74
74
@item PREP (PowerPC processor)
75
75
@item G3 BW PowerMac (PowerPC processor)
76
76
@item Mac99 PowerMac (PowerPC processor, in progress)
77
@item Sun4m/Sun4c/Sun4d (32-bit Sparc processor)
78
@item Sun4u/Sun4v (64-bit Sparc processor, in progress)
79
@item Malta board (32-bit and 64-bit MIPS processors)
80
@item MIPS Magnum (64-bit MIPS processor)
81
@item ARM Integrator/CP (ARM)
82
@item ARM Versatile baseboard (ARM)
83
@item ARM RealView Emulation baseboard (ARM)
77
@item Sun4m (32-bit Sparc processor)
78
@item Sun4u (64-bit Sparc processor, in progress)
79
@item Malta board (32-bit MIPS processor)
80
@item ARM Integrator/CP (ARM926E, 1026E or 946E processor)
81
@item ARM Versatile baseboard (ARM926E)
82
@item ARM RealView Emulation baseboard (ARM926EJ-S)
84
83
@item Spitz, Akita, Borzoi and Terrier PDAs (PXA270 processor)
85
@item Luminary Micro LM3S811EVB (ARM Cortex-M3)
86
@item Luminary Micro LM3S6965EVB (ARM Cortex-M3)
87
84
@item Freescale MCF5208EVB (ColdFire V2).
88
85
@item Arnewsh MCF5206 evaluation board (ColdFire V2).
89
@item Palm Tungsten|E PDA (OMAP310 processor)
90
@item N800 and N810 tablets (OMAP2420 processor)
91
@item MusicPal (MV88W8618 ARM processor)
94
For user emulation, x86, PowerPC, ARM, 32-bit MIPS, Sparc32/64 and ColdFire(m68k) CPUs are supported.
88
For user emulation, x86, PowerPC, ARM, MIPS, Sparc32/64 and ColdFire(m68k) CPUs are supported.
97
91
@chapter Installation
170
164
ENSONIQ AudioPCI ES1370 sound card
172
Intel 82801AA AC97 Audio compatible sound card
174
166
Adlib(OPL2) - Yamaha YM3812 compatible chip
176
Gravis Ultrasound GF1 sound card
178
CS4231A compatible sound card
180
168
PCI UHCI USB controller and a virtual USB hub.
183
171
SMP is supported with up to 255 CPUs.
185
Note that adlib, ac97, gus and cs4231a are only available when QEMU
186
was configured with --audio-card-list option containing the name(s) of
173
Note that adlib is only available when QEMU was configured with
189
176
QEMU uses the PC BIOS from the Bochs project and the Plex86/Bochs LGPL
192
179
QEMU uses YM3812 emulation by Tatsuyuki Satoh.
194
QEMU uses GUS emulation(GUSEMU32 @url{http://www.deinmeister.de/gusemu/})
195
by Tibor "TS" Schütz.
197
CS4231A is the chip used in Windows Sound System and GUSMAX products
201
183
@node pcsys_quickstart
226
@item -M @var{machine}
227
Select the emulated @var{machine} (@code{-M ?} for list)
209
Select the emulated machine (@code{-M ?} for list)
229
@item -fda @var{file}
230
@item -fdb @var{file}
231
213
Use @var{file} as floppy disk 0/1 image (@pxref{disk_images}). You can
232
214
use the host floppy by using @file{/dev/fd0} as filename (@pxref{host_drives}).
234
@item -hda @var{file}
235
@item -hdb @var{file}
236
@item -hdc @var{file}
237
@item -hdd @var{file}
238
220
Use @var{file} as hard disk 0, 1, 2 or 3 image (@pxref{disk_images}).
240
@item -cdrom @var{file}
241
Use @var{file} as CD-ROM image (you cannot use @option{-hdc} and
223
Use @var{file} as CD-ROM image (you cannot use @option{-hdc} and and
242
224
@option{-cdrom} at the same time). You can use the host CD-ROM by
243
225
using @file{/dev/cdrom} as filename (@pxref{host_drives}).
245
@item -drive @var{option}[,@var{option}[,@var{option}[,...]]]
247
Define a new drive. Valid options are:
250
@item file=@var{file}
251
This option defines which disk image (@pxref{disk_images}) to use with
252
this drive. If the filename contains comma, you must double it
253
(for instance, "file=my,,file" to use file "my,file").
254
@item if=@var{interface}
255
This option defines on which type on interface the drive is connected.
256
Available types are: ide, scsi, sd, mtd, floppy, pflash.
257
@item bus=@var{bus},unit=@var{unit}
258
These options define where is connected the drive by defining the bus number and
260
@item index=@var{index}
261
This option defines where is connected the drive by using an index in the list
262
of available connectors of a given interface type.
263
@item media=@var{media}
264
This option defines the type of the media: disk or cdrom.
265
@item cyls=@var{c},heads=@var{h},secs=@var{s}[,trans=@var{t}]
266
These options have the same definition as they have in @option{-hdachs}.
267
@item snapshot=@var{snapshot}
268
@var{snapshot} is "on" or "off" and allows to enable snapshot for given drive (see @option{-snapshot}).
269
@item cache=@var{cache}
270
@var{cache} is "none", "writeback", or "writethrough" and controls how the host cache is used to access block data.
271
@item format=@var{format}
272
Specify which disk @var{format} will be used rather than detecting
273
the format. Can be used to specifiy format=raw to avoid interpreting
274
an untrusted format header.
277
By default, writethrough caching is used for all block device. This means that
278
the host page cache will be used to read and write data but write notification
279
will be sent to the guest only when the data has been reported as written by
280
the storage subsystem.
282
Writeback caching will report data writes as completed as soon as the data is
283
present in the host page cache. This is safe as long as you trust your host.
284
If your host crashes or loses power, then the guest may experience data
285
corruption. When using the @option{-snapshot} option, writeback caching is
288
The host page can be avoided entirely with @option{cache=none}. This will
289
attempt to do disk IO directly to the guests memory. QEMU may still perform
290
an internal copy of the data.
292
Instead of @option{-cdrom} you can use:
294
qemu -drive file=file,index=2,media=cdrom
297
Instead of @option{-hda}, @option{-hdb}, @option{-hdc}, @option{-hdd}, you can
300
qemu -drive file=file,index=0,media=disk
301
qemu -drive file=file,index=1,media=disk
302
qemu -drive file=file,index=2,media=disk
303
qemu -drive file=file,index=3,media=disk
306
You can connect a CDROM to the slave of ide0:
308
qemu -drive file=file,if=ide,index=1,media=cdrom
311
If you don't specify the "file=" argument, you define an empty drive:
313
qemu -drive if=ide,index=1,media=cdrom
316
You can connect a SCSI disk with unit ID 6 on the bus #0:
318
qemu -drive file=file,if=scsi,bus=0,unit=6
321
Instead of @option{-fda}, @option{-fdb}, you can use:
323
qemu -drive file=file,index=0,if=floppy
324
qemu -drive file=file,index=1,if=floppy
327
By default, @var{interface} is "ide" and @var{index} is automatically
330
qemu -drive file=a -drive file=b"
337
227
@item -boot [a|c|d|n]
338
228
Boot on floppy (a), hard disk (c), CD-ROM (d), or Etherboot (n). Hard disk boot
347
237
Disable boot signature checking for floppy disks in Bochs BIOS. It may
348
238
be needed to boot from old floppy disks.
351
Set virtual RAM size to @var{megs} megabytes. Default is 128 MiB. Optionally,
352
a suffix of ``M'' or ``G'' can be used to signify a value in megabytes or
353
gigabytes respectively.
355
@item -cpu @var{model}
356
Select CPU model (-cpu ? for list and additional feature selection)
241
Set virtual RAM size to @var{megs} megabytes. Default is 128 MB.
359
244
Simulate an SMP system with @var{n} CPUs. On the PC target, up to 255
360
CPUs are supported. On Sparc32 target, Linux limits the number of usable CPUs
363
247
@item -audio-help
365
249
Will show the audio subsystem help: list of drivers, tunable
368
@item -soundhw @var{card1}[,@var{card2},...] or -soundhw all
252
@item -soundhw card1,card2,... or -soundhw all
370
254
Enable audio and selected sound hardware. Use ? to print all
371
255
available sound hardware.
432
302
the console. Therefore, you can still use QEMU to debug a Linux kernel
433
303
with a serial console.
437
Normally, QEMU uses SDL to display the VGA output. With this option,
438
QEMU can display the VGA output when in text mode using a
439
curses/ncurses interface. Nothing is displayed in graphical mode.
443
307
Do not use decorations for SDL windows and start them using the whole
444
308
available screen space. This makes the using QEMU in a dedicated desktop
445
309
workspace more convenient.
449
Disable SDL window close capability.
451
311
@item -full-screen
452
312
Start in full screen.
454
@item -vnc @var{display}[,@var{option}[,@var{option}[,...]]]
314
@item -vnc display[,option[,option[,...]]]
456
316
Normally, QEMU uses SDL to display the VGA output. With this option,
457
317
you can have QEMU listen on VNC display @var{display} and redirect the VGA
466
@item @var{host}:@var{d}
468
TCP connections will only be allowed from @var{host} on display @var{d}.
469
By convention the TCP port is 5900+@var{d}. Optionally, @var{host} can
470
be omitted in which case the server will accept connections from any host.
472
@item @code{unix}:@var{path}
326
@item @var{interface:d}
328
TCP connections will only be allowed from @var{interface} on display @var{d}.
329
By convention the TCP port is 5900+@var{d}. Optionally, @var{interface} can
330
be omitted in which case the server will bind to all interfaces.
332
@item @var{unix:path}
474
334
Connections will be allowed over UNIX domain sockets where @var{path} is the
475
335
location of a unix socket to listen for connections on.
479
VNC is initialized but not started. The monitor @code{change} command
480
can be used to later start the VNC server.
339
VNC is initialized by not started. The monitor @code{change} command can be used
340
to later start the VNC server.
491
Connect to a listening VNC client via a ``reverse'' connection. The
492
client is specified by the @var{display}. For reverse network
493
connections (@var{host}:@var{d},@code{reverse}), the @var{d} argument
494
is a TCP port number, not a display number.
498
351
Require that password based authentication is used for client connections.
499
352
The password must be set separately using the @code{change} command in the
500
353
@ref{pcsys_monitor}
504
357
Require that client use TLS when communicating with the VNC server. This
505
358
uses anonymous TLS credentials so is susceptible to a man-in-the-middle
506
359
attack. It is recommended that this option be combined with either the
507
360
@var{x509} or @var{x509verify} options.
509
@item x509=@var{/path/to/certificate/dir}
362
@item @var{x509=/path/to/certificate/dir}
511
Valid if @option{tls} is specified. Require that x509 credentials are used
364
Valid if @var{tls} is specified. Require that x509 credentials are used
512
365
for negotiating the TLS session. The server will send its x509 certificate
513
366
to the client. It is recommended that a password be set on the VNC server
514
367
to provide authentication of the client when this is used. The path following
515
368
this option specifies where the x509 certificates are to be loaded from.
516
369
See the @ref{vnc_security} section for details on generating certificates.
518
@item x509verify=@var{/path/to/certificate/dir}
371
@item @var{x509verify=/path/to/certificate/dir}
520
Valid if @option{tls} is specified. Require that x509 credentials are used
373
Valid if @var{tls} is specified. Require that x509 credentials are used
521
374
for negotiating the TLS session. The server will send its x509 certificate
522
375
to the client, and request that the client send its own x509 certificate.
523
376
The server will validate the client's certificate against the CA certificate,
556
409
Enable the USB driver (will be the default soon)
558
@item -usbdevice @var{devname}
411
@item -usbdevice devname
559
412
Add the USB device @var{devname}. @xref{usb_devices}.
564
Virtual Mouse. This will override the PS/2 mouse emulation when activated.
567
Pointer device that uses absolute coordinates (like a touchscreen). This
568
means qemu is able to report the mouse position without having to grab the
569
mouse. Also overrides the PS/2 mouse emulation when activated.
571
@item disk:[format=@var{format}]:file
572
Mass storage device based on file. The optional @var{format} argument
573
will be used rather than detecting the format. Can be used to specifiy
574
format=raw to avoid interpreting an untrusted format header.
577
Pass through the host device identified by bus.addr (Linux only).
579
@item host:vendor_id:product_id
580
Pass through the host device identified by vendor_id:product_id (Linux only).
582
@item serial:[vendorid=@var{vendor_id}][,productid=@var{product_id}]:@var{dev}
583
Serial converter to host character device @var{dev}, see @code{-serial} for the
587
Braille device. This will use BrlAPI to display the braille output on a real
591
Network adapter that supports CDC ethernet and RNDIS protocols.
601
@item -net nic[,vlan=@var{n}][,macaddr=@var{addr}][,model=@var{type}]
419
@item -net nic[,vlan=n][,macaddr=addr][,model=type]
602
420
Create a new Network Interface Card and connect it to VLAN @var{n} (@var{n}
603
421
= 0 is the default). The NIC is an ne2k_pci by default on the PC
604
422
target. Optionally, the MAC address can be changed. If no
607
425
Valid values for @var{type} are
608
426
@code{i82551}, @code{i82557b}, @code{i82559er},
609
427
@code{ne2k_pci}, @code{ne2k_isa}, @code{pcnet}, @code{rtl8139},
610
@code{e1000}, @code{smc91c111}, @code{lance} and @code{mcf_fec}.
428
@code{smc91c111}, @code{lance} and @code{mcf_fec}.
611
429
Not all devices are supported on all targets. Use -net nic,model=?
612
430
for a list of available devices for your target.
614
@item -net user[,vlan=@var{n}][,hostname=@var{name}]
432
@item -net user[,vlan=n][,hostname=name]
615
433
Use the user mode network stack which requires no administrator
616
434
privilege to run. @option{hostname=name} can be used to specify the client
617
435
hostname reported by the builtin DHCP server.
619
@item -net tap[,vlan=@var{n}][,fd=@var{h}][,ifname=@var{name}][,script=@var{file}]
437
@item -net tap[,vlan=n][,fd=h][,ifname=name][,script=file]
620
438
Connect the host TAP network interface @var{name} to VLAN @var{n} and
621
439
use the network script @var{file} to configure it. The default
622
440
network script is @file{/etc/qemu-ifup}. Use @option{script=no} to
623
441
disable script execution. If @var{name} is not
624
provided, the OS automatically provides one. @option{fd}=@var{h} can be
442
provided, the OS automatically provides one. @option{fd=h} can be
625
443
used to specify the handle of an already opened host TAP interface. Example:
695
513
/path/to/linux ubd0=/path/to/root_fs eth0=mcast
698
@item -net vde[,vlan=@var{n}][,sock=@var{socketpath}][,port=@var{n}][,group=@var{groupname}][,mode=@var{octalmode}]
699
Connect VLAN @var{n} to PORT @var{n} of a vde switch running on host and
700
listening for incoming connections on @var{socketpath}. Use GROUP @var{groupname}
701
and MODE @var{octalmode} to change default ownership and permissions for
702
communication port. This option is available only if QEMU has been compiled
703
with vde support enabled.
708
vde_switch -F -sock /tmp/myswitch
709
# launch QEMU instance
710
qemu linux.img -net nic -net vde,sock=/tmp/myswitch
714
517
Indicate that no network devices should be configured. It is used to
715
518
override the default configuration (@option{-net nic -net user}) which
716
519
is activated if no @option{-net} options are provided.
718
@item -tftp @var{dir}
719
522
When using the user mode network stack, activate a built-in TFTP
720
523
server. The files in @var{dir} will be exposed as the root of a TFTP server.
721
524
The TFTP client on the guest must be configured in binary mode (use the command
722
525
@code{bin} of the Unix TFTP client). The host IP address on the guest is as
725
@item -bootp @var{file}
726
529
When using the user mode network stack, broadcast @var{file} as the BOOTP
727
530
filename. In conjunction with @option{-tftp}, this can be used to network boot
728
531
a guest from a local directory.
785
Bluetooth(R) options:
789
Defines the function of the corresponding Bluetooth HCI. -bt options
790
are matched with the HCIs present in the chosen machine type. For
791
example when emulating a machine with only one HCI built into it, only
792
the first @code{-bt hci[...]} option is valid and defines the HCI's
793
logic. The Transport Layer is decided by the machine type. Currently
794
the machines @code{n800} and @code{n810} have one HCI and all other
798
The following three types are recognized:
802
(default) The corresponding Bluetooth HCI assumes no internal logic
803
and will not respond to any HCI commands or emit events.
805
@item -bt hci,host[:@var{id}]
806
(@code{bluez} only) The corresponding HCI passes commands / events
807
to / from the physical HCI identified by the name @var{id} (default:
808
@code{hci0}) on the computer running QEMU. Only available on @code{bluez}
809
capable systems like Linux.
811
@item -bt hci[,vlan=@var{n}]
812
Add a virtual, standard HCI that will participate in the Bluetooth
813
scatternet @var{n} (default @code{0}). Similarly to @option{-net}
814
VLANs, devices inside a bluetooth network @var{n} can only communicate
815
with other devices in the same network (scatternet).
818
@item -bt vhci[,vlan=@var{n}]
819
(Linux-host only) Create a HCI in scatternet @var{n} (default 0) attached
820
to the host bluetooth stack instead of to the emulated target. This
821
allows the host and target machines to participate in a common scatternet
822
and communicate. Requires the Linux @code{vhci} driver installed. Can
823
be used as following:
826
qemu [...OPTIONS...] -bt hci,vlan=5 -bt vhci,vlan=5
829
@item -bt device:@var{dev}[,vlan=@var{n}]
830
Emulate a bluetooth device @var{dev} and place it in network @var{n}
831
(default @code{0}). QEMU can only emulate one type of bluetooth devices
836
Virtual wireless keyboard implementing the HIDP bluetooth profile.
841
588
Linux boot specific: When using these options, you can use a given
842
589
Linux kernel without installing it in the disk image. It can be useful
843
590
for easier testing of various kernels.
847
@item -kernel @var{bzImage}
594
@item -kernel bzImage
848
595
Use @var{bzImage} as kernel image.
850
@item -append @var{cmdline}
597
@item -append cmdline
851
598
Use @var{cmdline} as kernel command line
853
@item -initrd @var{file}
854
601
Use @var{file} as initial ram disk.
889
636
[Linux only] Use host tty, e.g. @file{/dev/ttyS0}. The host serial port
890
637
parameters are set according to the emulated ones.
891
@item /dev/parport@var{N}
892
639
[Linux only, parallel port only] Use host parallel port
893
640
@var{N}. Currently SPP and EPP parallel port features can be used.
894
@item file:@var{filename}
895
Write output to @var{filename}. No character can be read.
642
Write output to filename. No character can be read.
897
644
[Unix only] standard input/output
898
@item pipe:@var{filename}
899
646
name pipe @var{filename}
901
648
[Windows only] Use host serial port @var{n}
902
@item udp:[@var{remote_host}]:@var{remote_port}[@@[@var{src_ip}]:@var{src_port}]
903
This implements UDP Net Console.
904
When @var{remote_host} or @var{src_ip} are not specified
905
they default to @code{0.0.0.0}.
906
When not using a specified @var{src_port} a random port is automatically chosen.
649
@item udp:[remote_host]:remote_port[@@[src_ip]:src_port]
650
This implements UDP Net Console. When @var{remote_host} or @var{src_ip} are not specified they default to @code{0.0.0.0}. When not using a specified @var{src_port} a random port is automatically chosen.
908
652
If you just want a simple readonly console you can use @code{netcat} or
909
653
@code{nc}, by starting qemu with: @code{-serial udp::4555} and nc as:
1030
770
Set the directory for the BIOS, VGA BIOS and keymaps.
1032
@item -vga @var{type}
1033
Select type of VGA card to emulate. Valid values for @var{type} are
1036
Cirrus Logic GD5446 Video card. All Windows versions starting from
1037
Windows 95 should recognize and use this graphic card. For optimal
1038
performances, use 16 bit color depth in the guest and the host OS.
1039
(This one is the default)
1041
Standard VGA card with Bochs VBE extensions. If your guest OS
1042
supports the VESA 2.0 VBE extensions (e.g. Windows XP) and if you want
1043
to use high resolution modes (>= 1280x1024x16) then you should use
1046
VMWare SVGA-II compatible adapter. Use it if you have sufficiently
1047
recent XFree86/XOrg server or Windows guest with a driver for this
773
Simulate a standard VGA card with Bochs VBE extensions (default is
774
Cirrus Logic GD5446 PCI VGA). If your guest OS supports the VESA 2.0
775
VBE extensions (e.g. Windows XP) and if you want to use high
776
resolution modes (>= 1280x1024x16) then you should use this option.
1052
779
Disable ACPI (Advanced Configuration and Power Interface) support. Use
1211
922
Quit the emulator.
1213
@item eject [-f] @var{device}
924
@item eject [-f] device
1214
925
Eject a removable medium (use -f to force it).
1216
@item change @var{device} @var{setting}
927
@item change device setting
1218
Change the configuration of a device.
929
Change the configuration of a device
1221
932
@item change @var{diskdevice} @var{filename}
1222
933
Change the medium for a removable disk device to point to @var{filename}. eg
1225
(qemu) change ide1-cd0 /path/to/some.iso
936
(qemu) change cdrom /path/to/some.iso
1228
@item change vnc @var{display},@var{options}
939
@item change vnc @var{display,options}
1229
940
Change the configuration of the VNC server. The valid syntax for @var{display}
1230
941
and @var{options} are described at @ref{sec_invocation}. eg
1249
@item screendump @var{filename}
960
@item screendump filename
1250
961
Save screen into PPM image @var{filename}.
1252
@item mouse_move @var{dx} @var{dy} [@var{dz}]
963
@item mouse_move dx dy [dz]
1253
964
Move the active mouse to the specified coordinates @var{dx} @var{dy}
1254
965
with optional scroll axis @var{dz}.
1256
@item mouse_button @var{val}
967
@item mouse_button val
1257
968
Change the active mouse button state @var{val} (1=L, 2=M, 4=R).
1259
@item mouse_set @var{index}
970
@item mouse_set index
1260
971
Set which mouse device receives events at given @var{index}, index
1261
972
can be obtained with
1266
@item wavcapture @var{filename} [@var{frequency} [@var{bits} [@var{channels}]]]
977
@item wavcapture filename [frequency [bits [channels]]]
1267
978
Capture audio into @var{filename}. Using sample rate @var{frequency}
1268
979
bits per sample @var{bits} and number of channels @var{channels}.
1274
985
@item Number of channels = 2 - Stereo
1277
@item stopcapture @var{index}
988
@item stopcapture index
1278
989
Stop capture with a given @var{index}, index can be obtained with
1283
@item log @var{item1}[,...]
994
@item log item1[,...]
1284
995
Activate logging of the specified items to @file{/tmp/qemu.log}.
1286
@item savevm [@var{tag}|@var{id}]
997
@item savevm [tag|id]
1287
998
Create a snapshot of the whole virtual machine. If @var{tag} is
1288
999
provided, it is used as human readable identifier. If there is already
1289
1000
a snapshot with the same tag or ID, it is replaced. More info at
1290
1001
@ref{vm_snapshots}.
1292
@item loadvm @var{tag}|@var{id}
1293
1004
Set the whole virtual machine to the snapshot identified by the tag
1294
1005
@var{tag} or the unique snapshot ID @var{id}.
1296
@item delvm @var{tag}|@var{id}
1297
1008
Delete the snapshot identified by @var{tag} or @var{id}.
1612
1307
@item write to the FAT directory on the host system while accessing it with the guest system.
1615
@node disk_images_nbd
1616
@subsection NBD access
1618
QEMU can access directly to block device exported using the Network Block Device
1622
qemu linux.img -hdb nbd:my_nbd_server.mydomain.org:1024
1625
If the NBD server is located on the same host, you can use an unix socket instead
1629
qemu linux.img -hdb nbd:unix:/tmp/my_socket
1632
In this case, the block device must be exported using qemu-nbd:
1635
qemu-nbd --socket=/tmp/my_socket my_disk.qcow2
1638
The use of qemu-nbd allows to share a disk between several guests:
1640
qemu-nbd --socket=/tmp/my_socket --share=2 my_disk.qcow2
1643
and then you can use it with two guests:
1645
qemu linux1.img -hdb nbd:unix:/tmp/my_socket
1646
qemu linux2.img -hdb nbd:unix:/tmp/my_socket
1649
1310
@node pcsys_network
1650
1311
@section Network emulation
1781
1442
USB devices can be connected with the @option{-usbdevice} commandline option
1782
1443
or the @code{usb_add} monitor command. Available devices are:
1786
1447
Virtual Mouse. This will override the PS/2 mouse emulation when activated.
1788
1449
Pointer device that uses absolute coordinates (like a touchscreen).
1789
1450
This means qemu is able to report the mouse position without having
1790
1451
to grab the mouse. Also overrides the PS/2 mouse emulation when activated.
1791
@item disk:@var{file}
1452
@item @code{disk:file}
1792
1453
Mass storage device based on @var{file} (@pxref{disk_images})
1793
@item host:@var{bus.addr}
1454
@item @code{host:bus.addr}
1794
1455
Pass through the host device identified by @var{bus.addr}
1796
@item host:@var{vendor_id:product_id}
1457
@item @code{host:vendor_id:product_id}
1797
1458
Pass through the host device identified by @var{vendor_id:product_id}
1460
@item @code{wacom-tablet}
1800
1461
Virtual Wacom PenPartner tablet. This device is similar to the @code{tablet}
1801
1462
above but it can be used with the tslib library because in addition to touch
1802
1463
coordinates it reports touch pressure.
1464
@item @code{keyboard}
1804
1465
Standard USB keyboard. Will override the PS/2 keyboard (if present).
1805
@item serial:[vendorid=@var{vendor_id}][,product_id=@var{product_id}]:@var{dev}
1806
Serial converter. This emulates an FTDI FT232BM chip connected to host character
1807
device @var{dev}. The available character devices are the same as for the
1808
@code{-serial} option. The @code{vendorid} and @code{productid} options can be
1809
used to override the default 0403:6001. For instance,
1811
usb_add serial:productid=FA00:tcp:192.168.0.2:4444
1813
will connect to tcp port 4444 of ip 192.168.0.2, and plug that to the virtual
1814
serial converter, faking a Matrix Orbital LCD Display (USB ID 0403:FA00).
1816
Braille device. This will use BrlAPI to display the braille output on a real
1818
@item net:@var{options}
1819
Network adapter that supports CDC ethernet and RNDIS protocols. @var{options}
1820
specifies NIC options as with @code{-net nic,}@var{options} (see description).
1821
For instance, user-mode networking can be used with
1823
qemu [...OPTIONS...] -net user,vlan=0 -usbdevice net:vlan=0
1825
Currently this cannot be used in machines that support PCI NICs.
1826
@item bt[:@var{hci-type}]
1827
Bluetooth dongle whose type is specified in the same format as with
1828
the @option{-bt hci} option, @pxref{bt-hcis,,allowed HCI types}. If
1829
no type is given, the HCI logic corresponds to @code{-bt hci,vlan=0}.
1830
This USB device implements the USB Transport Layer of HCI. Example
1833
qemu [...OPTIONS...] -usbdevice bt:hci,vlan=3 -bt device:keyboard,vlan=3
1837
1468
@node host_usb_devices
2131
1762
@code{x/10i $cs*16+$eip} to dump the code at the PC position.
2134
Advanced debugging options:
2136
The default single stepping behavior is step with the IRQs and timer service routines off. It is set this way because when gdb executes a single step it expects to advance beyond the current instruction. With the IRQs and and timer service routines on, a single step might jump into the one of the interrupt or exception vectors instead of executing the current instruction. This means you may hit the same breakpoint a number of times before executing the instruction gdb wants to have executed. Because there are rare circumstances where you want to single step into an interrupt vector the behavior can be controlled from GDB. There are three commands you can query and set the single step behavior:
2138
@item maintenance packet qqemu.sstepbits
2140
This will display the MASK bits used to control the single stepping IE:
2142
(gdb) maintenance packet qqemu.sstepbits
2143
sending: "qqemu.sstepbits"
2144
received: "ENABLE=1,NOIRQ=2,NOTIMER=4"
2146
@item maintenance packet qqemu.sstep
2148
This will display the current value of the mask used when single stepping IE:
2150
(gdb) maintenance packet qqemu.sstep
2151
sending: "qqemu.sstep"
2154
@item maintenance packet Qqemu.sstep=HEX_VALUE
2156
This will change the single step mask, so if wanted to enable IRQs on the single step, but not timers, you would use:
2158
(gdb) maintenance packet Qqemu.sstep=0x5
2159
sending: "qemu.sstep=0x5"
2164
1765
@node pcsys_os_specific
2165
1766
@section Target OS specific information
2339
1940
@node Sparc32 System emulator
2340
1941
@section Sparc32 System emulator
2342
Use the executable @file{qemu-system-sparc} to simulate the following
2343
Sun4m architecture machines:
2358
SPARCstation Voyager
2365
The emulation is somewhat complete. SMP up to 16 CPUs is supported,
2366
but Linux limits the number of usable CPUs to 4.
2368
It's also possible to simulate a SPARCstation 2 (sun4c architecture),
2369
SPARCserver 1000, or SPARCcenter 2000 (sun4d architecture), but these
2370
emulators are not usable yet.
2372
QEMU emulates the following sun4m/sun4c/sun4d peripherals:
1943
Use the executable @file{qemu-system-sparc} to simulate a SparcStation 5
1944
or SparcStation 10 (sun4m architecture). The emulation is somewhat complete.
1946
QEMU emulates the following sun4m peripherals:
2378
1952
TCX Frame buffer
2380
1954
Lance (Am7990) Ethernet
2382
Non Volatile RAM M48T02/M48T08
1956
Non Volatile RAM M48T08
2384
1958
Slave I/O: timers, interrupt controllers, Zilog serial ports, keyboard
2385
1959
and power/reset logic
2387
1961
ESP SCSI controller with hard disk and CD-ROM support
2389
Floppy drive (not on SS-600MP)
2391
1965
CS4231 sound device (only on SS-5, not working yet)
2394
The number of peripherals is fixed in the architecture. Maximum
2395
memory size depends on the machine type, for SS-5 it is 256MB and for
1968
The number of peripherals is fixed in the architecture.
2398
1970
Since version 0.8.2, QEMU uses OpenBIOS
2399
1971
@url{http://www.openbios.org/}. OpenBIOS is a free (GPL v2) portable
2451
2019
PCI VGA compatible card with VESA Bochs Extensions
2453
PS/2 mouse and keyboard
2455
2021
Non Volatile RAM M48T59
2457
2023
PC-compatible serial ports
2459
2 PCI IDE interfaces with hard disk and CD-ROM support
2464
@c man begin OPTIONS
2466
The following options are specific to the Sparc64 emulation:
2470
@item -prom-env string
2472
Set OpenBIOS variables in NVRAM, for example:
2475
qemu-system-sparc64 -prom-env 'auto-boot?=false'
2478
@item -M [sun4u|sun4v|Niagara]
2480
Set the emulated machine type. The default is sun4u.
2486
2026
@node MIPS System emulator
2487
2027
@section MIPS System emulator
2489
Four executables cover simulation of 32 and 64-bit MIPS systems in
2490
both endian options, @file{qemu-system-mips}, @file{qemu-system-mipsel}
2491
@file{qemu-system-mips64} and @file{qemu-system-mips64el}.
2492
Five different machine types are emulated:
2029
Use the executable @file{qemu-system-mips} to simulate a MIPS machine.
2030
Three different machine types are emulated:
2494
2032
@itemize @minus
2684
2189
WM8750 audio CODEC on I@math{^2}C and I@math{^2}S busses
2687
The Palm Tungsten|E PDA (codename "Cheetah") emulation includes the
2692
Texas Instruments OMAP310 System-on-chip (ARM 925T core)
2694
ROM and RAM memories (ROM firmware image can be loaded with -option-rom)
2696
On-chip LCD controller
2698
On-chip Real Time Clock
2700
TI TSC2102i touchscreen controller / analog-digital converter / Audio
2701
CODEC, connected through MicroWire and I@math{^2}S busses
2703
GPIO-connected matrix keypad
2705
Secure Digital card connected to OMAP MMC/SD host
2710
Nokia N800 and N810 internet tablets (known also as RX-34 and RX-44 / 48)
2711
emulation supports the following elements:
2715
Texas Instruments OMAP2420 System-on-chip (ARM 1136 core)
2717
RAM and non-volatile OneNAND Flash memories
2719
Display connected to EPSON remote framebuffer chip and OMAP on-chip
2720
display controller and a LS041y3 MIPI DBI-C controller
2722
TI TSC2301 (in N800) and TI TSC2005 (in N810) touchscreen controllers
2723
driven through SPI bus
2725
National Semiconductor LM8323-controlled qwerty keyboard driven
2726
through I@math{^2}C bus
2728
Secure Digital card connected to OMAP MMC/SD host
2730
Three OMAP on-chip UARTs and on-chip STI debugging console
2732
A Bluetooth(R) transciever and HCI connected to an UART
2734
Mentor Graphics "Inventra" dual-role USB controller embedded in a TI
2735
TUSB6010 chip - only USB host mode is supported
2737
TI TMP105 temperature sensor driven through I@math{^2}C bus
2739
TI TWL92230C power management companion with an RTC on I@math{^2}C bus
2741
Nokia RETU and TAHVO multi-purpose chips with an RTC, connected
2745
The Luminary Micro Stellaris LM3S811EVB emulation includes the following
2752
64k Flash and 8k SRAM.
2754
Timers, UARTs, ADC and I@math{^2}C interface.
2756
OSRAM Pictiva 96x16 OLED with SSD0303 controller on I@math{^2}C bus.
2759
The Luminary Micro Stellaris LM3S6965EVB emulation includes the following
2766
256k Flash and 64k SRAM.
2768
Timers, UARTs, ADC, I@math{^2}C and SSI interfaces.
2770
OSRAM Pictiva 128x64 OLED with SSD0323 controller connected via SSI.
2773
The Freecom MusicPal internet radio emulation includes the following
2778
Marvell MV88W8618 ARM core.
2780
32 MB RAM, 256 KB SRAM, 8 MB flash.
2784
MV88W8xx8 Ethernet controller
2786
MV88W8618 audio controller, WM8750 CODEC and mixer
2788
128�64 display with brightness control
2790
2 buttons, 2 navigation wheels with button function
2793
2192
A Linux 2.6 test image is available on the QEMU web site. More
2794
2193
information is available in the QEMU mailing-list archive.
3080
2452
Act as if the host page size was 'pagesize' bytes
3083
@node BSD User space emulator
3084
@section BSD User space emulator
3089
* BSD Command line options::
3093
@subsection BSD Status
3097
target Sparc64 on Sparc64: Some trivial programs work.
3100
@node BSD Quick Start
3101
@subsection Quick Start
3103
In order to launch a BSD process, QEMU needs the process executable
3104
itself and all the target dynamic libraries used by it.
3108
@item On Sparc64, you can just try to launch any process by using the native
3112
qemu-sparc64 /bin/ls
3117
@node BSD Command line options
3118
@subsection Command line options
3121
usage: qemu-sparc64 [-h] [-d] [-L path] [-s size] [-bsd type] program [arguments...]
3128
Set the library root path (default=/)
3130
Set the stack size in bytes (default=524288)
3132
Set the type of the emulated BSD Operating system. Valid values are
3133
FreeBSD, NetBSD and OpenBSD (default).
3140
Activate log (logfile=/tmp/qemu.log)
3142
Act as if the host page size was 'pagesize' bytes
3145
2455
@node compilation
3146
2456
@chapter Compilation from the sources