Index: head/share/man/man5/src.conf.5
===================================================================
--- head/share/man/man5/src.conf.5	(revision 361282)
+++ head/share/man/man5/src.conf.5	(revision 361283)
@@ -1,1784 +1,1782 @@
 .\" DO NOT EDIT-- this file is @generated by tools/build/options/makeman.
 .\" $FreeBSD$
-.Dd May 8, 2020
+.Dd May 20, 2020
 .Dt SRC.CONF 5
 .Os
 .Sh NAME
 .Nm src.conf
 .Nd "source build options"
 .Sh DESCRIPTION
 The
 .Nm
 file contains settings that will apply to every build involving the
 .Fx
 source tree; see
 .Xr build 7 .
 .Pp
 The
 .Nm
 file uses the standard makefile syntax.
 However,
 .Nm
 should not specify any dependencies to
 .Xr make 1 .
 Instead,
 .Nm
 is to set
 .Xr make 1
 variables that control the aspects of how the system builds.
 .Pp
 The default location of
 .Nm
 is
 .Pa /etc/src.conf ,
 though an alternative location can be specified in the
 .Xr make 1
 variable
 .Va SRCCONF .
 Overriding the location of
 .Nm
 may be necessary if the system-wide settings are not suitable
 for a particular build.
 For instance, setting
 .Va SRCCONF
 to
 .Pa /dev/null
 effectively resets all build controls to their defaults.
 .Pp
 The only purpose of
 .Nm
 is to control the compilation of the
 .Fx
 source code, which is usually located in
 .Pa /usr/src .
 As a rule, the system administrator creates
 .Nm
 when the values of certain control variables need to be changed
 from their defaults.
 .Pp
 In addition, control variables can be specified
 for a particular build via the
 .Fl D
 option of
 .Xr make 1
 or in its environment; see
 .Xr environ 7 .
 .Pp
 The environment of
 .Xr make 1
 for the build can be controlled via the
 .Va SRC_ENV_CONF
 variable, which defaults to
 .Pa /etc/src-env.conf .
 Some examples that may only be set in this file are
 .Va WITH_DIRDEPS_BUILD ,
 and
 .Va WITH_META_MODE ,
 and
 .Va MAKEOBJDIRPREFIX
 as they are environment-only variables.
 .Pp
 The values of variables are ignored regardless of their setting;
 even if they would be set to
 .Dq Li FALSE
 or
 .Dq Li NO .
 The presence of an option causes
 it to be honored by
 .Xr make 1 .
 .Pp
 This list provides a name and short description for variables
 that can be used for source builds.
 .Bl -tag -width indent
 .It Va WITHOUT_ACCT
 Set to not build process accounting tools such as
 .Xr accton 8
 and
 .Xr sa 8 .
 .It Va WITHOUT_ACPI
 Set to not build
 .Xr acpiconf 8 ,
 .Xr acpidump 8
 and related programs.
 .It Va WITHOUT_APM
 Set to not build
 .Xr apm 8 ,
 .Xr apmd 8
 and related programs.
 .It Va WITHOUT_ASSERT_DEBUG
 Set to compile programs and libraries without the
 .Xr assert 3
 checks.
 .It Va WITHOUT_AT
 Set to not build
 .Xr at 1
 and related utilities.
 .It Va WITHOUT_ATM
 Set to not build
 programs and libraries related to ATM networking.
 .It Va WITHOUT_AUDIT
 Set to not build audit support into system programs.
 .It Va WITHOUT_AUTHPF
 Set to not build
 .Xr authpf 8 .
 .It Va WITHOUT_AUTOFS
 Set to not build
 .Xr autofs 5
 related programs, libraries, and kernel modules.
 .It Va WITHOUT_AUTO_OBJ
 Disable automatic creation of objdirs.
 This is enabled by default if the wanted OBJDIR is writable by the current user.
 .Pp
 This must be set in the environment, make command line, or
 .Pa /etc/src-env.conf ,
 not
 .Pa /etc/src.conf .
 .It Va WITH_BEARSSL
 Build the BearSSL library.
 .Pp
 BearSSL is a tiny SSL library suitable for embedded environments.
 For details see
 .Lk http://www.BearSSL.org/
 .Pp
 This library is currently only used to perform
 signature verification and related operations
 for Verified Exec and
 .Xr loader 8 .
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
 .It Va WITH_LOADER_EFI_SECUREBOOT
 (unless
 .Va WITHOUT_LOADER_EFI_SECUREBOOT
 is set explicitly)
 .It Va WITH_LOADER_VERIEXEC
 (unless
 .Va WITHOUT_LOADER_VERIEXEC
 is set explicitly)
 .It Va WITH_LOADER_VERIEXEC_VECTX
 (unless
 .Va WITHOUT_LOADER_VERIEXEC_VECTX
 is set explicitly)
 .It Va WITH_VERIEXEC
 (unless
 .Va WITHOUT_VERIEXEC
 is set explicitly)
 .El
 .It Va WITHOUT_BHYVE
 Set to not build or install
 .Xr bhyve 8 ,
 associated utilities, and examples.
 .Pp
 This option only affects amd64/amd64.
 .It Va WITH_BHYVE_SNAPSHOT
 Set to include support for save and restore (snapshots) in
 .Xr bhyve 8
 and
 .Xr bhyvectl 8 .
 .Pp
 This option only affects amd64/amd64.
 .It Va WITH_BIND_NOW
 Build all binaries with the
 .Dv DF_BIND_NOW
 flag set to indicate that the run-time loader should perform all relocation
 processing at process startup rather than on demand.
 .It Va WITHOUT_BINUTILS
 Do not build or install GNU
 .Xr as 1
 as part
 of the normal system build.
 .Pp
 This is a default setting on
 arm/armv6, arm/armv7, arm64/aarch64, mips/mips, mips/mips64, powerpc/powerpc, powerpc/powerpc64, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITH_BINUTILS
 Build and install GNU
 .Xr as 1
 as part of the normal system build.
 .Pp
 This is a default setting on
 amd64/amd64 and i386/i386.
 .It Va WITHOUT_BINUTILS_BOOTSTRAP
 Do not build GNU binutils
 as part of the bootstrap process.
 .Pp
 This is a default setting on
 arm/armv6, arm/armv7, arm64/aarch64, i386/i386, mips/mips, mips/mips64, powerpc/powerpc, powerpc/powerpc64, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITH_BINUTILS_BOOTSTRAP
 Build GNU binutils
 as part of the bootstrap process.
 .Pp
 This is a default setting on
 amd64/amd64.
 .It Va WITHOUT_BLACKLIST
 Set this if you do not want to build
 .Xr blacklistd 8
 and
 .Xr blacklistctl 8 .
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
 .It Va WITHOUT_BLACKLIST_SUPPORT
 (unless
 .Va WITH_BLACKLIST_SUPPORT
 is set explicitly)
 .El
 .It Va WITHOUT_BLACKLIST_SUPPORT
 Set to build some programs without
 .Xr libblacklist 3
 support, like
 .Xr fingerd 8 ,
 .Xr ftpd 8 ,
 and
 .Xr sshd 8 .
 .It Va WITHOUT_BLUETOOTH
 Set to not build Bluetooth related kernel modules, programs and libraries.
 .It Va WITHOUT_BOOT
 Set to not build the boot blocks and loader.
 .It Va WITHOUT_BOOTPARAMD
 Set to not build or install
 .Xr bootparamd 8 .
 .It Va WITHOUT_BOOTPD
 Set to not build or install
 .Xr bootpd 8 .
 .It Va WITHOUT_BSDINSTALL
 Set to not build
 .Xr bsdinstall 8 ,
 .Xr sade 8 ,
 and related programs.
 .It Va WITHOUT_BSD_CPIO
 Set to not build the BSD licensed version of cpio based on
 .Xr libarchive 3 .
 .It Va WITH_BSD_GREP
 Install BSD-licensed grep as '[ef]grep' instead of GNU grep.
 .It Va WITHOUT_BSNMP
 Set to not build or install
 .Xr bsnmpd 1
 and related libraries and data files.
 .It Va WITHOUT_BZIP2
 Set to not build contributed bzip2 software as a part of the base system.
 .Bf -symbolic
 The option has no effect yet.
 .Ef
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
 .It Va WITHOUT_BZIP2_SUPPORT
 (unless
 .Va WITH_BZIP2_SUPPORT
 is set explicitly)
 .El
 .It Va WITHOUT_BZIP2_SUPPORT
 Set to build some programs without optional bzip2 support.
 .It Va WITHOUT_CALENDAR
 Set to not build
 .Xr calendar 1 .
 .It Va WITHOUT_CAPSICUM
 Set to not build Capsicum support into system programs.
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_CASPER
 .El
 .It Va WITHOUT_CAROOT
 Set to not add the trusted certificates from the Mozilla NSS bundle to
 base.
 .It Va WITHOUT_CASPER
 Set to not build Casper program and related libraries.
 .It Va WITH_CCACHE_BUILD
 Set to use
 .Xr ccache 1
 for the build.
 No configuration is required except to install the
 .Sy devel/ccache
 package.
 When using with
 .Xr distcc 1 ,
 set
 .Sy CCACHE_PREFIX=/usr/local/bin/distcc .
 The default cache directory of
 .Pa $HOME/.ccache
 will be used, which can be overridden by setting
 .Sy CCACHE_DIR .
 The
 .Sy CCACHE_COMPILERCHECK
 option defaults to
 .Sy content
 when using the in-tree bootstrap compiler,
 and
 .Sy mtime
 when using an external compiler.
 The
 .Sy CCACHE_CPP2
 option is used for Clang but not GCC.
 .Pp
 Sharing a cache between multiple work directories requires using a layout
 similar to
 .Pa /some/prefix/src
 .Pa /some/prefix/obj
 and an environment such as:
 .Bd -literal -offset indent
 CCACHE_BASEDIR='${SRCTOP:H}' MAKEOBJDIRPREFIX='${SRCTOP:H}/obj'
 .Ed
 .Pp
 See
 .Xr ccache 1
 for more configuration options.
 .It Va WITHOUT_CCD
 Set to not build
 .Xr geom_ccd 4
 and related utilities.
 .It Va WITHOUT_CDDL
 Set to not build code licensed under Sun's CDDL.
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_CTF
 .It
 .Va WITHOUT_LOADER_ZFS
 .It
 .Va WITHOUT_ZFS
 .El
 .It Va WITHOUT_CLANG
 Set to not build the Clang C/C++ compiler during the regular phase of the build.
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_CLANG_EXTRAS
 .It
 .Va WITHOUT_CLANG_FULL
 .It
 .Va WITHOUT_LLVM_COV
 .El
 .It Va WITHOUT_CLANG_BOOTSTRAP
 Set to not build the Clang C/C++ compiler during the bootstrap phase of
 the build.
 To be able to build the system, either gcc or clang bootstrap must be
 enabled unless an alternate compiler is provided via XCC.
 .It Va WITH_CLANG_EXTRAS
 Set to build additional clang and llvm tools, such as bugpoint and
 clang-format.
 .It Va WITHOUT_CLANG_FULL
 Set to avoid building the ARCMigrate, Rewriter and StaticAnalyzer components of
 the Clang C/C++ compiler.
 .It Va WITHOUT_CLANG_IS_CC
 Do not install links to the Clang C/C++ compiler as
 .Pa /usr/bin/cc ,
 .Pa /usr/bin/c++
 and
 .Pa /usr/bin/cpp .
 .It Va WITHOUT_CPP
 Set to not build
 .Xr cpp 1 .
 .It Va WITHOUT_CROSS_COMPILER
 Set to not build any cross compiler in the cross-tools stage of buildworld.
 When compiling a different version of
 .Fx
 than what is installed on the system, provide an alternate
 compiler with XCC to ensure success.
 When compiling with an identical version of
 .Fx
 to the host, this option may be safely used.
 This option may also be safe when the host version of
 .Fx
 is close to the sources being built, but all bets are off if there have
 been any changes to the toolchain between the versions.
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_BINUTILS_BOOTSTRAP
 .It
 .Va WITHOUT_CLANG_BOOTSTRAP
 .It
 .Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
 .It
 .Va WITHOUT_LLD_BOOTSTRAP
 .El
 .It Va WITHOUT_CRYPT
 Set to not build any crypto code.
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_DMAGENT
 .It
 .Va WITHOUT_KERBEROS
 .It
 .Va WITHOUT_KERBEROS_SUPPORT
 .It
 .Va WITHOUT_LDNS
 .It
 .Va WITHOUT_LDNS_UTILS
 .It
 .Va WITHOUT_OPENSSH
 .It
 .Va WITHOUT_OPENSSL
 .It
 .Va WITHOUT_PKGBOOTSTRAP
 .It
 .Va WITHOUT_SVN
 .It
 .Va WITHOUT_SVNLITE
 .It
 .Va WITHOUT_UNBOUND
 .It
 .Va WITHOUT_WIRELESS
 .El
 .Pp
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
 .It Va WITHOUT_GSSAPI
 (unless
 .Va WITH_GSSAPI
 is set explicitly)
 .El
 .It Va WITH_CTF
 Set to compile with CTF (Compact C Type Format) data.
 CTF data encapsulates a reduced form of debugging information
 similar to DWARF and the venerable stabs and is required for DTrace.
 .It Va WITHOUT_CUSE
 Set to not build CUSE-related programs and libraries.
 .It Va WITHOUT_CXGBETOOL
 Set to not build
 .Xr cxgbetool 8
 .Pp
 This is a default setting on
 arm/armv6, arm/armv7, mips/mips, mips/mips64, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITH_CXGBETOOL
 Set to build
 .Xr cxgbetool 8
 .Pp
 This is a default setting on
 amd64/amd64, arm64/aarch64, i386/i386 and powerpc/powerpc64.
 .It Va WITHOUT_CXX
 Set to not build
 .Xr c++ 1
 and related libraries.
 It will also prevent building of
 .Xr gperf 1
 and
 .Xr devd 8 .
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_CLANG
 .It
 .Va WITHOUT_CLANG_EXTRAS
 .It
 .Va WITHOUT_CLANG_FULL
 .It
 .Va WITHOUT_DTRACE_TESTS
 .It
 .Va WITHOUT_GOOGLETEST
 .It
 .Va WITHOUT_LLVM_COV
 .It
 .Va WITHOUT_TESTS
 .El
 .It Va WITHOUT_DEBUG_FILES
 Set to avoid building or installing standalone debug files for each
 executable binary and shared library.
 .It Va WITHOUT_DIALOG
 Set to not build
 .Xr dialog 1 ,
 .Xr dialog 3 ,
 .Xr dpv 1 ,
 and
 .Xr dpv 3 .
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_BSDINSTALL
 .El
 .It Va WITHOUT_DICT
 Set to not build the Webster dictionary files.
 .It Va WITH_DIRDEPS_BUILD
 This is an experimental build system.
 For details see
 http://www.crufty.net/sjg/docs/freebsd-meta-mode.htm.
 Build commands can be seen from the top-level with:
 .Dl make show-valid-targets
 The build is driven by dirdeps.mk using
 .Va DIRDEPS
 stored in
 Makefile.depend files found in each directory.
 .Pp
 The build can be started from anywhere, and behaves the same.
 The initial instance of
 .Xr make 1
 recursively reads
 .Va DIRDEPS
 from
 .Pa Makefile.depend ,
 computing a graph of tree dependencies from the current origin.
 Setting
 .Va NO_DIRDEPS
 skips checking dirdep dependencies and will only build in the current
 and child directories.
 .Va NO_DIRDEPS_BELOW
 skips building any dirdeps and only build the current directory.
 .Pp
 This also utilizes the
 .Va WITH_META_MODE
 logic for incremental builds.
 .Pp
 The build hides commands executed unless
 .Va NO_SILENT
 is defined.
 .Pp
 Note that there is currently no mass install feature for this.
 .Pp
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITH_INSTALL_AS_USER
 .El
 .Pp
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
 .It Va WITH_META_MODE
 (unless
 .Va WITHOUT_META_MODE
 is set explicitly)
 .It Va WITH_STAGING
 (unless
 .Va WITHOUT_STAGING
 is set explicitly)
 .It Va WITH_STAGING_MAN
 (unless
 .Va WITHOUT_STAGING_MAN
 is set explicitly)
 .It Va WITH_STAGING_PROG
 (unless
 .Va WITHOUT_STAGING_PROG
 is set explicitly)
 .It Va WITH_SYSROOT
 (unless
 .Va WITHOUT_SYSROOT
 is set explicitly)
 .El
 .Pp
 This must be set in the environment, make command line, or
 .Pa /etc/src-env.conf ,
 not
 .Pa /etc/src.conf .
 .It Va WITH_DIRDEPS_CACHE
 Cache result of dirdeps.mk which can save significant time
 for subsequent builds.
 Depends on
 .Va WITH_DIRDEPS_BUILD .
 .Pp
 This must be set in the environment, make command line, or
 .Pa /etc/src-env.conf ,
 not
 .Pa /etc/src.conf .
 .It Va WITHOUT_DMAGENT
 Set to not build dma Mail Transport Agent.
 .It Va WITHOUT_DOCCOMPRESS
 Set to not install compressed system documentation.
 Only the uncompressed version will be installed.
 .It Va WITH_DTRACE_TESTS
 Set to build and install the DTrace test suite in
 .Pa /usr/tests/cddl/usr.sbin/dtrace .
 This test suite is considered experimental on architectures other than
 amd64/amd64 and running it may cause system instability.
 .It Va WITHOUT_DYNAMICROOT
 Set this if you do not want to link
 .Pa /bin
 and
 .Pa /sbin
 dynamically.
 .It Va WITHOUT_EE
 Set to not build and install
 .Xr edit 1 ,
 .Xr ee 1 ,
 and related programs.
 .It Va WITHOUT_EFI
 Set not to build
 .Xr efivar 3
 and
 .Xr efivar 8 .
 .Pp
 This is a default setting on
 mips/mips, mips/mips64, powerpc/powerpc, powerpc/powerpc64, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITH_EFI
 Set to build
 .Xr efivar 3
 and
 .Xr efivar 8 .
 .Pp
 This is a default setting on
 amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64 and i386/i386.
 .It Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
 Set to not build ELF Tool Chain tools
 (addr2line, nm, size, strings and strip)
 as part of the bootstrap process.
 .Bf -symbolic
 An alternate bootstrap tool chain must be provided.
 .Ef
 .It Va WITHOUT_EXAMPLES
 Set to avoid installing examples to
 .Pa /usr/share/examples/ .
 .It Va WITH_EXPERIMENTAL
 Set to include experimental features in the build.
 .It Va WITH_EXTRA_TCP_STACKS
 Set to build extra TCP stack modules.
 .It Va WITHOUT_FDT
 Set to not build Flattened Device Tree support as part of the base system.
 This includes the device tree compiler (dtc) and libfdt support library.
 .It Va WITHOUT_FILE
 Set to not build
 .Xr file 1
 and related programs.
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_SVNLITE
 .El
 .It Va WITHOUT_FINGER
 Set to not build or install
 .Xr finger 1
 and
 .Xr fingerd 8 .
 .It Va WITHOUT_FLOPPY
 Set to not build or install programs
 for operating floppy disk driver.
 .It Va WITHOUT_FMTREE
 Set to not build and install
 .Pa /usr/sbin/fmtree .
 .It Va WITHOUT_FORMAT_EXTENSIONS
 Set to not enable
 .Fl fformat-extensions
 when compiling the kernel.
 Also disables all format checking.
 .It Va WITHOUT_FORTH
 Set to build bootloaders without Forth support.
 .It Va WITHOUT_FP_LIBC
 Set to build
 .Nm libc
 without floating-point support.
 .It Va WITHOUT_FREEBSD_UPDATE
 Set to not build
 .Xr freebsd-update 8 .
 .It Va WITHOUT_FTP
 Set to not build or install
 .Xr ftp 1
 and
 .Xr ftpd 8 .
 .It Va WITHOUT_GAMES
 Set to not build games.
 .It Va WITHOUT_GDB
 Set to not build
 .Xr gdb 1 .
 .Pp
 This is a default setting on
 arm64/aarch64, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITH_GDB
 Set to build
 .Xr gdb 1 .
 .Pp
 This is a default setting on
 amd64/amd64, arm/armv6, arm/armv7, i386/i386, mips/mips, mips/mips64, powerpc/powerpc and powerpc/powerpc64.
 .It Va WITHOUT_GNU_DIFF
 Set to not build GNU
-.Xr diff 1
-and
 .Xr diff3 1 .
 .It Va WITHOUT_GNU_GREP
 Set to not build GNU
 .Xr grep 1 .
 .It Va WITH_GNU_GREP_COMPAT
 Set this option to include GNU extensions in
 .Xr bsdgrep 1
 by linking against libgnuregex.
 .It Va WITHOUT_GOOGLETEST
 Set to neither build nor install
 .Lb libgmock ,
 .Lb libgtest ,
 and dependent tests.
 .Pp
 This is a default setting on
 mips/mips and mips/mips64.
 .It Va WITH_GOOGLETEST
 Set to build and install
 .Lb libgmock ,
 .Lb libgtest ,
 and dependent tests.
 .Pp
 This is a default setting on
 amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITHOUT_GPIO
 Set to not build
 .Xr gpioctl 8
 as part of the base system.
 .It Va WITHOUT_GSSAPI
 Set to not build libgssapi.
 .It Va WITHOUT_HAST
 Set to not build
 .Xr hastd 8
 and related utilities.
 .It Va WITH_HESIOD
 Set to build Hesiod support.
 .It Va WITHOUT_HTML
 Set to not build HTML docs.
 .It Va WITHOUT_HYPERV
 Set to not build or install HyperV utilities.
 .Pp
 This is a default setting on
 arm/armv6, arm/armv7, arm64/aarch64, mips/mips, mips/mips64, powerpc/powerpc, powerpc/powerpc64, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITH_HYPERV
 Set to build or install HyperV utilities.
 .Pp
 This is a default setting on
 amd64/amd64 and i386/i386.
 .It Va WITHOUT_ICONV
 Set to not build iconv as part of libc.
 .It Va WITHOUT_INCLUDES
 Set to not install header files.
 This option used to be spelled
 .Va NO_INCS .
 .Bf -symbolic
 The option does not work for build targets.
 .Ef
 .It Va WITHOUT_INET
 Set to not build programs and libraries related to IPv4 networking.
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_INET_SUPPORT
 .El
 .It Va WITHOUT_INET6
 Set to not build
 programs and libraries related to IPv6 networking.
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_INET6_SUPPORT
 .El
 .It Va WITHOUT_INET6_SUPPORT
 Set to build libraries, programs, and kernel modules without IPv6 support.
 .It Va WITHOUT_INETD
 Set to not build
 .Xr inetd 8 .
 .It Va WITHOUT_INET_SUPPORT
 Set to build libraries, programs, and kernel modules without IPv4 support.
 .It Va WITHOUT_INSTALLLIB
 Set this to not install optional libraries.
 For example, when creating a
 .Xr nanobsd 8
 image.
 .Bf -symbolic
 The option does not work for build targets.
 .Ef
 .It Va WITH_INSTALL_AS_USER
 Set to make install targets succeed for non-root users by installing
 files with owner and group attributes set to that of the user running
 the
 .Xr make 1
 command.
 The user still must set the
 .Va DESTDIR
 variable to point to a directory where the user has write permissions.
 .It Va WITHOUT_IPFILTER
 Set to not build IP Filter package.
 .It Va WITHOUT_IPFW
 Set to not build IPFW tools.
 .It Va WITHOUT_IPSEC_SUPPORT
 Set to not build the kernel with
 .Xr ipsec 4
 support.
 This option is needed for
 .Xr ipsec 4
 and
 .Xr tcpmd5 4 .
 .It Va WITHOUT_ISCSI
 Set to not build
 .Xr iscsid 8
 and related utilities.
 .It Va WITHOUT_JAIL
 Set to not build tools for the support of jails; e.g.,
 .Xr jail 8 .
 .It Va WITHOUT_KDUMP
 Set to not build
 .Xr kdump 1
 and
 .Xr truss 1 .
 .It Va WITHOUT_KERBEROS
 Set this to not build Kerberos 5 (KTH Heimdal).
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
 .It Va WITHOUT_GSSAPI
 (unless
 .Va WITH_GSSAPI
 is set explicitly)
 .It Va WITHOUT_KERBEROS_SUPPORT
 (unless
 .Va WITH_KERBEROS_SUPPORT
 is set explicitly)
 .El
 .It Va WITHOUT_KERBEROS_SUPPORT
 Set to build some programs without Kerberos support, like
 .Xr ssh 1 ,
 .Xr telnet 1 ,
 .Xr sshd 8 ,
 and
 .Xr telnetd 8 .
 .It Va WITH_KERNEL_RETPOLINE
 Set to enable the "retpoline" mitigation for CVE-2017-5715 in the kernel
 build.
 .It Va WITHOUT_KERNEL_SYMBOLS
 Set to not install kernel symbol files.
 .Bf -symbolic
 This option is recommended for those people who have small root partitions.
 .Ef
 .It Va WITHOUT_KVM
 Set to not build the
 .Nm libkvm
 library as a part of the base system.
 .Bf -symbolic
 The option has no effect yet.
 .Ef
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
 .It Va WITHOUT_KVM_SUPPORT
 (unless
 .Va WITH_KVM_SUPPORT
 is set explicitly)
 .El
 .It Va WITHOUT_KVM_SUPPORT
 Set to build some programs without optional
 .Nm libkvm
 support.
 .It Va WITHOUT_LDNS
 Setting this variable will prevent the LDNS library from being built.
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_LDNS_UTILS
 .It
 .Va WITHOUT_UNBOUND
 .El
 .It Va WITHOUT_LDNS_UTILS
 Setting this variable will prevent building the LDNS utilities
 .Xr drill 1
 and
 .Xr host 1 .
 .It Va WITHOUT_LEGACY_CONSOLE
 Set to not build programs that support a legacy PC console; e.g.,
 .Xr kbdcontrol 1
 and
 .Xr vidcontrol 1 .
 .It Va WITHOUT_LIB32
 On 64-bit platforms, set to not build 32-bit library set and a
 .Nm ld-elf32.so.1
 runtime linker.
 .Pp
 This is a default setting on
 arm/armv6, arm/armv7, arm64/aarch64, i386/i386, mips/mips, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITHOUT_LIBCPLUSPLUS
 Set to avoid building libcxxrt and libc++.
 .It Va WITHOUT_LIBPTHREAD
 Set to not build the
 .Nm libpthread
 providing library,
 .Nm libthr .
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_LIBTHR
 .El
 .It Va WITH_LIBSOFT
 On armv6 only, set to enable soft float ABI compatibility libraries.
 This option is for transitioning to the new hard float ABI.
 .It Va WITHOUT_LIBTHR
 Set to not build the
 .Nm libthr
 (1:1 threading)
 library.
 .It Va WITHOUT_LLD
 Set to not build LLVM's lld linker.
 .It Va WITHOUT_LLDB
 Set to not build the LLDB debugger.
 .Pp
 This is a default setting on
 arm/armv6, arm/armv7, mips/mips, mips/mips64, powerpc/powerpc, powerpc/powerpc64, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITH_LLDB
 Set to build the LLDB debugger.
 .Pp
 This is a default setting on
 amd64/amd64, arm64/aarch64 and i386/i386.
 .It Va WITHOUT_LLD_BOOTSTRAP
 Set to not build the LLD linker during the bootstrap phase of
 the build.
 To be able to build the system, either Binutils or LLD bootstrap must be
 enabled unless an alternate linker is provided via XLD.
 .It Va WITHOUT_LLD_IS_LD
 Set to use GNU binutils ld as the system linker, instead of LLVM's LLD.
 .It Va WITHOUT_LLVM_ASSERTIONS
 Set to disable debugging assertions in LLVM.
 .It Va WITHOUT_LLVM_COV
 Set to not build the
 .Xr llvm-cov 1
 tool.
 .It Va WITHOUT_LLVM_TARGET_AARCH64
 Set to not build LLVM target support for AArch64.
 The
 .Va LLVM_TARGET_ALL
 option should be used rather than this in most cases.
 .It Va WITHOUT_LLVM_TARGET_ALL
 Set to only build the required LLVM target support.
 This option is preferred to specific target support options.
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
 .It Va WITHOUT_LLVM_TARGET_AARCH64
 (unless
 .Va WITH_LLVM_TARGET_AARCH64
 is set explicitly)
 .It Va WITHOUT_LLVM_TARGET_ARM
 (unless
 .Va WITH_LLVM_TARGET_ARM
 is set explicitly)
 .It Va WITHOUT_LLVM_TARGET_MIPS
 (unless
 .Va WITH_LLVM_TARGET_MIPS
 is set explicitly)
 .It Va WITHOUT_LLVM_TARGET_POWERPC
 (unless
 .Va WITH_LLVM_TARGET_POWERPC
 is set explicitly)
 .It Va WITHOUT_LLVM_TARGET_RISCV
 (unless
 .Va WITH_LLVM_TARGET_RISCV
 is set explicitly)
 .El
 .It Va WITHOUT_LLVM_TARGET_ARM
 Set to not build LLVM target support for ARM.
 The
 .Va LLVM_TARGET_ALL
 option should be used rather than this in most cases.
 .It Va WITH_LLVM_TARGET_BPF
 Set to build LLVM target support for BPF.
 The
 .Va LLVM_TARGET_ALL
 option should be used rather than this in most cases.
 .It Va WITHOUT_LLVM_TARGET_MIPS
 Set to not build LLVM target support for MIPS.
 The
 .Va LLVM_TARGET_ALL
 option should be used rather than this in most cases.
 .It Va WITHOUT_LLVM_TARGET_POWERPC
 Set to not build LLVM target support for PowerPC.
 The
 .Va LLVM_TARGET_ALL
 option should be used rather than this in most cases.
 .It Va WITHOUT_LLVM_TARGET_RISCV
 Set to not build LLVM target support for RISC-V.
 The
 .Va LLVM_TARGET_ALL
 option should be used rather than this in most cases.
 .It Va WITHOUT_LLVM_TARGET_X86
 Set to not build LLVM target support for X86.
 The
 .Va LLVM_TARGET_ALL
 option should be used rather than this in most cases.
 .It Va WITH_LOADER_EFI_SECUREBOOT
 Enable building
 .Xr loader 8
 with support for verification based on certificates obtained from UEFI.
 .Pp
 .It Va WITH_LOADER_FIREWIRE
 Enable firewire support in /boot/loader on x86. This option is a nop
 on all other platforms.
 .It Va WITH_LOADER_FORCE_LE
 Set to force the powerpc boot loader to launch the kernel in little
 endian mode.
 .It Va WITHOUT_LOADER_GELI
 Disable inclusion of GELI crypto support in the boot chain binaries.
 .Pp
 This is a default setting on
 powerpc/powerpc and powerpc/powerpc64.
 .It Va WITH_LOADER_GELI
 Set to build GELI bootloader support.
 .Pp
 This is a default setting on
 amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, mips/mips, mips/mips64, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITHOUT_LOADER_LUA
 Set to not build LUA bindings for the boot loader.
 .Pp
 This is a default setting on
 powerpc/powerpc and powerpc/powerpc64.
 .It Va WITH_LOADER_LUA
 Set to build LUA bindings for the boot loader.
 .Pp
 This is a default setting on
 amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, mips/mips, mips/mips64, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITHOUT_LOADER_OFW
 Disable building of openfirmware bootloader components.
 .Pp
 This is a default setting on
 amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, mips/mips, mips/mips64, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITH_LOADER_OFW
 Set to build openfirmware bootloader components.
 .Pp
 This is a default setting on
 powerpc/powerpc and powerpc/powerpc64.
 .It Va WITHOUT_LOADER_UBOOT
 Disable building of ubldr.
 .Pp
 This is a default setting on
 amd64/amd64, arm64/aarch64, i386/i386, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITH_LOADER_UBOOT
 Set to build ubldr.
 .Pp
 This is a default setting on
 arm/armv6, arm/armv7, mips/mips, mips/mips64, powerpc/powerpc and powerpc/powerpc64.
 .It Va WITH_LOADER_VERBOSE
 Set to build with extra verbose debugging in the loader.
 May explode already nearly too large loader over the limit.
 Use with care.
 
 .It Va WITH_LOADER_VERIEXEC
 Enable building
 .Xr loader 8
 with support for verification similar to Verified Exec.
 .Pp
 Depends on
 .Va WITH_BEARSSL .
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
 .It Va WITH_LOADER_EFI_SECUREBOOT
 (unless
 .Va WITHOUT_LOADER_EFI_SECUREBOOT
 is set explicitly)
 .It Va WITH_LOADER_VERIEXEC_VECTX
 (unless
 .Va WITHOUT_LOADER_VERIEXEC_VECTX
 is set explicitly)
 .El
 .It Va WITH_LOADER_VERIEXEC_PASS_MANIFEST
 Enable building
 .Xr loader 8
 with support to pass a verified manifest to the kernel.
 The kernel has to be built with a module to parse the manifest.
 .Pp
 Depends on
 .Va WITH_LOADER_VERIEXEC .
 .It Va WITHOUT_LOADER_ZFS
 Set to not build ZFS file system boot loader support.
 .It Va WITHOUT_LOCALES
 Set to not build localization files; see
 .Xr locale 1 .
 .It Va WITHOUT_LOCATE
 Set to not build
 .Xr locate 1
 and related programs.
 .It Va WITHOUT_LPR
 Set to not build
 .Xr lpr 1
 and related programs.
 .It Va WITHOUT_LS_COLORS
 Set to build
 .Xr ls 1
 without support for colors to distinguish file types.
 .It Va WITHOUT_LZMA_SUPPORT
 Set to build some programs without optional lzma compression support.
 .It Va WITHOUT_MAIL
 Set to not build any mail support (MUA or MTA).
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_DMAGENT
 .It
 .Va WITHOUT_MAILWRAPPER
 .It
 .Va WITHOUT_SENDMAIL
 .El
 .It Va WITHOUT_MAILWRAPPER
 Set to not build the
 .Xr mailwrapper 8
 MTA selector.
 .It Va WITHOUT_MAKE
 Set to not install
 .Xr make 1
 and related support files.
 .It Va WITHOUT_MAKE_CHECK_USE_SANDBOX
 Set to not execute
 .Dq Li "make check"
 in limited sandbox mode.
 This option should be paired with
 .Va WITH_INSTALL_AS_USER
 if executed as an unprivileged user.
 See
 .Xr tests 7
 for more details.
 .It Va WITHOUT_MAN
 Set to not build manual pages.
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
 .It Va WITHOUT_MAN_UTILS
 (unless
 .Va WITH_MAN_UTILS
 is set explicitly)
 .El
 .It Va WITHOUT_MANCOMPRESS
 Set to not to install compressed man pages.
 Only the uncompressed versions will be installed.
 .It Va WITHOUT_MAN_UTILS
 Set to not build utilities for manual pages,
 .Xr apropos 1 ,
 .Xr makewhatis 1 ,
 .Xr man 1 ,
 .Xr whatis 1 ,
 .Xr manctl 8 ,
 and related support files.
 .It Va WITH_META_MODE
 Create
 .Xr make 1
 meta files when building, which can provide a reliable incremental build when
 using
 .Xr filemon 4 .
 The meta file is created in OBJDIR as
 .Pa target.meta .
 These meta files track the command that was executed, its output, and the
 current directory.
 The
 .Xr filemon 4
 module is required unless
 .Va NO_FILEMON
 is defined.
 When the module is loaded, any files used by the commands executed are
 tracked as dependencies for the target in its meta file.
 The target is considered out-of-date and rebuilt if any of these
 conditions are true compared to the last build:
 .Bl -bullet -compact
 .It
 The command to execute changes.
 .It
 The current working directory changes.
 .It
 The target's meta file is missing.
 .It
 The target's meta file is missing filemon data when filemon is loaded
 and a previous run did not have it loaded.
 .It
 [requires
 .Xr filemon 4 ]
 Files read, executed or linked to are newer than the target.
 .It
 [requires
 .Xr filemon 4 ]
 Files read, written, executed or linked are missing.
 .El
 The meta files can also be useful for debugging.
 .Pp
 The build hides commands that are executed unless
 .Va NO_SILENT
 is defined.
 Errors cause
 .Xr make 1
 to show some of its environment for further debugging.
 .Pp
 The build operates as it normally would otherwise.
 This option originally invoked a different build system but that was renamed
 to
 .Va WITH_DIRDEPS_BUILD .
 .Pp
 This must be set in the environment, make command line, or
 .Pa /etc/src-env.conf ,
 not
 .Pa /etc/src.conf .
 .It Va WITHOUT_MLX5TOOL
 Set to not build
 .Xr mlx5tool 8
 .Pp
 This is a default setting on
 arm/armv6, arm/armv7, mips/mips, mips/mips64, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITH_MLX5TOOL
 Set to build
 .Xr mlx5tool 8
 .Pp
 This is a default setting on
 amd64/amd64, arm64/aarch64, i386/i386 and powerpc/powerpc64.
 .It Va WITHOUT_NDIS
 Set to not build programs and libraries
 related to NDIS emulation support.
 .It Va WITHOUT_NETCAT
 Set to not build
 .Xr nc 1
 utility.
 .It Va WITHOUT_NETGRAPH
 Set to not build applications to support
 .Xr netgraph 4 .
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_ATM
 .It
 .Va WITHOUT_BLUETOOTH
 .El
 .Pp
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
 .It Va WITHOUT_NETGRAPH_SUPPORT
 (unless
 .Va WITH_NETGRAPH_SUPPORT
 is set explicitly)
 .El
 .It Va WITHOUT_NETGRAPH_SUPPORT
 Set to build libraries, programs, and kernel modules without netgraph support.
 .It Va WITHOUT_NIS
 Set to not build
 .Xr NIS 8
 support and related programs.
 If set, you might need to adopt your
 .Xr nsswitch.conf 5
 and remove
 .Sq nis
 entries.
 .It Va WITHOUT_NLS
 Set to not build NLS catalogs.
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_NLS_CATALOGS
 .El
 .It Va WITHOUT_NLS_CATALOGS
 Set to not build NLS catalog support for
 .Xr csh 1 .
 .It Va WITHOUT_NS_CACHING
 Set to disable name caching in the
 .Pa nsswitch
 subsystem.
 The generic caching daemon,
 .Xr nscd 8 ,
 will not be built either if this option is set.
 .It Va WITHOUT_NTP
 Set to not build
 .Xr ntpd 8
 and related programs.
 .It Va WITHOUT_NVME
 Set to not build nvme related tools and kernel modules.
 .Pp
 This is a default setting on
 arm/armv6, arm/armv7, mips/mips, mips/mips64, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITH_NVME
 Set to build nvme related tools and kernel modules.
 
 .Pp
 This is a default setting on
 amd64/amd64, arm64/aarch64, i386/i386 and powerpc/powerpc64.
 .It Va WITH_OFED
 Set to build the
 .Dq "OpenFabrics Enterprise Distribution"
 Infiniband software stack.
 .It Va WITH_OFED_EXTRA
 Set to build the non-essential components of the
 .Dq "OpenFabrics Enterprise Distribution"
 Infiniband software stack, mostly examples.
 .It Va WITH_OPENLDAP
 Enable building openldap support for kerberos.
 .It Va WITHOUT_OPENMP
 Set to not build LLVM's OpenMP runtime.
 .Pp
 This is a default setting on
 arm/armv6, arm/armv7, arm64/aarch64, mips/mips, mips/mips64, powerpc/powerpc, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITH_OPENMP
 Set to build LLVM's OpenMP runtime.
 .Pp
 This is a default setting on
 amd64/amd64, i386/i386 and powerpc/powerpc64.
 .It Va WITHOUT_OPENSSH
 Set to not build OpenSSH.
 .It Va WITHOUT_OPENSSL
 Set to not build OpenSSL.
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_DMAGENT
 .It
 .Va WITHOUT_KERBEROS
 .It
 .Va WITHOUT_KERBEROS_SUPPORT
 .It
 .Va WITHOUT_LDNS
 .It
 .Va WITHOUT_LDNS_UTILS
 .It
 .Va WITHOUT_OPENSSH
 .It
 .Va WITHOUT_PKGBOOTSTRAP
 .It
 .Va WITHOUT_SVN
 .It
 .Va WITHOUT_SVNLITE
 .It
 .Va WITHOUT_UNBOUND
 .It
 .Va WITHOUT_WIRELESS
 .El
 .Pp
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
 .It Va WITHOUT_GSSAPI
 (unless
 .Va WITH_GSSAPI
 is set explicitly)
 .El
 .It Va WITHOUT_PAM
 Set to not build PAM library and modules.
 .Bf -symbolic
 This option is deprecated and does nothing.
 .Ef
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
 .It Va WITHOUT_PAM_SUPPORT
 (unless
 .Va WITH_PAM_SUPPORT
 is set explicitly)
 .El
 .It Va WITHOUT_PAM_SUPPORT
 Set to build some programs without PAM support, particularly
 .Xr ftpd 8
 and
 .Xr ppp 8 .
 .It Va WITHOUT_PF
 Set to not build PF firewall package.
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_AUTHPF
 .El
 .It Va WITH_PIE
 Build dynamically linked binaries as
 Position-Independent Executable (PIE).
 .It Va WITHOUT_PKGBOOTSTRAP
 Set to not build
 .Xr pkg 7
 bootstrap tool.
 .It Va WITHOUT_PMC
 Set to not build
 .Xr pmccontrol 8
 and related programs.
 .It Va WITHOUT_PORTSNAP
 Set to not build or install
 .Xr portsnap 8
 and related files.
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_FREEBSD_UPDATE
 .El
 .It Va WITHOUT_PPP
 Set to not build
 .Xr ppp 8
 and related programs.
 .It Va WITHOUT_PROFILE
 Set to not build profiled libraries for use with
 .Xr gprof 8 .
 .Pp
 This is a default setting on
 mips/mips64.
 .It Va WITH_PROFILE
 Set to build profiled libraries for use with
 .Xr gprof 8 .
 .Pp
 This is a default setting on
 amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, mips/mips, powerpc/powerpc, powerpc/powerpc64, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITHOUT_QUOTAS
 Set to not build
 .Xr quota 1
 and related programs.
 .It Va WITHOUT_RADIUS_SUPPORT
 Set to not build radius support into various applications, like
 .Xr pam_radius 8
 and
 .Xr ppp 8 .
 .It Va WITH_RATELIMIT
 Set to build the system with rate limit support.
 .Pp
 This makes
 .Dv SO_MAX_PACING_RATE
 effective in
 .Xr getsockopt 2 ,
 and
 .Ar txrlimit
 support in
 .Xr ifconfig 8 ,
 by proxy.
 .It Va WITHOUT_RBOOTD
 Set to not build or install
 .Xr rbootd 8 .
 .It Va WITH_REPRODUCIBLE_BUILD
 Set to exclude build metadata (such as the build time, user, or host)
 from the kernel, boot loaders, and uname output, so that builds produce
 bit-for-bit identical output.
 .It Va WITHOUT_RESCUE
 Set to not build
 .Xr rescue 8 .
 .It Va WITH_RETPOLINE
 Set to build the base system with the retpoline speculative execution
 vulnerability mitigation for CVE-2017-5715.
 .It Va WITHOUT_ROUTED
 Set to not build
 .Xr routed 8
 utility.
 .It Va WITH_RPCBIND_WARMSTART_SUPPORT
 Set to build
 .Xr rpcbind 8
 with warmstart support.
 .It Va WITHOUT_SENDMAIL
 Set to not build
 .Xr sendmail 8
 and related programs.
 .It Va WITHOUT_SERVICESDB
 Set to not install
 .Pa /var/db/services.db .
 .It Va WITHOUT_SETUID_LOGIN
 Set this to disable the installation of
 .Xr login 1
 as a set-user-ID root program.
 .It Va WITHOUT_SHAREDOCS
 Set to not build the
 .Bx 4.4
 legacy docs.
 .It Va WITHOUT_SHARED_TOOLCHAIN
 Set to build the toolchain binaries as statically linked executables.
 The set includes
 .Xr cc 1 ,
 .Xr make 1
 and necessary utilities like assembler, linker and library archive manager.
 .It Va WITH_SORT_THREADS
 Set to enable threads in
 .Xr sort 1 .
 .It Va WITHOUT_SOURCELESS
 Set to not build kernel modules that include sourceless code (either microcode or native code for host CPU).
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_SOURCELESS_HOST
 .It
 .Va WITHOUT_SOURCELESS_UCODE
 .El
 .It Va WITHOUT_SOURCELESS_HOST
 Set to not build kernel modules that include sourceless native code for host CPU.
 .It Va WITHOUT_SOURCELESS_UCODE
 Set to not build kernel modules that include sourceless microcode.
 .It Va WITHOUT_SSP
 Set to not build world with propolice stack smashing protection.
 .Pp
 This is a default setting on
 mips/mips and mips/mips64.
 .It Va WITH_SSP
 Set to build world with propolice stack smashing protection.
 .Pp
 This is a default setting on
 amd64/amd64, arm/armv6, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc, powerpc/powerpc64, riscv/riscv64 and riscv/riscv64sf.
 .It Va WITH_STAGING
 Enable staging of files to a stage tree.
 This can be best thought of as auto-install to
 .Va DESTDIR
 with some extra meta data to ensure dependencies can be tracked.
 Depends on
 .Va WITH_DIRDEPS_BUILD .
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
 .It Va WITH_STAGING_MAN
 (unless
 .Va WITHOUT_STAGING_MAN
 is set explicitly)
 .It Va WITH_STAGING_PROG
 (unless
 .Va WITHOUT_STAGING_PROG
 is set explicitly)
 .El
 .Pp
 This must be set in the environment, make command line, or
 .Pa /etc/src-env.conf ,
 not
 .Pa /etc/src.conf .
 .It Va WITH_STAGING_MAN
 Enable staging of man pages to stage tree.
 .It Va WITH_STAGING_PROG
 Enable staging of PROGs to stage tree.
 .It Va WITH_STALE_STAGED
 Check staged files are not stale.
 .It Va WITHOUT_STATS
 Set to neither build nor install
 .Lb libstats
 and dependent binaries.
 .It Va WITH_SVN
 Set to install
 .Xr svnlite 1
 as
 .Xr svn 1 .
 .It Va WITHOUT_SVNLITE
 Set to not build
 .Xr svnlite 1
 and related programs.
 .It Va WITHOUT_SYSCONS
 Set to not build
 .Xr syscons 4
 support files such as keyboard maps, fonts, and screen output maps.
 .It Va WITH_SYSROOT
 Enable use of sysroot during build.
 Depends on
 .Va WITH_DIRDEPS_BUILD .
 .Pp
 This must be set in the environment, make command line, or
 .Pa /etc/src-env.conf ,
 not
 .Pa /etc/src.conf .
 .It Va WITHOUT_SYSTEM_COMPILER
 Set to not opportunistically skip building a cross-compiler during the
 bootstrap phase of the build.
 Normally, if the currently installed compiler matches the planned bootstrap
 compiler type and revision, then it will not be built.
 This does not prevent a compiler from being built for installation though,
 only for building one for the build itself.
 The
 .Va WITHOUT_CLANG
 option controls that.
 .It Va WITHOUT_SYSTEM_LINKER
 Set to not opportunistically skip building a cross-linker during the
 bootstrap phase of the build.
 Normally, if the currently installed linker matches the planned bootstrap
 linker type and revision, then it will not be built.
 This does not prevent a linker from being built for installation though,
 only for building one for the build itself.
 The
 .Va WITHOUT_LLD
 and
 .Va WITHOUT_BINUTILS
 options control those.
 .Pp
 This option is only relevant when
 .Va WITH_LLD_BOOTSTRAP
 is set.
 .It Va WITHOUT_TALK
 Set to not build or install
 .Xr talk 1
 and
 .Xr talkd 8 .
 .It Va WITHOUT_TCP_WRAPPERS
 Set to not build or install
 .Xr tcpd 8 ,
 and related utilities.
 .It Va WITHOUT_TCSH
 Set to not build and install
 .Pa /bin/csh
 (which is
 .Xr tcsh 1 ) .
 .It Va WITHOUT_TELNET
 Set to not build
 .Xr telnet 1
 and related programs.
 .It Va WITHOUT_TESTS
 Set to not build nor install the
 .Fx
 Test Suite in
 .Pa /usr/tests/ .
 See
 .Xr tests 7
 for more details.
 This also disables the build of all test-related dependencies, including ATF.
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_DTRACE_TESTS
 .El
 .Pp
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
 .It Va WITHOUT_GOOGLETEST
 (unless
 .Va WITH_GOOGLETEST
 is set explicitly)
 .It Va WITHOUT_TESTS_SUPPORT
 (unless
 .Va WITH_TESTS_SUPPORT
 is set explicitly)
 .El
 .It Va WITHOUT_TESTS_SUPPORT
 Set to disables the build of all test-related dependencies, including ATF.
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_GOOGLETEST
 .El
 .It Va WITHOUT_TEXTPROC
 Set to not build
 programs used for text processing.
 .It Va WITHOUT_TFTP
 Set to not build or install
 .Xr tftp 1
 and
 .Xr tftpd 8 .
 .It Va WITHOUT_TOOLCHAIN
 Set to not install header or
 programs used for program development,
 compilers, debuggers etc.
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_BINUTILS
 .It
 .Va WITHOUT_CLANG
 .It
 .Va WITHOUT_CLANG_EXTRAS
 .It
 .Va WITHOUT_CLANG_FULL
 .It
 .Va WITHOUT_GDB
 .It
 .Va WITHOUT_INCLUDES
 .It
 .Va WITHOUT_LLD
 .It
 .Va WITHOUT_LLDB
 .It
 .Va WITHOUT_LLVM_COV
 .El
 .It Va WITHOUT_UNBOUND
 Set to not build
 .Xr unbound 8
 and related programs.
 .It Va WITHOUT_UNIFIED_OBJDIR
 Set to use the historical object directory format for
 .Xr build 7
 targets.
 For native-builds and builds done directly in sub-directories the format of
 .Pa ${MAKEOBJDIRPREFIX}/${.CURDIR}
 is used,
 while for cross-builds
 .Pa ${MAKEOBJDIRPREFIX}/${TARGET}.${TARGET_ARCH}/${.CURDIR}
 is used.
 .Pp
 This option is transitional and will be removed before the 12.0 release,
 at which time
 .va WITH_UNIFIED_OBJDIR
 will be enabled permanently.
 .Pp
 This must be set in the environment, make command line, or
 .Pa /etc/src-env.conf ,
 not
 .Pa /etc/src.conf .
 .It Va WITHOUT_USB
 Set to not build USB-related programs and libraries.
 .It Va WITHOUT_USB_GADGET_EXAMPLES
 Set to not build USB gadget kernel modules.
 .It Va WITHOUT_UTMPX
 Set to not build user accounting tools such as
 .Xr last 1 ,
 .Xr users 1 ,
 .Xr who 1 ,
 .Xr ac 8 ,
 .Xr lastlogin 8
 and
 .Xr utx 8 .
 .It Va WITH_VERIEXEC
 Enable building
 .Xr veriexec 8
 which loads the contents of verified manifests into the kernel
 for use by
 .Xr mac_veriexec 4
 .Pp
 Depends on
 .Va WITH_BEARSSL .
 .It Va WITHOUT_VI
 Set to not build and install vi, view, ex and related programs.
 .It Va WITHOUT_VT
 Set to not build
 .Xr vt 4
 support files (fonts and keymaps).
 .It Va WITHOUT_WARNS
 Set this to not add warning flags to the compiler invocations.
 Useful as a temporary workaround when code enters the tree
 which triggers warnings in environments that differ from the
 original developer.
 .It Va WITHOUT_WIRELESS
 Set to not build programs used for 802.11 wireless networks; especially
 .Xr wpa_supplicant 8
 and
 .Xr hostapd 8 .
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
 .It Va WITHOUT_WIRELESS_SUPPORT
 (unless
 .Va WITH_WIRELESS_SUPPORT
 is set explicitly)
 .El
 .It Va WITHOUT_WIRELESS_SUPPORT
 Set to build libraries, programs, and kernel modules without
 802.11 wireless support.
 .It Va WITHOUT_WPA_SUPPLICANT_EAPOL
 Build
 .Xr wpa_supplicant 8
 without support for the IEEE 802.1X protocol and without
 support for EAP-PEAP, EAP-TLS, EAP-LEAP, and EAP-TTLS
 protocols (usable only via 802.1X).
 .It Va WITHOUT_ZFS
 Set to not build ZFS file system kernel module, libraries, and user commands.
 .It Va WITHOUT_ZONEINFO
 Set to not build the timezone database.
 When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
 .Va WITHOUT_ZONEINFO_LEAPSECONDS_SUPPORT
 .El
 .It Va WITH_ZONEINFO_LEAPSECONDS_SUPPORT
 Set to build leapsecond information in to the timezone database.
 .El
 .Sh FILES
 .Bl -tag -compact -width Pa
 .It Pa /etc/src.conf
 .It Pa /etc/src-env.conf
 .It Pa /usr/share/mk/bsd.own.mk
 .El
 .Sh SEE ALSO
 .Xr make 1 ,
 .Xr make.conf 5 ,
 .Xr build 7 ,
 .Xr ports 7
 .Sh HISTORY
 The
 .Nm
 file appeared in
 .Fx 7.0 .
 .Sh AUTHORS
 This manual page was autogenerated by
 .An tools/build/options/makeman .