docs/user/main.rst

1 QEMU User space emulator
5 ---------------------------
9 -  Linux (referred as qemu-linux-user)
11 -  BSD (referred as qemu-bsd-user)
14 --------
16 QEMU user space emulation has the following notable features:
18 **System call translation:**
19    QEMU includes a generic system call translator. This means that the
20    parameters of the system calls can be converted to fix endianness and
21    32/64-bit mismatches between hosts and targets. IOCTLs can be
25    QEMU can redirect to the running program all signals coming from the
30    QEMU relies on the host kernel to emulate most signal system calls,
31    for example to emulate the signal mask. On Linux, QEMU supports both
32    normal and real-time signals.
35    On Linux, QEMU can emulate the ``clone`` syscall and create a real
41 QEMU was conceived so that ultimately it can emulate itself. Although it
46 -------------------------
53 …qemu-i386 [-h] [-d] [-L path] [-s size] [-cpu model] [-g port] [-B offset] [-R size] program [argu…
55 ``-h``
58 ``-L path``
59    Set the x86 elf interpreter prefix (default=/usr/local/qemu-i386)
61 ``-s size``
64 ``-cpu model``
65    Select CPU model (-cpu help for list and additional feature
68 ``-E var=value``
71 ``-U var``
74 ``-B offset``
79 ``-R size``
80    Pre-allocate a guest virtual address space of the given size (in
86 ``-d item1,...``
87    Activate logging of the specified items (use '-d help' for a list of
90 ``-g port``
93 ``-one-insn-per-tb``
96    such as when trying to analyse the logs produced by the ``-d`` option.
101    Print system calls and arguments similar to the 'strace' program
104    incomplete. All system calls that don't have a specific argument
106    flag-style arguments don't have decoders and will show up as numbers.
111 -  user mode (Alpha)
113    * ``qemu-alpha`` TODO.
115 -  user mode (Arm)
117    * ``qemu-armeb`` TODO.
119    * ``qemu-arm`` is also capable of running Arm \"Angel\" semihosted ELF
120      binaries (as implemented by the arm-elf and arm-eabi Newlib/GDB
121      configurations), and arm-uclinux bFLT format binaries.
123 -  user mode (ColdFire)
125 -  user mode (M68K)
127    * ``qemu-m68k`` is capable of running semihosted binaries using the BDM
128      (m5xxx-ram-hosted.ld) or m68k-sim (sim.ld) syscall interfaces, and
133 -  user mode (i386)
135    * ``qemu-i386`` TODO.
136    * ``qemu-x86_64`` TODO.
138 -  user mode (Microblaze)
140    * ``qemu-microblaze`` TODO.
142 -  user mode (MIPS)
144    * ``qemu-mips`` executes 32-bit big endian MIPS binaries (MIPS O32 ABI).
146    * ``qemu-mipsel`` executes 32-bit little endian MIPS binaries (MIPS O32 ABI).
148    * ``qemu-mips64`` executes 64-bit big endian MIPS binaries (MIPS N64 ABI).
150    * ``qemu-mips64el`` executes 64-bit little endian MIPS binaries (MIPS N64
153    * ``qemu-mipsn32`` executes 32-bit big endian MIPS binaries (MIPS N32 ABI).
155    * ``qemu-mipsn32el`` executes 32-bit little endian MIPS binaries (MIPS N32
158 -  user mode (PowerPC)
160    * ``qemu-ppc64`` TODO.
161    * ``qemu-ppc`` TODO.
163 -  user mode (SH4)
165    * ``qemu-sh4eb`` TODO.
166    * ``qemu-sh4`` TODO.
168 -  user mode (SPARC)
170    * ``qemu-sparc`` can execute Sparc32 binaries (Sparc32 CPU, 32 bit ABI).
172    * ``qemu-sparc32plus`` can execute Sparc32 and SPARC32PLUS binaries
175    * ``qemu-sparc64`` can execute some Sparc64 (Sparc64 CPU, 64 bit ABI) and
179 -----------------------
184 -  target Sparc64 on Sparc64: Some trivial programs work.
189 In order to launch a BSD process, QEMU needs the process executable
192 -  On Sparc64, you can just try to launch any process by using the
195       qemu-sparc64 /bin/ls
202    qemu-sparc64 [-h] [-d] [-L path] [-s size] [-bsd type] program [arguments...]
204 ``-h``
207 ``-L path``
210 ``-s size``
213 ``-ignore-environment``
217 ``-E var=value``
220 ``-U var``
223 ``-bsd type``
224    Set the type of the emulated BSD Operating system. Valid values are
229 ``-d item1,...``
230    Activate logging of the specified items (use '-d help' for a list of
233 ``-p pagesize``
236 ``-one-insn-per-tb``
239    such as when trying to analyse the logs produced by the ``-d`` option.