp_profile
857.Pq Vt str
858The name of the profile to use from
859.Pa /etc/ppp/ppp.conf .
860.It Va ppp_user
861.Pq Vt str
862The name of the user under which
863.Xr ppp 8
864should be started.
865By default,
866.Xr ppp 8
867is started as
868.Dq Li root .
869.It Va rc_conf_files
870.Pq Vt str
871This option is used to specify a list of files that will override
872the settings in
873.Pa /etc/defaults/rc.conf .
874The files will be read in the order in which they are specified and should
875include the full path to the file.
876By default, the files specified are
877.Pa /etc/rc.conf
878and
879.Pa /etc/rc.conf.local
880.It Va fsck_y_enable
881.Pq Vt bool
882If set to
883.Dq Li YES ,
884.Xr fsck 8
885will be run with the
886.Fl y
887flag if the initial preen of the file systems fails.
888.It Va netfs_types
889.Pq Vt str
890List of file system types that are network-based.
891This list should generally not be modified by end users.
892Use
893.Va extra_netfs_types
894instead.
895.It Va extra_netfs_types
896.Pq Vt str
897If set to something other than
898.Dq Li NO
899(the default), this variable extends the list of file system types
900for which automatic mounting at startup by
901.Xr rc 8
902should be delayed until the network is initialized.
903It should contain
904a whitespace-separated list of network file system descriptor pairs,
905each consisting of a file system type as passed to
906.Xr mount 8
907and a human-readable, one-word description, joined with a colon
908.Pq Ql \&: .
909Extending the default list in this way is only necessary
910when third party file system types are used.
911.It Va devfs_config_files
912.Pq Vt str
913This option is used to specify a list of configuration files containing
914.Xr devfs 5
915rules that will be applied by
916.Xr devfsctl 8
917in the order in which they are specified and must include the full path
918to the file.
919.It Va syslogd_enable
920.Pq Vt bool
921If set to
922.Dq Li YES ,
923run the
924.Xr syslogd 8
925daemon.
926.It Va syslogd_program
927.Pq Vt str
928Path to
929.Xr syslogd 8
930(default
931.Pa /usr/sbin/syslogd ) .
932.It Va syslogd_flags
933.Pq Vt str
934If
935.Va syslogd_enable
936is set to
937.Dq Li YES ,
938these are the flags to pass to
939.Xr syslogd 8 .
940.It Va inetd_enable
941.Pq Vt bool
942If set to
943.Dq Li YES ,
944run the
945.Xr inetd 8
946daemon.
947.It Va inetd_program
948.Pq Vt str
949Path to
950.Xr inetd 8
951(default
952.Pa /usr/sbin/inetd ) .
953.It Va inetd_flags
954.Pq Vt str
955If
956.Va inetd_enable
957is set to
958.Dq Li YES ,
959these are the flags to pass to
960.Xr inetd 8 .
961.It Va rwhod_enable
962.Pq Vt bool
963If set to
964.Dq Li YES ,
965run the
966.Xr rwhod 8
967daemon at boot time.
968.It Va rwhod_flags
969.Pq Vt str
970If
971.Va rwhod_enable
972is set to
973.Dq Li YES ,
974these are the flags to pass to it.
975.It Va amd_enable
976.Pq Vt bool
977If set to
978.Dq Li YES ,
979run the
980.Xr amd 8
981daemon at boot time.
982.It Va amd_flags
983.Pq Vt str
984If
985.Va amd_enable
986is set to
987.Dq Li YES ,
988these are the flags to pass to it.
989See the
990.Xr amd 8
991manpage for more information.
992.It Va amd_map_program
993.Pq Vt str
994If set, the specified program is run to get the list of
995.Xr amd 8
996maps.
997For example, if the
998.Xr amd 8
999maps are stored in NIS, one can set this to run
1000.Xr ypcat 1
1001to get a list of
1002.Xr amd 8
1003maps from the
1004.Pa amd.master
1005NIS map.
1006.It Va update_motd
1007.Pq Vt bool
1008If set to
1009.Dq Li YES ,
1010.Pa /etc/motd
1011will be updated at boot time to reflect the kernel release being run.
1012If set to
1013.Dq Li NO ,
1014.Pa /etc/motd
1015will not be updated.
1016.It Va nfs_client_enable
1017.Pq Vt bool
1018If set to
1019.Dq Li YES ,
1020setup NFS client parameters at boot time.
1021.It Va nfs_access_cache
1022.Pq Vt int
1023If
1024.Va nfs_client_enable
1025is set to
1026.Dq Li YES ,
1027this can be set to
1028.Dq Li 0
1029to disable NFS ACCESS RPC caching, or to the number of seconds for which
1030NFS ACCESS results should be cached.
1031A value of 2-10 seconds will substantially reduce network traffic for
1032many NFS operations.
1033The default is 5 seconds.
1034Note that the attribute cache holds stat information only.
1035The NFS data cache is independent of the attribute cache and is only
1036invalidated when the client detects that the server has modified the
1037underlying file.
1038This value specifies a maximum timeout.
1039The NFS client will automatically use a shorter timeout for files which
1040have been recently modified.
1041.It Va nfs_neg_cache
1042.Pq Vt int
1043If
1044.Va nfs_client_enable
1045is set to
1046.Dq Li YES ,
1047this can be set to
1048.Dq Li 0
1049to disable the caching of NEGATIVE LOOKUPS (lookups of non-existent
1050filenames), or to the number of seconds for which negative lookups should
1051be cached.
1052A value of 2-10 seconds will substantially reduce network
1053traffic for many NFS operations, especially source code builds.
1054The default is 3 seconds.
1055.It Va nfs_server_enable
1056.Pq Vt bool
1057If set to
1058.Dq Li YES ,
1059run the NFS server daemons at boot time.
1060.It Va nfs_server_flags
1061.Pq Vt str
1062If
1063.Va nfs_server_enable
1064is set to
1065.Dq Li YES ,
1066these are the flags to pass to the
1067.Xr nfsd 8
1068daemon.
1069.It Va mountd_enable
1070.Pq Vt bool
1071If set to
1072.Dq Li YES ,
1073and no
1074.Va nfs_server_enable
1075is set, start
1076.Xr mountd 8 ,
1077but not
1078.Xr nfsd 8
1079daemon.
1080It is commonly needed to run CFS without real NFS used.
1081.It Va mountd_flags
1082.Pq Vt str
1083If
1084.Va mountd_enable
1085is set to
1086.Dq Li YES ,
1087these are the flags to pass to the
1088.Xr mountd 8
1089daemon.
1090.It Va weak_mountd_authentication
1091.Pq Vt bool
1092If set to
1093.Dq Li YES ,
1094allow services like PCNFSD to make non-privileged mount requests.
1095.It Va nfs_reserved_port_only
1096.Pq Vt bool
1097If set to
1098.Dq Li YES ,
1099provide NFS services only on a secure port.
1100.It Va nfs_bufpackets
1101.Pq Vt int
1102If set to a number, indicates the number of packets worth of
1103socket buffer space to reserve on an NFS client.
1104The kernel default is typically 4.
1105Using a higher number may be useful on gigabit networks to improve performance.
1106The minimum value is 2 and the maximum is 64.
1107.It Va rpc_umntall_enable
1108.Pq Vt bool
1109If set to
1110.Dq Li YES
1111(default) and we are also an NFS client, run
1112.Xr rpc.umntall 8
1113at boot time to clear out old mounts on remote servers.
1114If set to
1115.Dq Li NO
1116then
1117.Xr rpc.umntall 8
1118will not be run at boot time.
1119.It Va rpc_lockd_enable
1120.Pq Vt bool
1121If set to
1122.Dq Li YES
1123and also an NFS server, run
1124.Xr rpc.lockd 8
1125at boot time.
1126.It Va rpc_lockd_flags
1127.Pq Vt str
1128If
1129.Va rpc_lockd_enable
1130is set to
1131.Dq Li YES ,
1132these are the flags to pass to
1133.Xr rpc.lockd 8 .
1134.It Va rpc_statd_enable
1135.Pq Vt bool
1136If set to
1137.Dq Li YES
1138and also an NFS server, run
1139.Xr rpc.statd 8
1140at boot time.
1141.It Va rpc_statd_flags
1142.Pq Vt str
1143If
1144.Va rpc_statd_enable
1145is set to
1146.Dq Li YES ,
1147these are the flags to pass to
1148.Xr rpc.statd 8 .
1149.It Va rpcbind_program
1150.Pq Vt str
1151Path to program for rpcbind daemon
1152(default
1153.Pa /usr/sbin/rpcbind ) .
1154.It Va rpcbind_enable
1155.Pq Vt bool
1156If set to
1157.Dq Li YES ,
1158run
1159.Va rpcbind_program
1160at boot time.
1161.It Va rpcbind_flags
1162.Pq Vt str
1163If
1164.Va rpcbind_enable
1165is set to
1166.Dq Li YES ,
1167these are the flags to pass to
1168.Va rpcbind_program .
1169.It Va keyserv_enable
1170.Pq Vt bool
1171If set to
1172.Dq Li YES ,
1173run the
1174.Xr keyserv 8
1175daemon on boot for running Secure RPC.
1176.It Va keyserv_flags
1177.Pq Vt str
1178If
1179.Va keyserv_enable
1180is set to
1181.Dq Li YES ,
1182these are the flags to pass to
1183.Xr keyserv 8
1184daemon.
1185.It Va pppoed_enable
1186.Pq Vt bool
1187If set to
1188.Dq Li YES ,
1189run the
1190.Xr pppoed 8
1191daemon at boot time to provide PPP over Ethernet services.
1192.It Va pppoed_provider
1193.Pq Vt str
1194.Xr pppoed 8
1195listens to requests to this provider and ultimately runs
1196.Xr ppp 8
1197with a
1198.Ar system
1199argument of the same name.
1200.It Va pppoed_flags
1201.Pq Vt str
1202Additional flags to pass to
1203.Xr pppoed 8 .
1204.It Va pppoed_interface
1205.Pq Vt str
1206The network interface to run
1207.Xr pppoed 8
1208on.
1209This is mandatory when
1210.Va pppoed_enable
1211is set to
1212.Dq Li YES .
1213.It Va timed_enable
1214.Pq Vt bool
1215If set to
1216.Dq Li YES ,
1217run the
1218.Xr timed 8
1219service at boot time.
1220This command is intended for networks of machines where a consistent
1221.Dq "network time"
1222for all hosts must be established.
1223This is often useful in large NFS environments where time stamps on
1224files are expected to be consistent network-wide.
1225.It Va timed_flags
1226.Pq Vt str
1227If
1228.Va timed_enable
1229is set to
1230.Dq Li YES ,
1231these are the flags to pass to the
1232.Xr timed 8
1233service.
1234.It Va dntpd_enable
1235.Pq Vt bool
1236If set to
1237.Dq Li YES ,
1238run
1239.Xr dntpd 8
1240at system boot time.
1241.It Va dntpd_program
1242.Pq Vt str
1243Path to
1244.Xr dntpd 8
1245(default
1246.Pa /usr/sbin/dntpd ) .
1247.It Va dntpd_flags
1248.Pq Vt str
1249If
1250.Va dntpd_enable
1251is set to
1252.Dq Li YES ,
1253these are the flags to pass to the
1254.Xr dntpd 8
1255daemon.
1256.It Va btconfig_enable
1257.Pq Vt bool
1258If set to
1259.Dq Li YES ,
1260configure Bluetooth devices via
1261.Xr btconfig 8
1262at system boot time.
1263.It Va btconfig_devices
1264.Pq Vt str
1265If
1266.Va btconfig_enable
1267is set to
1268.Dq Li YES ,
1269this is the list of Bluetooth devices to configure.
1270If
1271.Va btconfig_devices
1272is not specified, all devices known to the system will be configured.
1273A
1274.Va btconfig_ Ns Aq Ar device
1275variable can be set to specify parameters to be passed to
1276.Ar device .
1277.It Va btconfig_args
1278.Pq Vt str
1279If
1280.Va btconfig_enable
1281is set to
1282.Dq Li YES ,
1283this is the list of configuration parameters to pass to all Bluetooth
1284devices.
1285.It Va sdpd_enable
1286.Pq Vt bool
1287If set to
1288.Dq Li YES ,
1289run the Service Discovery Profile daemon
1290.Xr ( sdpd 8 )
1291at system boot time.
1292.It Va sdpd_flags
1293.Pq Vt str
1294If
1295.Va sdpd_enable
1296is set to
1297.Dq Li YES ,
1298these are the flags to pass to the
1299.Xr sdpd 8
1300daemon.
1301.It Va bthcid_enable
1302.Pq Vt bool
1303If set to
1304.Dq Li YES ,
1305run the Bluetooth Link Key/PIN Code Manager daemon
1306.Xr ( bthcid 8 )
1307at system boot time.
1308.It Va bthcid_flags
1309.Pq Vt str
1310If
1311.Va bthcid_enable
1312is set to
1313.Dq Li YES ,
1314these are the flags to pass to the
1315.Xr bthcid 8
1316daemon.
1317.It Va nis_client_enable
1318.Pq Vt bool
1319If set to
1320.Dq Li YES ,
1321run the
1322.Xr ypbind 8
1323service at system boot time.
1324.It Va nis_client_flags
1325.Pq Vt str
1326If
1327.Va nis_client_enable
1328is set to
1329.Dq Li YES ,
1330these are the flags to pass to the
1331.Xr ypbind 8
1332service.
1333.It Va nis_ypset_enable
1334.Pq Vt bool
1335If set to
1336.Dq Li YES ,
1337run the
1338.Xr ypset 8
1339daemon at system boot time.
1340.It Va nis_ypset_flags
1341.Pq Vt str
1342If
1343.Va nis_ypset_enable
1344is set to
1345.Dq Li YES ,
1346these are the flags to pass to the
1347.Xr ypset 8
1348daemon.
1349.It Va nis_server_enable
1350.Pq Vt bool
1351If set to
1352.Dq Li YES ,
1353run the
1354.Xr ypserv 8
1355daemon at system boot time.
1356.It Va nis_server_flags
1357.Pq Vt str
1358If
1359.Va nis_server_enable
1360is set to
1361.Dq Li YES ,
1362these are the flags to pass to the
1363.Xr ypserv 8
1364daemon.
1365.It Va nis_ypxfrd_enable
1366.Pq Vt bool
1367If set to
1368.Dq Li YES ,
1369run the
1370.Xr rpc.ypxfrd 8
1371daemon at system boot time.
1372.It Va nis_ypxfrd_flags
1373.Pq Vt str
1374If
1375.Va nis_ypxfrd_enable
1376is set to
1377.Dq Li YES ,
1378these are the flags to pass to the
1379.Xr rpc.ypxfrd 8
1380daemon.
1381.It Va nis_yppasswdd_enable
1382.Pq Vt bool
1383If set to
1384.Dq Li YES ,
1385run the
1386.Xr rpc.yppasswdd 8
1387daemon at system boot time.
1388.It Va nis_yppasswdd_flags
1389.Pq Vt str
1390If
1391.Va nis_yppasswdd_enable
1392is set to
1393.Dq Li YES ,
1394these are the flags to pass to the
1395.Xr rpc.yppasswdd 8
1396daemon.
1397.It Va rpc_ypupdated_enable
1398.Pq Vt bool
1399If set to
1400.Dq Li YES ,
1401run the
1402.Nm rpc.ypupdated
1403daemon at system boot time.
1404.It Va defaultrouter
1405.Pq Vt str
1406If not set to
1407.Dq Li NO ,
1408create a default route to this host name or IP address
1409(use an IP address if this router is also required to get to the
1410name server!).
1411.It Va ipv6_defaultrouter
1412.Pq Vt str
1413The IPv6 equivalent of
1414.Va defaultrouter .
1415.It Va static_routes
1416.Pq Vt str
1417Set to the list of static routes that are to be added at system boot time.
1418If not set to
1419.Dq Li NO
1420then for each whitespace separated
1421.Ar element
1422in the value, a
1423.Va route_ Ns Aq Ar element
1424variable is assumed to exist whose contents will later be passed to a
1425.Dq Nm route Cm add
1426operation.
1427.It Va change_routes
1428.Pq Vt str
1429Set to the list of static routes that are to be changed at system boot time
1430(such as those added by the kernel).
1431If not set to
1432.Dq Li NO
1433then for each whitespace separated
1434.Ar element
1435in the value, a
1436.Va change_route_ Ns Aq Ar element
1437variable is assumed to exist whose contents will later be passed to a
1438.Dq Nm route Cm change
1439operation.
1440.It Va ipv6_static_routes
1441.Pq Vt str
1442The IPv6 equivalent of
1443.Va static_routes .
1444If not set to
1445.Dq Li NO
1446then for each whitespace separated
1447.Ar element
1448in the value, a
1449.Va ipv6_route_ Ns Aq Ar element
1450variable is assumed to exist whose contents will later be passed to a
1451.Dq Nm route Cm add Fl inet6
1452operation.
1453.It Va gateway_enable
1454.Pq Vt bool
1455If set to
1456.Dq Li YES ,
1457configure host to act as an IP router, e.g. to forward packets
1458between interfaces.
1459.It Va ipv6_gateway_enable
1460.Pq Vt bool
1461The IPv6 equivalent of
1462.Va gateway_enable .
1463.It Va router_enable
1464.Pq Vt bool
1465If set to
1466.Dq Li YES ,
1467run a routing daemon of some sort, based on the settings of
1468.Va router_program
1469and
1470.Va router_flags .
1471.It Va ipv6_router_enable
1472.Pq Vt bool
1473The IPv6 equivalent of
1474.Va router_enable .
1475If set to
1476.Dq Li YES ,
1477run a routing daemon of some sort, based on the settings of
1478.Va ipv6_router_program
1479and
1480.Va ipv6_router_flags .
1481.It Va router_program
1482.Pq Vt str
1483If
1484.Va router_enable
1485is set to
1486.Dq Li YES ,
1487this is the name of the routing daemon to use
1488(default
1489.Pa /sbin/routed ) .
1490.It Va ipv6_router_program
1491.Pq Vt str
1492The IPv6 equivalent of
1493.Va router_program
1494(default
1495.Pa /sbin/route6d ) .
1496.It Va router_flags
1497.Pq Vt str
1498If
1499.Va router_enable
1500is set to
1501.Dq Li YES ,
1502these are the flags to pass to the routing daemon.
1503.It Va ipv6_router_flags
1504.Pq Vt str
1505The IPv6 equivalent of
1506.Va router_flags .
1507.It Va mrouted_enable
1508.Pq Vt bool
1509If set to
1510.Dq Li YES ,
1511run the multicast routing daemon,
1512.Xr mrouted 8 .
1513.It Va mroute6d_enable
1514.Pq Vt bool
1515The IPv6 equivalent of
1516.Va mrouted_enable .
1517If set to
1518.Dq Li YES ,
1519run the IPv6 multicast routing daemon.
1520Note that no IPv6 multicast routing daemon is included in the
1521.Dx
1522base system but
1523.Xr pim6dd 8
1524can be installed from the
1525.Xr pkgsrc 7
1526collection.
1527.It Va mrouted_flags
1528.Pq Vt str
1529If
1530.Va mrouted_enable
1531is set to
1532.Dq Li YES ,
1533these are the flags to pass to the
1534.Xr mrouted 8
1535daemon.
1536.It Va mroute6d_flags
1537.Pq Vt str
1538The IPv6 equivalent of
1539.Va mrouted_flags .
1540If
1541.Va mroute6d_enable
1542is set to
1543.Dq Li YES ,
1544these are the flags passed to the IPv6 multicast routing daemon.
1545.It Va mroute6d_program
1546.Pq Vt str
1547If
1548.Va mroute6d_enable
1549is set to
1550.Dq Li YES ,
1551this is the path to the IPv6 multicast routing daemon.
1552.It Va rtadvd_enable
1553.Pq Vt bool
1554If set to
1555.Dq Li YES ,
1556run the
1557.Xr rtadvd 8
1558daemon at boot time.
1559.Xr rtadvd 8
1560will only run if
1561.Va ipv6_gateway_enable
1562is also set to
1563.Dq Li YES .
1564The
1565.Xr rtadvd 8
1566utility sends router advertisement packets to the interfaces specified in
1567.Va rtadvd_interfaces .
1568.Xr rtadvd 8
1569and should only be enabled with great care.
1570You may want to fine-tune
1571.Xr rtadvd.conf 5 .
1572.It Va rtadvd_interfaces
1573.Pq Vt str
1574If
1575.Va rtadvd_enable
1576is set to
1577.Dq Li YES
1578this is the list of interfaces to use.
1579.It Va rtsold_enable
1580.Pq Vt bool
1581If set to
1582.Dq Li YES ,
1583run the
1584.Xr rtsold 8
1585daemon at boot time.
1586The
1587.Xr rtsold 8
1588daemon is used for automatic discovery of non-link local addresses.
1589.It Va rtsold_flags
1590.Pq Vt str
1591If
1592.Va rtsold_enable
1593is set to
1594.Dq Li YES ,
1595these are the flags to pass to the
1596.Xr rtsold 8
1597daemon.
1598.It Va ipxgateway_enable
1599.Pq Vt bool
1600If set to
1601.Dq Li YES ,
1602enable the routing of IPX traffic.
1603.It Va ipxrouted_enable
1604.Pq Vt bool
1605If set to
1606.Dq Li YES ,
1607run the
1608.Xr IPXrouted 8
1609daemon at system boot time.
1610.It Va ipxrouted_flags
1611.Pq Vt str
1612If
1613.Va ipxrouted_enable
1614is set to
1615.Dq Li YES ,
1616these are the flags to pass to the
1617.Xr IPXrouted 8
1618daemon.
1619.It Va arpproxy_all
1620.Pq Vt bool
1621If set to
1622.Dq Li YES ,
1623enable global proxy ARP.
1624.It Va forward_sourceroute
1625.Pq Vt bool
1626If set to
1627.Dq Li YES
1628and
1629.Va gateway_enable
1630is also set to
1631.Dq Li YES ,
1632source-routed packets are forwarded.
1633.It Va accept_sourceroute
1634.Pq Vt bool
1635If set to
1636.Dq Li YES ,
1637the system will accept source-routed packets directed at it.
1638.It Va rarpd_enable
1639.Pq Vt bool
1640If set to
1641.Dq Li YES ,
1642run the
1643.Xr rarpd 8
1644daemon at system boot time.
1645.It Va rarpd_flags
1646.Pq Vt str
1647If
1648.Va rarpd_enable
1649is set to
1650.Dq Li YES ,
1651these are the flags to pass to the
1652.Xr rarpd 8
1653daemon.
1654.It Va bootparamd_enable
1655.Pq Vt bool
1656If set to
1657.Dq Li YES ,
1658run the
1659.Xr bootparamd 8
1660daemon at system boot time.
1661.It Va bootparamd_flags
1662.Pq Vt str
1663If
1664.Va bootparamd_enable
1665is set to
1666.Dq Li YES ,
1667these are the flags to pass to the
1668.Xr bootparamd 8
1669daemon.
1670.It Va stf_interface_ipv4addr
1671.Pq Vt str
1672If not set to
1673.Dq Li NO ,
1674this is the local IPv4 address for 6to4 (IPv6 over IPv4 tunneling interface).
1675Specify this entry to enable the 6to4 interface.
1676.It Va stf_interface_ipv4plen
1677.Pq Vt int
1678Prefix length for 6to4 IPv4 addresses, to limit peer address range.
1679An effective value is 0-31.
1680.It Va stf_interface_ipv6_ifid
1681.Pq Vt str
1682IPv6 interface ID for
1683.Xr stf 4 .
1684This can be set to
1685.Dq Li AUTO .
1686.It Va stf_interface_ipv6_slaid
1687.Pq Vt str
1688IPv6 Site Level Aggregator for
1689.Xr stf 4 .
1690.It Va ipv6_faith_prefix
1691.Pq Vt str
1692If not set to
1693.Dq Li NO ,
1694this is the faith prefix to enable a FAITH IPv6-to-IPv4 TCP translator.
1695You also need
1696.Xr faithd 8
1697setup.
1698.It Va ipv6_ipv4mapping
1699.Pq Vt bool
1700If set to
1701.Dq Li YES
1702this enables IPv4 mapped IPv6 address communication (like
1703.Li ::ffff:a.b.c.d ) .
1704.It Va atm_enable
1705.Pq Vt bool
1706Set to
1707.Dq Li YES
1708to enable the configuration of ATM interfaces at system boot time.
1709For all of the ATM variables described below, please refer to the
1710.Xr atm 8
1711man page for further details on the available command parameters.
1712Also refer to the files in
1713.Pa /usr/share/examples/atm
1714for more detailed configuration information.
1715.It Va atm_netif_ Ns Aq Ar intf
1716.Pq Vt str
1717For the ATM physical interface
1718.Ar intf ,
1719this variable defines the name prefix and count for the ATM network
1720interfaces to be created.
1721The value will be passed as the parameters of an
1722.Dq Nm atm Cm "set netif" Ar intf
1723command.
1724.It Va atm_sigmgr_ Ns Aq Ar intf
1725.Pq Vt str
1726For the ATM physical interface
1727.Ar intf ,
1728this variable defines the ATM signalling manager to be used.
1729The value will be passed as the parameters of an
1730.Dq Nm atm Cm attach Ar intf
1731command.
1732.It Va atm_prefix_ Ns Aq Ar intf
1733.Pq Vt str
1734For the ATM physical interface
1735.Ar intf ,
1736this variable defines the NSAP prefix for interfaces using a UNI signalling
1737manager.
1738If set to
1739.Dq Li ILMI ,
1740the prefix will automatically be set via the
1741.Xr ilmid 8
1742daemon.
1743Otherwise, the value will be passed as the parameters of an
1744.Dq Nm atm Cm "set prefix" Ar intf
1745command.
1746.It Va atm_macaddr_ Ns Aq Ar intf
1747.Pq Vt str
1748For the ATM physical interface
1749.Ar intf ,
1750this variable defines the MAC address for interfaces using a UNI signalling
1751manager.
1752If set to
1753.Dq Li NO ,
1754the hardware MAC address contained in the ATM interface card will be used.
1755Otherwise, the value will be passed as the parameters of an
1756.Dq Nm atm Cm "set mac" Ar intf
1757command.
1758.It Va atm_arpserver_ Ns Aq Ar netif
1759.Pq Vt str
1760For the ATM network interface
1761.Ar netif ,
1762this variable defines the ATM address for a host which is to provide ATMARP
1763service.
1764This variable is only applicable to interfaces using a UNI signalling manager.
1765If set to
1766.Dq Li local ,
1767this host will become an ATMARP server.
1768The value will be passed as the parameters of an
1769.Dq Nm atm Cm "set arpserver" Ar netif
1770command.
1771.It Va atm_scsparp_ Ns Aq Ar netif
1772.Pq Vt bool
1773If set to
1774.Dq Li YES ,
1775SCSP/ATMARP service for the network interface
1776.Ar netif
1777will be initiated using the
1778.Xr scspd 8
1779and
1780.Xr atmarpd 8
1781daemons.
1782This variable is only applicable if
1783.Va atm_arpserver_ Ns Aq Ar netif
1784is set to
1785.Dq Li local .
1786.It Va atm_arps
1787.Pq Vt str
1788Set to the list of permanent ATM ARP entries to be added at system boot time.
1789For each whitespace separated
1790.Ar element
1791in the value, an
1792.Va atm_arp_ Ns Aq Ar element
1793variable is assumed to exist.
1794The value of each of these variables will be passed as the parameters of an
1795.Dq Nm atm Cm "add arp"
1796command.
1797.It Va keybell
1798.Pq Vt str
1799The keyboard bell sound.
1800Set to
1801.Dq Li normal ,
1802.Dq Li visual ,
1803.Dq Li off ,
1804or
1805.Dq Li NO
1806if the default behavior is desired.
1807For details, refer to the
1808.Xr kbdcontrol 1
1809manpage.
1810.It Va keymap
1811.Pq Vt str
1812If set to
1813.Dq Li NO ,
1814no keymap is installed, otherwise the value is used to install
1815the keymap file in
1816.Pa /usr/share/syscons/keymaps/ Ns Ao Ar value Ac Ns Pa .kbd .
1817.It Va keyrate
1818.Pq Vt str
1819The keyboard repeat speed.
1820Set to
1821.Dq Li slow ,
1822.Dq Li normal ,
1823.Dq Li fast ,
1824or
1825.Dq Li NO
1826if the default behavior is desired.
1827.It Va keychange
1828.Pq Vt str
1829If not set to
1830.Dq Li NO ,
1831attempt to program the function keys with the value.
1832The value should be a single string of the form:
1833.Dq Ar funkey_number new_value Op Ar funkey_number new_value ... .
1834.It Va cursor
1835.Pq Vt str
1836Can be set to the value of
1837.Dq Li normal ,
1838.Dq Li blink ,
1839.Dq Li destructive ,
1840or
1841.Dq Li NO
1842to set the cursor behavior explicitly or choose the default behavior.
1843.It Va scrnmap
1844.Pq Vt str
1845If set to
1846.Dq Li NO ,
1847no screen map is installed, otherwise the value is used to install
1848the screen map file in
1849.Pa /usr/share/syscons/scrnmaps/ Ns Aq Ar value .
1850.It Va font8x16
1851.Pq Vt str
1852If set to
1853.Dq Li NO ,
1854the default 8x16 font value is used for screen size requests, otherwise
1855the value in
1856.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1857is used.
1858.It Va font8x14
1859.Pq Vt str
1860If set to
1861.Dq Li NO ,
1862the default 8x14 font value is used for screen size requests, otherwise
1863the value in
1864.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1865is used.
1866.It Va font8x8
1867.Pq Vt str
1868If set to
1869.Dq Li NO ,
1870the default 8x8 font value is used for screen size requests, otherwise
1871the value in
1872.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1873is used.
1874.It Va blanktime
1875.Pq Vt int
1876If set to
1877.Dq Li NO ,
1878the default screen blanking interval is used, otherwise it is set to
1879.Ar value
1880seconds.
1881.It Va saver
1882.Pq Vt str
1883If not set to
1884.Dq Li NO ,
1885this is the actual screen saver to use
1886.Li ( blank , snake , daemon ,
1887etc).
1888.It Va moused_enable
1889.Pq Vt str
1890If set to
1891.Dq Li YES ,
1892the
1893.Xr moused 8
1894daemon is started for doing cut/paste selection on the console.
1895.It Va moused_type
1896.Pq Vt str
1897This is the protocol type of the mouse connected to this host.
1898This variable must be set if
1899.Va moused_enable
1900is set to
1901.Dq Li YES .
1902The
1903.Xr moused 8
1904daemon
1905is able to detect the appropriate mouse type automatically in many cases.
1906Set this variable to
1907.Dq Li auto
1908to let the daemon detect it, or
1909select one from the following list if the automatic detection fails.
1910.Pp
1911If the mouse is attached to the PS/2 mouse port, choose
1912.Dq Li auto
1913or
1914.Dq Li ps/2 ,
1915regardless of the brand and model of the mouse.
1916Likewise, if the mouse is attached to the bus mouse port, choose
1917.Dq Li auto
1918or
1919.Dq Li busmouse .
1920All other protocols are for serial mice and will not work with
1921the PS/2 and bus mice.
1922If this is a USB mouse,
1923.Dq Li auto
1924is the only protocol type which will work.
1925.Pp
1926.Bl -tag -width ".Li x10mouseremote" -compact
1927.It Li microsoft
1928Microsoft mouse (serial)
1929.It Li intellimouse
1930Microsoft IntelliMouse (serial)
1931.It Li mousesystems
1932Mouse systems Corp. mouse (serial)
1933.It Li mmseries
1934MM Series mouse (serial)
1935.It Li logitech
1936Logitech mouse (serial)
1937.It Li busmouse
1938A bus mouse
1939.It Li mouseman
1940Logitech MouseMan and TrackMan (serial)
1941.It Li glidepoint
1942ALPS GlidePoint (serial)
1943.It Li thinkingmouse
1944Kensington ThinkingMouse (serial)
1945.It Li ps/2
1946PS/2 mouse
1947.It Li mmhittab
1948MM HitTablet (serial)
1949.It Li x10mouseremote
1950X10 MouseRemote (serial)
1951.It Li versapad
1952Interlink VersaPad (serial)
1953.El
1954.Pp
1955Even if the mouse is not in the above list, it may be compatible
1956with one in the list.
1957Refer to the man page for
1958.Xr moused 8
1959for compatibility information.
1960.Pp
1961It should also be noted that while this is enabled, any
1962other client of the mouse (such as an X server) should access
1963the mouse through the virtual mouse device,
1964.Pa /dev/sysmouse ,
1965and configure it as a
1966.Dq Li sysmouse
1967type mouse, since all
1968mouse data is converted to this single canonical format when using
1969.Xr moused 8 .
1970If the client program does not support the
1971.Dq Li sysmouse
1972type, specify the
1973.Dq Li mousesystems
1974type.
1975It is the second preferred type.
1976.It Va moused_port
1977.Pq Vt str
1978If
1979.Va moused_enable
1980is set to
1981.Dq Li YES ,
1982this is the actual port the mouse is on.
1983It might be
1984.Pa /dev/cuaa0
1985for a COM1 serial mouse or
1986.Pa /dev/psm0
1987for a PS/2 mouse, for example.
1988.It Va moused_flags
1989.Pq Vt str
1990If
1991.Va moused_type
1992is set, these are the additional flags to pass to the
1993.Xr moused 8
1994daemon.
1995.It Va mousechar_start
1996.Pq Vt int
1997If set to
1998.Dq Li NO ,
1999the default mouse cursor character range
2000.Li 0xd0 Ns - Ns Li 0xd3
2001is used, otherwise the range start is set to
2002.Ar value
2003character, see
2004.Xr vidcontrol 1 .
2005Use if the default range is occupied in the language code table.
2006.It Va vidhistory
2007.Pq Vt int
2008Set the size of the history (scrollback) buffer in lines.
2009.It Va allscreens_flags
2010.Pq Vt str
2011If set,
2012.Xr vidcontrol 1
2013is run with these options for each of the virtual terminals
2014.Pq Pa /dev/ttyv* .
2015For example,
2016.Dq Fl m Cm on
2017will enable the mouse pointer on all virtual terminals if
2018.Va moused_enable
2019is set to
2020.Dq Li YES .
2021.It Va allscreens_kbdflags
2022.Pq Vt str
2023If set,
2024.Xr kbdcontrol 1
2025is run with these options for each of the virtual terminals
2026.Pq Pa /dev/ttyv* .
2027For example,
2028.Dq Fl h Li 200
2029will set the
2030.Xr syscons 4
2031scrollback (history) buffer to 200 lines.
2032.It Va cron_enable
2033.Pq Vt bool
2034If set to
2035.Dq Li YES ,
2036run the
2037.Xr cron 8
2038daemon at system boot time.
2039.It Va cron_program
2040.Pq Vt str
2041Path to
2042.Xr cron 8
2043(default
2044.Pa /usr/sbin/cron ) .
2045.It Va cron_flags
2046.Pq Vt str
2047If
2048.Va cron_enable
2049is set to
2050.Dq Li YES ,
2051these are the flags to pass to
2052.Xr cron 8 .
2053.It Va lpd_program
2054.Pq Vt str
2055Path to
2056.Xr lpd 8
2057(default
2058.Pa /usr/sbin/lpd ) .
2059.It Va lpd_enable
2060.Pq Vt bool
2061If set to
2062.Dq Li YES ,
2063run the
2064.Xr lpd 8
2065daemon at system boot time.
2066.It Va lpd_flags
2067.Pq Vt str
2068If
2069.Va lpd_enable
2070is set to
2071.Dq Li YES ,
2072these are the flags to pass to the
2073.Xr lpd 8
2074daemon.
2075.It Va nscd_enable
2076.Pq Vt bool
2077If set to
2078.Dq Li YES ,
2079run the
2080.Xr nscd 8
2081daemon at system boot time.
2082.It Va mixer_enable
2083.Pq Vt bool
2084If set to
2085.Dq Li YES ,
2086preserve
2087.Xr mixer 8
2088settings across reboots.
2089.It Va mta_start_script
2090.Pq Vt str
2091The full path to the script to run to start
2092a mail transfer agent.
2093The default is
2094.Pa /etc/rc.sendmail .
2095The
2096.Va sendmail_*
2097variables which
2098.Pa /etc/rc.sendmail
2099uses are documented in the
2100.Xr rc.sendmail 8
2101man page.
2102.It Va fixbootfile
2103.Pq Vt bool
2104In a
2105.Sq HAMMER ROOT with UFS /boot
2106setup, the boot loader will not set up the
2107.Va kern.bootfile
2108sysctl correctly.
2109The system will attempt to fix this on its own.
2110Set this variable to
2111.Dq Li NO
2112to turn this behavior off.
2113.It Va dumpdev
2114.Pq Vt str
2115Indicates the device (usually a swap partition) to which a crash dump
2116should be written in the event of a system crash.
2117The value of this variable is passed as the argument to
2118.Xr dumpon 8
2119and
2120.Xr savecore 8 .
2121To disable crash dumps, set this variable to
2122.Dq Li NO .
2123.It Va dumpdir
2124.Pq Vt str
2125When the system reboots after a crash and a crash dump is found on the
2126device specified by the
2127.Va dumpdev
2128variable,
2129.Xr savecore 8
2130will save that crash dump and a copy of the kernel to the directory
2131specified by the
2132.Va dumpdir
2133variable.
2134The default value is
2135.Pa /var/crash .
2136Set to
2137.Dq Li NO
2138to not run
2139.Xr savecore 8
2140at boot time when
2141.Va dumpdir
2142is set.
2143.It Va savecore_flags
2144.Pq Vt str
2145If crash dumps are enabled, these are the flags to pass to the
2146.Xr savecore 8
2147utility.
2148.It Va crashinfo_enable
2149.Pq Vt bool
2150Set to
2151.Dq Li YES
2152to turn on automatic crash dump summary generation using the utility
2153specified by the
2154.Va crashinfo_program
2155variable.
2156.It Va crashinfo_program
2157.Pq Vt str
2158Program to run to generate a crash dump summary if the variable
2159.Va crashinfo_enable
2160is set to
2161.Dq Li YES .
2162The default value is
2163.Pa /usr/sbin/crashinfo .
2164.It Va enable_quotas
2165.Pq Vt bool
2166Set to
2167.Dq Li YES
2168to turn on user disk quotas on system startup via the
2169.Xr quotaon 8
2170command.
2171.It Va check_quotas
2172.Pq Vt bool
2173Set to
2174.Dq Li YES
2175to enable user disk quota checking via the
2176.Xr quotacheck 8
2177command.
2178.It Va accounting_enable
2179.Pq Vt bool
2180Set to
2181.Dq Li YES
2182to enable system accounting through the
2183.Xr accton 8
2184facility.
2185.It Va linux_enable
2186.Pq Vt bool
2187Set to
2188.Dq Li YES
2189to enable Linux/ELF binary emulation at system initial boot time.
2190.It Va sysvipc_enable
2191.Pq Vt bool
2192If set to
2193.Dq Li YES ,
2194load System V IPC primitives at boot time.
2195.\" ----- cleanvar_enable setting--------------------------------
2196.It Va cleanvar_enable
2197.Pq Vt bool
2198Set to
2199.Dq Li YES
2200to have
2201.Pa /var/run ,
2202.Pa /var/spool/lock
2203and
2204.Pa /var/spool/uucp/.Temp/*
2205cleaned at startup.
2206.\" ----- clear_tmp_enable setting-------------------------------
2207.It Va clear_tmp_enable
2208.Pq Vt bool
2209Set to
2210.Dq Li YES
2211to have
2212.Pa /tmp
2213cleaned at startup.
2214.\" ----- ldconfig_paths setting --------------------------------
2215.It Va ldconfig_paths
2216.Pq Vt str
2217Set to the list of shared library paths to use with
2218.Xr ldconfig 8 .
2219NOTE:
2220.Pa /usr/lib
2221will always be added first, so it need not appear in this list.
2222.It Va ldconfig_insecure
2223.Pq Vt bool
2224The
2225.Xr ldconfig 8
2226utility normally refuses to use directories
2227which are writable by anyone except root.
2228Set this variable to
2229.Dq Li YES
2230to disable that security check during system startup.
2231.It Va ldconfig_local_dirs
2232.Pq Vt str
2233Set to the list of local
2234.Xr ldconfig 8
2235directories.
2236The names of all files in the directories listed will be
2237passed as arguments to
2238.Xr ldconfig 8 .
2239.It Va kern_securelevel
2240.Pq Vt int
2241The kernel security level to set at startup.
2242The allowed range of
2243.Ar value
2244ranges from \-1 (the compile time default) to 3 (the most secure).
2245See
2246.Xr init 8
2247for the list of possible security levels and their effect on system operation.
2248.It Va start_vinum
2249.Pq Vt bool
2250Set to
2251.Dq Li YES
2252to start
2253.Xr vinum 8
2254at system boot time.
2255.It Va sshd_enable
2256.Pq Vt bool
2257Set to
2258.Dq Li YES
2259to start
2260.Xr sshd 8
2261at system boot time.
2262.It Va sshd_program
2263.Pq Vt str
2264Path to the SSH server program
2265(default
2266.Pa /usr/sbin/sshd ) .
2267.It Va sshd_flags
2268.Pq Vt str
2269If
2270.Va sshd_enable
2271is set to
2272.Dq Li YES ,
2273these are the flags to pass to the
2274.Xr sshd 8
2275daemon.
2276.It Va ftpd_enable
2277.Pq Vt bool
2278Set to
2279.Dq Li YES
2280to start
2281.Xr ftpd 8
2282at system boot time.
2283.It Va ftpd_flags
2284.Pq Vt str
2285If
2286.Va ftpd_enable
2287is set to
2288.Dq Li YES ,
2289these are the flags to pass to the
2290.Xr ftpd 8
2291daemon.
2292.It Va usbd_enable
2293.Pq Vt bool
2294If set to
2295.Dq Li YES ,
2296run the
2297.Xr usbd 8
2298daemon at boot time.
2299.It Va usbd_flags
2300.Pq Vt str
2301If
2302.Va usbd_enable
2303is set to
2304.Dq Li YES ,
2305these are the flags passed to
2306.Xr usbd 8
2307daemon.
2308.It Va watchdogd_enable
2309.Pq Vt bool
2310If set to
2311.Dq Li YES ,
2312start the
2313.Xr watchdogd 8
2314daemon at boot time.
2315This requires that the kernel have been compiled with
2316.Cd "options WATCHDOG" .
2317.It Va jail_enable
2318.Pq Vt bool
2319If set to
2320.Dq Li NO ,
2321any configured jails will not be started.
2322.It Va jail_list
2323.Pq Vt str
2324A space separated list of names for jails.
2325This is purely a configuration aid to help identify and
2326configure multiple jails.
2327The names specified in this list will be used to
2328identify settings common to an instance of a jail.
2329Assuming that the jail in question was named
2330.Li vjail ,
2331you would have the following dependent variables:
2332.Bd -literal
2333jail_vjail_hostname="jail.example.com"
2334jail_vjail_ip="192.168.1.100"
2335jail_vjail_rootdir="/var/jails/vjail/root"
2336.Ed
2337.It Va jail_flags
2338.Pq Vt str
2339Unset by default.
2340When set, use as default value for
2341.Va jail_ Ns Ao Ar jname Ac Ns Va _flags
2342for every jail in
2343.Va jail_list .
2344.It Va jail_interface
2345.Pq Vt str
2346Unset by default.
2347When set, use as default value for
2348.Va jail_ Ns Ao Ar jname Ac Ns Va _interface
2349for every jail in
2350.Va jail_list .
2351.It Va jail_fstab
2352.Pq Vt str
2353Unset by default.
2354When set, use as default value for
2355.Va jail_ Ns Ao Ar jname Ac Ns Va _fstab
2356for every jail in
2357.Va jail_list .
2358.It Va jail_mount_enable
2359.Pq Vt bool
2360Set to
2361.Dq Li NO
2362by default.
2363When set to
2364.Dq Li YES ,
2365sets
2366.Va jail_ Ns Ao Ar jname Ac Ns Va _mount_enable
2367to
2368.Dq Li YES
2369by default for every jail in
2370.Va jail_list .
2371.It Va jail_fdesc_enable
2372.Pq Vt bool
2373Set to
2374.Dq Li NO
2375by default.
2376When set to
2377.Dq Li YES ,
2378sets
2379.Va jail_ Ns Ao Ar jname Ac Ns Va _fdesc_enable
2380to
2381.Dq Li YES
2382by default for every jail in
2383.Va jail_list .
2384.It Va jail_procfs_enable
2385.Pq Vt bool
2386Set to
2387.Dq Li NO
2388by default.
2389When set to
2390.Dq Li YES ,
2391sets
2392.Va jail_ Ns Ao Ar jname Ac Ns Va _procfs_enable
2393to
2394.Dq Li YES
2395by default for every jail in
2396.Va jail_list .
2397.It Va jail_devfs_enable
2398.Pq Vt bool
2399Set to
2400.Dq Li NO
2401by default.
2402When set to
2403.Dq Li YES ,
2404sets
2405.Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_enable
2406to
2407.Dq Li YES
2408by default for every jail in
2409.Va jail_list .
2410.It Va jail_exec_start
2411.Pq Vt str
2412Unset by default.
2413When set, use as default value for
2414.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_start
2415for every jail in
2416.Va jail_list .
2417.It Va jail_exec_stop
2418Unset by default.
2419When set, use as default value for
2420.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_stop
2421for every jail in
2422.Va jail_list .
2423.It Va jail_ Ns Ao Ar jname Ac Ns Va _rootdir
2424.Pq Vt str
2425Unset by default.
2426Set to the root directory used by jail
2427.Va jname .
2428.It Va jail_ Ns Ao Ar jname Ac Ns Va _hostname
2429.Pq Vt str
2430Unset by default.
2431Set to the fully qualified domain name (FQDN) assigned to jail
2432.Va jname .
2433.It Va jail_ Ns Ao Ar jname Ac Ns Va _ip
2434.Pq Vt str
2435Unset by default.
2436Set to the IP address assigned to jail
2437.Va jname .
2438.It Va jail_ Ns Ao Ar jname Ac Ns Va _flags
2439.Pq Vt str
2440Set to
2441.Dq Li -l -U root
2442by default.
2443These are flags to pass to
2444.Xr jail 8 .
2445.It Va jail_ Ns Ao Ar jname Ac Ns Va _interface
2446.Pq Vt str
2447Unset by default.
2448When set, sets the interface to use when setting IP address alias.
2449Note that the alias is created at jail startup and removed at jail shutdown.
2450.It Va jail_ Ns Ao Ar jname Ac Ns Va _fstab
2451.Pq Vt str
2452Set to
2453.Pa /etc/fstab. Ns Aq Ar jname
2454by default.
2455This is the file system information file to use for jail
2456.Va jname .
2457.It Va jail_ Ns Ao Ar jname Ac Ns Va _mount_enable
2458.Pq Vt bool
2459Set to
2460.Dq Li NO
2461by default.
2462When set to
2463.Dq Li YES ,
2464mount all file systems from
2465.Va jail_ Ns Ao Ar jname Ac Ns Va _fstab
2466at jail startup.
2467.It Va jail_ Ns Ao Ar jname Ac Ns Va _fdesc_enable
2468.Pq Vt bool
2469Set to
2470.Dq Li NO
2471by default.
2472When set to
2473.Dq Li YES ,
2474mount the file-descriptor file system inside jail
2475.Ar jname
2476at jail startup.
2477.It Va jail_ Ns Ao Ar jname Ac Ns Va _procfs_enable
2478.Pq Vt bool
2479Set to
2480.Dq Li NO
2481by default.
2482When set to
2483.Dq Li YES ,
2484mount the process file system inside jail
2485.Ar jname
2486at jail startup.
2487.It Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_enable
2488.Pq Vt bool
2489Set to
2490.Dq Li NO
2491by default.
2492When set to
2493.Dq Li YES ,
2494mount the device file system inside jail
2495.Ar jname
2496at jail startup.
2497.It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_start
2498.Pq Vt str
2499Set to
2500.Dq Li /bin/sh /etc/rc
2501by default.
2502This is the command executed at jail startup.
2503.It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_stop
2504.Pq Vt str
2505Set to
2506.Dq Li /bin/sh /etc/rc.shutdown
2507by default.
2508This is the command executed at jail shutdown.
2509.It Va jail_set_hostname_allow
2510.Pq Vt bool
2511If set to
2512.Dq Li NO ,
2513do not allow the root user in a jail to set its hostname.
2514.It Va jail_socket_unixiproute_only
2515.Pq Vt bool
2516If set to
2517.Dq Li YES ,
2518do not allow any sockets,
2519besides UNIX/IP/route sockets,
2520to be used within a jail.
2521.It Va jail_sysvipc_allow
2522.Pq Vt bool
2523If set to
2524.Dq Li YES ,
2525allow applications within a jail to use System V IPC.
2526.It Va lvm_enable
2527.Pq Vt bool
2528If set to
2529.Dq Li YES
2530LVM volumes will be discovered and configured on boot.
2531.It Va newsyslog_enable
2532.Pq Vt bool
2533If set to
2534.Dq Li YES ,
2535run
2536.Xr newsyslog 8
2537before syslogd starts.
2538.It Va newsyslog_flags
2539.Pq Vt str
2540If
2541.Va newsyslog_enable
2542is set to
2543.Dq Li YES ,
2544these are the flags passed to
2545.Xr newsyslog 8 .
2546.It Va resident_enable
2547.Pq Vt bool
2548If set to
2549.Dq Li YES ,
2550make the dynamic binaries listed in
2551.Pa /etc/resident.conf
2552resident.
2553.It Va varsym_enable
2554.Pq Vt bool
2555If set to
2556.Dq Li YES ,
2557process
2558.Pa /etc/varsym.conf
2559to set system-wide variables for variant symlinks.
2560.It Va rand_irqs
2561.Pq Vt str
2562Set either to
2563.Dq Li NO
2564or a whitespace separated list of IRQ numbers which will be used as a source of
2565randomness.
2566.\" -----------------------------------------------------
2567.It Va entropy_dir
2568.Pq Vt str
2569Set to
2570.Dq Li NO
2571to disable caching entropy via
2572.Xr cron 8 .
2573Otherwise set to the directory used to store entropy files in.
2574.It Va entropy_file
2575.Pq Vt str
2576Set to
2577.Dq Li NO
2578to disable caching entropy through reboots.
2579Otherwise set to the filename used to store cached entropy through reboots.
2580This file should be located on the root file system to seed the
2581.Xr random 4
2582device as early as possible in the boot process.
2583.It Va ipsec_enable
2584.Pq Vt bool
2585Set to
2586.Dq Li YES
2587to run
2588.Xr setkey 8
2589on
2590.Va ipsec_file
2591at boot time.
2592.It Va ipsec_file
2593.Pq Vt str
2594Configuration file for
2595.Xr setkey 8 .
2596.It Va dmesg_enable
2597.Pq Vt bool
2598Set to
2599.Dq Li YES
2600to save
2601.Xr dmesg 8
2602to
2603.Pa /var/run/dmesg.boot
2604on boot.
2605.It Va rcshutdown_timeout
2606.Pq Vt int
2607If set, start a watchdog timer in the background which will terminate
2608.Pa rc.shutdown
2609if
2610.Xr shutdown 8
2611has not completed within the specified time (in seconds).
2612Notice that in addition to this soft timeout,
2613.Xr init 8
2614also applies a hard timeout for the execution of
2615.Pa rc.shutdown .
2616This is configured via
2617.Xr sysctl 8
2618variable
2619.Va kern.init_shutdown_timeout
2620and defaults to 120 seconds. Setting the value of
2621.Va rcshutdown_timeout
2622to more than 120 seconds will have no effect until the
2623.Xr sysctl 8
2624variable
2625.Va kern.init_shutdown_timeout
2626is also increased.
2627.It Va udevd_enable
2628.Pq Vt bool
2629If set to
2630.Dq Li YES ,
2631the udevd daemon will be started on boot.
2632.It Va vfs_quota_enable
2633.Pq Vt bool
2634If set to
2635.Dq Li YES ,
2636vfs quota rc.d scripts will be run on boot.
2637.It Va vfs_quota_sync
2638.Pq Vt str
2639List of mount points whose counters are to be synchronized with on-disk
2640usage during system startup. See also
2641.Xr vquota 8 .
2642.It Va vknetd_enable
2643.Pq Vt bool
2644If set to
2645.Dq Li YES ,
2646.Xr vknetd 8
2647will be started on boot.
2648.It Va vknetd_flags
2649.Pq Vt bool
2650Additional flags passed to
2651.Xr vknetd 8 .
2652Usually address/cidrbits is specified here.
2653When no flags are passed, default option
2654.Fl U
2655will be used.
2656.It Va vkernel_enable
2657.Pq Vt bool
2658If set to
2659.Dq Li NO ,
2660any configured vkernels will not be started.
2661.It Va vkernel_kill_timeout
2662.Pq Vt int
2663This defines the default number of seconds that we will wait for the
2664vkernel to shut down on it's own. If after this time it's still alive,
2665it will be killed with SIGKILL.
2666.It Va vkernel_bin
2667.Pq Vt str
2668Defines the default path to the vkernel binary.
2669.It Va vkernel_list
2670.Pq Vt str
2671A space separated list of names for vkernels.
2672This is purely a configuration aid to help identify and
2673configure multiple vkernels.
2674The names specified in this list will be used to
2675identify settings common to a vkernel instance.
2676Assuming that the vkernel in question was named
2677.Li example ,
2678you would have the following dependent variables
2679(filled with reference values in this text):
2680.Bd -literal
2681vkernel_example_bin="/usr/obj/usr/src/sys/VKERNEL/kernel.debug"
2682vkernel_example_memsize="64m"
2683vkernel_example_rootimg_list="/var/vkernel/rootimg.01"
2684vkernel_example_iface_list="auto:bridge0"
2685vkernel_example_logfile="/dev/null"
2686vkernel_example_flags="-U"
2687vkernel_example_kill_timeout="45"
2688.Ed
2689.Pp
2690The last five are optional.
2691They default to an empty string if not set, except for logfile which defaults to
2692.Pa /dev/null
2693if it is not set.
2694.El
2695.Sh FILES
2696.Bl -tag -width ".Pa /etc/start_if. Ns Aq Ar interface" -compact
2697.It Pa /etc/defaults/rc.conf
2698.It Pa /etc/rc.conf
2699.It Pa /etc/rc.conf.local
2700.It Pa /etc/start_if. Ns Aq Ar interface
2701.El
2702.Sh SEE ALSO
2703.Xr catman 1 ,
2704.Xr gdb 1 ,
2705.Xr info 1 ,
2706.Xr kbdcontrol 1 ,
2707.Xr varsym 1 ,
2708.Xr vidcontrol 1 ,
2709.Xr ip 4 ,
2710.Xr ipfw 4 ,
2711.Xr kld 4 ,
2712.Xr pf 4 ,
2713.Xr tcp 4 ,
2714.Xr udp 4 ,
2715.Xr exports 5 ,
2716.Xr motd 5 ,
2717.Xr resident.conf 5 ,
2718.Xr varsym.conf 5 ,
2719.Xr accton 8 ,
2720.Xr amd 8 ,
2721.Xr apm 8 ,
2722.Xr atm 8 ,
2723.Xr btconfig 8 ,
2724.Xr bthcid 8 ,
2725.Xr cron 8 ,
2726.Xr devd 8 ,
2727.Xr dhclient 8 ,
2728.Xr dntpd 8 ,
2729.Xr ftpd 8 ,
2730.Xr ifconfig 8 ,
2731.Xr inetd 8 ,
2732.Xr jail 8 ,
2733.Xr lpd 8 ,
2734.Xr makewhatis 8 ,
2735.Xr mixer 8 ,
2736.Xr mountd 8 ,
2737.Xr moused 8 ,
2738.Xr mrouted 8 ,
2739.Xr named 8 ,
2740.Xr nfsd 8 ,
2741.Xr pcnfsd 8 ,
2742.Xr pfctl 8 ,
2743.Xr pflogd 8 ,
2744.Xr quotacheck 8 ,
2745.Xr quotaon 8 ,
2746.Xr rc 8 ,
2747.Xr rc.sendmail 8 ,
2748.Xr resident 8 ,
2749.Xr rndcontrol 8 ,
2750.Xr route 8 ,
2751.Xr routed 8 ,
2752.Xr rpcbind 8 ,
2753.Xr rpc.lockd 8 ,
2754.Xr rpc.statd 8 ,
2755.Xr rtadvd 8 ,
2756.Xr rtsold 8 ,
2757.Xr rwhod 8 ,
2758.Xr savecore 8 ,
2759.Xr sdpd 8 ,
2760.Xr sensorsd 8 ,
2761.Xr sshd 8 ,
2762.Xr swapon 8 ,
2763.Xr sysctl 8 ,
2764.Xr syslogd 8 ,
2765.Xr timed 8 ,
2766.Xr usbd 8 ,
2767.Xr vinum 8 ,
2768.Xr yp 8 ,
2769.Xr ypbind 8 ,
2770.Xr ypserv 8 ,
2771.Xr ypset 8
2772.Sh HISTORY
2773The
2774.Nm
2775file appeared in
2776.Fx 2.2.2 .
2777.Sh AUTHORS
2778.An Jordan K. Hubbard .
2779