Kconfig 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683
  1. menu "Library routines"
  2. config ADDR_MAP
  3. bool "Enable support for non-identity virtual-physical mappings"
  4. help
  5. Enables helper code for implementing non-identity virtual-physical
  6. memory mappings for 32bit CPUs.
  7. config SYS_NUM_ADDR_MAP
  8. int "Size of the address-map table"
  9. depends on ADDR_MAP
  10. default 16
  11. help
  12. Sets the number of entries in the virtual-physical mapping table.
  13. config BCH
  14. bool "Enable Software based BCH ECC"
  15. help
  16. Enables software based BCH ECC algorithm present in lib/bch.c
  17. This is used by SoC platforms which do not have built-in ELM
  18. hardware engine required for BCH ECC correction.
  19. config BINMAN_FDT
  20. bool "Allow access to binman information in the device tree"
  21. depends on BINMAN && OF_CONTROL
  22. default y
  23. help
  24. This enables U-Boot to access information about binman entries,
  25. stored in the device tree in a binman node. Typical uses are to
  26. locate entries in the firmware image. See binman.h for the available
  27. functionality.
  28. config CC_OPTIMIZE_LIBS_FOR_SPEED
  29. bool "Optimize libraries for speed"
  30. help
  31. Enabling this option will pass "-O2" to gcc when compiling
  32. under "lib" directory.
  33. If unsure, say N.
  34. config DYNAMIC_CRC_TABLE
  35. bool "Enable Dynamic tables for CRC"
  36. help
  37. Enable this option to calculate entries for CRC tables at runtime.
  38. This can be helpful when reducing the size of the build image
  39. config HAVE_ARCH_IOMAP
  40. bool
  41. help
  42. Enable this option if architecture provides io{read,write}{8,16,32}
  43. I/O accessor functions.
  44. config HAVE_PRIVATE_LIBGCC
  45. bool
  46. config LIB_UUID
  47. bool
  48. config PRINTF
  49. bool
  50. default y
  51. config SPL_PRINTF
  52. bool
  53. select SPL_SPRINTF
  54. select SPL_STRTO if !SPL_USE_TINY_PRINTF
  55. config TPL_PRINTF
  56. bool
  57. select TPL_SPRINTF
  58. select TPL_STRTO if !TPL_USE_TINY_PRINTF
  59. config SPRINTF
  60. bool
  61. default y
  62. config SPL_SPRINTF
  63. bool
  64. config TPL_SPRINTF
  65. bool
  66. config STRTO
  67. bool
  68. default y
  69. config SPL_STRTO
  70. bool
  71. config TPL_STRTO
  72. bool
  73. config IMAGE_SPARSE
  74. bool
  75. config IMAGE_SPARSE_FILLBUF_SIZE
  76. hex "Android sparse image CHUNK_TYPE_FILL buffer size"
  77. default 0x80000
  78. depends on IMAGE_SPARSE
  79. help
  80. Set the size of the fill buffer used when processing CHUNK_TYPE_FILL
  81. chunks.
  82. config USE_PRIVATE_LIBGCC
  83. bool "Use private libgcc"
  84. depends on HAVE_PRIVATE_LIBGCC
  85. default y if HAVE_PRIVATE_LIBGCC && ((ARM && !ARM64) || MIPS)
  86. help
  87. This option allows you to use the built-in libgcc implementation
  88. of U-Boot instead of the one provided by the compiler.
  89. If unsure, say N.
  90. config SYS_HZ
  91. int
  92. default 1000
  93. help
  94. The frequency of the timer returned by get_timer().
  95. get_timer() must operate in milliseconds and this option must be
  96. set to 1000.
  97. config SPL_USE_TINY_PRINTF
  98. bool "Enable tiny printf() version in SPL"
  99. depends on SPL
  100. default y
  101. help
  102. This option enables a tiny, stripped down printf version.
  103. This should only be used in space limited environments,
  104. like SPL versions with hard memory limits. This version
  105. reduces the code size by about 2.5KiB on armv7.
  106. The supported format specifiers are %c, %s, %u/%d and %x.
  107. config TPL_USE_TINY_PRINTF
  108. bool "Enable tiny printf() version in TPL"
  109. depends on TPL
  110. default y if SPL_USE_TINY_PRINTF
  111. help
  112. This option enables a tiny, stripped down printf version.
  113. This should only be used in space limited environments,
  114. like SPL versions with hard memory limits. This version
  115. reduces the code size by about 2.5KiB on armv7.
  116. The supported format specifiers are %c, %s, %u/%d and %x.
  117. config PANIC_HANG
  118. bool "Do not reset the system on fatal error"
  119. help
  120. Define this option to stop the system in case of a fatal error,
  121. so that you have to reset it manually. This is probably NOT a good
  122. idea for an embedded system where you want the system to reboot
  123. automatically as fast as possible, but it may be useful during
  124. development since you can try to debug the conditions that lead to
  125. the situation.
  126. config REGEX
  127. bool "Enable regular expression support"
  128. default y if NET
  129. help
  130. If this variable is defined, U-Boot is linked against the
  131. SLRE (Super Light Regular Expression) library, which adds
  132. regex support to some commands, for example "env grep" and
  133. "setexpr".
  134. choice
  135. prompt "Pseudo-random library support type"
  136. depends on NET_RANDOM_ETHADDR || RANDOM_UUID || CMD_UUID || \
  137. RNG_SANDBOX || UT_LIB && AES
  138. default LIB_RAND
  139. help
  140. Select the library to provide pseudo-random number generator
  141. functions. LIB_HW_RAND supports certain hardware engines that
  142. provide this functionality. If in doubt, select LIB_RAND.
  143. config LIB_RAND
  144. bool "Pseudo-random library support"
  145. config LIB_HW_RAND
  146. bool "HW Engine for random library support"
  147. endchoice
  148. config SPL_TINY_MEMSET
  149. bool "Use a very small memset() in SPL"
  150. help
  151. The faster memset() is the arch-specific one (if available) enabled
  152. by CONFIG_USE_ARCH_MEMSET. If that is not enabled, we can still get
  153. better performance by writing a word at a time. But in very
  154. size-constrained environments even this may be too big. Enable this
  155. option to reduce code size slightly at the cost of some speed.
  156. config TPL_TINY_MEMSET
  157. bool "Use a very small memset() in TPL"
  158. help
  159. The faster memset() is the arch-specific one (if available) enabled
  160. by CONFIG_USE_ARCH_MEMSET. If that is not enabled, we can still get
  161. better performance by writing a word at a time. But in very
  162. size-constrained environments even this may be too big. Enable this
  163. option to reduce code size slightly at the cost of some speed.
  164. config RBTREE
  165. bool
  166. config BITREVERSE
  167. bool "Bit reverse library from Linux"
  168. config TRACE
  169. bool "Support for tracing of function calls and timing"
  170. imply CMD_TRACE
  171. help
  172. Enables function tracing within U-Boot. This allows recording of call
  173. traces including timing information. The command can write data to
  174. memory for exporting for analysis (e.g. using bootchart).
  175. See doc/README.trace for full details.
  176. config TRACE_BUFFER_SIZE
  177. hex "Size of trace buffer in U-Boot"
  178. depends on TRACE
  179. default 0x01000000
  180. help
  181. Sets the size of the trace buffer in U-Boot. This is allocated from
  182. memory during relocation. If this buffer is too small, the trace
  183. history will be truncated, with later records omitted.
  184. If early trace is enabled (i.e. before relocation), this buffer must
  185. be large enough to include all the data from the early trace buffer as
  186. well, since this is copied over to the main buffer during relocation.
  187. A trace record is emitted for each function call and each record is
  188. 12 bytes (see struct trace_call). A suggested minimum size is 1MB. If
  189. the size is too small then 'trace stats' will show a message saying
  190. how many records were dropped due to buffer overflow.
  191. config TRACE_CALL_DEPTH_LIMIT
  192. int "Trace call depth limit"
  193. depends on TRACE
  194. default 15
  195. help
  196. Sets the maximum call depth up to which function calls are recorded.
  197. config TRACE_EARLY
  198. bool "Enable tracing before relocation"
  199. depends on TRACE
  200. help
  201. Sometimes it is helpful to trace execution of U-Boot before
  202. relocation. This is possible by using a arch-specific, fixed buffer
  203. position in memory. Enable this option to start tracing as early as
  204. possible after U-Boot starts.
  205. config TRACE_EARLY_SIZE
  206. hex "Size of early trace buffer in U-Boot"
  207. depends on TRACE_EARLY
  208. default 0x00100000
  209. help
  210. Sets the size of the early trace buffer in bytes. This is used to hold
  211. tracing information before relocation.
  212. config TRACE_EARLY_CALL_DEPTH_LIMIT
  213. int "Early trace call depth limit"
  214. depends on TRACE_EARLY
  215. default 200
  216. help
  217. Sets the maximum call depth up to which function calls are recorded
  218. during early tracing.
  219. config TRACE_EARLY_ADDR
  220. hex "Address of early trace buffer in U-Boot"
  221. depends on TRACE_EARLY
  222. default 0x00100000
  223. help
  224. Sets the address of the early trace buffer in U-Boot. This memory
  225. must be accessible before relocation.
  226. A trace record is emitted for each function call and each record is
  227. 12 bytes (see struct trace_call). A suggested minimum size is 1MB. If
  228. the size is too small then the message which says the amount of early
  229. data being coped will the the same as the
  230. source lib/dhry/Kconfig
  231. menu "Security support"
  232. config AES
  233. bool "Support the AES algorithm"
  234. help
  235. This provides a means to encrypt and decrypt data using the AES
  236. (Advanced Encryption Standard). This algorithm uses a symetric key
  237. and is widely used as a streaming cipher. Different key lengths are
  238. supported by the algorithm but only a 128-bit key is supported at
  239. present.
  240. source lib/rsa/Kconfig
  241. source lib/crypto/Kconfig
  242. config TPM
  243. bool "Trusted Platform Module (TPM) Support"
  244. depends on DM
  245. help
  246. This enables support for TPMs which can be used to provide security
  247. features for your board. The TPM can be connected via LPC or I2C
  248. and a sandbox TPM is provided for testing purposes. Use the 'tpm'
  249. command to interactive the TPM. Driver model support is provided
  250. for the low-level TPM interface, but only one TPM is supported at
  251. a time by the TPM library.
  252. config SPL_TPM
  253. bool "Trusted Platform Module (TPM) Support in SPL"
  254. depends on SPL_DM
  255. help
  256. This enables support for TPMs which can be used to provide security
  257. features for your board. The TPM can be connected via LPC or I2C
  258. and a sandbox TPM is provided for testing purposes. Use the 'tpm'
  259. command to interactive the TPM. Driver model support is provided
  260. for the low-level TPM interface, but only one TPM is supported at
  261. a time by the TPM library.
  262. config TPL_TPM
  263. bool "Trusted Platform Module (TPM) Support in TPL"
  264. depends on TPL_DM
  265. help
  266. This enables support for TPMs which can be used to provide security
  267. features for your board. The TPM can be connected via LPC or I2C
  268. and a sandbox TPM is provided for testing purposes. Use the 'tpm'
  269. command to interactive the TPM. Driver model support is provided
  270. for the low-level TPM interface, but only one TPM is supported at
  271. a time by the TPM library.
  272. endmenu
  273. menu "Android Verified Boot"
  274. config LIBAVB
  275. bool "Android Verified Boot 2.0 support"
  276. depends on ANDROID_BOOT_IMAGE
  277. default n
  278. help
  279. This enables support of Android Verified Boot 2.0 which can be used
  280. to assure the end user of the integrity of the software running on a
  281. device. Introduces such features as boot chain of trust, rollback
  282. protection etc.
  283. endmenu
  284. menu "Hashing Support"
  285. config SHA1
  286. bool "Enable SHA1 support"
  287. help
  288. This option enables support of hashing using SHA1 algorithm.
  289. The hash is calculated in software.
  290. The SHA1 algorithm produces a 160-bit (20-byte) hash value
  291. (digest).
  292. config SHA256
  293. bool "Enable SHA256 support"
  294. help
  295. This option enables support of hashing using SHA256 algorithm.
  296. The hash is calculated in software.
  297. The SHA256 algorithm produces a 256-bit (32-byte) hash value
  298. (digest).
  299. config SHA512_ALGO
  300. bool "Enable SHA512 algorithm"
  301. help
  302. This option enables support of internal SHA512 algorithm.
  303. config SHA512
  304. bool "Enable SHA512 support"
  305. depends on SHA512_ALGO
  306. help
  307. This option enables support of hashing using SHA512 algorithm.
  308. The hash is calculated in software.
  309. The SHA512 algorithm produces a 512-bit (64-byte) hash value
  310. (digest).
  311. config SHA384
  312. bool "Enable SHA384 support"
  313. depends on SHA512_ALGO
  314. help
  315. This option enables support of hashing using SHA384 algorithm.
  316. The hash is calculated in software.
  317. The SHA384 algorithm produces a 384-bit (48-byte) hash value
  318. (digest).
  319. config SHA_HW_ACCEL
  320. bool "Enable hashing using hardware"
  321. help
  322. This option enables hardware acceleration
  323. for SHA1/SHA256 hashing.
  324. This affects the 'hash' command and also the
  325. hash_lookup_algo() function.
  326. config SHA_PROG_HW_ACCEL
  327. bool "Enable Progressive hashing support using hardware"
  328. depends on SHA_HW_ACCEL
  329. help
  330. This option enables hardware-acceleration for
  331. SHA1/SHA256 progressive hashing.
  332. Data can be streamed in a block at a time and the hashing
  333. is performed in hardware.
  334. config MD5
  335. bool "Support MD5 algorithm"
  336. help
  337. This option enables MD5 support. MD5 is an algorithm designed
  338. in 1991 that produces a 16-byte digest (or checksum) from its input
  339. data. It has a number of vulnerabilities which preclude its use in
  340. security applications, but it can be useful for providing a quick
  341. checksum of a block of data.
  342. config SPL_MD5
  343. bool "Support MD5 algorithm in SPL"
  344. help
  345. This option enables MD5 support in SPL. MD5 is an algorithm designed
  346. in 1991 that produces a 16-byte digest (or checksum) from its input
  347. data. It has a number of vulnerabilities which preclude its use in
  348. security applications, but it can be useful for providing a quick
  349. checksum of a block of data.
  350. config CRC32C
  351. bool
  352. config XXHASH
  353. bool
  354. endmenu
  355. menu "Compression Support"
  356. config LZ4
  357. bool "Enable LZ4 decompression support"
  358. help
  359. If this option is set, support for LZ4 compressed images
  360. is included. The LZ4 algorithm can run in-place as long as the
  361. compressed image is loaded to the end of the output buffer, and
  362. trades lower compression ratios for much faster decompression.
  363. NOTE: This implements the release version of the LZ4 frame
  364. format as generated by default by the 'lz4' command line tool.
  365. This is not the same as the outdated, less efficient legacy
  366. frame format currently (2015) implemented in the Linux kernel
  367. (generated by 'lz4 -l'). The two formats are incompatible.
  368. config LZMA
  369. bool "Enable LZMA decompression support"
  370. help
  371. This enables support for LZMA (Lempel-Ziv-Markov chain algorithm),
  372. a dictionary compression algorithm that provides a high compression
  373. ratio and fairly fast decompression speed. See also
  374. CONFIG_CMD_LZMADEC which provides a decode command.
  375. config LZO
  376. bool "Enable LZO decompression support"
  377. help
  378. This enables support for LZO compression algorithm.r
  379. config GZIP
  380. bool "Enable gzip decompression support"
  381. select ZLIB
  382. default y
  383. help
  384. This enables support for GZIP compression algorithm.
  385. config ZLIB_UNCOMPRESS
  386. bool "Enables zlib's uncompress() functionality"
  387. help
  388. This enables an extra zlib functionality: the uncompress() function,
  389. which decompresses data from a buffer into another, knowing their
  390. sizes. Unlike gunzip(), there is no header parsing.
  391. config GZIP_COMPRESSED
  392. bool
  393. select ZLIB
  394. config BZIP2
  395. bool "Enable bzip2 decompression support"
  396. help
  397. This enables support for BZIP2 compression algorithm.
  398. config ZLIB
  399. bool
  400. default y
  401. help
  402. This enables ZLIB compression lib.
  403. config ZSTD
  404. bool "Enable Zstandard decompression support"
  405. select XXHASH
  406. help
  407. This enables Zstandard decompression library.
  408. config SPL_LZ4
  409. bool "Enable LZ4 decompression support in SPL"
  410. help
  411. This enables support for the LZ4 decompression algorithm in SPL. LZ4
  412. is a lossless data compression algorithm that is focused on
  413. fast compression and decompression speed. It belongs to the LZ77
  414. family of byte-oriented compression schemes.
  415. config SPL_LZMA
  416. bool "Enable LZMA decompression support for SPL build"
  417. help
  418. This enables support for LZMA compression algorithm for SPL boot.
  419. config SPL_LZO
  420. bool "Enable LZO decompression support in SPL"
  421. help
  422. This enables support for LZO compression algorithm in the SPL.
  423. config SPL_GZIP
  424. bool "Enable gzip decompression support for SPL build"
  425. select SPL_ZLIB
  426. help
  427. This enables support for GZIP compression altorithm for SPL boot.
  428. config SPL_ZLIB
  429. bool
  430. help
  431. This enables compression lib for SPL boot.
  432. config SPL_ZSTD
  433. bool "Enable Zstandard decompression support in SPL"
  434. select XXHASH
  435. help
  436. This enables Zstandard decompression library in the SPL.
  437. endmenu
  438. config ERRNO_STR
  439. bool "Enable function for getting errno-related string message"
  440. help
  441. The function errno_str(int errno), returns a pointer to the errno
  442. corresponding text message:
  443. - if errno is null or positive number - a pointer to "Success" message
  444. - if errno is negative - a pointer to errno related message
  445. config HEXDUMP
  446. bool "Enable hexdump"
  447. help
  448. This enables functions for printing dumps of binary data.
  449. config OF_LIBFDT
  450. bool "Enable the FDT library"
  451. default y if OF_CONTROL
  452. help
  453. This enables the FDT library (libfdt). It provides functions for
  454. accessing binary device tree images in memory, such as adding and
  455. removing nodes and properties, scanning through the tree and finding
  456. particular compatible nodes. The library operates on a flattened
  457. version of the device tree.
  458. config OF_LIBFDT_ASSUME_MASK
  459. hex "Mask of conditions to assume for libfdt"
  460. depends on OF_LIBFDT || FIT
  461. default 0
  462. help
  463. Use this to change the assumptions made by libfdt about the
  464. device tree it is working with. A value of 0 means that no assumptions
  465. are made, and libfdt is able to deal with malicious data. A value of
  466. 0xff means all assumptions are made and any invalid data may cause
  467. unsafe execution. See FDT_ASSUME_PERFECT, etc. in libfdt_internal.h
  468. config OF_LIBFDT_OVERLAY
  469. bool "Enable the FDT library overlay support"
  470. depends on OF_LIBFDT
  471. default y if ARCH_OMAP2PLUS || ARCH_KEYSTONE
  472. help
  473. This enables the FDT library (libfdt) overlay support.
  474. config SPL_OF_LIBFDT
  475. bool "Enable the FDT library for SPL"
  476. default y if SPL_OF_CONTROL
  477. help
  478. This enables the FDT library (libfdt). It provides functions for
  479. accessing binary device tree images in memory, such as adding and
  480. removing nodes and properties, scanning through the tree and finding
  481. particular compatible nodes. The library operates on a flattened
  482. version of the device tree.
  483. config SPL_OF_LIBFDT_ASSUME_MASK
  484. hex "Mask of conditions to assume for libfdt"
  485. depends on SPL_OF_LIBFDT || FIT
  486. default 0xff
  487. help
  488. Use this to change the assumptions made by libfdt in SPL about the
  489. device tree it is working with. A value of 0 means that no assumptions
  490. are made, and libfdt is able to deal with malicious data. A value of
  491. 0xff means all assumptions are made and any invalid data may cause
  492. unsafe execution. See FDT_ASSUME_PERFECT, etc. in libfdt_internal.h
  493. config TPL_OF_LIBFDT
  494. bool "Enable the FDT library for TPL"
  495. default y if TPL_OF_CONTROL
  496. help
  497. This enables the FDT library (libfdt). It provides functions for
  498. accessing binary device tree images in memory, such as adding and
  499. removing nodes and properties, scanning through the tree and finding
  500. particular compatible nodes. The library operates on a flattened
  501. version of the device tree.
  502. config TPL_OF_LIBFDT_ASSUME_MASK
  503. hex "Mask of conditions to assume for libfdt"
  504. depends on TPL_OF_LIBFDT || FIT
  505. default 0xff
  506. help
  507. Use this to change the assumptions made by libfdt in TPL about the
  508. device tree it is working with. A value of 0 means that no assumptions
  509. are made, and libfdt is able to deal with malicious data. A value of
  510. 0xff means all assumptions are made and any invalid data may cause
  511. unsafe execution. See FDT_ASSUME_PERFECT, etc. in libfdt_internal.h
  512. config FDT_FIXUP_PARTITIONS
  513. bool "overwrite MTD partitions in DTS through defined in 'mtdparts'"
  514. depends on OF_LIBFDT
  515. depends on CMD_MTDPARTS
  516. help
  517. Allow overwriting defined partitions in the device tree blob
  518. using partition info defined in the 'mtdparts' environment
  519. variable.
  520. menu "System tables"
  521. depends on (!EFI && !SYS_COREBOOT) || (ARM && EFI_LOADER)
  522. config GENERATE_SMBIOS_TABLE
  523. bool "Generate an SMBIOS (System Management BIOS) table"
  524. default y
  525. depends on X86 || EFI_LOADER
  526. help
  527. The System Management BIOS (SMBIOS) specification addresses how
  528. motherboard and system vendors present management information about
  529. their products in a standard format by extending the BIOS interface
  530. on Intel architecture systems.
  531. Check http://www.dmtf.org/standards/smbios for details.
  532. config SMBIOS_MANUFACTURER
  533. string "SMBIOS Manufacturer"
  534. depends on GENERATE_SMBIOS_TABLE
  535. default SYS_VENDOR
  536. help
  537. The board manufacturer to store in SMBIOS structures.
  538. Change this to override the default one (CONFIG_SYS_VENDOR).
  539. config SMBIOS_PRODUCT_NAME
  540. string "SMBIOS Product Name"
  541. depends on GENERATE_SMBIOS_TABLE
  542. default SYS_BOARD
  543. help
  544. The product name to store in SMBIOS structures.
  545. Change this to override the default one (CONFIG_SYS_BOARD).
  546. endmenu
  547. config ASN1_COMPILER
  548. bool
  549. config ASN1_DECODER
  550. bool
  551. help
  552. Enable asn1 decoder library.
  553. config OID_REGISTRY
  554. bool
  555. help
  556. Enable fast lookup object identifier registry.
  557. source lib/efi/Kconfig
  558. source lib/efi_loader/Kconfig
  559. source lib/optee/Kconfig
  560. config TEST_FDTDEC
  561. bool "enable fdtdec test"
  562. depends on OF_LIBFDT
  563. config LIB_DATE
  564. bool
  565. config LIB_ELF
  566. bool
  567. help
  568. Supoort basic elf loading/validating functions.
  569. This supports fir 32 bit and 64 bit versions.
  570. endmenu