]> git.proxmox.com Git - qemu.git/blame - qemu-doc.texi
-no-fd-bootchk option (Lonnie Mendez)
[qemu.git] / qemu-doc.texi
CommitLineData
386405f7 1\input texinfo @c -*- texinfo -*-
debc7065
FB
2@c %**start of header
3@setfilename qemu-doc.info
4@settitle QEMU CPU Emulator User Documentation
5@exampleindent 0
6@paragraphindent 0
7@c %**end of header
386405f7 8
0806e3f6 9@iftex
386405f7
FB
10@titlepage
11@sp 7
debc7065
FB
12@center @titlefont{QEMU CPU Emulator}
13@sp 1
14@center @titlefont{User Documentation}
386405f7
FB
15@sp 3
16@end titlepage
0806e3f6 17@end iftex
386405f7 18
debc7065
FB
19@ifnottex
20@node Top
21@top
22
23@menu
24* Introduction::
25* Installation::
26* QEMU PC System emulator::
27* QEMU System emulator for non PC targets::
28* QEMU Linux User space emulator::
29* compilation:: Compilation from the sources
30* Index::
31@end menu
32@end ifnottex
33
34@contents
35
36@node Introduction
386405f7
FB
37@chapter Introduction
38
debc7065
FB
39@menu
40* intro_features:: Features
41@end menu
42
43@node intro_features
322d0c66 44@section Features
386405f7 45
1f673135
FB
46QEMU is a FAST! processor emulator using dynamic translation to
47achieve good emulation speed.
1eb20527
FB
48
49QEMU has two operating modes:
0806e3f6
FB
50
51@itemize @minus
52
53@item
1f673135 54Full system emulation. In this mode, QEMU emulates a full system (for
3f9f3aa1
FB
55example a PC), including one or several processors and various
56peripherals. It can be used to launch different Operating Systems
57without rebooting the PC or to debug system code.
1eb20527 58
0806e3f6 59@item
1f673135
FB
60User mode emulation (Linux host only). In this mode, QEMU can launch
61Linux processes compiled for one CPU on another CPU. It can be used to
62launch the Wine Windows API emulator (@url{http://www.winehq.org}) or
63to ease cross-compilation and cross-debugging.
1eb20527
FB
64
65@end itemize
66
7c3fc84d 67QEMU can run without an host kernel driver and yet gives acceptable
6f2f2b24 68performance.
322d0c66 69
52c00a5f
FB
70For system emulation, the following hardware targets are supported:
71@itemize
9d0a8e6f 72@item PC (x86 or x86_64 processor)
3f9f3aa1 73@item ISA PC (old style PC without PCI bus)
52c00a5f 74@item PREP (PowerPC processor)
9d0a8e6f
FB
75@item G3 BW PowerMac (PowerPC processor)
76@item Mac99 PowerMac (PowerPC processor, in progress)
3475187d
FB
77@item Sun4m (32-bit Sparc processor)
78@item Sun4u (64-bit Sparc processor, in progress)
3f9f3aa1 79@item Malta board (32-bit MIPS processor)
ed96ca35 80@item ARM Integrator/CP (ARM926E or 1026E processor)
00a9bf19 81@item ARM Versatile baseboard (ARM926E)
52c00a5f 82@end itemize
386405f7 83
3f9f3aa1 84For user emulation, x86, PowerPC, ARM, MIPS, and Sparc32/64 CPUs are supported.
0806e3f6 85
debc7065 86@node Installation
5b9f457a
FB
87@chapter Installation
88
15a34c63
FB
89If you want to compile QEMU yourself, see @ref{compilation}.
90
debc7065
FB
91@menu
92* install_linux:: Linux
93* install_windows:: Windows
94* install_mac:: Macintosh
95@end menu
96
97@node install_linux
1f673135
FB
98@section Linux
99
7c3fc84d
FB
100If a precompiled package is available for your distribution - you just
101have to install it. Otherwise, see @ref{compilation}.
5b9f457a 102
debc7065 103@node install_windows
1f673135 104@section Windows
8cd0ac2f 105
15a34c63 106Download the experimental binary installer at
debc7065 107@url{http://www.free.oszoo.org/@/download.html}.
d691f669 108
debc7065 109@node install_mac
1f673135 110@section Mac OS X
d691f669 111
15a34c63 112Download the experimental binary installer at
debc7065 113@url{http://www.free.oszoo.org/@/download.html}.
df0f11a0 114
debc7065 115@node QEMU PC System emulator
3f9f3aa1 116@chapter QEMU PC System emulator
1eb20527 117
debc7065
FB
118@menu
119* pcsys_introduction:: Introduction
120* pcsys_quickstart:: Quick Start
121* sec_invocation:: Invocation
122* pcsys_keys:: Keys
123* pcsys_monitor:: QEMU Monitor
124* disk_images:: Disk Images
125* pcsys_network:: Network emulation
126* direct_linux_boot:: Direct Linux Boot
127* pcsys_usb:: USB emulation
128* gdb_usage:: GDB usage
129* pcsys_os_specific:: Target OS specific information
130@end menu
131
132@node pcsys_introduction
0806e3f6
FB
133@section Introduction
134
135@c man begin DESCRIPTION
136
3f9f3aa1
FB
137The QEMU PC System emulator simulates the
138following peripherals:
0806e3f6
FB
139
140@itemize @minus
15a34c63
FB
141@item
142i440FX host PCI bridge and PIIX3 PCI to ISA bridge
0806e3f6 143@item
15a34c63
FB
144Cirrus CLGD 5446 PCI VGA card or dummy VGA card with Bochs VESA
145extensions (hardware level, including all non standard modes).
0806e3f6
FB
146@item
147PS/2 mouse and keyboard
148@item
15a34c63 1492 PCI IDE interfaces with hard disk and CD-ROM support
1f673135
FB
150@item
151Floppy disk
0806e3f6 152@item
15a34c63 153NE2000 PCI network adapters
0806e3f6 154@item
05d5818c
FB
155Serial ports
156@item
c0fe3827
FB
157Creative SoundBlaster 16 sound card
158@item
159ENSONIQ AudioPCI ES1370 sound card
160@item
161Adlib(OPL2) - Yamaha YM3812 compatible chip
b389dbfb
FB
162@item
163PCI UHCI USB controller and a virtual USB hub.
0806e3f6
FB
164@end itemize
165
3f9f3aa1
FB
166SMP is supported with up to 255 CPUs.
167
c0fe3827
FB
168Note that adlib is only available when QEMU was configured with
169-enable-adlib
170
15a34c63
FB
171QEMU uses the PC BIOS from the Bochs project and the Plex86/Bochs LGPL
172VGA BIOS.
173
c0fe3827
FB
174QEMU uses YM3812 emulation by Tatsuyuki Satoh.
175
0806e3f6
FB
176@c man end
177
debc7065 178@node pcsys_quickstart
1eb20527
FB
179@section Quick Start
180
285dc330 181Download and uncompress the linux image (@file{linux.img}) and type:
0806e3f6
FB
182
183@example
285dc330 184qemu linux.img
0806e3f6
FB
185@end example
186
187Linux should boot and give you a prompt.
188
6cc721cf 189@node sec_invocation
ec410fc9
FB
190@section Invocation
191
192@example
0806e3f6
FB
193@c man begin SYNOPSIS
194usage: qemu [options] [disk_image]
195@c man end
ec410fc9
FB
196@end example
197
0806e3f6 198@c man begin OPTIONS
9d4520d0 199@var{disk_image} is a raw hard disk image for IDE hard disk 0.
ec410fc9
FB
200
201General options:
202@table @option
3dbbdc25
FB
203@item -M machine
204Select the emulated machine (@code{-M ?} for list)
205
2be3bc02
FB
206@item -fda file
207@item -fdb file
debc7065 208Use @var{file} as floppy disk 0/1 image (@pxref{disk_images}). You can
be3edd95 209use the host floppy by using @file{/dev/fd0} as filename.
2be3bc02 210
ec410fc9
FB
211@item -hda file
212@item -hdb file
181f1558
FB
213@item -hdc file
214@item -hdd file
debc7065 215Use @var{file} as hard disk 0, 1, 2 or 3 image (@pxref{disk_images}).
1f47a922 216
181f1558
FB
217@item -cdrom file
218Use @var{file} as CD-ROM image (you cannot use @option{-hdc} and and
be3edd95
FB
219@option{-cdrom} at the same time). You can use the host CD-ROM by
220using @file{/dev/cdrom} as filename.
181f1558 221
1f673135
FB
222@item -boot [a|c|d]
223Boot on floppy (a), hard disk (c) or CD-ROM (d). Hard disk boot is
2be3bc02 224the default.
1f47a922 225
181f1558 226@item -snapshot
1f47a922
FB
227Write to temporary files instead of disk image files. In this case,
228the raw disk image you use is not written back. You can however force
debc7065 229the write back by pressing @key{C-a s} (@pxref{disk_images}).
ec410fc9 230
52ca8d6a
FB
231@item -no-fd-bootchk
232Disable boot signature checking for floppy disks in Bochs BIOS. It may
233be needed to boot from old floppy disks.
234
ec410fc9 235@item -m megs
15a34c63 236Set virtual RAM size to @var{megs} megabytes. Default is 128 MB.
ec410fc9 237
3f9f3aa1
FB
238@item -smp n
239Simulate an SMP system with @var{n} CPUs. On the PC target, up to 255
240CPUs are supported.
241
0806e3f6
FB
242@item -nographic
243
244Normally, QEMU uses SDL to display the VGA output. With this option,
245you can totally disable graphical output so that QEMU is a simple
246command line application. The emulated serial port is redirected on
247the console. Therefore, you can still use QEMU to debug a Linux kernel
248with a serial console.
249
24236869
FB
250@item -vnc d
251
252Normally, QEMU uses SDL to display the VGA output. With this option,
253you can have QEMU listen on VNC display d and redirect the VGA display
254over the VNC session. It is very useful to enable the usb tablet device
255when using this option (option @option{-usbdevice tablet}).
256
3d11d0eb
FB
257@item -k language
258
259Use keyboard layout @var{language} (for example @code{fr} for
260French). This option is only needed where it is not easy to get raw PC
261keycodes (e.g. on Macs or with some X11 servers). You don't need to
262use it on PC/Linux or PC/Windows hosts.
263
264The available layouts are:
265@example
266ar de-ch es fo fr-ca hu ja mk no pt-br sv
267da en-gb et fr fr-ch is lt nl pl ru th
268de en-us fi fr-be hr it lv nl-be pt sl tr
269@end example
270
271The default is @code{en-us}.
272
1d14ffa9
FB
273@item -audio-help
274
275Will show the audio subsystem help: list of drivers, tunable
276parameters.
277
6a36d84e 278@item -soundhw card1,card2,... or -soundhw all
1d14ffa9
FB
279
280Enable audio and selected sound hardware. Use ? to print all
281available sound hardware.
282
283@example
284qemu -soundhw sb16,adlib hda
285qemu -soundhw es1370 hda
6a36d84e 286qemu -soundhw all hda
1d14ffa9
FB
287qemu -soundhw ?
288@end example
a8c490cd 289
15a34c63
FB
290@item -localtime
291Set the real time clock to local time (the default is to UTC
292time). This option is needed to have correct date in MS-DOS or
293Windows.
294
d63d307f
FB
295@item -full-screen
296Start in full screen.
297
f7cce898
FB
298@item -pidfile file
299Store the QEMU process PID in @var{file}. It is useful if you launch QEMU
300from a script.
301
9d0a8e6f
FB
302@item -win2k-hack
303Use it when installing Windows 2000 to avoid a disk full bug. After
304Windows 2000 is installed, you no longer need this option (this option
305slows down the IDE transfers).
306
0806e3f6
FB
307@end table
308
b389dbfb
FB
309USB options:
310@table @option
311
312@item -usb
313Enable the USB driver (will be the default soon)
314
315@item -usbdevice devname
0aff66b5 316Add the USB device @var{devname}. @xref{usb_devices}.
b389dbfb
FB
317@end table
318
1f673135
FB
319Network options:
320
321@table @option
322
a41b2ff2 323@item -net nic[,vlan=n][,macaddr=addr][,model=type]
41d03949
FB
324Create a new Network Interface Card and connect it to VLAN @var{n} (@var{n}
325= 0 is the default). The NIC is currently an NE2000 on the PC
326target. Optionally, the MAC address can be changed. If no
327@option{-net} option is specified, a single NIC is created.
a41b2ff2
PB
328Qemu can emulate several different models of network card. Valid values for
329@var{type} are @code{ne2k_pci}, @code{ne2k_isa}, @code{rtl8139},
330@code{smc91c111} and @code{lance}. Not all devices are supported on all
331targets.
41d03949 332
115defd1 333@item -net user[,vlan=n][,hostname=name]
7e89463d 334Use the user mode network stack which requires no administrator
a03a6053 335priviledge to run. @option{hostname=name} can be used to specify the client
115defd1 336hostname reported by the builtin DHCP server.
41d03949
FB
337
338@item -net tap[,vlan=n][,fd=h][,ifname=name][,script=file]
339Connect the host TAP network interface @var{name} to VLAN @var{n} and
340use the network script @var{file} to configure it. The default
341network script is @file{/etc/qemu-ifup}. If @var{name} is not
342provided, the OS automatically provides one. @option{fd=h} can be
343used to specify the handle of an already opened host TAP interface. Example:
1f673135 344
41d03949
FB
345@example
346qemu linux.img -net nic -net tap
347@end example
348
349More complicated example (two NICs, each one connected to a TAP device)
350@example
351qemu linux.img -net nic,vlan=0 -net tap,vlan=0,ifname=tap0 \
352 -net nic,vlan=1 -net tap,vlan=1,ifname=tap1
353@end example
3f1a88f4 354
3f1a88f4 355
41d03949 356@item -net socket[,vlan=n][,fd=h][,listen=[host]:port][,connect=host:port]
1f673135 357
41d03949
FB
358Connect the VLAN @var{n} to a remote VLAN in another QEMU virtual
359machine using a TCP socket connection. If @option{listen} is
360specified, QEMU waits for incoming connections on @var{port}
361(@var{host} is optional). @option{connect} is used to connect to
3d830459
FB
362another QEMU instance using the @option{listen} option. @option{fd=h}
363specifies an already opened TCP socket.
1f673135 364
41d03949
FB
365Example:
366@example
367# launch a first QEMU instance
debc7065
FB
368qemu linux.img -net nic,macaddr=52:54:00:12:34:56 \
369 -net socket,listen=:1234
370# connect the VLAN 0 of this instance to the VLAN 0
371# of the first instance
372qemu linux.img -net nic,macaddr=52:54:00:12:34:57 \
373 -net socket,connect=127.0.0.1:1234
41d03949 374@end example
52c00a5f 375
3d830459
FB
376@item -net socket[,vlan=n][,fd=h][,mcast=maddr:port]
377
378Create a VLAN @var{n} shared with another QEMU virtual
379machines using a UDP multicast socket, effectively making a bus for
380every QEMU with same multicast address @var{maddr} and @var{port}.
381NOTES:
382@enumerate
383@item
384Several QEMU can be running on different hosts and share same bus (assuming
385correct multicast setup for these hosts).
386@item
387mcast support is compatible with User Mode Linux (argument @option{eth@var{N}=mcast}), see
388@url{http://user-mode-linux.sf.net}.
389@item Use @option{fd=h} to specify an already opened UDP multicast socket.
390@end enumerate
391
392Example:
393@example
394# launch one QEMU instance
debc7065
FB
395qemu linux.img -net nic,macaddr=52:54:00:12:34:56 \
396 -net socket,mcast=230.0.0.1:1234
3d830459 397# launch another QEMU instance on same "bus"
debc7065
FB
398qemu linux.img -net nic,macaddr=52:54:00:12:34:57 \
399 -net socket,mcast=230.0.0.1:1234
3d830459 400# launch yet another QEMU instance on same "bus"
debc7065
FB
401qemu linux.img -net nic,macaddr=52:54:00:12:34:58 \
402 -net socket,mcast=230.0.0.1:1234
3d830459
FB
403@end example
404
405Example (User Mode Linux compat.):
406@example
debc7065
FB
407# launch QEMU instance (note mcast address selected
408# is UML's default)
409qemu linux.img -net nic,macaddr=52:54:00:12:34:56 \
410 -net socket,mcast=239.192.168.1:1102
3d830459
FB
411# launch UML
412/path/to/linux ubd0=/path/to/root_fs eth0=mcast
413@end example
414
41d03949
FB
415@item -net none
416Indicate that no network devices should be configured. It is used to
039af320
FB
417override the default configuration (@option{-net nic -net user}) which
418is activated if no @option{-net} options are provided.
52c00a5f 419
9bf05444
FB
420@item -tftp prefix
421When using the user mode network stack, activate a built-in TFTP
422server. All filenames beginning with @var{prefix} can be downloaded
423from the host to the guest using a TFTP client. The TFTP client on the
424guest must be configured in binary mode (use the command @code{bin} of
425the Unix TFTP client). The host IP address on the guest is as usual
42610.0.2.2.
427
2518bd0d
FB
428@item -smb dir
429When using the user mode network stack, activate a built-in SMB
430server so that Windows OSes can access to the host files in @file{dir}
431transparently.
432
433In the guest Windows OS, the line:
434@example
43510.0.2.4 smbserver
436@end example
437must be added in the file @file{C:\WINDOWS\LMHOSTS} (for windows 9x/Me)
438or @file{C:\WINNT\SYSTEM32\DRIVERS\ETC\LMHOSTS} (Windows NT/2000).
439
440Then @file{dir} can be accessed in @file{\\smbserver\qemu}.
441
442Note that a SAMBA server must be installed on the host OS in
443@file{/usr/sbin/smbd}. QEMU was tested succesfully with smbd version
6cc721cf 4442.2.7a from the Red Hat 9 and version 3.0.10-1.fc3 from Fedora Core 3.
2518bd0d 445
9bf05444
FB
446@item -redir [tcp|udp]:host-port:[guest-host]:guest-port
447
448When using the user mode network stack, redirect incoming TCP or UDP
449connections to the host port @var{host-port} to the guest
450@var{guest-host} on guest port @var{guest-port}. If @var{guest-host}
451is not specified, its value is 10.0.2.15 (default address given by the
452built-in DHCP server).
453
454For example, to redirect host X11 connection from screen 1 to guest
455screen 0, use the following:
456
457@example
458# on the host
459qemu -redir tcp:6001::6000 [...]
460# this host xterm should open in the guest X11 server
461xterm -display :1
462@end example
463
464To redirect telnet connections from host port 5555 to telnet port on
465the guest, use the following:
466
467@example
468# on the host
469qemu -redir tcp:5555::23 [...]
470telnet localhost 5555
471@end example
472
473Then when you use on the host @code{telnet localhost 5555}, you
474connect to the guest telnet server.
475
1f673135
FB
476@end table
477
41d03949 478Linux boot specific: When using these options, you can use a given
1f673135
FB
479Linux kernel without installing it in the disk image. It can be useful
480for easier testing of various kernels.
481
0806e3f6
FB
482@table @option
483
484@item -kernel bzImage
485Use @var{bzImage} as kernel image.
486
487@item -append cmdline
488Use @var{cmdline} as kernel command line
489
490@item -initrd file
491Use @var{file} as initial ram disk.
492
ec410fc9
FB
493@end table
494
15a34c63 495Debug/Expert options:
ec410fc9 496@table @option
a0a821a4
FB
497
498@item -serial dev
499Redirect the virtual serial port to host device @var{dev}. Available
500devices are:
501@table @code
502@item vc
503Virtual console
504@item pty
505[Linux only] Pseudo TTY (a new PTY is automatically allocated)
506@item null
507void device
f8d179e3 508@item /dev/XXX
e57a8c0e 509[Linux only] Use host tty, e.g. @file{/dev/ttyS0}. The host serial port
f8d179e3 510parameters are set according to the emulated ones.
e57a8c0e
FB
511@item /dev/parportN
512[Linux only, parallel port only] Use host parallel port
513@var{N}. Currently only SPP parallel port features can be used.
f8d179e3
FB
514@item file:filename
515Write output to filename. No character can be read.
a0a821a4
FB
516@item stdio
517[Unix only] standard input/output
f8d179e3
FB
518@item pipe:filename
519[Unix only] name pipe @var{filename}
a0a821a4
FB
520@end table
521The default device is @code{vc} in graphical mode and @code{stdio} in
522non graphical mode.
523
05d5818c
FB
524This option can be used several times to simulate up to 4 serials
525ports.
526
e57a8c0e
FB
527@item -parallel dev
528Redirect the virtual parallel port to host device @var{dev} (same
529devices as the serial port). On Linux hosts, @file{/dev/parportN} can
530be used to use hardware devices connected on the corresponding host
531parallel port.
532
533This option can be used several times to simulate up to 3 parallel
534ports.
535
a0a821a4
FB
536@item -monitor dev
537Redirect the monitor to host device @var{dev} (same devices as the
538serial port).
539The default device is @code{vc} in graphical mode and @code{stdio} in
540non graphical mode.
541
ec410fc9 542@item -s
debc7065 543Wait gdb connection to port 1234 (@pxref{gdb_usage}).
ec410fc9
FB
544@item -p port
545Change gdb connection port.
52c00a5f
FB
546@item -S
547Do not start CPU at startup (you must type 'c' in the monitor).
ec410fc9 548@item -d
9d4520d0 549Output log in /tmp/qemu.log
46d4767d
FB
550@item -hdachs c,h,s,[,t]
551Force hard disk 0 physical geometry (1 <= @var{c} <= 16383, 1 <=
552@var{h} <= 16, 1 <= @var{s} <= 63) and optionally force the BIOS
553translation mode (@var{t}=none, lba or auto). Usually QEMU can guess
554all thoses parameters. This option is useful for old MS-DOS disk
555images.
7c3fc84d 556
15a34c63
FB
557@item -std-vga
558Simulate a standard VGA card with Bochs VBE extensions (default is
559Cirrus Logic GD5446 PCI VGA)
d63d307f
FB
560@item -loadvm file
561Start right away with a saved state (@code{loadvm} in monitor)
ec410fc9
FB
562@end table
563
3e11db9a
FB
564@c man end
565
debc7065 566@node pcsys_keys
3e11db9a
FB
567@section Keys
568
569@c man begin OPTIONS
570
a1b74fe8
FB
571During the graphical emulation, you can use the following keys:
572@table @key
f9859310 573@item Ctrl-Alt-f
a1b74fe8 574Toggle full screen
a0a821a4 575
f9859310 576@item Ctrl-Alt-n
a0a821a4
FB
577Switch to virtual console 'n'. Standard console mappings are:
578@table @emph
579@item 1
580Target system display
581@item 2
582Monitor
583@item 3
584Serial port
a1b74fe8
FB
585@end table
586
f9859310 587@item Ctrl-Alt
a0a821a4
FB
588Toggle mouse and keyboard grab.
589@end table
590
3e11db9a
FB
591In the virtual consoles, you can use @key{Ctrl-Up}, @key{Ctrl-Down},
592@key{Ctrl-PageUp} and @key{Ctrl-PageDown} to move in the back log.
593
a0a821a4
FB
594During emulation, if you are using the @option{-nographic} option, use
595@key{Ctrl-a h} to get terminal commands:
ec410fc9
FB
596
597@table @key
a1b74fe8 598@item Ctrl-a h
ec410fc9 599Print this help
a1b74fe8 600@item Ctrl-a x
ec410fc9 601Exit emulatior
a1b74fe8 602@item Ctrl-a s
1f47a922 603Save disk data back to file (if -snapshot)
a1b74fe8 604@item Ctrl-a b
1f673135 605Send break (magic sysrq in Linux)
a1b74fe8 606@item Ctrl-a c
1f673135 607Switch between console and monitor
a1b74fe8
FB
608@item Ctrl-a Ctrl-a
609Send Ctrl-a
ec410fc9 610@end table
0806e3f6
FB
611@c man end
612
613@ignore
614
1f673135
FB
615@c man begin SEEALSO
616The HTML documentation of QEMU for more precise information and Linux
617user mode emulator invocation.
618@c man end
619
620@c man begin AUTHOR
621Fabrice Bellard
622@c man end
623
624@end ignore
625
debc7065 626@node pcsys_monitor
1f673135
FB
627@section QEMU Monitor
628
629The QEMU monitor is used to give complex commands to the QEMU
630emulator. You can use it to:
631
632@itemize @minus
633
634@item
635Remove or insert removable medias images
636(such as CD-ROM or floppies)
637
638@item
639Freeze/unfreeze the Virtual Machine (VM) and save or restore its state
640from a disk file.
641
642@item Inspect the VM state without an external debugger.
643
644@end itemize
645
646@subsection Commands
647
648The following commands are available:
649
650@table @option
651
652@item help or ? [cmd]
653Show the help for all commands or just for command @var{cmd}.
654
655@item commit
656Commit changes to the disk images (if -snapshot is used)
657
658@item info subcommand
659show various information about the system state
660
661@table @option
662@item info network
41d03949 663show the various VLANs and the associated devices
1f673135
FB
664@item info block
665show the block devices
666@item info registers
667show the cpu registers
668@item info history
669show the command line history
b389dbfb
FB
670@item info pci
671show emulated PCI device
672@item info usb
673show USB devices plugged on the virtual USB hub
674@item info usbhost
675show all USB host devices
1f673135
FB
676@end table
677
678@item q or quit
679Quit the emulator.
680
681@item eject [-f] device
682Eject a removable media (use -f to force it).
683
684@item change device filename
685Change a removable media.
686
687@item screendump filename
688Save screen into PPM image @var{filename}.
689
690@item log item1[,...]
691Activate logging of the specified items to @file{/tmp/qemu.log}.
692
693@item savevm filename
694Save the whole virtual machine state to @var{filename}.
695
696@item loadvm filename
697Restore the whole virtual machine state from @var{filename}.
698
699@item stop
700Stop emulation.
701
702@item c or cont
703Resume emulation.
704
705@item gdbserver [port]
706Start gdbserver session (default port=1234)
707
708@item x/fmt addr
709Virtual memory dump starting at @var{addr}.
710
711@item xp /fmt addr
712Physical memory dump starting at @var{addr}.
713
714@var{fmt} is a format which tells the command how to format the
715data. Its syntax is: @option{/@{count@}@{format@}@{size@}}
716
717@table @var
718@item count
719is the number of items to be dumped.
720
721@item format
722can be x (hexa), d (signed decimal), u (unsigned decimal), o (octal),
723c (char) or i (asm instruction).
724
725@item size
52c00a5f
FB
726can be b (8 bits), h (16 bits), w (32 bits) or g (64 bits). On x86,
727@code{h} or @code{w} can be specified with the @code{i} format to
728respectively select 16 or 32 bit code instruction size.
1f673135
FB
729
730@end table
731
732Examples:
733@itemize
734@item
735Dump 10 instructions at the current instruction pointer:
736@example
737(qemu) x/10i $eip
7380x90107063: ret
7390x90107064: sti
7400x90107065: lea 0x0(%esi,1),%esi
7410x90107069: lea 0x0(%edi,1),%edi
7420x90107070: ret
7430x90107071: jmp 0x90107080
7440x90107073: nop
7450x90107074: nop
7460x90107075: nop
7470x90107076: nop
748@end example
749
750@item
751Dump 80 16 bit values at the start of the video memory.
debc7065 752@smallexample
1f673135
FB
753(qemu) xp/80hx 0xb8000
7540x000b8000: 0x0b50 0x0b6c 0x0b65 0x0b78 0x0b38 0x0b36 0x0b2f 0x0b42
7550x000b8010: 0x0b6f 0x0b63 0x0b68 0x0b73 0x0b20 0x0b56 0x0b47 0x0b41
7560x000b8020: 0x0b42 0x0b69 0x0b6f 0x0b73 0x0b20 0x0b63 0x0b75 0x0b72
7570x000b8030: 0x0b72 0x0b65 0x0b6e 0x0b74 0x0b2d 0x0b63 0x0b76 0x0b73
7580x000b8040: 0x0b20 0x0b30 0x0b35 0x0b20 0x0b4e 0x0b6f 0x0b76 0x0b20
7590x000b8050: 0x0b32 0x0b30 0x0b30 0x0b33 0x0720 0x0720 0x0720 0x0720
7600x000b8060: 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720
7610x000b8070: 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720
7620x000b8080: 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720
7630x000b8090: 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720
debc7065 764@end smallexample
1f673135
FB
765@end itemize
766
767@item p or print/fmt expr
768
769Print expression value. Only the @var{format} part of @var{fmt} is
770used.
0806e3f6 771
a3a91a35
FB
772@item sendkey keys
773
774Send @var{keys} to the emulator. Use @code{-} to press several keys
775simultaneously. Example:
776@example
777sendkey ctrl-alt-f1
778@end example
779
780This command is useful to send keys that your graphical user interface
781intercepts at low level, such as @code{ctrl-alt-f1} in X Window.
782
15a34c63
FB
783@item system_reset
784
785Reset the system.
786
b389dbfb
FB
787@item usb_add devname
788
0aff66b5
PB
789Add the USB device @var{devname}. For details of available devices see
790@ref{usb_devices}
b389dbfb
FB
791
792@item usb_del devname
793
794Remove the USB device @var{devname} from the QEMU virtual USB
795hub. @var{devname} has the syntax @code{bus.addr}. Use the monitor
796command @code{info usb} to see the devices you can remove.
797
1f673135 798@end table
0806e3f6 799
1f673135
FB
800@subsection Integer expressions
801
802The monitor understands integers expressions for every integer
803argument. You can use register names to get the value of specifics
804CPU registers by prefixing them with @emph{$}.
ec410fc9 805
1f47a922
FB
806@node disk_images
807@section Disk Images
808
acd935ef
FB
809Since version 0.6.1, QEMU supports many disk image formats, including
810growable disk images (their size increase as non empty sectors are
811written), compressed and encrypted disk images.
1f47a922 812
debc7065
FB
813@menu
814* disk_images_quickstart:: Quick start for disk image creation
815* disk_images_snapshot_mode:: Snapshot mode
816* qemu_img_invocation:: qemu-img Invocation
817* disk_images_fat_images:: Virtual FAT disk images
818@end menu
819
820@node disk_images_quickstart
acd935ef
FB
821@subsection Quick start for disk image creation
822
823You can create a disk image with the command:
1f47a922 824@example
acd935ef 825qemu-img create myimage.img mysize
1f47a922 826@end example
acd935ef
FB
827where @var{myimage.img} is the disk image filename and @var{mysize} is its
828size in kilobytes. You can add an @code{M} suffix to give the size in
829megabytes and a @code{G} suffix for gigabytes.
830
debc7065 831See @ref{qemu_img_invocation} for more information.
1f47a922 832
debc7065 833@node disk_images_snapshot_mode
1f47a922
FB
834@subsection Snapshot mode
835
836If you use the option @option{-snapshot}, all disk images are
837considered as read only. When sectors in written, they are written in
838a temporary file created in @file{/tmp}. You can however force the
acd935ef
FB
839write back to the raw disk images by using the @code{commit} monitor
840command (or @key{C-a s} in the serial console).
1f47a922 841
acd935ef
FB
842@node qemu_img_invocation
843@subsection @code{qemu-img} Invocation
1f47a922 844
acd935ef 845@include qemu-img.texi
05efe46e 846
debc7065 847@node disk_images_fat_images
2c6cadd4
FB
848@subsection Virtual FAT disk images
849
850QEMU can automatically create a virtual FAT disk image from a
851directory tree. In order to use it, just type:
852
853@example
854qemu linux.img -hdb fat:/my_directory
855@end example
856
857Then you access access to all the files in the @file{/my_directory}
858directory without having to copy them in a disk image or to export
859them via SAMBA or NFS. The default access is @emph{read-only}.
860
861Floppies can be emulated with the @code{:floppy:} option:
862
863@example
864qemu linux.img -fda fat:floppy:/my_directory
865@end example
866
867A read/write support is available for testing (beta stage) with the
868@code{:rw:} option:
869
870@example
871qemu linux.img -fda fat:floppy:rw:/my_directory
872@end example
873
874What you should @emph{never} do:
875@itemize
876@item use non-ASCII filenames ;
877@item use "-snapshot" together with ":rw:" ;
85b2c688
FB
878@item expect it to work when loadvm'ing ;
879@item write to the FAT directory on the host system while accessing it with the guest system.
2c6cadd4
FB
880@end itemize
881
debc7065 882@node pcsys_network
9d4fb82e
FB
883@section Network emulation
884
41d03949
FB
885QEMU can simulate several networks cards (NE2000 boards on the PC
886target) and can connect them to an arbitrary number of Virtual Local
887Area Networks (VLANs). Host TAP devices can be connected to any QEMU
888VLAN. VLAN can be connected between separate instances of QEMU to
889simulate large networks. For simpler usage, a non priviledged user mode
890network stack can replace the TAP device to have a basic network
891connection.
892
893@subsection VLANs
9d4fb82e 894
41d03949
FB
895QEMU simulates several VLANs. A VLAN can be symbolised as a virtual
896connection between several network devices. These devices can be for
897example QEMU virtual Ethernet cards or virtual Host ethernet devices
898(TAP devices).
9d4fb82e 899
41d03949
FB
900@subsection Using TAP network interfaces
901
902This is the standard way to connect QEMU to a real network. QEMU adds
903a virtual network device on your host (called @code{tapN}), and you
904can then configure it as if it was a real ethernet card.
9d4fb82e
FB
905
906As an example, you can download the @file{linux-test-xxx.tar.gz}
907archive and copy the script @file{qemu-ifup} in @file{/etc} and
908configure properly @code{sudo} so that the command @code{ifconfig}
909contained in @file{qemu-ifup} can be executed as root. You must verify
41d03949 910that your host kernel supports the TAP network interfaces: the
9d4fb82e
FB
911device @file{/dev/net/tun} must be present.
912
913See @ref{direct_linux_boot} to have an example of network use with a
41d03949
FB
914Linux distribution and @ref{sec_invocation} to have examples of
915command lines using the TAP network interfaces.
9d4fb82e
FB
916
917@subsection Using the user mode network stack
918
41d03949
FB
919By using the option @option{-net user} (default configuration if no
920@option{-net} option is specified), QEMU uses a completely user mode
921network stack (you don't need root priviledge to use the virtual
922network). The virtual network configuration is the following:
9d4fb82e
FB
923
924@example
925
41d03949
FB
926 QEMU VLAN <------> Firewall/DHCP server <-----> Internet
927 | (10.0.2.2)
9d4fb82e 928 |
2518bd0d
FB
929 ----> DNS server (10.0.2.3)
930 |
931 ----> SMB server (10.0.2.4)
9d4fb82e
FB
932@end example
933
934The QEMU VM behaves as if it was behind a firewall which blocks all
935incoming connections. You can use a DHCP client to automatically
41d03949
FB
936configure the network in the QEMU VM. The DHCP server assign addresses
937to the hosts starting from 10.0.2.15.
9d4fb82e
FB
938
939In order to check that the user mode network is working, you can ping
940the address 10.0.2.2 and verify that you got an address in the range
94110.0.2.x from the QEMU virtual DHCP server.
942
b415a407
FB
943Note that @code{ping} is not supported reliably to the internet as it
944would require root priviledges. It means you can only ping the local
945router (10.0.2.2).
946
9bf05444
FB
947When using the built-in TFTP server, the router is also the TFTP
948server.
949
950When using the @option{-redir} option, TCP or UDP connections can be
951redirected from the host to the guest. It allows for example to
952redirect X11, telnet or SSH connections.
443f1376 953
41d03949
FB
954@subsection Connecting VLANs between QEMU instances
955
956Using the @option{-net socket} option, it is possible to make VLANs
957that span several QEMU instances. See @ref{sec_invocation} to have a
958basic example.
959
9d4fb82e
FB
960@node direct_linux_boot
961@section Direct Linux Boot
1f673135
FB
962
963This section explains how to launch a Linux kernel inside QEMU without
964having to make a full bootable image. It is very useful for fast Linux
965kernel testing. The QEMU network configuration is also explained.
966
967@enumerate
968@item
969Download the archive @file{linux-test-xxx.tar.gz} containing a Linux
970kernel and a disk image.
971
972@item Optional: If you want network support (for example to launch X11 examples), you
973must copy the script @file{qemu-ifup} in @file{/etc} and configure
974properly @code{sudo} so that the command @code{ifconfig} contained in
975@file{qemu-ifup} can be executed as root. You must verify that your host
976kernel supports the TUN/TAP network interfaces: the device
977@file{/dev/net/tun} must be present.
978
979When network is enabled, there is a virtual network connection between
980the host kernel and the emulated kernel. The emulated kernel is seen
981from the host kernel at IP address 172.20.0.2 and the host kernel is
982seen from the emulated kernel at IP address 172.20.0.1.
983
984@item Launch @code{qemu.sh}. You should have the following output:
985
debc7065 986@smallexample
1f673135
FB
987> ./qemu.sh
988Connected to host network interface: tun0
debc7065 989Linux version 2.4.21 (bellard@@voyager.localdomain) (gcc version 3.2.2 20030222 @/(Red Hat @/Linux 3.2.2-5)) #5 Tue Nov 11 18:18:53 CET 2003
1f673135
FB
990BIOS-provided physical RAM map:
991 BIOS-e801: 0000000000000000 - 000000000009f000 (usable)
992 BIOS-e801: 0000000000100000 - 0000000002000000 (usable)
99332MB LOWMEM available.
994On node 0 totalpages: 8192
995zone(0): 4096 pages.
996zone(1): 4096 pages.
997zone(2): 0 pages.
debc7065 998Kernel command line: root=/dev/hda sb=0x220,5,1,5 ide2=noprobe ide3=noprobe ide4=noprobe @/ide5=noprobe console=ttyS0
1f673135
FB
999ide_setup: ide2=noprobe
1000ide_setup: ide3=noprobe
1001ide_setup: ide4=noprobe
1002ide_setup: ide5=noprobe
1003Initializing CPU#0
1004Detected 2399.621 MHz processor.
1005Console: colour EGA 80x25
1006Calibrating delay loop... 4744.80 BogoMIPS
debc7065 1007Memory: 28872k/32768k available (1210k kernel code, 3508k reserved, 266k data, 64k init, @/0k highmem)
1f673135
FB
1008Dentry cache hash table entries: 4096 (order: 3, 32768 bytes)
1009Inode cache hash table entries: 2048 (order: 2, 16384 bytes)
1010Mount cache hash table entries: 512 (order: 0, 4096 bytes)
1011Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
1012Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
1013CPU: Intel Pentium Pro stepping 03
1014Checking 'hlt' instruction... OK.
1015POSIX conformance testing by UNIFIX
1016Linux NET4.0 for Linux 2.4
1017Based upon Swansea University Computer Society NET3.039
1018Initializing RT netlink socket
1019apm: BIOS not found.
1020Starting kswapd
1021Journalled Block Device driver loaded
1022Detected PS/2 Mouse Port.
1023pty: 256 Unix98 ptys configured
1024Serial driver version 5.05c (2001-07-08) with no serial options enabled
1025ttyS00 at 0x03f8 (irq = 4) is a 16450
fa7cf687 1026ne.c:v1.10 9/23/94 Donald Becker (becker@@scyld.com)
1f673135
FB
1027Last modified Nov 1, 2000 by Paul Gortmaker
1028NE*000 ethercard probe at 0x300: 52 54 00 12 34 56
1029eth0: NE2000 found at 0x300, using IRQ 9.
1030RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize
1031Uniform Multi-Platform E-IDE driver Revision: 7.00beta4-2.4
1032ide: Assuming 50MHz system bus speed for PIO modes; override with idebus=xx
1033hda: QEMU HARDDISK, ATA DISK drive
1034ide0 at 0x1f0-0x1f7,0x3f6 on irq 14
1035hda: attached ide-disk driver.
1036hda: 20480 sectors (10 MB) w/256KiB Cache, CHS=20/16/63
1037Partition check:
1038 hda:
1039Soundblaster audio driver Copyright (C) by Hannu Savolainen 1993-1996
1040NET4: Linux TCP/IP 1.0 for NET4.0
1041IP Protocols: ICMP, UDP, TCP, IGMP
1042IP: routing cache hash table of 512 buckets, 4Kbytes
1043TCP: Hash tables configured (established 2048 bind 4096)
1044NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
1045EXT2-fs warning: mounting unchecked fs, running e2fsck is recommended
1046VFS: Mounted root (ext2 filesystem).
1047Freeing unused kernel memory: 64k freed
1048
debc7065 1049Linux version 2.4.21 (bellard@@voyager.localdomain) (gcc version 3.2.2 20030222 @/(Red Hat @/Linux 3.2.2-5)) #5 Tue Nov 11 18:18:53 CET 2003
1f673135
FB
1050
1051QEMU Linux test distribution (based on Redhat 9)
1052
1053Type 'exit' to halt the system
1054
1055sh-2.05b#
debc7065 1056@end smallexample
1f673135
FB
1057
1058@item
1059Then you can play with the kernel inside the virtual serial console. You
1060can launch @code{ls} for example. Type @key{Ctrl-a h} to have an help
1061about the keys you can type inside the virtual serial console. In
1062particular, use @key{Ctrl-a x} to exit QEMU and use @key{Ctrl-a b} as
1063the Magic SysRq key.
1064
1065@item
1066If the network is enabled, launch the script @file{/etc/linuxrc} in the
1067emulator (don't forget the leading dot):
1068@example
1069. /etc/linuxrc
1070@end example
1071
1072Then enable X11 connections on your PC from the emulated Linux:
1073@example
1074xhost +172.20.0.2
1075@end example
1076
1077You can now launch @file{xterm} or @file{xlogo} and verify that you have
1078a real Virtual Linux system !
1079
1080@end enumerate
1081
1082NOTES:
1083@enumerate
1084@item
1085A 2.5.74 kernel is also included in the archive. Just
1086replace the bzImage in qemu.sh to try it.
1087
1f673135
FB
1088@item
1089In order to exit cleanly from qemu, you can do a @emph{shutdown} inside
1090qemu. qemu will automatically exit when the Linux shutdown is done.
1091
1092@item
1093You can boot slightly faster by disabling the probe of non present IDE
1094interfaces. To do so, add the following options on the kernel command
1095line:
1096@example
1097ide1=noprobe ide2=noprobe ide3=noprobe ide4=noprobe ide5=noprobe
1098@end example
1099
1100@item
1101The example disk image is a modified version of the one made by Kevin
1102Lawton for the plex86 Project (@url{www.plex86.org}).
1103
1104@end enumerate
1105
debc7065 1106@node pcsys_usb
b389dbfb
FB
1107@section USB emulation
1108
0aff66b5
PB
1109QEMU emulates a PCI UHCI USB controller. You can virtually plug
1110virtual USB devices or real host USB devices (experimental, works only
1111on Linux hosts). Qemu will automatically create and connect virtual USB hubs
1112as neccessary to connect multiple USB devices.
b389dbfb 1113
0aff66b5
PB
1114@menu
1115* usb_devices::
1116* host_usb_devices::
1117@end menu
1118@node usb_devices
1119@subsection Connecting USB devices
b389dbfb 1120
0aff66b5
PB
1121USB devices can be connected with the @option{-usbdevice} commandline option
1122or the @code{usb_add} monitor command. Available devices are:
b389dbfb 1123
0aff66b5
PB
1124@table @var
1125@item @code{mouse}
1126Virtual Mouse. This will override the PS/2 mouse emulation when activated.
1127@item @code{tablet}
1128Pointer device that uses abolsute coordinates (like a touchscreen).
1129This means qemu is able to report the mouse position without having
1130to grab the mouse. Also overrides the PS/2 mouse emulation when activated.
1131@item @code{disk:file}
1132Mass storage device based on @var{file} (@pxref{disk_images})
1133@item @code{host:bus.addr}
1134Pass through the host device identified by @var{bus.addr}
1135(Linux only)
1136@item @code{host:vendor_id:product_id}
1137Pass through the host device identified by @var{vendor_id:product_id}
1138(Linux only)
1139@end table
b389dbfb 1140
0aff66b5 1141@node host_usb_devices
b389dbfb
FB
1142@subsection Using host USB devices on a Linux host
1143
1144WARNING: this is an experimental feature. QEMU will slow down when
1145using it. USB devices requiring real time streaming (i.e. USB Video
1146Cameras) are not supported yet.
1147
1148@enumerate
1149@item If you use an early Linux 2.4 kernel, verify that no Linux driver
1150is actually using the USB device. A simple way to do that is simply to
1151disable the corresponding kernel module by renaming it from @file{mydriver.o}
1152to @file{mydriver.o.disabled}.
1153
1154@item Verify that @file{/proc/bus/usb} is working (most Linux distributions should enable it by default). You should see something like that:
1155@example
1156ls /proc/bus/usb
1157001 devices drivers
1158@end example
1159
1160@item Since only root can access to the USB devices directly, you can either launch QEMU as root or change the permissions of the USB devices you want to use. For testing, the following suffices:
1161@example
1162chown -R myuid /proc/bus/usb
1163@end example
1164
1165@item Launch QEMU and do in the monitor:
1166@example
1167info usbhost
1168 Device 1.2, speed 480 Mb/s
1169 Class 00: USB device 1234:5678, USB DISK
1170@end example
1171You should see the list of the devices you can use (Never try to use
1172hubs, it won't work).
1173
1174@item Add the device in QEMU by using:
1175@example
1176usb_add host:1234:5678
1177@end example
1178
1179Normally the guest OS should report that a new USB device is
1180plugged. You can use the option @option{-usbdevice} to do the same.
1181
1182@item Now you can try to use the host USB device in QEMU.
1183
1184@end enumerate
1185
1186When relaunching QEMU, you may have to unplug and plug again the USB
1187device to make it work again (this is a bug).
1188
0806e3f6 1189@node gdb_usage
da415d54
FB
1190@section GDB usage
1191
1192QEMU has a primitive support to work with gdb, so that you can do
0806e3f6 1193'Ctrl-C' while the virtual machine is running and inspect its state.
da415d54 1194
9d4520d0 1195In order to use gdb, launch qemu with the '-s' option. It will wait for a
da415d54
FB
1196gdb connection:
1197@example
debc7065
FB
1198> qemu -s -kernel arch/i386/boot/bzImage -hda root-2.4.20.img \
1199 -append "root=/dev/hda"
da415d54
FB
1200Connected to host network interface: tun0
1201Waiting gdb connection on port 1234
1202@end example
1203
1204Then launch gdb on the 'vmlinux' executable:
1205@example
1206> gdb vmlinux
1207@end example
1208
1209In gdb, connect to QEMU:
1210@example
6c9bf893 1211(gdb) target remote localhost:1234
da415d54
FB
1212@end example
1213
1214Then you can use gdb normally. For example, type 'c' to launch the kernel:
1215@example
1216(gdb) c
1217@end example
1218
0806e3f6
FB
1219Here are some useful tips in order to use gdb on system code:
1220
1221@enumerate
1222@item
1223Use @code{info reg} to display all the CPU registers.
1224@item
1225Use @code{x/10i $eip} to display the code at the PC position.
1226@item
1227Use @code{set architecture i8086} to dump 16 bit code. Then use
294e8637 1228@code{x/10i $cs*16+$eip} to dump the code at the PC position.
0806e3f6
FB
1229@end enumerate
1230
debc7065 1231@node pcsys_os_specific
1a084f3d
FB
1232@section Target OS specific information
1233
1234@subsection Linux
1235
15a34c63
FB
1236To have access to SVGA graphic modes under X11, use the @code{vesa} or
1237the @code{cirrus} X11 driver. For optimal performances, use 16 bit
1238color depth in the guest and the host OS.
1a084f3d 1239
e3371e62
FB
1240When using a 2.6 guest Linux kernel, you should add the option
1241@code{clock=pit} on the kernel command line because the 2.6 Linux
1242kernels make very strict real time clock checks by default that QEMU
1243cannot simulate exactly.
1244
7c3fc84d
FB
1245When using a 2.6 guest Linux kernel, verify that the 4G/4G patch is
1246not activated because QEMU is slower with this patch. The QEMU
1247Accelerator Module is also much slower in this case. Earlier Fedora
1248Core 3 Linux kernel (< 2.6.9-1.724_FC3) were known to incorporte this
1249patch by default. Newer kernels don't have it.
1250
1a084f3d
FB
1251@subsection Windows
1252
1253If you have a slow host, using Windows 95 is better as it gives the
1254best speed. Windows 2000 is also a good choice.
1255
e3371e62
FB
1256@subsubsection SVGA graphic modes support
1257
1258QEMU emulates a Cirrus Logic GD5446 Video
15a34c63
FB
1259card. All Windows versions starting from Windows 95 should recognize
1260and use this graphic card. For optimal performances, use 16 bit color
1261depth in the guest and the host OS.
1a084f3d 1262
e3371e62
FB
1263@subsubsection CPU usage reduction
1264
1265Windows 9x does not correctly use the CPU HLT
15a34c63
FB
1266instruction. The result is that it takes host CPU cycles even when
1267idle. You can install the utility from
1268@url{http://www.user.cityline.ru/~maxamn/amnhltm.zip} to solve this
1269problem. Note that no such tool is needed for NT, 2000 or XP.
1a084f3d 1270
9d0a8e6f 1271@subsubsection Windows 2000 disk full problem
e3371e62 1272
9d0a8e6f
FB
1273Windows 2000 has a bug which gives a disk full problem during its
1274installation. When installing it, use the @option{-win2k-hack} QEMU
1275option to enable a specific workaround. After Windows 2000 is
1276installed, you no longer need this option (this option slows down the
1277IDE transfers).
e3371e62 1278
6cc721cf
FB
1279@subsubsection Windows 2000 shutdown
1280
1281Windows 2000 cannot automatically shutdown in QEMU although Windows 98
1282can. It comes from the fact that Windows 2000 does not automatically
1283use the APM driver provided by the BIOS.
1284
1285In order to correct that, do the following (thanks to Struan
1286Bartlett): go to the Control Panel => Add/Remove Hardware & Next =>
1287Add/Troubleshoot a device => Add a new device & Next => No, select the
1288hardware from a list & Next => NT Apm/Legacy Support & Next => Next
1289(again) a few times. Now the driver is installed and Windows 2000 now
1290correctly instructs QEMU to shutdown at the appropriate moment.
1291
1292@subsubsection Share a directory between Unix and Windows
1293
1294See @ref{sec_invocation} about the help of the option @option{-smb}.
1295
e3371e62
FB
1296@subsubsection Windows XP security problems
1297
1298Some releases of Windows XP install correctly but give a security
1299error when booting:
1300@example
1301A problem is preventing Windows from accurately checking the
1302license for this computer. Error code: 0x800703e6.
1303@end example
1304The only known workaround is to boot in Safe mode
1305without networking support.
1306
1307Future QEMU releases are likely to correct this bug.
1308
a0a821a4
FB
1309@subsection MS-DOS and FreeDOS
1310
1311@subsubsection CPU usage reduction
1312
1313DOS does not correctly use the CPU HLT instruction. The result is that
1314it takes host CPU cycles even when idle. You can install the utility
1315from @url{http://www.vmware.com/software/dosidle210.zip} to solve this
1316problem.
1317
debc7065 1318@node QEMU System emulator for non PC targets
3f9f3aa1
FB
1319@chapter QEMU System emulator for non PC targets
1320
1321QEMU is a generic emulator and it emulates many non PC
1322machines. Most of the options are similar to the PC emulator. The
1323differences are mentionned in the following sections.
1324
debc7065
FB
1325@menu
1326* QEMU PowerPC System emulator::
1327* Sparc32 System emulator invocation::
1328* Sparc64 System emulator invocation::
1329* MIPS System emulator invocation::
1330* ARM System emulator invocation::
1331@end menu
1332
1333@node QEMU PowerPC System emulator
3f9f3aa1 1334@section QEMU PowerPC System emulator
1a084f3d 1335
15a34c63
FB
1336Use the executable @file{qemu-system-ppc} to simulate a complete PREP
1337or PowerMac PowerPC system.
1a084f3d 1338
b671f9ed 1339QEMU emulates the following PowerMac peripherals:
1a084f3d 1340
15a34c63
FB
1341@itemize @minus
1342@item
1343UniNorth PCI Bridge
1344@item
1345PCI VGA compatible card with VESA Bochs Extensions
1346@item
13472 PMAC IDE interfaces with hard disk and CD-ROM support
1348@item
1349NE2000 PCI adapters
1350@item
1351Non Volatile RAM
1352@item
1353VIA-CUDA with ADB keyboard and mouse.
1a084f3d
FB
1354@end itemize
1355
b671f9ed 1356QEMU emulates the following PREP peripherals:
52c00a5f
FB
1357
1358@itemize @minus
1359@item
15a34c63
FB
1360PCI Bridge
1361@item
1362PCI VGA compatible card with VESA Bochs Extensions
1363@item
52c00a5f
FB
13642 IDE interfaces with hard disk and CD-ROM support
1365@item
1366Floppy disk
1367@item
15a34c63 1368NE2000 network adapters
52c00a5f
FB
1369@item
1370Serial port
1371@item
1372PREP Non Volatile RAM
15a34c63
FB
1373@item
1374PC compatible keyboard and mouse.
52c00a5f
FB
1375@end itemize
1376
15a34c63 1377QEMU uses the Open Hack'Ware Open Firmware Compatible BIOS available at
3f9f3aa1 1378@url{http://perso.magic.fr/l_indien/OpenHackWare/index.htm}.
52c00a5f 1379
15a34c63
FB
1380@c man begin OPTIONS
1381
1382The following options are specific to the PowerPC emulation:
1383
1384@table @option
1385
15a34c63
FB
1386@item -g WxH[xDEPTH]
1387
1388Set the initial VGA graphic mode. The default is 800x600x15.
1389
1390@end table
1391
1392@c man end
1393
1394
52c00a5f 1395More information is available at
3f9f3aa1 1396@url{http://perso.magic.fr/l_indien/qemu-ppc/}.
52c00a5f 1397
debc7065 1398@node Sparc32 System emulator invocation
3f9f3aa1 1399@section Sparc32 System emulator invocation
e80cfcfc 1400
0986ac3b 1401Use the executable @file{qemu-system-sparc} to simulate a SparcStation 5
3475187d 1402(sun4m architecture). The emulation is somewhat complete.
e80cfcfc 1403
b671f9ed 1404QEMU emulates the following sun4m peripherals:
e80cfcfc
FB
1405
1406@itemize @minus
3475187d 1407@item
e80cfcfc
FB
1408IOMMU
1409@item
1410TCX Frame buffer
1411@item
1412Lance (Am7990) Ethernet
1413@item
1414Non Volatile RAM M48T08
1415@item
3475187d
FB
1416Slave I/O: timers, interrupt controllers, Zilog serial ports, keyboard
1417and power/reset logic
1418@item
1419ESP SCSI controller with hard disk and CD-ROM support
1420@item
1421Floppy drive
e80cfcfc
FB
1422@end itemize
1423
3475187d
FB
1424The number of peripherals is fixed in the architecture.
1425
0986ac3b
FB
1426Since version 0.8.1, QEMU uses OpenBIOS
1427@url{http://www.openbios.org/}. OpenBIOS is a free (GPL v2) portable
1428firmware implementation. The goal is to implement a 100% IEEE
14291275-1994 (referred to as Open Firmware) compliant firmware.
3475187d
FB
1430
1431A sample Linux 2.6 series kernel and ram disk image are available on
0986ac3b
FB
1432the QEMU web site. Please note that currently NetBSD, OpenBSD or
1433Solaris kernels don't work.
3475187d
FB
1434
1435@c man begin OPTIONS
1436
1437The following options are specific to the Sparc emulation:
1438
1439@table @option
1440
1441@item -g WxH
1442
1443Set the initial TCX graphic mode. The default is 1024x768.
1444
1445@end table
1446
1447@c man end
1448
debc7065 1449@node Sparc64 System emulator invocation
3f9f3aa1 1450@section Sparc64 System emulator invocation
e80cfcfc 1451
3475187d
FB
1452Use the executable @file{qemu-system-sparc64} to simulate a Sun4u machine.
1453The emulator is not usable for anything yet.
b756921a 1454
83469015
FB
1455QEMU emulates the following sun4u peripherals:
1456
1457@itemize @minus
1458@item
1459UltraSparc IIi APB PCI Bridge
1460@item
1461PCI VGA compatible card with VESA Bochs Extensions
1462@item
1463Non Volatile RAM M48T59
1464@item
1465PC-compatible serial ports
1466@end itemize
1467
debc7065 1468@node MIPS System emulator invocation
3f9f3aa1 1469@section MIPS System emulator invocation
9d0a8e6f
FB
1470
1471Use the executable @file{qemu-system-mips} to simulate a MIPS machine.
3f9f3aa1
FB
1472The emulator is able to boot a Linux kernel and to run a Linux Debian
1473installation from NFS. The following devices are emulated:
1474
1475@itemize @minus
1476@item
1477MIPS R4K CPU
1478@item
1479PC style serial port
1480@item
1481NE2000 network card
1482@end itemize
1483
1484More information is available in the QEMU mailing-list archive.
1485
debc7065 1486@node ARM System emulator invocation
3f9f3aa1
FB
1487@section ARM System emulator invocation
1488
1489Use the executable @file{qemu-system-arm} to simulate a ARM
1490machine. The ARM Integrator/CP board is emulated with the following
1491devices:
1492
1493@itemize @minus
1494@item
ed96ca35 1495ARM926E or ARM1026E CPU
3f9f3aa1
FB
1496@item
1497Two PL011 UARTs
1498@item
1499SMC 91c111 Ethernet adapter
00a9bf19
PB
1500@item
1501PL110 LCD controller
1502@item
1503PL050 KMI with PS/2 keyboard and mouse.
1504@end itemize
1505
1506The ARM Versatile baseboard is emulated with the following devices:
1507
1508@itemize @minus
1509@item
1510ARM926E CPU
1511@item
1512PL190 Vectored Interrupt Controller
1513@item
1514Four PL011 UARTs
1515@item
1516SMC 91c111 Ethernet adapter
1517@item
1518PL110 LCD controller
1519@item
1520PL050 KMI with PS/2 keyboard and mouse.
1521@item
1522PCI host bridge. Note the emulated PCI bridge only provides access to
1523PCI memory space. It does not provide access to PCI IO space.
1524This means some devices (eg. ne2k_pci NIC) are not useable, and others
1525(eg. rtl8139 NIC) are only useable when the guest drivers use the memory
1526mapped control registers.
3f9f3aa1
FB
1527@end itemize
1528
1529A Linux 2.6 test image is available on the QEMU web site. More
1530information is available in the QEMU mailing-list archive.
9d0a8e6f 1531
debc7065 1532@node QEMU Linux User space emulator
3f9f3aa1 1533@chapter QEMU Linux User space emulator
386405f7 1534
debc7065
FB
1535@menu
1536* Quick Start::
1537* Wine launch::
1538* Command line options::
79737e4a 1539* Other binaries::
debc7065
FB
1540@end menu
1541
1542@node Quick Start
1f673135 1543@section Quick Start
df0f11a0 1544
1f673135
FB
1545In order to launch a Linux process, QEMU needs the process executable
1546itself and all the target (x86) dynamic libraries used by it.
386405f7 1547
1f673135 1548@itemize
386405f7 1549
1f673135
FB
1550@item On x86, you can just try to launch any process by using the native
1551libraries:
386405f7 1552
1f673135
FB
1553@example
1554qemu-i386 -L / /bin/ls
1555@end example
386405f7 1556
1f673135
FB
1557@code{-L /} tells that the x86 dynamic linker must be searched with a
1558@file{/} prefix.
386405f7 1559
1f673135 1560@item Since QEMU is also a linux process, you can launch qemu with qemu (NOTE: you can only do that if you compiled QEMU from the sources):
386405f7 1561
1f673135
FB
1562@example
1563qemu-i386 -L / qemu-i386 -L / /bin/ls
1564@end example
386405f7 1565
1f673135
FB
1566@item On non x86 CPUs, you need first to download at least an x86 glibc
1567(@file{qemu-runtime-i386-XXX-.tar.gz} on the QEMU web page). Ensure that
1568@code{LD_LIBRARY_PATH} is not set:
df0f11a0 1569
1f673135
FB
1570@example
1571unset LD_LIBRARY_PATH
1572@end example
1eb87257 1573
1f673135 1574Then you can launch the precompiled @file{ls} x86 executable:
1eb87257 1575
1f673135
FB
1576@example
1577qemu-i386 tests/i386/ls
1578@end example
1579You can look at @file{qemu-binfmt-conf.sh} so that
1580QEMU is automatically launched by the Linux kernel when you try to
1581launch x86 executables. It requires the @code{binfmt_misc} module in the
1582Linux kernel.
1eb87257 1583
1f673135
FB
1584@item The x86 version of QEMU is also included. You can try weird things such as:
1585@example
debc7065
FB
1586qemu-i386 /usr/local/qemu-i386/bin/qemu-i386 \
1587 /usr/local/qemu-i386/bin/ls-i386
1f673135 1588@end example
1eb20527 1589
1f673135 1590@end itemize
1eb20527 1591
debc7065 1592@node Wine launch
1f673135 1593@section Wine launch
1eb20527 1594
1f673135 1595@itemize
386405f7 1596
1f673135
FB
1597@item Ensure that you have a working QEMU with the x86 glibc
1598distribution (see previous section). In order to verify it, you must be
1599able to do:
386405f7 1600
1f673135
FB
1601@example
1602qemu-i386 /usr/local/qemu-i386/bin/ls-i386
1603@end example
386405f7 1604
1f673135
FB
1605@item Download the binary x86 Wine install
1606(@file{qemu-XXX-i386-wine.tar.gz} on the QEMU web page).
386405f7 1607
1f673135 1608@item Configure Wine on your account. Look at the provided script
debc7065 1609@file{/usr/local/qemu-i386/@/bin/wine-conf.sh}. Your previous
1f673135 1610@code{$@{HOME@}/.wine} directory is saved to @code{$@{HOME@}/.wine.org}.
386405f7 1611
1f673135 1612@item Then you can try the example @file{putty.exe}:
386405f7 1613
1f673135 1614@example
debc7065
FB
1615qemu-i386 /usr/local/qemu-i386/wine/bin/wine \
1616 /usr/local/qemu-i386/wine/c/Program\ Files/putty.exe
1f673135 1617@end example
386405f7 1618
1f673135 1619@end itemize
fd429f2f 1620
debc7065 1621@node Command line options
1f673135 1622@section Command line options
1eb20527 1623
1f673135
FB
1624@example
1625usage: qemu-i386 [-h] [-d] [-L path] [-s size] program [arguments...]
1626@end example
1eb20527 1627
1f673135
FB
1628@table @option
1629@item -h
1630Print the help
1631@item -L path
1632Set the x86 elf interpreter prefix (default=/usr/local/qemu-i386)
1633@item -s size
1634Set the x86 stack size in bytes (default=524288)
386405f7
FB
1635@end table
1636
1f673135 1637Debug options:
386405f7 1638
1f673135
FB
1639@table @option
1640@item -d
1641Activate log (logfile=/tmp/qemu.log)
1642@item -p pagesize
1643Act as if the host page size was 'pagesize' bytes
1644@end table
386405f7 1645
79737e4a
PB
1646@node Other binaries
1647@section Other binaries
1648
1649@command{qemu-arm} is also capable of running ARM "Angel" semihosted ELF
1650binaries (as implemented by the arm-elf and arm-eabi Newlib/GDB
1651configurations), and arm-uclinux bFLT format binaries.
1652
1653The binary format is detected automatically.
1654
15a34c63
FB
1655@node compilation
1656@chapter Compilation from the sources
1657
debc7065
FB
1658@menu
1659* Linux/Unix::
1660* Windows::
1661* Cross compilation for Windows with Linux::
1662* Mac OS X::
1663@end menu
1664
1665@node Linux/Unix
7c3fc84d
FB
1666@section Linux/Unix
1667
1668@subsection Compilation
1669
1670First you must decompress the sources:
1671@example
1672cd /tmp
1673tar zxvf qemu-x.y.z.tar.gz
1674cd qemu-x.y.z
1675@end example
1676
1677Then you configure QEMU and build it (usually no options are needed):
1678@example
1679./configure
1680make
1681@end example
1682
1683Then type as root user:
1684@example
1685make install
1686@end example
1687to install QEMU in @file{/usr/local}.
1688
7c3fc84d
FB
1689@subsection Tested tool versions
1690
1691In order to compile QEMU succesfully, it is very important that you
1692have the right tools. The most important one is gcc. I cannot guaranty
1693that QEMU works if you do not use a tested gcc version. Look at
1694'configure' and 'Makefile' if you want to make a different gcc
1695version work.
1696
1697@example
1698host gcc binutils glibc linux distribution
1699----------------------------------------------------------------------
1700x86 3.2 2.13.2 2.1.3 2.4.18
1701 2.96 2.11.93.0.2 2.2.5 2.4.18 Red Hat 7.3
1702 3.2.2 2.13.90.0.18 2.3.2 2.4.20 Red Hat 9
1703
1704PowerPC 3.3 [4] 2.13.90.0.18 2.3.1 2.4.20briq
1705 3.2
1706
1707Alpha 3.3 [1] 2.14.90.0.4 2.2.5 2.2.20 [2] Debian 3.0
1708
1709Sparc32 2.95.4 2.12.90.0.1 2.2.5 2.4.18 Debian 3.0
1710
1711ARM 2.95.4 2.12.90.0.1 2.2.5 2.4.9 [3] Debian 3.0
1712
1713[1] On Alpha, QEMU needs the gcc 'visibility' attribute only available
1714 for gcc version >= 3.3.
1715[2] Linux >= 2.4.20 is necessary for precise exception support
1716 (untested).
1717[3] 2.4.9-ac10-rmk2-np1-cerf2
1718
1719[4] gcc 2.95.x generates invalid code when using too many register
1720variables. You must use gcc 3.x on PowerPC.
1721@end example
15a34c63 1722
debc7065 1723@node Windows
15a34c63
FB
1724@section Windows
1725
1726@itemize
1727@item Install the current versions of MSYS and MinGW from
1728@url{http://www.mingw.org/}. You can find detailed installation
1729instructions in the download section and the FAQ.
1730
1731@item Download
1732the MinGW development library of SDL 1.2.x
debc7065 1733(@file{SDL-devel-1.2.x-@/mingw32.tar.gz}) from
15a34c63
FB
1734@url{http://www.libsdl.org}. Unpack it in a temporary place, and
1735unpack the archive @file{i386-mingw32msvc.tar.gz} in the MinGW tool
1736directory. Edit the @file{sdl-config} script so that it gives the
1737correct SDL directory when invoked.
1738
1739@item Extract the current version of QEMU.
1740
1741@item Start the MSYS shell (file @file{msys.bat}).
1742
1743@item Change to the QEMU directory. Launch @file{./configure} and
1744@file{make}. If you have problems using SDL, verify that
1745@file{sdl-config} can be launched from the MSYS command line.
1746
1747@item You can install QEMU in @file{Program Files/Qemu} by typing
1748@file{make install}. Don't forget to copy @file{SDL.dll} in
1749@file{Program Files/Qemu}.
1750
1751@end itemize
1752
debc7065 1753@node Cross compilation for Windows with Linux
15a34c63
FB
1754@section Cross compilation for Windows with Linux
1755
1756@itemize
1757@item
1758Install the MinGW cross compilation tools available at
1759@url{http://www.mingw.org/}.
1760
1761@item
1762Install the Win32 version of SDL (@url{http://www.libsdl.org}) by
1763unpacking @file{i386-mingw32msvc.tar.gz}. Set up the PATH environment
1764variable so that @file{i386-mingw32msvc-sdl-config} can be launched by
1765the QEMU configuration script.
1766
1767@item
1768Configure QEMU for Windows cross compilation:
1769@example
1770./configure --enable-mingw32
1771@end example
1772If necessary, you can change the cross-prefix according to the prefix
1773choosen for the MinGW tools with --cross-prefix. You can also use
1774--prefix to set the Win32 install path.
1775
1776@item You can install QEMU in the installation directory by typing
1777@file{make install}. Don't forget to copy @file{SDL.dll} in the
1778installation directory.
1779
1780@end itemize
1781
1782Note: Currently, Wine does not seem able to launch
1783QEMU for Win32.
1784
debc7065 1785@node Mac OS X
15a34c63
FB
1786@section Mac OS X
1787
1788The Mac OS X patches are not fully merged in QEMU, so you should look
1789at the QEMU mailing list archive to have all the necessary
1790information.
1791
debc7065
FB
1792@node Index
1793@chapter Index
1794@printindex cp
1795
1796@bye