]> git.proxmox.com Git - mirror_qemu.git/blame - hmp-commands.hx
Merge tag 'or1k-pull-request-20220515' of https://github.com/stffrdhrn/qemu into...
[mirror_qemu.git] / hmp-commands.hx
CommitLineData
3c95fdef
PM
1HXCOMM Use DEFHEADING() to define headings in both help text and rST.
2HXCOMM Text between SRST and ERST is copied to the rST version and
3HXCOMM discarded from C version.
2313086a
BS
4HXCOMM DEF(command, args, callback, arg_string, help) is used to construct
5HXCOMM monitor commands
3c95fdef 6HXCOMM HXCOMM can be used for comments, discarded from both rST and C.
2313086a 7
2313086a 8
d7f9b689
LC
9 {
10 .name = "help|?",
129be006 11 .args_type = "name:S?",
d7f9b689
LC
12 .params = "[cmd]",
13 .help = "show the help",
2b9e3576 14 .cmd = do_help_cmd,
31785f1b 15 .flags = "p",
d7f9b689
LC
16 },
17
a6b30bca
PM
18SRST
19``help`` or ``?`` [*cmd*]
20 Show the help for all commands or just for command *cmd*.
21ERST
2313086a 22
d7f9b689
LC
23 {
24 .name = "commit",
25 .args_type = "device:B",
d7f9b689
LC
26 .params = "device|all",
27 .help = "commit changes to the disk images (if -snapshot is used) or backing files",
2b9e3576 28 .cmd = hmp_commit,
d7f9b689
LC
29 },
30
a6b30bca
PM
31SRST
32``commit``
33 Commit changes to the disk images (if -snapshot is used) or backing files.
34 If the backing file is smaller than the snapshot, then the backing file
35 will be resized to be the same size as the snapshot. If the snapshot is
36 smaller than the backing file, the backing file will not be truncated.
37 If you want the backing file to match the size of the smaller snapshot,
38 you can safely truncate it yourself once the commit operation successfully
39 completes.
40ERST
2313086a 41
d7f9b689 42 {
ff688cd2 43 .name = "quit|q",
d7f9b689 44 .args_type = "",
d7f9b689
LC
45 .params = "",
46 .help = "quit the emulator",
2b9e3576 47 .cmd = hmp_quit,
ebe34444 48 .flags = "p",
d7f9b689
LC
49 },
50
a6b30bca 51SRST
ff688cd2 52``quit`` or ``q``
a6b30bca
PM
53 Quit the emulator.
54ERST
8e8581e6
DDAG
55
56 {
57 .name = "exit_preconfig",
58 .args_type = "",
59 .params = "",
60 .help = "exit the preconfig state",
61 .cmd = hmp_exit_preconfig,
62 .flags = "p",
63 },
64
a6b30bca
PM
65SRST
66``exit_preconfig``
67 This command makes QEMU exit the preconfig state and proceed with
68 VM initialization using configuration data provided on the command line
69 and via the QMP monitor during the preconfig state. The command is only
70 available during the preconfig state (i.e. when the --preconfig command
71 line option was in use).
72ERST
2313086a 73
6d4a2b3a
CH
74 {
75 .name = "block_resize",
76 .args_type = "device:B,size:o",
77 .params = "device size",
78 .help = "resize a block image",
2b9e3576 79 .cmd = hmp_block_resize,
eb94b81a 80 .coroutine = true,
6d4a2b3a
CH
81 },
82
a6b30bca
PM
83SRST
84``block_resize``
85 Resize a block image while a guest is running. Usually requires guest
86 action to see the updated size. Resize to a lower size is supported,
87 but should be used with extreme caution. Note that this command only
88 resizes image files, it can not resize block devices like LVM volumes.
89ERST
6d4a2b3a 90
12bd451f
SH
91 {
92 .name = "block_stream",
c83c66c3
SH
93 .args_type = "device:B,speed:o?,base:s?",
94 .params = "device [speed [base]]",
12bd451f 95 .help = "copy data from a backing file into a block device",
2b9e3576 96 .cmd = hmp_block_stream,
12bd451f
SH
97 },
98
a6b30bca
PM
99SRST
100``block_stream``
101 Copy data from a backing file into a block device.
102ERST
2d47c6e9
SH
103
104 {
105 .name = "block_job_set_speed",
882ec7ce
SH
106 .args_type = "device:B,speed:o",
107 .params = "device speed",
2d47c6e9 108 .help = "set maximum speed for a background block operation",
2b9e3576 109 .cmd = hmp_block_job_set_speed,
2d47c6e9
SH
110 },
111
a6b30bca
PM
112SRST
113``block_job_set_speed``
114 Set maximum speed for a background block operation.
115ERST
370521a1
SH
116
117 {
118 .name = "block_job_cancel",
6e37fb81
PB
119 .args_type = "force:-f,device:B",
120 .params = "[-f] device",
121 .help = "stop an active background block operation (use -f"
b76e4458
LL
122 "\n\t\t\t if you want to abort the operation immediately"
123 "\n\t\t\t instead of keep running until data is in sync)",
2b9e3576 124 .cmd = hmp_block_job_cancel,
370521a1
SH
125 },
126
a6b30bca
PM
127SRST
128``block_job_cancel``
129 Stop an active background block operation (streaming, mirroring).
130ERST
aeae883b
PB
131
132 {
133 .name = "block_job_complete",
134 .args_type = "device:B",
135 .params = "device",
136 .help = "stop an active background block operation",
2b9e3576 137 .cmd = hmp_block_job_complete,
aeae883b
PB
138 },
139
a6b30bca
PM
140SRST
141``block_job_complete``
142 Manually trigger completion of an active background block operation.
143 For mirroring, this will switch the device to the destination path.
144ERST
6e37fb81
PB
145
146 {
147 .name = "block_job_pause",
148 .args_type = "device:B",
149 .params = "device",
150 .help = "pause an active background block operation",
2b9e3576 151 .cmd = hmp_block_job_pause,
6e37fb81
PB
152 },
153
a6b30bca
PM
154SRST
155``block_job_pause``
156 Pause an active block streaming operation.
157ERST
6e37fb81
PB
158
159 {
160 .name = "block_job_resume",
161 .args_type = "device:B",
162 .params = "device",
163 .help = "resume a paused background block operation",
2b9e3576 164 .cmd = hmp_block_job_resume,
6e37fb81
PB
165 },
166
a6b30bca
PM
167SRST
168``block_job_resume``
169 Resume a paused block streaming operation.
170ERST
6d4a2b3a 171
d7f9b689
LC
172 {
173 .name = "eject",
78d714e0 174 .args_type = "force:-f,device:B",
d7f9b689
LC
175 .params = "[-f] device",
176 .help = "eject a removable medium (use -f to force it)",
2b9e3576 177 .cmd = hmp_eject,
d7f9b689
LC
178 },
179
a6b30bca
PM
180SRST
181``eject [-f]`` *device*
182 Eject a removable medium (use -f to force it).
183ERST
9063f814
RH
184
185 {
186 .name = "drive_del",
f7bdc41a 187 .args_type = "id:B",
9063f814
RH
188 .params = "device",
189 .help = "remove host block device",
2b9e3576 190 .cmd = hmp_drive_del,
9063f814
RH
191 },
192
a6b30bca
PM
193SRST
194``drive_del`` *device*
195 Remove host block device. The result is that guest generated IO is no longer
196 submitted against the host device underlying the disk. Once a drive has
197 been deleted, the QEMU Block layer returns -EIO which results in IO
198 errors in the guest for applications that are reading/writing to the device.
199 These errors are always reported to the guest, regardless of the drive's error
200 actions (drive options rerror, werror).
201ERST
2313086a 202
d7f9b689
LC
203 {
204 .name = "change",
80dd5aff
DL
205 .args_type = "device:B,force:-f,target:F,arg:s?,read-only-mode:s?",
206 .params = "device [-f] filename [format [read-only-mode]]",
207 .help = "change a removable medium, optional format, use -f to force the operation",
2b9e3576 208 .cmd = hmp_change,
d7f9b689
LC
209 },
210
a6b30bca
PM
211SRST
212``change`` *device* *setting*
213 Change the configuration of a device.
214
80dd5aff 215 ``change`` *diskdevice* [-f] *filename* [*format* [*read-only-mode*]]
a6b30bca
PM
216 Change the medium for a removable disk device to point to *filename*. eg::
217
218 (qemu) change ide1-cd0 /path/to/some.iso
219
80dd5aff
DL
220 ``-f``
221 forces the operation even if the guest has locked the tray.
222
a6b30bca
PM
223 *format* is optional.
224
225 *read-only-mode* may be used to change the read-only status of the device.
226 It accepts the following values:
227
228 retain
229 Retains the current status; this is the default.
230
231 read-only
232 Makes the device read-only.
233
234 read-write
235 Makes the device writable.
236
a6b30bca
PM
237 ``change vnc password`` [*password*]
238
239 Change the password associated with the VNC server. If the new password
240 is not supplied, the monitor will prompt for it to be entered. VNC
241 passwords are only significant up to 8 letters. eg::
242
243 (qemu) change vnc password
244 Password: ********
245
246ERST
2313086a 247
d7f9b689
LC
248 {
249 .name = "screendump",
9a0a119a
KS
250 .args_type = "filename:F,format:-fs,device:s?,head:i?",
251 .params = "filename [-f format] [device [head]]",
252 .help = "save screen from head 'head' of display device 'device'"
253 "in specified format 'format' as image 'filename'."
254 "Currently only 'png' and 'ppm' formats are supported.",
255 .cmd = hmp_screendump,
0d9b90ce 256 .coroutine = true,
d7f9b689
LC
257 },
258
a6b30bca
PM
259SRST
260``screendump`` *filename*
261 Save screen into PPM image *filename*.
262ERST
2313086a 263
d7f9b689
LC
264 {
265 .name = "logfile",
266 .args_type = "filename:F",
d7f9b689
LC
267 .params = "filename",
268 .help = "output logs to 'filename'",
2b9e3576 269 .cmd = hmp_logfile,
d7f9b689
LC
270 },
271
a6b30bca
PM
272SRST
273``logfile`` *filename*
274 Output logs to *filename*.
275ERST
2313086a 276
22890ab5
PS
277 {
278 .name = "trace-event",
77e2b172
LV
279 .args_type = "name:s,option:b,vcpu:i?",
280 .params = "name on|off [vcpu]",
281 .help = "changes status of a specific trace event "
282 "(vcpu: vCPU to set, default is all)",
2b9e3576 283 .cmd = hmp_trace_event,
987bd270 284 .command_completion = trace_event_completion,
22890ab5
PS
285 },
286
a6b30bca
PM
287SRST
288``trace-event``
289 changes status of a trace event
290ERST
c5ceb523 291
c45a8168 292#if defined(CONFIG_TRACE_SIMPLE)
c5ceb523
SH
293 {
294 .name = "trace-file",
295 .args_type = "op:s?,arg:F?",
296 .params = "on|off|flush|set [arg]",
297 .help = "open, close, or flush trace file, or set a new file name",
2b9e3576 298 .cmd = hmp_trace_file,
c5ceb523
SH
299 },
300
a6b30bca
PM
301SRST
302``trace-file on|off|flush``
303 Open, close, or flush the trace file. If no argument is given, the
304 status of the trace file is displayed.
305ERST
22890ab5
PS
306#endif
307
d7f9b689
LC
308 {
309 .name = "log",
310 .args_type = "items:s",
d7f9b689 311 .params = "item1[,...]",
989b697d 312 .help = "activate logging of the specified items",
2b9e3576 313 .cmd = hmp_log,
d7f9b689
LC
314 },
315
a6b30bca
PM
316SRST
317``log`` *item1*\ [,...]
318 Activate logging of the specified items.
319ERST
2313086a 320
d7f9b689
LC
321 {
322 .name = "savevm",
323 .args_type = "name:s?",
6ca08045
DHB
324 .params = "tag",
325 .help = "save a VM snapshot. If no tag is provided, a new snapshot is created",
2b9e3576 326 .cmd = hmp_savevm,
d7f9b689
LC
327 },
328
a6b30bca
PM
329SRST
330``savevm`` *tag*
331 Create a snapshot of the whole virtual machine. If *tag* is
332 provided, it is used as human readable identifier. If there is already
333 a snapshot with the same tag, it is replaced. More info at
334 :ref:`vm_005fsnapshots`.
335
336 Since 4.0, savevm stopped allowing the snapshot id to be set, accepting
337 only *tag* as parameter.
338ERST
2313086a 339
d7f9b689
LC
340 {
341 .name = "loadvm",
342 .args_type = "name:s",
6ca08045
DHB
343 .params = "tag",
344 .help = "restore a VM snapshot from its tag",
2b9e3576 345 .cmd = hmp_loadvm,
b21631f3 346 .command_completion = loadvm_completion,
d7f9b689
LC
347 },
348
a6b30bca
PM
349SRST
350``loadvm`` *tag*
351 Set the whole virtual machine to the snapshot identified by the tag
352 *tag*.
353
354 Since 4.0, loadvm stopped accepting snapshot id as parameter.
355ERST
2313086a 356
d7f9b689
LC
357 {
358 .name = "delvm",
359 .args_type = "name:s",
6ca08045
DHB
360 .params = "tag",
361 .help = "delete a VM snapshot from its tag",
2b9e3576 362 .cmd = hmp_delvm,
b21631f3 363 .command_completion = delvm_completion,
d7f9b689
LC
364 },
365
a6b30bca
PM
366SRST
367``delvm`` *tag*
368 Delete the snapshot identified by *tag*.
369
370 Since 4.0, delvm stopped deleting snapshots by snapshot id, accepting
371 only *tag* as parameter.
372ERST
2313086a 373
d7f9b689
LC
374 {
375 .name = "singlestep",
376 .args_type = "option:s?",
d7f9b689
LC
377 .params = "[on|off]",
378 .help = "run emulation in singlestep mode or switch to normal mode",
2b9e3576 379 .cmd = hmp_singlestep,
d7f9b689
LC
380 },
381
a6b30bca
PM
382SRST
383``singlestep [off]``
384 Run the emulation in single step mode.
385 If called with option off, the emulation returns to normal mode.
386ERST
2313086a 387
d7f9b689 388 {
de4cf848 389 .name = "stop|s",
d7f9b689 390 .args_type = "",
d7f9b689
LC
391 .params = "",
392 .help = "stop emulation",
2b9e3576 393 .cmd = hmp_stop,
d7f9b689
LC
394 },
395
a6b30bca 396SRST
de4cf848 397``stop`` or ``s``
a6b30bca
PM
398 Stop emulation.
399ERST
2313086a 400
d7f9b689 401 {
ff688cd2 402 .name = "cont|c",
d7f9b689 403 .args_type = "",
d7f9b689
LC
404 .params = "",
405 .help = "resume emulation",
2b9e3576 406 .cmd = hmp_cont,
d7f9b689
LC
407 },
408
a6b30bca 409SRST
ff688cd2 410``cont`` or ``c``
a6b30bca
PM
411 Resume emulation.
412ERST
9b9df25a
GH
413
414 {
415 .name = "system_wakeup",
416 .args_type = "",
417 .params = "",
418 .help = "wakeup guest from suspend",
2b9e3576 419 .cmd = hmp_system_wakeup,
9b9df25a
GH
420 },
421
a6b30bca
PM
422SRST
423``system_wakeup``
424 Wakeup guest from suspend.
425ERST
2313086a 426
d7f9b689
LC
427 {
428 .name = "gdbserver",
429 .args_type = "device:s?",
d7f9b689
LC
430 .params = "[device]",
431 .help = "start gdbserver on given device (default 'tcp::1234'), stop with 'none'",
2b9e3576 432 .cmd = hmp_gdbserver,
d7f9b689
LC
433 },
434
a6b30bca
PM
435SRST
436``gdbserver`` [*port*]
437 Start gdbserver session (default *port*\=1234)
438ERST
2313086a 439
d7f9b689
LC
440 {
441 .name = "x",
442 .args_type = "fmt:/,addr:l",
d7f9b689
LC
443 .params = "/fmt addr",
444 .help = "virtual memory dump starting at 'addr'",
2b9e3576 445 .cmd = hmp_memory_dump,
d7f9b689
LC
446 },
447
a6b30bca
PM
448SRST
449``x/``\ *fmt* *addr*
450 Virtual memory dump starting at *addr*.
451ERST
2313086a 452
d7f9b689
LC
453 {
454 .name = "xp",
455 .args_type = "fmt:/,addr:l",
d7f9b689
LC
456 .params = "/fmt addr",
457 .help = "physical memory dump starting at 'addr'",
2b9e3576 458 .cmd = hmp_physical_memory_dump,
d7f9b689
LC
459 },
460
a6b30bca
PM
461SRST
462``xp /``\ *fmt* *addr*
463 Physical memory dump starting at *addr*.
464
465 *fmt* is a format which tells the command how to format the
466 data. Its syntax is: ``/{count}{format}{size}``
467
468 *count*
469 is the number of items to be dumped.
470 *format*
471 can be x (hex), d (signed decimal), u (unsigned decimal), o (octal),
472 c (char) or i (asm instruction).
473 *size*
474 can be b (8 bits), h (16 bits), w (32 bits) or g (64 bits). On x86,
475 ``h`` or ``w`` can be specified with the ``i`` format to
476 respectively select 16 or 32 bit code instruction size.
477
478 Examples:
479
480 Dump 10 instructions at the current instruction pointer::
481
482 (qemu) x/10i $eip
483 0x90107063: ret
484 0x90107064: sti
485 0x90107065: lea 0x0(%esi,1),%esi
486 0x90107069: lea 0x0(%edi,1),%edi
487 0x90107070: ret
488 0x90107071: jmp 0x90107080
489 0x90107073: nop
490 0x90107074: nop
491 0x90107075: nop
492 0x90107076: nop
493
494 Dump 80 16 bit values at the start of the video memory::
495
496 (qemu) xp/80hx 0xb8000
497 0x000b8000: 0x0b50 0x0b6c 0x0b65 0x0b78 0x0b38 0x0b36 0x0b2f 0x0b42
498 0x000b8010: 0x0b6f 0x0b63 0x0b68 0x0b73 0x0b20 0x0b56 0x0b47 0x0b41
499 0x000b8020: 0x0b42 0x0b69 0x0b6f 0x0b73 0x0b20 0x0b63 0x0b75 0x0b72
500 0x000b8030: 0x0b72 0x0b65 0x0b6e 0x0b74 0x0b2d 0x0b63 0x0b76 0x0b73
501 0x000b8040: 0x0b20 0x0b30 0x0b35 0x0b20 0x0b4e 0x0b6f 0x0b76 0x0b20
502 0x000b8050: 0x0b32 0x0b30 0x0b30 0x0b33 0x0720 0x0720 0x0720 0x0720
503 0x000b8060: 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720
504 0x000b8070: 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720
505 0x000b8080: 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720
506 0x000b8090: 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720
507
508ERST
e9628441
PB
509
510 {
511 .name = "gpa2hva",
512 .args_type = "addr:l",
513 .params = "addr",
514 .help = "print the host virtual address corresponding to a guest physical address",
515 .cmd = hmp_gpa2hva,
516 },
517
a6b30bca
PM
518SRST
519``gpa2hva`` *addr*
520 Print the host virtual address at which the guest's physical address *addr*
521 is mapped.
522ERST
e9628441
PB
523
524#ifdef CONFIG_LINUX
525 {
526 .name = "gpa2hpa",
527 .args_type = "addr:l",
528 .params = "addr",
529 .help = "print the host physical address corresponding to a guest physical address",
530 .cmd = hmp_gpa2hpa,
531 },
532#endif
533
a6b30bca
PM
534SRST
535``gpa2hpa`` *addr*
536 Print the host physical address at which the guest's physical address *addr*
537 is mapped.
538ERST
574d9693
DDAG
539
540 {
541 .name = "gva2gpa",
542 .args_type = "addr:l",
543 .params = "addr",
544 .help = "print the guest physical address corresponding to a guest virtual address",
545 .cmd = hmp_gva2gpa,
546 },
547
a6b30bca
PM
548SRST
549``gva2gpa`` *addr*
550 Print the guest physical address at which the guest's virtual address *addr*
551 is mapped based on the mapping for the current CPU.
552ERST
2313086a 553
d7f9b689 554 {
ff688cd2 555 .name = "print|p",
d7f9b689 556 .args_type = "fmt:/,val:l",
d7f9b689
LC
557 .params = "/fmt expr",
558 .help = "print expression value (use $reg for CPU register access)",
2b9e3576 559 .cmd = do_print,
d7f9b689
LC
560 },
561
a6b30bca 562SRST
ff688cd2 563``print`` or ``p/``\ *fmt* *expr*
a6b30bca
PM
564 Print expression value. Only the *format* part of *fmt* is
565 used.
566ERST
2313086a 567
d7f9b689
LC
568 {
569 .name = "i",
570 .args_type = "fmt:/,addr:i,index:i.",
d7f9b689
LC
571 .params = "/fmt addr",
572 .help = "I/O port read",
2b9e3576 573 .cmd = hmp_ioport_read,
d7f9b689
LC
574 },
575
a6b30bca
PM
576SRST
577``i/``\ *fmt* *addr* [.\ *index*\ ]
578 Read I/O port.
579ERST
2313086a 580
d7f9b689
LC
581 {
582 .name = "o",
583 .args_type = "fmt:/,addr:i,val:i",
d7f9b689
LC
584 .params = "/fmt addr value",
585 .help = "I/O port write",
2b9e3576 586 .cmd = hmp_ioport_write,
d7f9b689
LC
587 },
588
a6b30bca
PM
589SRST
590``o/``\ *fmt* *addr* *val*
591 Write to I/O port.
592ERST
2313086a 593
d7f9b689
LC
594 {
595 .name = "sendkey",
2ef20c15 596 .args_type = "keys:s,hold-time:i?",
d7f9b689
LC
597 .params = "keys [hold_ms]",
598 .help = "send keys to the VM (e.g. 'sendkey ctrl-alt-f1', default hold time=100 ms)",
2b9e3576 599 .cmd = hmp_sendkey,
29136cd8 600 .command_completion = sendkey_completion,
d7f9b689
LC
601 },
602
a6b30bca
PM
603SRST
604``sendkey`` *keys*
605 Send *keys* to the guest. *keys* could be the name of the
606 key or the raw value in hexadecimal format. Use ``-`` to press
607 several keys simultaneously. Example::
608
609 sendkey ctrl-alt-f1
610
611 This command is useful to send keys that your graphical user interface
612 intercepts at low level, such as ``ctrl-alt-f1`` in X Window.
613ERST
dd12e1bb
EC
614 {
615 .name = "sync-profile",
616 .args_type = "op:s?",
617 .params = "[on|off|reset]",
618 .help = "enable, disable or reset synchronization profiling. "
619 "With no arguments, prints whether profiling is on or off.",
620 .cmd = hmp_sync_profile,
621 },
622
a6b30bca
PM
623SRST
624``sync-profile [on|off|reset]``
625 Enable, disable or reset synchronization profiling. With no arguments, prints
626 whether profiling is on or off.
627ERST
2313086a 628
d7f9b689
LC
629 {
630 .name = "system_reset",
631 .args_type = "",
d7f9b689
LC
632 .params = "",
633 .help = "reset the system",
2b9e3576 634 .cmd = hmp_system_reset,
d7f9b689
LC
635 },
636
a6b30bca
PM
637SRST
638``system_reset``
639 Reset the system.
640ERST
2313086a 641
d7f9b689
LC
642 {
643 .name = "system_powerdown",
644 .args_type = "",
d7f9b689
LC
645 .params = "",
646 .help = "send system power down event",
2b9e3576 647 .cmd = hmp_system_powerdown,
d7f9b689
LC
648 },
649
a6b30bca
PM
650SRST
651``system_powerdown``
652 Power down the system (if supported).
653ERST
2313086a 654
d7f9b689
LC
655 {
656 .name = "sum",
657 .args_type = "start:i,size:i",
d7f9b689
LC
658 .params = "addr size",
659 .help = "compute the checksum of a memory region",
2b9e3576 660 .cmd = hmp_sum,
d7f9b689
LC
661 },
662
a6b30bca
PM
663SRST
664``sum`` *addr* *size*
665 Compute the checksum of a memory region.
666ERST
2313086a 667
d7f9b689
LC
668 {
669 .name = "device_add",
c7e4e8ce
MA
670 .args_type = "device:O",
671 .params = "driver[,prop=value][,...]",
d7f9b689 672 .help = "add device, like -device on the command line",
2b9e3576 673 .cmd = hmp_device_add,
2da1b3ab 674 .command_completion = device_add_completion,
d7f9b689
LC
675 },
676
a6b30bca
PM
677SRST
678``device_add`` *config*
679 Add device.
680ERST
3418bd25 681
d7f9b689
LC
682 {
683 .name = "device_del",
684 .args_type = "id:s",
d7f9b689
LC
685 .params = "device",
686 .help = "remove device",
2b9e3576 687 .cmd = hmp_device_del,
2da1b3ab 688 .command_completion = device_del_completion,
d7f9b689
LC
689 },
690
a6b30bca
PM
691SRST
692``device_del`` *id*
693 Remove device *id*. *id* may be a short ID
694 or a QOM object path.
695ERST
3418bd25 696
d7f9b689
LC
697 {
698 .name = "cpu",
699 .args_type = "index:i",
d7f9b689
LC
700 .params = "index",
701 .help = "set the default CPU",
2b9e3576 702 .cmd = hmp_cpu,
d7f9b689 703 },
3418bd25 704
a6b30bca
PM
705SRST
706``cpu`` *index*
707 Set the default CPU.
708ERST
2313086a 709
d7f9b689
LC
710 {
711 .name = "mouse_move",
712 .args_type = "dx_str:s,dy_str:s,dz_str:s?",
d7f9b689
LC
713 .params = "dx dy [dz]",
714 .help = "send mouse move events",
2b9e3576 715 .cmd = hmp_mouse_move,
d7f9b689
LC
716 },
717
a6b30bca
PM
718SRST
719``mouse_move`` *dx* *dy* [*dz*]
720 Move the active mouse to the specified coordinates *dx* *dy*
721 with optional scroll axis *dz*.
722ERST
2313086a 723
d7f9b689
LC
724 {
725 .name = "mouse_button",
726 .args_type = "button_state:i",
d7f9b689
LC
727 .params = "state",
728 .help = "change mouse button state (1=L, 2=M, 4=R)",
2b9e3576 729 .cmd = hmp_mouse_button,
d7f9b689
LC
730 },
731
a6b30bca
PM
732SRST
733``mouse_button`` *val*
734 Change the active mouse button state *val* (1=L, 2=M, 4=R).
735ERST
2313086a 736
d7f9b689
LC
737 {
738 .name = "mouse_set",
739 .args_type = "index:i",
d7f9b689
LC
740 .params = "index",
741 .help = "set which mouse device receives events",
2b9e3576 742 .cmd = hmp_mouse_set,
d7f9b689
LC
743 },
744
a6b30bca
PM
745SRST
746``mouse_set`` *index*
747 Set which mouse device receives events at given *index*, index
748 can be obtained with::
749
750 info mice
751
752ERST
2313086a 753
d7f9b689
LC
754 {
755 .name = "wavcapture",
f0b9f36d
KZ
756 .args_type = "path:F,audiodev:s,freq:i?,bits:i?,nchannels:i?",
757 .params = "path audiodev [frequency [bits [channels]]]",
d7f9b689 758 .help = "capture audio to a wave file (default frequency=44100 bits=16 channels=2)",
2b9e3576 759 .cmd = hmp_wavcapture,
d7f9b689 760 },
a6b30bca
PM
761SRST
762``wavcapture`` *filename* *audiodev* [*frequency* [*bits* [*channels*]]]
763 Capture audio into *filename* from *audiodev*, using sample rate
764 *frequency* bits per sample *bits* and number of channels
765 *channels*.
766
767 Defaults:
768
769 - Sample rate = 44100 Hz - CD quality
770 - Bits = 16
771 - Number of channels = 2 - Stereo
772ERST
2313086a 773
d7f9b689
LC
774 {
775 .name = "stopcapture",
776 .args_type = "n:i",
d7f9b689
LC
777 .params = "capture index",
778 .help = "stop capture",
2b9e3576 779 .cmd = hmp_stopcapture,
d7f9b689 780 },
a6b30bca
PM
781SRST
782``stopcapture`` *index*
783 Stop capture with a given *index*, index can be obtained with::
784
785 info capture
786
787ERST
2313086a 788
d7f9b689
LC
789 {
790 .name = "memsave",
791 .args_type = "val:l,size:i,filename:s",
d7f9b689
LC
792 .params = "addr size file",
793 .help = "save to disk virtual memory dump starting at 'addr' of size 'size'",
2b9e3576 794 .cmd = hmp_memsave,
d7f9b689
LC
795 },
796
a6b30bca
PM
797SRST
798``memsave`` *addr* *size* *file*
799 save to disk virtual memory dump starting at *addr* of size *size*.
800ERST
2313086a 801
d7f9b689
LC
802 {
803 .name = "pmemsave",
804 .args_type = "val:l,size:i,filename:s",
d7f9b689
LC
805 .params = "addr size file",
806 .help = "save to disk physical memory dump starting at 'addr' of size 'size'",
2b9e3576 807 .cmd = hmp_pmemsave,
d7f9b689
LC
808 },
809
a6b30bca
PM
810SRST
811``pmemsave`` *addr* *size* *file*
812 save to disk physical memory dump starting at *addr* of size *size*.
813ERST
2313086a 814
d7f9b689
LC
815 {
816 .name = "boot_set",
817 .args_type = "bootdevice:s",
d7f9b689
LC
818 .params = "bootdevice",
819 .help = "define new values for the boot device list",
2b9e3576 820 .cmd = hmp_boot_set,
d7f9b689
LC
821 },
822
a6b30bca
PM
823SRST
824``boot_set`` *bootdevicelist*
825 Define new values for the boot device list. Those values will override
826 the values specified on the command line through the ``-boot`` option.
827
828 The values that can be specified here depend on the machine type, but are
829 the same that can be specified in the ``-boot`` command line option.
830ERST
2313086a 831
d7f9b689
LC
832 {
833 .name = "nmi",
e9b4b432
LC
834 .args_type = "",
835 .params = "",
9cb805fd 836 .help = "inject an NMI",
2b9e3576 837 .cmd = hmp_nmi,
d7f9b689 838 },
a6b30bca
PM
839SRST
840``nmi`` *cpu*
841 Inject an NMI on the default CPU (x86/s390) or all CPUs (ppc64).
842ERST
1f590cf9
LL
843
844 {
3949e594 845 .name = "ringbuf_write",
1f590cf9
LL
846 .args_type = "device:s,data:s",
847 .params = "device data",
3949e594 848 .help = "Write to a ring buffer character device",
2b9e3576 849 .cmd = hmp_ringbuf_write,
8e597779 850 .command_completion = ringbuf_write_completion,
1f590cf9
LL
851 },
852
a6b30bca
PM
853SRST
854``ringbuf_write`` *device* *data*
855 Write *data* to ring buffer character device *device*.
856 *data* must be a UTF-8 string.
857ERST
49b6d722
LL
858
859 {
3949e594 860 .name = "ringbuf_read",
49b6d722
LL
861 .args_type = "device:s,size:i",
862 .params = "device size",
3949e594 863 .help = "Read from a ring buffer character device",
2b9e3576 864 .cmd = hmp_ringbuf_read,
8e597779 865 .command_completion = ringbuf_write_completion,
49b6d722
LL
866 },
867
a6b30bca
PM
868SRST
869``ringbuf_read`` *device*
870 Read and print up to *size* bytes from ring buffer character
871 device *device*.
872 Certain non-printable characters are printed ``\uXXXX``, where ``XXXX`` is the
873 character code in hexadecimal. Character ``\`` is printed ``\\``.
874 Bug: can screw up when the buffer contains invalid UTF-8 sequences,
875 NUL characters, after the ring buffer lost data, and when reading
876 stops because the size limit is reached.
877ERST
544f6ea3
DDAG
878
879 {
880 .name = "announce_self",
c6644548
DDAG
881 .args_type = "interfaces:s?,id:s?",
882 .params = "[interfaces] [id]",
544f6ea3
DDAG
883 .help = "Trigger GARP/RARP announcements",
884 .cmd = hmp_announce_self,
885 },
886
a6b30bca
PM
887SRST
888``announce_self``
889 Trigger a round of GARP/RARP broadcasts; this is useful for explicitly
890 updating the network infrastructure after a reconfiguration or some forms
891 of migration. The timings of the round are set by the migration announce
892 parameters. An optional comma separated *interfaces* list restricts the
893 announce to the named set of interfaces. An optional *id* can be used to
894 start a separate announce timer and to change the parameters of it later.
895ERST
2313086a 896
d7f9b689
LC
897 {
898 .name = "migrate",
7a4da28b
PX
899 .args_type = "detach:-d,blk:-b,inc:-i,resume:-r,uri:s",
900 .params = "[-d] [-b] [-i] [-r] uri",
fbc3d96c
LS
901 .help = "migrate to URI (using -d to not wait for completion)"
902 "\n\t\t\t -b for migration without shared storage with"
903 " full copy of disk\n\t\t\t -i for migration without "
904 "shared storage with incremental copy of disk "
7a4da28b
PX
905 "(base image shared between src and destination)"
906 "\n\t\t\t -r to resume a paused migration",
2b9e3576 907 .cmd = hmp_migrate,
d7f9b689
LC
908 },
909
fbc3d96c 910
a6b30bca
PM
911SRST
912``migrate [-d] [-b] [-i]`` *uri*
913 Migrate to *uri* (using -d to not wait for completion).
914
915 ``-b``
916 for migration with full copy of disk
917 ``-i``
918 for migration with incremental copy of disk (base image is shared)
919ERST
2313086a 920
d7f9b689
LC
921 {
922 .name = "migrate_cancel",
923 .args_type = "",
d7f9b689
LC
924 .params = "",
925 .help = "cancel the current VM migration",
2b9e3576 926 .cmd = hmp_migrate_cancel,
d7f9b689
LC
927 },
928
a6b30bca
PM
929SRST
930``migrate_cancel``
931 Cancel the current VM migration.
932ERST
9e1ba4cc 933
94ae12cb
DDAG
934 {
935 .name = "migrate_continue",
936 .args_type = "state:s",
937 .params = "state",
938 .help = "Continue migration from the given paused state",
939 .cmd = hmp_migrate_continue,
940 },
a6b30bca
PM
941SRST
942``migrate_continue`` *state*
943 Continue migration from the paused state *state*
944ERST
bf1ae1f4
DDAG
945
946 {
947 .name = "migrate_incoming",
948 .args_type = "uri:s",
949 .params = "uri",
950 .help = "Continue an incoming migration from an -incoming defer",
2b9e3576 951 .cmd = hmp_migrate_incoming,
bf1ae1f4
DDAG
952 },
953
a6b30bca
PM
954SRST
955``migrate_incoming`` *uri*
956 Continue an incoming migration using the *uri* (that has the same syntax
957 as the ``-incoming`` option).
958ERST
bf1ae1f4 959
3b563c4b
PX
960 {
961 .name = "migrate_recover",
962 .args_type = "uri:s",
963 .params = "uri",
964 .help = "Continue a paused incoming postcopy migration",
965 .cmd = hmp_migrate_recover,
966 },
967
a6b30bca
PM
968SRST
969``migrate_recover`` *uri*
970 Continue a paused incoming postcopy migration using the *uri*.
971ERST
d37297dc
PX
972
973 {
974 .name = "migrate_pause",
975 .args_type = "",
976 .params = "",
977 .help = "Pause an ongoing migration (postcopy-only)",
978 .cmd = hmp_migrate_pause,
979 },
980
a6b30bca
PM
981SRST
982``migrate_pause``
983 Pause an ongoing migration. Currently it only supports postcopy.
984ERST
9e1ba4cc 985
00458433
OW
986 {
987 .name = "migrate_set_capability",
988 .args_type = "capability:s,state:b",
989 .params = "capability state",
990 .help = "Enable/Disable the usage of a capability for migration",
2b9e3576 991 .cmd = hmp_migrate_set_capability,
c68a0409 992 .command_completion = migrate_set_capability_completion,
00458433
OW
993 },
994
a6b30bca
PM
995SRST
996``migrate_set_capability`` *capability* *state*
997 Enable/Disable the usage of a capability *capability* for migration.
998ERST
50e9a629
LL
999
1000 {
1001 .name = "migrate_set_parameter",
69ef1f36 1002 .args_type = "parameter:s,value:s",
50e9a629
LL
1003 .params = "parameter value",
1004 .help = "Set the parameter for migration",
2b9e3576 1005 .cmd = hmp_migrate_set_parameter,
50e9a629
LL
1006 .command_completion = migrate_set_parameter_completion,
1007 },
1008
a6b30bca
PM
1009SRST
1010``migrate_set_parameter`` *parameter* *value*
1011 Set the parameter *parameter* for migration.
1012ERST
4886a1bc
DDAG
1013
1014 {
1015 .name = "migrate_start_postcopy",
1016 .args_type = "",
1017 .params = "",
a54d340b 1018 .help = "Followup to a migration command to switch the migration"
32c3db5b 1019 " to postcopy mode. The postcopy-ram capability must "
c2eb7f21
GK
1020 "be set on both source and destination before the "
1021 "original migration command .",
2b9e3576 1022 .cmd = hmp_migrate_start_postcopy,
4886a1bc
DDAG
1023 },
1024
a6b30bca
PM
1025SRST
1026``migrate_start_postcopy``
1027 Switch in-progress migration to postcopy mode. Ignored after the end of
1028 migration (or once already in postcopy).
1029ERST
d89e666e
HZ
1030
1031 {
1032 .name = "x_colo_lost_heartbeat",
1033 .args_type = "",
1034 .params = "",
1035 .help = "Tell COLO that heartbeat is lost,\n\t\t\t"
1036 "a failover or takeover is needed.",
1037 .cmd = hmp_x_colo_lost_heartbeat,
1038 },
1039
a6b30bca
PM
1040SRST
1041``x_colo_lost_heartbeat``
1042 Tell COLO that heartbeat is lost, a failover or takeover is needed.
1043ERST
f8882568
JS
1044
1045 {
2ea720db
JS
1046 .name = "client_migrate_info",
1047 .args_type = "protocol:s,hostname:s,port:i?,tls-port:i?,cert-subject:s?",
1048 .params = "protocol hostname port tls-port cert-subject",
13cadefb 1049 .help = "set migration information for remote display",
2b9e3576 1050 .cmd = hmp_client_migrate_info,
f8882568
JS
1051 },
1052
a6b30bca
PM
1053SRST
1054``client_migrate_info`` *protocol* *hostname* *port* *tls-port* *cert-subject*
1055 Set migration information for remote display. This makes the server
1056 ask the client to automatically reconnect using the new parameters
1057 once migration finished successfully. Only implemented for SPICE.
1058ERST
e866e239 1059
783e9b48
WC
1060 {
1061 .name = "dump-guest-memory",
2da91b54
VP
1062 .args_type = "paging:-p,detach:-d,windmp:-w,zlib:-z,lzo:-l,snappy:-s,filename:F,begin:l?,length:l?",
1063 .params = "[-p] [-d] [-z|-l|-s|-w] filename [begin length]",
c20499d9
QN
1064 .help = "dump guest memory into file 'filename'.\n\t\t\t"
1065 "-p: do paging to get guest's memory mapping.\n\t\t\t"
228de9cf 1066 "-d: return immediately (do not wait for completion).\n\t\t\t"
1b7a0f75
QN
1067 "-z: dump in kdump-compressed format, with zlib compression.\n\t\t\t"
1068 "-l: dump in kdump-compressed format, with lzo compression.\n\t\t\t"
1069 "-s: dump in kdump-compressed format, with snappy compression.\n\t\t\t"
2da91b54 1070 "-w: dump in Windows crashdump format (can be used instead of ELF-dump converting),\n\t\t\t"
f5daa829 1071 " for Windows x86 and x64 guests with vmcoreinfo driver only.\n\t\t\t"
c20499d9
QN
1072 "begin: the starting physical address.\n\t\t\t"
1073 "length: the memory size, in bytes.",
2b9e3576 1074 .cmd = hmp_dump_guest_memory,
783e9b48
WC
1075 },
1076
a6b30bca
PM
1077SRST
1078``dump-guest-memory [-p]`` *filename* *begin* *length*
1079 \
1080``dump-guest-memory [-z|-l|-s|-w]`` *filename*
1081 Dump guest memory to *protocol*. The file can be processed with crash or
1082 gdb. Without ``-z|-l|-s|-w``, the dump format is ELF.
1083
1084 ``-p``
1085 do paging to get guest's memory mapping.
1086 ``-z``
1087 dump in kdump-compressed format, with zlib compression.
1088 ``-l``
1089 dump in kdump-compressed format, with lzo compression.
1090 ``-s``
1091 dump in kdump-compressed format, with snappy compression.
1092 ``-w``
1093 dump in Windows crashdump format (can be used instead of ELF-dump converting),
1094 for Windows x64 guests with vmcoreinfo driver only
1095 *filename*
1096 dump file name.
1097 *begin*
1098 the starting physical address. It's optional, and should be
1099 specified together with *length*.
1100 *length*
1101 the memory size, in bytes. It's optional, and should be specified
1102 together with *begin*.
1103
1104ERST
783e9b48 1105
a4538a5c
JH
1106#if defined(TARGET_S390X)
1107 {
1108 .name = "dump-skeys",
1109 .args_type = "filename:F",
1110 .params = "",
1111 .help = "Save guest storage keys into file 'filename'.\n",
2b9e3576 1112 .cmd = hmp_dump_skeys,
a4538a5c
JH
1113 },
1114#endif
1115
a6b30bca
PM
1116SRST
1117``dump-skeys`` *filename*
1118 Save guest storage keys to a file.
1119ERST
f860d497
CI
1120
1121#if defined(TARGET_S390X)
1122 {
1123 .name = "migration_mode",
1124 .args_type = "mode:i",
1125 .params = "mode",
1126 .help = "Enables or disables migration mode\n",
1127 .cmd = hmp_migrationmode,
1128 },
1129#endif
1130
a6b30bca
PM
1131SRST
1132``migration_mode`` *mode*
1133 Enables or disables migration mode.
1134ERST
a4538a5c 1135
e866e239 1136 {
2ea720db 1137 .name = "snapshot_blkdev",
6cc2a415
PB
1138 .args_type = "reuse:-n,device:B,snapshot-file:s?,format:s?",
1139 .params = "[-n] device [new-image-file] [format]",
2ea720db
JS
1140 .help = "initiates a live snapshot\n\t\t\t"
1141 "of device. If a new image file is specified, the\n\t\t\t"
1142 "new image file will become the new root image.\n\t\t\t"
1143 "If format is specified, the snapshot file will\n\t\t\t"
775ca88e 1144 "be created in that format.\n\t\t\t"
6cc2a415
PB
1145 "The default format is qcow2. The -n flag requests QEMU\n\t\t\t"
1146 "to reuse the image found in new-image-file, instead of\n\t\t\t"
1147 "recreating it from scratch.",
2b9e3576 1148 .cmd = hmp_snapshot_blkdev,
e866e239
GH
1149 },
1150
a6b30bca
PM
1151SRST
1152``snapshot_blkdev``
1153 Snapshot device, using snapshot file as target if provided
1154ERST
775ca88e
WX
1155
1156 {
1157 .name = "snapshot_blkdev_internal",
1158 .args_type = "device:B,name:s",
1159 .params = "device name",
1160 .help = "take an internal snapshot of device.\n\t\t\t"
1161 "The format of the image used by device must\n\t\t\t"
1162 "support it, such as qcow2.\n\t\t\t",
2b9e3576 1163 .cmd = hmp_snapshot_blkdev_internal,
775ca88e
WX
1164 },
1165
a6b30bca
PM
1166SRST
1167``snapshot_blkdev_internal``
1168 Take an internal snapshot on device if it support
1169ERST
7a4ed2ee
WX
1170
1171 {
1172 .name = "snapshot_delete_blkdev_internal",
1173 .args_type = "device:B,name:s,id:s?",
1174 .params = "device name [id]",
1175 .help = "delete an internal snapshot of device.\n\t\t\t"
1176 "If id is specified, qemu will try delete\n\t\t\t"
1177 "the snapshot matching both id and name.\n\t\t\t"
1178 "The format of the image used by device must\n\t\t\t"
1179 "support it, such as qcow2.\n\t\t\t",
2b9e3576 1180 .cmd = hmp_snapshot_delete_blkdev_internal,
7a4ed2ee
WX
1181 },
1182
a6b30bca
PM
1183SRST
1184``snapshot_delete_blkdev_internal``
1185 Delete an internal snapshot on device if it support
1186ERST
d9b902db
PB
1187
1188 {
1189 .name = "drive_mirror",
1190 .args_type = "reuse:-n,full:-f,device:B,target:s,format:s?",
1191 .params = "[-n] [-f] device target [format]",
1192 .help = "initiates live storage\n\t\t\t"
1193 "migration for a device. The device's contents are\n\t\t\t"
1194 "copied to the new image file, including data that\n\t\t\t"
1195 "is written after the command is started.\n\t\t\t"
1196 "The -n flag requests QEMU to reuse the image found\n\t\t\t"
1197 "in new-image-file, instead of recreating it from scratch.\n\t\t\t"
1198 "The -f flag requests QEMU to copy the whole disk,\n\t\t\t"
1199 "so that the result does not need a backing file.\n\t\t\t",
2b9e3576 1200 .cmd = hmp_drive_mirror,
d9b902db 1201 },
a6b30bca
PM
1202SRST
1203``drive_mirror``
1204 Start mirroring a block device's writes to a new destination,
1205 using the specified target.
1206ERST
de90930a
SH
1207
1208 {
1209 .name = "drive_backup",
13b9414b
PB
1210 .args_type = "reuse:-n,full:-f,compress:-c,device:B,target:s,format:s?",
1211 .params = "[-n] [-f] [-c] device target [format]",
de90930a
SH
1212 .help = "initiates a point-in-time\n\t\t\t"
1213 "copy for a device. The device's contents are\n\t\t\t"
1214 "copied to the new image file, excluding data that\n\t\t\t"
1215 "is written after the command is started.\n\t\t\t"
1216 "The -n flag requests QEMU to reuse the image found\n\t\t\t"
1217 "in new-image-file, instead of recreating it from scratch.\n\t\t\t"
1218 "The -f flag requests QEMU to copy the whole disk,\n\t\t\t"
13b9414b
PB
1219 "so that the result does not need a backing file.\n\t\t\t"
1220 "The -c flag requests QEMU to compress backup data\n\t\t\t"
1221 "(if the target format supports it).\n\t\t\t",
2b9e3576 1222 .cmd = hmp_drive_backup,
de90930a 1223 },
a6b30bca
PM
1224SRST
1225``drive_backup``
e3a6e0da 1226 Start a point-in-time copy of a block device to a specified target.
a6b30bca 1227ERST
2313086a 1228
d7f9b689
LC
1229 {
1230 .name = "drive_add",
abb21ac3
KW
1231 .args_type = "node:-n,pci_addr:s,opts:s",
1232 .params = "[-n] [[<domain>:]<bus>:]<slot>\n"
d7f9b689 1233 "[file=file][,if=type][,bus=n]\n"
fb0490f6 1234 "[,unit=m][,media=d][,index=i]\n"
fb0490f6
SH
1235 "[,snapshot=on|off][,cache=on|off]\n"
1236 "[,readonly=on|off][,copy-on-read=on|off]",
d7f9b689 1237 .help = "add drive to PCI storage controller",
2b9e3576 1238 .cmd = hmp_drive_add,
d7f9b689 1239 },
d7f9b689 1240
a6b30bca
PM
1241SRST
1242``drive_add``
1243 Add drive to PCI storage controller.
1244ERST
2ae63bda
IY
1245
1246 {
1247 .name = "pcie_aer_inject_error",
1248 .args_type = "advisory_non_fatal:-a,correctable:-c,"
1249 "id:s,error_status:s,"
1250 "header0:i?,header1:i?,header2:i?,header3:i?,"
1251 "prefix0:i?,prefix1:i?,prefix2:i?,prefix3:i?",
1252 .params = "[-a] [-c] id "
1253 "<error_status> [<tlp header> [<tlp header prefix>]]",
1254 .help = "inject pcie aer error\n\t\t\t"
1255 " -a for advisory non fatal error\n\t\t\t"
1256 " -c for correctable error\n\t\t\t"
1257 "<id> = qdev device id\n\t\t\t"
1258 "<error_status> = error string or 32bit\n\t\t\t"
8ad4e451
ZY
1259 "<tlp header> = 32bit x 4\n\t\t\t"
1260 "<tlp header prefix> = 32bit x 4",
2b9e3576 1261 .cmd = hmp_pcie_aer_inject_error,
2ae63bda
IY
1262 },
1263
a6b30bca
PM
1264SRST
1265``pcie_aer_inject_error``
1266 Inject PCIe AER error
1267ERST
ae82d324
MA
1268
1269 {
1270 .name = "netdev_add",
1271 .args_type = "netdev:O",
03ce5744 1272 .params = "[user|tap|socket|vde|bridge|hubport|netmap|vhost-user],id=str[,prop=value][,...]",
ae82d324 1273 .help = "add host network device",
2b9e3576 1274 .cmd = hmp_netdev_add,
b162b49a 1275 .command_completion = netdev_add_completion,
48f596c5 1276 .flags = "p",
ae82d324
MA
1277 },
1278
a6b30bca
PM
1279SRST
1280``netdev_add``
1281 Add host network device.
1282ERST
ae82d324
MA
1283
1284 {
1285 .name = "netdev_del",
1286 .args_type = "id:s",
1287 .params = "id",
1288 .help = "remove host network device",
2b9e3576 1289 .cmd = hmp_netdev_del,
11b389f2 1290 .command_completion = netdev_del_completion,
48f596c5 1291 .flags = "p",
ae82d324
MA
1292 },
1293
a6b30bca
PM
1294SRST
1295``netdev_del``
1296 Remove host network device.
1297ERST
cff8b2c6
PB
1298
1299 {
1300 .name = "object_add",
da0a932b 1301 .args_type = "object:S",
cff8b2c6
PB
1302 .params = "[qom-type=]type,id=str[,prop=value][,...]",
1303 .help = "create QOM object",
2b9e3576 1304 .cmd = hmp_object_add,
bfa40f77 1305 .command_completion = object_add_completion,
9e33013b 1306 .flags = "p",
cff8b2c6
PB
1307 },
1308
a6b30bca
PM
1309SRST
1310``object_add``
1311 Create QOM object.
1312ERST
ab2d0531
PB
1313
1314 {
1315 .name = "object_del",
1316 .args_type = "id:s",
1317 .params = "id",
1318 .help = "destroy QOM object",
2b9e3576 1319 .cmd = hmp_object_del,
bfa40f77 1320 .command_completion = object_del_completion,
9e33013b 1321 .flags = "p",
ab2d0531
PB
1322 },
1323
a6b30bca
PM
1324SRST
1325``object_del``
1326 Destroy QOM object.
1327ERST
2313086a
BS
1328
1329#ifdef CONFIG_SLIRP
d7f9b689
LC
1330 {
1331 .name = "hostfwd_add",
b4983c57
TH
1332 .args_type = "arg1:s,arg2:s?",
1333 .params = "[netdev_id] [tcp|udp]:[hostaddr]:hostport-[guestaddr]:guestport",
d7f9b689 1334 .help = "redirect TCP or UDP connections from host to guest (requires -net user)",
2b9e3576 1335 .cmd = hmp_hostfwd_add,
d7f9b689 1336 },
21413d68 1337#endif
a6b30bca
PM
1338SRST
1339``hostfwd_add``
1340 Redirect TCP or UDP connections from host to guest (requires -net user).
1341ERST
d7f9b689 1342
21413d68 1343#ifdef CONFIG_SLIRP
d7f9b689
LC
1344 {
1345 .name = "hostfwd_remove",
b4983c57
TH
1346 .args_type = "arg1:s,arg2:s?",
1347 .params = "[netdev_id] [tcp|udp]:[hostaddr]:hostport",
d7f9b689 1348 .help = "remove host-to-guest TCP or UDP redirection",
2b9e3576 1349 .cmd = hmp_hostfwd_remove,
d7f9b689
LC
1350 },
1351
2313086a 1352#endif
a6b30bca
PM
1353SRST
1354``hostfwd_remove``
1355 Remove host-to-guest TCP or UDP redirection.
1356ERST
2313086a 1357
d7f9b689
LC
1358 {
1359 .name = "balloon",
3b0bd6ec 1360 .args_type = "value:M",
d7f9b689 1361 .params = "target",
3c05613a 1362 .help = "request VM to change its memory allocation (in MB)",
2b9e3576 1363 .cmd = hmp_balloon,
d7f9b689
LC
1364 },
1365
a6b30bca
PM
1366SRST
1367``balloon`` *value*
1368 Request VM to change its memory allocation to *value* (in MB).
1369ERST
2313086a 1370
d7f9b689
LC
1371 {
1372 .name = "set_link",
c9b26a4c
MA
1373 .args_type = "name:s,up:b",
1374 .params = "name on|off",
d7f9b689 1375 .help = "change the link status of a network adapter",
2b9e3576 1376 .cmd = hmp_set_link,
40d19394 1377 .command_completion = set_link_completion,
d7f9b689
LC
1378 },
1379
a6b30bca
PM
1380SRST
1381``set_link`` *name* ``[on|off]``
1382 Switch link *name* on (i.e. up) or off (i.e. down).
1383ERST
2313086a 1384
d7f9b689
LC
1385 {
1386 .name = "watchdog_action",
1387 .args_type = "action:s",
d7f9b689
LC
1388 .params = "[reset|shutdown|poweroff|pause|debug|none]",
1389 .help = "change watchdog action",
2b9e3576 1390 .cmd = hmp_watchdog_action,
d0ece345 1391 .command_completion = watchdog_action_completion,
d7f9b689
LC
1392 },
1393
a6b30bca
PM
1394SRST
1395``watchdog_action``
1396 Change watchdog action.
1397ERST
2313086a 1398
4057725f
PB
1399 {
1400 .name = "nbd_server_start",
1401 .args_type = "all:-a,writable:-w,uri:s",
1402 .params = "nbd_server_start [-a] [-w] host:port",
1403 .help = "serve block devices on the given host and port",
2b9e3576 1404 .cmd = hmp_nbd_server_start,
4057725f 1405 },
a6b30bca
PM
1406SRST
1407``nbd_server_start`` *host*:*port*
1408 Start an NBD server on the given host and/or port. If the ``-a``
1409 option is included, all of the virtual machine's block devices that
1410 have an inserted media on them are automatically exported; in this case,
1411 the ``-w`` option makes the devices writable too.
1412ERST
4057725f
PB
1413
1414 {
1415 .name = "nbd_server_add",
dba49323
EB
1416 .args_type = "writable:-w,device:B,name:s?",
1417 .params = "nbd_server_add [-w] device [name]",
4057725f 1418 .help = "export a block device via NBD",
2b9e3576 1419 .cmd = hmp_nbd_server_add,
4057725f 1420 },
a6b30bca
PM
1421SRST
1422``nbd_server_add`` *device* [ *name* ]
1423 Export a block device through QEMU's NBD server, which must be started
1424 beforehand with ``nbd_server_start``. The ``-w`` option makes the
1425 exported device writable too. The export name is controlled by *name*,
1426 defaulting to *device*.
1427ERST
08fb10a7
EB
1428
1429 {
1430 .name = "nbd_server_remove",
1431 .args_type = "force:-f,name:s",
1432 .params = "nbd_server_remove [-f] name",
1433 .help = "remove an export previously exposed via NBD",
1434 .cmd = hmp_nbd_server_remove,
1435 },
a6b30bca
PM
1436SRST
1437``nbd_server_remove [-f]`` *name*
1438 Stop exporting a block device through QEMU's NBD server, which was
1439 previously started with ``nbd_server_add``. The ``-f``
1440 option forces the server to drop the export immediately even if
1441 clients are connected; otherwise the command fails unless there are no
1442 clients.
1443ERST
4057725f
PB
1444
1445 {
1446 .name = "nbd_server_stop",
1447 .args_type = "",
1448 .params = "nbd_server_stop",
1449 .help = "stop serving block devices using the NBD protocol",
2b9e3576 1450 .cmd = hmp_nbd_server_stop,
4057725f 1451 },
a6b30bca
PM
1452SRST
1453``nbd_server_stop``
1454 Stop the QEMU embedded NBD server.
1455ERST
4057725f
PB
1456
1457
79c4f6b0 1458#if defined(TARGET_I386)
d7f9b689
LC
1459
1460 {
1461 .name = "mce",
31ce5e0c
JD
1462 .args_type = "broadcast:-b,cpu_index:i,bank:i,status:l,mcg_status:l,addr:l,misc:l",
1463 .params = "[-b] cpu bank status mcgstatus addr misc",
1464 .help = "inject a MCE on the given CPU [and broadcast to other CPUs with -b option]",
2b9e3576 1465 .cmd = hmp_mce,
d7f9b689
LC
1466 },
1467
79c4f6b0 1468#endif
a6b30bca
PM
1469SRST
1470``mce`` *cpu* *bank* *status* *mcgstatus* *addr* *misc*
1471 Inject an MCE on the given CPU (x86 only).
1472ERST
f07918fd 1473
d7f9b689
LC
1474 {
1475 .name = "getfd",
1476 .args_type = "fdname:s",
d7f9b689
LC
1477 .params = "getfd name",
1478 .help = "receive a file descriptor via SCM rights and assign it a name",
2b9e3576 1479 .cmd = hmp_getfd,
d7f9b689
LC
1480 },
1481
a6b30bca
PM
1482SRST
1483``getfd`` *fdname*
1484 If a file descriptor is passed alongside this command using the SCM_RIGHTS
1485 mechanism on unix sockets, it is stored using the name *fdname* for
1486 later use by other monitor commands.
1487ERST
f07918fd 1488
d7f9b689
LC
1489 {
1490 .name = "closefd",
1491 .args_type = "fdname:s",
d7f9b689
LC
1492 .params = "closefd name",
1493 .help = "close a file descriptor previously passed via SCM rights",
2b9e3576 1494 .cmd = hmp_closefd,
d7f9b689
LC
1495 },
1496
a6b30bca
PM
1497SRST
1498``closefd`` *fdname*
1499 Close the file descriptor previously assigned to *fdname* using the
1500 ``getfd`` command. This is only needed if the file descriptor was never
1501 used by another monitor command.
1502ERST
a3a55a2e 1503
727f005e
ZYW
1504 {
1505 .name = "block_set_io_throttle",
1506 .args_type = "device:B,bps:l,bps_rd:l,bps_wr:l,iops:l,iops_rd:l,iops_wr:l",
1507 .params = "device bps bps_rd bps_wr iops iops_rd iops_wr",
1508 .help = "change I/O throttle limits for a block drive",
2b9e3576 1509 .cmd = hmp_block_set_io_throttle,
727f005e
ZYW
1510 },
1511
a6b30bca
PM
1512SRST
1513``block_set_io_throttle`` *device* *bps* *bps_rd* *bps_wr* *iops* *iops_rd* *iops_wr*
1514 Change I/O throttle limits for a block drive to
1515 *bps* *bps_rd* *bps_wr* *iops* *iops_rd* *iops_wr*.
1516 *device* can be a block device name, a qdev ID or a QOM path.
1517ERST
7572150c
GH
1518
1519 {
1520 .name = "set_password",
675fd3c9
SR
1521 .args_type = "protocol:s,password:s,display:-ds,connected:s?",
1522 .params = "protocol password [-d display] [action-if-connected]",
7572150c 1523 .help = "set spice/vnc password",
2b9e3576 1524 .cmd = hmp_set_password,
7572150c
GH
1525 },
1526
a6b30bca 1527SRST
675fd3c9
SR
1528``set_password [ vnc | spice ] password [ -d display ] [ action-if-connected ]``
1529 Change spice/vnc password. *display* can be used with 'vnc' to specify
1530 which display to set the password on. *action-if-connected* specifies
1531 what should happen in case a connection is established: *fail* makes
1532 the password change fail. *disconnect* changes the password and
8982552e
MA
1533 disconnects the client. *keep* changes the password and keeps the
1534 connection up. *keep* is the default.
a6b30bca 1535ERST
7572150c
GH
1536
1537 {
1538 .name = "expire_password",
675fd3c9
SR
1539 .args_type = "protocol:s,time:s,display:-ds",
1540 .params = "protocol time [-d display]",
7572150c 1541 .help = "set spice/vnc password expire-time",
2b9e3576 1542 .cmd = hmp_expire_password,
7572150c
GH
1543 },
1544
a6b30bca 1545SRST
675fd3c9
SR
1546``expire_password [ vnc | spice ] expire-time [ -d display ]``
1547 Specify when a password for spice/vnc becomes invalid.
1548 *display* behaves the same as in ``set_password``.
1549 *expire-time* accepts:
a6b30bca
PM
1550
1551 ``now``
1552 Invalidate password instantly.
1553 ``never``
1554 Password stays valid forever.
1555 ``+``\ *nsec*
1556 Password stays valid for *nsec* seconds starting now.
1557 *nsec*
1558 Password is invalidated at the given time. *nsec* are the seconds
1559 passed since 1970, i.e. unix epoch.
1560
1561ERST
f1088908 1562
46920825
GH
1563 {
1564 .name = "chardev-add",
1565 .args_type = "args:s",
1566 .params = "args",
1567 .help = "add chardev",
2b9e3576 1568 .cmd = hmp_chardev_add,
13e315da 1569 .command_completion = chardev_add_completion,
46920825
GH
1570 },
1571
a6b30bca
PM
1572SRST
1573``chardev-add`` *args*
1574 chardev-add accepts the same parameters as the -chardev command line switch.
1575ERST
75b60160
AN
1576
1577 {
1578 .name = "chardev-change",
1579 .args_type = "id:s,args:s",
1580 .params = "id args",
1581 .help = "change chardev",
1582 .cmd = hmp_chardev_change,
1583 },
1584
a6b30bca
PM
1585SRST
1586``chardev-change`` *args*
1587 chardev-change accepts existing chardev *id* and then the same arguments
1588 as the -chardev command line switch (except for "id").
1589ERST
46920825
GH
1590
1591 {
1592 .name = "chardev-remove",
1593 .args_type = "id:s",
1594 .params = "id",
1595 .help = "remove chardev",
2b9e3576 1596 .cmd = hmp_chardev_remove,
6297d9a2 1597 .command_completion = chardev_remove_completion,
46920825
GH
1598 },
1599
a6b30bca
PM
1600SRST
1601``chardev-remove`` *id*
1602 Removes the chardev *id*.
1603ERST
bd1d5ad9
SF
1604
1605 {
1606 .name = "chardev-send-break",
1607 .args_type = "id:s",
1608 .params = "id",
1609 .help = "send a break on chardev",
1610 .cmd = hmp_chardev_send_break,
1611 .command_completion = chardev_remove_completion,
1612 },
1613
a6b30bca
PM
1614SRST
1615``chardev-send-break`` *id*
1616 Send a break on the chardev *id*.
1617ERST
587da2c3
KW
1618
1619 {
1620 .name = "qemu-io",
89b6fc45
KW
1621 .args_type = "qdev:-d,device:B,command:s",
1622 .params = "[-d] [device] \"[command]\"",
1623 .help = "run a qemu-io command on a block device\n\t\t\t"
1624 "-d: [device] is a device ID rather than a "
1625 "drive ID or node name",
2b9e3576 1626 .cmd = hmp_qemu_io,
587da2c3
KW
1627 },
1628
a6b30bca
PM
1629SRST
1630``qemu-io`` *device* *command*
1631 Executes a qemu-io command on the given block device.
1632ERST
abf23329 1633
89d7fa9e
AF
1634 {
1635 .name = "qom-list",
1636 .args_type = "path:s?",
1637 .params = "path",
1638 .help = "list QOM properties",
2b9e3576 1639 .cmd = hmp_qom_list,
8c7c7ecb 1640 .flags = "p",
89d7fa9e
AF
1641 },
1642
a6b30bca
PM
1643SRST
1644``qom-list`` [*path*]
1645 Print QOM properties of object at location *path*
1646ERST
c0e6ee9e 1647
89cf4fe3
DDAG
1648 {
1649 .name = "qom-get",
1650 .args_type = "path:s,property:s",
1651 .params = "path property",
1652 .help = "print QOM property",
1653 .cmd = hmp_qom_get,
1654 .flags = "p",
1655 },
1656
1657SRST
1658``qom-get`` *path* *property*
1659 Print QOM property *property* of object at location *path*
1660ERST
1661
c0e6ee9e
AF
1662 {
1663 .name = "qom-set",
2d9e3dd9
DH
1664 .args_type = "json:-j,path:s,property:s,value:S",
1665 .params = "[-j] path property value",
1666 .help = "set QOM property.\n\t\t\t"
1667 "-j: the value is specified in json format.",
2b9e3576 1668 .cmd = hmp_qom_set,
8c7c7ecb 1669 .flags = "p",
c0e6ee9e
AF
1670 },
1671
a6b30bca
PM
1672SRST
1673``qom-set`` *path* *property* *value*
1674 Set QOM property *property* of object at location *path* to value *value*
1675ERST
b40292e7 1676
e7510671
PD
1677 {
1678 .name = "replay_break",
ae49ce00 1679 .args_type = "icount:l",
e7510671
PD
1680 .params = "icount",
1681 .help = "set breakpoint at the specified instruction count",
1682 .cmd = hmp_replay_break,
1683 },
1684
1685SRST
1686``replay_break`` *icount*
1687 Set replay breakpoint at instruction count *icount*.
1688 Execution stops when the specified instruction is reached.
1689 There can be at most one breakpoint. When breakpoint is set, any prior
1690 one is removed. The breakpoint may be set only in replay mode and only
1691 "in the future", i.e. at instruction counts greater than the current one.
1692 The current instruction count can be observed with ``info replay``.
1693ERST
1694
1695 {
1696 .name = "replay_delete_break",
1697 .args_type = "",
1698 .params = "",
1699 .help = "remove replay breakpoint",
1700 .cmd = hmp_replay_delete_break,
1701 },
1702
1703SRST
1704``replay_delete_break``
1705 Remove replay breakpoint which was previously set with ``replay_break``.
1706 The command is ignored when there are no replay breakpoints.
1707ERST
1708
f6baed3d
PD
1709 {
1710 .name = "replay_seek",
ae49ce00 1711 .args_type = "icount:l",
f6baed3d
PD
1712 .params = "icount",
1713 .help = "replay execution to the specified instruction count",
1714 .cmd = hmp_replay_seek,
1715 },
1716
1717SRST
1718``replay_seek`` *icount*
1719 Automatically proceed to the instruction count *icount*, when
1720 replaying the execution. The command automatically loads nearest
1721 snapshot and replays the execution to find the desired instruction.
1722 When there is no preceding snapshot or the execution is not replayed,
1723 then the command fails.
1724 *icount* for the reference may be observed with ``info replay`` command.
1725ERST
1726
33572ece
JK
1727 {
1728 .name = "info",
1729 .args_type = "item:s?",
1730 .params = "[subcommand]",
1731 .help = "show various information about the system state",
2b9e3576 1732 .cmd = hmp_info_help,
a0cd5e1c 1733 .sub_table = hmp_info_cmds,
8c7c7ecb 1734 .flags = "p",
33572ece
JK
1735 },
1736
a4a571d9
PX
1737SRST
1738``calc_dirty_rate`` *second*
1739 Start a round of dirty rate measurement with the period specified in *second*.
1740 The result of the dirty rate measurement may be observed with ``info
1741 dirty_rate`` command.
1742ERST
1743
1744 {
1745 .name = "calc_dirty_rate",
826b8bc8
HH
1746 .args_type = "dirty_ring:-r,dirty_bitmap:-b,second:l,sample_pages_per_GB:l?",
1747 .params = "[-r] [-b] second [sample_pages_per_GB]",
1748 .help = "start a round of guest dirty rate measurement (using -r to"
1749 "\n\t\t\t specify dirty ring as the method of calculation and"
1750 "\n\t\t\t -b to specify dirty bitmap as method of calculation)",
a4a571d9
PX
1751 .cmd = hmp_calc_dirty_rate,
1752 },