1 .\" DO NOT EDIT-- this file is @generated by tools/build/options/makeman.
8 .Nd "source build options"
12 file contains variables that control what components will be generated during
13 the build process of the
20 file uses the standard makefile syntax.
23 should not specify any dependencies to
29 variables that control the aspects of how the system builds.
31 The default location of
35 though an alternative location can be specified in the
39 Overriding the location of
41 may be necessary if the system-wide settings are not suitable
42 for a particular build.
47 effectively resets all build controls to their defaults.
51 is to control the compilation of the
53 source code, which is usually located in
55 As a rule, the system administrator creates
57 when the values of certain control variables need to be changed
60 In addition, control variables can be specified
61 for a particular build via the
65 or in its environment; see
70 for the build can be controlled via the
72 variable, which defaults to
73 .Pa /etc/src-env.conf .
74 Some examples that may only be set in this file are
75 .Va WITH_DIRDEPS_BUILD ,
80 as they are environment-only variables.
82 The values of variables are ignored regardless of their setting;
83 even if they would be set to
87 The presence of an option causes
91 This list provides a name and short description for variables
92 that can be used for source builds.
93 .Bl -tag -width indent
95 Do not build process accounting tools such as
103 and related programs.
108 and related programs.
110 Build the base system with Address Sanitizer (ASan) to detect
111 memory corruption bugs such as buffer overflows or use-after-free.
112 Requires that Clang be used as the base system compiler
113 and that the runtime support library is available.
114 When set, it enforces these options:
118 .Va WITH_LLVM_BINUTILS
120 .Va WITH_LLVM_CXXFILT
122 .It Va WITHOUT_ASSERT_DEBUG
123 Compile programs and libraries without the
129 and related utilities.
132 programs and libraries related to ATM networking.
134 Do not build audit support into system programs.
135 .It Va WITHOUT_AUTHPF
138 .It Va WITHOUT_AUTOFS
141 related programs, libraries, and kernel modules.
142 .It Va WITHOUT_AUTO_OBJ
143 Disable automatic creation of objdirs.
144 This is enabled by default if the wanted OBJDIR is writable by the current user.
146 This must be set in the environment, make command line, or
147 .Pa /etc/src-env.conf ,
151 Build the BearSSL library.
153 BearSSL is a tiny SSL library suitable for embedded environments.
155 .Lk https://www.BearSSL.org/
157 This library is currently only used to perform
158 signature verification and related operations
159 for Verified Exec and
161 When set, these options are also in effect:
164 .It Va WITH_LOADER_EFI_SECUREBOOT
166 .Va WITHOUT_LOADER_EFI_SECUREBOOT
168 .It Va WITH_LOADER_VERIEXEC
170 .Va WITHOUT_LOADER_VERIEXEC
172 .It Va WITH_LOADER_VERIEXEC_VECTX
174 .Va WITHOUT_LOADER_VERIEXEC_VECTX
182 Do not build or install
184 associated utilities, and examples.
186 This option only affects amd64/amd64.
187 .It Va WITH_BHYVE_SNAPSHOT
188 Include support for save and restore (snapshots) in
193 This option only affects amd64/amd64.
195 Build all binaries with the
197 flag set to indicate that the run-time loader should perform all relocation
198 processing at process startup rather than on demand.
199 The combination of the
203 options provide "full" Relocation Read-Only (RELRO) support.
204 With full RELRO the entire GOT is made read-only after performing relocation at
205 startup, avoiding GOT overwrite attacks.
206 .It Va WITHOUT_BLACKLIST
207 Set this if you do not want to build
211 When set, these options are also in effect:
214 .It Va WITHOUT_BLACKLIST_SUPPORT
216 .Va WITH_BLACKLIST_SUPPORT
219 .It Va WITHOUT_BLACKLIST_SUPPORT
220 Build some programs without
227 .It Va WITHOUT_BLUETOOTH
228 Do not build Bluetooth related kernel modules, programs and libraries.
230 Do not build the boot blocks and loader.
231 .It Va WITHOUT_BOOTPARAMD
232 Do not build or install
234 .It Va WITHOUT_BOOTPD
235 Do not build or install
237 .It Va WITHOUT_BSDINSTALL
241 and related programs.
242 .It Va WITHOUT_BSD_CPIO
243 Do not build the BSD licensed version of cpio based on
246 Do not build or install
248 and related libraries and data files.
250 Do not build contributed bzip2 software as a part of the base system.
252 The option has no effect yet.
254 When set, these options are also in effect:
257 .It Va WITHOUT_BZIP2_SUPPORT
259 .Va WITH_BZIP2_SUPPORT
262 .It Va WITHOUT_BZIP2_SUPPORT
263 Build some programs without optional bzip2 support.
264 .It Va WITHOUT_CALENDAR
267 .It Va WITHOUT_CAPSICUM
268 Do not build Capsicum support into system programs.
269 When set, it enforces these options:
275 .It Va WITHOUT_CAROOT
276 Do not add the trusted certificates from the Mozilla NSS bundle to
278 .It Va WITHOUT_CASPER
279 Do not build Casper program and related libraries.
280 .It Va WITH_CCACHE_BUILD
284 No configuration is required except to install the
290 .Sy CCACHE_PREFIX=/usr/local/bin/distcc .
291 The default cache directory of
293 will be used, which can be overridden by setting
296 .Sy CCACHE_COMPILERCHECK
299 when using the in-tree bootstrap compiler,
302 when using an external compiler.
305 option is used for Clang but not GCC.
307 Sharing a cache between multiple work directories requires using a layout
311 and an environment such as:
312 .Bd -literal -offset indent
313 CCACHE_BASEDIR='${SRCTOP:H}' MAKEOBJDIRPREFIX='${SRCTOP:H}/obj'
318 for more configuration options.
322 and related utilities.
324 Do not build code licensed under Sun's CDDL.
325 When set, it enforces these options:
333 .Va WITHOUT_LOADER_ZFS
338 Do not build the Clang C/C++ compiler during the regular phase of the build.
339 When set, it enforces these options:
343 .Va WITHOUT_CLANG_EXTRAS
345 .Va WITHOUT_CLANG_FORMAT
347 .Va WITHOUT_CLANG_FULL
352 When set, these options are also in effect:
355 .It Va WITHOUT_LLVM_TARGET_AARCH64
357 .Va WITH_LLVM_TARGET_AARCH64
359 .It Va WITHOUT_LLVM_TARGET_ALL
361 .Va WITH_LLVM_TARGET_ALL
363 .It Va WITHOUT_LLVM_TARGET_ARM
365 .Va WITH_LLVM_TARGET_ARM
367 .It Va WITHOUT_LLVM_TARGET_POWERPC
369 .Va WITH_LLVM_TARGET_POWERPC
371 .It Va WITHOUT_LLVM_TARGET_RISCV
373 .Va WITH_LLVM_TARGET_RISCV
376 .It Va WITHOUT_CLANG_BOOTSTRAP
377 Do not build the Clang C/C++ compiler during the bootstrap phase of
379 To be able to build the system, either gcc or clang bootstrap must be
380 enabled unless an alternate compiler is provided via XCC.
381 .It Va WITH_CLANG_EXTRAS
382 Build additional clang and llvm tools, such as bugpoint and
384 .It Va WITH_CLANG_FORMAT
386 .It Va WITHOUT_CLANG_FULL
387 Avoid building the ARCMigrate, Rewriter and StaticAnalyzer components of
388 the Clang C/C++ compiler.
390 Do not clean before building world and/or kernel.
394 .It Va WITHOUT_CROSS_COMPILER
395 Do not build any cross compiler in the cross-tools stage of buildworld.
396 When compiling a different version of
398 than what is installed on the system, provide an alternate
399 compiler with XCC to ensure success.
400 When compiling with an identical version of
402 to the host, this option may be safely used.
403 This option may also be safe when the host version of
405 is close to the sources being built, but all bets are off if there have
406 been any changes to the toolchain between the versions.
407 When set, it enforces these options:
411 .Va WITHOUT_CLANG_BOOTSTRAP
413 .Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
415 .Va WITHOUT_LLD_BOOTSTRAP
418 Do not build any crypto code.
419 When set, it enforces these options:
427 .Va WITHOUT_KERBEROS_SUPPORT
431 .Va WITHOUT_LDNS_UTILS
437 .Va WITHOUT_OPENSSL_KTLS
439 .Va WITHOUT_PKGBOOTSTRAP
446 When set, these options are also in effect:
449 .It Va WITHOUT_GSSAPI
455 Compile with CTF (Compact C Type Format) data.
456 CTF data encapsulates a reduced form of debugging information
457 similar to DWARF and the venerable stabs and is required for DTrace.
459 Do not build CUSE-related programs and libraries.
460 .It Va WITHOUT_CXGBETOOL
464 This is a default setting on
465 arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
466 .It Va WITH_CXGBETOOL
470 This is a default setting on
471 amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
472 .It Va WITHOUT_DEBUG_FILES
473 Avoid building or installing standalone debug files for each
474 executable binary and shared library.
475 .It Va WITH_DETECT_TZ_CHANGES
476 Make the time handling code detect changes to the timezone files.
477 .It Va WITHOUT_DIALOG
484 When set, it enforces these options:
488 .Va WITHOUT_BSDINSTALL
491 Do not build the Webster dictionary files.
492 .It Va WITH_DIRDEPS_BUILD
493 This is an experimental build system.
495 https://www.crufty.net/sjg/docs/freebsd-meta-mode.htm.
496 Build commands can be seen from the top-level with:
497 .Dl make show-valid-targets
498 The build is driven by dirdeps.mk using
501 Makefile.depend files found in each directory.
503 The build can be started from anywhere, and behaves the same.
504 The initial instance of
509 .Pa Makefile.depend ,
510 computing a graph of tree dependencies from the current origin.
513 skips checking dirdep dependencies and will only build in the current
514 and child directories.
516 skips building any dirdeps and only build the current directory.
518 This also utilizes the
520 logic for incremental builds.
522 The build hides commands executed unless
526 Note that there is currently no mass install feature for this.
528 When set, it enforces these options:
532 .Va WITH_INSTALL_AS_USER
535 When set, these options are also in effect:
538 .It Va WITH_META_MODE
540 .Va WITHOUT_META_MODE
546 .It Va WITH_STAGING_MAN
548 .Va WITHOUT_STAGING_MAN
550 .It Va WITH_STAGING_PROG
552 .Va WITHOUT_STAGING_PROG
560 This must be set in the environment, make command line, or
561 .Pa /etc/src-env.conf ,
564 .It Va WITH_DIRDEPS_CACHE
565 Cache result of dirdeps.mk which can save significant time
566 for subsequent builds.
568 .Va WITH_DIRDEPS_BUILD .
570 This must be set in the environment, make command line, or
571 .Pa /etc/src-env.conf ,
574 .It Va WITHOUT_DMAGENT
575 Do not build dma Mail Transport Agent.
576 .It Va WITHOUT_DOCCOMPRESS
577 Do not install compressed system documentation.
578 Only the uncompressed version will be installed.
579 .It Va WITHOUT_DTRACE
580 Do not build DTrace framework kernel modules, libraries, and user commands.
581 When set, it enforces these options:
587 .It Va WITH_DTRACE_TESTS
588 Build and install the DTrace test suite in
589 .Pa /usr/tests/cddl/usr.sbin/dtrace .
590 This test suite is considered experimental on architectures other than
591 amd64/amd64 and running it may cause system instability.
592 .It Va WITHOUT_DYNAMICROOT
593 Set this if you do not want to link
599 Do not build and install
602 and related programs.
609 This is a default setting on
610 powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
617 This is a default setting on
618 amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
619 .It Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
620 Do not build ELF Tool Chain tools
621 (addr2line, nm, size, strings and strip)
622 as part of the bootstrap process.
624 An alternate bootstrap tool chain must be provided.
626 .It Va WITHOUT_EXAMPLES
627 Avoid installing examples to
628 .Pa /usr/share/examples/ .
629 .It Va WITH_EXPERIMENTAL
630 Include experimental features in the build.
631 .It Va WITH_EXTRA_TCP_STACKS
632 Build extra TCP stack modules.
634 Build Flattened Device Tree support as part of the base system.
635 This includes the device tree compiler (dtc) and libfdt support library.
639 and related programs.
640 .It Va WITHOUT_FINGER
641 Do not build or install
645 .It Va WITHOUT_FLOPPY
646 Do not build or install programs
647 for operating floppy disk driver.
648 .It Va WITHOUT_FORMAT_EXTENSIONS
650 .Fl fformat-extensions
651 when compiling the kernel.
652 Also disables all format checking.
654 Build bootloaders without Forth support.
655 .It Va WITHOUT_FP_LIBC
658 without floating-point support.
659 .It Va WITHOUT_FREEBSD_UPDATE
661 .Xr freebsd-update 8 .
663 Do not build or install
670 Install the traditional FreeBSD
674 programs instead of the enhanced versions.
675 .It Va WITHOUT_GNU_DIFF
678 .It Va WITHOUT_GOOGLETEST
679 Neither build nor install
686 as part of the base system.
687 .It Va WITHOUT_GSSAPI
688 Do not build libgssapi.
692 and related utilities.
694 Build Hesiod support.
696 Do not build HTML docs.
697 .It Va WITHOUT_HYPERV
698 Do not build or install HyperV utilities.
700 This is a default setting on
701 arm/armv6, arm/armv7, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
703 Build or install HyperV utilities.
705 This is a default setting on
706 amd64/amd64, arm64/aarch64 and i386/i386.
708 Do not build iconv as part of libc.
709 .It Va WITHOUT_INCLUDES
710 Do not install header files.
711 This option used to be spelled
714 The option does not work for build targets.
717 Do not build programs and libraries related to IPv4 networking.
718 When set, it enforces these options:
722 .Va WITHOUT_INET_SUPPORT
726 programs and libraries related to IPv6 networking.
727 When set, it enforces these options:
731 .Va WITHOUT_INET6_SUPPORT
733 .It Va WITHOUT_INET6_SUPPORT
734 Build libraries, programs, and kernel modules without IPv6 support.
738 .It Va WITHOUT_INET_SUPPORT
739 Build libraries, programs, and kernel modules without IPv4 support.
740 .It Va WITH_INIT_ALL_PATTERN
741 Build the base system or kernel with stack variables initialized to
743 debugging patterns on function entry.
744 This option requires the clang compiler.
745 .It Va WITH_INIT_ALL_ZERO
746 Build the base system or kernel with stack variables initialized
747 to zero on function entry.
748 This option requires that the clang compiler be used.
749 .It Va WITHOUT_INSTALLLIB
750 Set this to not install optional libraries.
751 For example, when creating a
755 The option does not work for build targets.
757 .It Va WITH_INSTALL_AS_USER
758 Make install targets succeed for non-root users by installing
759 files with owner and group attributes set to that of the user running
763 The user still must set the
765 variable to point to a directory where the user has write permissions.
766 .It Va WITHOUT_IPFILTER
767 Do not build IP Filter package.
769 Do not build IPFW tools.
770 .It Va WITHOUT_IPSEC_SUPPORT
771 Do not build the kernel with
774 This option is needed for
781 and related utilities.
783 Do not build tools for the support of jails; e.g.,
790 .It Va WITHOUT_KERBEROS
791 Set this to not build Kerberos 5 (KTH Heimdal).
792 When set, these options are also in effect:
795 .It Va WITHOUT_GSSAPI
799 .It Va WITHOUT_KERBEROS_SUPPORT
801 .Va WITH_KERBEROS_SUPPORT
804 .It Va WITHOUT_KERBEROS_SUPPORT
805 Build some programs without Kerberos support, like
810 .It Va WITH_KERNEL_RETPOLINE
811 Enable the "retpoline" mitigation for CVE-2017-5715 in the kernel
813 .It Va WITHOUT_KERNEL_SYMBOLS
814 Do not install standalone kernel debug symbol files.
815 This option has no effect at build time.
819 library as a part of the base system.
821 The option has no effect yet.
823 When set, these options are also in effect:
826 .It Va WITHOUT_KVM_SUPPORT
831 .It Va WITHOUT_KVM_SUPPORT
832 Build some programs without optional
836 Setting this variable will prevent the LDNS library from being built.
837 When set, it enforces these options:
841 .Va WITHOUT_LDNS_UTILS
845 .It Va WITHOUT_LDNS_UTILS
846 Setting this variable will prevent building the LDNS utilities
850 .It Va WITHOUT_LEGACY_CONSOLE
851 Do not build programs that support a legacy PC console; e.g.,
856 On 64-bit platforms, do not build 32-bit library set and a
860 This is a default setting on
861 arm/armv6, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
863 Do not build LLVM's lld linker.
865 Do not build the LLDB debugger.
867 This is a default setting on
868 arm/armv6, arm/armv7, riscv/riscv64 and riscv/riscv64sf.
870 Build the LLDB debugger.
872 This is a default setting on
873 amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
874 .It Va WITHOUT_LLD_BOOTSTRAP
875 Do not build the LLD linker during the bootstrap phase of
877 To be able to build the system an alternate linker must be provided via XLD.
878 .It Va WITHOUT_LLD_IS_LD
880 .Pa /usr/bin/ld symlink
883 The system will not have a usable tool chain unless a linker is provided
885 .It Va WITHOUT_LLVM_ASSERTIONS
886 Disable debugging assertions in LLVM.
887 .It Va WITH_LLVM_BINUTILS
888 Install LLVM's binutils (ar, addr2line, nm, etc.) instead of ELF Tool Chain's.
889 .It Va WITHOUT_LLVM_COV
893 .It Va WITHOUT_LLVM_CXXFILT
894 Install ELF Tool Chain's cxxfilt as c++filt, instead of LLVM's llvm-cxxfilt.
895 .It Va WITHOUT_LLVM_TARGET_AARCH64
896 Do not build LLVM target support for AArch64.
899 option should be used rather than this in most cases.
900 .It Va WITHOUT_LLVM_TARGET_ALL
901 Only build the required LLVM target support.
902 This option is preferred to specific target support options.
903 When set, these options are also in effect:
906 .It Va WITHOUT_LLVM_TARGET_AARCH64
908 .Va WITH_LLVM_TARGET_AARCH64
910 .It Va WITHOUT_LLVM_TARGET_ARM
912 .Va WITH_LLVM_TARGET_ARM
914 .It Va WITHOUT_LLVM_TARGET_POWERPC
916 .Va WITH_LLVM_TARGET_POWERPC
918 .It Va WITHOUT_LLVM_TARGET_RISCV
920 .Va WITH_LLVM_TARGET_RISCV
923 .It Va WITHOUT_LLVM_TARGET_ARM
924 Do not build LLVM target support for ARM.
927 option should be used rather than this in most cases.
928 .It Va WITH_LLVM_TARGET_BPF
929 Build LLVM target support for BPF.
932 option should be used rather than this in most cases.
933 .It Va WITH_LLVM_TARGET_MIPS
934 Build LLVM target support for MIPS.
937 option should be used rather than this in most cases.
938 .It Va WITHOUT_LLVM_TARGET_POWERPC
939 Do not build LLVM target support for PowerPC.
942 option should be used rather than this in most cases.
943 .It Va WITHOUT_LLVM_TARGET_RISCV
944 Do not build LLVM target support for RISC-V.
947 option should be used rather than this in most cases.
948 .It Va WITHOUT_LLVM_TARGET_X86
949 Do not build LLVM target support for X86.
952 option should be used rather than this in most cases.
953 .It Va WITH_LOADER_EFI_SECUREBOOT
956 with support for verification based on certificates obtained from UEFI.
957 .It Va WITHOUT_LOADER_GELI
958 Disable inclusion of GELI crypto support in the boot chain binaries.
960 This is a default setting on
961 powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
962 .It Va WITH_LOADER_GELI
963 Build GELI bootloader support.
965 This is a default setting on
966 amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
967 .It Va WITHOUT_LOADER_KBOOT
968 Do not build kboot, a linuxboot environment loader
970 This is a default setting on
971 arm/armv6, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
972 .It Va WITH_LOADER_KBOOT
973 Build kboot, a linuxboot environment loader
975 This is a default setting on
976 amd64/amd64 and powerpc/powerpc64.
977 .It Va WITHOUT_LOADER_LUA
978 Do not build LUA bindings for the boot loader.
980 This is a default setting on
981 powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
982 .It Va WITH_LOADER_LUA
983 Build LUA bindings for the boot loader.
985 This is a default setting on
986 amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
987 .It Va WITHOUT_LOADER_OFW
988 Disable building of openfirmware bootloader components.
990 This is a default setting on
991 amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
992 .It Va WITH_LOADER_OFW
993 Build openfirmware bootloader components.
995 This is a default setting on
996 powerpc/powerpc, powerpc/powerpc64 and powerpc/powerpc64le.
997 .It Va WITHOUT_LOADER_UBOOT
998 Disable building of ubldr.
1000 This is a default setting on
1001 amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1002 .It Va WITH_LOADER_UBOOT
1005 This is a default setting on
1006 arm/armv6, arm/armv7, powerpc/powerpc and powerpc/powerpc64.
1007 .It Va WITH_LOADER_VERBOSE
1008 Build with extra verbose debugging in the loader.
1009 May explode already nearly too large loader over the limit.
1011 .It Va WITH_LOADER_VERIEXEC
1014 with support for verification similar to Verified Exec.
1018 When set, these options are also in effect:
1021 .It Va WITH_LOADER_EFI_SECUREBOOT
1023 .Va WITHOUT_LOADER_EFI_SECUREBOOT
1025 .It Va WITH_LOADER_VERIEXEC_VECTX
1027 .Va WITHOUT_LOADER_VERIEXEC_VECTX
1030 .It Va WITH_LOADER_VERIEXEC_PASS_MANIFEST
1033 with support to pass a verified manifest to the kernel.
1034 The kernel has to be built with a module to parse the manifest.
1037 .Va WITH_LOADER_VERIEXEC .
1038 .It Va WITHOUT_LOADER_ZFS
1039 Do not build ZFS file system boot loader support.
1040 .It Va WITHOUT_LOCALES
1041 Do not build localization files; see
1043 .It Va WITHOUT_LOCATE
1046 and related programs.
1050 and related programs.
1051 .It Va WITHOUT_LS_COLORS
1054 without support for colors to distinguish file types.
1055 .It Va WITHOUT_MACHDEP_OPTIMIZATIONS
1056 Prefer machine-independent non-assembler code in libc and libm.
1058 Do not build any mail support (MUA or MTA).
1059 When set, it enforces these options:
1065 .Va WITHOUT_MAILWRAPPER
1067 .Va WITHOUT_SENDMAIL
1069 .It Va WITHOUT_MAILWRAPPER
1076 and related support files.
1077 .It Va WITHOUT_MAKE_CHECK_USE_SANDBOX
1080 in limited sandbox mode.
1081 This option should be paired with
1082 .Va WITH_INSTALL_AS_USER
1083 if executed as an unprivileged user.
1087 .It Va WITH_MALLOC_PRODUCTION
1088 Disable assertions and statistics gathering in
1090 It also defaults the A and J runtime options to off.
1092 Do not build manual pages.
1093 When set, these options are also in effect:
1096 .It Va WITHOUT_MAN_UTILS
1101 .It Va WITHOUT_MANCOMPRESS
1102 Do not install compressed man pages.
1103 Only the uncompressed versions will be installed.
1104 .It Va WITH_MANSPLITPKG
1105 Split man pages into their own packages during make package.
1106 .It Va WITHOUT_MAN_UTILS
1107 Do not build utilities for manual pages,
1113 and related support files.
1114 .It Va WITH_META_MODE
1117 meta files when building, which can provide a reliable incremental build when
1120 The meta file is created in OBJDIR as
1122 These meta files track the command that was executed, its output, and the
1126 module is required unless
1129 When the module is loaded, any files used by the commands executed are
1130 tracked as dependencies for the target in its meta file.
1131 The target is considered out-of-date and rebuilt if any of these
1132 conditions are true compared to the last build:
1133 .Bl -bullet -compact
1135 The command to execute changes.
1137 The current working directory changes.
1139 The target's meta file is missing.
1141 The target's meta file is missing filemon data when filemon is loaded
1142 and a previous run did not have it loaded.
1146 Files read, executed or linked to are newer than the target.
1150 Files read, written, executed or linked are missing.
1152 The meta files can also be useful for debugging.
1154 The build hides commands that are executed unless
1159 to show some of its environment for further debugging.
1161 The build operates as it normally would otherwise.
1162 This option originally invoked a different build system but that was renamed
1164 .Va WITH_DIRDEPS_BUILD .
1166 This must be set in the environment, make command line, or
1167 .Pa /etc/src-env.conf ,
1170 .It Va WITHOUT_MLX5TOOL
1174 This is a default setting on
1175 arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
1176 .It Va WITH_MLX5TOOL
1180 This is a default setting on
1181 amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
1182 .It Va WITHOUT_NETCAT
1186 .It Va WITHOUT_NETGRAPH
1187 Do not build applications to support
1189 When set, it enforces these options:
1195 .Va WITHOUT_BLUETOOTH
1198 When set, these options are also in effect:
1201 .It Va WITHOUT_NETGRAPH_SUPPORT
1203 .Va WITH_NETGRAPH_SUPPORT
1206 .It Va WITHOUT_NETGRAPH_SUPPORT
1207 Build libraries, programs, and kernel modules without netgraph support.
1211 support and related programs.
1212 If set, you might need to adopt your
1218 Do not build NLS catalogs.
1219 When set, it enforces these options:
1223 .Va WITHOUT_NLS_CATALOGS
1225 .It Va WITHOUT_NLS_CATALOGS
1226 Do not build NLS catalog support for
1228 .It Va WITHOUT_NS_CACHING
1229 Disable name caching in the
1232 The generic caching daemon,
1234 will not be built either if this option is set.
1238 and related programs.
1240 Do not build nvme related tools and kernel modules.
1242 This is a default setting on
1243 arm/armv6, arm/armv7, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
1245 Build nvme related tools and kernel modules.
1247 This is a default setting on
1248 amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
1250 Disable the build of the
1251 .Dq "OpenFabrics Enterprise Distribution"
1252 Infiniband software stack, including kernel modules and userspace libraries.
1253 When set, it enforces these options:
1257 .Va WITHOUT_OFED_EXTRA
1259 .It Va WITH_OFED_EXTRA
1260 Build the non-essential components of the
1261 .Dq "OpenFabrics Enterprise Distribution"
1262 Infiniband software stack, mostly examples.
1263 .It Va WITH_OPENLDAP
1264 Enable building LDAP support for kerberos using an openldap client from ports.
1265 .It Va WITHOUT_OPENMP
1266 Do not build LLVM's OpenMP runtime.
1268 This is a default setting on
1269 arm/armv6, arm/armv7 and powerpc/powerpc.
1271 Build LLVM's OpenMP runtime.
1273 This is a default setting on
1274 amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1275 .It Va WITHOUT_OPENSSH
1276 Do not build OpenSSH.
1277 .It Va WITHOUT_OPENSSL
1278 Do not build OpenSSL.
1279 When set, it enforces these options:
1285 .Va WITHOUT_KERBEROS
1287 .Va WITHOUT_KERBEROS_SUPPORT
1291 .Va WITHOUT_LDNS_UTILS
1295 .Va WITHOUT_OPENSSL_KTLS
1297 .Va WITHOUT_PKGBOOTSTRAP
1304 When set, these options are also in effect:
1307 .It Va WITHOUT_GSSAPI
1312 .It Va WITHOUT_OPENSSL_KTLS
1313 Do not include kernel TLS support in OpenSSL.
1315 This is a default setting on
1316 arm/armv6, arm/armv7, i386/i386, powerpc/powerpc, powerpc/powerpc64, powerpc/powerpc64le, riscv/riscv64 and riscv/riscv64sf.
1317 .It Va WITH_OPENSSL_KTLS
1318 Include kernel TLS support in OpenSSL.
1320 This is a default setting on
1321 amd64/amd64 and arm64/aarch64.
1323 Do not build PAM library and modules.
1325 This option is deprecated and does nothing.
1327 When set, these options are also in effect:
1330 .It Va WITHOUT_PAM_SUPPORT
1332 .Va WITH_PAM_SUPPORT
1335 .It Va WITHOUT_PAM_SUPPORT
1336 Build some programs without PAM support, particularly
1341 Do not build PF firewall package.
1342 When set, it enforces these options:
1349 Do not build dynamically linked binaries as
1350 Position-Independent Executable (PIE).
1351 .It Va WITHOUT_PKGBOOTSTRAP
1358 and related programs.
1359 .It Va WITHOUT_PORTSNAP
1360 Do not build or install
1366 and related programs.
1368 Build profiled libraries for use with
1370 This option is deprecated and may not be present in a future version of
1372 .It Va WITHOUT_QUOTAS
1375 and related programs.
1376 .It Va WITHOUT_RADIUS_SUPPORT
1377 Do not build radius support into various applications, like
1381 .It Va WITH_RATELIMIT
1382 Build the system with rate limit support.
1385 .Dv SO_MAX_PACING_RATE
1393 .It Va WITHOUT_RBOOTD
1394 Do not build or install
1396 .It Va WITHOUT_RELRO
1397 Do not apply the Relocation Read-Only (RELRO) vulnerability mitigation.
1401 .It Va WITH_REPRODUCIBLE_BUILD
1402 Exclude build metadata (such as the build time, user, or host)
1403 from the kernel, boot loaders, and uname output, so that builds produce
1404 bit-for-bit identical output.
1405 .It Va WITHOUT_RESCUE
1408 .It Va WITH_RETPOLINE
1409 Build the base system with the retpoline speculative execution
1410 vulnerability mitigation for CVE-2017-5715.
1411 .It Va WITHOUT_ROUTED
1415 .It Va WITH_RPCBIND_WARMSTART_SUPPORT
1418 with warmstart support.
1419 .It Va WITHOUT_SENDMAIL
1422 and related programs.
1423 .It Va WITHOUT_SERVICESDB
1425 .Pa /var/db/services.db .
1426 .It Va WITHOUT_SETUID_LOGIN
1427 Set this to disable the installation of
1429 as a set-user-ID root program.
1430 .It Va WITHOUT_SHAREDOCS
1434 .It Va WITHOUT_SHARED_TOOLCHAIN
1435 Build the toolchain binaries as statically linked executables.
1439 and necessary utilities like assembler, linker and library archive manager.
1440 .It Va WITH_SORT_THREADS
1443 .It Va WITHOUT_SOURCELESS
1444 Do not build kernel modules that include sourceless code (either microcode or native code for host CPU).
1445 When set, it enforces these options:
1449 .Va WITHOUT_SOURCELESS_HOST
1451 .Va WITHOUT_SOURCELESS_UCODE
1453 .It Va WITHOUT_SOURCELESS_HOST
1454 Do not build kernel modules that include sourceless native code for host CPU.
1455 .It Va WITHOUT_SOURCELESS_UCODE
1456 Do not build kernel modules that include sourceless microcode.
1457 .It Va WITHOUT_SPLIT_KERNEL_DEBUG
1458 Do not build standalone kernel debug files.
1459 Debug data (if enabled by the kernel configuration file)
1460 will be included in the kernel and modules.
1461 When set, it enforces these options:
1465 .Va WITHOUT_KERNEL_SYMBOLS
1468 Do not build world with propolice stack smashing protection.
1470 Enable staging of files to a stage tree.
1471 This can be best thought of as auto-install to
1473 with some extra meta data to ensure dependencies can be tracked.
1475 .Va WITH_DIRDEPS_BUILD .
1476 When set, these options are also in effect:
1479 .It Va WITH_STAGING_MAN
1481 .Va WITHOUT_STAGING_MAN
1483 .It Va WITH_STAGING_PROG
1485 .Va WITHOUT_STAGING_PROG
1489 This must be set in the environment, make command line, or
1490 .Pa /etc/src-env.conf ,
1493 .It Va WITH_STAGING_MAN
1494 Enable staging of man pages to stage tree.
1495 .It Va WITH_STAGING_PROG
1496 Enable staging of PROGs to stage tree.
1497 .It Va WITH_STALE_STAGED
1498 Check staged files are not stale.
1499 .It Va WITHOUT_STATS
1500 Neither build nor install
1502 and dependent binaries.
1503 .It Va WITHOUT_SYSCONS
1506 support files such as keyboard maps, fonts, and screen output maps.
1508 Enable use of sysroot during build.
1510 .Va WITH_DIRDEPS_BUILD .
1512 This must be set in the environment, make command line, or
1513 .Pa /etc/src-env.conf ,
1516 .It Va WITHOUT_SYSTEM_COMPILER
1517 Do not opportunistically skip building a cross-compiler during the
1518 bootstrap phase of the build.
1519 Normally, if the currently installed compiler matches the planned bootstrap
1520 compiler type and revision, then it will not be built.
1521 This does not prevent a compiler from being built for installation though,
1522 only for building one for the build itself.
1525 option controls that.
1526 .It Va WITHOUT_SYSTEM_LINKER
1527 Do not opportunistically skip building a cross-linker during the
1528 bootstrap phase of the build.
1529 Normally, if the currently installed linker matches the planned bootstrap
1530 linker type and revision, then it will not be built.
1531 This does not prevent a linker from being built for installation though,
1532 only for building one for the build itself.
1535 option controls that.
1537 This option is only relevant when
1538 .Va WITH_LLD_BOOTSTRAP
1541 Do not build or install
1545 .It Va WITHOUT_TCP_WRAPPERS
1546 Do not build or install
1548 and related utilities.
1550 Do not build and install
1554 .It Va WITHOUT_TELNET
1557 and related programs.
1558 .It Va WITHOUT_TESTS
1559 Do not build nor install the
1566 This also disables the build of all test-related dependencies, including ATF.
1567 When set, it enforces these options:
1571 .Va WITHOUT_DTRACE_TESTS
1574 When set, these options are also in effect:
1577 .It Va WITHOUT_GOOGLETEST
1581 .It Va WITHOUT_TESTS_SUPPORT
1583 .Va WITH_TESTS_SUPPORT
1586 .It Va WITHOUT_TESTS_SUPPORT
1587 Disable the build of all test-related dependencies, including ATF.
1588 When set, it enforces these options:
1592 .Va WITHOUT_GOOGLETEST
1594 .It Va WITHOUT_TEXTPROC
1596 programs used for text processing.
1598 Do not build or install
1602 .It Va WITHOUT_TOOLCHAIN
1603 Do not install header or
1604 programs used for program development,
1605 compilers, debuggers etc.
1606 When set, it enforces these options:
1612 .Va WITHOUT_CLANG_EXTRAS
1614 .Va WITHOUT_CLANG_FORMAT
1616 .Va WITHOUT_CLANG_FULL
1618 .Va WITHOUT_INCLUDES
1624 .Va WITHOUT_LLVM_COV
1627 Build the base system with Undefined Behavior Sanitizer (UBSan) to detect
1628 various kinds of undefined behavior at runtime.
1629 Requires that Clang be used as the base system compiler
1630 and that the runtime support library is available
1631 .It Va WITHOUT_UNBOUND
1634 and related programs.
1635 .It Va WITHOUT_UNIFIED_OBJDIR
1636 Use the historical object directory format for
1639 For native-builds and builds done directly in sub-directories the format of
1640 .Pa ${MAKEOBJDIRPREFIX}/${.CURDIR}
1642 while for cross-builds
1643 .Pa ${MAKEOBJDIRPREFIX}/${TARGET}.${TARGET_ARCH}/${.CURDIR}
1646 This option is transitional and will be removed in a future version of
1649 .Va WITH_UNIFIED_OBJDIR
1650 will be enabled permanently.
1652 This must be set in the environment, make command line, or
1653 .Pa /etc/src-env.conf ,
1657 Do not build USB-related programs and libraries.
1658 .It Va WITHOUT_USB_GADGET_EXAMPLES
1659 Do not build USB gadget kernel modules.
1660 .It Va WITHOUT_UTMPX
1661 Do not build user accounting tools such as
1669 .It Va WITH_VERIEXEC
1672 which loads the contents of verified manifests into the kernel
1679 Do not build and install vi, view, ex and related programs.
1683 support files (fonts and keymaps).
1684 .It Va WITHOUT_WARNS
1685 Set this to not add warning flags to the compiler invocations.
1686 Useful as a temporary workaround when code enters the tree
1687 which triggers warnings in environments that differ from the
1689 .It Va WITHOUT_WERROR
1690 Set this to not treat compiler warnings as errors.
1691 Useful as a temporary workaround when working on fixing compiler warnings.
1692 When set, warnings are still printed in the build log but do not fail the build.
1693 .It Va WITHOUT_WIRELESS
1694 Do not build programs used for 802.11 wireless networks; especially
1695 .Xr wpa_supplicant 8
1698 When set, these options are also in effect:
1701 .It Va WITHOUT_WIRELESS_SUPPORT
1703 .Va WITH_WIRELESS_SUPPORT
1706 .It Va WITHOUT_WIRELESS_SUPPORT
1707 Build libraries, programs, and kernel modules without
1708 802.11 wireless support.
1709 .It Va WITHOUT_WPA_SUPPLICANT_EAPOL
1711 .Xr wpa_supplicant 8
1712 without support for the IEEE 802.1X protocol and without
1713 support for EAP-PEAP, EAP-TLS, EAP-LEAP, and EAP-TTLS
1714 protocols (usable only via 802.1X).
1716 Do not build the ZFS file system kernel module, libraries such as
1718 and user commands such as
1722 Also disable ZFS support in utilities and libraries which implement
1723 ZFS-specific functionality.
1724 .It Va WITHOUT_ZONEINFO
1725 Do not build the timezone database.
1726 When set, it enforces these options:
1730 .Va WITHOUT_ZONEINFO_LEAPSECONDS_SUPPORT
1732 .It Va WITH_ZONEINFO_LEAPSECONDS_SUPPORT
1733 Build leapsecond information in to the timezone database.
1736 .Bl -tag -compact -width Pa
1737 .It Pa /etc/src.conf
1738 .It Pa /etc/src-env.conf
1739 .It Pa /usr/share/mk/bsd.own.mk
1752 This manual page was autogenerated by
1753 .An tools/build/options/makeman .