[apple/xnu.git] / bsd / conf / MASTER

#
# Mach Operating System
# Copyright (c) 1986 Carnegie-Mellon University
# All rights reserved.  The CMU software License Agreement
# specifies the terms and conditions for use and redistribution.
#  
#######################################################################
#
#	Master machine independent configuration file.
#
#	Specific configuration files are created based on this and
#	the machine specific master file using the doconf script.
#
#	Any changes to the master configuration files will affect all
#	other configuration files based upon it.
#
#######################################################################
#
#	To build a configuration, execute "doconf <configuration>."
#	Configurations are specified in the "Configurations:" section
#	of the MASTER and MASTER.* files as follows:
#
#	<configuration> = [ <attribute0> <attribute1> ... <attributeN> ]
#
#	Lines in the MASTER and MASTER.* files are selected based on
#	the attribute selector list, found in a comment at the end of
#	the line.  This is a list of attributes separated by commas.
#	The "!" operator selects the line if none of the attributes are
#	specified.
#
#	For example:
#
#	<foo,bar>	selects a line if "foo" or "bar" are specified.
#	<!foo,bar>	selects a line if neither "foo" nor "bar" is
#			specified.
#
#	Lines with no attributes specified are selected for all
#	configurations.
#
#######################################################################
#
#  STANDARD CONFIGURATION OPTIONS (select any combination)
#
#	debug   = extra kernel level debugging support
#	mach    = Mach support 
#
#  EXPERIMENTAL CONFIGURATION OPTIONS (select any combination, carefully)
#
#	host	= host resource control support
#
#  MULTI-PROCESSOR CONFIGURATION (select at most one)
#
#	multi16 = enable 16 multi-processors
#	multi32 = enable 32 multi-processors
#	multi48 = enable 48 multi-processors
#
#  SYSTEM SIZE CONFIGURATION (select exactly one)
#
#	xlarge = extra large scale system configuration
#	large  = large scale system configuration
#	medium = medium scale system configuration
#	small  = small scale system configuration
#	xsmall = extra small scale system configuration
#	bsmall = special extra small scale system configuration 
#
#######################################################################
#  
#  Standard Mach Research Configurations:
#  -------- ---- -------- ---------------
#
#  These are the default configurations that can be used by most sites.
#  They are used internally by the Mach project.
#
#  MACH      = [mach multi16 medium debug]
#
#######################################################################
#
ident		NeXT

# obsolete timezone spec
options		TIMEZONE=0, PST=0

options		QUOTA			# 				# <quota>
options		INET			#				# <inet>
options		ABSOLUTETIME_SCALAR_TYPE
options		NEW_VM_CODE	#				# <newvm>
options		OLD_VM_CODE	#				# <!newvm>
options		HW_AST		# Hardware ast support		# <hw_ast>
options 	HW_FOOTPRINT	# Cache footprint support	# <hw_foot>
options		CONFIG_LCTX	# Login Context

options 	MACH		# Standard Mach features	# <mach>
options		MACH_ASSERT	# Compile in assertions		# <mach_assert>
options		MACH_COMPAT	# Vendor syscall compatibility  # <mach>
options		MACH_COUNTERS	# counters			# <count>
options		MACH_DEBUG	# IPC debugging interface	# <mdebug>
options		MACH_FASTLINK	# Fast symbolic links
options		MACH_FIXPRI	# Fixed priority threads	# <fixpri>
options		MACH_HOST	# Mach host (resource alloc.)	# <host>
options		MACH_IPC_COMPAT	# Enable old IPC interface	# <ipc_compat>
options		MACH_IPC_DEBUG	# Enable IPC debugging calls	# <ipc_debug>
options		MACH_IPC_TEST	# Testing code/printfs		# <ipc_test>
options		MACH_LDEBUG	# Sanity-check simple locking	# <test>
options 	MACH_NP		# Mach IPC support		# <np>
options		MACH_NBC	# No buffer cache		# <nbc>
options		MACH_NET	# Fast network access		# <mach_net>
options		MACH_XP		# external pager support	# <xp>
options		NORMA_IPC	# NORMA IPC support		# <norma_ipc>
options		NORMA_DEVICE	# NORMA unified device names	# <norma_device>
options		NORMA_VM	# NORMA virtual memory support	# <norma_vm>
options		NORMA_TASK	# NORMA task support		# <norma_task>
options		NORMA_ETHER	# NORMA across ethernet		# <norma_ether>
options		SIMPLE_CLOCK	# don't assume fixed tick	# <simple_clock>
options		XPR_DEBUG	# kernel tracing		# <xpr_debug>
options		KDEBUG		# kernel tracing		# <kdebug>
options		DDM_DEBUG	# driverkit-style tracing	# <ddm_debug>
options		MACH_OLD_VM_COPY # Old vm_copy technology	# <!newvm>
options		NO_DIRECT_RPC	# for untyped mig servers	# 
options		IPX		# ipx stack 			# <ipx>
options		EON		# 				# <eon>
options		ISO		# ISO stack			# <iso>
options		LLC		# 802.2 support			# <llc>
options		LOOP		# loopback support		# <loop>
options		MROUTING	# multicast routing		# <mrouting>
options		ROUTING		# routing			# <routing>
options		NETMIBS		#				# <netmibs>
options		VLAN		#				# <vlan>
options		BOND		#				# <bond>
options		IPDIVERT        # Divert sockets (for NAT)      # <ipdivert>
options		IPFIREWALL      # IP Firewalling (used by NAT)  # <ipfirewall>
options		IPFIREWALL_FORWARD      #Transparent proxy      # <ipfirewall>
options		IPFIREWALL_DEFAULT_TO_ACCEPT    # allow everything by default   # <ipfirewall>
options		DUMMYNET	# dummynet support		# <dummynet>
options		TRAFFIC_MGT	# traffic management support		# <traffic_mgt>
options		IPFW2		# IP firewall (new version)	# <ipfw2>
options		MULTICAST	# Internet Protocol Class-D	$
options		TCPDEBUG	# TCP debug			# <tcpdebug>
options		RANDOM_IP_ID	# random (not sequential) ip ids	# <randomipid>
options		TCP_DROP_SYNFIN	# Drop TCP packets with SYN+FIN set	# <tcpdrop_synfin>
options		ICMP_BANDLIM	# ICMP bandwidth limiting sysctl
options		IFNET_INPUT_SANITY_CHK	# allow dlil/ifnet input sanity check # <ifnet_input_chk>
options		AUDIT		# Security event auditing	# <audit>
options		SYSV_SEM	# SVID semaphores			# <sysv_sem>
options		SYSV_MSG	# SVID messages				# <sysv_msg>
options		SYSV_SHM	# SVID shared mem			# <sysv_shm>
options		PANIC_INFO	# want kernel panic info	# <panic_info>
options		DEVELOPMENT	# dev kernel				# <development>

# secure_kernel - secure kernel from user programs
options     SECURE_KERNEL       # <secure_kernel> 

#
#	4.4 general kernel 
#
options		SOCKETS		# socket support			# <inet, inet6, netat>
options 	COMPAT_43_TTY	# 4.3 BSD tty compat	# <compat_43_tty>
options 	DIAGNOSTIC	# diagnostics				# <diagnostic>
options		CONFIG_DTRACE	# dtrace support			# <config_dtrace>
options		GPROF		# build profiling			# <profile>
options		SENDFILE	# sendfile					# <sendfile>
options		NETWORKING	# networking layer			# <inet, inet6, netat>
options		CONFIG_FSE	# file system events		# <config_fse>
options		CONFIG_IMAGEBOOT	# local image boot	# <config_imageboot>
options		CONFIG_SOWUPCALL	# SB_UPCALL on sowwakeup	# <config_sowupcall>
options		CONFIG_FORCE_OUT_IFP	# Force IP output to use an interface # <config_force_out_ifp>
options		CONFIG_MBUF_NOEXPAND	# limit mbuf expansion	# <config_mbuf_noexpand>
options		CONFIG_MBUF_JUMBO	# jumbo cluster pool	# <config_mbuf_jumbo>
options		CONFIG_IP_EDGEHOLE	# Drop tagged packets at EDGE interface # <config_ip_edgehole>

options		CONFIG_WORKQUEUE	# <config_workqueue>

#
#	4.4 filesystems 
#
options		FFS			# Fast Filesystem Support	# <ffs>
options		HFS			# HFS/HFS+ support		# <hfs>
options		FIFO		# fifo support			# <fifo>
options		UNION		# union_fs support		# <union>
options		FDESC		# fdesc_fs support		# <fdesc>
options		CD9660		# ISO 9660 CD-ROM support	# <cd9660>
options		DEVFS		# devfs support			# <devfs>
options		JOURNALING	# journaling support	# <journaling>

#
#	file system features
#
options		QUOTA		# file system quotas		# <quota>
options		REV_ENDIAN_FS	# Reverse Endian FS		# <revfs>
options		NAMEDSTREAMS	# named stream vnop support	# <namedstreams>
options		CONFIG_VOLFS	# volfs path support (legacy)	# <config_volfs>

#
# NFS support
#
options		NFSCLIENT	# Be an NFS client		# <nfsclient>
options		NFSSERVER	# Be an NFS server		# <nfsserver>

#
# AppleTalk Support
#
options		NETAT			# AppleTalk support				# <netat>
#options		AURP_SUPPORT    # AppleTalk Update Routing      # <netat>

#
# Machine Independent Apple Features
#
options		KERNSERV	# kernel_server intarface	# <kernserv>
options		MALLOCDEBUG	# kernel malloc debugging	# <mallocdebug>
options		DRIVERKIT 	# driverkit support		# <driverkit>
options		KERNOBJC	# Objective-C support		# <kernobjc>
options		OBJCTEST	# Objc internal test		# <objctest>
options		KERNEL_STACK	# MI kernel stack support	# <kernstack>
profile						# build a profiling kernel	# <profile>

#
#  Point-to-Point Protocol support
#
pseudo-device ppp 2						# <ppp>

#       
# IPv6 Support
#       
options         "INET6"         		# kernel IPv6 Support           # <inet6>
options         IPSEC                  		# IP security            	# <ipsec>
options         IPSEC_ESP              		# IP security            	# <ipsec>
options         "IPV6FIREWALL"         		# IPv6 Firewall Feature   	# <ipv6firewall>
options         "IPV6FIREWALL_DEFAULT_TO_ACCEPT"	#IPv6 Firewall Feature   	# <ipv6firewall>
#options         "IPV6FIREWALL_VERBOSE" 		#IPv6 Firewall Feature   	# <ipv6firewall>

pseudo-device   gif     1		# <gif>
pseudo-device   dummy   2		# <dummy>
pseudo-device   faith   1		# <faith>
pseudo-device   stf 	1 		# <stf>

options			crypto			# <ipsec,crypto>
options			ALLCRYPTO		# <xlarge,large,medium>
options			randomipid		# <inet,randomipid>

options		ZLIB		# inflate/deflate support	# <zlib>

makeoptions	LIBDRIVER = "libDriver_kern.o"			# <libdriver>
makeoptions	LIBOBJC   = "libkobjc.o"			# <kernobjc>

maxusers	64		# <xlarge>
maxusers	50		# <large>
maxusers	32		# <medium>
maxusers	16		# <small>
maxusers	8		# <xsmall>
maxusers	2		# <bsmall>

#
#  Multi-processor selection
#
pseudo-device	cpus		64	# <multi64>
pseudo-device	cpus		32	# <multi32>
pseudo-device	cpus		16	# <multi16>
pseudo-device	cpus		2	# <multi2>
pseudo-device	cpus		1	# <!multi64,multi32,multi16,multi2>

#
#  configurable kernel event related resources 
#
options   CONFIG_KN_HASHSIZE=64		# <medium,large,xlarge>
options   CONFIG_KN_HASHSIZE=48		# <small,xsmall>
options   CONFIG_KN_HASHSIZE=20		# <bsmall>

#
#  configurable vfs related resources 
#  CONFIG_VNODES - used to pre allocate vnode related resources 
#  CONFIG_VNODE_FREE_MIN - mininmum number of free vnodes 
#  CONFIG_NC_HASH - name cache hash table allocation
#  CONFIG_VFS_NAMES - name strings
#
#  263168 magic number for medium CONFIG_VNODES is based on memory 
#  Number vnodes  is (memsize/64k) + 1024 
#  This is the calculation that is used by launchd in tiger
#  we are clipping the max based on 16G 
#  ie ((16*1024*1024*1024)/(64 *1024)) + 1024 = 263168;

options   CONFIG_VNODES=263168		# <large,xlarge>
options   CONFIG_VNODES=263168		# <medium>
options   CONFIG_VNODES=10240		# <small>
options   CONFIG_VNODES=1024		# <xsmall>
options   CONFIG_VNODES=640			# <bsmall>

options   CONFIG_VNODE_FREE_MIN=500		# <large,xlarge>
options   CONFIG_VNODE_FREE_MIN=300		# <medium>
options   CONFIG_VNODE_FREE_MIN=200		# <small>
options   CONFIG_VNODE_FREE_MIN=100		# <xsmall>
options   CONFIG_VNODE_FREE_MIN=75		# <bsmall>

options   CONFIG_NC_HASH=5120		# <large,xlarge>
options   CONFIG_NC_HASH=4096		# <medium>
options   CONFIG_NC_HASH=2048		# <small,xsmall>
options   CONFIG_NC_HASH=1024		# <bsmall>

options   CONFIG_VFS_NAMES=5120		# <large,xlarge>
options   CONFIG_VFS_NAMES=4096		# <medium>
options   CONFIG_VFS_NAMES=3072		# <small,xsmall>
options   CONFIG_VFS_NAMES=2048		# <bsmall>

#
#  configurable kauth credential related resources 
#
options   KAUTH_CRED_PRIMES_COUNT=7		# <medium,large,xlarge>
options   KAUTH_CRED_PRIMES_COUNT=3		# <bsmall,xsmall,small>

options   KAUTH_CRED_PRIMES="{97, 241, 397, 743, 1499, 3989, 7499}"		# <medium,large,xlarge>
options   KAUTH_CRED_PRIMES="{5, 17, 97}"								# <bsmall,xsmall,small>

#
#  configurable options for minumum number of buffers for kernel memory 
#
options   CONFIG_MIN_NBUF=256		# <medium,large,xlarge>
options   CONFIG_MIN_NBUF=128		# <small>
options   CONFIG_MIN_NBUF=80		# <xsmall>
options   CONFIG_MIN_NBUF=64		# <bsmall>

options   CONFIG_MIN_NIOBUF=128		# <medium,large,xlarge>
options   CONFIG_MIN_NIOBUF=64		# <xsmall,small>
options   CONFIG_MIN_NIOBUF=32		# <bsmall>

#
# set maximum space used for packet buffers
#
options        CONFIG_NMBCLUSTERS="((1024 * 1024) / MCLBYTES)"		# <large,xlarge>
options        CONFIG_NMBCLUSTERS="((1024 * 512) / MCLBYTES)"		# <medium>
options        CONFIG_NMBCLUSTERS="((1024 * 256) / MCLBYTES)"		# <bsmall,xsmall,small>

# set maximum space used for packet buffers
#
options        CONFIG_USESOCKTHRESHOLD=1		# <large,xlarge,medium>
options        CONFIG_USESOCKTHRESHOLD=0		# <bsmall,xsmall,small>

#
# Configure size of TCP hash table
#
options CONFIG_TCBHASHSIZE=4096		# <medium,large,xlarge>
options CONFIG_TCBHASHSIZE=128		# <xsmall,small,bsmall>

#
#  configurable async IO options 
#  CONFIG_AIO_MAX - system wide limit of async IO requests.
#  CONFIG_AIO_PROCESS_MAX - process limit of async IO requests.
#  CONFIG_AIO_THREAD_COUNT - number of async IO worker threads created.
#
options   CONFIG_AIO_MAX=360		# <xlarge>
options   CONFIG_AIO_MAX=180		# <large>
options   CONFIG_AIO_MAX=90			# <medium>
options   CONFIG_AIO_MAX=45			# <small>
options   CONFIG_AIO_MAX=20			# <xsmall>
options   CONFIG_AIO_MAX=10			# <bsmall>

options   CONFIG_AIO_PROCESS_MAX=64		# <xlarge>
options   CONFIG_AIO_PROCESS_MAX=32		# <large>
options   CONFIG_AIO_PROCESS_MAX=16		# <medium>
options   CONFIG_AIO_PROCESS_MAX=12		# <small>
options   CONFIG_AIO_PROCESS_MAX=8		# <xsmall>
options   CONFIG_AIO_PROCESS_MAX=4		# <bsmall>

options   CONFIG_AIO_THREAD_COUNT=16	# <xlarge>
options   CONFIG_AIO_THREAD_COUNT=8		# <large>
options   CONFIG_AIO_THREAD_COUNT=4		# <medium>
options   CONFIG_AIO_THREAD_COUNT=3		# <small>
options   CONFIG_AIO_THREAD_COUNT=2		# <xsmall,bsmall>

#
#  configurable kernel related resources (CONFIG_THREAD_MAX needs to stay in 
#  sync with osfmk/conf/MASTER until we fix the config system...) todo XXX
#
options   CONFIG_THREAD_MAX=2560		# <medium,large,xlarge>
options   CONFIG_THREAD_MAX=1536		# <small,xsmall>
options   CONFIG_THREAD_MAX=1024		# <bsmall>

options   CONFIG_MAXVIFS=32				# <medium,large,xlarge>
options   CONFIG_MAXVIFS=16				# <small,xsmall>
options   CONFIG_MAXVIFS=2				# <bsmall>

options   CONFIG_MFCTBLSIZ=256			# <medium,large,xlarge>
options   CONFIG_MFCTBLSIZ=128			# <small,xsmall>
options   CONFIG_MFCTBLSIZ=16			# <bsmall>

#
#  configurable kernel - use these options to strip strings from panic
#  and printf calls.
#  no_panic_str - saves around 50K of kernel footprint.
#  no_printf_str - saves around 45K of kernel footprint.
#
options   CONFIG_NO_PANIC_STRINGS		# <no_panic_str>
options   CONFIG_NO_PRINTF_STRINGS		# <no_printf_str>
options   CONFIG_NO_KPRINTF_STRINGS		# <no_kprintf_str>

#
# configurable kernel - general switch to say we are building for an
# embedded device
#
options   CONFIG_EMBEDDED			# <config_embedded>

#
# code decryption... used on embedded for app protection
# must be set in all the bsd/conf and osfmk/conf MASTER files
#
options		CONFIG_CODE_DECRYPTION	# <config_embedded>


#
#  Ethernet (ARP)
#
pseudo-device	ether			# <networking,inet,inet6,netat>
#
#  Network loopback device
#
pseudo-device	loop			# <networking,inet,inet6,netat>
#
#  UCB pseudo terminal service
#
pseudo-device  pty     512 init pty_init       # <xlarge>
pseudo-device  pty     256 init pty_init       # <large>
pseudo-device  pty     128 init pty_init       # <medium>
pseudo-device  pty      48 init pty_init       # <small>
pseudo-device  pty      16 init pty_init       # <xsmall>
pseudo-device  pty       8 init pty_init       # <bsmall>
#
# Cloning pseudo terminal service
#
pseudo-device	ptmx	1 init ptmx_init

#
# vnode device
#
pseudo-device  vndevice	   16       init    vndevice_init   # <xlarge>
pseudo-device  vndevice		8       init    vndevice_init   # <large>
pseudo-device  vndevice		4       init    vndevice_init   # <medium>
pseudo-device  vndevice		3       init    vndevice_init   # <small>
pseudo-device  vndevice		2       init    vndevice_init   # <bsmall>

#
# memory device
pseudo-device	mdevdevice	1	init	mdevinit

#
#
# packet filter device
#
pseudo-device	bpfilter	4	init	bpf_init		# <networking,inet,inet6,netat>

#
# fsevents device
pseudo-device	fsevents	1	init	fsevents_init	# <config_fse>

#
#  shim to "linux" mach disk drivers  (mach drivers must also be turned on)
#
# now using iokit disk shim, this is code is obsolete
#pseudo-device diskshim

pseudo-device	random		1	init	random_init
pseudo-device	dtrace		1	init	dtrace_init	# <config_dtrace>
pseudo-device	helper		1	init	helper_init	# <config_dtrace>
pseudo-device	lockstat	1	init	lockstat_init	# <config_dtrace>
pseudo-device	sdt		1	init	sdt_init	# <config_dtrace>
pseudo-device	systrace	1	init	systrace_init	# <config_dtrace>
pseudo-device	fbt		1	init	fbt_init	# <config_dtrace>
pseudo-device	profile_prvd	1	init	profile_init	# <config_dtrace>
Commit	Line	Data
1c79356b A	1	#
	2	# Mach Operating System
	3	# Copyright (c) 1986 Carnegie-Mellon University
	4	# All rights reserved. The CMU software License Agreement
	5	# specifies the terms and conditions for use and redistribution.
	6	#
	7	#######################################################################
	8	#
	9	# Master machine independent configuration file.
	10	#
	11	# Specific configuration files are created based on this and
	12	# the machine specific master file using the doconf script.
	13	#
	14	# Any changes to the master configuration files will affect all
	15	# other configuration files based upon it.
	16	#
	17	#######################################################################
	18	#
	19	# To build a configuration, execute "doconf <configuration>."
	20	# Configurations are specified in the "Configurations:" section
	21	# of the MASTER and MASTER.* files as follows:
	22	#
	23	# <configuration> = [ <attribute0> <attribute1> ... <attributeN> ]
	24	#
	25	# Lines in the MASTER and MASTER.* files are selected based on
	26	# the attribute selector list, found in a comment at the end of
	27	# the line. This is a list of attributes separated by commas.
	28	# The "!" operator selects the line if none of the attributes are
	29	# specified.
	30	#
	31	# For example:
	32	#
	33	# <foo,bar> selects a line if "foo" or "bar" are specified.
	34	# <!foo,bar> selects a line if neither "foo" nor "bar" is
	35	# specified.
	36	#
	37	# Lines with no attributes specified are selected for all
	38	# configurations.
	39	#
	40	#######################################################################
	41	#
	42	# STANDARD CONFIGURATION OPTIONS (select any combination)
	43	#
	44	# debug = extra kernel level debugging support
	45	# mach = Mach support
	46	#
	47	# EXPERIMENTAL CONFIGURATION OPTIONS (select any combination, carefully)
	48	#
1c79356b	49	# host = host resource control support
1c79356b A	50	#
	51	# MULTI-PROCESSOR CONFIGURATION (select at most one)
	52	#
	53	# multi16 = enable 16 multi-processors
	54	# multi32 = enable 32 multi-processors
	55	# multi48 = enable 48 multi-processors
	56	#
	57	# SYSTEM SIZE CONFIGURATION (select exactly one)
	58	#
	59	# xlarge = extra large scale system configuration
	60	# large = large scale system configuration
	61	# medium = medium scale system configuration
	62	# small = small scale system configuration
	63	# xsmall = extra small scale system configuration
2d21ac55	64	# bsmall = special extra small scale system configuration
1c79356b A	65	#
	66	#######################################################################
	67	#
	68	# Standard Mach Research Configurations:
	69	# -------- ---- -------- ---------------
	70	#
	71	# These are the default configurations that can be used by most sites.
	72	# They are used internally by the Mach project.
	73	#
	74	# MACH = [mach multi16 medium debug]
	75	#
	76	#######################################################################
	77	#
	78	ident NeXT
	79
	80	# obsolete timezone spec
	81	options TIMEZONE=0, PST=0
	82
2d21ac55 A	83	options QUOTA # # <quota>
2d21ac55 A	84	options INET # # <inet>
0b4e3aa0	85	options ABSOLUTETIME_SCALAR_TYPE
1c79356b A	86	options NEW_VM_CODE # # <newvm>
	87	options OLD_VM_CODE # # <!newvm>
	88	options HW_AST # Hardware ast support # <hw_ast>
	89	options HW_FOOTPRINT # Cache footprint support # <hw_foot>
2d21ac55 A	90	options CONFIG_LCTX # Login Context
2d21ac55 A	91
1c79356b	92	options MACH # Standard Mach features # <mach>
2d21ac55	93	options MACH_ASSERT # Compile in assertions # <mach_assert>
1c79356b A	94	options MACH_COMPAT # Vendor syscall compatibility # <mach>
	95	options MACH_COUNTERS # counters # <count>
	96	options MACH_DEBUG # IPC debugging interface # <mdebug>
	97	options MACH_FASTLINK # Fast symbolic links
	98	options MACH_FIXPRI # Fixed priority threads # <fixpri>
	99	options MACH_HOST # Mach host (resource alloc.) # <host>
	100	options MACH_IPC_COMPAT # Enable old IPC interface # <ipc_compat>
	101	options MACH_IPC_DEBUG # Enable IPC debugging calls # <ipc_debug>
	102	options MACH_IPC_TEST # Testing code/printfs # <ipc_test>
	103	options MACH_LDEBUG # Sanity-check simple locking # <test>
	104	options MACH_NP # Mach IPC support # <np>
	105	options MACH_NBC # No buffer cache # <nbc>
1c79356b A	106	options MACH_NET # Fast network access # <mach_net>
	107	options MACH_XP # external pager support # <xp>
	108	options NORMA_IPC # NORMA IPC support # <norma_ipc>
	109	options NORMA_DEVICE # NORMA unified device names # <norma_device>
	110	options NORMA_VM # NORMA virtual memory support # <norma_vm>
	111	options NORMA_TASK # NORMA task support # <norma_task>
	112	options NORMA_ETHER # NORMA across ethernet # <norma_ether>
	113	options SIMPLE_CLOCK # don't assume fixed tick # <simple_clock>
1c79356b A	114	options XPR_DEBUG # kernel tracing # <xpr_debug>
	115	options KDEBUG # kernel tracing # <kdebug>
	116	options DDM_DEBUG # driverkit-style tracing # <ddm_debug>
	117	options MACH_OLD_VM_COPY # Old vm_copy technology # <!newvm>
	118	options NO_DIRECT_RPC # for untyped mig servers #
	119	options IPX # ipx stack # <ipx>
	120	options EON # # <eon>
	121	options ISO # ISO stack # <iso>
	122	options LLC # 802.2 support # <llc>
	123	options LOOP # loopback support # <loop>
	124	options MROUTING # multicast routing # <mrouting>
1c79356b	125	options ROUTING # routing # <routing>
2d21ac55	126	options NETMIBS # # <netmibs>
1c79356b	127	options VLAN # # <vlan>
91447636	128	options BOND # # <bond>
2d21ac55 A	129	options IPDIVERT # Divert sockets (for NAT) # <ipdivert>
	130	options IPFIREWALL # IP Firewalling (used by NAT) # <ipfirewall>
	131	options IPFIREWALL_FORWARD #Transparent proxy # <ipfirewall>
	132	options IPFIREWALL_DEFAULT_TO_ACCEPT # allow everything by default # <ipfirewall>
91447636	133	options DUMMYNET # dummynet support # <dummynet>
2d21ac55	134	options TRAFFIC_MGT # traffic management support # <traffic_mgt>
91447636	135	options IPFW2 # IP firewall (new version) # <ipfw2>
1c79356b	136	options MULTICAST # Internet Protocol Class-D $
9bccf70c A	137	options TCPDEBUG # TCP debug # <tcpdebug>
	138	options RANDOM_IP_ID # random (not sequential) ip ids # <randomipid>
	139	options TCP_DROP_SYNFIN # Drop TCP packets with SYN+FIN set # <tcpdrop_synfin>
	140	options ICMP_BANDLIM # ICMP bandwidth limiting sysctl
2d21ac55	141	options IFNET_INPUT_SANITY_CHK # allow dlil/ifnet input sanity check # <ifnet_input_chk>
55e303ae	142	options AUDIT # Security event auditing # <audit>
2d21ac55 A	143	options SYSV_SEM # SVID semaphores # <sysv_sem>
	144	options SYSV_MSG # SVID messages # <sysv_msg>
	145	options SYSV_SHM # SVID shared mem # <sysv_shm>
	146	options PANIC_INFO # want kernel panic info # <panic_info>
	147	options DEVELOPMENT # dev kernel # <development>
1c79356b	148
2d21ac55 A	149	# secure_kernel - secure kernel from user programs
2d21ac55 A	150	options SECURE_KERNEL # <secure_kernel>
1c79356b A	151
	152	#
	153	# 4.4 general kernel
	154	#
2d21ac55	155	options SOCKETS # socket support # <inet, inet6, netat>
91447636	156	options COMPAT_43_TTY # 4.3 BSD tty compat # <compat_43_tty>
1c79356b	157	options DIAGNOSTIC # diagnostics # <diagnostic>
2d21ac55	158	options CONFIG_DTRACE # dtrace support # <config_dtrace>
55e303ae	159	options GPROF # build profiling # <profile>
2d21ac55 A	160	options SENDFILE # sendfile # <sendfile>
	161	options NETWORKING # networking layer # <inet, inet6, netat>
	162	options CONFIG_FSE # file system events # <config_fse>
	163	options CONFIG_IMAGEBOOT # local image boot # <config_imageboot>
	164	options CONFIG_SOWUPCALL # SB_UPCALL on sowwakeup # <config_sowupcall>
	165	options CONFIG_FORCE_OUT_IFP # Force IP output to use an interface # <config_force_out_ifp>
	166	options CONFIG_MBUF_NOEXPAND # limit mbuf expansion # <config_mbuf_noexpand>
	167	options CONFIG_MBUF_JUMBO # jumbo cluster pool # <config_mbuf_jumbo>
593a1d5f A	168	options CONFIG_IP_EDGEHOLE # Drop tagged packets at EDGE interface # <config_ip_edgehole>
	169
	170	options CONFIG_WORKQUEUE # <config_workqueue>
1c79356b A	171
	172	#
	173	# 4.4 filesystems
	174	#
2d21ac55 A	175	options FFS # Fast Filesystem Support # <ffs>
2d21ac55 A	176	options HFS # HFS/HFS+ support # <hfs>
1c79356b	177	options FIFO # fifo support # <fifo>
1c79356b A	178	options UNION # union_fs support # <union>
	179	options FDESC # fdesc_fs support # <fdesc>
	180	options CD9660 # ISO 9660 CD-ROM support # <cd9660>
1c79356b	181	options DEVFS # devfs support # <devfs>
2d21ac55 A	182	options JOURNALING # journaling support # <journaling>
	183
	184	#
	185	# file system features
	186	#
	187	options QUOTA # file system quotas # <quota>
	188	options REV_ENDIAN_FS # Reverse Endian FS # <revfs>
	189	options NAMEDSTREAMS # named stream vnop support # <namedstreams>
	190	options CONFIG_VOLFS # volfs path support (legacy) # <config_volfs>
1c79356b A	191
	192	#
	193	# NFS support
	194	#
2d21ac55 A	195	options NFSCLIENT # Be an NFS client # <nfsclient>
2d21ac55 A	196	options NFSSERVER # Be an NFS server # <nfsserver>
1c79356b A	197
	198	#
	199	# AppleTalk Support
	200	#
2d21ac55	201	options NETAT # AppleTalk support # <netat>
0c530ab8	202	#options AURP_SUPPORT # AppleTalk Update Routing # <netat>
2d21ac55	203
1c79356b A	204	#
	205	# Machine Independent Apple Features
	206	#
	207	options KERNSERV # kernel_server intarface # <kernserv>
	208	options MALLOCDEBUG # kernel malloc debugging # <mallocdebug>
	209	options DRIVERKIT # driverkit support # <driverkit>
	210	options KERNOBJC # Objective-C support # <kernobjc>
	211	options OBJCTEST # Objc internal test # <objctest>
	212	options KERNEL_STACK # MI kernel stack support # <kernstack>
2d21ac55	213	profile # build a profiling kernel # <profile>
1c79356b	214
9bccf70c A	215	#
	216	# Point-to-Point Protocol support
	217	#
	218	pseudo-device ppp 2 # <ppp>
	219
1c79356b	220	#
9bccf70c	221	# IPv6 Support
1c79356b A	222	#
1c79356b A	223	options "INET6" # kernel IPv6 Support # <inet6>
1c79356b A	224	options IPSEC # IP security # <ipsec>
	225	options IPSEC_ESP # IP security # <ipsec>
	226	options "IPV6FIREWALL" # IPv6 Firewall Feature # <ipv6firewall>
91447636 A	227	options "IPV6FIREWALL_DEFAULT_TO_ACCEPT" #IPv6 Firewall Feature # <ipv6firewall>
91447636 A	228	#options "IPV6FIREWALL_VERBOSE" #IPv6 Firewall Feature # <ipv6firewall>
9bccf70c A	229
9bccf70c A	230	pseudo-device gif 1 # <gif>
1c79356b A	231	pseudo-device dummy 2 # <dummy>
1c79356b A	232	pseudo-device faith 1 # <faith>
9bccf70c A	233	pseudo-device stf 1 # <stf>
	234
	235	options crypto # <ipsec,crypto>
2d21ac55 A	236	options ALLCRYPTO # <xlarge,large,medium>
	237	options randomipid # <inet,randomipid>
	238
	239	options ZLIB # inflate/deflate support # <zlib>
1c79356b A	240
	241	makeoptions LIBDRIVER = "libDriver_kern.o" # <libdriver>
	242	makeoptions LIBOBJC = "libkobjc.o" # <kernobjc>
	243
	244	maxusers 64 # <xlarge>
	245	maxusers 50 # <large>
	246	maxusers 32 # <medium>
	247	maxusers 16 # <small>
2d21ac55	248	maxusers 8 # <xsmall>
1c79356b A	249	maxusers 2 # <bsmall>
	250
	251	#
	252	# Multi-processor selection
	253	#
	254	pseudo-device cpus 64 # <multi64>
	255	pseudo-device cpus 32 # <multi32>
	256	pseudo-device cpus 16 # <multi16>
	257	pseudo-device cpus 2 # <multi2>
	258	pseudo-device cpus 1 # <!multi64,multi32,multi16,multi2>
	259
2d21ac55 A	260	#
	261	# configurable kernel event related resources
	262	#
	263	options CONFIG_KN_HASHSIZE=64 # <medium,large,xlarge>
	264	options CONFIG_KN_HASHSIZE=48 # <small,xsmall>
	265	options CONFIG_KN_HASHSIZE=20 # <bsmall>
	266
	267	#
	268	# configurable vfs related resources
	269	# CONFIG_VNODES - used to pre allocate vnode related resources
	270	# CONFIG_VNODE_FREE_MIN - mininmum number of free vnodes
	271	# CONFIG_NC_HASH - name cache hash table allocation
	272	# CONFIG_VFS_NAMES - name strings
	273	#
	274	# 263168 magic number for medium CONFIG_VNODES is based on memory
	275	# Number vnodes is (memsize/64k) + 1024
	276	# This is the calculation that is used by launchd in tiger
	277	# we are clipping the max based on 16G
	278	# ie ((16102410241024)/(64 1024)) + 1024 = 263168;
	279
	280	options CONFIG_VNODES=263168 # <large,xlarge>
	281	options CONFIG_VNODES=263168 # <medium>
	282	options CONFIG_VNODES=10240 # <small>
	283	options CONFIG_VNODES=1024 # <xsmall>
593a1d5f	284	options CONFIG_VNODES=640 # <bsmall>
2d21ac55 A	285
	286	options CONFIG_VNODE_FREE_MIN=500 # <large,xlarge>
	287	options CONFIG_VNODE_FREE_MIN=300 # <medium>
	288	options CONFIG_VNODE_FREE_MIN=200 # <small>
	289	options CONFIG_VNODE_FREE_MIN=100 # <xsmall>
	290	options CONFIG_VNODE_FREE_MIN=75 # <bsmall>
	291
	292	options CONFIG_NC_HASH=5120 # <large,xlarge>
	293	options CONFIG_NC_HASH=4096 # <medium>
	294	options CONFIG_NC_HASH=2048 # <small,xsmall>
	295	options CONFIG_NC_HASH=1024 # <bsmall>
	296
	297	options CONFIG_VFS_NAMES=5120 # <large,xlarge>
	298	options CONFIG_VFS_NAMES=4096 # <medium>
	299	options CONFIG_VFS_NAMES=3072 # <small,xsmall>
	300	options CONFIG_VFS_NAMES=2048 # <bsmall>
	301
	302	#
	303	# configurable kauth credential related resources
	304	#
	305	options KAUTH_CRED_PRIMES_COUNT=7 # <medium,large,xlarge>
	306	options KAUTH_CRED_PRIMES_COUNT=3 # <bsmall,xsmall,small>
	307
	308	options KAUTH_CRED_PRIMES="{97, 241, 397, 743, 1499, 3989, 7499}" # <medium,large,xlarge>
	309	options KAUTH_CRED_PRIMES="{5, 17, 97}" # <bsmall,xsmall,small>
	310
	311	#
	312	# configurable options for minumum number of buffers for kernel memory
	313	#
	314	options CONFIG_MIN_NBUF=256 # <medium,large,xlarge>
	315	options CONFIG_MIN_NBUF=128 # <small>
	316	options CONFIG_MIN_NBUF=80 # <xsmall>
	317	options CONFIG_MIN_NBUF=64 # <bsmall>
	318
	319	options CONFIG_MIN_NIOBUF=128 # <medium,large,xlarge>
	320	options CONFIG_MIN_NIOBUF=64 # <xsmall,small>
	321	options CONFIG_MIN_NIOBUF=32 # <bsmall>
	322
	323	#
	324	# set maximum space used for packet buffers
	325	#
	326	options CONFIG_NMBCLUSTERS="((1024 * 1024) / MCLBYTES)" # <large,xlarge>
	327	options CONFIG_NMBCLUSTERS="((1024 * 512) / MCLBYTES)" # <medium>
	328	options CONFIG_NMBCLUSTERS="((1024 * 256) / MCLBYTES)" # <bsmall,xsmall,small>
	329
593a1d5f A	330	# set maximum space used for packet buffers
	331	#
	332	options CONFIG_USESOCKTHRESHOLD=1 # <large,xlarge,medium>
	333	options CONFIG_USESOCKTHRESHOLD=0 # <bsmall,xsmall,small>
	334
2d21ac55 A	335	#
	336	# Configure size of TCP hash table
	337	#
	338	options CONFIG_TCBHASHSIZE=4096 # <medium,large,xlarge>
	339	options CONFIG_TCBHASHSIZE=128 # <xsmall,small,bsmall>
	340
	341	#
	342	# configurable async IO options
	343	# CONFIG_AIO_MAX - system wide limit of async IO requests.
	344	# CONFIG_AIO_PROCESS_MAX - process limit of async IO requests.
	345	# CONFIG_AIO_THREAD_COUNT - number of async IO worker threads created.
	346	#
	347	options CONFIG_AIO_MAX=360 # <xlarge>
	348	options CONFIG_AIO_MAX=180 # <large>
	349	options CONFIG_AIO_MAX=90 # <medium>
	350	options CONFIG_AIO_MAX=45 # <small>
	351	options CONFIG_AIO_MAX=20 # <xsmall>
	352	options CONFIG_AIO_MAX=10 # <bsmall>
	353
	354	options CONFIG_AIO_PROCESS_MAX=64 # <xlarge>
	355	options CONFIG_AIO_PROCESS_MAX=32 # <large>
	356	options CONFIG_AIO_PROCESS_MAX=16 # <medium>
	357	options CONFIG_AIO_PROCESS_MAX=12 # <small>
	358	options CONFIG_AIO_PROCESS_MAX=8 # <xsmall>
	359	options CONFIG_AIO_PROCESS_MAX=4 # <bsmall>
	360
	361	options CONFIG_AIO_THREAD_COUNT=16 # <xlarge>
	362	options CONFIG_AIO_THREAD_COUNT=8 # <large>
	363	options CONFIG_AIO_THREAD_COUNT=4 # <medium>
	364	options CONFIG_AIO_THREAD_COUNT=3 # <small>
	365	options CONFIG_AIO_THREAD_COUNT=2 # <xsmall,bsmall>
	366
	367	#
	368	# configurable kernel related resources (CONFIG_THREAD_MAX needs to stay in
	369	# sync with osfmk/conf/MASTER until we fix the config system...) todo XXX
	370	#
	371	options CONFIG_THREAD_MAX=2560 # <medium,large,xlarge>
	372	options CONFIG_THREAD_MAX=1536 # <small,xsmall>
	373	options CONFIG_THREAD_MAX=1024 # <bsmall>
	374
	375	options CONFIG_MAXVIFS=32 # <medium,large,xlarge>
	376	options CONFIG_MAXVIFS=16 # <small,xsmall>
	377	options CONFIG_MAXVIFS=2 # <bsmall>
	378
	379	options CONFIG_MFCTBLSIZ=256 # <medium,large,xlarge>
	380	options CONFIG_MFCTBLSIZ=128 # <small,xsmall>
	381	options CONFIG_MFCTBLSIZ=16 # <bsmall>
	382
	383	#
	384	# configurable kernel - use these options to strip strings from panic
	385	# and printf calls.
	386	# no_panic_str - saves around 50K of kernel footprint.
	387	# no_printf_str - saves around 45K of kernel footprint.
	388	#
	389	options CONFIG_NO_PANIC_STRINGS # <no_panic_str>
	390	options CONFIG_NO_PRINTF_STRINGS # <no_printf_str>
	391	options CONFIG_NO_KPRINTF_STRINGS # <no_kprintf_str>
	392
	393	#
	394	# configurable kernel - general switch to say we are building for an
	395	# embedded device
	396	#
	397	options CONFIG_EMBEDDED # <config_embedded>
	398
593a1d5f A	399	#
	400	# code decryption... used on embedded for app protection
	401	# must be set in all the bsd/conf and osfmk/conf MASTER files
	402	#
	403	options CONFIG_CODE_DECRYPTION # <config_embedded>
	404
	405
1c79356b A	406	#
	407	# Ethernet (ARP)
	408	#
2d21ac55	409	pseudo-device ether # <networking,inet,inet6,netat>
1c79356b A	410	#
	411	# Network loopback device
	412	#
2d21ac55	413	pseudo-device loop # <networking,inet,inet6,netat>
1c79356b A	414	#
	415	# UCB pseudo terminal service
	416	#
2d21ac55 A	417	pseudo-device pty 512 init pty_init # <xlarge>
	418	pseudo-device pty 256 init pty_init # <large>
	419	pseudo-device pty 128 init pty_init # <medium>
	420	pseudo-device pty 48 init pty_init # <small>
	421	pseudo-device pty 16 init pty_init # <xsmall>
	422	pseudo-device pty 8 init pty_init # <bsmall>
	423	#
	424	# Cloning pseudo terminal service
	425	#
	426	pseudo-device ptmx 1 init ptmx_init
9bccf70c A	427
	428	#
	429	# vnode device
2d21ac55 A	430	#
	431	pseudo-device vndevice 16 init vndevice_init # <xlarge>
	432	pseudo-device vndevice 8 init vndevice_init # <large>
	433	pseudo-device vndevice 4 init vndevice_init # <medium>
	434	pseudo-device vndevice 3 init vndevice_init # <small>
	435	pseudo-device vndevice 2 init vndevice_init # <bsmall>
9bccf70c	436
55e303ae A	437	#
	438	# memory device
	439	pseudo-device mdevdevice 1 init mdevinit
	440
9bccf70c	441	#
1c79356b A	442	#
	443	# packet filter device
	444	#
2d21ac55	445	pseudo-device bpfilter 4 init bpf_init # <networking,inet,inet6,netat>
1c79356b	446
91447636 A	447	#
91447636 A	448	# fsevents device
2d21ac55	449	pseudo-device fsevents 1 init fsevents_init # <config_fse>
91447636	450
1c79356b A	451	#
	452	# shim to "linux" mach disk drivers (mach drivers must also be turned on)
	453	#
	454	# now using iokit disk shim, this is code is obsolete
	455	#pseudo-device diskshim
0b4e3aa0 A	456
0b4e3aa0 A	457	pseudo-device random 1 init random_init
2d21ac55 A	458	pseudo-device dtrace 1 init dtrace_init # <config_dtrace>
	459	pseudo-device helper 1 init helper_init # <config_dtrace>
	460	pseudo-device lockstat 1 init lockstat_init # <config_dtrace>
	461	pseudo-device sdt 1 init sdt_init # <config_dtrace>
	462	pseudo-device systrace 1 init systrace_init # <config_dtrace>
	463	pseudo-device fbt 1 init fbt_init # <config_dtrace>
	464	pseudo-device profile_prvd 1 init profile_init # <config_dtrace>
0b4e3aa0	465