]>
Commit | Line | Data |
---|---|---|
386405f7 FB |
1 | \input texinfo @c -*- texinfo -*- |
2 | ||
0806e3f6 | 3 | @iftex |
1f673135 | 4 | @settitle QEMU CPU Emulator User Documentation |
386405f7 FB |
5 | @titlepage |
6 | @sp 7 | |
1f673135 | 7 | @center @titlefont{QEMU CPU Emulator User Documentation} |
386405f7 FB |
8 | @sp 3 |
9 | @end titlepage | |
0806e3f6 | 10 | @end iftex |
386405f7 FB |
11 | |
12 | @chapter Introduction | |
13 | ||
322d0c66 | 14 | @section Features |
386405f7 | 15 | |
1f673135 FB |
16 | QEMU is a FAST! processor emulator using dynamic translation to |
17 | achieve good emulation speed. | |
1eb20527 FB |
18 | |
19 | QEMU has two operating modes: | |
0806e3f6 FB |
20 | |
21 | @itemize @minus | |
22 | ||
23 | @item | |
1f673135 FB |
24 | Full system emulation. In this mode, QEMU emulates a full system (for |
25 | example a PC), including a processor and various peripherials. It can | |
26 | be used to launch different Operating Systems without rebooting the | |
27 | PC or to debug system code. | |
1eb20527 | 28 | |
0806e3f6 | 29 | @item |
1f673135 FB |
30 | User mode emulation (Linux host only). In this mode, QEMU can launch |
31 | Linux processes compiled for one CPU on another CPU. It can be used to | |
32 | launch the Wine Windows API emulator (@url{http://www.winehq.org}) or | |
33 | to ease cross-compilation and cross-debugging. | |
1eb20527 FB |
34 | |
35 | @end itemize | |
36 | ||
1f673135 | 37 | As QEMU requires no host kernel driver to run, it is very safe and |
1eb20527 | 38 | easy to use. |
322d0c66 | 39 | |
52c00a5f FB |
40 | For system emulation, the following hardware targets are supported: |
41 | @itemize | |
42 | @item PC (x86 processor) | |
43 | @item PREP (PowerPC processor) | |
15a34c63 | 44 | @item PowerMac (PowerPC processor, in progress) |
52c00a5f | 45 | @end itemize |
386405f7 | 46 | |
1f673135 | 47 | For user emulation, x86, PowerPC, ARM, and SPARC CPUs are supported. |
0806e3f6 | 48 | |
5b9f457a FB |
49 | @chapter Installation |
50 | ||
15a34c63 FB |
51 | If you want to compile QEMU yourself, see @ref{compilation}. |
52 | ||
1f673135 FB |
53 | @section Linux |
54 | ||
15a34c63 FB |
55 | Download the binary distribution (@file{qemu-XXX-i386.tar.gz}) and |
56 | untar it as root in @file{/}: | |
5b9f457a FB |
57 | |
58 | @example | |
59 | su | |
60 | cd / | |
61 | tar zxvf /tmp/qemu-XXX-i386.tar.gz | |
62 | @end example | |
63 | ||
1f673135 | 64 | @section Windows |
8cd0ac2f | 65 | |
15a34c63 FB |
66 | Download the experimental binary installer at |
67 | @url{http://www.freeoszoo.org/download.php}. | |
d691f669 | 68 | |
1f673135 | 69 | @section Mac OS X |
d691f669 | 70 | |
15a34c63 FB |
71 | Download the experimental binary installer at |
72 | @url{http://www.freeoszoo.org/download.php}. | |
df0f11a0 | 73 | |
52c00a5f | 74 | @chapter QEMU PC System emulator invocation |
1eb20527 | 75 | |
0806e3f6 FB |
76 | @section Introduction |
77 | ||
78 | @c man begin DESCRIPTION | |
79 | ||
52c00a5f | 80 | The QEMU System emulator simulates a complete PC. |
0806e3f6 FB |
81 | |
82 | In order to meet specific user needs, two versions of QEMU are | |
83 | available: | |
84 | ||
85 | @enumerate | |
86 | ||
87 | @item | |
15a34c63 FB |
88 | @code{qemu-fast} uses the host Memory Management Unit (MMU) to |
89 | simulate the x86 MMU. It is @emph{fast} but has limitations because | |
90 | the whole 4 GB address space cannot be used and some memory mapped | |
91 | peripherials cannot be emulated accurately yet. Therefore, a specific | |
3eb2619f FB |
92 | guest Linux kernel can be used (@xref{linux_compile}) as guest |
93 | OS. | |
94 | ||
95 | Moreover there is no separation between the host and target address | |
96 | spaces, so it offers no security (the target OS can modify the | |
97 | @code{qemu-fast} code by writing at the right addresses). | |
0806e3f6 FB |
98 | |
99 | @item | |
3eb2619f FB |
100 | @code{qemu} uses a software MMU. It is about @emph{two times slower} |
101 | but gives a more accurate emulation and a complete separation between | |
102 | the host and target address spaces. | |
0806e3f6 FB |
103 | |
104 | @end enumerate | |
105 | ||
106 | QEMU emulates the following PC peripherials: | |
107 | ||
108 | @itemize @minus | |
15a34c63 FB |
109 | @item |
110 | i440FX host PCI bridge and PIIX3 PCI to ISA bridge | |
0806e3f6 | 111 | @item |
15a34c63 FB |
112 | Cirrus CLGD 5446 PCI VGA card or dummy VGA card with Bochs VESA |
113 | extensions (hardware level, including all non standard modes). | |
0806e3f6 FB |
114 | @item |
115 | PS/2 mouse and keyboard | |
116 | @item | |
15a34c63 | 117 | 2 PCI IDE interfaces with hard disk and CD-ROM support |
1f673135 FB |
118 | @item |
119 | Floppy disk | |
0806e3f6 | 120 | @item |
15a34c63 | 121 | NE2000 PCI network adapters |
0806e3f6 | 122 | @item |
05d5818c FB |
123 | Serial ports |
124 | @item | |
181f1558 | 125 | Soundblaster 16 card |
0806e3f6 FB |
126 | @end itemize |
127 | ||
15a34c63 FB |
128 | QEMU uses the PC BIOS from the Bochs project and the Plex86/Bochs LGPL |
129 | VGA BIOS. | |
130 | ||
0806e3f6 FB |
131 | @c man end |
132 | ||
1eb20527 FB |
133 | @section Quick Start |
134 | ||
285dc330 | 135 | Download and uncompress the linux image (@file{linux.img}) and type: |
0806e3f6 FB |
136 | |
137 | @example | |
285dc330 | 138 | qemu linux.img |
0806e3f6 FB |
139 | @end example |
140 | ||
141 | Linux should boot and give you a prompt. | |
142 | ||
ec410fc9 FB |
143 | @section Invocation |
144 | ||
145 | @example | |
0806e3f6 FB |
146 | @c man begin SYNOPSIS |
147 | usage: qemu [options] [disk_image] | |
148 | @c man end | |
ec410fc9 FB |
149 | @end example |
150 | ||
0806e3f6 | 151 | @c man begin OPTIONS |
9d4520d0 | 152 | @var{disk_image} is a raw hard disk image for IDE hard disk 0. |
ec410fc9 FB |
153 | |
154 | General options: | |
155 | @table @option | |
2be3bc02 FB |
156 | @item -fda file |
157 | @item -fdb file | |
be3edd95 FB |
158 | Use @var{file} as floppy disk 0/1 image (@xref{disk_images}). You can |
159 | use the host floppy by using @file{/dev/fd0} as filename. | |
2be3bc02 | 160 | |
ec410fc9 FB |
161 | @item -hda file |
162 | @item -hdb file | |
181f1558 FB |
163 | @item -hdc file |
164 | @item -hdd file | |
2be3bc02 | 165 | Use @var{file} as hard disk 0, 1, 2 or 3 image (@xref{disk_images}). |
1f47a922 | 166 | |
181f1558 FB |
167 | @item -cdrom file |
168 | Use @var{file} as CD-ROM image (you cannot use @option{-hdc} and and | |
be3edd95 FB |
169 | @option{-cdrom} at the same time). You can use the host CD-ROM by |
170 | using @file{/dev/cdrom} as filename. | |
181f1558 | 171 | |
1f673135 FB |
172 | @item -boot [a|c|d] |
173 | Boot on floppy (a), hard disk (c) or CD-ROM (d). Hard disk boot is | |
2be3bc02 | 174 | the default. |
1f47a922 | 175 | |
181f1558 | 176 | @item -snapshot |
1f47a922 FB |
177 | Write to temporary files instead of disk image files. In this case, |
178 | the raw disk image you use is not written back. You can however force | |
179 | the write back by pressing @key{C-a s} (@xref{disk_images}). | |
ec410fc9 FB |
180 | |
181 | @item -m megs | |
15a34c63 | 182 | Set virtual RAM size to @var{megs} megabytes. Default is 128 MB. |
ec410fc9 | 183 | |
4690764b | 184 | @item -initrd file |
0806e3f6 FB |
185 | Use @var{file} as initial ram disk. |
186 | ||
0806e3f6 FB |
187 | @item -nographic |
188 | ||
189 | Normally, QEMU uses SDL to display the VGA output. With this option, | |
190 | you can totally disable graphical output so that QEMU is a simple | |
191 | command line application. The emulated serial port is redirected on | |
192 | the console. Therefore, you can still use QEMU to debug a Linux kernel | |
193 | with a serial console. | |
194 | ||
a8c490cd FB |
195 | @item -enable-audio |
196 | ||
197 | The SB16 emulation is disabled by default as it may give problems with | |
198 | Windows. You can enable it manually with this option. | |
199 | ||
15a34c63 FB |
200 | @item -localtime |
201 | Set the real time clock to local time (the default is to UTC | |
202 | time). This option is needed to have correct date in MS-DOS or | |
203 | Windows. | |
204 | ||
0806e3f6 FB |
205 | @end table |
206 | ||
1f673135 FB |
207 | Network options: |
208 | ||
209 | @table @option | |
210 | ||
211 | @item -n script | |
52c00a5f FB |
212 | Set TUN/TAP network init script [default=/etc/qemu-ifup]. This script |
213 | is launched to configure the host network interface (usually tun0) | |
1f673135 FB |
214 | corresponding to the virtual NE2000 card. |
215 | ||
1f673135 FB |
216 | @item -macaddr addr |
217 | ||
218 | Set the mac address of the first interface (the format is | |
219 | aa:bb:cc:dd:ee:ff in hexa). The mac address is incremented for each | |
220 | new network interface. | |
221 | ||
52c00a5f FB |
222 | @item -tun-fd fd |
223 | Assumes @var{fd} talks to a tap/tun host network interface and use | |
224 | it. Read @url{http://bellard.org/qemu/tetrinet.html} to have an | |
225 | example of its use. | |
226 | ||
227 | @item -user-net | |
15a34c63 FB |
228 | Use the user mode network stack. This is the default if no tun/tap |
229 | network init script is found. | |
52c00a5f FB |
230 | |
231 | @item -dummy-net | |
15a34c63 | 232 | Use the dummy network stack: no packet will be received by the network |
52c00a5f | 233 | cards. |
1f673135 FB |
234 | |
235 | @end table | |
236 | ||
237 | Linux boot specific. When using this options, you can use a given | |
238 | Linux kernel without installing it in the disk image. It can be useful | |
239 | for easier testing of various kernels. | |
240 | ||
0806e3f6 FB |
241 | @table @option |
242 | ||
243 | @item -kernel bzImage | |
244 | Use @var{bzImage} as kernel image. | |
245 | ||
246 | @item -append cmdline | |
247 | Use @var{cmdline} as kernel command line | |
248 | ||
249 | @item -initrd file | |
250 | Use @var{file} as initial ram disk. | |
251 | ||
ec410fc9 FB |
252 | @end table |
253 | ||
15a34c63 | 254 | Debug/Expert options: |
ec410fc9 | 255 | @table @option |
a0a821a4 FB |
256 | |
257 | @item -serial dev | |
258 | Redirect the virtual serial port to host device @var{dev}. Available | |
259 | devices are: | |
260 | @table @code | |
261 | @item vc | |
262 | Virtual console | |
263 | @item pty | |
264 | [Linux only] Pseudo TTY (a new PTY is automatically allocated) | |
265 | @item null | |
266 | void device | |
267 | @item stdio | |
268 | [Unix only] standard input/output | |
269 | @end table | |
270 | The default device is @code{vc} in graphical mode and @code{stdio} in | |
271 | non graphical mode. | |
272 | ||
05d5818c FB |
273 | This option can be used several times to simulate up to 4 serials |
274 | ports. | |
275 | ||
a0a821a4 FB |
276 | @item -monitor dev |
277 | Redirect the monitor to host device @var{dev} (same devices as the | |
278 | serial port). | |
279 | The default device is @code{vc} in graphical mode and @code{stdio} in | |
280 | non graphical mode. | |
281 | ||
ec410fc9 | 282 | @item -s |
0806e3f6 | 283 | Wait gdb connection to port 1234 (@xref{gdb_usage}). |
ec410fc9 FB |
284 | @item -p port |
285 | Change gdb connection port. | |
52c00a5f FB |
286 | @item -S |
287 | Do not start CPU at startup (you must type 'c' in the monitor). | |
ec410fc9 | 288 | @item -d |
9d4520d0 | 289 | Output log in /tmp/qemu.log |
15a34c63 FB |
290 | @item -isa |
291 | Simulate an ISA-only system (default is PCI system). | |
292 | @item -std-vga | |
293 | Simulate a standard VGA card with Bochs VBE extensions (default is | |
294 | Cirrus Logic GD5446 PCI VGA) | |
295 | ||
ec410fc9 FB |
296 | @end table |
297 | ||
3e11db9a FB |
298 | @c man end |
299 | ||
300 | @section Keys | |
301 | ||
302 | @c man begin OPTIONS | |
303 | ||
a1b74fe8 FB |
304 | During the graphical emulation, you can use the following keys: |
305 | @table @key | |
10d315a8 | 306 | @item Ctrl-Shift-f |
a1b74fe8 | 307 | Toggle full screen |
a0a821a4 FB |
308 | |
309 | @item Ctrl-Shift-Fn | |
310 | Switch to virtual console 'n'. Standard console mappings are: | |
311 | @table @emph | |
312 | @item 1 | |
313 | Target system display | |
314 | @item 2 | |
315 | Monitor | |
316 | @item 3 | |
317 | Serial port | |
a1b74fe8 FB |
318 | @end table |
319 | ||
a0a821a4 FB |
320 | @item Ctrl-Shift |
321 | Toggle mouse and keyboard grab. | |
322 | @end table | |
323 | ||
3e11db9a FB |
324 | In the virtual consoles, you can use @key{Ctrl-Up}, @key{Ctrl-Down}, |
325 | @key{Ctrl-PageUp} and @key{Ctrl-PageDown} to move in the back log. | |
326 | ||
a0a821a4 FB |
327 | During emulation, if you are using the @option{-nographic} option, use |
328 | @key{Ctrl-a h} to get terminal commands: | |
ec410fc9 FB |
329 | |
330 | @table @key | |
a1b74fe8 | 331 | @item Ctrl-a h |
ec410fc9 | 332 | Print this help |
a1b74fe8 | 333 | @item Ctrl-a x |
ec410fc9 | 334 | Exit emulatior |
a1b74fe8 | 335 | @item Ctrl-a s |
1f47a922 | 336 | Save disk data back to file (if -snapshot) |
a1b74fe8 | 337 | @item Ctrl-a b |
1f673135 | 338 | Send break (magic sysrq in Linux) |
a1b74fe8 | 339 | @item Ctrl-a c |
1f673135 | 340 | Switch between console and monitor |
a1b74fe8 FB |
341 | @item Ctrl-a Ctrl-a |
342 | Send Ctrl-a | |
ec410fc9 | 343 | @end table |
0806e3f6 FB |
344 | @c man end |
345 | ||
346 | @ignore | |
347 | ||
348 | @setfilename qemu | |
349 | @settitle QEMU System Emulator | |
350 | ||
1f673135 FB |
351 | @c man begin SEEALSO |
352 | The HTML documentation of QEMU for more precise information and Linux | |
353 | user mode emulator invocation. | |
354 | @c man end | |
355 | ||
356 | @c man begin AUTHOR | |
357 | Fabrice Bellard | |
358 | @c man end | |
359 | ||
360 | @end ignore | |
361 | ||
362 | @end ignore | |
363 | ||
364 | ||
365 | @section QEMU Monitor | |
366 | ||
367 | The QEMU monitor is used to give complex commands to the QEMU | |
368 | emulator. You can use it to: | |
369 | ||
370 | @itemize @minus | |
371 | ||
372 | @item | |
373 | Remove or insert removable medias images | |
374 | (such as CD-ROM or floppies) | |
375 | ||
376 | @item | |
377 | Freeze/unfreeze the Virtual Machine (VM) and save or restore its state | |
378 | from a disk file. | |
379 | ||
380 | @item Inspect the VM state without an external debugger. | |
381 | ||
382 | @end itemize | |
383 | ||
384 | @subsection Commands | |
385 | ||
386 | The following commands are available: | |
387 | ||
388 | @table @option | |
389 | ||
390 | @item help or ? [cmd] | |
391 | Show the help for all commands or just for command @var{cmd}. | |
392 | ||
393 | @item commit | |
394 | Commit changes to the disk images (if -snapshot is used) | |
395 | ||
396 | @item info subcommand | |
397 | show various information about the system state | |
398 | ||
399 | @table @option | |
400 | @item info network | |
401 | show the network state | |
402 | @item info block | |
403 | show the block devices | |
404 | @item info registers | |
405 | show the cpu registers | |
406 | @item info history | |
407 | show the command line history | |
408 | @end table | |
409 | ||
410 | @item q or quit | |
411 | Quit the emulator. | |
412 | ||
413 | @item eject [-f] device | |
414 | Eject a removable media (use -f to force it). | |
415 | ||
416 | @item change device filename | |
417 | Change a removable media. | |
418 | ||
419 | @item screendump filename | |
420 | Save screen into PPM image @var{filename}. | |
421 | ||
422 | @item log item1[,...] | |
423 | Activate logging of the specified items to @file{/tmp/qemu.log}. | |
424 | ||
425 | @item savevm filename | |
426 | Save the whole virtual machine state to @var{filename}. | |
427 | ||
428 | @item loadvm filename | |
429 | Restore the whole virtual machine state from @var{filename}. | |
430 | ||
431 | @item stop | |
432 | Stop emulation. | |
433 | ||
434 | @item c or cont | |
435 | Resume emulation. | |
436 | ||
437 | @item gdbserver [port] | |
438 | Start gdbserver session (default port=1234) | |
439 | ||
440 | @item x/fmt addr | |
441 | Virtual memory dump starting at @var{addr}. | |
442 | ||
443 | @item xp /fmt addr | |
444 | Physical memory dump starting at @var{addr}. | |
445 | ||
446 | @var{fmt} is a format which tells the command how to format the | |
447 | data. Its syntax is: @option{/@{count@}@{format@}@{size@}} | |
448 | ||
449 | @table @var | |
450 | @item count | |
451 | is the number of items to be dumped. | |
452 | ||
453 | @item format | |
454 | can be x (hexa), d (signed decimal), u (unsigned decimal), o (octal), | |
455 | c (char) or i (asm instruction). | |
456 | ||
457 | @item size | |
52c00a5f FB |
458 | can be b (8 bits), h (16 bits), w (32 bits) or g (64 bits). On x86, |
459 | @code{h} or @code{w} can be specified with the @code{i} format to | |
460 | respectively select 16 or 32 bit code instruction size. | |
1f673135 FB |
461 | |
462 | @end table | |
463 | ||
464 | Examples: | |
465 | @itemize | |
466 | @item | |
467 | Dump 10 instructions at the current instruction pointer: | |
468 | @example | |
469 | (qemu) x/10i $eip | |
470 | 0x90107063: ret | |
471 | 0x90107064: sti | |
472 | 0x90107065: lea 0x0(%esi,1),%esi | |
473 | 0x90107069: lea 0x0(%edi,1),%edi | |
474 | 0x90107070: ret | |
475 | 0x90107071: jmp 0x90107080 | |
476 | 0x90107073: nop | |
477 | 0x90107074: nop | |
478 | 0x90107075: nop | |
479 | 0x90107076: nop | |
480 | @end example | |
481 | ||
482 | @item | |
483 | Dump 80 16 bit values at the start of the video memory. | |
484 | @example | |
485 | (qemu) xp/80hx 0xb8000 | |
486 | 0x000b8000: 0x0b50 0x0b6c 0x0b65 0x0b78 0x0b38 0x0b36 0x0b2f 0x0b42 | |
487 | 0x000b8010: 0x0b6f 0x0b63 0x0b68 0x0b73 0x0b20 0x0b56 0x0b47 0x0b41 | |
488 | 0x000b8020: 0x0b42 0x0b69 0x0b6f 0x0b73 0x0b20 0x0b63 0x0b75 0x0b72 | |
489 | 0x000b8030: 0x0b72 0x0b65 0x0b6e 0x0b74 0x0b2d 0x0b63 0x0b76 0x0b73 | |
490 | 0x000b8040: 0x0b20 0x0b30 0x0b35 0x0b20 0x0b4e 0x0b6f 0x0b76 0x0b20 | |
491 | 0x000b8050: 0x0b32 0x0b30 0x0b30 0x0b33 0x0720 0x0720 0x0720 0x0720 | |
492 | 0x000b8060: 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 | |
493 | 0x000b8070: 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 | |
494 | 0x000b8080: 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 | |
495 | 0x000b8090: 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 0x0720 | |
496 | @end example | |
497 | @end itemize | |
498 | ||
499 | @item p or print/fmt expr | |
500 | ||
501 | Print expression value. Only the @var{format} part of @var{fmt} is | |
502 | used. | |
0806e3f6 | 503 | |
a3a91a35 FB |
504 | @item sendkey keys |
505 | ||
506 | Send @var{keys} to the emulator. Use @code{-} to press several keys | |
507 | simultaneously. Example: | |
508 | @example | |
509 | sendkey ctrl-alt-f1 | |
510 | @end example | |
511 | ||
512 | This command is useful to send keys that your graphical user interface | |
513 | intercepts at low level, such as @code{ctrl-alt-f1} in X Window. | |
514 | ||
15a34c63 FB |
515 | @item system_reset |
516 | ||
517 | Reset the system. | |
518 | ||
1f673135 | 519 | @end table |
0806e3f6 | 520 | |
1f673135 FB |
521 | @subsection Integer expressions |
522 | ||
523 | The monitor understands integers expressions for every integer | |
524 | argument. You can use register names to get the value of specifics | |
525 | CPU registers by prefixing them with @emph{$}. | |
ec410fc9 | 526 | |
1f47a922 FB |
527 | @node disk_images |
528 | @section Disk Images | |
529 | ||
530 | @subsection Raw disk images | |
531 | ||
532 | The disk images can simply be raw images of the hard disk. You can | |
533 | create them with the command: | |
534 | @example | |
a1b74fe8 | 535 | dd of=myimage bs=1024 seek=mysize count=0 |
1f47a922 FB |
536 | @end example |
537 | where @var{myimage} is the image filename and @var{mysize} is its size | |
538 | in kilobytes. | |
539 | ||
540 | @subsection Snapshot mode | |
541 | ||
542 | If you use the option @option{-snapshot}, all disk images are | |
543 | considered as read only. When sectors in written, they are written in | |
544 | a temporary file created in @file{/tmp}. You can however force the | |
545 | write back to the raw disk images by pressing @key{C-a s}. | |
546 | ||
547 | NOTE: The snapshot mode only works with raw disk images. | |
548 | ||
549 | @subsection Copy On Write disk images | |
550 | ||
551 | QEMU also supports user mode Linux | |
552 | (@url{http://user-mode-linux.sourceforge.net/}) Copy On Write (COW) | |
553 | disk images. The COW disk images are much smaller than normal images | |
554 | as they store only modified sectors. They also permit the use of the | |
555 | same disk image template for many users. | |
556 | ||
557 | To create a COW disk images, use the command: | |
558 | ||
559 | @example | |
0806e3f6 | 560 | qemu-mkcow -f myrawimage.bin mycowimage.cow |
1f47a922 FB |
561 | @end example |
562 | ||
563 | @file{myrawimage.bin} is a raw image you want to use as original disk | |
564 | image. It will never be written to. | |
565 | ||
566 | @file{mycowimage.cow} is the COW disk image which is created by | |
0806e3f6 | 567 | @code{qemu-mkcow}. You can use it directly with the @option{-hdx} |
1f47a922 FB |
568 | options. You must not modify the original raw disk image if you use |
569 | COW images, as COW images only store the modified sectors from the raw | |
570 | disk image. QEMU stores the original raw disk image name and its | |
571 | modified time in the COW disk image so that chances of mistakes are | |
572 | reduced. | |
573 | ||
9d0fe224 FB |
574 | If the raw disk image is not read-only, by pressing @key{C-a s} you |
575 | can flush the COW disk image back into the raw disk image, as in | |
576 | snapshot mode. | |
1f47a922 FB |
577 | |
578 | COW disk images can also be created without a corresponding raw disk | |
579 | image. It is useful to have a big initial virtual disk image without | |
580 | using much disk space. Use: | |
581 | ||
582 | @example | |
0806e3f6 | 583 | qemu-mkcow mycowimage.cow 1024 |
1f47a922 FB |
584 | @end example |
585 | ||
586 | to create a 1 gigabyte empty COW disk image. | |
587 | ||
588 | NOTES: | |
589 | @enumerate | |
590 | @item | |
591 | COW disk images must be created on file systems supporting | |
592 | @emph{holes} such as ext2 or ext3. | |
593 | @item | |
594 | Since holes are used, the displayed size of the COW disk image is not | |
595 | the real one. To know it, use the @code{ls -ls} command. | |
596 | @end enumerate | |
597 | ||
05efe46e FB |
598 | @subsection Convert VMware disk images to raw disk images |
599 | ||
600 | You can use the tool @file{vmdk2raw} to convert VMware disk images to | |
601 | raw disk images directly usable by QEMU. The syntax is: | |
602 | @example | |
603 | vmdk2raw vmware_image output_image | |
604 | @end example | |
605 | ||
9d4fb82e FB |
606 | @section Network emulation |
607 | ||
608 | QEMU simulates up to 6 networks cards (NE2000 boards). Each card can | |
609 | be connected to a specific host network interface. | |
610 | ||
611 | @subsection Using tun/tap network interface | |
612 | ||
613 | This is the standard way to emulate network. QEMU adds a virtual | |
614 | network device on your host (called @code{tun0}), and you can then | |
615 | configure it as if it was a real ethernet card. | |
616 | ||
617 | As an example, you can download the @file{linux-test-xxx.tar.gz} | |
618 | archive and copy the script @file{qemu-ifup} in @file{/etc} and | |
619 | configure properly @code{sudo} so that the command @code{ifconfig} | |
620 | contained in @file{qemu-ifup} can be executed as root. You must verify | |
621 | that your host kernel supports the TUN/TAP network interfaces: the | |
622 | device @file{/dev/net/tun} must be present. | |
623 | ||
624 | See @ref{direct_linux_boot} to have an example of network use with a | |
625 | Linux distribution. | |
626 | ||
627 | @subsection Using the user mode network stack | |
628 | ||
443f1376 FB |
629 | By using the option @option{-user-net} or if you have no tun/tap init |
630 | script, QEMU uses a completely user mode network stack (you don't need | |
631 | root priviledge to use the virtual network). The virtual network | |
632 | configuration is the following: | |
9d4fb82e FB |
633 | |
634 | @example | |
635 | ||
636 | QEMU Virtual Machine <------> Firewall/DHCP server <-----> Internet | |
637 | (10.0.2.x) | (10.0.2.2) | |
638 | | | |
639 | ----> DNS | |
640 | (10.0.2.3) | |
641 | @end example | |
642 | ||
643 | The QEMU VM behaves as if it was behind a firewall which blocks all | |
644 | incoming connections. You can use a DHCP client to automatically | |
645 | configure the network in the QEMU VM. | |
646 | ||
647 | In order to check that the user mode network is working, you can ping | |
648 | the address 10.0.2.2 and verify that you got an address in the range | |
649 | 10.0.2.x from the QEMU virtual DHCP server. | |
650 | ||
b415a407 FB |
651 | Note that @code{ping} is not supported reliably to the internet as it |
652 | would require root priviledges. It means you can only ping the local | |
653 | router (10.0.2.2). | |
654 | ||
443f1376 FB |
655 | The user mode network is currently only supported on a Unix host. |
656 | ||
9d4fb82e FB |
657 | @node direct_linux_boot |
658 | @section Direct Linux Boot | |
1f673135 FB |
659 | |
660 | This section explains how to launch a Linux kernel inside QEMU without | |
661 | having to make a full bootable image. It is very useful for fast Linux | |
662 | kernel testing. The QEMU network configuration is also explained. | |
663 | ||
664 | @enumerate | |
665 | @item | |
666 | Download the archive @file{linux-test-xxx.tar.gz} containing a Linux | |
667 | kernel and a disk image. | |
668 | ||
669 | @item Optional: If you want network support (for example to launch X11 examples), you | |
670 | must copy the script @file{qemu-ifup} in @file{/etc} and configure | |
671 | properly @code{sudo} so that the command @code{ifconfig} contained in | |
672 | @file{qemu-ifup} can be executed as root. You must verify that your host | |
673 | kernel supports the TUN/TAP network interfaces: the device | |
674 | @file{/dev/net/tun} must be present. | |
675 | ||
676 | When network is enabled, there is a virtual network connection between | |
677 | the host kernel and the emulated kernel. The emulated kernel is seen | |
678 | from the host kernel at IP address 172.20.0.2 and the host kernel is | |
679 | seen from the emulated kernel at IP address 172.20.0.1. | |
680 | ||
681 | @item Launch @code{qemu.sh}. You should have the following output: | |
682 | ||
683 | @example | |
684 | > ./qemu.sh | |
685 | Connected to host network interface: tun0 | |
686 | Linux version 2.4.21 (bellard@voyager.localdomain) (gcc version 3.2.2 20030222 (Red Hat Linux 3.2.2-5)) #5 Tue Nov 11 18:18:53 CET 2003 | |
687 | BIOS-provided physical RAM map: | |
688 | BIOS-e801: 0000000000000000 - 000000000009f000 (usable) | |
689 | BIOS-e801: 0000000000100000 - 0000000002000000 (usable) | |
690 | 32MB LOWMEM available. | |
691 | On node 0 totalpages: 8192 | |
692 | zone(0): 4096 pages. | |
693 | zone(1): 4096 pages. | |
694 | zone(2): 0 pages. | |
695 | Kernel command line: root=/dev/hda sb=0x220,5,1,5 ide2=noprobe ide3=noprobe ide4=noprobe ide5=noprobe console=ttyS0 | |
696 | ide_setup: ide2=noprobe | |
697 | ide_setup: ide3=noprobe | |
698 | ide_setup: ide4=noprobe | |
699 | ide_setup: ide5=noprobe | |
700 | Initializing CPU#0 | |
701 | Detected 2399.621 MHz processor. | |
702 | Console: colour EGA 80x25 | |
703 | Calibrating delay loop... 4744.80 BogoMIPS | |
704 | Memory: 28872k/32768k available (1210k kernel code, 3508k reserved, 266k data, 64k init, 0k highmem) | |
705 | Dentry cache hash table entries: 4096 (order: 3, 32768 bytes) | |
706 | Inode cache hash table entries: 2048 (order: 2, 16384 bytes) | |
707 | Mount cache hash table entries: 512 (order: 0, 4096 bytes) | |
708 | Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes) | |
709 | Page-cache hash table entries: 8192 (order: 3, 32768 bytes) | |
710 | CPU: Intel Pentium Pro stepping 03 | |
711 | Checking 'hlt' instruction... OK. | |
712 | POSIX conformance testing by UNIFIX | |
713 | Linux NET4.0 for Linux 2.4 | |
714 | Based upon Swansea University Computer Society NET3.039 | |
715 | Initializing RT netlink socket | |
716 | apm: BIOS not found. | |
717 | Starting kswapd | |
718 | Journalled Block Device driver loaded | |
719 | Detected PS/2 Mouse Port. | |
720 | pty: 256 Unix98 ptys configured | |
721 | Serial driver version 5.05c (2001-07-08) with no serial options enabled | |
722 | ttyS00 at 0x03f8 (irq = 4) is a 16450 | |
723 | ne.c:v1.10 9/23/94 Donald Becker (becker@scyld.com) | |
724 | Last modified Nov 1, 2000 by Paul Gortmaker | |
725 | NE*000 ethercard probe at 0x300: 52 54 00 12 34 56 | |
726 | eth0: NE2000 found at 0x300, using IRQ 9. | |
727 | RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize | |
728 | Uniform Multi-Platform E-IDE driver Revision: 7.00beta4-2.4 | |
729 | ide: Assuming 50MHz system bus speed for PIO modes; override with idebus=xx | |
730 | hda: QEMU HARDDISK, ATA DISK drive | |
731 | ide0 at 0x1f0-0x1f7,0x3f6 on irq 14 | |
732 | hda: attached ide-disk driver. | |
733 | hda: 20480 sectors (10 MB) w/256KiB Cache, CHS=20/16/63 | |
734 | Partition check: | |
735 | hda: | |
736 | Soundblaster audio driver Copyright (C) by Hannu Savolainen 1993-1996 | |
737 | NET4: Linux TCP/IP 1.0 for NET4.0 | |
738 | IP Protocols: ICMP, UDP, TCP, IGMP | |
739 | IP: routing cache hash table of 512 buckets, 4Kbytes | |
740 | TCP: Hash tables configured (established 2048 bind 4096) | |
741 | NET4: Unix domain sockets 1.0/SMP for Linux NET4.0. | |
742 | EXT2-fs warning: mounting unchecked fs, running e2fsck is recommended | |
743 | VFS: Mounted root (ext2 filesystem). | |
744 | Freeing unused kernel memory: 64k freed | |
745 | ||
746 | Linux version 2.4.21 (bellard@voyager.localdomain) (gcc version 3.2.2 20030222 (Red Hat Linux 3.2.2-5)) #5 Tue Nov 11 18:18:53 CET 2003 | |
747 | ||
748 | QEMU Linux test distribution (based on Redhat 9) | |
749 | ||
750 | Type 'exit' to halt the system | |
751 | ||
752 | sh-2.05b# | |
753 | @end example | |
754 | ||
755 | @item | |
756 | Then you can play with the kernel inside the virtual serial console. You | |
757 | can launch @code{ls} for example. Type @key{Ctrl-a h} to have an help | |
758 | about the keys you can type inside the virtual serial console. In | |
759 | particular, use @key{Ctrl-a x} to exit QEMU and use @key{Ctrl-a b} as | |
760 | the Magic SysRq key. | |
761 | ||
762 | @item | |
763 | If the network is enabled, launch the script @file{/etc/linuxrc} in the | |
764 | emulator (don't forget the leading dot): | |
765 | @example | |
766 | . /etc/linuxrc | |
767 | @end example | |
768 | ||
769 | Then enable X11 connections on your PC from the emulated Linux: | |
770 | @example | |
771 | xhost +172.20.0.2 | |
772 | @end example | |
773 | ||
774 | You can now launch @file{xterm} or @file{xlogo} and verify that you have | |
775 | a real Virtual Linux system ! | |
776 | ||
777 | @end enumerate | |
778 | ||
779 | NOTES: | |
780 | @enumerate | |
781 | @item | |
782 | A 2.5.74 kernel is also included in the archive. Just | |
783 | replace the bzImage in qemu.sh to try it. | |
784 | ||
785 | @item | |
786 | qemu-fast creates a temporary file in @var{$QEMU_TMPDIR} (@file{/tmp} is the | |
787 | default) containing all the simulated PC memory. If possible, try to use | |
788 | a temporary directory using the tmpfs filesystem to avoid too many | |
789 | unnecessary disk accesses. | |
790 | ||
791 | @item | |
792 | In order to exit cleanly from qemu, you can do a @emph{shutdown} inside | |
793 | qemu. qemu will automatically exit when the Linux shutdown is done. | |
794 | ||
795 | @item | |
796 | You can boot slightly faster by disabling the probe of non present IDE | |
797 | interfaces. To do so, add the following options on the kernel command | |
798 | line: | |
799 | @example | |
800 | ide1=noprobe ide2=noprobe ide3=noprobe ide4=noprobe ide5=noprobe | |
801 | @end example | |
802 | ||
803 | @item | |
804 | The example disk image is a modified version of the one made by Kevin | |
805 | Lawton for the plex86 Project (@url{www.plex86.org}). | |
806 | ||
807 | @end enumerate | |
808 | ||
0806e3f6 | 809 | @node linux_compile |
4690764b FB |
810 | @section Linux Kernel Compilation |
811 | ||
285dc330 | 812 | You can use any linux kernel with QEMU. However, if you want to use |
1f673135 FB |
813 | @code{qemu-fast} to get maximum performances, you must use a modified |
814 | guest kernel. If you are using a 2.6 guest kernel, you can use | |
815 | directly the patch @file{linux-2.6-qemu-fast.patch} made by Rusty | |
816 | Russel available in the QEMU source archive. Otherwise, you can make the | |
817 | following changes @emph{by hand} to the Linux kernel: | |
1eb20527 | 818 | |
4690764b FB |
819 | @enumerate |
820 | @item | |
821 | The kernel must be mapped at 0x90000000 (the default is | |
822 | 0xc0000000). You must modify only two lines in the kernel source: | |
1eb20527 | 823 | |
4690764b | 824 | In @file{include/asm/page.h}, replace |
1eb20527 FB |
825 | @example |
826 | #define __PAGE_OFFSET (0xc0000000) | |
827 | @end example | |
828 | by | |
829 | @example | |
830 | #define __PAGE_OFFSET (0x90000000) | |
831 | @end example | |
832 | ||
4690764b | 833 | And in @file{arch/i386/vmlinux.lds}, replace |
1eb20527 FB |
834 | @example |
835 | . = 0xc0000000 + 0x100000; | |
836 | @end example | |
837 | by | |
838 | @example | |
839 | . = 0x90000000 + 0x100000; | |
840 | @end example | |
841 | ||
4690764b FB |
842 | @item |
843 | If you want to enable SMP (Symmetric Multi-Processing) support, you | |
844 | must make the following change in @file{include/asm/fixmap.h}. Replace | |
1eb20527 | 845 | @example |
4690764b | 846 | #define FIXADDR_TOP (0xffffX000UL) |
1eb20527 | 847 | @end example |
4690764b FB |
848 | by |
849 | @example | |
850 | #define FIXADDR_TOP (0xa7ffX000UL) | |
851 | @end example | |
852 | (X is 'e' or 'f' depending on the kernel version). Although you can | |
853 | use an SMP kernel with QEMU, it only supports one CPU. | |
1eb20527 | 854 | |
4690764b | 855 | @item |
1f673135 FB |
856 | If you are not using a 2.6 kernel as host kernel but if you use a target |
857 | 2.6 kernel, you must also ensure that the 'HZ' define is set to 100 | |
d5a0b50c | 858 | (1000 is the default) as QEMU cannot currently emulate timers at |
1f673135 | 859 | frequencies greater than 100 Hz on host Linux systems < 2.6. In |
4690764b | 860 | @file{include/asm/param.h}, replace: |
d5a0b50c FB |
861 | |
862 | @example | |
863 | # define HZ 1000 /* Internal kernel timer frequency */ | |
864 | @end example | |
865 | by | |
866 | @example | |
867 | # define HZ 100 /* Internal kernel timer frequency */ | |
868 | @end example | |
869 | ||
4690764b FB |
870 | @end enumerate |
871 | ||
872 | The file config-2.x.x gives the configuration of the example kernels. | |
873 | ||
874 | Just type | |
875 | @example | |
876 | make bzImage | |
877 | @end example | |
878 | ||
879 | As you would do to make a real kernel. Then you can use with QEMU | |
880 | exactly the same kernel as you would boot on your PC (in | |
881 | @file{arch/i386/boot/bzImage}). | |
da415d54 | 882 | |
0806e3f6 | 883 | @node gdb_usage |
da415d54 FB |
884 | @section GDB usage |
885 | ||
886 | QEMU has a primitive support to work with gdb, so that you can do | |
0806e3f6 | 887 | 'Ctrl-C' while the virtual machine is running and inspect its state. |
da415d54 | 888 | |
9d4520d0 | 889 | In order to use gdb, launch qemu with the '-s' option. It will wait for a |
da415d54 FB |
890 | gdb connection: |
891 | @example | |
6c9bf893 | 892 | > qemu -s -kernel arch/i386/boot/bzImage -hda root-2.4.20.img -append "root=/dev/hda" |
da415d54 FB |
893 | Connected to host network interface: tun0 |
894 | Waiting gdb connection on port 1234 | |
895 | @end example | |
896 | ||
897 | Then launch gdb on the 'vmlinux' executable: | |
898 | @example | |
899 | > gdb vmlinux | |
900 | @end example | |
901 | ||
902 | In gdb, connect to QEMU: | |
903 | @example | |
6c9bf893 | 904 | (gdb) target remote localhost:1234 |
da415d54 FB |
905 | @end example |
906 | ||
907 | Then you can use gdb normally. For example, type 'c' to launch the kernel: | |
908 | @example | |
909 | (gdb) c | |
910 | @end example | |
911 | ||
0806e3f6 FB |
912 | Here are some useful tips in order to use gdb on system code: |
913 | ||
914 | @enumerate | |
915 | @item | |
916 | Use @code{info reg} to display all the CPU registers. | |
917 | @item | |
918 | Use @code{x/10i $eip} to display the code at the PC position. | |
919 | @item | |
920 | Use @code{set architecture i8086} to dump 16 bit code. Then use | |
921 | @code{x/10i $cs*16+*eip} to dump the code at the PC position. | |
922 | @end enumerate | |
923 | ||
1a084f3d FB |
924 | @section Target OS specific information |
925 | ||
926 | @subsection Linux | |
927 | ||
15a34c63 FB |
928 | To have access to SVGA graphic modes under X11, use the @code{vesa} or |
929 | the @code{cirrus} X11 driver. For optimal performances, use 16 bit | |
930 | color depth in the guest and the host OS. | |
1a084f3d | 931 | |
e3371e62 FB |
932 | When using a 2.6 guest Linux kernel, you should add the option |
933 | @code{clock=pit} on the kernel command line because the 2.6 Linux | |
934 | kernels make very strict real time clock checks by default that QEMU | |
935 | cannot simulate exactly. | |
936 | ||
1a084f3d FB |
937 | @subsection Windows |
938 | ||
939 | If you have a slow host, using Windows 95 is better as it gives the | |
940 | best speed. Windows 2000 is also a good choice. | |
941 | ||
e3371e62 FB |
942 | @subsubsection SVGA graphic modes support |
943 | ||
944 | QEMU emulates a Cirrus Logic GD5446 Video | |
15a34c63 FB |
945 | card. All Windows versions starting from Windows 95 should recognize |
946 | and use this graphic card. For optimal performances, use 16 bit color | |
947 | depth in the guest and the host OS. | |
1a084f3d | 948 | |
e3371e62 FB |
949 | @subsubsection CPU usage reduction |
950 | ||
951 | Windows 9x does not correctly use the CPU HLT | |
15a34c63 FB |
952 | instruction. The result is that it takes host CPU cycles even when |
953 | idle. You can install the utility from | |
954 | @url{http://www.user.cityline.ru/~maxamn/amnhltm.zip} to solve this | |
955 | problem. Note that no such tool is needed for NT, 2000 or XP. | |
1a084f3d | 956 | |
e3371e62 FB |
957 | @subsubsection Windows 2000 disk full problems |
958 | ||
959 | Currently (release 0.6.0) QEMU has a bug which gives a @code{disk | |
960 | full} error during installation of some releases of Windows 2000. The | |
961 | workaround is to stop QEMU as soon as you notice that your disk image | |
962 | size is growing too fast (monitor it with @code{ls -ls}). Then | |
963 | relaunch QEMU to continue the installation. If you still experience | |
964 | the problem, relaunch QEMU again. | |
965 | ||
966 | Future QEMU releases are likely to correct this bug. | |
967 | ||
968 | @subsubsection Windows XP security problems | |
969 | ||
970 | Some releases of Windows XP install correctly but give a security | |
971 | error when booting: | |
972 | @example | |
973 | A problem is preventing Windows from accurately checking the | |
974 | license for this computer. Error code: 0x800703e6. | |
975 | @end example | |
976 | The only known workaround is to boot in Safe mode | |
977 | without networking support. | |
978 | ||
979 | Future QEMU releases are likely to correct this bug. | |
980 | ||
a0a821a4 FB |
981 | @subsection MS-DOS and FreeDOS |
982 | ||
983 | @subsubsection CPU usage reduction | |
984 | ||
985 | DOS does not correctly use the CPU HLT instruction. The result is that | |
986 | it takes host CPU cycles even when idle. You can install the utility | |
987 | from @url{http://www.vmware.com/software/dosidle210.zip} to solve this | |
988 | problem. | |
989 | ||
15a34c63 | 990 | @chapter QEMU PowerPC System emulator invocation |
1a084f3d | 991 | |
15a34c63 FB |
992 | Use the executable @file{qemu-system-ppc} to simulate a complete PREP |
993 | or PowerMac PowerPC system. | |
1a084f3d | 994 | |
15a34c63 | 995 | QEMU emulates the following PowerMac peripherials: |
1a084f3d | 996 | |
15a34c63 FB |
997 | @itemize @minus |
998 | @item | |
999 | UniNorth PCI Bridge | |
1000 | @item | |
1001 | PCI VGA compatible card with VESA Bochs Extensions | |
1002 | @item | |
1003 | 2 PMAC IDE interfaces with hard disk and CD-ROM support | |
1004 | @item | |
1005 | NE2000 PCI adapters | |
1006 | @item | |
1007 | Non Volatile RAM | |
1008 | @item | |
1009 | VIA-CUDA with ADB keyboard and mouse. | |
1a084f3d FB |
1010 | @end itemize |
1011 | ||
52c00a5f FB |
1012 | QEMU emulates the following PREP peripherials: |
1013 | ||
1014 | @itemize @minus | |
1015 | @item | |
15a34c63 FB |
1016 | PCI Bridge |
1017 | @item | |
1018 | PCI VGA compatible card with VESA Bochs Extensions | |
1019 | @item | |
52c00a5f FB |
1020 | 2 IDE interfaces with hard disk and CD-ROM support |
1021 | @item | |
1022 | Floppy disk | |
1023 | @item | |
15a34c63 | 1024 | NE2000 network adapters |
52c00a5f FB |
1025 | @item |
1026 | Serial port | |
1027 | @item | |
1028 | PREP Non Volatile RAM | |
15a34c63 FB |
1029 | @item |
1030 | PC compatible keyboard and mouse. | |
52c00a5f FB |
1031 | @end itemize |
1032 | ||
15a34c63 FB |
1033 | QEMU uses the Open Hack'Ware Open Firmware Compatible BIOS available at |
1034 | @url{http://site.voila.fr/jmayer/OpenHackWare/index.htm}. | |
1035 | ||
52c00a5f FB |
1036 | You can read the qemu PC system emulation chapter to have more |
1037 | informations about QEMU usage. | |
1038 | ||
15a34c63 FB |
1039 | @c man begin OPTIONS |
1040 | ||
1041 | The following options are specific to the PowerPC emulation: | |
1042 | ||
1043 | @table @option | |
1044 | ||
1045 | @item -prep | |
1046 | Simulate a PREP system (default is PowerMAC) | |
1047 | ||
1048 | @item -g WxH[xDEPTH] | |
1049 | ||
1050 | Set the initial VGA graphic mode. The default is 800x600x15. | |
1051 | ||
1052 | @end table | |
1053 | ||
1054 | @c man end | |
1055 | ||
1056 | ||
52c00a5f FB |
1057 | More information is available at |
1058 | @url{http://jocelyn.mayer.free.fr/qemu-ppc/}. | |
1059 | ||
1f673135 | 1060 | @chapter QEMU User space emulator invocation |
386405f7 | 1061 | |
1f673135 | 1062 | @section Quick Start |
df0f11a0 | 1063 | |
1f673135 FB |
1064 | In order to launch a Linux process, QEMU needs the process executable |
1065 | itself and all the target (x86) dynamic libraries used by it. | |
386405f7 | 1066 | |
1f673135 | 1067 | @itemize |
386405f7 | 1068 | |
1f673135 FB |
1069 | @item On x86, you can just try to launch any process by using the native |
1070 | libraries: | |
386405f7 | 1071 | |
1f673135 FB |
1072 | @example |
1073 | qemu-i386 -L / /bin/ls | |
1074 | @end example | |
386405f7 | 1075 | |
1f673135 FB |
1076 | @code{-L /} tells that the x86 dynamic linker must be searched with a |
1077 | @file{/} prefix. | |
386405f7 | 1078 | |
1f673135 | 1079 | @item Since QEMU is also a linux process, you can launch qemu with qemu (NOTE: you can only do that if you compiled QEMU from the sources): |
386405f7 | 1080 | |
1f673135 FB |
1081 | @example |
1082 | qemu-i386 -L / qemu-i386 -L / /bin/ls | |
1083 | @end example | |
386405f7 | 1084 | |
1f673135 FB |
1085 | @item On non x86 CPUs, you need first to download at least an x86 glibc |
1086 | (@file{qemu-runtime-i386-XXX-.tar.gz} on the QEMU web page). Ensure that | |
1087 | @code{LD_LIBRARY_PATH} is not set: | |
df0f11a0 | 1088 | |
1f673135 FB |
1089 | @example |
1090 | unset LD_LIBRARY_PATH | |
1091 | @end example | |
1eb87257 | 1092 | |
1f673135 | 1093 | Then you can launch the precompiled @file{ls} x86 executable: |
1eb87257 | 1094 | |
1f673135 FB |
1095 | @example |
1096 | qemu-i386 tests/i386/ls | |
1097 | @end example | |
1098 | You can look at @file{qemu-binfmt-conf.sh} so that | |
1099 | QEMU is automatically launched by the Linux kernel when you try to | |
1100 | launch x86 executables. It requires the @code{binfmt_misc} module in the | |
1101 | Linux kernel. | |
1eb87257 | 1102 | |
1f673135 FB |
1103 | @item The x86 version of QEMU is also included. You can try weird things such as: |
1104 | @example | |
1105 | qemu-i386 /usr/local/qemu-i386/bin/qemu-i386 /usr/local/qemu-i386/bin/ls-i386 | |
1106 | @end example | |
1eb20527 | 1107 | |
1f673135 | 1108 | @end itemize |
1eb20527 | 1109 | |
1f673135 | 1110 | @section Wine launch |
1eb20527 | 1111 | |
1f673135 | 1112 | @itemize |
386405f7 | 1113 | |
1f673135 FB |
1114 | @item Ensure that you have a working QEMU with the x86 glibc |
1115 | distribution (see previous section). In order to verify it, you must be | |
1116 | able to do: | |
386405f7 | 1117 | |
1f673135 FB |
1118 | @example |
1119 | qemu-i386 /usr/local/qemu-i386/bin/ls-i386 | |
1120 | @end example | |
386405f7 | 1121 | |
1f673135 FB |
1122 | @item Download the binary x86 Wine install |
1123 | (@file{qemu-XXX-i386-wine.tar.gz} on the QEMU web page). | |
386405f7 | 1124 | |
1f673135 FB |
1125 | @item Configure Wine on your account. Look at the provided script |
1126 | @file{/usr/local/qemu-i386/bin/wine-conf.sh}. Your previous | |
1127 | @code{$@{HOME@}/.wine} directory is saved to @code{$@{HOME@}/.wine.org}. | |
386405f7 | 1128 | |
1f673135 | 1129 | @item Then you can try the example @file{putty.exe}: |
386405f7 | 1130 | |
1f673135 FB |
1131 | @example |
1132 | qemu-i386 /usr/local/qemu-i386/wine/bin/wine /usr/local/qemu-i386/wine/c/Program\ Files/putty.exe | |
1133 | @end example | |
386405f7 | 1134 | |
1f673135 | 1135 | @end itemize |
fd429f2f | 1136 | |
1f673135 | 1137 | @section Command line options |
1eb20527 | 1138 | |
1f673135 FB |
1139 | @example |
1140 | usage: qemu-i386 [-h] [-d] [-L path] [-s size] program [arguments...] | |
1141 | @end example | |
1eb20527 | 1142 | |
1f673135 FB |
1143 | @table @option |
1144 | @item -h | |
1145 | Print the help | |
1146 | @item -L path | |
1147 | Set the x86 elf interpreter prefix (default=/usr/local/qemu-i386) | |
1148 | @item -s size | |
1149 | Set the x86 stack size in bytes (default=524288) | |
386405f7 FB |
1150 | @end table |
1151 | ||
1f673135 | 1152 | Debug options: |
386405f7 | 1153 | |
1f673135 FB |
1154 | @table @option |
1155 | @item -d | |
1156 | Activate log (logfile=/tmp/qemu.log) | |
1157 | @item -p pagesize | |
1158 | Act as if the host page size was 'pagesize' bytes | |
1159 | @end table | |
386405f7 | 1160 | |
15a34c63 FB |
1161 | @node compilation |
1162 | @chapter Compilation from the sources | |
1163 | ||
1164 | @section Linux/BSD | |
1165 | ||
1166 | Read the @file{README} which gives the related information. | |
1167 | ||
1168 | @section Windows | |
1169 | ||
1170 | @itemize | |
1171 | @item Install the current versions of MSYS and MinGW from | |
1172 | @url{http://www.mingw.org/}. You can find detailed installation | |
1173 | instructions in the download section and the FAQ. | |
1174 | ||
1175 | @item Download | |
1176 | the MinGW development library of SDL 1.2.x | |
1177 | (@file{SDL-devel-1.2.x-mingw32.tar.gz}) from | |
1178 | @url{http://www.libsdl.org}. Unpack it in a temporary place, and | |
1179 | unpack the archive @file{i386-mingw32msvc.tar.gz} in the MinGW tool | |
1180 | directory. Edit the @file{sdl-config} script so that it gives the | |
1181 | correct SDL directory when invoked. | |
1182 | ||
1183 | @item Extract the current version of QEMU. | |
1184 | ||
1185 | @item Start the MSYS shell (file @file{msys.bat}). | |
1186 | ||
1187 | @item Change to the QEMU directory. Launch @file{./configure} and | |
1188 | @file{make}. If you have problems using SDL, verify that | |
1189 | @file{sdl-config} can be launched from the MSYS command line. | |
1190 | ||
1191 | @item You can install QEMU in @file{Program Files/Qemu} by typing | |
1192 | @file{make install}. Don't forget to copy @file{SDL.dll} in | |
1193 | @file{Program Files/Qemu}. | |
1194 | ||
1195 | @end itemize | |
1196 | ||
1197 | @section Cross compilation for Windows with Linux | |
1198 | ||
1199 | @itemize | |
1200 | @item | |
1201 | Install the MinGW cross compilation tools available at | |
1202 | @url{http://www.mingw.org/}. | |
1203 | ||
1204 | @item | |
1205 | Install the Win32 version of SDL (@url{http://www.libsdl.org}) by | |
1206 | unpacking @file{i386-mingw32msvc.tar.gz}. Set up the PATH environment | |
1207 | variable so that @file{i386-mingw32msvc-sdl-config} can be launched by | |
1208 | the QEMU configuration script. | |
1209 | ||
1210 | @item | |
1211 | Configure QEMU for Windows cross compilation: | |
1212 | @example | |
1213 | ./configure --enable-mingw32 | |
1214 | @end example | |
1215 | If necessary, you can change the cross-prefix according to the prefix | |
1216 | choosen for the MinGW tools with --cross-prefix. You can also use | |
1217 | --prefix to set the Win32 install path. | |
1218 | ||
1219 | @item You can install QEMU in the installation directory by typing | |
1220 | @file{make install}. Don't forget to copy @file{SDL.dll} in the | |
1221 | installation directory. | |
1222 | ||
1223 | @end itemize | |
1224 | ||
1225 | Note: Currently, Wine does not seem able to launch | |
1226 | QEMU for Win32. | |
1227 | ||
1228 | @section Mac OS X | |
1229 | ||
1230 | The Mac OS X patches are not fully merged in QEMU, so you should look | |
1231 | at the QEMU mailing list archive to have all the necessary | |
1232 | information. | |
1233 |