xref: /openbmc/qemu/qemu-options.hx (revision 7b95a50858502485b0e159a1adabfa9912214147)
1HXCOMM Use DEFHEADING() to define headings in both help text and texi
2HXCOMM Text between STEXI and ETEXI are copied to texi version and
3HXCOMM discarded from C version
4HXCOMM DEF(option, HAS_ARG/0, opt_enum, opt_help, arch_mask) is used to
5HXCOMM construct option structures, enums and help message for specified
6HXCOMM architectures.
7HXCOMM HXCOMM can be used for comments, discarded from both texi and C
8
9DEFHEADING(Standard options:)
10STEXI
11@table @option
12ETEXI
13
14DEF("help", 0, QEMU_OPTION_h,
15    "-h or -help     display this help and exit\n", QEMU_ARCH_ALL)
16STEXI
17@item -h
18@findex -h
19Display help and exit
20ETEXI
21
22DEF("version", 0, QEMU_OPTION_version,
23    "-version        display version information and exit\n", QEMU_ARCH_ALL)
24STEXI
25@item -version
26@findex -version
27Display version information and exit
28ETEXI
29
30DEF("machine", HAS_ARG, QEMU_OPTION_machine, \
31    "-machine [type=]name[,prop[=value][,...]]\n"
32    "                selects emulated machine ('-machine help' for list)\n"
33    "                property accel=accel1[:accel2[:...]] selects accelerator\n"
34    "                supported accelerators are kvm, xen, tcg (default: tcg)\n"
35    "                kernel_irqchip=on|off controls accelerated irqchip support\n"
36    "                kvm_shadow_mem=size of KVM shadow MMU\n"
37    "                dump-guest-core=on|off include guest memory in a core dump (default=on)\n"
38    "                mem-merge=on|off controls memory merge support (default: on)\n"
39    "                iommu=on|off controls emulated Intel IOMMU (VT-d) support (default=off)\n",
40    QEMU_ARCH_ALL)
41STEXI
42@item -machine [type=]@var{name}[,prop=@var{value}[,...]]
43@findex -machine
44Select the emulated machine by @var{name}. Use @code{-machine help} to list
45available machines. Supported machine properties are:
46@table @option
47@item accel=@var{accels1}[:@var{accels2}[:...]]
48This is used to enable an accelerator. Depending on the target architecture,
49kvm, xen, or tcg can be available. By default, tcg is used. If there is more
50than one accelerator specified, the next one is used if the previous one fails
51to initialize.
52@item kernel_irqchip=on|off
53Enables in-kernel irqchip support for the chosen accelerator when available.
54@item kvm_shadow_mem=size
55Defines the size of the KVM shadow MMU.
56@item dump-guest-core=on|off
57Include guest memory in a core dump. The default is on.
58@item mem-merge=on|off
59Enables or disables memory merge support. This feature, when supported by
60the host, de-duplicates identical memory pages among VMs instances
61(enabled by default).
62@item iommu=on|off
63Enables or disables emulated Intel IOMMU (VT-d) support. The default is off.
64@end table
65ETEXI
66
67HXCOMM Deprecated by -machine
68DEF("M", HAS_ARG, QEMU_OPTION_M, "", QEMU_ARCH_ALL)
69
70DEF("cpu", HAS_ARG, QEMU_OPTION_cpu,
71    "-cpu cpu        select CPU ('-cpu help' for list)\n", QEMU_ARCH_ALL)
72STEXI
73@item -cpu @var{model}
74@findex -cpu
75Select CPU model (@code{-cpu help} for list and additional feature selection)
76ETEXI
77
78DEF("smp", HAS_ARG, QEMU_OPTION_smp,
79    "-smp [cpus=]n[,maxcpus=cpus][,cores=cores][,threads=threads][,sockets=sockets]\n"
80    "                set the number of CPUs to 'n' [default=1]\n"
81    "                maxcpus= maximum number of total cpus, including\n"
82    "                offline CPUs for hotplug, etc\n"
83    "                cores= number of CPU cores on one socket\n"
84    "                threads= number of threads on one CPU core\n"
85    "                sockets= number of discrete sockets in the system\n",
86        QEMU_ARCH_ALL)
87STEXI
88@item -smp [cpus=]@var{n}[,cores=@var{cores}][,threads=@var{threads}][,sockets=@var{sockets}][,maxcpus=@var{maxcpus}]
89@findex -smp
90Simulate an SMP system with @var{n} CPUs. On the PC target, up to 255
91CPUs are supported. On Sparc32 target, Linux limits the number of usable CPUs
92to 4.
93For the PC target, the number of @var{cores} per socket, the number
94of @var{threads} per cores and the total number of @var{sockets} can be
95specified. Missing values will be computed. If any on the three values is
96given, the total number of CPUs @var{n} can be omitted. @var{maxcpus}
97specifies the maximum number of hotpluggable CPUs.
98ETEXI
99
100DEF("numa", HAS_ARG, QEMU_OPTION_numa,
101    "-numa node[,mem=size][,cpus=cpu[-cpu]][,nodeid=node]\n"
102    "-numa node[,memdev=id][,cpus=cpu[-cpu]][,nodeid=node]\n", QEMU_ARCH_ALL)
103STEXI
104@item -numa node[,mem=@var{size}][,cpus=@var{cpu[-cpu]}][,nodeid=@var{node}]
105@item -numa node[,memdev=@var{id}][,cpus=@var{cpu[-cpu]}][,nodeid=@var{node}]
106@findex -numa
107Simulate a multi node NUMA system. If @samp{mem}, @samp{memdev}
108and @samp{cpus} are omitted, resources are split equally. Also, note
109that the -@option{numa} option doesn't allocate any of the specified
110resources. That is, it just assigns existing resources to NUMA nodes. This
111means that one still has to use the @option{-m}, @option{-smp} options
112to allocate RAM and VCPUs respectively, and possibly @option{-object}
113to specify the memory backend for the @samp{memdev} suboption.
114
115@samp{mem} and @samp{memdev} are mutually exclusive.  Furthermore, if one
116node uses @samp{memdev}, all of them have to use it.
117ETEXI
118
119DEF("add-fd", HAS_ARG, QEMU_OPTION_add_fd,
120    "-add-fd fd=fd,set=set[,opaque=opaque]\n"
121    "                Add 'fd' to fd 'set'\n", QEMU_ARCH_ALL)
122STEXI
123@item -add-fd fd=@var{fd},set=@var{set}[,opaque=@var{opaque}]
124@findex -add-fd
125
126Add a file descriptor to an fd set.  Valid options are:
127
128@table @option
129@item fd=@var{fd}
130This option defines the file descriptor of which a duplicate is added to fd set.
131The file descriptor cannot be stdin, stdout, or stderr.
132@item set=@var{set}
133This option defines the ID of the fd set to add the file descriptor to.
134@item opaque=@var{opaque}
135This option defines a free-form string that can be used to describe @var{fd}.
136@end table
137
138You can open an image using pre-opened file descriptors from an fd set:
139@example
140qemu-system-i386
141-add-fd fd=3,set=2,opaque="rdwr:/path/to/file"
142-add-fd fd=4,set=2,opaque="rdonly:/path/to/file"
143-drive file=/dev/fdset/2,index=0,media=disk
144@end example
145ETEXI
146
147DEF("set", HAS_ARG, QEMU_OPTION_set,
148    "-set group.id.arg=value\n"
149    "                set <arg> parameter for item <id> of type <group>\n"
150    "                i.e. -set drive.$id.file=/path/to/image\n", QEMU_ARCH_ALL)
151STEXI
152@item -set @var{group}.@var{id}.@var{arg}=@var{value}
153@findex -set
154Set parameter @var{arg} for item @var{id} of type @var{group}\n"
155ETEXI
156
157DEF("global", HAS_ARG, QEMU_OPTION_global,
158    "-global driver.prop=value\n"
159    "                set a global default for a driver property\n",
160    QEMU_ARCH_ALL)
161STEXI
162@item -global @var{driver}.@var{prop}=@var{value}
163@findex -global
164Set default value of @var{driver}'s property @var{prop} to @var{value}, e.g.:
165
166@example
167qemu-system-i386 -global ide-drive.physical_block_size=4096 -drive file=file,if=ide,index=0,media=disk
168@end example
169
170In particular, you can use this to set driver properties for devices which are
171created automatically by the machine model. To create a device which is not
172created automatically and set properties on it, use -@option{device}.
173ETEXI
174
175DEF("boot", HAS_ARG, QEMU_OPTION_boot,
176    "-boot [order=drives][,once=drives][,menu=on|off]\n"
177    "      [,splash=sp_name][,splash-time=sp_time][,reboot-timeout=rb_time][,strict=on|off]\n"
178    "                'drives': floppy (a), hard disk (c), CD-ROM (d), network (n)\n"
179    "                'sp_name': the file's name that would be passed to bios as logo picture, if menu=on\n"
180    "                'sp_time': the period that splash picture last if menu=on, unit is ms\n"
181    "                'rb_timeout': the timeout before guest reboot when boot failed, unit is ms\n",
182    QEMU_ARCH_ALL)
183STEXI
184@item -boot [order=@var{drives}][,once=@var{drives}][,menu=on|off][,splash=@var{sp_name}][,splash-time=@var{sp_time}][,reboot-timeout=@var{rb_timeout}][,strict=on|off]
185@findex -boot
186Specify boot order @var{drives} as a string of drive letters. Valid
187drive letters depend on the target achitecture. The x86 PC uses: a, b
188(floppy 1 and 2), c (first hard disk), d (first CD-ROM), n-p (Etherboot
189from network adapter 1-4), hard disk boot is the default. To apply a
190particular boot order only on the first startup, specify it via
191@option{once}.
192
193Interactive boot menus/prompts can be enabled via @option{menu=on} as far
194as firmware/BIOS supports them. The default is non-interactive boot.
195
196A splash picture could be passed to bios, enabling user to show it as logo,
197when option splash=@var{sp_name} is given and menu=on, If firmware/BIOS
198supports them. Currently Seabios for X86 system support it.
199limitation: The splash file could be a jpeg file or a BMP file in 24 BPP
200format(true color). The resolution should be supported by the SVGA mode, so
201the recommended is 320x240, 640x480, 800x640.
202
203A timeout could be passed to bios, guest will pause for @var{rb_timeout} ms
204when boot failed, then reboot. If @var{rb_timeout} is '-1', guest will not
205reboot, qemu passes '-1' to bios by default. Currently Seabios for X86
206system support it.
207
208Do strict boot via @option{strict=on} as far as firmware/BIOS
209supports it. This only effects when boot priority is changed by
210bootindex options. The default is non-strict boot.
211
212@example
213# try to boot from network first, then from hard disk
214qemu-system-i386 -boot order=nc
215# boot from CD-ROM first, switch back to default order after reboot
216qemu-system-i386 -boot once=d
217# boot with a splash picture for 5 seconds.
218qemu-system-i386 -boot menu=on,splash=/root/boot.bmp,splash-time=5000
219@end example
220
221Note: The legacy format '-boot @var{drives}' is still supported but its
222use is discouraged as it may be removed from future versions.
223ETEXI
224
225DEF("m", HAS_ARG, QEMU_OPTION_m,
226    "-m[emory] [size=]megs[,slots=n,maxmem=size]\n"
227    "                configure guest RAM\n"
228    "                size: initial amount of guest memory (default: "
229    stringify(DEFAULT_RAM_SIZE) "MiB)\n"
230    "                slots: number of hotplug slots (default: none)\n"
231    "                maxmem: maximum amount of guest memory (default: none)\n"
232    "NOTE: Some architectures might enforce a specific granularity\n",
233    QEMU_ARCH_ALL)
234STEXI
235@item -m [size=]@var{megs}
236@findex -m
237Set virtual RAM size to @var{megs} megabytes. Default is 128 MiB.  Optionally,
238a suffix of ``M'' or ``G'' can be used to signify a value in megabytes or
239gigabytes respectively. Optional pair @var{slots}, @var{maxmem} could be used
240to set amount of hotluggable memory slots and possible maximum amount of memory.
241ETEXI
242
243DEF("mem-path", HAS_ARG, QEMU_OPTION_mempath,
244    "-mem-path FILE  provide backing storage for guest RAM\n", QEMU_ARCH_ALL)
245STEXI
246@item -mem-path @var{path}
247@findex -mem-path
248Allocate guest RAM from a temporarily created file in @var{path}.
249ETEXI
250
251DEF("mem-prealloc", 0, QEMU_OPTION_mem_prealloc,
252    "-mem-prealloc   preallocate guest memory (use with -mem-path)\n",
253    QEMU_ARCH_ALL)
254STEXI
255@item -mem-prealloc
256@findex -mem-prealloc
257Preallocate memory when using -mem-path.
258ETEXI
259
260DEF("k", HAS_ARG, QEMU_OPTION_k,
261    "-k language     use keyboard layout (for example 'fr' for French)\n",
262    QEMU_ARCH_ALL)
263STEXI
264@item -k @var{language}
265@findex -k
266Use keyboard layout @var{language} (for example @code{fr} for
267French). This option is only needed where it is not easy to get raw PC
268keycodes (e.g. on Macs, with some X11 servers or with a VNC
269display). You don't normally need to use it on PC/Linux or PC/Windows
270hosts.
271
272The available layouts are:
273@example
274ar  de-ch  es  fo     fr-ca  hu  ja  mk     no  pt-br  sv
275da  en-gb  et  fr     fr-ch  is  lt  nl     pl  ru     th
276de  en-us  fi  fr-be  hr     it  lv  nl-be  pt  sl     tr
277@end example
278
279The default is @code{en-us}.
280ETEXI
281
282
283DEF("audio-help", 0, QEMU_OPTION_audio_help,
284    "-audio-help     print list of audio drivers and their options\n",
285    QEMU_ARCH_ALL)
286STEXI
287@item -audio-help
288@findex -audio-help
289Will show the audio subsystem help: list of drivers, tunable
290parameters.
291ETEXI
292
293DEF("soundhw", HAS_ARG, QEMU_OPTION_soundhw,
294    "-soundhw c1,... enable audio support\n"
295    "                and only specified sound cards (comma separated list)\n"
296    "                use '-soundhw help' to get the list of supported cards\n"
297    "                use '-soundhw all' to enable all of them\n", QEMU_ARCH_ALL)
298STEXI
299@item -soundhw @var{card1}[,@var{card2},...] or -soundhw all
300@findex -soundhw
301Enable audio and selected sound hardware. Use 'help' to print all
302available sound hardware.
303
304@example
305qemu-system-i386 -soundhw sb16,adlib disk.img
306qemu-system-i386 -soundhw es1370 disk.img
307qemu-system-i386 -soundhw ac97 disk.img
308qemu-system-i386 -soundhw hda disk.img
309qemu-system-i386 -soundhw all disk.img
310qemu-system-i386 -soundhw help
311@end example
312
313Note that Linux's i810_audio OSS kernel (for AC97) module might
314require manually specifying clocking.
315
316@example
317modprobe i810_audio clocking=48000
318@end example
319ETEXI
320
321DEF("balloon", HAS_ARG, QEMU_OPTION_balloon,
322    "-balloon none   disable balloon device\n"
323    "-balloon virtio[,addr=str]\n"
324    "                enable virtio balloon device (default)\n", QEMU_ARCH_ALL)
325STEXI
326@item -balloon none
327@findex -balloon
328Disable balloon device.
329@item -balloon virtio[,addr=@var{addr}]
330Enable virtio balloon device (default), optionally with PCI address
331@var{addr}.
332ETEXI
333
334DEF("device", HAS_ARG, QEMU_OPTION_device,
335    "-device driver[,prop[=value][,...]]\n"
336    "                add device (based on driver)\n"
337    "                prop=value,... sets driver properties\n"
338    "                use '-device help' to print all possible drivers\n"
339    "                use '-device driver,help' to print all possible properties\n",
340    QEMU_ARCH_ALL)
341STEXI
342@item -device @var{driver}[,@var{prop}[=@var{value}][,...]]
343@findex -device
344Add device @var{driver}.  @var{prop}=@var{value} sets driver
345properties.  Valid properties depend on the driver.  To get help on
346possible drivers and properties, use @code{-device help} and
347@code{-device @var{driver},help}.
348ETEXI
349
350DEF("name", HAS_ARG, QEMU_OPTION_name,
351    "-name string1[,process=string2][,debug-threads=on|off]\n"
352    "                set the name of the guest\n"
353    "                string1 sets the window title and string2 the process name (on Linux)\n"
354    "                When debug-threads is enabled, individual threads are given a separate name (on Linux)\n"
355    "                NOTE: The thread names are for debugging and not a stable API.\n",
356    QEMU_ARCH_ALL)
357STEXI
358@item -name @var{name}
359@findex -name
360Sets the @var{name} of the guest.
361This name will be displayed in the SDL window caption.
362The @var{name} will also be used for the VNC server.
363Also optionally set the top visible process name in Linux.
364Naming of individual threads can also be enabled on Linux to aid debugging.
365ETEXI
366
367DEF("uuid", HAS_ARG, QEMU_OPTION_uuid,
368    "-uuid %08x-%04x-%04x-%04x-%012x\n"
369    "                specify machine UUID\n", QEMU_ARCH_ALL)
370STEXI
371@item -uuid @var{uuid}
372@findex -uuid
373Set system UUID.
374ETEXI
375
376STEXI
377@end table
378ETEXI
379DEFHEADING()
380
381DEFHEADING(Block device options:)
382STEXI
383@table @option
384ETEXI
385
386DEF("fda", HAS_ARG, QEMU_OPTION_fda,
387    "-fda/-fdb file  use 'file' as floppy disk 0/1 image\n", QEMU_ARCH_ALL)
388DEF("fdb", HAS_ARG, QEMU_OPTION_fdb, "", QEMU_ARCH_ALL)
389STEXI
390@item -fda @var{file}
391@item -fdb @var{file}
392@findex -fda
393@findex -fdb
394Use @var{file} as floppy disk 0/1 image (@pxref{disk_images}). You can
395use the host floppy by using @file{/dev/fd0} as filename (@pxref{host_drives}).
396ETEXI
397
398DEF("hda", HAS_ARG, QEMU_OPTION_hda,
399    "-hda/-hdb file  use 'file' as IDE hard disk 0/1 image\n", QEMU_ARCH_ALL)
400DEF("hdb", HAS_ARG, QEMU_OPTION_hdb, "", QEMU_ARCH_ALL)
401DEF("hdc", HAS_ARG, QEMU_OPTION_hdc,
402    "-hdc/-hdd file  use 'file' as IDE hard disk 2/3 image\n", QEMU_ARCH_ALL)
403DEF("hdd", HAS_ARG, QEMU_OPTION_hdd, "", QEMU_ARCH_ALL)
404STEXI
405@item -hda @var{file}
406@item -hdb @var{file}
407@item -hdc @var{file}
408@item -hdd @var{file}
409@findex -hda
410@findex -hdb
411@findex -hdc
412@findex -hdd
413Use @var{file} as hard disk 0, 1, 2 or 3 image (@pxref{disk_images}).
414ETEXI
415
416DEF("cdrom", HAS_ARG, QEMU_OPTION_cdrom,
417    "-cdrom file     use 'file' as IDE cdrom image (cdrom is ide1 master)\n",
418    QEMU_ARCH_ALL)
419STEXI
420@item -cdrom @var{file}
421@findex -cdrom
422Use @var{file} as CD-ROM image (you cannot use @option{-hdc} and
423@option{-cdrom} at the same time). You can use the host CD-ROM by
424using @file{/dev/cdrom} as filename (@pxref{host_drives}).
425ETEXI
426
427DEF("drive", HAS_ARG, QEMU_OPTION_drive,
428    "-drive [file=file][,if=type][,bus=n][,unit=m][,media=d][,index=i]\n"
429    "       [,cyls=c,heads=h,secs=s[,trans=t]][,snapshot=on|off]\n"
430    "       [,cache=writethrough|writeback|none|directsync|unsafe][,format=f]\n"
431    "       [,serial=s][,addr=A][,rerror=ignore|stop|report]\n"
432    "       [,werror=ignore|stop|report|enospc][,id=name][,aio=threads|native]\n"
433    "       [,readonly=on|off][,copy-on-read=on|off]\n"
434    "       [,discard=ignore|unmap][,detect-zeroes=on|off|unmap]\n"
435    "       [[,bps=b]|[[,bps_rd=r][,bps_wr=w]]]\n"
436    "       [[,iops=i]|[[,iops_rd=r][,iops_wr=w]]]\n"
437    "       [[,bps_max=bm]|[[,bps_rd_max=rm][,bps_wr_max=wm]]]\n"
438    "       [[,iops_max=im]|[[,iops_rd_max=irm][,iops_wr_max=iwm]]]\n"
439    "       [[,iops_size=is]]\n"
440    "                use 'file' as a drive image\n", QEMU_ARCH_ALL)
441STEXI
442@item -drive @var{option}[,@var{option}[,@var{option}[,...]]]
443@findex -drive
444
445Define a new drive. Valid options are:
446
447@table @option
448@item file=@var{file}
449This option defines which disk image (@pxref{disk_images}) to use with
450this drive. If the filename contains comma, you must double it
451(for instance, "file=my,,file" to use file "my,file").
452
453Special files such as iSCSI devices can be specified using protocol
454specific URLs. See the section for "Device URL Syntax" for more information.
455@item if=@var{interface}
456This option defines on which type on interface the drive is connected.
457Available types are: ide, scsi, sd, mtd, floppy, pflash, virtio.
458@item bus=@var{bus},unit=@var{unit}
459These options define where is connected the drive by defining the bus number and
460the unit id.
461@item index=@var{index}
462This option defines where is connected the drive by using an index in the list
463of available connectors of a given interface type.
464@item media=@var{media}
465This option defines the type of the media: disk or cdrom.
466@item cyls=@var{c},heads=@var{h},secs=@var{s}[,trans=@var{t}]
467These options have the same definition as they have in @option{-hdachs}.
468@item snapshot=@var{snapshot}
469@var{snapshot} is "on" or "off" and controls snapshot mode for the given drive
470(see @option{-snapshot}).
471@item cache=@var{cache}
472@var{cache} is "none", "writeback", "unsafe", "directsync" or "writethrough" and controls how the host cache is used to access block data.
473@item aio=@var{aio}
474@var{aio} is "threads", or "native" and selects between pthread based disk I/O and native Linux AIO.
475@item discard=@var{discard}
476@var{discard} is one of "ignore" (or "off") or "unmap" (or "on") and controls whether @dfn{discard} (also known as @dfn{trim} or @dfn{unmap}) requests are ignored or passed to the filesystem.  Some machine types may not support discard requests.
477@item format=@var{format}
478Specify which disk @var{format} will be used rather than detecting
479the format.  Can be used to specifiy format=raw to avoid interpreting
480an untrusted format header.
481@item serial=@var{serial}
482This option specifies the serial number to assign to the device.
483@item addr=@var{addr}
484Specify the controller's PCI address (if=virtio only).
485@item werror=@var{action},rerror=@var{action}
486Specify which @var{action} to take on write and read errors. Valid actions are:
487"ignore" (ignore the error and try to continue), "stop" (pause QEMU),
488"report" (report the error to the guest), "enospc" (pause QEMU only if the
489host disk is full; report the error to the guest otherwise).
490The default setting is @option{werror=enospc} and @option{rerror=report}.
491@item readonly
492Open drive @option{file} as read-only. Guest write attempts will fail.
493@item copy-on-read=@var{copy-on-read}
494@var{copy-on-read} is "on" or "off" and enables whether to copy read backing
495file sectors into the image file.
496@item detect-zeroes=@var{detect-zeroes}
497@var{detect-zeroes} is "off", "on" or "unmap" and enables the automatic
498conversion of plain zero writes by the OS to driver specific optimized
499zero write commands. You may even choose "unmap" if @var{discard} is set
500to "unmap" to allow a zero write to be converted to an UNMAP operation.
501@end table
502
503By default, the @option{cache=writeback} mode is used. It will report data
504writes as completed as soon as the data is present in the host page cache.
505This is safe as long as your guest OS makes sure to correctly flush disk caches
506where needed. If your guest OS does not handle volatile disk write caches
507correctly and your host crashes or loses power, then the guest may experience
508data corruption.
509
510For such guests, you should consider using @option{cache=writethrough}. This
511means that the host page cache will be used to read and write data, but write
512notification will be sent to the guest only after QEMU has made sure to flush
513each write to the disk. Be aware that this has a major impact on performance.
514
515The host page cache can be avoided entirely with @option{cache=none}.  This will
516attempt to do disk IO directly to the guest's memory.  QEMU may still perform
517an internal copy of the data. Note that this is considered a writeback mode and
518the guest OS must handle the disk write cache correctly in order to avoid data
519corruption on host crashes.
520
521The host page cache can be avoided while only sending write notifications to
522the guest when the data has been flushed to the disk using
523@option{cache=directsync}.
524
525In case you don't care about data integrity over host failures, use
526@option{cache=unsafe}. This option tells QEMU that it never needs to write any
527data to the disk but can instead keep things in cache. If anything goes wrong,
528like your host losing power, the disk storage getting disconnected accidentally,
529etc. your image will most probably be rendered unusable.   When using
530the @option{-snapshot} option, unsafe caching is always used.
531
532Copy-on-read avoids accessing the same backing file sectors repeatedly and is
533useful when the backing file is over a slow network.  By default copy-on-read
534is off.
535
536Instead of @option{-cdrom} you can use:
537@example
538qemu-system-i386 -drive file=file,index=2,media=cdrom
539@end example
540
541Instead of @option{-hda}, @option{-hdb}, @option{-hdc}, @option{-hdd}, you can
542use:
543@example
544qemu-system-i386 -drive file=file,index=0,media=disk
545qemu-system-i386 -drive file=file,index=1,media=disk
546qemu-system-i386 -drive file=file,index=2,media=disk
547qemu-system-i386 -drive file=file,index=3,media=disk
548@end example
549
550You can open an image using pre-opened file descriptors from an fd set:
551@example
552qemu-system-i386
553-add-fd fd=3,set=2,opaque="rdwr:/path/to/file"
554-add-fd fd=4,set=2,opaque="rdonly:/path/to/file"
555-drive file=/dev/fdset/2,index=0,media=disk
556@end example
557
558You can connect a CDROM to the slave of ide0:
559@example
560qemu-system-i386 -drive file=file,if=ide,index=1,media=cdrom
561@end example
562
563If you don't specify the "file=" argument, you define an empty drive:
564@example
565qemu-system-i386 -drive if=ide,index=1,media=cdrom
566@end example
567
568You can connect a SCSI disk with unit ID 6 on the bus #0:
569@example
570qemu-system-i386 -drive file=file,if=scsi,bus=0,unit=6
571@end example
572
573Instead of @option{-fda}, @option{-fdb}, you can use:
574@example
575qemu-system-i386 -drive file=file,index=0,if=floppy
576qemu-system-i386 -drive file=file,index=1,if=floppy
577@end example
578
579By default, @var{interface} is "ide" and @var{index} is automatically
580incremented:
581@example
582qemu-system-i386 -drive file=a -drive file=b"
583@end example
584is interpreted like:
585@example
586qemu-system-i386 -hda a -hdb b
587@end example
588ETEXI
589
590DEF("mtdblock", HAS_ARG, QEMU_OPTION_mtdblock,
591    "-mtdblock file  use 'file' as on-board Flash memory image\n",
592    QEMU_ARCH_ALL)
593STEXI
594@item -mtdblock @var{file}
595@findex -mtdblock
596Use @var{file} as on-board Flash memory image.
597ETEXI
598
599DEF("sd", HAS_ARG, QEMU_OPTION_sd,
600    "-sd file        use 'file' as SecureDigital card image\n", QEMU_ARCH_ALL)
601STEXI
602@item -sd @var{file}
603@findex -sd
604Use @var{file} as SecureDigital card image.
605ETEXI
606
607DEF("pflash", HAS_ARG, QEMU_OPTION_pflash,
608    "-pflash file    use 'file' as a parallel flash image\n", QEMU_ARCH_ALL)
609STEXI
610@item -pflash @var{file}
611@findex -pflash
612Use @var{file} as a parallel flash image.
613ETEXI
614
615DEF("snapshot", 0, QEMU_OPTION_snapshot,
616    "-snapshot       write to temporary files instead of disk image files\n",
617    QEMU_ARCH_ALL)
618STEXI
619@item -snapshot
620@findex -snapshot
621Write to temporary files instead of disk image files. In this case,
622the raw disk image you use is not written back. You can however force
623the write back by pressing @key{C-a s} (@pxref{disk_images}).
624ETEXI
625
626DEF("hdachs", HAS_ARG, QEMU_OPTION_hdachs, \
627    "-hdachs c,h,s[,t]\n" \
628    "                force hard disk 0 physical geometry and the optional BIOS\n" \
629    "                translation (t=none or lba) (usually QEMU can guess them)\n",
630    QEMU_ARCH_ALL)
631STEXI
632@item -hdachs @var{c},@var{h},@var{s},[,@var{t}]
633@findex -hdachs
634Force hard disk 0 physical geometry (1 <= @var{c} <= 16383, 1 <=
635@var{h} <= 16, 1 <= @var{s} <= 63) and optionally force the BIOS
636translation mode (@var{t}=none, lba or auto). Usually QEMU can guess
637all those parameters. This option is useful for old MS-DOS disk
638images.
639ETEXI
640
641DEF("fsdev", HAS_ARG, QEMU_OPTION_fsdev,
642    "-fsdev fsdriver,id=id[,path=path,][security_model={mapped-xattr|mapped-file|passthrough|none}]\n"
643    " [,writeout=immediate][,readonly][,socket=socket|sock_fd=sock_fd]\n",
644    QEMU_ARCH_ALL)
645
646STEXI
647
648@item -fsdev @var{fsdriver},id=@var{id},path=@var{path},[security_model=@var{security_model}][,writeout=@var{writeout}][,readonly][,socket=@var{socket}|sock_fd=@var{sock_fd}]
649@findex -fsdev
650Define a new file system device. Valid options are:
651@table @option
652@item @var{fsdriver}
653This option specifies the fs driver backend to use.
654Currently "local", "handle" and "proxy" file system drivers are supported.
655@item id=@var{id}
656Specifies identifier for this device
657@item path=@var{path}
658Specifies the export path for the file system device. Files under
659this path will be available to the 9p client on the guest.
660@item security_model=@var{security_model}
661Specifies the security model to be used for this export path.
662Supported security models are "passthrough", "mapped-xattr", "mapped-file" and "none".
663In "passthrough" security model, files are stored using the same
664credentials as they are created on the guest. This requires QEMU
665to run as root. In "mapped-xattr" security model, some of the file
666attributes like uid, gid, mode bits and link target are stored as
667file attributes. For "mapped-file" these attributes are stored in the
668hidden .virtfs_metadata directory. Directories exported by this security model cannot
669interact with other unix tools. "none" security model is same as
670passthrough except the sever won't report failures if it fails to
671set file attributes like ownership. Security model is mandatory
672only for local fsdriver. Other fsdrivers (like handle, proxy) don't take
673security model as a parameter.
674@item writeout=@var{writeout}
675This is an optional argument. The only supported value is "immediate".
676This means that host page cache will be used to read and write data but
677write notification will be sent to the guest only when the data has been
678reported as written by the storage subsystem.
679@item readonly
680Enables exporting 9p share as a readonly mount for guests. By default
681read-write access is given.
682@item socket=@var{socket}
683Enables proxy filesystem driver to use passed socket file for communicating
684with virtfs-proxy-helper
685@item sock_fd=@var{sock_fd}
686Enables proxy filesystem driver to use passed socket descriptor for
687communicating with virtfs-proxy-helper. Usually a helper like libvirt
688will create socketpair and pass one of the fds as sock_fd
689@end table
690
691-fsdev option is used along with -device driver "virtio-9p-pci".
692@item -device virtio-9p-pci,fsdev=@var{id},mount_tag=@var{mount_tag}
693Options for virtio-9p-pci driver are:
694@table @option
695@item fsdev=@var{id}
696Specifies the id value specified along with -fsdev option
697@item mount_tag=@var{mount_tag}
698Specifies the tag name to be used by the guest to mount this export point
699@end table
700
701ETEXI
702
703DEF("virtfs", HAS_ARG, QEMU_OPTION_virtfs,
704    "-virtfs local,path=path,mount_tag=tag,security_model=[mapped-xattr|mapped-file|passthrough|none]\n"
705    "        [,writeout=immediate][,readonly][,socket=socket|sock_fd=sock_fd]\n",
706    QEMU_ARCH_ALL)
707
708STEXI
709
710@item -virtfs @var{fsdriver}[,path=@var{path}],mount_tag=@var{mount_tag}[,security_model=@var{security_model}][,writeout=@var{writeout}][,readonly][,socket=@var{socket}|sock_fd=@var{sock_fd}]
711@findex -virtfs
712
713The general form of a Virtual File system pass-through options are:
714@table @option
715@item @var{fsdriver}
716This option specifies the fs driver backend to use.
717Currently "local", "handle" and "proxy" file system drivers are supported.
718@item id=@var{id}
719Specifies identifier for this device
720@item path=@var{path}
721Specifies the export path for the file system device. Files under
722this path will be available to the 9p client on the guest.
723@item security_model=@var{security_model}
724Specifies the security model to be used for this export path.
725Supported security models are "passthrough", "mapped-xattr", "mapped-file" and "none".
726In "passthrough" security model, files are stored using the same
727credentials as they are created on the guest. This requires QEMU
728to run as root. In "mapped-xattr" security model, some of the file
729attributes like uid, gid, mode bits and link target are stored as
730file attributes. For "mapped-file" these attributes are stored in the
731hidden .virtfs_metadata directory. Directories exported by this security model cannot
732interact with other unix tools. "none" security model is same as
733passthrough except the sever won't report failures if it fails to
734set file attributes like ownership. Security model is mandatory only
735for local fsdriver. Other fsdrivers (like handle, proxy) don't take security
736model as a parameter.
737@item writeout=@var{writeout}
738This is an optional argument. The only supported value is "immediate".
739This means that host page cache will be used to read and write data but
740write notification will be sent to the guest only when the data has been
741reported as written by the storage subsystem.
742@item readonly
743Enables exporting 9p share as a readonly mount for guests. By default
744read-write access is given.
745@item socket=@var{socket}
746Enables proxy filesystem driver to use passed socket file for
747communicating with virtfs-proxy-helper. Usually a helper like libvirt
748will create socketpair and pass one of the fds as sock_fd
749@item sock_fd
750Enables proxy filesystem driver to use passed 'sock_fd' as the socket
751descriptor for interfacing with virtfs-proxy-helper
752@end table
753ETEXI
754
755DEF("virtfs_synth", 0, QEMU_OPTION_virtfs_synth,
756    "-virtfs_synth Create synthetic file system image\n",
757    QEMU_ARCH_ALL)
758STEXI
759@item -virtfs_synth
760@findex -virtfs_synth
761Create synthetic file system image
762ETEXI
763
764STEXI
765@end table
766ETEXI
767DEFHEADING()
768
769DEFHEADING(USB options:)
770STEXI
771@table @option
772ETEXI
773
774DEF("usb", 0, QEMU_OPTION_usb,
775    "-usb            enable the USB driver (will be the default soon)\n",
776    QEMU_ARCH_ALL)
777STEXI
778@item -usb
779@findex -usb
780Enable the USB driver (will be the default soon)
781ETEXI
782
783DEF("usbdevice", HAS_ARG, QEMU_OPTION_usbdevice,
784    "-usbdevice name add the host or guest USB device 'name'\n",
785    QEMU_ARCH_ALL)
786STEXI
787
788@item -usbdevice @var{devname}
789@findex -usbdevice
790Add the USB device @var{devname}. @xref{usb_devices}.
791
792@table @option
793
794@item mouse
795Virtual Mouse. This will override the PS/2 mouse emulation when activated.
796
797@item tablet
798Pointer device that uses absolute coordinates (like a touchscreen). This
799means QEMU is able to report the mouse position without having to grab the
800mouse. Also overrides the PS/2 mouse emulation when activated.
801
802@item disk:[format=@var{format}]:@var{file}
803Mass storage device based on file. The optional @var{format} argument
804will be used rather than detecting the format. Can be used to specifiy
805@code{format=raw} to avoid interpreting an untrusted format header.
806
807@item host:@var{bus}.@var{addr}
808Pass through the host device identified by @var{bus}.@var{addr} (Linux only).
809
810@item host:@var{vendor_id}:@var{product_id}
811Pass through the host device identified by @var{vendor_id}:@var{product_id}
812(Linux only).
813
814@item serial:[vendorid=@var{vendor_id}][,productid=@var{product_id}]:@var{dev}
815Serial converter to host character device @var{dev}, see @code{-serial} for the
816available devices.
817
818@item braille
819Braille device.  This will use BrlAPI to display the braille output on a real
820or fake device.
821
822@item net:@var{options}
823Network adapter that supports CDC ethernet and RNDIS protocols.
824
825@end table
826ETEXI
827
828STEXI
829@end table
830ETEXI
831DEFHEADING()
832
833DEFHEADING(Display options:)
834STEXI
835@table @option
836ETEXI
837
838DEF("display", HAS_ARG, QEMU_OPTION_display,
839    "-display sdl[,frame=on|off][,alt_grab=on|off][,ctrl_grab=on|off]\n"
840    "            [,window_close=on|off]|curses|none|\n"
841    "            gtk[,grab_on_hover=on|off]|\n"
842    "            vnc=<display>[,<optargs>]\n"
843    "                select display type\n", QEMU_ARCH_ALL)
844STEXI
845@item -display @var{type}
846@findex -display
847Select type of display to use. This option is a replacement for the
848old style -sdl/-curses/... options. Valid values for @var{type} are
849@table @option
850@item sdl
851Display video output via SDL (usually in a separate graphics
852window; see the SDL documentation for other possibilities).
853@item curses
854Display video output via curses. For graphics device models which
855support a text mode, QEMU can display this output using a
856curses/ncurses interface. Nothing is displayed when the graphics
857device is in graphical mode or if the graphics device does not support
858a text mode. Generally only the VGA device models support text mode.
859@item none
860Do not display video output. The guest will still see an emulated
861graphics card, but its output will not be displayed to the QEMU
862user. This option differs from the -nographic option in that it
863only affects what is done with video output; -nographic also changes
864the destination of the serial and parallel port data.
865@item gtk
866Display video output in a GTK window. This interface provides drop-down
867menus and other UI elements to configure and control the VM during
868runtime.
869@item vnc
870Start a VNC server on display <arg>
871@end table
872ETEXI
873
874DEF("nographic", 0, QEMU_OPTION_nographic,
875    "-nographic      disable graphical output and redirect serial I/Os to console\n",
876    QEMU_ARCH_ALL)
877STEXI
878@item -nographic
879@findex -nographic
880Normally, QEMU uses SDL to display the VGA output. With this option,
881you can totally disable graphical output so that QEMU is a simple
882command line application. The emulated serial port is redirected on
883the console and muxed with the monitor (unless redirected elsewhere
884explicitly). Therefore, you can still use QEMU to debug a Linux kernel
885with a serial console.  Use @key{C-a h} for help on switching between
886the console and monitor.
887ETEXI
888
889DEF("curses", 0, QEMU_OPTION_curses,
890    "-curses         use a curses/ncurses interface instead of SDL\n",
891    QEMU_ARCH_ALL)
892STEXI
893@item -curses
894@findex -curses
895Normally, QEMU uses SDL to display the VGA output.  With this option,
896QEMU can display the VGA output when in text mode using a
897curses/ncurses interface.  Nothing is displayed in graphical mode.
898ETEXI
899
900DEF("no-frame", 0, QEMU_OPTION_no_frame,
901    "-no-frame       open SDL window without a frame and window decorations\n",
902    QEMU_ARCH_ALL)
903STEXI
904@item -no-frame
905@findex -no-frame
906Do not use decorations for SDL windows and start them using the whole
907available screen space. This makes the using QEMU in a dedicated desktop
908workspace more convenient.
909ETEXI
910
911DEF("alt-grab", 0, QEMU_OPTION_alt_grab,
912    "-alt-grab       use Ctrl-Alt-Shift to grab mouse (instead of Ctrl-Alt)\n",
913    QEMU_ARCH_ALL)
914STEXI
915@item -alt-grab
916@findex -alt-grab
917Use Ctrl-Alt-Shift to grab mouse (instead of Ctrl-Alt). Note that this also
918affects the special keys (for fullscreen, monitor-mode switching, etc).
919ETEXI
920
921DEF("ctrl-grab", 0, QEMU_OPTION_ctrl_grab,
922    "-ctrl-grab      use Right-Ctrl to grab mouse (instead of Ctrl-Alt)\n",
923    QEMU_ARCH_ALL)
924STEXI
925@item -ctrl-grab
926@findex -ctrl-grab
927Use Right-Ctrl to grab mouse (instead of Ctrl-Alt). Note that this also
928affects the special keys (for fullscreen, monitor-mode switching, etc).
929ETEXI
930
931DEF("no-quit", 0, QEMU_OPTION_no_quit,
932    "-no-quit        disable SDL window close capability\n", QEMU_ARCH_ALL)
933STEXI
934@item -no-quit
935@findex -no-quit
936Disable SDL window close capability.
937ETEXI
938
939DEF("sdl", 0, QEMU_OPTION_sdl,
940    "-sdl            enable SDL\n", QEMU_ARCH_ALL)
941STEXI
942@item -sdl
943@findex -sdl
944Enable SDL.
945ETEXI
946
947DEF("spice", HAS_ARG, QEMU_OPTION_spice,
948    "-spice [port=port][,tls-port=secured-port][,x509-dir=<dir>]\n"
949    "       [,x509-key-file=<file>][,x509-key-password=<file>]\n"
950    "       [,x509-cert-file=<file>][,x509-cacert-file=<file>]\n"
951    "       [,x509-dh-key-file=<file>][,addr=addr][,ipv4|ipv6]\n"
952    "       [,tls-ciphers=<list>]\n"
953    "       [,tls-channel=[main|display|cursor|inputs|record|playback]]\n"
954    "       [,plaintext-channel=[main|display|cursor|inputs|record|playback]]\n"
955    "       [,sasl][,password=<secret>][,disable-ticketing]\n"
956    "       [,image-compression=[auto_glz|auto_lz|quic|glz|lz|off]]\n"
957    "       [,jpeg-wan-compression=[auto|never|always]]\n"
958    "       [,zlib-glz-wan-compression=[auto|never|always]]\n"
959    "       [,streaming-video=[off|all|filter]][,disable-copy-paste]\n"
960    "       [,disable-agent-file-xfer][,agent-mouse=[on|off]]\n"
961    "       [,playback-compression=[on|off]][,seamless-migration=[on|off]]\n"
962    "   enable spice\n"
963    "   at least one of {port, tls-port} is mandatory\n",
964    QEMU_ARCH_ALL)
965STEXI
966@item -spice @var{option}[,@var{option}[,...]]
967@findex -spice
968Enable the spice remote desktop protocol. Valid options are
969
970@table @option
971
972@item port=<nr>
973Set the TCP port spice is listening on for plaintext channels.
974
975@item addr=<addr>
976Set the IP address spice is listening on.  Default is any address.
977
978@item ipv4
979@item ipv6
980Force using the specified IP version.
981
982@item password=<secret>
983Set the password you need to authenticate.
984
985@item sasl
986Require that the client use SASL to authenticate with the spice.
987The exact choice of authentication method used is controlled from the
988system / user's SASL configuration file for the 'qemu' service. This
989is typically found in /etc/sasl2/qemu.conf. If running QEMU as an
990unprivileged user, an environment variable SASL_CONF_PATH can be used
991to make it search alternate locations for the service config.
992While some SASL auth methods can also provide data encryption (eg GSSAPI),
993it is recommended that SASL always be combined with the 'tls' and
994'x509' settings to enable use of SSL and server certificates. This
995ensures a data encryption preventing compromise of authentication
996credentials.
997
998@item disable-ticketing
999Allow client connects without authentication.
1000
1001@item disable-copy-paste
1002Disable copy paste between the client and the guest.
1003
1004@item disable-agent-file-xfer
1005Disable spice-vdagent based file-xfer between the client and the guest.
1006
1007@item tls-port=<nr>
1008Set the TCP port spice is listening on for encrypted channels.
1009
1010@item x509-dir=<dir>
1011Set the x509 file directory. Expects same filenames as -vnc $display,x509=$dir
1012
1013@item x509-key-file=<file>
1014@item x509-key-password=<file>
1015@item x509-cert-file=<file>
1016@item x509-cacert-file=<file>
1017@item x509-dh-key-file=<file>
1018The x509 file names can also be configured individually.
1019
1020@item tls-ciphers=<list>
1021Specify which ciphers to use.
1022
1023@item tls-channel=[main|display|cursor|inputs|record|playback]
1024@item plaintext-channel=[main|display|cursor|inputs|record|playback]
1025Force specific channel to be used with or without TLS encryption.  The
1026options can be specified multiple times to configure multiple
1027channels.  The special name "default" can be used to set the default
1028mode.  For channels which are not explicitly forced into one mode the
1029spice client is allowed to pick tls/plaintext as he pleases.
1030
1031@item image-compression=[auto_glz|auto_lz|quic|glz|lz|off]
1032Configure image compression (lossless).
1033Default is auto_glz.
1034
1035@item jpeg-wan-compression=[auto|never|always]
1036@item zlib-glz-wan-compression=[auto|never|always]
1037Configure wan image compression (lossy for slow links).
1038Default is auto.
1039
1040@item streaming-video=[off|all|filter]
1041Configure video stream detection.  Default is filter.
1042
1043@item agent-mouse=[on|off]
1044Enable/disable passing mouse events via vdagent.  Default is on.
1045
1046@item playback-compression=[on|off]
1047Enable/disable audio stream compression (using celt 0.5.1).  Default is on.
1048
1049@item seamless-migration=[on|off]
1050Enable/disable spice seamless migration. Default is off.
1051
1052@end table
1053ETEXI
1054
1055DEF("portrait", 0, QEMU_OPTION_portrait,
1056    "-portrait       rotate graphical output 90 deg left (only PXA LCD)\n",
1057    QEMU_ARCH_ALL)
1058STEXI
1059@item -portrait
1060@findex -portrait
1061Rotate graphical output 90 deg left (only PXA LCD).
1062ETEXI
1063
1064DEF("rotate", HAS_ARG, QEMU_OPTION_rotate,
1065    "-rotate <deg>   rotate graphical output some deg left (only PXA LCD)\n",
1066    QEMU_ARCH_ALL)
1067STEXI
1068@item -rotate @var{deg}
1069@findex -rotate
1070Rotate graphical output some deg left (only PXA LCD).
1071ETEXI
1072
1073DEF("vga", HAS_ARG, QEMU_OPTION_vga,
1074    "-vga [std|cirrus|vmware|qxl|xenfb|tcx|cg3|none]\n"
1075    "                select video card type\n", QEMU_ARCH_ALL)
1076STEXI
1077@item -vga @var{type}
1078@findex -vga
1079Select type of VGA card to emulate. Valid values for @var{type} are
1080@table @option
1081@item cirrus
1082Cirrus Logic GD5446 Video card. All Windows versions starting from
1083Windows 95 should recognize and use this graphic card. For optimal
1084performances, use 16 bit color depth in the guest and the host OS.
1085(This one is the default)
1086@item std
1087Standard VGA card with Bochs VBE extensions.  If your guest OS
1088supports the VESA 2.0 VBE extensions (e.g. Windows XP) and if you want
1089to use high resolution modes (>= 1280x1024x16) then you should use
1090this option.
1091@item vmware
1092VMWare SVGA-II compatible adapter. Use it if you have sufficiently
1093recent XFree86/XOrg server or Windows guest with a driver for this
1094card.
1095@item qxl
1096QXL paravirtual graphic card.  It is VGA compatible (including VESA
10972.0 VBE support).  Works best with qxl guest drivers installed though.
1098Recommended choice when using the spice protocol.
1099@item tcx
1100(sun4m only) Sun TCX framebuffer. This is the default framebuffer for
1101sun4m machines and offers both 8-bit and 24-bit colour depths at a
1102fixed resolution of 1024x768.
1103@item cg3
1104(sun4m only) Sun cgthree framebuffer. This is a simple 8-bit framebuffer
1105for sun4m machines available in both 1024x768 (OpenBIOS) and 1152x900 (OBP)
1106resolutions aimed at people wishing to run older Solaris versions.
1107@item none
1108Disable VGA card.
1109@end table
1110ETEXI
1111
1112DEF("full-screen", 0, QEMU_OPTION_full_screen,
1113    "-full-screen    start in full screen\n", QEMU_ARCH_ALL)
1114STEXI
1115@item -full-screen
1116@findex -full-screen
1117Start in full screen.
1118ETEXI
1119
1120DEF("g", 1, QEMU_OPTION_g ,
1121    "-g WxH[xDEPTH]  Set the initial graphical resolution and depth\n",
1122    QEMU_ARCH_PPC | QEMU_ARCH_SPARC)
1123STEXI
1124@item -g @var{width}x@var{height}[x@var{depth}]
1125@findex -g
1126Set the initial graphical resolution and depth (PPC, SPARC only).
1127ETEXI
1128
1129DEF("vnc", HAS_ARG, QEMU_OPTION_vnc ,
1130    "-vnc display    start a VNC server on display\n", QEMU_ARCH_ALL)
1131STEXI
1132@item -vnc @var{display}[,@var{option}[,@var{option}[,...]]]
1133@findex -vnc
1134Normally, QEMU uses SDL to display the VGA output.  With this option,
1135you can have QEMU listen on VNC display @var{display} and redirect the VGA
1136display over the VNC session.  It is very useful to enable the usb
1137tablet device when using this option (option @option{-usbdevice
1138tablet}). When using the VNC display, you must use the @option{-k}
1139parameter to set the keyboard layout if you are not using en-us. Valid
1140syntax for the @var{display} is
1141
1142@table @option
1143
1144@item @var{host}:@var{d}
1145
1146TCP connections will only be allowed from @var{host} on display @var{d}.
1147By convention the TCP port is 5900+@var{d}. Optionally, @var{host} can
1148be omitted in which case the server will accept connections from any host.
1149
1150@item unix:@var{path}
1151
1152Connections will be allowed over UNIX domain sockets where @var{path} is the
1153location of a unix socket to listen for connections on.
1154
1155@item none
1156
1157VNC is initialized but not started. The monitor @code{change} command
1158can be used to later start the VNC server.
1159
1160@end table
1161
1162Following the @var{display} value there may be one or more @var{option} flags
1163separated by commas. Valid options are
1164
1165@table @option
1166
1167@item reverse
1168
1169Connect to a listening VNC client via a ``reverse'' connection. The
1170client is specified by the @var{display}. For reverse network
1171connections (@var{host}:@var{d},@code{reverse}), the @var{d} argument
1172is a TCP port number, not a display number.
1173
1174@item websocket
1175
1176Opens an additional TCP listening port dedicated to VNC Websocket connections.
1177By definition the Websocket port is 5700+@var{display}. If @var{host} is
1178specified connections will only be allowed from this host.
1179As an alternative the Websocket port could be specified by using
1180@code{websocket}=@var{port}.
1181TLS encryption for the Websocket connection is supported if the required
1182certificates are specified with the VNC option @option{x509}.
1183
1184@item password
1185
1186Require that password based authentication is used for client connections.
1187
1188The password must be set separately using the @code{set_password} command in
1189the @ref{pcsys_monitor}. The syntax to change your password is:
1190@code{set_password <protocol> <password>} where <protocol> could be either
1191"vnc" or "spice".
1192
1193If you would like to change <protocol> password expiration, you should use
1194@code{expire_password <protocol> <expiration-time>} where expiration time could
1195be one of the following options: now, never, +seconds or UNIX time of
1196expiration, e.g. +60 to make password expire in 60 seconds, or 1335196800
1197to make password expire on "Mon Apr 23 12:00:00 EDT 2012" (UNIX time for this
1198date and time).
1199
1200You can also use keywords "now" or "never" for the expiration time to
1201allow <protocol> password to expire immediately or never expire.
1202
1203@item tls
1204
1205Require that client use TLS when communicating with the VNC server. This
1206uses anonymous TLS credentials so is susceptible to a man-in-the-middle
1207attack. It is recommended that this option be combined with either the
1208@option{x509} or @option{x509verify} options.
1209
1210@item x509=@var{/path/to/certificate/dir}
1211
1212Valid if @option{tls} is specified. Require that x509 credentials are used
1213for negotiating the TLS session. The server will send its x509 certificate
1214to the client. It is recommended that a password be set on the VNC server
1215to provide authentication of the client when this is used. The path following
1216this option specifies where the x509 certificates are to be loaded from.
1217See the @ref{vnc_security} section for details on generating certificates.
1218
1219@item x509verify=@var{/path/to/certificate/dir}
1220
1221Valid if @option{tls} is specified. Require that x509 credentials are used
1222for negotiating the TLS session. The server will send its x509 certificate
1223to the client, and request that the client send its own x509 certificate.
1224The server will validate the client's certificate against the CA certificate,
1225and reject clients when validation fails. If the certificate authority is
1226trusted, this is a sufficient authentication mechanism. You may still wish
1227to set a password on the VNC server as a second authentication layer. The
1228path following this option specifies where the x509 certificates are to
1229be loaded from. See the @ref{vnc_security} section for details on generating
1230certificates.
1231
1232@item sasl
1233
1234Require that the client use SASL to authenticate with the VNC server.
1235The exact choice of authentication method used is controlled from the
1236system / user's SASL configuration file for the 'qemu' service. This
1237is typically found in /etc/sasl2/qemu.conf. If running QEMU as an
1238unprivileged user, an environment variable SASL_CONF_PATH can be used
1239to make it search alternate locations for the service config.
1240While some SASL auth methods can also provide data encryption (eg GSSAPI),
1241it is recommended that SASL always be combined with the 'tls' and
1242'x509' settings to enable use of SSL and server certificates. This
1243ensures a data encryption preventing compromise of authentication
1244credentials. See the @ref{vnc_security} section for details on using
1245SASL authentication.
1246
1247@item acl
1248
1249Turn on access control lists for checking of the x509 client certificate
1250and SASL party. For x509 certs, the ACL check is made against the
1251certificate's distinguished name. This is something that looks like
1252@code{C=GB,O=ACME,L=Boston,CN=bob}. For SASL party, the ACL check is
1253made against the username, which depending on the SASL plugin, may
1254include a realm component, eg @code{bob} or @code{bob@@EXAMPLE.COM}.
1255When the @option{acl} flag is set, the initial access list will be
1256empty, with a @code{deny} policy. Thus no one will be allowed to
1257use the VNC server until the ACLs have been loaded. This can be
1258achieved using the @code{acl} monitor command.
1259
1260@item lossy
1261
1262Enable lossy compression methods (gradient, JPEG, ...). If this
1263option is set, VNC client may receive lossy framebuffer updates
1264depending on its encoding settings. Enabling this option can save
1265a lot of bandwidth at the expense of quality.
1266
1267@item non-adaptive
1268
1269Disable adaptive encodings. Adaptive encodings are enabled by default.
1270An adaptive encoding will try to detect frequently updated screen regions,
1271and send updates in these regions using a lossy encoding (like JPEG).
1272This can be really helpful to save bandwidth when playing videos. Disabling
1273adaptive encodings restores the original static behavior of encodings
1274like Tight.
1275
1276@item share=[allow-exclusive|force-shared|ignore]
1277
1278Set display sharing policy.  'allow-exclusive' allows clients to ask
1279for exclusive access.  As suggested by the rfb spec this is
1280implemented by dropping other connections.  Connecting multiple
1281clients in parallel requires all clients asking for a shared session
1282(vncviewer: -shared switch).  This is the default.  'force-shared'
1283disables exclusive client access.  Useful for shared desktop sessions,
1284where you don't want someone forgetting specify -shared disconnect
1285everybody else.  'ignore' completely ignores the shared flag and
1286allows everybody connect unconditionally.  Doesn't conform to the rfb
1287spec but is traditional QEMU behavior.
1288
1289@end table
1290ETEXI
1291
1292STEXI
1293@end table
1294ETEXI
1295ARCHHEADING(, QEMU_ARCH_I386)
1296
1297ARCHHEADING(i386 target only:, QEMU_ARCH_I386)
1298STEXI
1299@table @option
1300ETEXI
1301
1302DEF("win2k-hack", 0, QEMU_OPTION_win2k_hack,
1303    "-win2k-hack     use it when installing Windows 2000 to avoid a disk full bug\n",
1304    QEMU_ARCH_I386)
1305STEXI
1306@item -win2k-hack
1307@findex -win2k-hack
1308Use it when installing Windows 2000 to avoid a disk full bug. After
1309Windows 2000 is installed, you no longer need this option (this option
1310slows down the IDE transfers).
1311ETEXI
1312
1313HXCOMM Deprecated by -rtc
1314DEF("rtc-td-hack", 0, QEMU_OPTION_rtc_td_hack, "", QEMU_ARCH_I386)
1315
1316DEF("no-fd-bootchk", 0, QEMU_OPTION_no_fd_bootchk,
1317    "-no-fd-bootchk  disable boot signature checking for floppy disks\n",
1318    QEMU_ARCH_I386)
1319STEXI
1320@item -no-fd-bootchk
1321@findex -no-fd-bootchk
1322Disable boot signature checking for floppy disks in BIOS. May
1323be needed to boot from old floppy disks.
1324ETEXI
1325
1326DEF("no-acpi", 0, QEMU_OPTION_no_acpi,
1327           "-no-acpi        disable ACPI\n", QEMU_ARCH_I386)
1328STEXI
1329@item -no-acpi
1330@findex -no-acpi
1331Disable ACPI (Advanced Configuration and Power Interface) support. Use
1332it if your guest OS complains about ACPI problems (PC target machine
1333only).
1334ETEXI
1335
1336DEF("no-hpet", 0, QEMU_OPTION_no_hpet,
1337    "-no-hpet        disable HPET\n", QEMU_ARCH_I386)
1338STEXI
1339@item -no-hpet
1340@findex -no-hpet
1341Disable HPET support.
1342ETEXI
1343
1344DEF("acpitable", HAS_ARG, QEMU_OPTION_acpitable,
1345    "-acpitable [sig=str][,rev=n][,oem_id=str][,oem_table_id=str][,oem_rev=n][,asl_compiler_id=str][,asl_compiler_rev=n][,{data|file}=file1[:file2]...]\n"
1346    "                ACPI table description\n", QEMU_ARCH_I386)
1347STEXI
1348@item -acpitable [sig=@var{str}][,rev=@var{n}][,oem_id=@var{str}][,oem_table_id=@var{str}][,oem_rev=@var{n}] [,asl_compiler_id=@var{str}][,asl_compiler_rev=@var{n}][,data=@var{file1}[:@var{file2}]...]
1349@findex -acpitable
1350Add ACPI table with specified header fields and context from specified files.
1351For file=, take whole ACPI table from the specified files, including all
1352ACPI headers (possible overridden by other options).
1353For data=, only data
1354portion of the table is used, all header information is specified in the
1355command line.
1356ETEXI
1357
1358DEF("smbios", HAS_ARG, QEMU_OPTION_smbios,
1359    "-smbios file=binary\n"
1360    "                load SMBIOS entry from binary file\n"
1361    "-smbios type=0[,vendor=str][,version=str][,date=str][,release=%d.%d][,uefi=on|off]\n"
1362    "                specify SMBIOS type 0 fields\n"
1363    "-smbios type=1[,manufacturer=str][,product=str][,version=str][,serial=str]\n"
1364    "              [,uuid=uuid][,sku=str][,family=str]\n"
1365    "                specify SMBIOS type 1 fields\n", QEMU_ARCH_I386)
1366STEXI
1367@item -smbios file=@var{binary}
1368@findex -smbios
1369Load SMBIOS entry from binary file.
1370
1371@item -smbios type=0[,vendor=@var{str}][,version=@var{str}][,date=@var{str}][,release=@var{%d.%d}][,uefi=on|off]
1372Specify SMBIOS type 0 fields
1373
1374@item -smbios type=1[,manufacturer=@var{str}][,product=@var{str}] [,version=@var{str}][,serial=@var{str}][,uuid=@var{uuid}][,sku=@var{str}] [,family=@var{str}]
1375Specify SMBIOS type 1 fields
1376ETEXI
1377
1378STEXI
1379@end table
1380ETEXI
1381DEFHEADING()
1382
1383DEFHEADING(Network options:)
1384STEXI
1385@table @option
1386ETEXI
1387
1388HXCOMM Legacy slirp options (now moved to -net user):
1389#ifdef CONFIG_SLIRP
1390DEF("tftp", HAS_ARG, QEMU_OPTION_tftp, "", QEMU_ARCH_ALL)
1391DEF("bootp", HAS_ARG, QEMU_OPTION_bootp, "", QEMU_ARCH_ALL)
1392DEF("redir", HAS_ARG, QEMU_OPTION_redir, "", QEMU_ARCH_ALL)
1393#ifndef _WIN32
1394DEF("smb", HAS_ARG, QEMU_OPTION_smb, "", QEMU_ARCH_ALL)
1395#endif
1396#endif
1397
1398DEF("net", HAS_ARG, QEMU_OPTION_net,
1399    "-net nic[,vlan=n][,macaddr=mac][,model=type][,name=str][,addr=str][,vectors=v]\n"
1400    "                create a new Network Interface Card and connect it to VLAN 'n'\n"
1401#ifdef CONFIG_SLIRP
1402    "-net user[,vlan=n][,name=str][,net=addr[/mask]][,host=addr][,restrict=on|off]\n"
1403    "         [,hostname=host][,dhcpstart=addr][,dns=addr][,dnssearch=domain][,tftp=dir]\n"
1404    "         [,bootfile=f][,hostfwd=rule][,guestfwd=rule]"
1405#ifndef _WIN32
1406                                             "[,smb=dir[,smbserver=addr]]\n"
1407#endif
1408    "                connect the user mode network stack to VLAN 'n', configure its\n"
1409    "                DHCP server and enabled optional services\n"
1410#endif
1411#ifdef _WIN32
1412    "-net tap[,vlan=n][,name=str],ifname=name\n"
1413    "                connect the host TAP network interface to VLAN 'n'\n"
1414#else
1415    "-net tap[,vlan=n][,name=str][,fd=h][,fds=x:y:...:z][,ifname=name][,script=file][,downscript=dfile][,helper=helper][,sndbuf=nbytes][,vnet_hdr=on|off][,vhost=on|off][,vhostfd=h][,vhostfds=x:y:...:z][,vhostforce=on|off][,queues=n]\n"
1416    "                connect the host TAP network interface to VLAN 'n'\n"
1417    "                use network scripts 'file' (default=" DEFAULT_NETWORK_SCRIPT ")\n"
1418    "                to configure it and 'dfile' (default=" DEFAULT_NETWORK_DOWN_SCRIPT ")\n"
1419    "                to deconfigure it\n"
1420    "                use '[down]script=no' to disable script execution\n"
1421    "                use network helper 'helper' (default=" DEFAULT_BRIDGE_HELPER ") to\n"
1422    "                configure it\n"
1423    "                use 'fd=h' to connect to an already opened TAP interface\n"
1424    "                use 'fds=x:y:...:z' to connect to already opened multiqueue capable TAP interfaces\n"
1425    "                use 'sndbuf=nbytes' to limit the size of the send buffer (the\n"
1426    "                default is disabled 'sndbuf=0' to enable flow control set 'sndbuf=1048576')\n"
1427    "                use vnet_hdr=off to avoid enabling the IFF_VNET_HDR tap flag\n"
1428    "                use vnet_hdr=on to make the lack of IFF_VNET_HDR support an error condition\n"
1429    "                use vhost=on to enable experimental in kernel accelerator\n"
1430    "                    (only has effect for virtio guests which use MSIX)\n"
1431    "                use vhostforce=on to force vhost on for non-MSIX virtio guests\n"
1432    "                use 'vhostfd=h' to connect to an already opened vhost net device\n"
1433    "                use 'vhostfds=x:y:...:z to connect to multiple already opened vhost net devices\n"
1434    "                use 'queues=n' to specify the number of queues to be created for multiqueue TAP\n"
1435    "-net bridge[,vlan=n][,name=str][,br=bridge][,helper=helper]\n"
1436    "                connects a host TAP network interface to a host bridge device 'br'\n"
1437    "                (default=" DEFAULT_BRIDGE_INTERFACE ") using the program 'helper'\n"
1438    "                (default=" DEFAULT_BRIDGE_HELPER ")\n"
1439#endif
1440#ifdef __linux__
1441    "-net l2tpv3[,vlan=n][,name=str],src=srcaddr,dst=dstaddr[,srcport=srcport][,dstport=dstport],txsession=txsession[,rxsession=rxsession][,ipv6=on/off][,udp=on/off][,cookie64=on/off][,counter][,pincounter][,txcookie=txcookie][,rxcookie=rxcookie][,offset=offset]\n"
1442    "                connect the VLAN to an Ethernet over L2TPv3 pseudowire\n"
1443    "                Linux kernel 3.3+ as well as most routers can talk\n"
1444    "                L2TPv3. This transport allows connecting a VM to a VM,\n"
1445    "                VM to a router and even VM to Host. It is a nearly-universal\n"
1446    "                standard (RFC3391). Note - this implementation uses static\n"
1447    "                pre-configured tunnels (same as the Linux kernel).\n"
1448    "                use 'src=' to specify source address\n"
1449    "                use 'dst=' to specify destination address\n"
1450    "                use 'udp=on' to specify udp encapsulation\n"
1451    "                use 'srcport=' to specify source udp port\n"
1452    "                use 'dstport=' to specify destination udp port\n"
1453    "                use 'ipv6=on' to force v6\n"
1454    "                L2TPv3 uses cookies to prevent misconfiguration as\n"
1455    "                well as a weak security measure\n"
1456    "                use 'rxcookie=0x012345678' to specify a rxcookie\n"
1457    "                use 'txcookie=0x012345678' to specify a txcookie\n"
1458    "                use 'cookie64=on' to set cookie size to 64 bit, otherwise 32\n"
1459    "                use 'counter=off' to force a 'cut-down' L2TPv3 with no counter\n"
1460    "                use 'pincounter=on' to work around broken counter handling in peer\n"
1461    "                use 'offset=X' to add an extra offset between header and data\n"
1462#endif
1463    "-net socket[,vlan=n][,name=str][,fd=h][,listen=[host]:port][,connect=host:port]\n"
1464    "                connect the vlan 'n' to another VLAN using a socket connection\n"
1465    "-net socket[,vlan=n][,name=str][,fd=h][,mcast=maddr:port[,localaddr=addr]]\n"
1466    "                connect the vlan 'n' to multicast maddr and port\n"
1467    "                use 'localaddr=addr' to specify the host address to send packets from\n"
1468    "-net socket[,vlan=n][,name=str][,fd=h][,udp=host:port][,localaddr=host:port]\n"
1469    "                connect the vlan 'n' to another VLAN using an UDP tunnel\n"
1470#ifdef CONFIG_VDE
1471    "-net vde[,vlan=n][,name=str][,sock=socketpath][,port=n][,group=groupname][,mode=octalmode]\n"
1472    "                connect the vlan 'n' to port 'n' of a vde switch running\n"
1473    "                on host and listening for incoming connections on 'socketpath'.\n"
1474    "                Use group 'groupname' and mode 'octalmode' to change default\n"
1475    "                ownership and permissions for communication port.\n"
1476#endif
1477#ifdef CONFIG_NETMAP
1478    "-net netmap,ifname=name[,devname=nmname]\n"
1479    "                attach to the existing netmap-enabled network interface 'name', or to a\n"
1480    "                VALE port (created on the fly) called 'name' ('nmname' is name of the \n"
1481    "                netmap device, defaults to '/dev/netmap')\n"
1482#endif
1483    "-net dump[,vlan=n][,file=f][,len=n]\n"
1484    "                dump traffic on vlan 'n' to file 'f' (max n bytes per packet)\n"
1485    "-net none       use it alone to have zero network devices. If no -net option\n"
1486    "                is provided, the default is '-net nic -net user'\n", QEMU_ARCH_ALL)
1487DEF("netdev", HAS_ARG, QEMU_OPTION_netdev,
1488    "-netdev ["
1489#ifdef CONFIG_SLIRP
1490    "user|"
1491#endif
1492    "tap|"
1493    "bridge|"
1494#ifdef CONFIG_VDE
1495    "vde|"
1496#endif
1497#ifdef CONFIG_NETMAP
1498    "netmap|"
1499#endif
1500    "vhost-user|"
1501    "socket|"
1502    "hubport],id=str[,option][,option][,...]\n", QEMU_ARCH_ALL)
1503STEXI
1504@item -net nic[,vlan=@var{n}][,macaddr=@var{mac}][,model=@var{type}] [,name=@var{name}][,addr=@var{addr}][,vectors=@var{v}]
1505@findex -net
1506Create a new Network Interface Card and connect it to VLAN @var{n} (@var{n}
1507= 0 is the default). The NIC is an e1000 by default on the PC
1508target. Optionally, the MAC address can be changed to @var{mac}, the
1509device address set to @var{addr} (PCI cards only),
1510and a @var{name} can be assigned for use in monitor commands.
1511Optionally, for PCI cards, you can specify the number @var{v} of MSI-X vectors
1512that the card should have; this option currently only affects virtio cards; set
1513@var{v} = 0 to disable MSI-X. If no @option{-net} option is specified, a single
1514NIC is created.  QEMU can emulate several different models of network card.
1515Valid values for @var{type} are
1516@code{virtio}, @code{i82551}, @code{i82557b}, @code{i82559er},
1517@code{ne2k_pci}, @code{ne2k_isa}, @code{pcnet}, @code{rtl8139},
1518@code{e1000}, @code{smc91c111}, @code{lance} and @code{mcf_fec}.
1519Not all devices are supported on all targets.  Use @code{-net nic,model=help}
1520for a list of available devices for your target.
1521
1522@item -netdev user,id=@var{id}[,@var{option}][,@var{option}][,...]
1523@findex -netdev
1524@item -net user[,@var{option}][,@var{option}][,...]
1525Use the user mode network stack which requires no administrator
1526privilege to run. Valid options are:
1527
1528@table @option
1529@item vlan=@var{n}
1530Connect user mode stack to VLAN @var{n} (@var{n} = 0 is the default).
1531
1532@item id=@var{id}
1533@item name=@var{name}
1534Assign symbolic name for use in monitor commands.
1535
1536@item net=@var{addr}[/@var{mask}]
1537Set IP network address the guest will see. Optionally specify the netmask,
1538either in the form a.b.c.d or as number of valid top-most bits. Default is
153910.0.2.0/24.
1540
1541@item host=@var{addr}
1542Specify the guest-visible address of the host. Default is the 2nd IP in the
1543guest network, i.e. x.x.x.2.
1544
1545@item restrict=on|off
1546If this option is enabled, the guest will be isolated, i.e. it will not be
1547able to contact the host and no guest IP packets will be routed over the host
1548to the outside. This option does not affect any explicitly set forwarding rules.
1549
1550@item hostname=@var{name}
1551Specifies the client hostname reported by the built-in DHCP server.
1552
1553@item dhcpstart=@var{addr}
1554Specify the first of the 16 IPs the built-in DHCP server can assign. Default
1555is the 15th to 31st IP in the guest network, i.e. x.x.x.15 to x.x.x.31.
1556
1557@item dns=@var{addr}
1558Specify the guest-visible address of the virtual nameserver. The address must
1559be different from the host address. Default is the 3rd IP in the guest network,
1560i.e. x.x.x.3.
1561
1562@item dnssearch=@var{domain}
1563Provides an entry for the domain-search list sent by the built-in
1564DHCP server. More than one domain suffix can be transmitted by specifying
1565this option multiple times. If supported, this will cause the guest to
1566automatically try to append the given domain suffix(es) in case a domain name
1567can not be resolved.
1568
1569Example:
1570@example
1571qemu -net user,dnssearch=mgmt.example.org,dnssearch=example.org [...]
1572@end example
1573
1574@item tftp=@var{dir}
1575When using the user mode network stack, activate a built-in TFTP
1576server. The files in @var{dir} will be exposed as the root of a TFTP server.
1577The TFTP client on the guest must be configured in binary mode (use the command
1578@code{bin} of the Unix TFTP client).
1579
1580@item bootfile=@var{file}
1581When using the user mode network stack, broadcast @var{file} as the BOOTP
1582filename. In conjunction with @option{tftp}, this can be used to network boot
1583a guest from a local directory.
1584
1585Example (using pxelinux):
1586@example
1587qemu-system-i386 -hda linux.img -boot n -net user,tftp=/path/to/tftp/files,bootfile=/pxelinux.0
1588@end example
1589
1590@item smb=@var{dir}[,smbserver=@var{addr}]
1591When using the user mode network stack, activate a built-in SMB
1592server so that Windows OSes can access to the host files in @file{@var{dir}}
1593transparently. The IP address of the SMB server can be set to @var{addr}. By
1594default the 4th IP in the guest network is used, i.e. x.x.x.4.
1595
1596In the guest Windows OS, the line:
1597@example
159810.0.2.4 smbserver
1599@end example
1600must be added in the file @file{C:\WINDOWS\LMHOSTS} (for windows 9x/Me)
1601or @file{C:\WINNT\SYSTEM32\DRIVERS\ETC\LMHOSTS} (Windows NT/2000).
1602
1603Then @file{@var{dir}} can be accessed in @file{\\smbserver\qemu}.
1604
1605Note that a SAMBA server must be installed on the host OS.
1606QEMU was tested successfully with smbd versions from Red Hat 9,
1607Fedora Core 3 and OpenSUSE 11.x.
1608
1609@item hostfwd=[tcp|udp]:[@var{hostaddr}]:@var{hostport}-[@var{guestaddr}]:@var{guestport}
1610Redirect incoming TCP or UDP connections to the host port @var{hostport} to
1611the guest IP address @var{guestaddr} on guest port @var{guestport}. If
1612@var{guestaddr} is not specified, its value is x.x.x.15 (default first address
1613given by the built-in DHCP server). By specifying @var{hostaddr}, the rule can
1614be bound to a specific host interface. If no connection type is set, TCP is
1615used. This option can be given multiple times.
1616
1617For example, to redirect host X11 connection from screen 1 to guest
1618screen 0, use the following:
1619
1620@example
1621# on the host
1622qemu-system-i386 -net user,hostfwd=tcp:127.0.0.1:6001-:6000 [...]
1623# this host xterm should open in the guest X11 server
1624xterm -display :1
1625@end example
1626
1627To redirect telnet connections from host port 5555 to telnet port on
1628the guest, use the following:
1629
1630@example
1631# on the host
1632qemu-system-i386 -net user,hostfwd=tcp::5555-:23 [...]
1633telnet localhost 5555
1634@end example
1635
1636Then when you use on the host @code{telnet localhost 5555}, you
1637connect to the guest telnet server.
1638
1639@item guestfwd=[tcp]:@var{server}:@var{port}-@var{dev}
1640@item guestfwd=[tcp]:@var{server}:@var{port}-@var{cmd:command}
1641Forward guest TCP connections to the IP address @var{server} on port @var{port}
1642to the character device @var{dev} or to a program executed by @var{cmd:command}
1643which gets spawned for each connection. This option can be given multiple times.
1644
1645You can either use a chardev directly and have that one used throughout QEMU's
1646lifetime, like in the following example:
1647
1648@example
1649# open 10.10.1.1:4321 on bootup, connect 10.0.2.100:1234 to it whenever
1650# the guest accesses it
1651qemu -net user,guestfwd=tcp:10.0.2.100:1234-tcp:10.10.1.1:4321 [...]
1652@end example
1653
1654Or you can execute a command on every TCP connection established by the guest,
1655so that QEMU behaves similar to an inetd process for that virtual server:
1656
1657@example
1658# call "netcat 10.10.1.1 4321" on every TCP connection to 10.0.2.100:1234
1659# and connect the TCP stream to its stdin/stdout
1660qemu -net 'user,guestfwd=tcp:10.0.2.100:1234-cmd:netcat 10.10.1.1 4321'
1661@end example
1662
1663@end table
1664
1665Note: Legacy stand-alone options -tftp, -bootp, -smb and -redir are still
1666processed and applied to -net user. Mixing them with the new configuration
1667syntax gives undefined results. Their use for new applications is discouraged
1668as they will be removed from future versions.
1669
1670@item -netdev tap,id=@var{id}[,fd=@var{h}][,ifname=@var{name}][,script=@var{file}][,downscript=@var{dfile}][,helper=@var{helper}]
1671@item -net tap[,vlan=@var{n}][,name=@var{name}][,fd=@var{h}][,ifname=@var{name}][,script=@var{file}][,downscript=@var{dfile}][,helper=@var{helper}]
1672Connect the host TAP network interface @var{name} to VLAN @var{n}.
1673
1674Use the network script @var{file} to configure it and the network script
1675@var{dfile} to deconfigure it. If @var{name} is not provided, the OS
1676automatically provides one. The default network configure script is
1677@file{/etc/qemu-ifup} and the default network deconfigure script is
1678@file{/etc/qemu-ifdown}. Use @option{script=no} or @option{downscript=no}
1679to disable script execution.
1680
1681If running QEMU as an unprivileged user, use the network helper
1682@var{helper} to configure the TAP interface. The default network
1683helper executable is @file{/path/to/qemu-bridge-helper}.
1684
1685@option{fd}=@var{h} can be used to specify the handle of an already
1686opened host TAP interface.
1687
1688Examples:
1689
1690@example
1691#launch a QEMU instance with the default network script
1692qemu-system-i386 linux.img -net nic -net tap
1693@end example
1694
1695@example
1696#launch a QEMU instance with two NICs, each one connected
1697#to a TAP device
1698qemu-system-i386 linux.img \
1699                 -net nic,vlan=0 -net tap,vlan=0,ifname=tap0 \
1700                 -net nic,vlan=1 -net tap,vlan=1,ifname=tap1
1701@end example
1702
1703@example
1704#launch a QEMU instance with the default network helper to
1705#connect a TAP device to bridge br0
1706qemu-system-i386 linux.img \
1707                 -net nic -net tap,"helper=/path/to/qemu-bridge-helper"
1708@end example
1709
1710@item -netdev bridge,id=@var{id}[,br=@var{bridge}][,helper=@var{helper}]
1711@item -net bridge[,vlan=@var{n}][,name=@var{name}][,br=@var{bridge}][,helper=@var{helper}]
1712Connect a host TAP network interface to a host bridge device.
1713
1714Use the network helper @var{helper} to configure the TAP interface and
1715attach it to the bridge. The default network helper executable is
1716@file{/path/to/qemu-bridge-helper} and the default bridge
1717device is @file{br0}.
1718
1719Examples:
1720
1721@example
1722#launch a QEMU instance with the default network helper to
1723#connect a TAP device to bridge br0
1724qemu-system-i386 linux.img -net bridge -net nic,model=virtio
1725@end example
1726
1727@example
1728#launch a QEMU instance with the default network helper to
1729#connect a TAP device to bridge qemubr0
1730qemu-system-i386 linux.img -net bridge,br=qemubr0 -net nic,model=virtio
1731@end example
1732
1733@item -netdev socket,id=@var{id}[,fd=@var{h}][,listen=[@var{host}]:@var{port}][,connect=@var{host}:@var{port}]
1734@item -net socket[,vlan=@var{n}][,name=@var{name}][,fd=@var{h}] [,listen=[@var{host}]:@var{port}][,connect=@var{host}:@var{port}]
1735
1736Connect the VLAN @var{n} to a remote VLAN in another QEMU virtual
1737machine using a TCP socket connection. If @option{listen} is
1738specified, QEMU waits for incoming connections on @var{port}
1739(@var{host} is optional). @option{connect} is used to connect to
1740another QEMU instance using the @option{listen} option. @option{fd}=@var{h}
1741specifies an already opened TCP socket.
1742
1743Example:
1744@example
1745# launch a first QEMU instance
1746qemu-system-i386 linux.img \
1747                 -net nic,macaddr=52:54:00:12:34:56 \
1748                 -net socket,listen=:1234
1749# connect the VLAN 0 of this instance to the VLAN 0
1750# of the first instance
1751qemu-system-i386 linux.img \
1752                 -net nic,macaddr=52:54:00:12:34:57 \
1753                 -net socket,connect=127.0.0.1:1234
1754@end example
1755
1756@item -netdev socket,id=@var{id}[,fd=@var{h}][,mcast=@var{maddr}:@var{port}[,localaddr=@var{addr}]]
1757@item -net socket[,vlan=@var{n}][,name=@var{name}][,fd=@var{h}][,mcast=@var{maddr}:@var{port}[,localaddr=@var{addr}]]
1758
1759Create a VLAN @var{n} shared with another QEMU virtual
1760machines using a UDP multicast socket, effectively making a bus for
1761every QEMU with same multicast address @var{maddr} and @var{port}.
1762NOTES:
1763@enumerate
1764@item
1765Several QEMU can be running on different hosts and share same bus (assuming
1766correct multicast setup for these hosts).
1767@item
1768mcast support is compatible with User Mode Linux (argument @option{eth@var{N}=mcast}), see
1769@url{http://user-mode-linux.sf.net}.
1770@item
1771Use @option{fd=h} to specify an already opened UDP multicast socket.
1772@end enumerate
1773
1774Example:
1775@example
1776# launch one QEMU instance
1777qemu-system-i386 linux.img \
1778                 -net nic,macaddr=52:54:00:12:34:56 \
1779                 -net socket,mcast=230.0.0.1:1234
1780# launch another QEMU instance on same "bus"
1781qemu-system-i386 linux.img \
1782                 -net nic,macaddr=52:54:00:12:34:57 \
1783                 -net socket,mcast=230.0.0.1:1234
1784# launch yet another QEMU instance on same "bus"
1785qemu-system-i386 linux.img \
1786                 -net nic,macaddr=52:54:00:12:34:58 \
1787                 -net socket,mcast=230.0.0.1:1234
1788@end example
1789
1790Example (User Mode Linux compat.):
1791@example
1792# launch QEMU instance (note mcast address selected
1793# is UML's default)
1794qemu-system-i386 linux.img \
1795                 -net nic,macaddr=52:54:00:12:34:56 \
1796                 -net socket,mcast=239.192.168.1:1102
1797# launch UML
1798/path/to/linux ubd0=/path/to/root_fs eth0=mcast
1799@end example
1800
1801Example (send packets from host's 1.2.3.4):
1802@example
1803qemu-system-i386 linux.img \
1804                 -net nic,macaddr=52:54:00:12:34:56 \
1805                 -net socket,mcast=239.192.168.1:1102,localaddr=1.2.3.4
1806@end example
1807
1808@item -netdev l2tpv3,id=@var{id},src=@var{srcaddr},dst=@var{dstaddr}[,srcport=@var{srcport}][,dstport=@var{dstport}],txsession=@var{txsession}[,rxsession=@var{rxsession}][,ipv6][,udp][,cookie64][,counter][,pincounter][,txcookie=@var{txcookie}][,rxcookie=@var{rxcookie}][,offset=@var{offset}]
1809@item -net l2tpv3[,vlan=@var{n}][,name=@var{name}],src=@var{srcaddr},dst=@var{dstaddr}[,srcport=@var{srcport}][,dstport=@var{dstport}],txsession=@var{txsession}[,rxsession=@var{rxsession}][,ipv6][,udp][,cookie64][,counter][,pincounter][,txcookie=@var{txcookie}][,rxcookie=@var{rxcookie}][,offset=@var{offset}]
1810Connect VLAN @var{n} to L2TPv3 pseudowire. L2TPv3 (RFC3391) is a popular
1811protocol to transport Ethernet (and other Layer 2) data frames between
1812two systems. It is present in routers, firewalls and the Linux kernel
1813(from version 3.3 onwards).
1814
1815This transport allows a VM to communicate to another VM, router or firewall directly.
1816
1817@item src=@var{srcaddr}
1818    source address (mandatory)
1819@item dst=@var{dstaddr}
1820    destination address (mandatory)
1821@item udp
1822    select udp encapsulation (default is ip).
1823@item srcport=@var{srcport}
1824    source udp port.
1825@item dstport=@var{dstport}
1826    destination udp port.
1827@item ipv6
1828    force v6, otherwise defaults to v4.
1829@item rxcookie=@var{rxcookie}
1830@item txcookie=@var{txcookie}
1831    Cookies are a weak form of security in the l2tpv3 specification.
1832Their function is mostly to prevent misconfiguration. By default they are 32
1833bit.
1834@item cookie64
1835    Set cookie size to 64 bit instead of the default 32
1836@item counter=off
1837    Force a 'cut-down' L2TPv3 with no counter as in
1838draft-mkonstan-l2tpext-keyed-ipv6-tunnel-00
1839@item pincounter=on
1840    Work around broken counter handling in peer. This may also help on
1841networks which have packet reorder.
1842@item offset=@var{offset}
1843    Add an extra offset between header and data
1844
1845For example, to attach a VM running on host 4.3.2.1 via L2TPv3 to the bridge br-lan
1846on the remote Linux host 1.2.3.4:
1847@example
1848# Setup tunnel on linux host using raw ip as encapsulation
1849# on 1.2.3.4
1850ip l2tp add tunnel remote 4.3.2.1 local 1.2.3.4 tunnel_id 1 peer_tunnel_id 1 \
1851    encap udp udp_sport 16384 udp_dport 16384
1852ip l2tp add session tunnel_id 1 name vmtunnel0 session_id \
1853    0xFFFFFFFF peer_session_id 0xFFFFFFFF
1854ifconfig vmtunnel0 mtu 1500
1855ifconfig vmtunnel0 up
1856brctl addif br-lan vmtunnel0
1857
1858
1859# on 4.3.2.1
1860# launch QEMU instance - if your network has reorder or is very lossy add ,pincounter
1861
1862qemu-system-i386 linux.img -net nic -net l2tpv3,src=4.2.3.1,dst=1.2.3.4,udp,srcport=16384,dstport=16384,rxsession=0xffffffff,txsession=0xffffffff,counter
1863
1864
1865@end example
1866
1867@item -netdev vde,id=@var{id}[,sock=@var{socketpath}][,port=@var{n}][,group=@var{groupname}][,mode=@var{octalmode}]
1868@item -net vde[,vlan=@var{n}][,name=@var{name}][,sock=@var{socketpath}] [,port=@var{n}][,group=@var{groupname}][,mode=@var{octalmode}]
1869Connect VLAN @var{n} to PORT @var{n} of a vde switch running on host and
1870listening for incoming connections on @var{socketpath}. Use GROUP @var{groupname}
1871and MODE @var{octalmode} to change default ownership and permissions for
1872communication port. This option is only available if QEMU has been compiled
1873with vde support enabled.
1874
1875Example:
1876@example
1877# launch vde switch
1878vde_switch -F -sock /tmp/myswitch
1879# launch QEMU instance
1880qemu-system-i386 linux.img -net nic -net vde,sock=/tmp/myswitch
1881@end example
1882
1883@item -netdev hubport,id=@var{id},hubid=@var{hubid}
1884
1885Create a hub port on QEMU "vlan" @var{hubid}.
1886
1887The hubport netdev lets you connect a NIC to a QEMU "vlan" instead of a single
1888netdev.  @code{-net} and @code{-device} with parameter @option{vlan} create the
1889required hub automatically.
1890
1891@item -netdev vhost-user,chardev=@var{id}[,vhostforce=on|off]
1892
1893Establish a vhost-user netdev, backed by a chardev @var{id}. The chardev should
1894be a unix domain socket backed one. The vhost-user uses a specifically defined
1895protocol to pass vhost ioctl replacement messages to an application on the other
1896end of the socket. On non-MSIX guests, the feature can be forced with
1897@var{vhostforce}.
1898
1899Example:
1900@example
1901qemu -m 512 -object memory-backend-file,id=mem,size=512M,mem-path=/hugetlbfs,share=on \
1902     -numa node,memdev=mem \
1903     -chardev socket,path=/path/to/socket \
1904     -netdev type=vhost-user,id=net0,chardev=chr0 \
1905     -device virtio-net-pci,netdev=net0
1906@end example
1907
1908@item -net dump[,vlan=@var{n}][,file=@var{file}][,len=@var{len}]
1909Dump network traffic on VLAN @var{n} to file @var{file} (@file{qemu-vlan0.pcap} by default).
1910At most @var{len} bytes (64k by default) per packet are stored. The file format is
1911libpcap, so it can be analyzed with tools such as tcpdump or Wireshark.
1912
1913@item -net none
1914Indicate that no network devices should be configured. It is used to
1915override the default configuration (@option{-net nic -net user}) which
1916is activated if no @option{-net} options are provided.
1917ETEXI
1918
1919STEXI
1920@end table
1921ETEXI
1922DEFHEADING()
1923
1924DEFHEADING(Character device options:)
1925STEXI
1926
1927The general form of a character device option is:
1928@table @option
1929ETEXI
1930
1931DEF("chardev", HAS_ARG, QEMU_OPTION_chardev,
1932    "-chardev null,id=id[,mux=on|off]\n"
1933    "-chardev socket,id=id[,host=host],port=port[,to=to][,ipv4][,ipv6][,nodelay][,reconnect=seconds]\n"
1934    "         [,server][,nowait][,telnet][,reconnect=seconds][,mux=on|off] (tcp)\n"
1935    "-chardev socket,id=id,path=path[,server][,nowait][,telnet][,reconnect=seconds][,mux=on|off] (unix)\n"
1936    "-chardev udp,id=id[,host=host],port=port[,localaddr=localaddr]\n"
1937    "         [,localport=localport][,ipv4][,ipv6][,mux=on|off]\n"
1938    "-chardev msmouse,id=id[,mux=on|off]\n"
1939    "-chardev vc,id=id[[,width=width][,height=height]][[,cols=cols][,rows=rows]]\n"
1940    "         [,mux=on|off]\n"
1941    "-chardev ringbuf,id=id[,size=size]\n"
1942    "-chardev file,id=id,path=path[,mux=on|off]\n"
1943    "-chardev pipe,id=id,path=path[,mux=on|off]\n"
1944#ifdef _WIN32
1945    "-chardev console,id=id[,mux=on|off]\n"
1946    "-chardev serial,id=id,path=path[,mux=on|off]\n"
1947#else
1948    "-chardev pty,id=id[,mux=on|off]\n"
1949    "-chardev stdio,id=id[,mux=on|off][,signal=on|off]\n"
1950#endif
1951#ifdef CONFIG_BRLAPI
1952    "-chardev braille,id=id[,mux=on|off]\n"
1953#endif
1954#if defined(__linux__) || defined(__sun__) || defined(__FreeBSD__) \
1955        || defined(__NetBSD__) || defined(__OpenBSD__) || defined(__DragonFly__)
1956    "-chardev serial,id=id,path=path[,mux=on|off]\n"
1957    "-chardev tty,id=id,path=path[,mux=on|off]\n"
1958#endif
1959#if defined(__linux__) || defined(__FreeBSD__) || defined(__DragonFly__)
1960    "-chardev parallel,id=id,path=path[,mux=on|off]\n"
1961    "-chardev parport,id=id,path=path[,mux=on|off]\n"
1962#endif
1963#if defined(CONFIG_SPICE)
1964    "-chardev spicevmc,id=id,name=name[,debug=debug]\n"
1965    "-chardev spiceport,id=id,name=name[,debug=debug]\n"
1966#endif
1967    , QEMU_ARCH_ALL
1968)
1969
1970STEXI
1971@item -chardev @var{backend} ,id=@var{id} [,mux=on|off] [,@var{options}]
1972@findex -chardev
1973Backend is one of:
1974@option{null},
1975@option{socket},
1976@option{udp},
1977@option{msmouse},
1978@option{vc},
1979@option{ringbuf},
1980@option{file},
1981@option{pipe},
1982@option{console},
1983@option{serial},
1984@option{pty},
1985@option{stdio},
1986@option{braille},
1987@option{tty},
1988@option{parallel},
1989@option{parport},
1990@option{spicevmc}.
1991@option{spiceport}.
1992The specific backend will determine the applicable options.
1993
1994All devices must have an id, which can be any string up to 127 characters long.
1995It is used to uniquely identify this device in other command line directives.
1996
1997A character device may be used in multiplexing mode by multiple front-ends.
1998The key sequence of @key{Control-a} and @key{c} will rotate the input focus
1999between attached front-ends. Specify @option{mux=on} to enable this mode.
2000
2001Options to each backend are described below.
2002
2003@item -chardev null ,id=@var{id}
2004A void device. This device will not emit any data, and will drop any data it
2005receives. The null backend does not take any options.
2006
2007@item -chardev socket ,id=@var{id} [@var{TCP options} or @var{unix options}] [,server] [,nowait] [,telnet] [,reconnect=@var{seconds}]
2008
2009Create a two-way stream socket, which can be either a TCP or a unix socket. A
2010unix socket will be created if @option{path} is specified. Behaviour is
2011undefined if TCP options are specified for a unix socket.
2012
2013@option{server} specifies that the socket shall be a listening socket.
2014
2015@option{nowait} specifies that QEMU should not block waiting for a client to
2016connect to a listening socket.
2017
2018@option{telnet} specifies that traffic on the socket should interpret telnet
2019escape sequences.
2020
2021@option{reconnect} sets the timeout for reconnecting on non-server sockets when
2022the remote end goes away.  qemu will delay this many seconds and then attempt
2023to reconnect.  Zero disables reconnecting, and is the default.
2024
2025TCP and unix socket options are given below:
2026
2027@table @option
2028
2029@item TCP options: port=@var{port} [,host=@var{host}] [,to=@var{to}] [,ipv4] [,ipv6] [,nodelay]
2030
2031@option{host} for a listening socket specifies the local address to be bound.
2032For a connecting socket species the remote host to connect to. @option{host} is
2033optional for listening sockets. If not specified it defaults to @code{0.0.0.0}.
2034
2035@option{port} for a listening socket specifies the local port to be bound. For a
2036connecting socket specifies the port on the remote host to connect to.
2037@option{port} can be given as either a port number or a service name.
2038@option{port} is required.
2039
2040@option{to} is only relevant to listening sockets. If it is specified, and
2041@option{port} cannot be bound, QEMU will attempt to bind to subsequent ports up
2042to and including @option{to} until it succeeds. @option{to} must be specified
2043as a port number.
2044
2045@option{ipv4} and @option{ipv6} specify that either IPv4 or IPv6 must be used.
2046If neither is specified the socket may use either protocol.
2047
2048@option{nodelay} disables the Nagle algorithm.
2049
2050@item unix options: path=@var{path}
2051
2052@option{path} specifies the local path of the unix socket. @option{path} is
2053required.
2054
2055@end table
2056
2057@item -chardev udp ,id=@var{id} [,host=@var{host}] ,port=@var{port} [,localaddr=@var{localaddr}] [,localport=@var{localport}] [,ipv4] [,ipv6]
2058
2059Sends all traffic from the guest to a remote host over UDP.
2060
2061@option{host} specifies the remote host to connect to. If not specified it
2062defaults to @code{localhost}.
2063
2064@option{port} specifies the port on the remote host to connect to. @option{port}
2065is required.
2066
2067@option{localaddr} specifies the local address to bind to. If not specified it
2068defaults to @code{0.0.0.0}.
2069
2070@option{localport} specifies the local port to bind to. If not specified any
2071available local port will be used.
2072
2073@option{ipv4} and @option{ipv6} specify that either IPv4 or IPv6 must be used.
2074If neither is specified the device may use either protocol.
2075
2076@item -chardev msmouse ,id=@var{id}
2077
2078Forward QEMU's emulated msmouse events to the guest. @option{msmouse} does not
2079take any options.
2080
2081@item -chardev vc ,id=@var{id} [[,width=@var{width}] [,height=@var{height}]] [[,cols=@var{cols}] [,rows=@var{rows}]]
2082
2083Connect to a QEMU text console. @option{vc} may optionally be given a specific
2084size.
2085
2086@option{width} and @option{height} specify the width and height respectively of
2087the console, in pixels.
2088
2089@option{cols} and @option{rows} specify that the console be sized to fit a text
2090console with the given dimensions.
2091
2092@item -chardev ringbuf ,id=@var{id} [,size=@var{size}]
2093
2094Create a ring buffer with fixed size @option{size}.
2095@var{size} must be a power of two, and defaults to @code{64K}).
2096
2097@item -chardev file ,id=@var{id} ,path=@var{path}
2098
2099Log all traffic received from the guest to a file.
2100
2101@option{path} specifies the path of the file to be opened. This file will be
2102created if it does not already exist, and overwritten if it does. @option{path}
2103is required.
2104
2105@item -chardev pipe ,id=@var{id} ,path=@var{path}
2106
2107Create a two-way connection to the guest. The behaviour differs slightly between
2108Windows hosts and other hosts:
2109
2110On Windows, a single duplex pipe will be created at
2111@file{\\.pipe\@option{path}}.
2112
2113On other hosts, 2 pipes will be created called @file{@option{path}.in} and
2114@file{@option{path}.out}. Data written to @file{@option{path}.in} will be
2115received by the guest. Data written by the guest can be read from
2116@file{@option{path}.out}. QEMU will not create these fifos, and requires them to
2117be present.
2118
2119@option{path} forms part of the pipe path as described above. @option{path} is
2120required.
2121
2122@item -chardev console ,id=@var{id}
2123
2124Send traffic from the guest to QEMU's standard output. @option{console} does not
2125take any options.
2126
2127@option{console} is only available on Windows hosts.
2128
2129@item -chardev serial ,id=@var{id} ,path=@option{path}
2130
2131Send traffic from the guest to a serial device on the host.
2132
2133On Unix hosts serial will actually accept any tty device,
2134not only serial lines.
2135
2136@option{path} specifies the name of the serial device to open.
2137
2138@item -chardev pty ,id=@var{id}
2139
2140Create a new pseudo-terminal on the host and connect to it. @option{pty} does
2141not take any options.
2142
2143@option{pty} is not available on Windows hosts.
2144
2145@item -chardev stdio ,id=@var{id} [,signal=on|off]
2146Connect to standard input and standard output of the QEMU process.
2147
2148@option{signal} controls if signals are enabled on the terminal, that includes
2149exiting QEMU with the key sequence @key{Control-c}. This option is enabled by
2150default, use @option{signal=off} to disable it.
2151
2152@option{stdio} is not available on Windows hosts.
2153
2154@item -chardev braille ,id=@var{id}
2155
2156Connect to a local BrlAPI server. @option{braille} does not take any options.
2157
2158@item -chardev tty ,id=@var{id} ,path=@var{path}
2159
2160@option{tty} is only available on Linux, Sun, FreeBSD, NetBSD, OpenBSD and
2161DragonFlyBSD hosts.  It is an alias for @option{serial}.
2162
2163@option{path} specifies the path to the tty. @option{path} is required.
2164
2165@item -chardev parallel ,id=@var{id} ,path=@var{path}
2166@item -chardev parport ,id=@var{id} ,path=@var{path}
2167
2168@option{parallel} is only available on Linux, FreeBSD and DragonFlyBSD hosts.
2169
2170Connect to a local parallel port.
2171
2172@option{path} specifies the path to the parallel port device. @option{path} is
2173required.
2174
2175@item -chardev spicevmc ,id=@var{id} ,debug=@var{debug}, name=@var{name}
2176
2177@option{spicevmc} is only available when spice support is built in.
2178
2179@option{debug} debug level for spicevmc
2180
2181@option{name} name of spice channel to connect to
2182
2183Connect to a spice virtual machine channel, such as vdiport.
2184
2185@item -chardev spiceport ,id=@var{id} ,debug=@var{debug}, name=@var{name}
2186
2187@option{spiceport} is only available when spice support is built in.
2188
2189@option{debug} debug level for spicevmc
2190
2191@option{name} name of spice port to connect to
2192
2193Connect to a spice port, allowing a Spice client to handle the traffic
2194identified by a name (preferably a fqdn).
2195ETEXI
2196
2197STEXI
2198@end table
2199ETEXI
2200DEFHEADING()
2201
2202DEFHEADING(Device URL Syntax:)
2203STEXI
2204
2205In addition to using normal file images for the emulated storage devices,
2206QEMU can also use networked resources such as iSCSI devices. These are
2207specified using a special URL syntax.
2208
2209@table @option
2210@item iSCSI
2211iSCSI support allows QEMU to access iSCSI resources directly and use as
2212images for the guest storage. Both disk and cdrom images are supported.
2213
2214Syntax for specifying iSCSI LUNs is
2215``iscsi://<target-ip>[:<port>]/<target-iqn>/<lun>''
2216
2217By default qemu will use the iSCSI initiator-name
2218'iqn.2008-11.org.linux-kvm[:<name>]' but this can also be set from the command
2219line or a configuration file.
2220
2221
2222Example (without authentication):
2223@example
2224qemu-system-i386 -iscsi initiator-name=iqn.2001-04.com.example:my-initiator \
2225                 -cdrom iscsi://192.0.2.1/iqn.2001-04.com.example/2 \
2226                 -drive file=iscsi://192.0.2.1/iqn.2001-04.com.example/1
2227@end example
2228
2229Example (CHAP username/password via URL):
2230@example
2231qemu-system-i386 -drive file=iscsi://user%password@@192.0.2.1/iqn.2001-04.com.example/1
2232@end example
2233
2234Example (CHAP username/password via environment variables):
2235@example
2236LIBISCSI_CHAP_USERNAME="user" \
2237LIBISCSI_CHAP_PASSWORD="password" \
2238qemu-system-i386 -drive file=iscsi://192.0.2.1/iqn.2001-04.com.example/1
2239@end example
2240
2241iSCSI support is an optional feature of QEMU and only available when
2242compiled and linked against libiscsi.
2243ETEXI
2244DEF("iscsi", HAS_ARG, QEMU_OPTION_iscsi,
2245    "-iscsi [user=user][,password=password]\n"
2246    "       [,header-digest=CRC32C|CR32C-NONE|NONE-CRC32C|NONE\n"
2247    "       [,initiator-name=initiator-iqn][,id=target-iqn]\n"
2248    "                iSCSI session parameters\n", QEMU_ARCH_ALL)
2249STEXI
2250
2251iSCSI parameters such as username and password can also be specified via
2252a configuration file. See qemu-doc for more information and examples.
2253
2254@item NBD
2255QEMU supports NBD (Network Block Devices) both using TCP protocol as well
2256as Unix Domain Sockets.
2257
2258Syntax for specifying a NBD device using TCP
2259``nbd:<server-ip>:<port>[:exportname=<export>]''
2260
2261Syntax for specifying a NBD device using Unix Domain Sockets
2262``nbd:unix:<domain-socket>[:exportname=<export>]''
2263
2264
2265Example for TCP
2266@example
2267qemu-system-i386 --drive file=nbd:192.0.2.1:30000
2268@end example
2269
2270Example for Unix Domain Sockets
2271@example
2272qemu-system-i386 --drive file=nbd:unix:/tmp/nbd-socket
2273@end example
2274
2275@item SSH
2276QEMU supports SSH (Secure Shell) access to remote disks.
2277
2278Examples:
2279@example
2280qemu-system-i386 -drive file=ssh://user@@host/path/to/disk.img
2281qemu-system-i386 -drive file.driver=ssh,file.user=user,file.host=host,file.port=22,file.path=/path/to/disk.img
2282@end example
2283
2284Currently authentication must be done using ssh-agent.  Other
2285authentication methods may be supported in future.
2286
2287@item Sheepdog
2288Sheepdog is a distributed storage system for QEMU.
2289QEMU supports using either local sheepdog devices or remote networked
2290devices.
2291
2292Syntax for specifying a sheepdog device
2293@example
2294sheepdog[+tcp|+unix]://[host:port]/vdiname[?socket=path][#snapid|#tag]
2295@end example
2296
2297Example
2298@example
2299qemu-system-i386 --drive file=sheepdog://192.0.2.1:30000/MyVirtualMachine
2300@end example
2301
2302See also @url{http://http://www.osrg.net/sheepdog/}.
2303
2304@item GlusterFS
2305GlusterFS is an user space distributed file system.
2306QEMU supports the use of GlusterFS volumes for hosting VM disk images using
2307TCP, Unix Domain Sockets and RDMA transport protocols.
2308
2309Syntax for specifying a VM disk image on GlusterFS volume is
2310@example
2311gluster[+transport]://[server[:port]]/volname/image[?socket=...]
2312@end example
2313
2314
2315Example
2316@example
2317qemu-system-x86_64 --drive file=gluster://192.0.2.1/testvol/a.img
2318@end example
2319
2320See also @url{http://www.gluster.org}.
2321
2322@item HTTP/HTTPS/FTP/FTPS/TFTP
2323QEMU supports read-only access to files accessed over http(s), ftp(s) and tftp.
2324
2325Syntax using a single filename:
2326@example
2327<protocol>://[<username>[:<password>]@@]<host>/<path>
2328@end example
2329
2330where:
2331@table @option
2332@item protocol
2333'http', 'https', 'ftp', 'ftps', or 'tftp'.
2334
2335@item username
2336Optional username for authentication to the remote server.
2337
2338@item password
2339Optional password for authentication to the remote server.
2340
2341@item host
2342Address of the remote server.
2343
2344@item path
2345Path on the remote server, including any query string.
2346@end table
2347
2348The following options are also supported:
2349@table @option
2350@item url
2351The full URL when passing options to the driver explicitly.
2352
2353@item readahead
2354The amount of data to read ahead with each range request to the remote server.
2355This value may optionally have the suffix 'T', 'G', 'M', 'K', 'k' or 'b'. If it
2356does not have a suffix, it will be assumed to be in bytes. The value must be a
2357multiple of 512 bytes. It defaults to 256k.
2358
2359@item sslverify
2360Whether to verify the remote server's certificate when connecting over SSL. It
2361can have the value 'on' or 'off'. It defaults to 'on'.
2362
2363@item cookie
2364Send this cookie (it can also be a list of cookies separated by ';') with
2365each outgoing request.  Only supported when using protocols such as HTTP
2366which support cookies, otherwise ignored.
2367
2368@item timeout
2369Set the timeout in seconds of the CURL connection. This timeout is the time
2370that CURL waits for a response from the remote server to get the size of the
2371image to be downloaded. If not set, the default timeout of 5 seconds is used.
2372@end table
2373
2374Note that when passing options to qemu explicitly, @option{driver} is the value
2375of <protocol>.
2376
2377Example: boot from a remote Fedora 20 live ISO image
2378@example
2379qemu-system-x86_64 --drive media=cdrom,file=http://dl.fedoraproject.org/pub/fedora/linux/releases/20/Live/x86_64/Fedora-Live-Desktop-x86_64-20-1.iso,readonly
2380
2381qemu-system-x86_64 --drive media=cdrom,file.driver=http,file.url=http://dl.fedoraproject.org/pub/fedora/linux/releases/20/Live/x86_64/Fedora-Live-Desktop-x86_64-20-1.iso,readonly
2382@end example
2383
2384Example: boot from a remote Fedora 20 cloud image using a local overlay for
2385writes, copy-on-read, and a readahead of 64k
2386@example
2387qemu-img create -f qcow2 -o backing_file='json:@{"file.driver":"http",, "file.url":"https://dl.fedoraproject.org/pub/fedora/linux/releases/20/Images/x86_64/Fedora-x86_64-20-20131211.1-sda.qcow2",, "file.readahead":"64k"@}' /tmp/Fedora-x86_64-20-20131211.1-sda.qcow2
2388
2389qemu-system-x86_64 -drive file=/tmp/Fedora-x86_64-20-20131211.1-sda.qcow2,copy-on-read=on
2390@end example
2391
2392Example: boot from an image stored on a VMware vSphere server with a self-signed
2393certificate using a local overlay for writes, a readahead of 64k and a timeout
2394of 10 seconds.
2395@example
2396qemu-img create -f qcow2 -o backing_file='json:@{"file.driver":"https",, "file.url":"https://user:password@@vsphere.example.com/folder/test/test-flat.vmdk?dcPath=Datacenter&dsName=datastore1",, "file.sslverify":"off",, "file.readahead":"64k",, "file.timeout":10@}' /tmp/test.qcow2
2397
2398qemu-system-x86_64 -drive file=/tmp/test.qcow2
2399@end example
2400ETEXI
2401
2402STEXI
2403@end table
2404ETEXI
2405
2406DEFHEADING(Bluetooth(R) options:)
2407STEXI
2408@table @option
2409ETEXI
2410
2411DEF("bt", HAS_ARG, QEMU_OPTION_bt, \
2412    "-bt hci,null    dumb bluetooth HCI - doesn't respond to commands\n" \
2413    "-bt hci,host[:id]\n" \
2414    "                use host's HCI with the given name\n" \
2415    "-bt hci[,vlan=n]\n" \
2416    "                emulate a standard HCI in virtual scatternet 'n'\n" \
2417    "-bt vhci[,vlan=n]\n" \
2418    "                add host computer to virtual scatternet 'n' using VHCI\n" \
2419    "-bt device:dev[,vlan=n]\n" \
2420    "                emulate a bluetooth device 'dev' in scatternet 'n'\n",
2421    QEMU_ARCH_ALL)
2422STEXI
2423@item -bt hci[...]
2424@findex -bt
2425Defines the function of the corresponding Bluetooth HCI.  -bt options
2426are matched with the HCIs present in the chosen machine type.  For
2427example when emulating a machine with only one HCI built into it, only
2428the first @code{-bt hci[...]} option is valid and defines the HCI's
2429logic.  The Transport Layer is decided by the machine type.  Currently
2430the machines @code{n800} and @code{n810} have one HCI and all other
2431machines have none.
2432
2433@anchor{bt-hcis}
2434The following three types are recognized:
2435
2436@table @option
2437@item -bt hci,null
2438(default) The corresponding Bluetooth HCI assumes no internal logic
2439and will not respond to any HCI commands or emit events.
2440
2441@item -bt hci,host[:@var{id}]
2442(@code{bluez} only) The corresponding HCI passes commands / events
2443to / from the physical HCI identified by the name @var{id} (default:
2444@code{hci0}) on the computer running QEMU.  Only available on @code{bluez}
2445capable systems like Linux.
2446
2447@item -bt hci[,vlan=@var{n}]
2448Add a virtual, standard HCI that will participate in the Bluetooth
2449scatternet @var{n} (default @code{0}).  Similarly to @option{-net}
2450VLANs, devices inside a bluetooth network @var{n} can only communicate
2451with other devices in the same network (scatternet).
2452@end table
2453
2454@item -bt vhci[,vlan=@var{n}]
2455(Linux-host only) Create a HCI in scatternet @var{n} (default 0) attached
2456to the host bluetooth stack instead of to the emulated target.  This
2457allows the host and target machines to participate in a common scatternet
2458and communicate.  Requires the Linux @code{vhci} driver installed.  Can
2459be used as following:
2460
2461@example
2462qemu-system-i386 [...OPTIONS...] -bt hci,vlan=5 -bt vhci,vlan=5
2463@end example
2464
2465@item -bt device:@var{dev}[,vlan=@var{n}]
2466Emulate a bluetooth device @var{dev} and place it in network @var{n}
2467(default @code{0}).  QEMU can only emulate one type of bluetooth devices
2468currently:
2469
2470@table @option
2471@item keyboard
2472Virtual wireless keyboard implementing the HIDP bluetooth profile.
2473@end table
2474ETEXI
2475
2476STEXI
2477@end table
2478ETEXI
2479DEFHEADING()
2480
2481#ifdef CONFIG_TPM
2482DEFHEADING(TPM device options:)
2483
2484DEF("tpmdev", HAS_ARG, QEMU_OPTION_tpmdev, \
2485    "-tpmdev passthrough,id=id[,path=path][,cancel-path=path]\n"
2486    "                use path to provide path to a character device; default is /dev/tpm0\n"
2487    "                use cancel-path to provide path to TPM's cancel sysfs entry; if\n"
2488    "                not provided it will be searched for in /sys/class/misc/tpm?/device\n",
2489    QEMU_ARCH_ALL)
2490STEXI
2491
2492The general form of a TPM device option is:
2493@table @option
2494
2495@item -tpmdev @var{backend} ,id=@var{id} [,@var{options}]
2496@findex -tpmdev
2497Backend type must be:
2498@option{passthrough}.
2499
2500The specific backend type will determine the applicable options.
2501The @code{-tpmdev} option creates the TPM backend and requires a
2502@code{-device} option that specifies the TPM frontend interface model.
2503
2504Options to each backend are described below.
2505
2506Use 'help' to print all available TPM backend types.
2507@example
2508qemu -tpmdev help
2509@end example
2510
2511@item -tpmdev passthrough, id=@var{id}, path=@var{path}, cancel-path=@var{cancel-path}
2512
2513(Linux-host only) Enable access to the host's TPM using the passthrough
2514driver.
2515
2516@option{path} specifies the path to the host's TPM device, i.e., on
2517a Linux host this would be @code{/dev/tpm0}.
2518@option{path} is optional and by default @code{/dev/tpm0} is used.
2519
2520@option{cancel-path} specifies the path to the host TPM device's sysfs
2521entry allowing for cancellation of an ongoing TPM command.
2522@option{cancel-path} is optional and by default QEMU will search for the
2523sysfs entry to use.
2524
2525Some notes about using the host's TPM with the passthrough driver:
2526
2527The TPM device accessed by the passthrough driver must not be
2528used by any other application on the host.
2529
2530Since the host's firmware (BIOS/UEFI) has already initialized the TPM,
2531the VM's firmware (BIOS/UEFI) will not be able to initialize the
2532TPM again and may therefore not show a TPM-specific menu that would
2533otherwise allow the user to configure the TPM, e.g., allow the user to
2534enable/disable or activate/deactivate the TPM.
2535Further, if TPM ownership is released from within a VM then the host's TPM
2536will get disabled and deactivated. To enable and activate the
2537TPM again afterwards, the host has to be rebooted and the user is
2538required to enter the firmware's menu to enable and activate the TPM.
2539If the TPM is left disabled and/or deactivated most TPM commands will fail.
2540
2541To create a passthrough TPM use the following two options:
2542@example
2543-tpmdev passthrough,id=tpm0 -device tpm-tis,tpmdev=tpm0
2544@end example
2545Note that the @code{-tpmdev} id is @code{tpm0} and is referenced by
2546@code{tpmdev=tpm0} in the device option.
2547
2548@end table
2549
2550ETEXI
2551
2552DEFHEADING()
2553
2554#endif
2555
2556DEFHEADING(Linux/Multiboot boot specific:)
2557STEXI
2558
2559When using these options, you can use a given Linux or Multiboot
2560kernel without installing it in the disk image. It can be useful
2561for easier testing of various kernels.
2562
2563@table @option
2564ETEXI
2565
2566DEF("kernel", HAS_ARG, QEMU_OPTION_kernel, \
2567    "-kernel bzImage use 'bzImage' as kernel image\n", QEMU_ARCH_ALL)
2568STEXI
2569@item -kernel @var{bzImage}
2570@findex -kernel
2571Use @var{bzImage} as kernel image. The kernel can be either a Linux kernel
2572or in multiboot format.
2573ETEXI
2574
2575DEF("append", HAS_ARG, QEMU_OPTION_append, \
2576    "-append cmdline use 'cmdline' as kernel command line\n", QEMU_ARCH_ALL)
2577STEXI
2578@item -append @var{cmdline}
2579@findex -append
2580Use @var{cmdline} as kernel command line
2581ETEXI
2582
2583DEF("initrd", HAS_ARG, QEMU_OPTION_initrd, \
2584           "-initrd file    use 'file' as initial ram disk\n", QEMU_ARCH_ALL)
2585STEXI
2586@item -initrd @var{file}
2587@findex -initrd
2588Use @var{file} as initial ram disk.
2589
2590@item -initrd "@var{file1} arg=foo,@var{file2}"
2591
2592This syntax is only available with multiboot.
2593
2594Use @var{file1} and @var{file2} as modules and pass arg=foo as parameter to the
2595first module.
2596ETEXI
2597
2598DEF("dtb", HAS_ARG, QEMU_OPTION_dtb, \
2599    "-dtb    file    use 'file' as device tree image\n", QEMU_ARCH_ALL)
2600STEXI
2601@item -dtb @var{file}
2602@findex -dtb
2603Use @var{file} as a device tree binary (dtb) image and pass it to the kernel
2604on boot.
2605ETEXI
2606
2607STEXI
2608@end table
2609ETEXI
2610DEFHEADING()
2611
2612DEFHEADING(Debug/Expert options:)
2613STEXI
2614@table @option
2615ETEXI
2616
2617DEF("serial", HAS_ARG, QEMU_OPTION_serial, \
2618    "-serial dev     redirect the serial port to char device 'dev'\n",
2619    QEMU_ARCH_ALL)
2620STEXI
2621@item -serial @var{dev}
2622@findex -serial
2623Redirect the virtual serial port to host character device
2624@var{dev}. The default device is @code{vc} in graphical mode and
2625@code{stdio} in non graphical mode.
2626
2627This option can be used several times to simulate up to 4 serial
2628ports.
2629
2630Use @code{-serial none} to disable all serial ports.
2631
2632Available character devices are:
2633@table @option
2634@item vc[:@var{W}x@var{H}]
2635Virtual console. Optionally, a width and height can be given in pixel with
2636@example
2637vc:800x600
2638@end example
2639It is also possible to specify width or height in characters:
2640@example
2641vc:80Cx24C
2642@end example
2643@item pty
2644[Linux only] Pseudo TTY (a new PTY is automatically allocated)
2645@item none
2646No device is allocated.
2647@item null
2648void device
2649@item chardev:@var{id}
2650Use a named character device defined with the @code{-chardev} option.
2651@item /dev/XXX
2652[Linux only] Use host tty, e.g. @file{/dev/ttyS0}. The host serial port
2653parameters are set according to the emulated ones.
2654@item /dev/parport@var{N}
2655[Linux only, parallel port only] Use host parallel port
2656@var{N}. Currently SPP and EPP parallel port features can be used.
2657@item file:@var{filename}
2658Write output to @var{filename}. No character can be read.
2659@item stdio
2660[Unix only] standard input/output
2661@item pipe:@var{filename}
2662name pipe @var{filename}
2663@item COM@var{n}
2664[Windows only] Use host serial port @var{n}
2665@item udp:[@var{remote_host}]:@var{remote_port}[@@[@var{src_ip}]:@var{src_port}]
2666This implements UDP Net Console.
2667When @var{remote_host} or @var{src_ip} are not specified
2668they default to @code{0.0.0.0}.
2669When not using a specified @var{src_port} a random port is automatically chosen.
2670
2671If you just want a simple readonly console you can use @code{netcat} or
2672@code{nc}, by starting QEMU with: @code{-serial udp::4555} and nc as:
2673@code{nc -u -l -p 4555}. Any time QEMU writes something to that port it
2674will appear in the netconsole session.
2675
2676If you plan to send characters back via netconsole or you want to stop
2677and start QEMU a lot of times, you should have QEMU use the same
2678source port each time by using something like @code{-serial
2679udp::4555@@:4556} to QEMU. Another approach is to use a patched
2680version of netcat which can listen to a TCP port and send and receive
2681characters via udp.  If you have a patched version of netcat which
2682activates telnet remote echo and single char transfer, then you can
2683use the following options to step up a netcat redirector to allow
2684telnet on port 5555 to access the QEMU port.
2685@table @code
2686@item QEMU Options:
2687-serial udp::4555@@:4556
2688@item netcat options:
2689-u -P 4555 -L 0.0.0.0:4556 -t -p 5555 -I -T
2690@item telnet options:
2691localhost 5555
2692@end table
2693
2694@item tcp:[@var{host}]:@var{port}[,@var{server}][,nowait][,nodelay][,reconnect=@var{seconds}]
2695The TCP Net Console has two modes of operation.  It can send the serial
2696I/O to a location or wait for a connection from a location.  By default
2697the TCP Net Console is sent to @var{host} at the @var{port}.  If you use
2698the @var{server} option QEMU will wait for a client socket application
2699to connect to the port before continuing, unless the @code{nowait}
2700option was specified.  The @code{nodelay} option disables the Nagle buffering
2701algorithm.  The @code{reconnect} option only applies if @var{noserver} is
2702set, if the connection goes down it will attempt to reconnect at the
2703given interval.  If @var{host} is omitted, 0.0.0.0 is assumed. Only
2704one TCP connection at a time is accepted. You can use @code{telnet} to
2705connect to the corresponding character device.
2706@table @code
2707@item Example to send tcp console to 192.168.0.2 port 4444
2708-serial tcp:192.168.0.2:4444
2709@item Example to listen and wait on port 4444 for connection
2710-serial tcp::4444,server
2711@item Example to not wait and listen on ip 192.168.0.100 port 4444
2712-serial tcp:192.168.0.100:4444,server,nowait
2713@end table
2714
2715@item telnet:@var{host}:@var{port}[,server][,nowait][,nodelay]
2716The telnet protocol is used instead of raw tcp sockets.  The options
2717work the same as if you had specified @code{-serial tcp}.  The
2718difference is that the port acts like a telnet server or client using
2719telnet option negotiation.  This will also allow you to send the
2720MAGIC_SYSRQ sequence if you use a telnet that supports sending the break
2721sequence.  Typically in unix telnet you do it with Control-] and then
2722type "send break" followed by pressing the enter key.
2723
2724@item unix:@var{path}[,server][,nowait][,reconnect=@var{seconds}]
2725A unix domain socket is used instead of a tcp socket.  The option works the
2726same as if you had specified @code{-serial tcp} except the unix domain socket
2727@var{path} is used for connections.
2728
2729@item mon:@var{dev_string}
2730This is a special option to allow the monitor to be multiplexed onto
2731another serial port.  The monitor is accessed with key sequence of
2732@key{Control-a} and then pressing @key{c}.
2733@var{dev_string} should be any one of the serial devices specified
2734above.  An example to multiplex the monitor onto a telnet server
2735listening on port 4444 would be:
2736@table @code
2737@item -serial mon:telnet::4444,server,nowait
2738@end table
2739When the monitor is multiplexed to stdio in this way, Ctrl+C will not terminate
2740QEMU any more but will be passed to the guest instead.
2741
2742@item braille
2743Braille device.  This will use BrlAPI to display the braille output on a real
2744or fake device.
2745
2746@item msmouse
2747Three button serial mouse. Configure the guest to use Microsoft protocol.
2748@end table
2749ETEXI
2750
2751DEF("parallel", HAS_ARG, QEMU_OPTION_parallel, \
2752    "-parallel dev   redirect the parallel port to char device 'dev'\n",
2753    QEMU_ARCH_ALL)
2754STEXI
2755@item -parallel @var{dev}
2756@findex -parallel
2757Redirect the virtual parallel port to host device @var{dev} (same
2758devices as the serial port). On Linux hosts, @file{/dev/parportN} can
2759be used to use hardware devices connected on the corresponding host
2760parallel port.
2761
2762This option can be used several times to simulate up to 3 parallel
2763ports.
2764
2765Use @code{-parallel none} to disable all parallel ports.
2766ETEXI
2767
2768DEF("monitor", HAS_ARG, QEMU_OPTION_monitor, \
2769    "-monitor dev    redirect the monitor to char device 'dev'\n",
2770    QEMU_ARCH_ALL)
2771STEXI
2772@item -monitor @var{dev}
2773@findex -monitor
2774Redirect the monitor to host device @var{dev} (same devices as the
2775serial port).
2776The default device is @code{vc} in graphical mode and @code{stdio} in
2777non graphical mode.
2778Use @code{-monitor none} to disable the default monitor.
2779ETEXI
2780DEF("qmp", HAS_ARG, QEMU_OPTION_qmp, \
2781    "-qmp dev        like -monitor but opens in 'control' mode\n",
2782    QEMU_ARCH_ALL)
2783STEXI
2784@item -qmp @var{dev}
2785@findex -qmp
2786Like -monitor but opens in 'control' mode.
2787ETEXI
2788
2789DEF("mon", HAS_ARG, QEMU_OPTION_mon, \
2790    "-mon [chardev=]name[,mode=readline|control][,default]\n", QEMU_ARCH_ALL)
2791STEXI
2792@item -mon [chardev=]name[,mode=readline|control][,default]
2793@findex -mon
2794Setup monitor on chardev @var{name}.
2795ETEXI
2796
2797DEF("debugcon", HAS_ARG, QEMU_OPTION_debugcon, \
2798    "-debugcon dev   redirect the debug console to char device 'dev'\n",
2799    QEMU_ARCH_ALL)
2800STEXI
2801@item -debugcon @var{dev}
2802@findex -debugcon
2803Redirect the debug console to host device @var{dev} (same devices as the
2804serial port).  The debug console is an I/O port which is typically port
28050xe9; writing to that I/O port sends output to this device.
2806The default device is @code{vc} in graphical mode and @code{stdio} in
2807non graphical mode.
2808ETEXI
2809
2810DEF("pidfile", HAS_ARG, QEMU_OPTION_pidfile, \
2811    "-pidfile file   write PID to 'file'\n", QEMU_ARCH_ALL)
2812STEXI
2813@item -pidfile @var{file}
2814@findex -pidfile
2815Store the QEMU process PID in @var{file}. It is useful if you launch QEMU
2816from a script.
2817ETEXI
2818
2819DEF("singlestep", 0, QEMU_OPTION_singlestep, \
2820    "-singlestep     always run in singlestep mode\n", QEMU_ARCH_ALL)
2821STEXI
2822@item -singlestep
2823@findex -singlestep
2824Run the emulation in single step mode.
2825ETEXI
2826
2827DEF("S", 0, QEMU_OPTION_S, \
2828    "-S              freeze CPU at startup (use 'c' to start execution)\n",
2829    QEMU_ARCH_ALL)
2830STEXI
2831@item -S
2832@findex -S
2833Do not start CPU at startup (you must type 'c' in the monitor).
2834ETEXI
2835
2836DEF("realtime", HAS_ARG, QEMU_OPTION_realtime,
2837    "-realtime [mlock=on|off]\n"
2838    "                run qemu with realtime features\n"
2839    "                mlock=on|off controls mlock support (default: on)\n",
2840    QEMU_ARCH_ALL)
2841STEXI
2842@item -realtime mlock=on|off
2843@findex -realtime
2844Run qemu with realtime features.
2845mlocking qemu and guest memory can be enabled via @option{mlock=on}
2846(enabled by default).
2847ETEXI
2848
2849DEF("gdb", HAS_ARG, QEMU_OPTION_gdb, \
2850    "-gdb dev        wait for gdb connection on 'dev'\n", QEMU_ARCH_ALL)
2851STEXI
2852@item -gdb @var{dev}
2853@findex -gdb
2854Wait for gdb connection on device @var{dev} (@pxref{gdb_usage}). Typical
2855connections will likely be TCP-based, but also UDP, pseudo TTY, or even
2856stdio are reasonable use case. The latter is allowing to start QEMU from
2857within gdb and establish the connection via a pipe:
2858@example
2859(gdb) target remote | exec qemu-system-i386 -gdb stdio ...
2860@end example
2861ETEXI
2862
2863DEF("s", 0, QEMU_OPTION_s, \
2864    "-s              shorthand for -gdb tcp::" DEFAULT_GDBSTUB_PORT "\n",
2865    QEMU_ARCH_ALL)
2866STEXI
2867@item -s
2868@findex -s
2869Shorthand for -gdb tcp::1234, i.e. open a gdbserver on TCP port 1234
2870(@pxref{gdb_usage}).
2871ETEXI
2872
2873DEF("d", HAS_ARG, QEMU_OPTION_d, \
2874    "-d item1,...    enable logging of specified items (use '-d help' for a list of log items)\n",
2875    QEMU_ARCH_ALL)
2876STEXI
2877@item -d @var{item1}[,...]
2878@findex -d
2879Enable logging of specified items. Use '-d help' for a list of log items.
2880ETEXI
2881
2882DEF("D", HAS_ARG, QEMU_OPTION_D, \
2883    "-D logfile      output log to logfile (default stderr)\n",
2884    QEMU_ARCH_ALL)
2885STEXI
2886@item -D @var{logfile}
2887@findex -D
2888Output log in @var{logfile} instead of to stderr
2889ETEXI
2890
2891DEF("L", HAS_ARG, QEMU_OPTION_L, \
2892    "-L path         set the directory for the BIOS, VGA BIOS and keymaps\n",
2893    QEMU_ARCH_ALL)
2894STEXI
2895@item -L  @var{path}
2896@findex -L
2897Set the directory for the BIOS, VGA BIOS and keymaps.
2898ETEXI
2899
2900DEF("bios", HAS_ARG, QEMU_OPTION_bios, \
2901    "-bios file      set the filename for the BIOS\n", QEMU_ARCH_ALL)
2902STEXI
2903@item -bios @var{file}
2904@findex -bios
2905Set the filename for the BIOS.
2906ETEXI
2907
2908DEF("enable-kvm", 0, QEMU_OPTION_enable_kvm, \
2909    "-enable-kvm     enable KVM full virtualization support\n", QEMU_ARCH_ALL)
2910STEXI
2911@item -enable-kvm
2912@findex -enable-kvm
2913Enable KVM full virtualization support. This option is only available
2914if KVM support is enabled when compiling.
2915ETEXI
2916
2917DEF("xen-domid", HAS_ARG, QEMU_OPTION_xen_domid,
2918    "-xen-domid id   specify xen guest domain id\n", QEMU_ARCH_ALL)
2919DEF("xen-create", 0, QEMU_OPTION_xen_create,
2920    "-xen-create     create domain using xen hypercalls, bypassing xend\n"
2921    "                warning: should not be used when xend is in use\n",
2922    QEMU_ARCH_ALL)
2923DEF("xen-attach", 0, QEMU_OPTION_xen_attach,
2924    "-xen-attach     attach to existing xen domain\n"
2925    "                xend will use this when starting QEMU\n",
2926    QEMU_ARCH_ALL)
2927STEXI
2928@item -xen-domid @var{id}
2929@findex -xen-domid
2930Specify xen guest domain @var{id} (XEN only).
2931@item -xen-create
2932@findex -xen-create
2933Create domain using xen hypercalls, bypassing xend.
2934Warning: should not be used when xend is in use (XEN only).
2935@item -xen-attach
2936@findex -xen-attach
2937Attach to existing xen domain.
2938xend will use this when starting QEMU (XEN only).
2939ETEXI
2940
2941DEF("no-reboot", 0, QEMU_OPTION_no_reboot, \
2942    "-no-reboot      exit instead of rebooting\n", QEMU_ARCH_ALL)
2943STEXI
2944@item -no-reboot
2945@findex -no-reboot
2946Exit instead of rebooting.
2947ETEXI
2948
2949DEF("no-shutdown", 0, QEMU_OPTION_no_shutdown, \
2950    "-no-shutdown    stop before shutdown\n", QEMU_ARCH_ALL)
2951STEXI
2952@item -no-shutdown
2953@findex -no-shutdown
2954Don't exit QEMU on guest shutdown, but instead only stop the emulation.
2955This allows for instance switching to monitor to commit changes to the
2956disk image.
2957ETEXI
2958
2959DEF("loadvm", HAS_ARG, QEMU_OPTION_loadvm, \
2960    "-loadvm [tag|id]\n" \
2961    "                start right away with a saved state (loadvm in monitor)\n",
2962    QEMU_ARCH_ALL)
2963STEXI
2964@item -loadvm @var{file}
2965@findex -loadvm
2966Start right away with a saved state (@code{loadvm} in monitor)
2967ETEXI
2968
2969#ifndef _WIN32
2970DEF("daemonize", 0, QEMU_OPTION_daemonize, \
2971    "-daemonize      daemonize QEMU after initializing\n", QEMU_ARCH_ALL)
2972#endif
2973STEXI
2974@item -daemonize
2975@findex -daemonize
2976Daemonize the QEMU process after initialization.  QEMU will not detach from
2977standard IO until it is ready to receive connections on any of its devices.
2978This option is a useful way for external programs to launch QEMU without having
2979to cope with initialization race conditions.
2980ETEXI
2981
2982DEF("option-rom", HAS_ARG, QEMU_OPTION_option_rom, \
2983    "-option-rom rom load a file, rom, into the option ROM space\n",
2984    QEMU_ARCH_ALL)
2985STEXI
2986@item -option-rom @var{file}
2987@findex -option-rom
2988Load the contents of @var{file} as an option ROM.
2989This option is useful to load things like EtherBoot.
2990ETEXI
2991
2992DEF("clock", HAS_ARG, QEMU_OPTION_clock, \
2993    "-clock          force the use of the given methods for timer alarm.\n" \
2994    "                To see what timers are available use '-clock help'\n",
2995    QEMU_ARCH_ALL)
2996STEXI
2997@item -clock @var{method}
2998@findex -clock
2999Force the use of the given methods for timer alarm. To see what timers
3000are available use @code{-clock help}.
3001ETEXI
3002
3003HXCOMM Options deprecated by -rtc
3004DEF("localtime", 0, QEMU_OPTION_localtime, "", QEMU_ARCH_ALL)
3005DEF("startdate", HAS_ARG, QEMU_OPTION_startdate, "", QEMU_ARCH_ALL)
3006
3007DEF("rtc", HAS_ARG, QEMU_OPTION_rtc, \
3008    "-rtc [base=utc|localtime|date][,clock=host|rt|vm][,driftfix=none|slew]\n" \
3009    "                set the RTC base and clock, enable drift fix for clock ticks (x86 only)\n",
3010    QEMU_ARCH_ALL)
3011
3012STEXI
3013
3014@item -rtc [base=utc|localtime|@var{date}][,clock=host|vm][,driftfix=none|slew]
3015@findex -rtc
3016Specify @option{base} as @code{utc} or @code{localtime} to let the RTC start at the current
3017UTC or local time, respectively. @code{localtime} is required for correct date in
3018MS-DOS or Windows. To start at a specific point in time, provide @var{date} in the
3019format @code{2006-06-17T16:01:21} or @code{2006-06-17}. The default base is UTC.
3020
3021By default the RTC is driven by the host system time. This allows using of the
3022RTC as accurate reference clock inside the guest, specifically if the host
3023time is smoothly following an accurate external reference clock, e.g. via NTP.
3024If you want to isolate the guest time from the host, you can set @option{clock}
3025to @code{rt} instead.  To even prevent it from progressing during suspension,
3026you can set it to @code{vm}.
3027
3028Enable @option{driftfix} (i386 targets only) if you experience time drift problems,
3029specifically with Windows' ACPI HAL. This option will try to figure out how
3030many timer interrupts were not processed by the Windows guest and will
3031re-inject them.
3032ETEXI
3033
3034DEF("icount", HAS_ARG, QEMU_OPTION_icount, \
3035    "-icount [shift=N|auto][,align=on|off]\n" \
3036    "                enable virtual instruction counter with 2^N clock ticks per\n" \
3037    "                instruction and enable aligning the host and virtual clocks\n", QEMU_ARCH_ALL)
3038STEXI
3039@item -icount [shift=@var{N}|auto]
3040@findex -icount
3041Enable virtual instruction counter.  The virtual cpu will execute one
3042instruction every 2^@var{N} ns of virtual time.  If @code{auto} is specified
3043then the virtual cpu speed will be automatically adjusted to keep virtual
3044time within a few seconds of real time.
3045
3046Note that while this option can give deterministic behavior, it does not
3047provide cycle accurate emulation.  Modern CPUs contain superscalar out of
3048order cores with complex cache hierarchies.  The number of instructions
3049executed often has little or no correlation with actual performance.
3050
3051@option{align=on} will activate the delay algorithm which will try to
3052to synchronise the host clock and the virtual clock. The goal is to
3053have a guest running at the real frequency imposed by the shift option.
3054Whenever the guest clock is behind the host clock and if
3055@option{align=on} is specified then we print a messsage to the user
3056to inform about the delay.
3057Currently this option does not work when @option{shift} is @code{auto}.
3058Note: The sync algorithm will work for those shift values for which
3059the guest clock runs ahead of the host clock. Typically this happens
3060when the shift value is high (how high depends on the host machine).
3061ETEXI
3062
3063DEF("watchdog", HAS_ARG, QEMU_OPTION_watchdog, \
3064    "-watchdog i6300esb|ib700\n" \
3065    "                enable virtual hardware watchdog [default=none]\n",
3066    QEMU_ARCH_ALL)
3067STEXI
3068@item -watchdog @var{model}
3069@findex -watchdog
3070Create a virtual hardware watchdog device.  Once enabled (by a guest
3071action), the watchdog must be periodically polled by an agent inside
3072the guest or else the guest will be restarted.
3073
3074The @var{model} is the model of hardware watchdog to emulate.  Choices
3075for model are: @code{ib700} (iBASE 700) which is a very simple ISA
3076watchdog with a single timer, or @code{i6300esb} (Intel 6300ESB I/O
3077controller hub) which is a much more featureful PCI-based dual-timer
3078watchdog.  Choose a model for which your guest has drivers.
3079
3080Use @code{-watchdog help} to list available hardware models.  Only one
3081watchdog can be enabled for a guest.
3082ETEXI
3083
3084DEF("watchdog-action", HAS_ARG, QEMU_OPTION_watchdog_action, \
3085    "-watchdog-action reset|shutdown|poweroff|pause|debug|none\n" \
3086    "                action when watchdog fires [default=reset]\n",
3087    QEMU_ARCH_ALL)
3088STEXI
3089@item -watchdog-action @var{action}
3090@findex -watchdog-action
3091
3092The @var{action} controls what QEMU will do when the watchdog timer
3093expires.
3094The default is
3095@code{reset} (forcefully reset the guest).
3096Other possible actions are:
3097@code{shutdown} (attempt to gracefully shutdown the guest),
3098@code{poweroff} (forcefully poweroff the guest),
3099@code{pause} (pause the guest),
3100@code{debug} (print a debug message and continue), or
3101@code{none} (do nothing).
3102
3103Note that the @code{shutdown} action requires that the guest responds
3104to ACPI signals, which it may not be able to do in the sort of
3105situations where the watchdog would have expired, and thus
3106@code{-watchdog-action shutdown} is not recommended for production use.
3107
3108Examples:
3109
3110@table @code
3111@item -watchdog i6300esb -watchdog-action pause
3112@item -watchdog ib700
3113@end table
3114ETEXI
3115
3116DEF("echr", HAS_ARG, QEMU_OPTION_echr, \
3117    "-echr chr       set terminal escape character instead of ctrl-a\n",
3118    QEMU_ARCH_ALL)
3119STEXI
3120
3121@item -echr @var{numeric_ascii_value}
3122@findex -echr
3123Change the escape character used for switching to the monitor when using
3124monitor and serial sharing.  The default is @code{0x01} when using the
3125@code{-nographic} option.  @code{0x01} is equal to pressing
3126@code{Control-a}.  You can select a different character from the ascii
3127control keys where 1 through 26 map to Control-a through Control-z.  For
3128instance you could use the either of the following to change the escape
3129character to Control-t.
3130@table @code
3131@item -echr 0x14
3132@item -echr 20
3133@end table
3134ETEXI
3135
3136DEF("virtioconsole", HAS_ARG, QEMU_OPTION_virtiocon, \
3137    "-virtioconsole c\n" \
3138    "                set virtio console\n", QEMU_ARCH_ALL)
3139STEXI
3140@item -virtioconsole @var{c}
3141@findex -virtioconsole
3142Set virtio console.
3143
3144This option is maintained for backward compatibility.
3145
3146Please use @code{-device virtconsole} for the new way of invocation.
3147ETEXI
3148
3149DEF("show-cursor", 0, QEMU_OPTION_show_cursor, \
3150    "-show-cursor    show cursor\n", QEMU_ARCH_ALL)
3151STEXI
3152@item -show-cursor
3153@findex -show-cursor
3154Show cursor.
3155ETEXI
3156
3157DEF("tb-size", HAS_ARG, QEMU_OPTION_tb_size, \
3158    "-tb-size n      set TB size\n", QEMU_ARCH_ALL)
3159STEXI
3160@item -tb-size @var{n}
3161@findex -tb-size
3162Set TB size.
3163ETEXI
3164
3165DEF("incoming", HAS_ARG, QEMU_OPTION_incoming, \
3166    "-incoming p     prepare for incoming migration, listen on port p\n",
3167    QEMU_ARCH_ALL)
3168STEXI
3169@item -incoming @var{port}
3170@findex -incoming
3171Prepare for incoming migration, listen on @var{port}.
3172ETEXI
3173
3174DEF("nodefaults", 0, QEMU_OPTION_nodefaults, \
3175    "-nodefaults     don't create default devices\n", QEMU_ARCH_ALL)
3176STEXI
3177@item -nodefaults
3178@findex -nodefaults
3179Don't create default devices. Normally, QEMU sets the default devices like serial
3180port, parallel port, virtual console, monitor device, VGA adapter, floppy and
3181CD-ROM drive and others. The @code{-nodefaults} option will disable all those
3182default devices.
3183ETEXI
3184
3185#ifndef _WIN32
3186DEF("chroot", HAS_ARG, QEMU_OPTION_chroot, \
3187    "-chroot dir     chroot to dir just before starting the VM\n",
3188    QEMU_ARCH_ALL)
3189#endif
3190STEXI
3191@item -chroot @var{dir}
3192@findex -chroot
3193Immediately before starting guest execution, chroot to the specified
3194directory.  Especially useful in combination with -runas.
3195ETEXI
3196
3197#ifndef _WIN32
3198DEF("runas", HAS_ARG, QEMU_OPTION_runas, \
3199    "-runas user     change to user id user just before starting the VM\n",
3200    QEMU_ARCH_ALL)
3201#endif
3202STEXI
3203@item -runas @var{user}
3204@findex -runas
3205Immediately before starting guest execution, drop root privileges, switching
3206to the specified user.
3207ETEXI
3208
3209DEF("prom-env", HAS_ARG, QEMU_OPTION_prom_env,
3210    "-prom-env variable=value\n"
3211    "                set OpenBIOS nvram variables\n",
3212    QEMU_ARCH_PPC | QEMU_ARCH_SPARC)
3213STEXI
3214@item -prom-env @var{variable}=@var{value}
3215@findex -prom-env
3216Set OpenBIOS nvram @var{variable} to given @var{value} (PPC, SPARC only).
3217ETEXI
3218DEF("semihosting", 0, QEMU_OPTION_semihosting,
3219    "-semihosting    semihosting mode\n",
3220    QEMU_ARCH_ARM | QEMU_ARCH_M68K | QEMU_ARCH_XTENSA | QEMU_ARCH_LM32)
3221STEXI
3222@item -semihosting
3223@findex -semihosting
3224Semihosting mode (ARM, M68K, Xtensa only).
3225ETEXI
3226DEF("old-param", 0, QEMU_OPTION_old_param,
3227    "-old-param      old param mode\n", QEMU_ARCH_ARM)
3228STEXI
3229@item -old-param
3230@findex -old-param (ARM)
3231Old param mode (ARM only).
3232ETEXI
3233
3234DEF("sandbox", HAS_ARG, QEMU_OPTION_sandbox, \
3235    "-sandbox <arg>  Enable seccomp mode 2 system call filter (default 'off').\n",
3236    QEMU_ARCH_ALL)
3237STEXI
3238@item -sandbox @var{arg}
3239@findex -sandbox
3240Enable Seccomp mode 2 system call filter. 'on' will enable syscall filtering and 'off' will
3241disable it.  The default is 'off'.
3242ETEXI
3243
3244DEF("readconfig", HAS_ARG, QEMU_OPTION_readconfig,
3245    "-readconfig <file>\n", QEMU_ARCH_ALL)
3246STEXI
3247@item -readconfig @var{file}
3248@findex -readconfig
3249Read device configuration from @var{file}. This approach is useful when you want to spawn
3250QEMU process with many command line options but you don't want to exceed the command line
3251character limit.
3252ETEXI
3253DEF("writeconfig", HAS_ARG, QEMU_OPTION_writeconfig,
3254    "-writeconfig <file>\n"
3255    "                read/write config file\n", QEMU_ARCH_ALL)
3256STEXI
3257@item -writeconfig @var{file}
3258@findex -writeconfig
3259Write device configuration to @var{file}. The @var{file} can be either filename to save
3260command line and device configuration into file or dash @code{-}) character to print the
3261output to stdout. This can be later used as input file for @code{-readconfig} option.
3262ETEXI
3263DEF("nodefconfig", 0, QEMU_OPTION_nodefconfig,
3264    "-nodefconfig\n"
3265    "                do not load default config files at startup\n",
3266    QEMU_ARCH_ALL)
3267STEXI
3268@item -nodefconfig
3269@findex -nodefconfig
3270Normally QEMU loads configuration files from @var{sysconfdir} and @var{datadir} at startup.
3271The @code{-nodefconfig} option will prevent QEMU from loading any of those config files.
3272ETEXI
3273DEF("no-user-config", 0, QEMU_OPTION_nouserconfig,
3274    "-no-user-config\n"
3275    "                do not load user-provided config files at startup\n",
3276    QEMU_ARCH_ALL)
3277STEXI
3278@item -no-user-config
3279@findex -no-user-config
3280The @code{-no-user-config} option makes QEMU not load any of the user-provided
3281config files on @var{sysconfdir}, but won't make it skip the QEMU-provided config
3282files from @var{datadir}.
3283ETEXI
3284DEF("trace", HAS_ARG, QEMU_OPTION_trace,
3285    "-trace [events=<file>][,file=<file>]\n"
3286    "                specify tracing options\n",
3287    QEMU_ARCH_ALL)
3288STEXI
3289HXCOMM This line is not accurate, as some sub-options are backend-specific but
3290HXCOMM HX does not support conditional compilation of text.
3291@item -trace [events=@var{file}][,file=@var{file}]
3292@findex -trace
3293
3294Specify tracing options.
3295
3296@table @option
3297@item events=@var{file}
3298Immediately enable events listed in @var{file}.
3299The file must contain one event name (as listed in the @var{trace-events} file)
3300per line.
3301This option is only available if QEMU has been compiled with
3302either @var{simple} or @var{stderr} tracing backend.
3303@item file=@var{file}
3304Log output traces to @var{file}.
3305
3306This option is only available if QEMU has been compiled with
3307the @var{simple} tracing backend.
3308@end table
3309ETEXI
3310
3311HXCOMM Internal use
3312DEF("qtest", HAS_ARG, QEMU_OPTION_qtest, "", QEMU_ARCH_ALL)
3313DEF("qtest-log", HAS_ARG, QEMU_OPTION_qtest_log, "", QEMU_ARCH_ALL)
3314
3315#ifdef __linux__
3316DEF("enable-fips", 0, QEMU_OPTION_enablefips,
3317    "-enable-fips    enable FIPS 140-2 compliance\n",
3318    QEMU_ARCH_ALL)
3319#endif
3320STEXI
3321@item -enable-fips
3322@findex -enable-fips
3323Enable FIPS 140-2 compliance mode.
3324ETEXI
3325
3326HXCOMM Deprecated by -machine accel=tcg property
3327DEF("no-kvm", 0, QEMU_OPTION_no_kvm, "", QEMU_ARCH_I386)
3328
3329HXCOMM Deprecated by kvm-pit driver properties
3330DEF("no-kvm-pit-reinjection", 0, QEMU_OPTION_no_kvm_pit_reinjection,
3331    "", QEMU_ARCH_I386)
3332
3333HXCOMM Deprecated (ignored)
3334DEF("no-kvm-pit", 0, QEMU_OPTION_no_kvm_pit, "", QEMU_ARCH_I386)
3335
3336HXCOMM Deprecated by -machine kernel_irqchip=on|off property
3337DEF("no-kvm-irqchip", 0, QEMU_OPTION_no_kvm_irqchip, "", QEMU_ARCH_I386)
3338
3339HXCOMM Deprecated (ignored)
3340DEF("tdf", 0, QEMU_OPTION_tdf,"", QEMU_ARCH_ALL)
3341
3342DEF("object", HAS_ARG, QEMU_OPTION_object,
3343    "-object TYPENAME[,PROP1=VALUE1,...]\n"
3344    "                create an new object of type TYPENAME setting properties\n"
3345    "                in the order they are specified.  Note that the 'id'\n"
3346    "                property must be set.  These objects are placed in the\n"
3347    "                '/objects' path.\n",
3348    QEMU_ARCH_ALL)
3349STEXI
3350@item -object @var{typename}[,@var{prop1}=@var{value1},...]
3351@findex -object
3352Create an new object of type @var{typename} setting properties
3353in the order they are specified.  Note that the 'id'
3354property must be set.  These objects are placed in the
3355'/objects' path.
3356ETEXI
3357
3358DEF("msg", HAS_ARG, QEMU_OPTION_msg,
3359    "-msg timestamp[=on|off]\n"
3360    "                change the format of messages\n"
3361    "                on|off controls leading timestamps (default:on)\n",
3362    QEMU_ARCH_ALL)
3363STEXI
3364@item -msg timestamp[=on|off]
3365@findex -msg
3366prepend a timestamp to each log message.(default:on)
3367ETEXI
3368
3369DEF("dump-vmstate", HAS_ARG, QEMU_OPTION_dump_vmstate,
3370    "-dump-vmstate <file>\n"
3371    "                Output vmstate information in JSON format to file.\n"
3372    "                Use the scripts/vmstate-static-checker.py file to\n"
3373    "                check for possible regressions in migration code\n"
3374    "                by comparing two such vmstate dumps.",
3375    QEMU_ARCH_ALL)
3376STEXI
3377@item -dump-vmstate @var{file}
3378@findex -dump-vmstate
3379Dump json-encoded vmstate information for current machine type to file
3380in @var{file}
3381ETEXI
3382
3383HXCOMM This is the last statement. Insert new options before this line!
3384STEXI
3385@end table
3386ETEXI
3387