2 # Mach Operating System
3 # Copyright (c) 1986 Carnegie-Mellon University
4 # All rights reserved. The CMU software License Agreement
5 # specifies the terms and conditions for use and redistribution.
7 #######################################################################
9 # Master machine independent configuration file.
11 # Specific configuration files are created based on this and
12 # the machine specific master file using the doconf script.
14 # Any changes to the master configuration files will affect all
15 # other configuration files based upon it.
17 #######################################################################
19 # To build a configuration, execute "doconf <configuration>."
20 # Configurations are specified in the "Configurations:" section
21 # of the MASTER and MASTER.* files as follows:
23 # <configuration> = [ <attribute0> <attribute1> ... <attributeN> ]
25 # Lines in the MASTER and MASTER.* files are selected based on
26 # the attribute selector list, found in a comment at the end of
27 # the line. This is a list of attributes separated by commas.
28 # The "!" operator selects the line if none of the attributes are
33 # <foo,bar> selects a line if "foo" or "bar" are specified.
34 # <!foo,bar> selects a line if neither "foo" nor "bar" is
37 # Lines with no attributes specified are selected for all
40 #######################################################################
42 # STANDARD CONFIGURATION OPTIONS (select any combination)
44 # debug = extra kernel level debugging support
47 # EXPERIMENTAL CONFIGURATION OPTIONS (select any combination, carefully)
49 # host = host resource control support
51 # MULTI-PROCESSOR CONFIGURATION (select at most one)
53 # multi16 = enable 16 multi-processors
54 # multi32 = enable 32 multi-processors
55 # multi48 = enable 48 multi-processors
57 # SYSTEM SIZE CONFIGURATION (select exactly one)
59 # xlarge = extra large scale system configuration
60 # large = large scale system configuration
61 # medium = medium scale system configuration
62 # small = small scale system configuration
63 # xsmall = extra small scale system configuration
64 # bsmall = special extra small scale system configuration
66 #######################################################################
68 # Standard Mach Research Configurations:
69 # -------- ---- -------- ---------------
71 # These are the default configurations that can be used by most sites.
72 # They are used internally by the Mach project.
74 # MACH = [mach multi16 medium debug]
76 #######################################################################
80 # obsolete timezone spec
81 options TIMEZONE=0, PST=0
83 options QUOTA # # <quota>
84 options INET # # <inet>
85 options ABSOLUTETIME_SCALAR_TYPE
86 options NEW_VM_CODE # # <newvm>
87 options OLD_VM_CODE # # <!newvm>
88 options HW_AST # Hardware ast support # <hw_ast>
89 options HW_FOOTPRINT # Cache footprint support # <hw_foot>
90 options CONFIG_LCTX # Login Context
92 options MACH # Standard Mach features # <mach>
93 options MACH_ASSERT # Compile in assertions # <mach_assert>
94 options MACH_COMPAT # Vendor syscall compatibility # <mach>
95 options MACH_COUNTERS # counters # <count>
96 options MACH_DEBUG # IPC debugging interface # <mdebug>
97 options MACH_FASTLINK # Fast symbolic links
98 options MACH_FIXPRI # Fixed priority threads # <fixpri>
99 options MACH_HOST # Mach host (resource alloc.) # <host>
100 options MACH_IPC_COMPAT # Enable old IPC interface # <ipc_compat>
101 options MACH_IPC_DEBUG # Enable IPC debugging calls # <ipc_debug>
102 options MACH_IPC_TEST # Testing code/printfs # <ipc_test>
103 options MACH_LDEBUG # Sanity-check simple locking # <test>
104 options CONFIG_ZLEAKS # Live zone leak debug sysctls # <zleaks>
105 options MACH_NP # Mach IPC support # <np>
106 options MACH_NBC # No buffer cache # <nbc>
107 options MACH_NET # Fast network access # <mach_net>
108 options MACH_XP # external pager support # <xp>
109 options NORMA_IPC # NORMA IPC support # <norma_ipc>
110 options NORMA_DEVICE # NORMA unified device names # <norma_device>
111 options NORMA_VM # NORMA virtual memory support # <norma_vm>
112 options NORMA_TASK # NORMA task support # <norma_task>
113 options NORMA_ETHER # NORMA across ethernet # <norma_ether>
114 options SIMPLE_CLOCK # don't assume fixed tick # <simple_clock>
115 options XPR_DEBUG # kernel tracing # <xpr_debug>
116 options KDEBUG # kernel tracing # <kdebug>
117 options IST_KDEBUG # limited kernel tracing # <ist_kdebug>
118 options NO_KDEBUG # no kernel tracing # <no_kdebug>
119 options DDM_DEBUG # driverkit-style tracing # <ddm_debug>
120 options MACH_OLD_VM_COPY # Old vm_copy technology # <!newvm>
121 options NO_DIRECT_RPC # for untyped mig servers #
122 options IPX # ipx stack # <ipx>
123 options EON # # <eon>
124 options ISO # ISO stack # <iso>
125 options LLC # 802.2 support # <llc>
126 options LOOP # loopback support # <loop>
127 options MROUTING # multicast routing # <mrouting>
128 options ROUTING # routing # <routing>
129 options VLAN # # <vlan>
130 options BOND # # <bond>
131 options PF # Packet Filter # <pf>
132 options PF_ALTQ # PF ALTQ (Alternate Queueing) # <pf_altq>
133 options PFLOG # PF log interface # <pflog>
134 options PKTSCHED_CBQ # CBQ packet scheduler # <pktsched_cbq>
135 options PKTSCHED_HFSC # H-FSC packet scheduler # <pktsched_hfsc>
136 options PKTSCHED_PRIQ # PRIQ packet scheduler # <pktsched_priq>
137 options PKTSCHED_FAIRQ # FAIRQ packet scheduler # <pktsched_fairq>
138 options CLASSQ_BLUE # BLUE queueing algorithm # <classq_blue>
139 options CLASSQ_RED # RED queueing algorithm # <classq_red>
140 options CLASSQ_RIO # RIO queueing algorithm # <classq_rio>
141 options IPDIVERT # Divert sockets (for NAT) # <ipdivert>
142 options IPFIREWALL # IP Firewalling (used by NAT) # <ipfirewall>
143 options IPFIREWALL_FORWARD #Transparent proxy # <ipfirewall>
144 options IPFIREWALL_DEFAULT_TO_ACCEPT # allow everything by default # <ipfirewall>
145 options DUMMYNET # dummynet support # <dummynet>
146 options TRAFFIC_MGT # traffic management support # <traffic_mgt>
147 options IPFW2 # IP firewall (new version) # <ipfw2>
148 options MULTICAST # Internet Protocol Class-D $
149 options TCPDEBUG # TCP debug # <tcpdebug>
150 options RANDOM_IP_ID # random (not sequential) ip ids # <randomipid>
151 options TCP_DROP_SYNFIN # Drop TCP packets with SYN+FIN set # <tcpdrop_synfin>
152 options ICMP_BANDLIM # ICMP bandwidth limiting sysctl
153 options IFNET_INPUT_SANITY_CHK # allow dlil/ifnet input sanity check # <ifnet_input_chk>
154 options SYSV_SEM # SVID semaphores # <sysv_sem>
155 options SYSV_MSG # SVID messages # <sysv_msg>
156 options SYSV_SHM # SVID shared mem # <sysv_shm>
157 options PSYNCH # pthread synch # <psynch>
158 options DEVELOPMENT # dev kernel # <development>
160 # secure_kernel - secure kernel from user programs
161 options SECURE_KERNEL # <secure_kernel>
163 options OLD_SEMWAIT_SIGNAL # old semwait_signal handler
168 options SOCKETS # socket support # <inet, inet6, netat>
169 options DIAGNOSTIC # diagnostics # <diagnostic>
170 options CONFIG_DTRACE # dtrace support # <config_dtrace>
171 options GPROF # build profiling # <profile>
172 options SENDFILE # sendfile # <sendfile>
173 options NETWORKING # networking layer # <inet, inet6, netat>
174 options CONFIG_FSE # file system events # <config_fse>
175 options CONFIG_IMAGEBOOT # local image boot # <config_imageboot>
176 options CONFIG_SOWUPCALL # SB_UPCALL on sowwakeup # <config_sowupcall>
177 options CONFIG_MBUF_JUMBO # jumbo cluster pool # <config_mbuf_jumbo>
178 options CONFIG_FORCE_OUT_IFP # Enable IP_FORCE_OUT_IFP # <config_force_out_ifp>
179 options CONFIG_IFEF_NOWINDOWSCALE # Scale TCP window per driver # <config_ifef_nowindowscale>
181 options CONFIG_WORKQUEUE # <config_workqueue>
186 options FFS # Fast Filesystem Support # <ffs>
187 options HFS # HFS/HFS+ support # <hfs>
188 options FIFO # fifo support # <fifo>
189 options FDESC # fdesc_fs support # <fdesc>
190 options DEVFS # devfs support # <devfs>
191 options JOURNALING # journaling support # <journaling>
192 options HFS_COMPRESSION # hfs compression # <hfs_compression>
193 options CONFIG_HFS_STD # hfs standard support # <config_hfs_std>
194 options CONFIG_HFS_TRIM # hfs trims unused blocks # <config_hfs_trim>
195 options CONFIG_HFS_MOUNT_UNMAP #hfs trims blocks at mount # <config_hfs_mount_unmap>
199 # file system features
201 options QUOTA # file system quotas # <quota>
202 options REV_ENDIAN_FS # Reverse Endian FS # <revfs>
203 options NAMEDSTREAMS # named stream vnop support # <namedstreams>
204 options CONFIG_VOLFS # volfs path support (legacy) # <config_volfs>
205 options CONFIG_IMGSRC_ACCESS # source of imageboot dmg # <config_imgsrc_access>
206 options CONFIG_TRIGGERS # trigger vnodes # <config_triggers>
207 options CONFIG_VFS_FUNNEL # thread unsafe vfs's # <config_vfs_funnel>
208 options CONFIG_EXT_RESOLVER # e.g. memberd # <config_ext_resolver>
209 options CONFIG_SEARCHFS # searchfs syscall support # <config_searchfs>
214 options NFSCLIENT # Be an NFS client # <nfsclient>
215 options NFSSERVER # Be an NFS server # <nfsserver>
220 options NETAT # AppleTalk support # <netat>
221 #options AURP_SUPPORT # AppleTalk Update Routing # <netat>
224 # Machine Independent Apple Features
226 options KERNSERV # kernel_server intarface # <kernserv>
227 options MALLOCDEBUG # kernel malloc debugging # <mallocdebug>
228 options DRIVERKIT # driverkit support # <driverkit>
229 options KERNOBJC # Objective-C support # <kernobjc>
230 options OBJCTEST # Objc internal test # <objctest>
231 options KERNEL_STACK # MI kernel stack support # <kernstack>
232 profile # build a profiling kernel # <profile>
235 # Point-to-Point Protocol support
237 pseudo-device ppp 2 # <ppp>
242 options "INET6" # kernel IPv6 Support # <inet6>
243 options IPSEC # IP security # <ipsec>
244 options IPSEC_ESP # IP security # <ipsec>
245 options "IPV6FIREWALL" # IPv6 Firewall Feature # <ipv6firewall>
246 options "IPV6FIREWALL_DEFAULT_TO_ACCEPT" #IPv6 Firewall Feature # <ipv6firewall>
247 #options "IPV6FIREWALL_VERBOSE" #IPv6 Firewall Feature # <ipv6firewall>
249 pseudo-device gif 1 # <gif>
250 pseudo-device dummy 2 # <dummy>
251 pseudo-device stf 1 # <stf>
253 options crypto # <ipsec,crypto>
254 options ALLCRYPTO # <xlarge,large,medium>
255 options randomipid # <inet,randomipid>
257 options ZLIB # inflate/deflate support # <zlib>
259 options IF_BRIDGE # <if_bridge>
261 makeoptions LIBDRIVER = "libDriver_kern.o" # <libdriver>
262 makeoptions LIBOBJC = "libkobjc.o" # <kernobjc>
264 maxusers 64 # <xlarge>
265 maxusers 50 # <large>
266 maxusers 32 # <medium>
267 maxusers 16 # <small>
268 maxusers 8 # <xsmall>
269 maxusers 2 # <bsmall>
272 # Multi-processor selection
274 pseudo-device cpus 64 # <multi64>
275 pseudo-device cpus 32 # <multi32>
276 pseudo-device cpus 16 # <multi16>
277 pseudo-device cpus 2 # <multi2>
278 pseudo-device cpus 1 # <!multi64,multi32,multi16,multi2>
281 # configurable kernel event related resources
283 options CONFIG_KN_HASHSIZE=64 # <medium,large,xlarge>
284 options CONFIG_KN_HASHSIZE=48 # <small,xsmall>
285 options CONFIG_KN_HASHSIZE=20 # <bsmall>
288 # configurable vfs related resources
289 # CONFIG_VNODES - used to pre allocate vnode related resources
290 # CONFIG_VNODE_FREE_MIN - mininmum number of free vnodes
291 # CONFIG_NC_HASH - name cache hash table allocation
292 # CONFIG_VFS_NAMES - name strings
294 # 263168 magic number for medium CONFIG_VNODES is based on memory
295 # Number vnodes is (memsize/64k) + 1024
296 # This is the calculation that is used by launchd in tiger
297 # we are clipping the max based on 16G
298 # ie ((16*1024*1024*1024)/(64 *1024)) + 1024 = 263168;
300 options CONFIG_VNODES=263168 # <large,xlarge>
301 options CONFIG_VNODES=263168 # <medium>
302 options CONFIG_VNODES=10240 # <small>
303 options CONFIG_VNODES=750 # <bsmall>
305 options CONFIG_VNODE_FREE_MIN=500 # <large,xlarge>
306 options CONFIG_VNODE_FREE_MIN=300 # <medium>
307 options CONFIG_VNODE_FREE_MIN=200 # <small>
308 options CONFIG_VNODE_FREE_MIN=100 # <xsmall>
309 options CONFIG_VNODE_FREE_MIN=75 # <bsmall>
311 options CONFIG_NC_HASH=5120 # <large,xlarge>
312 options CONFIG_NC_HASH=4096 # <medium>
313 options CONFIG_NC_HASH=2048 # <small,xsmall>
314 options CONFIG_NC_HASH=1024 # <bsmall>
316 options CONFIG_VFS_NAMES=5120 # <large,xlarge>
317 options CONFIG_VFS_NAMES=4096 # <medium>
318 options CONFIG_VFS_NAMES=3072 # <small,xsmall>
319 options CONFIG_VFS_NAMES=2048 # <bsmall>
321 options CONFIG_MAX_CLUSTERS=8 # <xlarge,large,medium>
322 options CONFIG_MAX_CLUSTERS=4 # <small,xsmall,bsmall>
325 # configurable kauth credential related resources
327 options KAUTH_CRED_PRIMES_COUNT=7 # <medium,large,xlarge>
328 options KAUTH_CRED_PRIMES_COUNT=3 # <bsmall,xsmall,small>
330 options KAUTH_CRED_PRIMES="{97, 241, 397, 743, 1499, 3989, 7499}" # <medium,large,xlarge>
331 options KAUTH_CRED_PRIMES="{5, 17, 97}" # <bsmall,xsmall,small>
334 # configurable options for minumum number of buffers for kernel memory
336 options CONFIG_MIN_NBUF=256 # <medium,large,xlarge>
337 options CONFIG_MIN_NBUF=128 # <small>
338 options CONFIG_MIN_NBUF=80 # <xsmall>
339 options CONFIG_MIN_NBUF=64 # <bsmall>
341 options CONFIG_MIN_NIOBUF=128 # <medium,large,xlarge>
342 options CONFIG_MIN_NIOBUF=64 # <xsmall,small>
343 options CONFIG_MIN_NIOBUF=32 # <bsmall>
346 # set maximum space used for packet buffers
348 options CONFIG_NMBCLUSTERS="((1024 * 1024) / MCLBYTES)" # <large,xlarge>
349 options CONFIG_NMBCLUSTERS="((1024 * 512) / MCLBYTES)" # <medium>
350 options CONFIG_NMBCLUSTERS="((1024 * 256) / MCLBYTES)" # <bsmall,xsmall,small>
353 # Configure size of TCP hash table
355 options CONFIG_TCBHASHSIZE=4096 # <medium,large,xlarge>
356 options CONFIG_TCBHASHSIZE=128 # <xsmall,small,bsmall>
359 # Configure bandwidth limiting sysctl
361 options CONFIG_ICMP_BANDLIM=250 # <medium,large,xlarge>
362 options CONFIG_ICMP_BANDLIM=50 # <xsmall,small,bsmall>
365 # configurable async IO options
366 # CONFIG_AIO_MAX - system wide limit of async IO requests.
367 # CONFIG_AIO_PROCESS_MAX - process limit of async IO requests.
368 # CONFIG_AIO_THREAD_COUNT - number of async IO worker threads created.
370 options CONFIG_AIO_MAX=360 # <xlarge>
371 options CONFIG_AIO_MAX=180 # <large>
372 options CONFIG_AIO_MAX=90 # <medium>
373 options CONFIG_AIO_MAX=45 # <small>
374 options CONFIG_AIO_MAX=20 # <xsmall>
375 options CONFIG_AIO_MAX=10 # <bsmall>
377 options CONFIG_AIO_PROCESS_MAX=64 # <xlarge>
378 options CONFIG_AIO_PROCESS_MAX=32 # <large>
379 options CONFIG_AIO_PROCESS_MAX=16 # <medium>
380 options CONFIG_AIO_PROCESS_MAX=12 # <small>
381 options CONFIG_AIO_PROCESS_MAX=8 # <xsmall>
382 options CONFIG_AIO_PROCESS_MAX=4 # <bsmall>
384 options CONFIG_AIO_THREAD_COUNT=16 # <xlarge>
385 options CONFIG_AIO_THREAD_COUNT=8 # <large>
386 options CONFIG_AIO_THREAD_COUNT=4 # <medium>
387 options CONFIG_AIO_THREAD_COUNT=3 # <small>
388 options CONFIG_AIO_THREAD_COUNT=2 # <xsmall,bsmall>
391 # configurable kernel related resources (CONFIG_THREAD_MAX needs to stay in
392 # sync with osfmk/conf/MASTER until we fix the config system...) todo XXX
394 options CONFIG_THREAD_MAX=2560 # <medium,large,xlarge>
395 options CONFIG_THREAD_MAX=1536 # <small,xsmall>
396 options CONFIG_THREAD_MAX=1024 # <bsmall>
398 options CONFIG_MAXVIFS=32 # <medium,large,xlarge>
399 options CONFIG_MAXVIFS=16 # <small,xsmall>
400 options CONFIG_MAXVIFS=2 # <bsmall>
402 options CONFIG_MFCTBLSIZ=256 # <medium,large,xlarge>
403 options CONFIG_MFCTBLSIZ=128 # <small,xsmall>
404 options CONFIG_MFCTBLSIZ=16 # <bsmall>
407 # configurable kernel message buffer size
409 options CONFIG_MSG_BSIZE=4096 # <bsmall,small,xsmall>
410 options CONFIG_MSG_BSIZE=16384 # <medium,large,xlarge>
413 # configurable kernel - use these options to strip strings from panic
415 # no_panic_str - saves around 50K of kernel footprint.
416 # no_printf_str - saves around 45K of kernel footprint.
418 options CONFIG_NO_PANIC_STRINGS # <no_panic_str>
419 options CONFIG_NO_PRINTF_STRINGS # <no_printf_str>
420 options CONFIG_NO_KPRINTF_STRINGS # <no_kprintf_str>
423 # use finer-grained lock groups for the proc subsystem
425 options CONFIG_FINE_LOCK_GROUPS # <medium,large,xlarge>
428 # configurable kernel - general switch to say we are building for an
431 options CONFIG_EMBEDDED # <config_embedded>
433 # only execute signed code. Hang this off config_embedded since there's
434 # nothing more appropriate right now
436 options CONFIG_ENFORCE_SIGNED_CODE # <config_embedded>
438 # support dynamic signing of code
440 options CONFIG_DYNAMIC_CODE_SIGNING # <dynamic_codesigning>
443 # code decryption... used on embedded for app protection
444 # must be set in all the bsd/conf and osfmk/conf MASTER files
446 options CONFIG_CODE_DECRYPTION # <config_embedded>
449 # User Content Protection, used on embedded
451 options CONFIG_PROTECT # <config_protect>
454 # enable per-process memory priority tracking
456 options CONFIG_MEMORYSTATUS # <memorystatus>
459 # enable jetsam - used on embedded
461 options CONFIG_JETSAM # <jetsam>
464 # enable freezing of suspended processes - used on embedded
466 options CONFIG_FREEZE # <freeze>
468 options CHECK_CS_VALIDATION_BITMAP # <config_cs_validation_bitmap>
471 # memory pressure event support
472 # must be set in both bsd/conf and osfmk/conf MASTER files
474 options VM_PRESSURE_EVENTS # <vm_pressure_events>
479 pseudo-device ether # <networking,inet,inet6,netat>
481 # Network loopback device
483 pseudo-device loop # <networking,inet,inet6,netat>
485 # UCB pseudo terminal service
487 pseudo-device pty 512 init pty_init # <xlarge>
488 pseudo-device pty 256 init pty_init # <large>
489 pseudo-device pty 128 init pty_init # <medium>
490 pseudo-device pty 48 init pty_init # <small>
491 pseudo-device pty 16 init pty_init # <xsmall>
492 pseudo-device pty 8 init pty_init # <bsmall>
494 # Cloning pseudo terminal service
496 pseudo-device ptmx 1 init ptmx_init
501 pseudo-device vndevice 16 init vndevice_init # <xlarge>
502 pseudo-device vndevice 8 init vndevice_init # <large>
503 pseudo-device vndevice 4 init vndevice_init # <medium>
504 pseudo-device vndevice 3 init vndevice_init # <small>
505 pseudo-device vndevice 2 init vndevice_init # <xsmall>
506 pseudo-device vndevice 2 init vndevice_init # <bsmall>
510 pseudo-device mdevdevice 1 init mdevinit
514 # packet filter device
516 pseudo-device bpfilter 4 init bpf_init # <networking,inet,inet6,netat>
520 pseudo-device fsevents 1 init fsevents_init # <config_fse>
523 # shim to "linux" mach disk drivers (mach drivers must also be turned on)
525 # now using iokit disk shim, this is code is obsolete
526 #pseudo-device diskshim
528 pseudo-device random 1 init random_init
529 pseudo-device dtrace 1 init dtrace_init # <config_dtrace>
530 pseudo-device helper 1 init helper_init # <config_dtrace>
531 pseudo-device lockstat 1 init lockstat_init # <config_dtrace>
532 pseudo-device sdt 1 init sdt_init # <config_dtrace>
533 pseudo-device systrace 1 init systrace_init # <config_dtrace>
534 pseudo-device fbt 1 init fbt_init # <config_dtrace>
535 pseudo-device profile_prvd 1 init profile_init # <config_dtrace>