docs/user/main.rst

1 QEMU User space emulator
5 ---------------------------
7 The following OS are supported in user space emulation:
9 -  Linux (referred as qemu-linux-user)
11 -  BSD (referred as qemu-bsd-user)
14 --------
16 QEMU user space emulation has the following notable features:
21    32/64-bit mismatches between hosts and targets. IOCTLs can be
31    for example to emulate the signal mask. On Linux, QEMU supports both
32    normal and real-time signals.
35    On Linux, QEMU can emulate the ``clone`` syscall and create a real
45 Linux User space emulator
46 -------------------------
53 …qemu-i386 [-h] [-d] [-L path] [-s size] [-cpu model] [-g port] [-B offset] [-R size] program [argu…
55 ``-h``
58 ``-L path``
59    Set the x86 elf interpreter prefix (default=/usr/local/qemu-i386)
61 ``-s size``
64 ``-cpu model``
65    Select CPU model (-cpu help for list and additional feature
68 ``-E var=value``
71 ``-U var``
74 ``-B offset``
79 ``-R size``
80    Pre-allocate a guest virtual address space of the given size (in
86 ``-d item1,...``
87    Activate logging of the specified items (use '-d help' for a list of
90 ``-g port``
93 ``-one-insn-per-tb``
96    such as when trying to analyse the logs produced by the ``-d`` option.
102    (NOTE: the actual 'strace' program will not work because the user
106    flag-style arguments don't have decoders and will show up as numbers.
111 -  user mode (Alpha)
113    * ``qemu-alpha`` TODO.
115 -  user mode (Arm)
117    * ``qemu-armeb`` TODO.
119    * ``qemu-arm`` is also capable of running Arm \"Angel\" semihosted ELF
120      binaries (as implemented by the arm-elf and arm-eabi Newlib/GDB
121      configurations), and arm-uclinux bFLT format binaries.
123 -  user mode (ColdFire)
125 -  user mode (M68K)
127    * ``qemu-m68k`` is capable of running semihosted binaries using the BDM
128      (m5xxx-ram-hosted.ld) or m68k-sim (sim.ld) syscall interfaces, and
133 -  user mode (i386)
135    * ``qemu-i386`` TODO.
136    * ``qemu-x86_64`` TODO.
138 -  user mode (Microblaze)
140    * ``qemu-microblaze`` TODO.
142 -  user mode (MIPS)
144    * ``qemu-mips`` executes 32-bit big endian MIPS binaries (MIPS O32 ABI).
146    * ``qemu-mipsel`` executes 32-bit little endian MIPS binaries (MIPS O32 ABI).
148    * ``qemu-mips64`` executes 64-bit big endian MIPS binaries (MIPS N64 ABI).
150    * ``qemu-mips64el`` executes 64-bit little endian MIPS binaries (MIPS N64
153    * ``qemu-mipsn32`` executes 32-bit big endian MIPS binaries (MIPS N32 ABI).
155    * ``qemu-mipsn32el`` executes 32-bit little endian MIPS binaries (MIPS N32
158 -  user mode (PowerPC)
160    * ``qemu-ppc64`` TODO.
161    * ``qemu-ppc`` TODO.
163 -  user mode (SH4)
165    * ``qemu-sh4eb`` TODO.
166    * ``qemu-sh4`` TODO.
168 -  user mode (SPARC)
170    * ``qemu-sparc`` can execute Sparc32 binaries (Sparc32 CPU, 32 bit ABI).
172    * ``qemu-sparc32plus`` can execute Sparc32 and SPARC32PLUS binaries
175    * ``qemu-sparc64`` can execute some Sparc64 (Sparc64 CPU, 64 bit ABI) and
178 BSD User space emulator
179 -----------------------
184 -  target Sparc64 on Sparc64: Some trivial programs work.
192 -  On Sparc64, you can just try to launch any process by using the
195       qemu-sparc64 /bin/ls
202    qemu-sparc64 [-h] [-d] [-L path] [-s size] [-bsd type] program [arguments...]
204 ``-h``
207 ``-L path``
210 ``-s size``
213 ``-ignore-environment``
217 ``-E var=value``
220 ``-U var``
223 ``-bsd type``
229 ``-d item1,...``
230    Activate logging of the specified items (use '-d help' for a list of
233 ``-p pagesize``
236 ``-one-insn-per-tb``
239    such as when trying to analyse the logs produced by the ``-d`` option.