[apple/xnu.git] / bsd / conf / MASTER

#
# Mach Operating System
# Copyright (c) 1986 Carnegie-Mellon University
# All rights reserved.  The CMU software License Agreement
# specifies the terms and conditions for use and redistribution.
#  
#######################################################################
#
#	Master machine independent configuration file.
#
#	Specific configuration files are created based on this and
#	the machine specific master file using the doconf script.
#
#	Any changes to the master configuration files will affect all
#	other configuration files based upon it.
#
#######################################################################
#
#	To build a configuration, execute "doconf <configuration>."
#	Configurations are specified in the "Configurations:" section
#	of the MASTER and MASTER.* files as follows:
#
#	<configuration> = [ <attribute0> <attribute1> ... <attributeN> ]
#
#	Lines in the MASTER and MASTER.* files are selected based on
#	the attribute selector list, found in a comment at the end of
#	the line.  This is a list of attributes separated by commas.
#	The "!" operator selects the line if none of the attributes are
#	specified.
#
#	For example:
#
#	<foo,bar>	selects a line if "foo" or "bar" are specified.
#	<!foo,bar>	selects a line if neither "foo" nor "bar" is
#			specified.
#
#	Lines with no attributes specified are selected for all
#	configurations.
#
#######################################################################
#
#  STANDARD CONFIGURATION OPTIONS (select any combination)
#
#	debug   = extra kernel level debugging support
#	mach    = Mach support 
#
#  EXPERIMENTAL CONFIGURATION OPTIONS (select any combination, carefully)
#
#	host	= host resource control support
#
#  MULTI-PROCESSOR CONFIGURATION (select at most one)
#
#	multi16 = enable 16 multi-processors
#	multi32 = enable 32 multi-processors
#	multi48 = enable 48 multi-processors
#
#  SYSTEM SIZE CONFIGURATION (select exactly one)
#
#	xlarge = extra large scale system configuration
#	large  = large scale system configuration
#	medium = medium scale system configuration
#	small  = small scale system configuration
#	xsmall = extra small scale system configuration
#	bsmall = special extra small scale system configuration 
#
#######################################################################
#  
#  Standard Mach Research Configurations:
#  -------- ---- -------- ---------------
#
#  These are the default configurations that can be used by most sites.
#  They are used internally by the Mach project.
#
#  MACH      = [mach multi16 medium debug]
#
#######################################################################
#
ident		NeXT

# obsolete timezone spec
options		TIMEZONE=0, PST=0

options		QUOTA			# 				# <quota>
options		INET			#				# <inet>
options		ABSOLUTETIME_SCALAR_TYPE
options		NEW_VM_CODE	#				# <newvm>
options		OLD_VM_CODE	#				# <!newvm>
options		HW_AST		# Hardware ast support		# <hw_ast>
options 	HW_FOOTPRINT	# Cache footprint support	# <hw_foot>
options		CONFIG_LCTX	# Login Context

options 	MACH		# Standard Mach features	# <mach>
options		MACH_ASSERT	# Compile in assertions		# <mach_assert>
options		MACH_COMPAT	# Vendor syscall compatibility  # <mach>
options		MACH_COUNTERS	# counters			# <count>
options		MACH_DEBUG	# IPC debugging interface	# <mdebug>
options		MACH_FASTLINK	# Fast symbolic links
options		MACH_FIXPRI	# Fixed priority threads	# <fixpri>
options		MACH_HOST	# Mach host (resource alloc.)	# <host>
options		MACH_IPC_COMPAT	# Enable old IPC interface	# <ipc_compat>
options		MACH_IPC_DEBUG	# Enable IPC debugging calls	# <ipc_debug>
options		MACH_IPC_TEST	# Testing code/printfs		# <ipc_test>
options		MACH_LDEBUG	# Sanity-check simple locking	# <test>
options		CONFIG_ZLEAKS	# Live zone leak debug sysctls	# <zleaks>
options 	MACH_NP		# Mach IPC support		# <np>
options		MACH_NBC	# No buffer cache		# <nbc>
options		MACH_NET	# Fast network access		# <mach_net>
options		MACH_XP		# external pager support	# <xp>
options		NORMA_IPC	# NORMA IPC support		# <norma_ipc>
options		NORMA_DEVICE	# NORMA unified device names	# <norma_device>
options		NORMA_VM	# NORMA virtual memory support	# <norma_vm>
options		NORMA_TASK	# NORMA task support		# <norma_task>
options		NORMA_ETHER	# NORMA across ethernet		# <norma_ether>
options		SIMPLE_CLOCK	# don't assume fixed tick	# <simple_clock>
options		XPR_DEBUG	# kernel tracing		# <xpr_debug>
options		KDEBUG		# kernel tracing		# <kdebug>
options		DDM_DEBUG	# driverkit-style tracing	# <ddm_debug>
options		MACH_OLD_VM_COPY # Old vm_copy technology	# <!newvm>
options		NO_DIRECT_RPC	# for untyped mig servers	# 
options		IPX		# ipx stack 			# <ipx>
options		EON		# 				# <eon>
options		ISO		# ISO stack			# <iso>
options		LLC		# 802.2 support			# <llc>
options		LOOP		# loopback support		# <loop>
options		MROUTING	# multicast routing		# <mrouting>
options		ROUTING		# routing			# <routing>
options		VLAN		#				# <vlan>
options		BOND		#				# <bond>
options		PF		# Packet Filter			# <pf>
options		PF_PKTHDR	# PF tag inside mbuf pkthdr	# <pf_pkthdr>
options		PFLOG		# PF log interface		# <pflog>
options		IPDIVERT        # Divert sockets (for NAT)      # <ipdivert>
options		IPFIREWALL      # IP Firewalling (used by NAT)  # <ipfirewall>
options		IPFIREWALL_FORWARD      #Transparent proxy      # <ipfirewall>
options		IPFIREWALL_DEFAULT_TO_ACCEPT    # allow everything by default   # <ipfirewall>
options		DUMMYNET	# dummynet support		# <dummynet>
options		TRAFFIC_MGT	# traffic management support		# <traffic_mgt>
options		IPFW2		# IP firewall (new version)	# <ipfw2>
options		MULTICAST	# Internet Protocol Class-D	$
options		TCPDEBUG	# TCP debug			# <tcpdebug>
options		RANDOM_IP_ID	# random (not sequential) ip ids	# <randomipid>
options		TCP_DROP_SYNFIN	# Drop TCP packets with SYN+FIN set	# <tcpdrop_synfin>
options		ICMP_BANDLIM	# ICMP bandwidth limiting sysctl
options		IFNET_INPUT_SANITY_CHK	# allow dlil/ifnet input sanity check # <ifnet_input_chk>
options		SYSV_SEM	# SVID semaphores			# <sysv_sem>
options		SYSV_MSG	# SVID messages				# <sysv_msg>
options		SYSV_SHM	# SVID shared mem			# <sysv_shm>
options		PSYNCH		# pthread synch				# <psynch>
options		PANIC_INFO	# want kernel panic info	# <panic_info>
options		DEVELOPMENT	# dev kernel				# <development>

# secure_kernel - secure kernel from user programs
options     SECURE_KERNEL       # <secure_kernel> 

options     OLD_SEMWAIT_SIGNAL  # old semwait_signal handler

#
#	4.4 general kernel 
#
options		SOCKETS		# socket support			# <inet, inet6, netat>
options 	DIAGNOSTIC	# diagnostics				# <diagnostic>
options		CONFIG_DTRACE	# dtrace support			# <config_dtrace>
options		GPROF		# build profiling			# <profile>
options		SENDFILE	# sendfile					# <sendfile>
options		NETWORKING	# networking layer			# <inet, inet6, netat>
options		CONFIG_FSE	# file system events		# <config_fse>
options		CONFIG_IMAGEBOOT	# local image boot	# <config_imageboot>
options		CONFIG_SOWUPCALL	# SB_UPCALL on sowwakeup	# <config_sowupcall>
options		CONFIG_MBUF_JUMBO	# jumbo cluster pool	# <config_mbuf_jumbo>
options		CONFIG_FORCE_OUT_IFP	# Enable IP_FORCE_OUT_IFP # <config_force_out_ifp>
options		CONFIG_IFEF_NOWINDOWSCALE # Scale TCP window per driver # <config_ifef_nowindowscale>

options		CONFIG_WORKQUEUE	# <config_workqueue>

#
#	4.4 filesystems 
#
options		FFS			# Fast Filesystem Support	# <ffs>
options		HFS			# HFS/HFS+ support		# <hfs>
options		FIFO		# fifo support			# <fifo>
options		FDESC		# fdesc_fs support		# <fdesc>
options		DEVFS		# devfs support			# <devfs>
options		JOURNALING	# journaling support	# <journaling>
options		HFS_COMPRESSION	# hfs compression	# <hfs_compression>
options		CONFIG_HFS_TRIM	# HFS trims unused blocks	# <config_hfs_trim>

#
#	file system features
#
options		QUOTA		# file system quotas		# <quota>
options		REV_ENDIAN_FS	# Reverse Endian FS		# <revfs>
options		NAMEDSTREAMS	# named stream vnop support	# <namedstreams>
options		CONFIG_VOLFS	# volfs path support (legacy)	# <config_volfs>
options		CONFIG_IMGSRC_ACCESS # source of imageboot dmg	# <config_imgsrc_access>
options		CONFIG_TRIGGERS	# trigger vnodes		# <config_triggers>

#
# NFS support
#
options		NFSCLIENT	# Be an NFS client		# <nfsclient>
options		NFSSERVER	# Be an NFS server		# <nfsserver>

#
# AppleTalk Support
#
options		NETAT			# AppleTalk support				# <netat>
#options		AURP_SUPPORT    # AppleTalk Update Routing      # <netat>

#
# Machine Independent Apple Features
#
options		KERNSERV	# kernel_server intarface	# <kernserv>
options		MALLOCDEBUG	# kernel malloc debugging	# <mallocdebug>
options		DRIVERKIT 	# driverkit support		# <driverkit>
options		KERNOBJC	# Objective-C support		# <kernobjc>
options		OBJCTEST	# Objc internal test		# <objctest>
options		KERNEL_STACK	# MI kernel stack support	# <kernstack>
profile						# build a profiling kernel	# <profile>

#
#  Point-to-Point Protocol support
#
pseudo-device ppp 2						# <ppp>

#       
# IPv6 Support
#       
options         "INET6"         		# kernel IPv6 Support           # <inet6>
options         IPSEC                  		# IP security            	# <ipsec>
options         IPSEC_ESP              		# IP security            	# <ipsec>
options         "IPV6FIREWALL"         		# IPv6 Firewall Feature   	# <ipv6firewall>
options         "IPV6FIREWALL_DEFAULT_TO_ACCEPT"	#IPv6 Firewall Feature   	# <ipv6firewall>
#options         "IPV6FIREWALL_VERBOSE" 		#IPv6 Firewall Feature   	# <ipv6firewall>

pseudo-device   gif     1		# <gif>
pseudo-device   dummy   2		# <dummy>
pseudo-device   faith   1		# <faith>
pseudo-device   stf 	1 		# <stf>

options			crypto			# <ipsec,crypto>
options			ALLCRYPTO		# <xlarge,large,medium>
options			randomipid		# <inet,randomipid>

options		ZLIB		# inflate/deflate support	# <zlib>

options		IF_BRIDGE			# <if_bridge>

makeoptions	LIBDRIVER = "libDriver_kern.o"			# <libdriver>
makeoptions	LIBOBJC   = "libkobjc.o"			# <kernobjc>

maxusers	64		# <xlarge>
maxusers	50		# <large>
maxusers	32		# <medium>
maxusers	16		# <small>
maxusers	8		# <xsmall>
maxusers	2		# <bsmall>

#
#  Multi-processor selection
#
pseudo-device	cpus		64	# <multi64>
pseudo-device	cpus		32	# <multi32>
pseudo-device	cpus		16	# <multi16>
pseudo-device	cpus		2	# <multi2>
pseudo-device	cpus		1	# <!multi64,multi32,multi16,multi2>

#
#  configurable kernel event related resources 
#
options   CONFIG_KN_HASHSIZE=64		# <medium,large,xlarge>
options   CONFIG_KN_HASHSIZE=48		# <small,xsmall>
options   CONFIG_KN_HASHSIZE=20		# <bsmall>

#
#  configurable vfs related resources 
#  CONFIG_VNODES - used to pre allocate vnode related resources 
#  CONFIG_VNODE_FREE_MIN - mininmum number of free vnodes 
#  CONFIG_NC_HASH - name cache hash table allocation
#  CONFIG_VFS_NAMES - name strings
#
#  263168 magic number for medium CONFIG_VNODES is based on memory 
#  Number vnodes  is (memsize/64k) + 1024 
#  This is the calculation that is used by launchd in tiger
#  we are clipping the max based on 16G 
#  ie ((16*1024*1024*1024)/(64 *1024)) + 1024 = 263168;

options   CONFIG_VNODES=263168		# <large,xlarge>
options   CONFIG_VNODES=263168		# <medium>
options   CONFIG_VNODES=10240		# <small>
options   CONFIG_VNODES=750			# <bsmall>

options   CONFIG_VNODE_FREE_MIN=500		# <large,xlarge>
options   CONFIG_VNODE_FREE_MIN=300		# <medium>
options   CONFIG_VNODE_FREE_MIN=200		# <small>
options   CONFIG_VNODE_FREE_MIN=100		# <xsmall>
options   CONFIG_VNODE_FREE_MIN=75		# <bsmall>

options   CONFIG_NC_HASH=5120		# <large,xlarge>
options   CONFIG_NC_HASH=4096		# <medium>
options   CONFIG_NC_HASH=2048		# <small,xsmall>
options   CONFIG_NC_HASH=1024		# <bsmall>

options   CONFIG_VFS_NAMES=5120		# <large,xlarge>
options   CONFIG_VFS_NAMES=4096		# <medium>
options   CONFIG_VFS_NAMES=3072		# <small,xsmall>
options   CONFIG_VFS_NAMES=2048		# <bsmall>

options   CONFIG_MAX_CLUSTERS=8		# <xlarge,large,medium>
options   CONFIG_MAX_CLUSTERS=4		# <small,xsmall,bsmall>

#
#  configurable kauth credential related resources 
#
options   KAUTH_CRED_PRIMES_COUNT=7		# <medium,large,xlarge>
options   KAUTH_CRED_PRIMES_COUNT=3		# <bsmall,xsmall,small>

options   KAUTH_CRED_PRIMES="{97, 241, 397, 743, 1499, 3989, 7499}"		# <medium,large,xlarge>
options   KAUTH_CRED_PRIMES="{5, 17, 97}"								# <bsmall,xsmall,small>

#
#  configurable options for minumum number of buffers for kernel memory 
#
options   CONFIG_MIN_NBUF=256		# <medium,large,xlarge>
options   CONFIG_MIN_NBUF=128		# <small>
options   CONFIG_MIN_NBUF=80		# <xsmall>
options   CONFIG_MIN_NBUF=64		# <bsmall>

options   CONFIG_MIN_NIOBUF=128		# <medium,large,xlarge>
options   CONFIG_MIN_NIOBUF=64		# <xsmall,small>
options   CONFIG_MIN_NIOBUF=32		# <bsmall>

#
# set maximum space used for packet buffers
#
options        CONFIG_NMBCLUSTERS="((1024 * 1024) / MCLBYTES)"		# <large,xlarge>
options        CONFIG_NMBCLUSTERS="((1024 * 512) / MCLBYTES)"		# <medium>
options        CONFIG_NMBCLUSTERS="((1024 * 256) / MCLBYTES)"		# <bsmall,xsmall,small>

#
# set maximum space used for packet buffers
#
options CONFIG_USESOCKTHRESHOLD=1	# <large,xlarge,medium>
options CONFIG_USESOCKTHRESHOLD=0	# <bsmall,xsmall,small>

#
# Configure size of TCP hash table
#
options CONFIG_TCBHASHSIZE=4096		# <medium,large,xlarge>
options CONFIG_TCBHASHSIZE=128		# <xsmall,small,bsmall>

#
#  configurable async IO options 
#  CONFIG_AIO_MAX - system wide limit of async IO requests.
#  CONFIG_AIO_PROCESS_MAX - process limit of async IO requests.
#  CONFIG_AIO_THREAD_COUNT - number of async IO worker threads created.
#
options   CONFIG_AIO_MAX=360		# <xlarge>
options   CONFIG_AIO_MAX=180		# <large>
options   CONFIG_AIO_MAX=90			# <medium>
options   CONFIG_AIO_MAX=45			# <small>
options   CONFIG_AIO_MAX=20			# <xsmall>
options   CONFIG_AIO_MAX=10			# <bsmall>

options   CONFIG_AIO_PROCESS_MAX=64		# <xlarge>
options   CONFIG_AIO_PROCESS_MAX=32		# <large>
options   CONFIG_AIO_PROCESS_MAX=16		# <medium>
options   CONFIG_AIO_PROCESS_MAX=12		# <small>
options   CONFIG_AIO_PROCESS_MAX=8		# <xsmall>
options   CONFIG_AIO_PROCESS_MAX=4		# <bsmall>

options   CONFIG_AIO_THREAD_COUNT=16	# <xlarge>
options   CONFIG_AIO_THREAD_COUNT=8		# <large>
options   CONFIG_AIO_THREAD_COUNT=4		# <medium>
options   CONFIG_AIO_THREAD_COUNT=3		# <small>
options   CONFIG_AIO_THREAD_COUNT=2		# <xsmall,bsmall>

#
#  configurable kernel related resources (CONFIG_THREAD_MAX needs to stay in 
#  sync with osfmk/conf/MASTER until we fix the config system...) todo XXX
#
options   CONFIG_THREAD_MAX=2560		# <medium,large,xlarge>
options   CONFIG_THREAD_MAX=1536		# <small,xsmall>
options   CONFIG_THREAD_MAX=1024		# <bsmall>

options   CONFIG_MAXVIFS=32				# <medium,large,xlarge>
options   CONFIG_MAXVIFS=16				# <small,xsmall>
options   CONFIG_MAXVIFS=2				# <bsmall>

options   CONFIG_MFCTBLSIZ=256			# <medium,large,xlarge>
options   CONFIG_MFCTBLSIZ=128			# <small,xsmall>
options   CONFIG_MFCTBLSIZ=16			# <bsmall>

#
# configurable kernel message buffer size
#
options   CONFIG_MSG_BSIZE=4096			# <bsmall,small,xsmall>
options   CONFIG_MSG_BSIZE=16384		# <medium,large,xlarge>

#
#  configurable kernel - use these options to strip strings from panic
#  and printf calls.
#  no_panic_str - saves around 50K of kernel footprint.
#  no_printf_str - saves around 45K of kernel footprint.
#
options   CONFIG_NO_PANIC_STRINGS		# <no_panic_str>
options   CONFIG_NO_PRINTF_STRINGS		# <no_printf_str>
options   CONFIG_NO_KPRINTF_STRINGS		# <no_kprintf_str>

#
# use finer-grained lock groups for the proc subsystem
#
options   CONFIG_FINE_LOCK_GROUPS               # <medium,large,xlarge>

#
# configurable kernel - general switch to say we are building for an
# embedded device
#
options   CONFIG_EMBEDDED			# <config_embedded>

# only execute signed code. Hang this off config_embedded since there's
# nothing more appropriate right now
#
options   CONFIG_ENFORCE_SIGNED_CODE		# <config_embedded>

# support dynamic signing of code
#
options		CONFIG_DYNAMIC_CODE_SIGNING	# <dynamic_codesigning>

#
# code decryption... used on embedded for app protection
# must be set in all the bsd/conf and osfmk/conf MASTER files
#
options		CONFIG_CODE_DECRYPTION	# <config_embedded>

#
# User Content Protection, used on embedded
#

options		CONFIG_PROTECT	# <config_protect>

#
# freeze - support app hibernation, used on embedded
# CONFIG_FREEZE_SUSPENDED_MIN is the minimum number of suspended  
# processes to be left unhibernated
#
options		CONFIG_FREEZE					# <freeze>

options		CHECK_CS_VALIDATION_BITMAP			# <config_cs_validation_bitmap>

#
#  Ethernet (ARP)
#
pseudo-device	ether			# <networking,inet,inet6,netat>
#
#  Network loopback device
#
pseudo-device	loop			# <networking,inet,inet6,netat>
#
#  UCB pseudo terminal service
#
pseudo-device  pty     512 init pty_init       # <xlarge>
pseudo-device  pty     256 init pty_init       # <large>
pseudo-device  pty     128 init pty_init       # <medium>
pseudo-device  pty      48 init pty_init       # <small>
pseudo-device  pty      16 init pty_init       # <xsmall>
pseudo-device  pty       8 init pty_init       # <bsmall>
#
# Cloning pseudo terminal service
#
pseudo-device	ptmx	1 init ptmx_init

#
# vnode device
#
pseudo-device  vndevice	   16       init    vndevice_init   # <xlarge>
pseudo-device  vndevice		8       init    vndevice_init   # <large>
pseudo-device  vndevice		4       init    vndevice_init   # <medium>
pseudo-device  vndevice		3       init    vndevice_init   # <small>
pseudo-device  vndevice		2       init    vndevice_init   # <xsmall>
pseudo-device  vndevice		2       init    vndevice_init   # <bsmall>

#
# memory device
pseudo-device	mdevdevice	1	init	mdevinit

#
#
# packet filter device
#
pseudo-device	bpfilter	4	init	bpf_init		# <networking,inet,inet6,netat>

#
# fsevents device
pseudo-device	fsevents	1	init	fsevents_init	# <config_fse>

#
#  shim to "linux" mach disk drivers  (mach drivers must also be turned on)
#
# now using iokit disk shim, this is code is obsolete
#pseudo-device diskshim

pseudo-device	random		1	init	random_init
pseudo-device	dtrace		1	init	dtrace_init	# <config_dtrace>
pseudo-device	helper		1	init	helper_init	# <config_dtrace>
pseudo-device	lockstat	1	init	lockstat_init	# <config_dtrace>
pseudo-device	sdt		1	init	sdt_init	# <config_dtrace>
pseudo-device	systrace	1	init	systrace_init	# <config_dtrace>
pseudo-device	fbt		1	init	fbt_init	# <config_dtrace>
pseudo-device	profile_prvd	1	init	profile_init	# <config_dtrace>
Commit	Line	Data
1c79356b A	1	#
	2	# Mach Operating System
	3	# Copyright (c) 1986 Carnegie-Mellon University
	4	# All rights reserved. The CMU software License Agreement
	5	# specifies the terms and conditions for use and redistribution.
	6	#
	7	#######################################################################
	8	#
	9	# Master machine independent configuration file.
	10	#
	11	# Specific configuration files are created based on this and
	12	# the machine specific master file using the doconf script.
	13	#
	14	# Any changes to the master configuration files will affect all
	15	# other configuration files based upon it.
	16	#
	17	#######################################################################
	18	#
	19	# To build a configuration, execute "doconf <configuration>."
	20	# Configurations are specified in the "Configurations:" section
	21	# of the MASTER and MASTER.* files as follows:
	22	#
	23	# <configuration> = [ <attribute0> <attribute1> ... <attributeN> ]
	24	#
	25	# Lines in the MASTER and MASTER.* files are selected based on
	26	# the attribute selector list, found in a comment at the end of
	27	# the line. This is a list of attributes separated by commas.
	28	# The "!" operator selects the line if none of the attributes are
	29	# specified.
	30	#
	31	# For example:
	32	#
	33	# <foo,bar> selects a line if "foo" or "bar" are specified.
	34	# <!foo,bar> selects a line if neither "foo" nor "bar" is
	35	# specified.
	36	#
	37	# Lines with no attributes specified are selected for all
	38	# configurations.
	39	#
	40	#######################################################################
	41	#
	42	# STANDARD CONFIGURATION OPTIONS (select any combination)
	43	#
	44	# debug = extra kernel level debugging support
	45	# mach = Mach support
	46	#
	47	# EXPERIMENTAL CONFIGURATION OPTIONS (select any combination, carefully)
	48	#
1c79356b	49	# host = host resource control support
1c79356b A	50	#
	51	# MULTI-PROCESSOR CONFIGURATION (select at most one)
	52	#
	53	# multi16 = enable 16 multi-processors
	54	# multi32 = enable 32 multi-processors
	55	# multi48 = enable 48 multi-processors
	56	#
	57	# SYSTEM SIZE CONFIGURATION (select exactly one)
	58	#
	59	# xlarge = extra large scale system configuration
	60	# large = large scale system configuration
	61	# medium = medium scale system configuration
	62	# small = small scale system configuration
	63	# xsmall = extra small scale system configuration
2d21ac55	64	# bsmall = special extra small scale system configuration
1c79356b A	65	#
	66	#######################################################################
	67	#
	68	# Standard Mach Research Configurations:
	69	# -------- ---- -------- ---------------
	70	#
	71	# These are the default configurations that can be used by most sites.
	72	# They are used internally by the Mach project.
	73	#
	74	# MACH = [mach multi16 medium debug]
	75	#
	76	#######################################################################
	77	#
	78	ident NeXT
	79
	80	# obsolete timezone spec
	81	options TIMEZONE=0, PST=0
	82
2d21ac55 A	83	options QUOTA # # <quota>
2d21ac55 A	84	options INET # # <inet>
0b4e3aa0	85	options ABSOLUTETIME_SCALAR_TYPE
1c79356b A	86	options NEW_VM_CODE # # <newvm>
	87	options OLD_VM_CODE # # <!newvm>
	88	options HW_AST # Hardware ast support # <hw_ast>
	89	options HW_FOOTPRINT # Cache footprint support # <hw_foot>
2d21ac55 A	90	options CONFIG_LCTX # Login Context
2d21ac55 A	91
1c79356b	92	options MACH # Standard Mach features # <mach>
2d21ac55	93	options MACH_ASSERT # Compile in assertions # <mach_assert>
1c79356b A	94	options MACH_COMPAT # Vendor syscall compatibility # <mach>
	95	options MACH_COUNTERS # counters # <count>
	96	options MACH_DEBUG # IPC debugging interface # <mdebug>
	97	options MACH_FASTLINK # Fast symbolic links
	98	options MACH_FIXPRI # Fixed priority threads # <fixpri>
	99	options MACH_HOST # Mach host (resource alloc.) # <host>
	100	options MACH_IPC_COMPAT # Enable old IPC interface # <ipc_compat>
	101	options MACH_IPC_DEBUG # Enable IPC debugging calls # <ipc_debug>
	102	options MACH_IPC_TEST # Testing code/printfs # <ipc_test>
	103	options MACH_LDEBUG # Sanity-check simple locking # <test>
6d2010ae	104	options CONFIG_ZLEAKS # Live zone leak debug sysctls # <zleaks>
1c79356b A	105	options MACH_NP # Mach IPC support # <np>
1c79356b A	106	options MACH_NBC # No buffer cache # <nbc>
1c79356b A	107	options MACH_NET # Fast network access # <mach_net>
	108	options MACH_XP # external pager support # <xp>
	109	options NORMA_IPC # NORMA IPC support # <norma_ipc>
	110	options NORMA_DEVICE # NORMA unified device names # <norma_device>
	111	options NORMA_VM # NORMA virtual memory support # <norma_vm>
	112	options NORMA_TASK # NORMA task support # <norma_task>
	113	options NORMA_ETHER # NORMA across ethernet # <norma_ether>
	114	options SIMPLE_CLOCK # don't assume fixed tick # <simple_clock>
1c79356b A	115	options XPR_DEBUG # kernel tracing # <xpr_debug>
	116	options KDEBUG # kernel tracing # <kdebug>
	117	options DDM_DEBUG # driverkit-style tracing # <ddm_debug>
	118	options MACH_OLD_VM_COPY # Old vm_copy technology # <!newvm>
	119	options NO_DIRECT_RPC # for untyped mig servers #
	120	options IPX # ipx stack # <ipx>
	121	options EON # # <eon>
	122	options ISO # ISO stack # <iso>
	123	options LLC # 802.2 support # <llc>
	124	options LOOP # loopback support # <loop>
	125	options MROUTING # multicast routing # <mrouting>
1c79356b	126	options ROUTING # routing # <routing>
1c79356b	127	options VLAN # # <vlan>
91447636	128	options BOND # # <bond>
b0d623f7 A	129	options PF # Packet Filter # <pf>
	130	options PF_PKTHDR # PF tag inside mbuf pkthdr # <pf_pkthdr>
	131	options PFLOG # PF log interface # <pflog>
2d21ac55 A	132	options IPDIVERT # Divert sockets (for NAT) # <ipdivert>
	133	options IPFIREWALL # IP Firewalling (used by NAT) # <ipfirewall>
	134	options IPFIREWALL_FORWARD #Transparent proxy # <ipfirewall>
	135	options IPFIREWALL_DEFAULT_TO_ACCEPT # allow everything by default # <ipfirewall>
91447636	136	options DUMMYNET # dummynet support # <dummynet>
2d21ac55	137	options TRAFFIC_MGT # traffic management support # <traffic_mgt>
91447636	138	options IPFW2 # IP firewall (new version) # <ipfw2>
1c79356b	139	options MULTICAST # Internet Protocol Class-D $
9bccf70c A	140	options TCPDEBUG # TCP debug # <tcpdebug>
	141	options RANDOM_IP_ID # random (not sequential) ip ids # <randomipid>
	142	options TCP_DROP_SYNFIN # Drop TCP packets with SYN+FIN set # <tcpdrop_synfin>
	143	options ICMP_BANDLIM # ICMP bandwidth limiting sysctl
2d21ac55	144	options IFNET_INPUT_SANITY_CHK # allow dlil/ifnet input sanity check # <ifnet_input_chk>
2d21ac55 A	145	options SYSV_SEM # SVID semaphores # <sysv_sem>
	146	options SYSV_MSG # SVID messages # <sysv_msg>
	147	options SYSV_SHM # SVID shared mem # <sysv_shm>
b0d623f7	148	options PSYNCH # pthread synch # <psynch>
2d21ac55 A	149	options PANIC_INFO # want kernel panic info # <panic_info>
2d21ac55 A	150	options DEVELOPMENT # dev kernel # <development>
1c79356b	151
2d21ac55 A	152	# secure_kernel - secure kernel from user programs
2d21ac55 A	153	options SECURE_KERNEL # <secure_kernel>
1c79356b	154
b0d623f7 A	155	options OLD_SEMWAIT_SIGNAL # old semwait_signal handler
b0d623f7 A	156
1c79356b A	157	#
	158	# 4.4 general kernel
	159	#
2d21ac55	160	options SOCKETS # socket support # <inet, inet6, netat>
1c79356b	161	options DIAGNOSTIC # diagnostics # <diagnostic>
2d21ac55	162	options CONFIG_DTRACE # dtrace support # <config_dtrace>
55e303ae	163	options GPROF # build profiling # <profile>
2d21ac55 A	164	options SENDFILE # sendfile # <sendfile>
	165	options NETWORKING # networking layer # <inet, inet6, netat>
	166	options CONFIG_FSE # file system events # <config_fse>
	167	options CONFIG_IMAGEBOOT # local image boot # <config_imageboot>
	168	options CONFIG_SOWUPCALL # SB_UPCALL on sowwakeup # <config_sowupcall>
2d21ac55	169	options CONFIG_MBUF_JUMBO # jumbo cluster pool # <config_mbuf_jumbo>
b0d623f7 A	170	options CONFIG_FORCE_OUT_IFP # Enable IP_FORCE_OUT_IFP # <config_force_out_ifp>
b0d623f7 A	171	options CONFIG_IFEF_NOWINDOWSCALE # Scale TCP window per driver # <config_ifef_nowindowscale>
593a1d5f A	172
593a1d5f A	173	options CONFIG_WORKQUEUE # <config_workqueue>
1c79356b A	174
	175	#
	176	# 4.4 filesystems
	177	#
2d21ac55 A	178	options FFS # Fast Filesystem Support # <ffs>
2d21ac55 A	179	options HFS # HFS/HFS+ support # <hfs>
1c79356b	180	options FIFO # fifo support # <fifo>
1c79356b	181	options FDESC # fdesc_fs support # <fdesc>
1c79356b	182	options DEVFS # devfs support # <devfs>
2d21ac55	183	options JOURNALING # journaling support # <journaling>
b0d623f7	184	options HFS_COMPRESSION # hfs compression # <hfs_compression>
060df5ea	185	options CONFIG_HFS_TRIM # HFS trims unused blocks # <config_hfs_trim>
2d21ac55 A	186
	187	#
	188	# file system features
	189	#
	190	options QUOTA # file system quotas # <quota>
	191	options REV_ENDIAN_FS # Reverse Endian FS # <revfs>
	192	options NAMEDSTREAMS # named stream vnop support # <namedstreams>
	193	options CONFIG_VOLFS # volfs path support (legacy) # <config_volfs>
b7266188	194	options CONFIG_IMGSRC_ACCESS # source of imageboot dmg # <config_imgsrc_access>
6d2010ae	195	options CONFIG_TRIGGERS # trigger vnodes # <config_triggers>
1c79356b A	196
	197	#
	198	# NFS support
	199	#
2d21ac55 A	200	options NFSCLIENT # Be an NFS client # <nfsclient>
2d21ac55 A	201	options NFSSERVER # Be an NFS server # <nfsserver>
1c79356b A	202
	203	#
	204	# AppleTalk Support
	205	#
2d21ac55	206	options NETAT # AppleTalk support # <netat>
0c530ab8	207	#options AURP_SUPPORT # AppleTalk Update Routing # <netat>
2d21ac55	208
1c79356b A	209	#
	210	# Machine Independent Apple Features
	211	#
	212	options KERNSERV # kernel_server intarface # <kernserv>
	213	options MALLOCDEBUG # kernel malloc debugging # <mallocdebug>
	214	options DRIVERKIT # driverkit support # <driverkit>
	215	options KERNOBJC # Objective-C support # <kernobjc>
	216	options OBJCTEST # Objc internal test # <objctest>
	217	options KERNEL_STACK # MI kernel stack support # <kernstack>
2d21ac55	218	profile # build a profiling kernel # <profile>
1c79356b	219
9bccf70c A	220	#
	221	# Point-to-Point Protocol support
	222	#
	223	pseudo-device ppp 2 # <ppp>
	224
1c79356b	225	#
9bccf70c	226	# IPv6 Support
1c79356b A	227	#
1c79356b A	228	options "INET6" # kernel IPv6 Support # <inet6>
1c79356b A	229	options IPSEC # IP security # <ipsec>
	230	options IPSEC_ESP # IP security # <ipsec>
	231	options "IPV6FIREWALL" # IPv6 Firewall Feature # <ipv6firewall>
91447636 A	232	options "IPV6FIREWALL_DEFAULT_TO_ACCEPT" #IPv6 Firewall Feature # <ipv6firewall>
91447636 A	233	#options "IPV6FIREWALL_VERBOSE" #IPv6 Firewall Feature # <ipv6firewall>
9bccf70c A	234
9bccf70c A	235	pseudo-device gif 1 # <gif>
1c79356b A	236	pseudo-device dummy 2 # <dummy>
1c79356b A	237	pseudo-device faith 1 # <faith>
9bccf70c A	238	pseudo-device stf 1 # <stf>
	239
	240	options crypto # <ipsec,crypto>
2d21ac55 A	241	options ALLCRYPTO # <xlarge,large,medium>
	242	options randomipid # <inet,randomipid>
	243
	244	options ZLIB # inflate/deflate support # <zlib>
1c79356b	245
6d2010ae	246	options IF_BRIDGE # <if_bridge>
b7266188	247
1c79356b A	248	makeoptions LIBDRIVER = "libDriver_kern.o" # <libdriver>
	249	makeoptions LIBOBJC = "libkobjc.o" # <kernobjc>
	250
	251	maxusers 64 # <xlarge>
	252	maxusers 50 # <large>
	253	maxusers 32 # <medium>
	254	maxusers 16 # <small>
2d21ac55	255	maxusers 8 # <xsmall>
1c79356b A	256	maxusers 2 # <bsmall>
	257
	258	#
	259	# Multi-processor selection
	260	#
	261	pseudo-device cpus 64 # <multi64>
	262	pseudo-device cpus 32 # <multi32>
	263	pseudo-device cpus 16 # <multi16>
	264	pseudo-device cpus 2 # <multi2>
	265	pseudo-device cpus 1 # <!multi64,multi32,multi16,multi2>
	266
2d21ac55 A	267	#
	268	# configurable kernel event related resources
	269	#
	270	options CONFIG_KN_HASHSIZE=64 # <medium,large,xlarge>
	271	options CONFIG_KN_HASHSIZE=48 # <small,xsmall>
	272	options CONFIG_KN_HASHSIZE=20 # <bsmall>
	273
	274	#
	275	# configurable vfs related resources
	276	# CONFIG_VNODES - used to pre allocate vnode related resources
	277	# CONFIG_VNODE_FREE_MIN - mininmum number of free vnodes
	278	# CONFIG_NC_HASH - name cache hash table allocation
	279	# CONFIG_VFS_NAMES - name strings
	280	#
	281	# 263168 magic number for medium CONFIG_VNODES is based on memory
	282	# Number vnodes is (memsize/64k) + 1024
	283	# This is the calculation that is used by launchd in tiger
	284	# we are clipping the max based on 16G
	285	# ie ((16102410241024)/(64 1024)) + 1024 = 263168;
	286
	287	options CONFIG_VNODES=263168 # <large,xlarge>
	288	options CONFIG_VNODES=263168 # <medium>
	289	options CONFIG_VNODES=10240 # <small>
b0d623f7	290	options CONFIG_VNODES=750 # <bsmall>
2d21ac55 A	291
	292	options CONFIG_VNODE_FREE_MIN=500 # <large,xlarge>
	293	options CONFIG_VNODE_FREE_MIN=300 # <medium>
	294	options CONFIG_VNODE_FREE_MIN=200 # <small>
	295	options CONFIG_VNODE_FREE_MIN=100 # <xsmall>
	296	options CONFIG_VNODE_FREE_MIN=75 # <bsmall>
	297
	298	options CONFIG_NC_HASH=5120 # <large,xlarge>
	299	options CONFIG_NC_HASH=4096 # <medium>
	300	options CONFIG_NC_HASH=2048 # <small,xsmall>
	301	options CONFIG_NC_HASH=1024 # <bsmall>
	302
	303	options CONFIG_VFS_NAMES=5120 # <large,xlarge>
	304	options CONFIG_VFS_NAMES=4096 # <medium>
	305	options CONFIG_VFS_NAMES=3072 # <small,xsmall>
	306	options CONFIG_VFS_NAMES=2048 # <bsmall>
	307
b7266188 A	308	options CONFIG_MAX_CLUSTERS=8 # <xlarge,large,medium>
	309	options CONFIG_MAX_CLUSTERS=4 # <small,xsmall,bsmall>
	310
2d21ac55 A	311	#
	312	# configurable kauth credential related resources
	313	#
	314	options KAUTH_CRED_PRIMES_COUNT=7 # <medium,large,xlarge>
	315	options KAUTH_CRED_PRIMES_COUNT=3 # <bsmall,xsmall,small>
	316
	317	options KAUTH_CRED_PRIMES="{97, 241, 397, 743, 1499, 3989, 7499}" # <medium,large,xlarge>
	318	options KAUTH_CRED_PRIMES="{5, 17, 97}" # <bsmall,xsmall,small>
	319
	320	#
	321	# configurable options for minumum number of buffers for kernel memory
	322	#
	323	options CONFIG_MIN_NBUF=256 # <medium,large,xlarge>
	324	options CONFIG_MIN_NBUF=128 # <small>
	325	options CONFIG_MIN_NBUF=80 # <xsmall>
	326	options CONFIG_MIN_NBUF=64 # <bsmall>
	327
	328	options CONFIG_MIN_NIOBUF=128 # <medium,large,xlarge>
	329	options CONFIG_MIN_NIOBUF=64 # <xsmall,small>
	330	options CONFIG_MIN_NIOBUF=32 # <bsmall>
	331
	332	#
	333	# set maximum space used for packet buffers
	334	#
	335	options CONFIG_NMBCLUSTERS="((1024 * 1024) / MCLBYTES)" # <large,xlarge>
	336	options CONFIG_NMBCLUSTERS="((1024 * 512) / MCLBYTES)" # <medium>
	337	options CONFIG_NMBCLUSTERS="((1024 * 256) / MCLBYTES)" # <bsmall,xsmall,small>
	338
b0d623f7	339	#
593a1d5f A	340	# set maximum space used for packet buffers
593a1d5f A	341	#
b0d623f7 A	342	options CONFIG_USESOCKTHRESHOLD=1 # <large,xlarge,medium>
b0d623f7 A	343	options CONFIG_USESOCKTHRESHOLD=0 # <bsmall,xsmall,small>
593a1d5f	344
2d21ac55 A	345	#
	346	# Configure size of TCP hash table
	347	#
	348	options CONFIG_TCBHASHSIZE=4096 # <medium,large,xlarge>
	349	options CONFIG_TCBHASHSIZE=128 # <xsmall,small,bsmall>
	350
	351	#
	352	# configurable async IO options
	353	# CONFIG_AIO_MAX - system wide limit of async IO requests.
	354	# CONFIG_AIO_PROCESS_MAX - process limit of async IO requests.
	355	# CONFIG_AIO_THREAD_COUNT - number of async IO worker threads created.
	356	#
	357	options CONFIG_AIO_MAX=360 # <xlarge>
	358	options CONFIG_AIO_MAX=180 # <large>
	359	options CONFIG_AIO_MAX=90 # <medium>
	360	options CONFIG_AIO_MAX=45 # <small>
	361	options CONFIG_AIO_MAX=20 # <xsmall>
	362	options CONFIG_AIO_MAX=10 # <bsmall>
	363
	364	options CONFIG_AIO_PROCESS_MAX=64 # <xlarge>
	365	options CONFIG_AIO_PROCESS_MAX=32 # <large>
	366	options CONFIG_AIO_PROCESS_MAX=16 # <medium>
	367	options CONFIG_AIO_PROCESS_MAX=12 # <small>
	368	options CONFIG_AIO_PROCESS_MAX=8 # <xsmall>
	369	options CONFIG_AIO_PROCESS_MAX=4 # <bsmall>
	370
	371	options CONFIG_AIO_THREAD_COUNT=16 # <xlarge>
	372	options CONFIG_AIO_THREAD_COUNT=8 # <large>
	373	options CONFIG_AIO_THREAD_COUNT=4 # <medium>
	374	options CONFIG_AIO_THREAD_COUNT=3 # <small>
	375	options CONFIG_AIO_THREAD_COUNT=2 # <xsmall,bsmall>
	376
	377	#
	378	# configurable kernel related resources (CONFIG_THREAD_MAX needs to stay in
	379	# sync with osfmk/conf/MASTER until we fix the config system...) todo XXX
	380	#
	381	options CONFIG_THREAD_MAX=2560 # <medium,large,xlarge>
	382	options CONFIG_THREAD_MAX=1536 # <small,xsmall>
	383	options CONFIG_THREAD_MAX=1024 # <bsmall>
	384
	385	options CONFIG_MAXVIFS=32 # <medium,large,xlarge>
	386	options CONFIG_MAXVIFS=16 # <small,xsmall>
	387	options CONFIG_MAXVIFS=2 # <bsmall>
	388
	389	options CONFIG_MFCTBLSIZ=256 # <medium,large,xlarge>
	390	options CONFIG_MFCTBLSIZ=128 # <small,xsmall>
	391	options CONFIG_MFCTBLSIZ=16 # <bsmall>
	392
6d2010ae A	393	#
	394	# configurable kernel message buffer size
	395	#
	396	options CONFIG_MSG_BSIZE=4096 # <bsmall,small,xsmall>
	397	options CONFIG_MSG_BSIZE=16384 # <medium,large,xlarge>
	398
2d21ac55 A	399	#
	400	# configurable kernel - use these options to strip strings from panic
	401	# and printf calls.
	402	# no_panic_str - saves around 50K of kernel footprint.
	403	# no_printf_str - saves around 45K of kernel footprint.
	404	#
	405	options CONFIG_NO_PANIC_STRINGS # <no_panic_str>
	406	options CONFIG_NO_PRINTF_STRINGS # <no_printf_str>
	407	options CONFIG_NO_KPRINTF_STRINGS # <no_kprintf_str>
	408
6d2010ae A	409	#
	410	# use finer-grained lock groups for the proc subsystem
	411	#
	412	options CONFIG_FINE_LOCK_GROUPS # <medium,large,xlarge>
	413
2d21ac55 A	414	#
	415	# configurable kernel - general switch to say we are building for an
	416	# embedded device
	417	#
	418	options CONFIG_EMBEDDED # <config_embedded>
	419
b0d623f7 A	420	# only execute signed code. Hang this off config_embedded since there's
	421	# nothing more appropriate right now
	422	#
	423	options CONFIG_ENFORCE_SIGNED_CODE # <config_embedded>
	424
b7266188 A	425	# support dynamic signing of code
	426	#
	427	options CONFIG_DYNAMIC_CODE_SIGNING # <dynamic_codesigning>
	428
593a1d5f A	429	#
	430	# code decryption... used on embedded for app protection
	431	# must be set in all the bsd/conf and osfmk/conf MASTER files
	432	#
	433	options CONFIG_CODE_DECRYPTION # <config_embedded>
	434
d1ecb069 A	435	#
	436	# User Content Protection, used on embedded
	437	#
	438
	439	options CONFIG_PROTECT # <config_protect>
	440
6d2010ae A	441	#
	442	# freeze - support app hibernation, used on embedded
	443	# CONFIG_FREEZE_SUSPENDED_MIN is the minimum number of suspended
	444	# processes to be left unhibernated
	445	#
	446	options CONFIG_FREEZE # <freeze>
	447
	448	options CHECK_CS_VALIDATION_BITMAP # <config_cs_validation_bitmap>
593a1d5f	449
1c79356b A	450	#
	451	# Ethernet (ARP)
	452	#
2d21ac55	453	pseudo-device ether # <networking,inet,inet6,netat>
1c79356b A	454	#
	455	# Network loopback device
	456	#
2d21ac55	457	pseudo-device loop # <networking,inet,inet6,netat>
1c79356b A	458	#
	459	# UCB pseudo terminal service
	460	#
2d21ac55 A	461	pseudo-device pty 512 init pty_init # <xlarge>
	462	pseudo-device pty 256 init pty_init # <large>
	463	pseudo-device pty 128 init pty_init # <medium>
	464	pseudo-device pty 48 init pty_init # <small>
	465	pseudo-device pty 16 init pty_init # <xsmall>
	466	pseudo-device pty 8 init pty_init # <bsmall>
	467	#
	468	# Cloning pseudo terminal service
	469	#
	470	pseudo-device ptmx 1 init ptmx_init
9bccf70c A	471
	472	#
	473	# vnode device
2d21ac55 A	474	#
	475	pseudo-device vndevice 16 init vndevice_init # <xlarge>
	476	pseudo-device vndevice 8 init vndevice_init # <large>
	477	pseudo-device vndevice 4 init vndevice_init # <medium>
	478	pseudo-device vndevice 3 init vndevice_init # <small>
6d2010ae	479	pseudo-device vndevice 2 init vndevice_init # <xsmall>
2d21ac55	480	pseudo-device vndevice 2 init vndevice_init # <bsmall>
9bccf70c	481
55e303ae A	482	#
	483	# memory device
	484	pseudo-device mdevdevice 1 init mdevinit
	485
9bccf70c	486	#
1c79356b A	487	#
	488	# packet filter device
	489	#
2d21ac55	490	pseudo-device bpfilter 4 init bpf_init # <networking,inet,inet6,netat>
1c79356b	491
91447636 A	492	#
91447636 A	493	# fsevents device
2d21ac55	494	pseudo-device fsevents 1 init fsevents_init # <config_fse>
91447636	495
1c79356b A	496	#
	497	# shim to "linux" mach disk drivers (mach drivers must also be turned on)
	498	#
	499	# now using iokit disk shim, this is code is obsolete
	500	#pseudo-device diskshim
0b4e3aa0 A	501
0b4e3aa0 A	502	pseudo-device random 1 init random_init
2d21ac55 A	503	pseudo-device dtrace 1 init dtrace_init # <config_dtrace>
	504	pseudo-device helper 1 init helper_init # <config_dtrace>
	505	pseudo-device lockstat 1 init lockstat_init # <config_dtrace>
	506	pseudo-device sdt 1 init sdt_init # <config_dtrace>
	507	pseudo-device systrace 1 init systrace_init # <config_dtrace>
	508	pseudo-device fbt 1 init fbt_init # <config_dtrace>
	509	pseudo-device profile_prvd 1 init profile_init # <config_dtrace>
0b4e3aa0	510