kshim/usb: Add build option.

Add WITH{,OUT}_LOADER_USB to build the kshim usb library. Nothing
in-tree uses it, but this will make it easier to keep building. Updated
src.conf.5 with a few extra changes...

Sponsored by:		Netflix

share/man/man5/src.conf.5

@@ -1,5 +1,5 @@
 .\" DO NOT EDIT-- this file is @generated by tools/build/options/makeman.
-.Dd April 10, 2026
+.Dd April 17, 2026
 .Dt SRC.CONF 5
 .Os
 .Sh NAME
@@ -121,6 +121,8 @@ When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
+.Va WITH_CASPER
+.It
 .Va WITH_LLVM_BINUTILS
 .El
 .It Va WITHOUT_ASSERT_DEBUG
@@ -178,6 +180,13 @@ everybody impossible.
 See also
 .Va WITH_LOADER_PXEBOOT
 for other considerations.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
+.Pp
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
@@ -211,6 +220,12 @@ and
 .Xr bhyvectl 8 .
 .Pp
 This option only affects amd64/amd64.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITH_BIND_NOW
 Build all binaries with the
 .Dv DF_BIND_NOW
@@ -223,6 +238,12 @@ and
 options provide "full" Relocation Read-Only (RELRO) support.
 With full RELRO the entire GOT is made read-only after performing relocation at
 startup, avoiding GOT overwrite attacks.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_BLACKLIST
 This option has been renamed to
 .Va WITHOUT_BLOCKLIST .
@@ -306,6 +327,12 @@ Build with branch protection enabled.
 On arm64 enable the use of pointer authentication and
 branch target identification instructions on arm64.
 These can be used to help mitigate some exploit techniques.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_BSDINSTALL
 Do not build
 .Xr bsdinstall 8 ,
@@ -369,6 +396,12 @@ CCACHE_BASEDIR='${SRCTOP:H}' MAKEOBJDIRPREFIX='${SRCTOP:H}/obj'
 See
 .Xr ccache 1
 for more configuration options.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_CCD
 Do not build
 .Xr geom_ccd 4
@@ -436,8 +469,20 @@ enabled unless an alternate compiler is provided via XCC.
 .It Va WITH_CLANG_EXTRAS
 Build additional clang and llvm tools, such as bugpoint and
 clang-format.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITH_CLANG_FORMAT
 Build clang-format.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_CLANG_FULL
 Avoid building the ARCMigrate, Rewriter and StaticAnalyzer components of
 the Clang C/C++ compiler.
@@ -446,6 +491,13 @@ Clean before building world and/or kernel.
 Note that recording a new epoch in
 .Pa .clean_build_epoch
 in the root of the source tree will also force a clean world build.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
+.Pp
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
@@ -527,6 +579,12 @@ is set explicitly)
 Compile with CTF (Compact C Type Format) data.
 CTF data encapsulates a reduced form of debugging information
 similar to DWARF and the venerable stabs and is required for DTrace.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_CUSE
 Do not build CUSE-related programs and libraries.
 .It Va WITHOUT_CXGBETOOL
@@ -541,6 +599,12 @@ Build
 .Pp
 This is a default setting on
 amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_DEBUG_FILES
 Avoid building or installing standalone debug files for each
 executable binary and shared library.
@@ -552,6 +616,12 @@ build options, but may cause the build to inexplicably fail or produce
 non-functioning binaries.
 .It Va WITH_DETECT_TZ_CHANGES
 Make the time handling code detect changes to the timezone files.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITH_DIALOG
 Do build
 .Xr dialog 1 ,
@@ -559,6 +629,12 @@ Do build
 .Xr dpv 1 ,
 and
 .Xr dpv 3 .
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_DICT
 Do not build the Webster dictionary files.
 .It Va WITH_DIRDEPS_BUILD
@@ -608,6 +684,8 @@ When set, it enforces these options:
 .Pp
 .Bl -item -compact
 .It
+.Va WITH_CASPER
+.It
 .Va WITH_INSTALL_AS_USER
 .El
 .Pp
@@ -649,6 +727,12 @@ Cache result of dirdeps.mk which can save significant time
 for subsequent builds.
 Depends on
 .Va WITH_DIRDEPS_BUILD .
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .Pp
 This must be set in the environment, make command line, or
 .Pa /etc/src-env.conf ,
@@ -661,6 +745,12 @@ Build
 and
 .Xr mkimg 1
 as bootstrap tools.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_DMAGENT
 Do not build dma Mail Transport Agent.
 .It Va WITHOUT_DOCCOMPRESS
@@ -679,11 +769,23 @@ Compile userspace DTrace code (libdtrace, dtrace(1), lockstat(1), plockstat(1))
 with address and undefined behavior sanitizers.
 Requires that Clang be used as the base system compiler
 and that the runtime support library is available.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITH_DTRACE_TESTS
 Build and install the DTrace test suite in
 .Pa /usr/tests/cddl/usr.sbin/dtrace .
 This test suite is considered experimental on architectures other than
 amd64/amd64 and running it may cause system instability.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_DYNAMICROOT
 Set this if you do not want to link
 .Pa /bin
@@ -711,6 +813,12 @@ and
 .Pp
 This is a default setting on
 amd64/amd64, arm/armv7, arm64/aarch64 and riscv/riscv64.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_ELFTOOLCHAIN_BOOTSTRAP
 Do not build ELF Tool Chain tools
 (addr2line, nm, size, strings and strip)
@@ -733,6 +841,12 @@ This includes the device tree compiler (dtc) and libfdt support library.
 .Pp
 This is a default setting on
 arm/armv7, arm64/aarch64, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_FILE
 Do not build
 .Xr file 1
@@ -775,6 +889,12 @@ Do not build
 and related utilities.
 .It Va WITH_HESIOD
 Build Hesiod support.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_HTML
 Do not build HTML docs.
 .It Va WITHOUT_HYPERV
@@ -787,6 +907,12 @@ Build or install HyperV utilities.
 .Pp
 This is a default setting on
 amd64/amd64, arm64/aarch64 and i386/i386.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_ICONV
 Do not build iconv as part of libc.
 .It Va WITHOUT_INCLUDES
@@ -837,12 +963,24 @@ command.
 The user still must set the
 .Va DESTDIR
 variable to point to a directory where the user has write permissions.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_IPFILTER
 Do not build IP Filter package.
 .It Va WITH_IPFILTER_IPFS
 Enable building the
 .Xr ipfs 8
 tool to save and restore IPFilter state tables.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_IPFW
 Do not build IPFW tools.
 .It Va WITHOUT_IPSEC_SUPPORT
@@ -896,9 +1034,21 @@ Usually this will be added to the kernel config file with:
 makeoptions	WITH_KERNEL_BIN=1
 
 though it can also be used on the command line.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITH_KERNEL_RETPOLINE
 Enable the "retpoline" mitigation for CVE-2017-5715 in the kernel
 build.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_KERNEL_SYMBOLS
 Do not install standalone kernel debug symbol files.
 This option has no effect at build time.
@@ -955,6 +1105,12 @@ runtime linker.
 .Pp
 This is a default setting on
 amd64/amd64, arm64/aarch64 and powerpc/powerpc64.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_LLD
 Do not build LLVM's lld linker.
 .It Va WITHOUT_LLDB
@@ -967,6 +1123,12 @@ Build the LLDB debugger.
 .Pp
 This is a default setting on
 amd64/amd64, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_LLD_BOOTSTRAP
 Do not build the LLD linker during the bootstrap phase of
 the build.
@@ -1010,6 +1172,12 @@ tool.
 .It Va WITH_LLVM_FULL_DEBUGINFO
 Generate full debug information for LLVM libraries and tools, which uses
 more disk space and build resources, but allows for easier debugging.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITH_LLVM_LINK_STATIC_LIBRARIES
 Link LLVM libraries (libllvm, libclang, liblldb) statically into each of
 the binaries that use them.
@@ -1017,6 +1185,12 @@ the binaries that use them.
 This means that binaries linked against these libraries, such as clang,
 ld.lld and lldb will be much larger and position dependent, but will
 start more quickly.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_LLVM_TARGET_AARCH64
 Do not build LLVM target support for AArch64.
 The
@@ -1055,11 +1229,23 @@ Build LLVM target support for BPF.
 The
 .Va LLVM_TARGET_ALL
 option should be used rather than this in most cases.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITH_LLVM_TARGET_MIPS
 Build LLVM target support for MIPS.
 The
 .Va LLVM_TARGET_ALL
 option should be used rather than this in most cases.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_LLVM_TARGET_POWERPC
 Do not build LLVM target support for PowerPC.
 The
@@ -1082,16 +1268,28 @@ boot loader.
 Enable building
 .Xr loader 8
 with support for verification based on certificates obtained from UEFI.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_LOADER_GELI
 Disable inclusion of GELI crypto support in the boot chain binaries.
 .Pp
 This is a default setting on
-powerpc/powerpc64 and powerpc/powerpc64le.
+powerpc/powerpc64.
 .It Va WITH_LOADER_GELI
 Build GELI bootloader support.
 .Pp
 This is a default setting on
-amd64/amd64, arm/armv7, arm64/aarch64, i386/i386 and riscv/riscv64.
+amd64/amd64, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc64le and riscv/riscv64.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_LOADER_IA32
 Do not build the 32-bit UEFI loader.
 .Pp
@@ -1102,26 +1300,44 @@ Build the 32-bit UEFI loader.
 .Pp
 This is a default setting on
 amd64/amd64.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_LOADER_KBOOT
 Do not build kboot, a linuxboot environment loader
 .Pp
 This is a default setting on
-arm/armv7, i386/i386, powerpc/powerpc64le and riscv/riscv64.
+arm/armv7, i386/i386 and riscv/riscv64.
 .It Va WITH_LOADER_KBOOT
 Build kboot, a linuxboot environment loader
 .Pp
 This is a default setting on
-amd64/amd64, arm64/aarch64 and powerpc/powerpc64.
+amd64/amd64, arm64/aarch64, powerpc/powerpc64 and powerpc/powerpc64le.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_LOADER_LUA
 Do not build LUA bindings for the boot loader.
 .Pp
 This is a default setting on
-powerpc/powerpc64 and powerpc/powerpc64le.
+powerpc/powerpc64.
 .It Va WITH_LOADER_LUA
 Build LUA bindings for the boot loader.
 .Pp
 This is a default setting on
-amd64/amd64, arm/armv7, arm64/aarch64, i386/i386 and riscv/riscv64.
+amd64/amd64, arm/armv7, arm64/aarch64, i386/i386, powerpc/powerpc64le and riscv/riscv64.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_LOADER_OFW
 Disable building of openfirmware bootloader components.
 .Pp
@@ -1132,6 +1348,12 @@ Build openfirmware bootloader components.
 .Pp
 This is a default setting on
 powerpc/powerpc64 and powerpc/powerpc64le.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_LOADER_PXEBOOT
 Do not build pxeboot on i386/amd64.
 When the pxeboot is too large, or unneeded, it may be disabled with this option.
@@ -1153,10 +1375,31 @@ Build ubldr.
 .Pp
 This is a default setting on
 arm/armv7 and powerpc/powerpc64.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
+.It Va WITH_LOADER_USB
+Build the usb/kshim library
+
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITH_LOADER_VERBOSE
 Build with extra verbose debugging in the loader.
 May explode already nearly too large loader over the limit.
 Use with care.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITH_LOADER_VERIEXEC
 Enable building
 .Xr loader 8
@@ -1166,6 +1409,13 @@ Depends on
 .Va WITH_BEARSSL .
 May require a larger
 .Va LOADERSIZE .
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
+.Pp
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
@@ -1186,6 +1436,12 @@ The kernel has to be built with a module to parse the manifest.
 .Pp
 Depends on
 .Va WITH_LOADER_VERIEXEC .
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITH_LOADER_VERIEXEC_VECTX
 Enable building
 .Xr loader 8
@@ -1194,6 +1450,12 @@ of loading.
 .Pp
 Depends on
 .Va WITH_LOADER_VERIEXEC .
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_LOADER_ZFS
 Do not build ZFS file system boot loader support.
 .It Va WITHOUT_LOCALES
@@ -1252,6 +1514,12 @@ The run-time options
 and
 .Dv opt.junk
 also default to false.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_MAN
 Do not build manual pages.
 When set, these options are also in effect:
@@ -1267,6 +1535,12 @@ Do not install compressed man pages.
 Only the uncompressed versions will be installed.
 .It Va WITH_MANSPLITPKG
 Split man pages into their own packages during make package.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_MAN_UTILS
 Do not build utilities for manual pages,
 .Xr apropos 1 ,
@@ -1289,6 +1563,12 @@ Depends on
 This default when
 .Va WITH_DIRDEPS_BUILD
 is set.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .Pp
 This must be set in the environment, make command line, or
 .Pa /etc/src-env.conf ,
@@ -1345,6 +1625,12 @@ The build operates as it normally would otherwise.
 This option originally invoked a different build system but that was renamed
 to
 .Va WITH_DIRDEPS_BUILD .
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .Pp
 This must be set in the environment, make command line, or
 .Pa /etc/src-env.conf ,
@@ -1364,6 +1650,12 @@ Build
 .Pp
 This is a default setting on
 amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64 and powerpc/powerpc64le.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_NETCAT
 Do not build
 .Xr nc 1
@@ -1450,12 +1742,30 @@ InfiniBand software stack, including kernel modules and userspace libraries.
 .Pp
 This is a default setting on
 amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITH_OFED_EXTRA
 Build the non-essential components of the
 .Dq "OpenFabrics Enterprise Distribution"
 Infiniband software stack, mostly examples.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITH_OPENLDAP
 Enable building LDAP support for kerberos using an openldap client from ports.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_OPENMP
 Do not build LLVM's OpenMP runtime.
 .Pp
@@ -1466,6 +1776,12 @@ Build LLVM's OpenMP runtime.
 .Pp
 This is a default setting on
 amd64/amd64, arm64/aarch64, i386/i386, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_OPENSSH
 Do not build OpenSSH.
 .It Va WITHOUT_OPENSSL
@@ -1517,6 +1833,12 @@ Include kernel TLS support in OpenSSL.
 .Pp
 This is a default setting on
 amd64/amd64, arm64/aarch64, powerpc/powerpc64 and powerpc/powerpc64le.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_PAM
 Do not build PAM library and modules.
 .Bf -symbolic
@@ -1554,6 +1876,12 @@ Position-Independent Executable (PIE).
 .Pp
 This is a default setting on
 amd64/amd64, arm64/aarch64, powerpc/powerpc64, powerpc/powerpc64le and riscv/riscv64.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_PKGBOOTSTRAP
 Do not build
 .Xr pkg 7
@@ -1592,6 +1920,12 @@ and
 support in
 .Xr ifconfig 8 ,
 by proxy.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_RBOOTD
 Do not build or install
 .Xr rbootd 8 .
@@ -1606,6 +1940,12 @@ from the kernel, boot loaders, and
 .Xr uname 1
 output, so that builds produce
 bit-for-bit identical output.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITH_REPRODUCIBLE_PATHS
 Modify the paths encoded in binary artifacts to be standard path
 
@@ -1613,12 +1953,24 @@ Normally, the actual path is encoded in the binary. However, this makes the
 build differ depending on the path it was built from. With this option enabled,
 the paths recorded are /usr/src, regardless of the actual path. With this option
 disabled, the actual paths are recorded.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_RESCUE
 Do not build
 .Xr rescue 8 .
 .It Va WITH_RETPOLINE
 Build the base system with the retpoline speculative execution
 vulnerability mitigation for CVE-2017-5715.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_ROUTED
 Do not build
 .Xr routed 8
@@ -1627,8 +1979,20 @@ utility.
 Build
 .Xr rpcbind 8
 with warmstart support.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITH_RUN_TESTS
 Run tests as part of the build.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_SCTP_SUPPORT
 Disable support in the kernel for the
 .Xr sctp 4
@@ -1652,6 +2016,12 @@ legacy docs.
 .It Va WITH_SORT_THREADS
 Enable threads in
 .Xr sort 1 .
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_SOUND
 Do not build userland sound utilities such as
 .Xr beep 1
@@ -1693,6 +2063,13 @@ This can be best thought of as auto-install to
 with some extra meta data to ensure dependencies can be tracked.
 Depends on
 .Va WITH_DIRDEPS_BUILD .
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
+.Pp
 When set, these options are also in effect:
 .Pp
 .Bl -inset -compact
@@ -1712,10 +2089,28 @@ not
 .Pa /etc/src.conf .
 .It Va WITH_STAGING_MAN
 Enable staging of man pages to stage tree.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITH_STAGING_PROG
 Enable staging of PROGs to stage tree.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITH_STALE_STAGED
 Check staged files are not stale.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_STATS
 Neither build nor install
 .Lb libstats
@@ -1728,6 +2123,12 @@ support files such as keyboard maps, fonts, and screen output maps.
 Enable use of sysroot during build.
 Depends on
 .Va WITH_DIRDEPS_BUILD .
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .Pp
 This must be set in the environment, make command line, or
 .Pa /etc/src-env.conf ,
@@ -1857,6 +2258,12 @@ Build the base system with Undefined Behavior Sanitizer (UBSan) to detect
 various kinds of undefined behavior at runtime.
 Requires that Clang be used as the base system compiler
 and that the runtime support library is available
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_UNBOUND
 Do not build
 .Xr unbound 8
@@ -1866,6 +2273,12 @@ Link libraries with --undefined-version which permits version maps to
 contain symbols that are not present in the library.
 If this is necessary to build a particular configuration, a bug is
 present and the configuration should be reported.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_UNIFIED_OBJDIR
 Use the historical object directory format for
 .Xr build 7
@@ -1915,6 +2328,12 @@ for use by
 .Pp
 Depends on
 .Va WITH_BEARSSL .
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_VI
 Do not build and install vi, view, ex and related programs.
 .It Va WITHOUT_VT
@@ -1957,6 +2376,12 @@ Build the basesystem with code to zero caller-used register contents
 on function return.
 This prevents leaking temporary values for side channel attacks.
 Additionally this reduces the number of usable ROP gadgets for attackers.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .It Va WITHOUT_ZFS
 Do not build the ZFS file system kernel module, libraries such as
 .Xr libbe 3 ,
@@ -1989,6 +2414,12 @@ This option violates
 and all other applicable standards, and is known to cause unexpected
 issues with date/time handling in many applications and programming
 languages.
+When set, it enforces these options:
+.Pp
+.Bl -item -compact
+.It
+.Va WITH_CASPER
+.El
 .El
 .Pp
 The following options accept a single value from a list of valid values.

share/mk/src.opts.mk

@@ -127,12 +127,12 @@ __DEFAULT_YES_OPTIONS = \
     LLVM_COV \
     LOADER_BIOS_TEXTONLY \
     LOADER_GELI \
+    LOADER_IA32 \
     LOADER_KBOOT \
     LOADER_LUA \
     LOADER_OFW \
     LOADER_PXEBOOT \
     LOADER_UBOOT \
-    LOADER_IA32 \
     LOCALES \
     LOCATE \
     LPR \
@@ -208,6 +208,7 @@ __DEFAULT_NO_OPTIONS = \
     DTRACE_TESTS \
     HESIOD \
     IPFILTER_IPFS \
+    LOADER_USB \
     LOADER_VERBOSE \
     LOADER_VERIEXEC_PASS_MANIFEST \
     LLVM_FULL_DEBUGINFO \

stand/Makefile

@@ -39,6 +39,7 @@ INTERP_DEPENDS+=	lua
 S.${MK_EFI}+=		efi
 S.${MK_LOADER_KBOOT}+=	kboot
 S.${MK_LOADER_UBOOT}+=	uboot
+S.${MK_LOADER_USB}+=	usb
 
 .if defined(LIB32LIST)
 LIB32DEPENDS=	${LIB32LIST:S/$/32/}

tools/build/options/WITH_LOADER_USB

@@ -0,0 +1,2 @@
+Build the usb/kshim library
+