From owner-freebsd-stable@FreeBSD.ORG  Fri Feb 10 14:19:52 2012
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 16D361065672
	for <freebsd-stable@FreeBSD.org>; Fri, 10 Feb 2012 14:19:52 +0000 (UTC)
	(envelope-from gjb@FreeBSD.org)
Received: from glenbarber.us (onyx.glenbarber.us [199.48.134.227])
	by mx1.freebsd.org (Postfix) with SMTP id B7F4D8FC08
	for <freebsd-stable@FreeBSD.org>; Fri, 10 Feb 2012 14:19:51 +0000 (UTC)
Received: (qmail 56388 invoked by uid 0); 10 Feb 2012 09:19:50 -0500
Received: from unknown (HELO glenbarber.us) (75.146.225.65)
	by 0 with SMTP; 10 Feb 2012 09:19:50 -0500
Date: Fri, 10 Feb 2012 09:19:45 -0500
From: Glen Barber <gjb@FreeBSD.org>
To: Alexander Leidinger <Alexander@Leidinger.net>
Message-ID: <20120210141945.GA1848@glenbarber.us>
References: <20120210145604.Horde.ewjpSpjmRSRPNSH0YRHxgAk@webmail.leidinger.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20120210145604.Horde.ewjpSpjmRSRPNSH0YRHxgAk@webmail.leidinger.net>
X-Operating-System: FreeBSD 10.0-CURRENT amd64
User-Agent: Mutt/1.5.21 (2010-09-15)
Cc: freebsd-stable@FreeBSD.org
Subject: Re: Reducing the need to compile a custom kernel
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Feb 2012 14:19:52 -0000

On Fri, Feb 10, 2012 at 02:56:04PM +0100, Alexander Leidinger wrote:
> The question is, is this enough? Or asked differently, why are you  
> compiling a custom kernel in a production environment (so I rule out  
> debug options zhich are not enabled in GENERIC)? Are there options  
> which you add which you can not add as a module (SW_WATCHDOG comes to  
> my mind)? If yes, which ones and how important are they for you?
> 

For me, the two big ones are IPSEC (which, as I understand it, we cannot
ship with GENERIC due to export laws), and KDB_UNATTENDED.  The latter
may be a sysctl tunable, I never bothered to look.

Regards,

Glen