"nanobsd" prototype

[Harald Schmalzbauer]

Am Mittwoch, 10. März 2004 00:16 schrieb Poul-Henning Kamp:
> This patch contains my "nanobsd" prototype which I have been mumbling
> about.
*SNIP*
> --- /dev/null	Wed Mar 10 00:02:50 2004
> +++ make.conf	Tue Mar  9 22:50:34 2004
> @@ -0,0 +1,31 @@
> +NO_SENDMAIL=yes
> +NO_KERBEROS=yes
> +NO_IPFILTER=yes
> +NO_LPR=yes
> +NO_I4B=yes
> +NO_CXX=yes
> +NO_FORTRAN=yes
> +NO_OBJC=yes
> +NOHTML=yes
> +NO_GDB=yes
> +NO_GCOV=yes
> +NOINET6=yes
> +NORADIUS=yes
> +NOPROFILE=yes
> +NOLIBPTHREAD=yes
> +NOLIBTHR=yes
> +#NO_YP_LIBC=yes
> +NO_HESIOD_LIBC=yes
> +NO_SHAREDOCS=yes
> +NO_CVS=yes
> +NOMAN=yes
> +NOATM=yes
> +NO_USB=yes
> +NO_VINUM=yes
> +NO_TOOLCHAIN=yes
> +NO_ACPI=yes
> +NO_RESCUE=yes
> +NOGAMES=yes
> +NOINFO=yes
> +NO_MODULES=yes
> +NO_PF=YES

Hi Poul-Henning.

currently I'm doing a new 4501 setup and saw your patch. Nice to have, like 
you mentiond there're better things todo than to reinvent the wheel.
But one question: Have you tried running ssh?
When I made may world without kerberos but with ssh (which you also do with 
this make.conf) sshd refudes to start since libgssapi* was mising.
Another question: I have a hifn coproz from soekris. Is ist possible to 
compile ssh in a way that it makes use of it?
Perhaps you (as the soekris entity itself) could have a quick look at my 
kernel conf (it's short!).

Thank you,

-Harry
-------------- next part --------------
########################################
## Kernel for Soekris ##
########################################

## Generic Config
#-------------------
machine		i386
cpu		I486_CPU
cpu		I586_CPU
ident		STITH
options 	SCHED_4BSD		#4BSD scheduler
options 	COMPAT_43		#Compatible with BSD 4.3 [KEEP THIS!]
options         HZ=1000
options         CPU_ELAN
options		CPU_SOEKRIS
options         CPU_ELAN_PPS
options         PPS_SYNC
options         HW_WDOG
options         SW_WATCHDOG
options		NO_SWAPPING
options         INIT_PATH=/sbin/init
options         PANIC_REBOOT_WAIT_TIME=1

## Buses
#------------------
device		npx
device		isa
device		pci

## ISA-Controller
#----------------
device		sio		# 8250, 16[45]50 based serial ports

## PCI-Controller
#------------------
device		ata

## Devices with their options
#----------------------------
#+++++ IDE ++++++
device		atadisk			# ATA disk drives
options 	ATA_STATIC_ID		#Static device numbering
options 	FFS			#Berkeley Fast Filesystem

#+++++ Netzwerk +++++
device		miibus		# MII bus support
device		sis
device		wi
options         PFIL_HOOKS
device		pf
device		pflog
device		pfsync
options         DEVICE_POLLING
options 	INET			#InterNETworking
options		INET6
options		FAST_IPSEC              #new IPsec (cannot define w/ IPSEC)
options         RANDOM_IP_ID
options         TCP_DROP_SYNFIN
options         ZERO_COPY_SOCKETS
options         MROUTING                # Multicast routing
#options         BRIDGE
options         NETGRAPH                #netgraph(4) system
options         NETGRAPH_BPF
options         NETGRAPH_BRIDGE
options         NETGRAPH_CISCO
options         NETGRAPH_ECHO
options         NETGRAPH_ETHER
options         NETGRAPH_GIF
options         NETGRAPH_GIF_DEMUX
options         NETGRAPH_HOLE
options         NETGRAPH_IFACE
options         NETGRAPH_IP_INPUT
options         NETGRAPH_KSOCKET
options         NETGRAPH_L2TP
options         NETGRAPH_LMI
#options		NETGRAPH_MPPC_COMPRESSION
options         NETGRAPH_MPPC_ENCRYPTION
options         NETGRAPH_ONE2MANY
options         NETGRAPH_PPP
options         NETGRAPH_PPPOE
options         NETGRAPH_PPTPGRE
options         NETGRAPH_RFC1490
options         NETGRAPH_SOCKET
options         NETGRAPH_SPLIT
options         NETGRAPH_TEE
options         NETGRAPH_TTY
options         NETGRAPH_UI
options         NETGRAPH_VJC

#+++++ CRYPTO ++++++
device          crypto          # core crypto support
device          cryptodev       # /dev/crypto for access to h/w
device          rndtest         # FIPS 140-2 entropy tester
device          hifn            # Hifn 7951, 7781, etc.
options         HIFN_RNDTEST    # enable rndtest support


## Pseudo Devices
#----------------
device		random		# Entropy device
device		loop		# Network loopback
device		ether		# Ethernet support
device		pty		# Pseudo-ttys (telnet etc)
device		md		# Memory "disks"
device		bpf		# Berkeley packet filter
device		gre
device		wlan
device          gif		#IPv6 and IPv4 tunneling
device          faith		#for IPv6 and IPv4 translation
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: signature
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20040311/3fd15de9/attachment.bin