1 QEMU User space emulator
2 ========================
4 Supported Operating Systems
5 ---------------------------
7 The following OS are supported in user space emulation:
9 - Linux (referred as qemu-linux-user)
11 - BSD (referred as qemu-bsd-user)
16 QEMU user space emulation has the following notable features:
18 **System call translation:**
19 QEMU includes a generic system call translator. This means that the
20 parameters of the system calls can be converted to fix endianness and
21 32/64-bit mismatches between hosts and targets. IOCTLs can be
24 **POSIX signal handling:**
25 QEMU can redirect to the running program all signals coming from the
26 host (such as ``SIGALRM``), as well as synthesize signals from
27 virtual CPU exceptions (for example ``SIGFPE`` when the program
28 executes a division by zero).
30 QEMU relies on the host kernel to emulate most signal system calls,
31 for example to emulate the signal mask. On Linux, QEMU supports both
32 normal and real-time signals.
35 On Linux, QEMU can emulate the ``clone`` syscall and create a real
36 host thread (with a separate virtual CPU) for each emulated thread.
37 Note that not all targets currently emulate atomic operations
38 correctly. x86 and Arm use a global lock in order to preserve their
41 QEMU was conceived so that ultimately it can emulate itself. Although it
42 is not very useful, it is an important test to show the power of the
45 Linux User space emulator
46 -------------------------
53 qemu-i386 [-h] [-d] [-L path] [-s size] [-cpu model] [-g port] [-B offset] [-R size] program [arguments...]
59 Set the x86 elf interpreter prefix (default=/usr/local/qemu-i386)
62 Set the x86 stack size in bytes (default=524288)
65 Select CPU model (-cpu help for list and additional feature
69 Set environment var to value.
72 Remove var from the environment.
75 Offset guest address by the specified number of bytes. This is useful
76 when the address region required by guest applications is reserved on
77 the host. This option is currently only supported on some hosts.
80 Pre-allocate a guest virtual address space of the given size (in
81 bytes). \"G\", \"M\", and \"k\" suffixes may be used when specifying
87 Activate logging of the specified items (use '-d help' for a list of
91 Act as if the host page size was 'pagesize' bytes
94 Wait gdb connection to port
97 Run the emulation in single step mode.
99 Environment variables:
102 Print system calls and arguments similar to the 'strace' program
103 (NOTE: the actual 'strace' program will not work because the user
104 space emulator hasn't implemented ptrace). At the moment this is
105 incomplete. All system calls that don't have a specific argument
106 format are printed with information for six arguments. Many
107 flag-style arguments don't have decoders and will show up as numbers.
114 * ``qemu-alpha`` TODO.
118 * ``qemu-armeb`` TODO.
120 * ``qemu-arm`` is also capable of running Arm \"Angel\" semihosted ELF
121 binaries (as implemented by the arm-elf and arm-eabi Newlib/GDB
122 configurations), and arm-uclinux bFLT format binaries.
124 - user mode (ColdFire)
128 * ``qemu-m68k`` is capable of running semihosted binaries using the BDM
129 (m5xxx-ram-hosted.ld) or m68k-sim (sim.ld) syscall interfaces, and
130 coldfire uClinux bFLT format binaries.
132 The binary format is detected automatically.
136 * ``qemu-cris`` TODO.
140 * ``qemu-i386`` TODO.
141 * ``qemu-x86_64`` TODO.
143 - user mode (Microblaze)
145 * ``qemu-microblaze`` TODO.
149 * ``qemu-mips`` executes 32-bit big endian MIPS binaries (MIPS O32 ABI).
151 * ``qemu-mipsel`` executes 32-bit little endian MIPS binaries (MIPS O32 ABI).
153 * ``qemu-mips64`` executes 64-bit big endian MIPS binaries (MIPS N64 ABI).
155 * ``qemu-mips64el`` executes 64-bit little endian MIPS binaries (MIPS N64
158 * ``qemu-mipsn32`` executes 32-bit big endian MIPS binaries (MIPS N32 ABI).
160 * ``qemu-mipsn32el`` executes 32-bit little endian MIPS binaries (MIPS N32
165 * ``qemu-nios2`` TODO.
167 - user mode (PowerPC)
169 * ``qemu-ppc64`` TODO.
174 * ``qemu-sh4eb`` TODO.
179 * ``qemu-sparc`` can execute Sparc32 binaries (Sparc32 CPU, 32 bit ABI).
181 * ``qemu-sparc32plus`` can execute Sparc32 and SPARC32PLUS binaries
182 (Sparc64 CPU, 32 bit ABI).
184 * ``qemu-sparc64`` can execute some Sparc64 (Sparc64 CPU, 64 bit ABI) and
185 SPARC32PLUS binaries (Sparc64 CPU, 32 bit ABI).
187 BSD User space emulator
188 -----------------------
193 - target Sparc64 on Sparc64: Some trivial programs work.
198 In order to launch a BSD process, QEMU needs the process executable
199 itself and all the target dynamic libraries used by it.
201 - On Sparc64, you can just try to launch any process by using the
211 qemu-sparc64 [-h] [-d] [-L path] [-s size] [-bsd type] program [arguments...]
217 Set the library root path (default=/)
220 Set the stack size in bytes (default=524288)
222 ``-ignore-environment``
223 Start with an empty environment. Without this option, the initial
224 environment is a copy of the caller's environment.
227 Set environment var to value.
230 Remove var from the environment.
233 Set the type of the emulated BSD Operating system. Valid values are
234 FreeBSD, NetBSD and OpenBSD (default).
239 Activate logging of the specified items (use '-d help' for a list of
243 Act as if the host page size was 'pagesize' bytes
246 Run the emulation in single step mode.