|
1
|
ALLOW_UNSUPPORTED_SYSTEM=yes
|
|
2
|
|
|
3
|
# Define pfSense repos
|
|
4
|
PFSENSE_REPOS= pfSense-repo pfSense-repo-devel pfSense-repo-244
|
|
5
|
|
|
6
|
# Generic options
|
|
7
|
OPTIONS_UNSET_FORCE= X11 DOCS EXAMPLES MAN INFO MANPAGES
|
|
8
|
|
|
9
|
# Individual ports options
|
|
10
|
.if ${.CURDIR:N*net/quagga*}=="" || ${.CURDIR:N*net/frr*}==""
|
|
11
|
CUR_ARCH!= /usr/bin/uname -p
|
|
12
|
. if ${CUR_ARCH} == "armv7"
|
|
13
|
WITH_DEBUG=yes
|
|
14
|
. endif
|
|
15
|
.endif
|
|
16
|
|
|
17
|
.if ${.CURDIR:N*net/rsync*}==""
|
|
18
|
CFLAGS+= -static
|
|
19
|
.endif
|
|
20
|
|
|
21
|
.if ${.CURDIR:N*security/openiked*}==""
|
|
22
|
CONFIGURE_ARGS= --without-openssl-header-check
|
|
23
|
.endif
|
|
24
|
|
|
25
|
DEFAULT_VERSIONS= php=73 ssl=base
|
|
26
|
PHP_FD_SETSIZE= 3172
|
|
27
|
|
|
28
|
. if ${.CURDIR:N*sysutils/check_reload_status*}==""
|
|
29
|
WITH_DEBUG= yes
|
|
30
|
. endif
|
|
31
|
|
|
32
|
# Options for packages
|
|
33
|
|
|
34
|
# databases
|
|
35
|
databases_rrdtool12_UNSET_FORCE= PERL
|
|
36
|
|
|
37
|
databases_rrdtool_UNSET_FORCE= PYTHON_MODULE RUBY_MODULE PERL_MODULE DEJAVU GRAPH
|
|
38
|
|
|
39
|
# devel
|
|
40
|
devel_apr1_SET_FORCE=IPV6 SQLITE SSL THREADS
|
|
41
|
devel_apr1_UNSET_FORCE=BDB MYSQL NSS PGSQL
|
|
42
|
|
|
43
|
devel_git_UNSET_FORCE=CVS GITWEB GUI HTMLDOCS P4 SVN CONTRIB PERL ETCSHELLS
|
|
44
|
|
|
45
|
# dns
|
|
46
|
dns_unbound_SET_FORCE= LIBEVENT PYTHON
|
|
47
|
|
|
48
|
dns_bind-pfsense_SET_FORCE=DLZ_FILESYSTEM FILTER_AAAA IPV6 LINKS RRL SIGCHASE SSL THREADS GSSAPI_NONE
|
|
49
|
dns_bind-pfsense_UNSET_FORCE=FIXED_RRSET IDN LARGE_FILE LMDB
|
|
50
|
|
|
51
|
dns_bind99_SET_FORCE=DLZ_FILESYSTEM FILTER_AAAA IPV6 LINKS RRL SIGCHASE SSL THREADS GSSAPI_NONE
|
|
52
|
dns_bind99_UNSET_FORCE=FIXED_RRSET IDN LARGE_FILE
|
|
53
|
|
|
54
|
dns_bind910_SET_FORCE=DLZ_FILESYSTEM FILTER_AAAA IPV6 LINKS RRL SIGCHASE SSL THREADS GSSAPI_NONE
|
|
55
|
dns_bind910_UNSET_FORCE=FIXED_RRSET IDN LARGE_FILE
|
|
56
|
|
|
57
|
dns_bind911_SET_FORCE=DLZ_FILESYSTEM FILTER_AAAA IPV6 LINKS RRL SIGCHASE SSL THREADS GSSAPI_NONE
|
|
58
|
dns_bind911_UNSET_FORCE=FIXED_RRSET IDN LARGE_FILE LMDB
|
|
59
|
|
|
60
|
dns_bind912_SET_FORCE=DLZ_FILESYSTEM FILTER_AAAA IPV6 LINKS RRL SIGCHASE SSL THREADS GSSAPI_NONE
|
|
61
|
dns_bind912_UNSET_FORCE=FIXED_RRSET IDN LARGE_FILE LMDB
|
|
62
|
|
|
63
|
# emulators
|
|
64
|
emulators_qemu_UNSET_FORCE= SDL
|
|
65
|
|
|
66
|
# graphics
|
|
67
|
graphics_cairo_UNSET_FORCE=X11 XCB OPENGL
|
|
68
|
|
|
69
|
graphics_gd_SET_FORCE=ICONV
|
|
70
|
graphics_gd_UNSET_FORCE=FONTCONFIG XPM
|
|
71
|
|
|
72
|
graphics_graphviz_SET_FORCE=ICONV NLS
|
|
73
|
graphics_graphviz_UNSET_FORCE=DIGCOLA IPSEPCOLA PANGOCAIRO XPM
|
|
74
|
|
|
75
|
# lang
|
|
76
|
lang_gcc_UNSET_FORCE=JAVA
|
|
77
|
|
|
78
|
# mail
|
|
79
|
mail_pear-Mail_SET_FORCE= PEAR_NET_SMTP
|
|
80
|
|
|
81
|
# net
|
|
82
|
net_avahi_UNSET_FORCE=GTK
|
|
83
|
|
|
84
|
net_freeradius2_SET_FORCE=KERBEROS LDAP MYSQL PERL PGSQL PYTHON SSL_PORT
|
|
85
|
net_freeradius3_SET_FORCE=HEIMDAL LDAP MYSQL PERL PGSQL PYTHON SQLITE3
|
|
86
|
|
|
87
|
net_haproxy17_SET_FORCE=OPENSSL SPCRE LUA
|
|
88
|
net_haproxy17_UNSET_FORCE=DPCRE
|
|
89
|
|
|
90
|
net_haproxy18_SET_FORCE=OPENSSL SPCRE LUA
|
|
91
|
net_haproxy18_UNSET_FORCE=DPCRE
|
|
92
|
|
|
93
|
net_haproxy_SET_FORCE=OPENSSL SPCRE LUA PROMEX
|
|
94
|
net_haproxy_UNSET_FORCE=DPCRE
|
|
95
|
|
|
96
|
net_haproxy-devel_SET_FORCE=OPENSSL SPCRE LUA
|
|
97
|
net_haproxy-devel_UNSET_FORCE=DPCRE
|
|
98
|
|
|
99
|
net_libpcap_SET_FORCE=IPV6
|
|
100
|
net_libpcap_UNSET_FORCE=DAG
|
|
101
|
|
|
102
|
net_libzmq4_UNSET_FORCE=PGM
|
|
103
|
|
|
104
|
net_miniupnpd_SET_FORCE= PF_FILTER_RULES IPV6 CHECK_PORTINUSE
|
|
105
|
|
|
106
|
net_mtr_UNSET_FORCE=X11
|
|
107
|
|
|
108
|
net_nss_ldap_UNSET_FORCE=SASL KERBEROS
|
|
109
|
|
|
110
|
net_ntp_UNSET_FORCE= PERL_UTILS
|
|
111
|
|
|
112
|
net_relayd_SET_FORCE= LIBEVENT_STATIC
|
|
113
|
|
|
114
|
# net-mgmt
|
|
115
|
net-mgmt_net-snmp_SET_FORCE=IPV6 MFD_REWRITES TLS
|
|
116
|
net-mgmt_net-snmp_UNSET_FORCE=AX_DISABLE_TRAP AX_SOCKONLY DOCS DUMMY JAIL MYSQL PYTHON SMUX TKMIB UNPRIVILEGED
|
|
117
|
|
|
118
|
net-mgmt_zabbix3-agent_SET_FORCE=IPV6
|
|
119
|
|
|
120
|
net-mgmt_zabbix3-proxy_SET_FORCE=IPMI IPV6 LIBXML2 SQLITE SSH
|
|
121
|
net-mgmt_zabbix3-proxy_UNSET_FORCE=MYSQL
|
|
122
|
|
|
123
|
net-mgmt_zabbix4-agent_SET_FORCE=IPV6
|
|
124
|
|
|
125
|
net-mgmt_zabbix4-proxy_SET_FORCE=IPMI IPV6 LIBXML2 SQLITE SSH
|
|
126
|
net-mgmt_zabbix4-proxy_UNSET_FORCE=MYSQL
|
|
127
|
|
|
128
|
net-mgmt_zabbix42-agent_SET_FORCE=IPV6
|
|
129
|
|
|
130
|
net-mgmt_zabbix42-proxy_SET_FORCE=IPMI IPV6 LIBXML2 SQLITE SSH
|
|
131
|
net-mgmt_zabbix42-proxy_UNSET_FORCE=MYSQL
|
|
132
|
|
|
133
|
net-mgmt_zabbix44-agent_SET_FORCE=IPV6
|
|
134
|
|
|
135
|
net-mgmt_zabbix44-proxy_SET_FORCE=IPMI IPV6 LIBXML2 SQLITE SSH
|
|
136
|
net-mgmt_zabbix44-proxy_UNSET_FORCE=MYSQL
|
|
137
|
|
|
138
|
net-mgmt_zabbix5-agent_SET_FORCE=IPV6
|
|
139
|
|
|
140
|
net-mgmt_zabbix5-proxy_SET_FORCE=IPMI IPV6 LIBXML2 SQLITE SSH
|
|
141
|
net-mgmt_zabbix5-proxy_UNSET_FORCE=MYSQL
|
|
142
|
|
|
143
|
# security
|
|
144
|
security_barnyard2_SET_FORCE=BRO GRE IPV6 MPLS MYSQL PORT_PCAP
|
|
145
|
security_barnyard2_UNSET_FORCE=ODBC PGSQL PRELUDE
|
|
146
|
|
|
147
|
security_ca_root_nss_SET_FORCE= ETCSYMLINK
|
|
148
|
|
|
149
|
security_opensc_SET_FORCE= PCSC
|
|
150
|
security_opensc_UNSET_FORCE= DOCS MANPAGES
|
|
151
|
|
|
152
|
security_openvpn_SET_FORCE= X509ALTUSERNAME ASYNC_PUSH
|
|
153
|
security_openvpn_UNSET_FORCE= EASYRSA
|
|
154
|
|
|
155
|
shells_scponly_SET_FORCE=CHROOT SCP WILDCARDS WINSCP
|
|
156
|
shells_scponly_UNSET_FORCE=DEFAULT_CHDIR DOCS GFTP RSYNC SVN SVNSERVE UNISON
|
|
157
|
|
|
158
|
security_sudo_SET_FORCE=LDAP
|
|
159
|
|
|
160
|
security_snort_SET_FORCE=APPID BARNYARD GRE IPV6 NORMALIZER PERFPROFILE SOURCEFIRE
|
|
161
|
security_snort_UNSET_FORCE=FILEINSPECT HA PULLEDPORK
|
|
162
|
|
|
163
|
security_snortsam_UNSET_FORCE= IPFW
|
|
164
|
|
|
165
|
.if ${.CURDIR:N*security/snort3*}==""
|
|
166
|
CUR_ARCH!= /usr/bin/uname -p
|
|
167
|
.if ${CUR_ARCH} == "armv7" || ${CUR_ARCH} == "aarch64"
|
|
168
|
security_snort3_SET_FORCE=LARGEPCAP STATICDAQ
|
|
169
|
security_snort3_UNSET_FORCE=HYPERSCAN TSC
|
|
170
|
else
|
|
171
|
security_snort3_SET_FORCE=LARGEPCAP STATICDAQ HYPERSCAN
|
|
172
|
.endif
|
|
173
|
.endif
|
|
174
|
|
|
175
|
security_strongswan_SET_FORCE= CURL EAPDYNAMIC EAPRADIUS EAPSIMFILE \
|
|
176
|
IKEv1 UNBOUND XAUTH IPSECKEY PKCS11 PKI UNITY VICI VSTR SWANCTL
|
|
177
|
security_strongswan_UNSET_FORCE= EAPAKA3GPP2 BUILTIN LIBC SMP
|
|
178
|
|
|
179
|
security_suricata_SET_FORCE=GEOIP HTP_PORT IPFW JSON LUAJIT NSS PORTS_PCAP NETMAP HYPERSCAN REDIS
|
|
180
|
security_suricata4_SET_FORCE=GEOIP HTP_PORT IPFW JSON LUAJIT NSS PORTS_PCAP NETMAP HYPERSCAN REDIS
|
|
181
|
.if ${.CURDIR:N*security/suricata*}==""
|
|
182
|
CUR_ARCH!= /usr/bin/uname -p
|
|
183
|
NATIVE_BUILD!= /sbin/sysctl -qn kern.supported_archs | grep -q ${CUR_ARCH} && echo yes || /usr/bin/true
|
|
184
|
.if ${NATIVE_BUILD} != "yes"
|
|
185
|
security_suricata_UNSET_FORCE=LUA PRELUDE SC TESTS RUST
|
|
186
|
security_suricata4_UNSET_FORCE=LUA PRELUDE SC TESTS RUST
|
|
187
|
.else
|
|
188
|
security_suricata_UNSET_FORCE=LUA PRELUDE SC TESTS
|
|
189
|
security_suricata4_UNSET_FORCE=LUA PRELUDE SC TESTS
|
|
190
|
.endif
|
|
191
|
.endif
|
|
192
|
|
|
193
|
security_xinetd_UNSET_FORCE= XCONV
|
|
194
|
|
|
195
|
# sysutils
|
|
196
|
sysutils_apcupsd_SET_FORCE=APCDUMB_DRV APCSMART_DRV PCNET_DRV SNMP_DRV TCP_WRAPPERS USB
|
|
197
|
sysutils_apcupsd_UNSET_FORCE=CGI CLIENT_ONLY GAPCMON SNMP_DRV_OLD TEST_DRV
|
|
198
|
|
|
199
|
sysutils_flashrom_UNSET_FORCE= FTDI BUSPIRATE
|
|
200
|
|
|
201
|
sysutils_pftop_SET_FORCE=ALTQ
|
|
202
|
|
|
203
|
sysutils_syslog-ng_SET_FORCE= SYS_SSL
|
|
204
|
sysutils_syslog-ng_UNSET_FORCE= PORTS_SSL
|
|
205
|
|
|
206
|
# www
|
|
207
|
www_c-icap_SET_FORCE=LARGE_FILES
|
|
208
|
www_c-icap_UNSET_FORCE=IPV6
|
|
209
|
|
|
210
|
www_lightsquid_SET_FORCE=GD
|
|
211
|
|
|
212
|
www_lighttpd_SET_FORCE= NODELAY
|
|
213
|
|
|
214
|
www_nginx_SET_FORCE= LUA
|
|
215
|
|
|
216
|
www_squid_SET_FORCE=ARP_ACL AUTH_LDAP AUTH_NIS AUTH_SASL CACHE_DIGESTS DELAY_POOLS FOLLOW_XFF FS_AUFS FS_DISKD GSSAPI_MIT HTCP ICAP ICMP IDENT IPV6 KQUEUE LARGEFILE LAX_HTTP SNMP SSL SSL_CRTD TP_PF WCCP WCCPV2
|
|
217
|
www_squid_UNSET_FORCE=AUTH_SMB AUTH_SQL DEBUG DNS_HELPER ECAP ESI FS_ROCK GSSAPI_NONE GSSAPI_BASE GSSAPI_HEIMDAL STACKTRACES TP_IPF TP_IPFW VIA_DB
|
|
218
|
|
|
219
|
www_squid3_SET_FORCE=ARP_ACL AUTH_LDAP AUTH_NIS AUTH_SASL CACHE_DIGESTS DELAY_POOLS FOLLOW_XFF FS_AUFS FS_DISKD GSSAPI_MIT HTCP ICAP ICMP IDENT IPV6 KQUEUE LARGEFILE LAX_HTTP SNMP SSL SSL_CRTD TP_PF WCCP WCCPV2
|
|
220
|
www_squid3_UNSET_FORCE=AUTH_SMB AUTH_SQL DEBUG DNS_HELPER ECAP ESI FS_ROCK GSSAPI_NONE GSSAPI_BASE GSSAPI_HEIMDAL STACKTRACES TP_IPF TP_IPFW VIA_DB
|
|
221
|
|
|
222
|
www_squidguard_SET_FORCE=DNS_BL LDAP STRIP_NTDOMAIN
|
|
223
|
www_squidguard_UNSET_FORCE=QUOTE_STRING
|
|
224
|
|
|
225
|
www_e2guardian_SET_FORCE=ICAP NTLM SSL_MITM
|
|
226
|
|
|
227
|
net_frr7_SET_FORCE=MULTIPATH
|