 @@ -1,1175 +1,1176 @@
-# $NetBSD: mk.conf,v 1.309 2020/05/15 10:10:04 nia Exp $
+# $NetBSD: mk.conf,v 1.310 2020/05/15 10:22:42 nia Exp $
+#
 # This file provides default values for variables that may be overridden
 # in the MAKECONF file, which is /etc/mk.conf by default.
+#
 # Note: This file is included after the MAKECONF file, so you cannot query
 # these default values in the MAKECONF using the ".if" and ".for"
 # preprocessing directives.
 # ************************************************************************
 # NOTE TO PEOPLE EDITING THIS FILE - USE LEADING SPACES, NOT LEADING TABS.
 # ************************************************************************
 USE_CWRAPPERS?=	auto
 # Build packages using the newer pkgtools/cwrappers infrastructure, which can
 # significantly speed up builds and use fewer resources.  Some compiler and
 # platform combinations are not currently handled by cwrappers, so currently
 # the default is "auto" which enables cwrappers automatically if the platform
 # _OPSYS_SUPPORTS_CWRAPPERS variable is set to "yes".
+#
 # Possible: yes, no, auto
 # Default: auto (automatic detection, see above)
 USE_PKG_ADMIN_DIGEST?=	no
 # Record file digests instead of extracing the NetBSD RCS ID from files.
+#
 # Possible: yes, no
 # Default: no
 #ALLOW_VULNERABLE_PACKAGES=
 # allow the user to build packages which are known to be vulnerable to
 # security exploits
 # Possible: defined, not defined
 # Default: not defined
 #AUDIT_PACKAGES_FLAGS=
 # List of flags passed to ``pkg_admin audit-pkg''.
+#
 # Possible: See pkg_admin(1)
 # Default: (no option)
 MANINSTALL?= maninstall catinstall
 # Specify manpage installation types.
 # Possible: maninstall, catinstall, both types or empty
 # Default: maninstall catinstall
 # FIXME: This variable is not user-settable and must be moved away from here.
 #MANZ=
 # gzip manual pages at installation time
 # Possible: defined, not defined
 # Default: not defined
 GZIP?=	-9
 # default compression level when compressing files with gzip
 # Possible: -[0-9], --fast, --best (see gzip(1))
 # Default: -9
 #MAKE_JOBS=			3
 #MAKE_JOBS.category/dir=	2
 #	When defined, specifies the maximum number of jobs ("make -j")
 #	that are run in parallel when building packages with the default
 #	do-build action. MAKE_JOBS only affects the "build" target,
 #	neither "test" nor "install".
+#
 #	May be specified on a per-package basis; any package-specific
 #	value overrides the global setting. Package-specific settings are
 #	by source directory, not package name, as the circumstances that
 #	would lead one to make them are based on properties of sources.
+#
 #	Possible values: any positive integer. Useful values are around
 #	the number of processors on the machine.
+#
 #	Default value: (undefined)
+#
 #	Warning: Some packages will not build with this. Disabling
 #	parallel builds for an individual package can be done by
 #	setting MAKE_JOBS_SAFE=NO within the per package Makefile.
 #	When doing so, please include a comment indicating what went
 #	wrong so it can be crosschecked in the future after upstream
 #	changes.
 #OBJHOSTNAME=
 # use hostname-specific object directories, e.g.  work.amnesiac, work.localhost
 # OBJHOSTNAME takes precedence over OBJMACHINE (see below).
 # Possible: defined, not defined
 # Default: not defined
 #OBJMACHINE=
 # use machine-specific object directories, e.g.  work.i386, work.sparc
 # Possible: defined, not defined
 # Default: not defined
 #SIGN_PACKAGES=
 # sign the packages generated with the method specified.
 # Possible: gpg, x509, not defined
 # Default: not defined
 #X509_KEY=
 # key to use when signing packages with an X509 certificate.
 # Possible: pathname to the key file, not defined
 # Default: not defined
 #X509_CERTIFICATE=
 # certificate to use when signing packages with an X509 certificate.
 # Possible: pathname to the X509 certificate, not defined
 # Default: not defined
 .if ${PKG_DEVELOPER:Uno} != "no"
 PATCH_DEBUG?=
 .endif
 # Used to debug patches as they are applied
 # Possible: defined, not defined
 # Default: not defined
 PKG_COMPRESSION?=	gzip
 # Compression algorithm for binary packages.
 # Possible: gzip, bzip2, xz, none
 # Default: gzip
 # Supersedes the PKG_SUFX option and keeps the name consistent.
 PKGSRC_LOCKTYPE?= none
 #	The type of locking that will be done if competing processes
 #	attempt to do work on one package directory simultaneously.
+#
 #	Possible values:
 #	* none: No locking takes place at all.
 #	* once: When the lock has already been aquired by another
 #	  process, the current process is terminated.
 #	* sleep: When the lock has already been acquired by another
 #	  process, the current process will sleep for PKGSRC_SLEEPSECS
 #	  seconds and then try again.
+#
 #	You should also set OBJHOSTNAME when you are using the same
 #	copy of pkgsrc on different hosts, maybe via NFS. This is because
 #	the locking process writes its process ID into the lockfile,
 #	and process IDs on different hosts are unrelated.
+#
 #	See also: LOCALBASE_LOCKTYPE, WRKDIR_LOCKTYPE.
+#
 #	Keywords: lock locking parallel
+#
 PKGSRC_SLEEPSECS?= 5
 #	The number of seconds to wait when PKGSRC_LOCKTYPE is sleep.
+#
 #	Possible values: any positive integer
+#
+#
 # The following values are used to manage the packages collection as a whole.
+#
 #ABI=
 # The Application Binary Interface (ABI) to be used, if supported by the
 # Operating System and/or compiler.
+#
 # Only change this if you really know what you're doing -- libraries of
 # one ABI can not be linked with libraries of another!
+#
 # Currently only usable on IRIX or Solaris. On IRIX, it is set
 # automatically by the bootstrap script, on Solaris, it is not.
+#
 # If you change it, be sure that _all_ the installed libraries and
 # programs have the same API and use consistent compiler options. It is
 # recommended that this variable be only changed directly after
 # bootstrapping pkgsrc.
+#
 # Possible values:
 #	* 64 (64 bit ABI; both IRIX or Solaris)
 #	* 32 (SGI's N32 ABI; only IRIX)
 #	* undefined (SGI's old o32 ABI; only IRIX)
+#
 # Default: undefined, but see above.
-PKG_DEVELOPER?=		yes
+#PKG_DEVELOPER?=	yes
+#
 # If defined and not "no" it enables some sanity checks to raise the quality
 # of the installed packages. See the files pkgsrc/mk/check/check-*.mk for
 # details and further configuration options.
+#
 # Possible: defined, not defined, no
 # Default: yes
 USE_ABI_DEPENDS?=	yes
 # Honor package prerequisite ABI recommendations.  If this is set
 # to "yes", all entries in ABI_DEPENDS will be added to DEPENDS.
 # If set to "no", a warning will be printed if recommendations
 # are possibly ignored.
+#
 # WARNING: This should only be changed if you know what you're doing.
 # Please read pkgsrc/doc/pkgsrc.txt for details.
+#
 # Possible: yes, no
 # Default: yes
 #PKG_REGISTER_SHELLS= YES
 # Automatically register shells in /etc/shells
 # Possible: YES, NO
 # Default: YES
 PKGSRC_COMPILER?=	gcc
 # Compiler type(s) to use for building packages
 # Possible: (see comments in mk/compiler.mk)
 # Default: gcc
 PKGSRC_KEEP_BIN_PKGS?=	yes
 # Keep binary packages in ${PACKAGES} after building them
 # Possible: yes, not yes
 # Default: yes
 PKGSRC_MESSAGE_RECIPIENTS?=
 # login names of recipients of any MESSAGE files which will be mailed
 # Possible: any login names
 # Default: none
 PKGSRC_SHOW_BUILD_DEFS?=yes
 # Show BUILD_DEFS definitions for a package when it is being built
 # (BUILD_DEFS are extra definitions which govern how some packages are
 # built and behave)
 # Possible: yes, not yes
 # Default: yes
 PKGSRC_RUN_TEST?=	no
+#
 # Many packages bring their own self tests to ensure they basically
 # work. To run these tests after building a package, set this variable
 # to "yes".
+#
 # Note: Some packages make heavy use of the random number generator in
 # their tests, so need to make sure that there are always enough random
 # numbers on your machine. The package security/bitstir may help here.
+#
 # Possible: yes, no
 # Default: no
 PKGSRC_MKPIE?= no
 # If no, create regular executables. Otherwise create PIE (Position Independent
 # Executables, on supported platforms). This option is necessary to fully
 # leverage ASLR as a mitigation for security vulnerabilities.
 # Possible: yes, no
 # Default: no
 PKGSRC_MKREPRO?= no
 # If no, do not alter the build process. Otherwise, try to build reproducibly.
 # This allows packages built from the same tree and options to produce identical
 # results bit by bit.
 # This option should be combined with ASLR and PKGSRC_MKPIE to avoid predictable
 # address offsets for attackers attempting to exploit security vulnerabilities.
 # Possible: yes, no
 # Default: no
+#
 # Keywords: reproducible
 PKGSRC_USE_CTF?= no
 # Turn on CTF conversion.
 # Possible: yes, no
 # Default: no
+#
 # Keywords: ctf compact type format
 PKGSRC_USE_FORTIFY?= strong
 # Turns on substitute wrappers for commonly used functions that do not bounds
 # checking regularly, but could in some cases. This is effectively in use only
 # when both enabled and supported.
 # Possible values:
 #	no:     Do not pass any flags for FORTIFY
 #	weak:   Pass -D_FORTIFY_SOURCE=1
 #	strong: Pass -D_FORTIFY_SOURCE=2
 # Default: strong
+#
 # Keywords: fortify FORTIFY_SOURCE
 PKGSRC_USE_RELRO?= no
 # Link with RELRO by default (on supported platforms). This makes the
 # exploitation of some security vulnerabilities more difficult in some cases.
 # Possible values:
 #	no:      Do not pass any flags for RELRO
 #	partial: Pass -Wl,-z,relro
 #	full:    Pass -Wl,-z,relro -Wl,-z,now
+#
 # Keywords: relro
 PKGSRC_USE_SSP?= yes
 # Configure this to enable stack smashing protection (on supported platforms).
 # Possible values:
 #	no:	Do not pass any stack protection flags
 #	yes:	Pass -fstack-protector
 #	strong:	Pass -fstack-protector-strong
 #	all:	Pass -fstack-protector-all
 # Default: yes
+#
 # Keywords: ssp
 PKGSRC_USE_STACK_CHECK?= no
 # Configure this to enable stack boundary verification (on supported platforms).
 # Possible values:
 #	no:	Do not pass any stack protection flags
 #	yes:	Pass -fstack-check
 # Default: no
 # The default PREFER_PKGSRC should be empty, but due to historical reasons we have the list below.
 # Please add your platform here once you have confirmed it is correct
 .if ${OPSYS} == "OpenBSD" || ${OPSYS} == "Bitrig"
 PREFER_PKGSRC?=
 .elif (!empty(MACHINE_PLATFORM:MNetBSD-*-*) && \
      exists(/usr/X11R7/lib/libX11.so))
 PREFER_PKGSRC?=
 .elif (!empty(MACHINE_PLATFORM:MNetBSD-*-*) && \
      exists(/usr/lib/libexpat.so))
 PREFER_PKGSRC?=		MesaLib Xft2 Xrandr Xrender fontconfig	\
 			freetype2 glu xcursor
 .elif !empty(MACHINE_PLATFORM:MLinux-*-*) && \
       (!defined(X11_TYPE) || ${X11_TYPE} == "native")
 PREFER_PKGSRC?=
 .elif !empty(MACHINE_PLATFORM:MDarwin-??.*-*) && \
       (!defined(X11_TYPE) || ${X11_TYPE} == "native")
 PREFER_PKGSRC?=
 .elif !empty(MACHINE_PLATFORM:MDarwin-9.*-*) && \
       (!defined(X11_TYPE) || ${X11_TYPE} == "native")
 PREFER_PKGSRC?=		fontconfig pixman Xft2
 .elif !empty(MACHINE_PLATFORM:MCygwin-*-*) && \
      exists(/usr/lib/X11/config/xorgversion.def)
 PREFER_PKGSRC?=
 .else
 PREFER_PKGSRC?=		MesaLib Xft2 Xrandr Xrender expat fontconfig	\
 			freetype2 glu xcursor
 .endif
 PREFER_NATIVE?=		yes
+#
 # When building packages, whether to prefer the pkgsrc or native
 # versions of software that's also part of the base system.  Its value
 # can be either yes/no, or a list of packages as named in the
 # BUILDLINK_TREE line in a package's buildlink3.mk file.
 # Preferences are determined by the most specific instance of the
 # package in either PREFER_PKGSRC or PREFER_NATIVE.  If a package is
 # specified in neither or in both variables, then PREFER_PKGSRC has
 # precedence over PREFER_NATIVE.
+#
 # Possible: yes, no, or a list of packages
 PREFER_NATIVE_PTHREADS?=	yes
 # This toggles whether we prefer using the native pthreads implementation
 # or the pkgsrc OPR (see pthread.buildlink3.mk).  This setting is
 # independent of the PREFER_* variables named above.
 #WRKOBJDIR=	/usr/tmp
 # build here instead of in pkgsrc
 # Possible: any path
 # Default: not defined
+#
 # Keywords: work tmp
 LOCALBASE?=	/usr/pkg
 #	This is the base directory where all packages will be installed.
+#
 #	Possible values: Any absolute path that does not contain special
 #	characters.
+#
 #	See also: PREFIX, VARBASE
+#
 CROSSBASE?=	${LOCALBASE}/cross
 # Where "cross" category packages install
 # Possible: any path
 # Default: ${LOCALBASE}/cross
 VARBASE?=	/var
 # Where files containing local state information are installed
 # Possible: any path
 # Default: /var
 #X11_TYPE?=    native
 # Used to set the X11 implementation used to build X11 packages.
 # Possible: modular (uses x11/libX11 and friends), or
 # native (uses pkgtools/x11-links to use the native, non-pkgsrc-managed X11).
 # Default: native
 # The default is defined in bsd.prefs.mk to allow platform specific overrides.
 #X11BASE?=	/usr/X11R7
 # Where X11 is installed on the system.
 # (and the default install path of X11 pkgs)
 # Possible: any path
 # Default: /usr/X11R7, /usr/openwin for Solaris
 #MOTIFBASE?=	/usr/X11R7
 # Where Motif-2.0-compatible headers and libraries are installed
 # on the system.
 # Possible: any path
 # Default: ${X11BASE} or where motif, openmotif or lesstif is installed
 PKGINFODIR?=	info
 #	The subdirectory of PREFIX that holds the GNU info files and the
 #	directory index file ("dir"). Using a value different from the
 #	default can be useful when LOCALBASE=/usr.
+#
 #	Possible: A sane pathname.
+#
 #	Examples:
 #	* share/info
+#
 #	Note: the support for custom setting (not "info") is not complete.
+#
 #	See also: PKGMANDIR
 PKGMANDIR?=	man
 #	The subdirectory of PREFIX that holds the manual pages and their
 #	subdirectories (e.g. man1, man7). Using a value different from the
 #	default can be useful when LOCALBASE=/usr.
+#
 #	Possible: Any sane pathname.
+#
 #	Examples:
 #	* share/man
+#
 #	Note: the support for custom setting (not "man") is not complete.
+#
 #	See also: PKGINFODIR
 PKGGNUDIR?=	gnu/
 #	The subdirectory of PREFIX that holds gnu programs and manual pages.
 #	Making this value empty can be useful when trying to build a fully
 #	GNU environment.
+#
 #	Possible: Any sane pathname including a trailing slash, or empty to
 #	install into LOCALBASE
 BSDSRCDIR?=	/usr/src
 # Where the NetBSD src module source tree is located
 # currently only used by package support scripts for packages that
 # include their source to find their upstream source
+#
 # Possible: any path
 # Default: /usr/src
 BSDXSRCDIR?=	/usr/xsrc
 # Where the NetBSD xsrc module source tree is located
 #  used in the x11/xservers package
 # Possible: any path
 # Default: /usr/xsrc
 DISTDIR?=	${PKGSRCDIR}/distfiles
 # Directory where original distribution
 # files are stored.
 # Possible: any path you like
 # Default: ${PKGSRCDIR}/distfiles
 #DIST_PATH=	/cdrom/0/distfiles:${HOME}/distfiles
 # Colon-delimited list of directories in which to search for
 # ${DISTFILES} and ${PATCHFILES}.  If the requested file is not in any
 # of the directories in ${DIST_PATH}, it will be downloaded into
 # ${DISTDIR}.  If the requested file is in one of the directories in
 # ${DIST_PATH}, a symbolic link will be made to it from ${DISTDIR}.
 # ${DIST_PATH} directories will will be searched before ${DISTDIR},
 # letting a CD hold the main distfiles archive, and local ${DISTDIR}
 # hold any updated distfiles, for example.
 # Possible:  any directories
 # Default: none
 DEFAULT_VIEW?= ""
 # This is the default view to which packages are added after installation.
 # Default: "" (the empty view)
 FETCH_USING?=	auto
 # The program type to fetch files.
 # "manual" will explicitly fail if the DISTFILES don't exist locally.
 # "custom" requires setting FETCH_CMD, FETCH_BEFORE_ARGS, FETCH_AFTER_ARGS,
 # FETCH_RESUME_ARGS and FETCH_OUTPUT_ARGS.
+#
 # The default value can be overriden by a package before including
 # bsd.prefs.mk and by the user in mk.conf.
 # Possible: auto, curl, custom, fetch, ftp, manual, wget
 #FIX_SYSTEM_HEADERS=
 # Make pkgtools/posix_headers an automatic build dependency for all
 # packages except those in the pkgtools category.
 # Possible: "yes", not defined
 # Default: not defined
 LIBTOOLIZE_PLIST?=	yes
 # This determines whether to expand libtool archives (.la files) in PLISTs
 # into the represented library names.
 # Possible: yes, no
 # Default: yes
 PKG_RESUME_TRANSFERS?=	NO
 # Used in pkgsrc to resume transfers, if enabled the whole file won't be
 # downloaded from scratch again.
 # Possible: yes or no.
 # Default: no.
 PKG_SYSCONFBASE?= ${PREFIX}/etc
 # This is the main config directory under which all package configuration
 # files should be found.
 # Possible: any path you like
 # Default: ${PREFIX}/etc
 #INIT_SYSTEM=
 # This determines the type of init system to be used.
 # Possible: any of: rc.d, smf
 # Default: Platform-dependent, otherwise rc.d
 RCD_SCRIPTS_DIR?= /etc/rc.d
 # This is the system rc.d script directory in which all rc.d scripts
 # expected to be executed at boot-time should be found.  Package views
 # users may want to set this to "${PKG_SYSCONFBASEDIR}/rc.d".
 # Possible: any path you like
 # Default: /etc/rc.d
 PACKAGES?=	${PKGSRCDIR}/packages
 # Stores generated packages
 # Possible: any path you like
 # Default: ${PKGSRCDIR}/packages
 #PASSIVE_FETCH=
 # Use ftp(1) in passive mode, for use behind filtering firewalls.
 # (Set by default in ftp(1).)
 # Possible: defined, not defined
 # Default: not defined
 PATCH_FUZZ_FACTOR?= -F0
 # Fuzz factor to use when applying patches.  Will only be applied when
 # using a patch(1) that understands -F.  This should be a "?="
 # setting, since package Makefiles may set this value, before
 # /etc/mk.conf is read.
 # Possible: -Fn where n is a number, none
 # Default: -F0
 #ACCEPTABLE_LICENSES=	fee-based-commercial-use no-commercial-use \
 # 			no-profit limited-redistribution
 # Whitespace-delimited list of the types of license which are
 # acceptable for installation.  Packages for which you need
 # to accept a license will display a message like the following:
 # ===> xv-3.10anb9 has an unacceptable license: xv-license.
 # ===>     To view the license, enter "/usr/bin/make show-license".
 # ===>     To indicate acceptance, add this line to your /etc/mk.conf:
 # ===>     ACCEPTABLE_LICENSES+=xv-license
+#
 # Default: none
 #SPECIFIC_PKGS= yes
+#
 # When doing a bulk build, don't build all packages, only those listed
 # in SITE_SPECIFIC_PKGS, HOST_SPECIFIC_PKGS, GROUP_SPECIFIC_PKGS, and
 # USER_SPECIFIC_PKGS.
+#
 # Possible: defined, not defined
 # Default: not defined
 #SITE_SPECIFIC_PKGS=
 # List of packages that are wanted for each host on the site.  Each
 # package in the list is of the form <category>/<package>.
 # Possible: any combination of packages
 # Default: not set
 #HOST_SPECIFIC_PKGS=
 # List of packages that are wanted for this particular host/machine.
 # Each package in the list is of the form <category>/<package>.
 # Possible: any combination of packages
 # Default: not set
 #GROUP_SPECIFIC_PKGS=
 # List of packages that are wanted for this group of users.  Each
 # package in the list is of the form <category>/<package>.
 # Possible: any combination of packages
 # Default: not set
 #USER_SPECIFIC_PKGS=
 # List of packages that are wanted for this particular user.  Each
 # package in the list is of the form <category>/<package>.
 # Possible: any combination of packages
 # Default: not set
 #EXTRACT_USING?= nbtar
 # Use the specified tool to extract tar/ustar archives.
 # Possible: bsdtar, gtar, nbtar, pax
 # Default: platform specific
 #FAILOVER_FETCH=
 # Perform a checksum at "make fetch" time.  If the checksum doesn't
 # match the stored value, try to retrieve the file from the next site
 # in the list
 # Possible:  defined, not defined
 # Default: not defined
 #MASTER_SORT=	.ac.at .at .de .ch .se .fi .no
 # Whitespace delimited list of preferred download locations.
 # MASTER_SITES and PATCH_SITES will be reordered according to the hosts'
 # address last components.
 # Possible: list of domain name suffixes
 # Default: none
 #MASTER_SORT_REGEX=  ftp://.*/
 # Same as MASTER_SORT, but takes a regular expression for more
 # flexibility in matching.  Regexps defined here have higher priority
 # than MASTER_SORT.  This example would prefer ftp transfers over
 # anything else.
 # Possible: Regexps as in awk(1)
 # Default: none
 .if defined(PKG_DEVELOPER) && ${PKG_DEVELOPER} != "no"
 MASTER_SORT_RANDOM?=	NO
 .else
 MASTER_SORT_RANDOM?=	YES
 .endif
 # If set to YES or yes, a list of master sites will be randomly intermixed.
 # Also, both MASTER_SORT and MASTER_SORT_REGEX may be applied later.
 # Possible: yes, no / not defined
 # Default: NO if PKG_DEVELOPER is enabled, YES otherwise
 #PATCH_DEBUG=
 # Used to debug patches as they are applied
 # Possible: defined, not defined
 # Default: not defined
 #PKG_FC=
 # The Fortran compiler used to compile Fortran code contained in
 # packages.
 # Possible: any Fortran compiler
 # Default: none
 #IMAKEOPTS=
 # Options passed to imake(1).  The defaults ensure that imake finds the
 # correct commands.
 # Possible: any valid flags
 # Default:
 #  for Solaris with gcc:
 #	-DHasGcc2=YES -DHasGcc2ForCplusplus=YES
 #  for IRIX:
 #	-DMakeCmd=${PREFIX}/bin/bmake -DProjectRoot=${X11BASE} \
 #	-DManUsr=${PREFIX}
 .if ${OPSYS} == "IRIX"
 #IMAKEOPTS?=	-DMakeCmd=${PREFIX}/bin/bmake -DProjectRoot=${X11BASE} \
 #		-DManUsr=${PREFIX}
 # ABI specific flags may be added during bootstrapping process or by hand:
 .  if defined(ABI)
 .    if ${ABI} == "32"
 #IMAKEOPTS+=	-DBuildN32
 .    else
 #IMAKEOPTS+=	-DBuild64bit
 .    endif
 .  endif
 # you may also wish to add ISA specific flags, such as "-DSgiISA32=4" if
 # you are compiling for mips4.
 .elif ${OPSYS} == "SunOS"
 # The flags required by imake with gcc on Solaris are automatically
 # added if gcc is being used. Though it should not be needed, you can
 # override this using:
 #IMAKEOPTS+=	-DHasGcc2=YES -DHasGcc2ForCplusplus=YES
 .endif
 PRE_ROOT_CMD?=	${TRUE}
 # Command to be run by normal user, just before becoming root (see
 # SU_CMD) to install the package.  For example, "chmod -R o+w ${WRKDIR}"
 # would allow others to write and modify files below ${WRKDIR}.
 # Possible: any shell commands
 # Default: none
 SU_CMD?= ${ROOT_CMD}
 # Command to perform before "make install", if the user does not have
 # an effective uid of 0.  A possible substitute is "sudo sh -c"
 # Possible: su, sudo, or priv, with appropriate arguments
 # Default: dependent on operating system. For NetBSD: ${SU} - root -c
 SU_CMD_PATH_APPEND?=/sbin:/usr/sbin
 # Additional directories (in a colon separated list) to be added to the
 # PATH environment variable when running ${SU_CMD}.
 # Default: /sbin:/usr/sbin
 FATAL_OBJECT_FMT_SKEW?=yes
 # If there is a pre-requisite package, which has a different object format
 # from that currently being used, halt execution. One (rare) situation where
 # it is possible for the difference to be harmless is where the pre-requisite
 # package provides an executable, not a library.
 # Possible: yes, no
 # Default: yes
 WARN_NO_OBJECT_FMT?=yes
 # Packages installed on a machine before OBJECT_FMT was added to the
 # BUILD_DEFS definitions (on 29th September 1999) cannot say which
 # object format they are in.  This will cause a warning to be displayed.
 # Set this to "no" to stop the warning message being shown.
 # Possible: yes, no
 # Default: yes
 #SMART_MESSAGES=yes
 # Display the make(1) target, and the current stack of packages being built,
 # when displaying messages during package builds.
 # Possible: defined, not defined
 # Default: not defined
 #BINPKG_SITES=...
 # Whitespace separated list of URLs for binary packages. Directories
 # "All" etc. are expected in the named place, variables "rel" and
 # "arch" are replaced with OS release ("1.5", ...) and architecture
 # ("mipsel", ...)
 # Possible: any ftp url, see above.
 # Default: ftp://ftp.NetBSD.org/pub/pkgsrc/packages/NetBSD/$${arch}/$${rel}
 #BIN_INSTALL_FLAGS=
 # List of flags passed to pkg_add(8) in the bin_install package.
 # Possible: -v, -u, etc. See pkg_add(8)
 # Default: (no option)
 #LOCALPATCHES=...
 # Directory where local patches are stored. See pkgsrc/doc/pkgsrc.txt.
 # Possible: Any local directory
 # Default: none
+#
 #	Definitions used only in the packages collection
+#
 #ACROREAD_FONTPATH?=	${PREFIX}/share/fonts/X11/TTF
 # Colon separated list of additional directories for acroread7 to
 # look in for TTF/Type1 fonts.
 # Default: ${PREFIX}/share/fonts/X11/TTF
 AMANDA_USER?=	amandabackup
 # Used in the amanda packages to specify the login user and group
 # responsible for backups.
 # Possible: any user name
 # Default: amandabackup
 AMANDA_TMP?=	/tmp/amanda
 # Specifies the directory in which amanda puts its debug and temporary
 # files.
 # Default: /tmp/amanda
 AMANDA_VAR?=	${VARBASE}/amanda
 # Specifies the directory in which amanda puts its logs and status
 # files.
 # Default: ${VARBASE}/amanda
 APACHE_USER?=	www
 # Used in apache24, isap, and smb2www to specify the user
 # allowed to execute the `suexec' wrapper.  Expected to be the user the
 # httpd server normally runs as.
 # Possible: any user name
 # Default: www
 APACHE_GROUP?=	www
 # Used in apache24, squirrelmail, and iasp to specify
 # the default group of the user allowed to execute the `suexec' wrapper.
 # Expected to be the group the httpd server normally runs as.
 # Possible: any group name
 # Default: www
 #APACHE_SUEXEC_CONFIGURE_ARGS=	--suexec-uidmin=1000
 # Used in apache24 to specify additional suexec options
 # to be passed to the configure script.
 # Possible: any --suexec-* options recognized by the Apache configure script.
 # Default: not defined
 APACHE_SUEXEC_DOCROOT?=	${LOCALBASE}/share/httpd/htdocs
 # Used in apache24 to specify the document space in
 # which suexec will be allowed to work.
 # Possible: Any valid directory
 # Default: ${LOCALBASE}/share/httpd/htdocs
 ARLA_CACHE?=	${LOCALBASE}/cache
 # Used in arla to specify the location of the cache used by arla. Should
 # be on a local disk.
 # Default: ${LOCALBASE}/cache
 BIND_DIR?=		${VARBASE}/chroot/named
 # The directory for BIND system user.
 # Possible: any valid location
 # Default: ${VARBASE}/chroot/named
 BIND_GROUP?=		named
 # System group to run the BIND name server as. Used by the "bind9" package.
 # Possible: any group name
 # Default: named
 BIND_USER?=		named
 # System user to run the BIND name server as. Used by the "bind9" package.
 # Possible: any user name
 # Default: named
 CACTI_GROUP?=		cacti
 # System group to run the cacti collection cron jobs as.  Used by the
 # "cacti" package.
 # Possible: any group name
 # Default: cacti
 CACTI_USER?=		cacti
 # System user to run the cacti collection cron jobs as.  Used by the
 # "cacti" package.
 # Possible: any user name
 # Default: cacti
 CANNA_GROUP?=	daemon
 # Used in the canna-server-bin package to specify the server group.
 # Possible: any group name
 # Default: daemon
 CANNA_USER?=	daemon
 # Used in the canna-server-bin package to specify the server user.
 # Possible: any user name
 # Default: daemon
 #CDRECORD_CONF= ${PKG_SYSCONFDIR}/cdrecord.conf
 # The location of the cdrtools/cdrecord configuration file. The
 # sysutils/cdrtools pkg issues a warning if the cdrtools default of
 # /etc/default/cdrecord is changed, and the man pages are updated
 # accordingly. This is required by the cdrtools license.
 # Possible: any file name
 # Default: ${PKG_SYSCONFDIR}/cdrecord.conf
 CLAMAV_GROUP?=	clamav
 # Used in clamav to specify the group to run clamav
 # Possible: any group name
 # Default: clamav
 CLAMAV_USER?=	clamav
 # Used in clamav to specify the user to run clamav
 # Possible: any user name
 # Default: clamav
 CLAMAV_DBDIR?=	${VARBASE}/clamav
 # Used in clamav to specify the virus database directory
 # Possible: any directory writable by ${CLAMAV_USER}
 # Default: ${VARBASE}/clamav
 CONSERVER_DEFAULTHOST?=	localhost
 # Used by conserver package to specify the master server hostname.
 # Possible: any hostname
 # Default: localhost
 CONSERVER_DEFAULTPORT?=	782
 # Used by conserver package to specify the default listen port.
 # Possible: 1-65535
 # Default: 782
 CUPS_GROUP?=	lp
 # Used in cups to specify the group to run CUPS commands as.
 # Possible: any group name
 # Default: lp
 CUPS_USER?=	lp
 # Used in cups to specify the user to run CUPS commands as and to create
 # temporary files in the /var/spool/cups/tmp directory.
 # Possible: any user name
 # Default: lp
 CUPS_SYSTEM_GROUPS?=	${REAL_ROOT_GROUP}
 # A space separated list of groups to use for CUPS administration privileges.
 # Possible: any group names, except that of ${CUPS_GROUP}
 # Default: ${REAL_ROOT_GROUP}
 #CYRUS_IDLE?=
 # use METHOD for IMAP IDLE
 # Possible: poll, idled, no
 # Default: not defined
 CYRUS_GROUP?=	mail
 # Used in cyrus-imapd, cyrus-imapd21, and cyrus-sasl to
 # specify the group used for installing setuid programs.
 # Possible: any group name
 # Default: mail
 CYRUS_USER?=	cyrus
 # Used in cyrus-imapd, cyrus-imapd21, and cyrus-sasl to
 # specify the userid used for installing setuid programs.
 # Possible: any user name
 # Default: cyrus
 DAEMONTOOLS_LOG_USER?=	multilog
 # System user for daemontools logger.
 # Possible: any user name
 # Default: multilog
 DAEMONTOOLS_GROUP?=	svscan
 # System group for daemontools-related programs.
 # Possible: any group name
 # Default: svscan
 DBUS_GROUP?=	dbus
 # Used in the dbus package to specify the group to run dbus as
 # Possible: any group name
 # Default: dbus
 DBUS_USER?=	dbus
 # Used in the dbus package to specify the user to run dbus as
 # Possible: any user name
 # Default: dbus
 DEFANG_GROUP?=	defang
 # Used in the mimedefang package to specify the group to run commands as
 # Possible: any group name
 # Default: defang
 DEFANG_USER?=	defang
 # Used in the mimedefang package to specify the user to run commands as
 # Possible: any user name
 # Default: defang
 DEFANG_SPOOLDIR?=	${VARBASE}/spool/MIMEDefang
 # Location of spool and quarantined files for the mimedefang package
 # Default: ${VARBASE}/spool/MIMEDefang
 #DEFAULT_IRC_SERVER=
 # Used in ircII to set the default irc server.
 # Possible: see the list at
 # http://www.irchelp.org/irchelp/networks/servers/efnet.html
 # Default: not defined
 #DEFAULT_SERIAL_DEVICE=
 # Used to provide a default setting for the serial device for
 # various packages which communicate over the serial port.
 # Possible:  /dev/your_favorite_serial_device
 # Default: defaults for various machine_archs are set in mk/platform/${OPSYS}.mk
 DIALER_GROUP?= dialer
 # Used in the xisp package to specify the default group for the
 # xisp binaries. Also the modem device and pppd and chat should
 # have access permissions by this group.
 # Possible: dialer, dip, uucp, root, dialout, or any other group.
 # Default: dialer
 DJBDNS_AXFR_USER?=	axfrdns
 DJBDNS_CACHE_USER?=	dnscache
 DJBDNS_LOG_USER?=	dnslog
 DJBDNS_RBL_USER?=	rbldns
 DJBDNS_TINY_USER?=	tinydns
 # System users for djbdns-related programs.
 # Possible: any user names
 # Default: axfrdns, dnscache, dnslog, rbldns, tinydns
 DJBDNS_DJBDNS_GROUP?=	djbdns
 # System group for djbdns-related programs.
 # Possible: any group name
 # Default: djbdns
 DT_LAYOUT?= US
 # Used by dt package to specify the keyboard layout.
 # Possible: US, FI, FR, GER, DV
 # Default: US
 ELK_GUI?=	none
 # Used by elk to determine which GUI API modules are enabled.
 # Possible: none, or some combination of xaw and/or motif
 # Default: none
 EMACS_TYPE?=	emacs26
 # Used by emacs/modules.mk to determine which emacs version should be installed
 # and emacs lisp packages should be built for.
 # Possible: emacs26, emacs26nox, emacs25, emacs25nox, emacs21, emacs21nox, emacs20,
 #	xemacs214, xemacs215
 # Default: emacs26
 EXIM_GROUP?=	mail
 # Used in the exim package to specify the server group.
 # Possible: any group name
 # Default: mail
 EXIM_USER?=	mail
 # Used in the exim package to specify the server user.
 # Possible: any user name
 # Default: mail
 #FLUXBOX_USE_XINERAMA?=	NO
 # Compile flukebox with xinerama extensions
 # Possible: YES, NO
 # Default: NO
 #FLUXBOX_USE_KDE?=	NO
 # Compile flukebox with KDE support
 # Possible: YES, NO
 # Default: NO
 #FLUXBOX_USE_GNOME?=	NO
 # Compile flukebox with GNOME support
 # Possible: YES, NO
 # Default: NO
 #FLUXBOX_USE_XFT?=	YES
 # Compile flukebox with Xft support
 # Possible: YES, NO
 # Default: YES
 FOX_USE_XUNICODE?=	YES
 # Used in fox to build in support for Unicode by XUnicode. See
 # http://www.ab.wakwak.com/~tino/jatk/fox/ (in japanese) for more information.
 # Possible: YES, NO
 # Default: YES
 FREEWNN_USER?=	wnn
 # Used in the ja-freewnn-server-bin package to specify the Free wnn user.
 # Possible: any user name
 # Default: wnn
 FREEWNN_GROUP?=	jserver
 # Used in the ja-freewnn-server-bin package to specify the Free wnn group.
 # Possible: any group name
 # Default: jserver
 GAMES_USER?=	games
 # Used by games to own writeable material, normally in ${VARBASE}.
 # GAMES_USER has historically been "games" but in the absence of setuid
 # games, which are generally a bad idea, a games user is fairly pointless
 # and is expected to be removed in the future.
 # See also:	GAMES_GROUP, USE_GAMESGROUP
 # Possible:	any user name
 # Default:	games
 GAMES_GROUP?=	games
 # Used by games to own writeable material, normally in ${VARBASE}.
 # See also:	GAMES_USER, GAMEMODE, GAMEDIRMODE, GAMEDATAMODE, USE_GAMESGROUP
 # Possible:	any group name
 # Default:	games
 GAMEMODE?=	2555
 # Used by setgid games to install the setgid executable itself.
 # Note that USE_GAMESGROUP must be set to make the games group actually
 # exist.
 # See also:	GAMES_GROUP, GAMEDIRMODE, GAMEDATAMODE, USE_GAMESGROUP
 # Possible:	any mode
 # Default:	2555
 GAMEDIRMODE?=	775
 # Used by setgid games to allow writing to a group-owned directory for
 # e.g. logfiles. Note that this variable should only be used for
 # directories where the game needs write access at runtime; otherwise
 # stick to ${PKGDIRMODE}.
 # See also:	GAMES_USER, GAMES_GROUP, GAMEMODE, USE_GAMESGROUP
 # Possible:	any mode
 # Default:	775
 GAMEDATAMODE?=	664
 # Used by setgid games as the permissions for writeable material, such
 # as score files, normally found in ${VARBASE}.
 # See also:	GAMES_USER, GAMES_GROUP, USE_GAMESGROUP
 # Possible:	any file ownership
 # Default:	664
 GAMEGRP?=	${GAMES_GROUP}
 # Legacy form of GAMES_GROUP; should only be used in the context of
 # supporting packages that use bsd.*.mk.
 # See also:	GAMES_GROUP, USE_GAMESGROUP
 # Possible:	any group name
 # Default:	${GAMES_GROUP}
 GAMEOWN?=	${GAMES_USER}
 # Legacy form of GAMES_USER; should only be used in the context of
 # supporting packages that use bsd.*.mk.
 # See also:	GAMES_USER
 # Possible:	any user name
 # Default:	${GAMES_USER}
 #GRUB_NETWORK_CARDS=
 # Compile netboot support for the listed network interface cards into GRUB.
 # Use e.g. "rtl8139" for RealTek 8139 support or "eepro100 epic100" for
 # Intel Etherexpress Pro/100 and SMC EtherPower II support.
 # Default: not defined (-> no netboot support)
 #GRUB_PRESET_COMMAND=
 # Specifies a single command that will be embedded into GRUB's stage2 and
 # executed at boot time as a default configuration file.  This is usually
 # useful to create stage2 files with automated diskless support; you should
 # set this variable to "bootp", "dhcp" or "rarp", and use it together
 # GRUB_NETWORK_CARDS.
 # Default: not defined
 #GRUB_SCAN_ARGS=
 # Can be used to supply additional configure arguments for netboot support in
 # GRUB. Set e.g. "GRUB_NETWORK_CARDS" to "ne" and "GRUB_SCAN_ARGS" to
 # "--enable-ne-scan=0x300" to let the boot loader search for an NE 2000 ISA
 # card at I/O offset 0x300.
 # Default: not defined
 HASKELL_COMPILER?=	ghc
 # Used by haskell.mk to determine which Haskell compiler should be
 # used for building Haskell packages.
 # Possible: ghc
 # Default: ghc
 HOWL_GROUP?= howl
 # System group to run howl's mDNS responder as.
 # Possible: any group name
 # Default: howl
 HOWL_USER?= howl
 # System user to run howl's mDNS responder as.
 # Possible: any user name
 # Default: howl
 ICECAST_CHROOTDIR?=	  ${VARBASE}/chroot/icecast
 # Used in icecast2 to specify the chroot directory in which icecast
 # will be allowed to work.
 # Possible: Any valid directory
 # Default: ${VARBASE}/chroot/icecast
 #ICECAST_CHUNKLEN?=64
 # If you want a larger backlog for each client, which will allow for
 # worse network congestion or other network errors before kicking the
 # client, increase the ICECAST_CHUNKLEN value.
 # Default: (see audio/icecast1/Makefile)
 #ICECAST_SOURCE_BUFFSIZE?=8192
 # SOURCE_BUFFSIZE sets how many bytes will be read from the source
 # before trying to send this chunk to the clients. If your server will
 # take on a lot of listeners, or stream very high bitrate mpeg data,
 # like video mpeg streams, and if you system supports it, you should
 # increase this value to 65535 or something similar.
 # Default: (see audio/icecast1/Makefile)
 IMAP_UW_CCLIENT_MBOX_FMT?=	unix
 # Used in imap-uw to set the default format used by c-client programs for
 # new mailbox creation.  Check the UW IMAP documentation for more details
 # regarding the pros and cons of the various mailbox formats.
+#
 # Possible: mbox, mbx, mh, mmdf, mtx, mx, news, phile, tenex, unix
 # Default: unix
 #IMAP_UW_MAILSPOOLHOME=.MailBox
 # To default user mailboxes to their home directory,
 # specify the name of the mailbox file.
 # Possible: Any valid filename, not defined
 # Default: not defined
 IMDICTDIR?=	${VARBASE}/dict
 # Specify the directory for input method's dictionary installation.
 # Possible: any valid location
 # Default: ${VARBASE}/dict
 INN_DATA_DIR?= ${VARBASE}/news
 # Used by inn to specify the data directory.
 # Possible: any path you like
 # Default: ${VARBASE}/news
 INN_USER?=	news
 # Used by inn to specify the username
 # Possible: any valid username
 # Default: news
 INN_GROUP?=	news
 # Used by inn to specify the groupname
 # Possible: any valid groupname
 # Default: news
 IRCD_HYBRID_NICLEN?=		9
 # Used by ircd-hybrid. Sets the maximum NICK length.
 # Note that this must be consistent across your entire network.
 # Possible: any valid number
 # Default: 9
 IRCD_HYBRID_TOPICLEN?=		120
 # Used by ircd-hybrid. Sets the maximum TOPIC length.
 # Note that this must be consistent across your entire network.
 # Possible: any valid number
 # Default: 120
 #IRCD_HYBRID_SYSLOG_EVENTS?=
 # Used by ircd-hybrid. Enables syslog logging, with events you specify
 # (none is okay too, and logs the most essential messages only.)
 # Possible: kill/squit/connect/users/oper, separated by spaces, in quotes
 # Default: not defined
 IRCD_HYBRID_SYSLOG_FACILITY?=	LOG_LOCAL4
 # Used by ircd-hybrid. Specify which syslog facility the daemon should use
 # when IRCD_HYBRID_SYSLOG_EVENTS is defined.
 # Possible: any syslog facility (LOG_*)
 # Default: LOG_LOCAL4
 #IRCD_HYBRID_MAXCONN?=
 # Used by ircd-hybrid. Sets the maximum number of connections the ircd
 # can support. Note that this also twiddles the HARD_FDLIMIT.
 # This value is typically automagically set by ./configure
 # Possible: any valid number
 # Default: not defined
 IRCD_HYBRID_IRC_USER?=		irc
 # Used by ircd-hybrid. Specify the user name under which the daemon runs.
 # Possible: any user name