blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1 | HXCOMM Use DEFHEADING() to define headings in both help text and texi |
| 2 | HXCOMM Text between STEXI and ETEXI are copied to texi version and |
| 3 | HXCOMM discarded from C version |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 4 | HXCOMM DEF(option, HAS_ARG/0, opt_enum, opt_help, arch_mask) is used to |
| 5 | HXCOMM construct option structures, enums and help message for specified |
| 6 | HXCOMM architectures. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 7 | HXCOMM HXCOMM can be used for comments, discarded from both texi and C |
| 8 | |
Markus Armbruster | de6b4f9 | 2017-10-02 16:03:00 +0200 | [diff] [blame] | 9 | DEFHEADING(Standard options:) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 10 | STEXI |
| 11 | @table @option |
| 12 | ETEXI |
| 13 | |
| 14 | DEF("help", 0, QEMU_OPTION_h, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 15 | "-h or -help display this help and exit\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 16 | STEXI |
| 17 | @item -h |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 18 | @findex -h |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 19 | Display help and exit |
| 20 | ETEXI |
| 21 | |
pbrook | 9bd7e6d | 2009-04-07 22:58:45 +0000 | [diff] [blame] | 22 | DEF("version", 0, QEMU_OPTION_version, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 23 | "-version display version information and exit\n", QEMU_ARCH_ALL) |
pbrook | 9bd7e6d | 2009-04-07 22:58:45 +0000 | [diff] [blame] | 24 | STEXI |
| 25 | @item -version |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 26 | @findex -version |
pbrook | 9bd7e6d | 2009-04-07 22:58:45 +0000 | [diff] [blame] | 27 | Display version information and exit |
| 28 | ETEXI |
| 29 | |
Jan Kiszka | 80f52a6 | 2011-07-23 12:39:46 +0200 | [diff] [blame] | 30 | DEF("machine", HAS_ARG, QEMU_OPTION_machine, \ |
| 31 | "-machine [type=]name[,prop[=value][,...]]\n" |
Peter Maydell | 585f603 | 2012-10-04 16:22:01 +0100 | [diff] [blame] | 32 | " selects emulated machine ('-machine help' for list)\n" |
Jan Kiszka | 80f52a6 | 2011-07-23 12:39:46 +0200 | [diff] [blame] | 33 | " property accel=accel1[:accel2[:...]] selects accelerator\n" |
Justin Terry (VM) | d661d9a | 2018-01-22 13:07:46 -0800 | [diff] [blame] | 34 | " supported accelerators are kvm, xen, hax, hvf, whpx or tcg (default: tcg)\n" |
Matt Gingell | 32c18a2 | 2015-11-16 10:03:06 -0800 | [diff] [blame] | 35 | " kernel_irqchip=on|off|split controls accelerated irqchip support (default=off)\n" |
Don Slutz | d1048be | 2014-11-21 11:18:52 -0500 | [diff] [blame] | 36 | " vmport=on|off|auto controls emulation of vmport (default: auto)\n" |
Peter Maydell | 9640401 | 2016-05-10 16:49:29 +0100 | [diff] [blame] | 37 | " kvm_shadow_mem=size of KVM shadow MMU in bytes\n" |
Luiz Capitulino | 8490fc7 | 2012-09-05 16:50:16 -0300 | [diff] [blame] | 38 | " dump-guest-core=on|off include guest memory in a core dump (default=on)\n" |
Le Tan | a52a7fd | 2014-08-16 13:55:40 +0800 | [diff] [blame] | 39 | " mem-merge=on|off controls memory merge support (default: on)\n" |
Tiejun Chen | 7981417 | 2015-07-15 13:37:45 +0800 | [diff] [blame] | 40 | " igd-passthru=on|off controls IGD GFX passthrough support (default=off)\n" |
Tony Krowiak | 2eb1cd0 | 2015-03-12 13:53:51 +0100 | [diff] [blame] | 41 | " aes-key-wrap=on|off controls support for AES key wrapping (default=on)\n" |
Alexander Graf | 9850c60 | 2015-02-23 13:56:42 +0100 | [diff] [blame] | 42 | " dea-key-wrap=on|off controls support for DEA key wrapping (default=on)\n" |
Xiao Guangrong | 87252e1 | 2015-12-02 15:20:58 +0800 | [diff] [blame] | 43 | " suppress-vmdesc=on|off disables self-describing migration (default=off)\n" |
Greg Kurz | 902c053 | 2016-02-18 12:32:25 +0100 | [diff] [blame] | 44 | " nvdimm=on|off controls NVDIMM support (default=off)\n" |
Xiao Feng Ren | 274250c | 2017-05-17 02:48:03 +0200 | [diff] [blame] | 45 | " enforce-config-section=on|off enforce configuration section migration (default=off)\n" |
Brijesh Singh | db58819 | 2018-03-08 06:48:38 -0600 | [diff] [blame] | 46 | " memory-encryption=@var{} memory encryption object to use (default=none)\n", |
Jan Kiszka | 80f52a6 | 2011-07-23 12:39:46 +0200 | [diff] [blame] | 47 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 48 | STEXI |
Jan Kiszka | 80f52a6 | 2011-07-23 12:39:46 +0200 | [diff] [blame] | 49 | @item -machine [type=]@var{name}[,prop=@var{value}[,...]] |
| 50 | @findex -machine |
Peter Maydell | 585f603 | 2012-10-04 16:22:01 +0100 | [diff] [blame] | 51 | Select the emulated machine by @var{name}. Use @code{-machine help} to list |
Daniel P. Berrange | 8bfce83 | 2017-07-25 15:10:41 +0100 | [diff] [blame] | 52 | available machines. |
| 53 | |
| 54 | For architectures which aim to support live migration compatibility |
| 55 | across releases, each release will introduce a new versioned machine |
| 56 | type. For example, the 2.8.0 release introduced machine types |
| 57 | ``pc-i440fx-2.8'' and ``pc-q35-2.8'' for the x86_64/i686 architectures. |
| 58 | |
| 59 | To allow live migration of guests from QEMU version 2.8.0, to QEMU |
| 60 | version 2.9.0, the 2.9.0 version must support the ``pc-i440fx-2.8'' |
| 61 | and ``pc-q35-2.8'' machines too. To allow users live migrating VMs |
| 62 | to skip multiple intermediate releases when upgrading, new releases |
| 63 | of QEMU will support machine types from many previous versions. |
| 64 | |
| 65 | Supported machine properties are: |
Jan Kiszka | 80f52a6 | 2011-07-23 12:39:46 +0200 | [diff] [blame] | 66 | @table @option |
| 67 | @item accel=@var{accels1}[:@var{accels2}[:...]] |
| 68 | This is used to enable an accelerator. Depending on the target architecture, |
Justin Terry (VM) | d661d9a | 2018-01-22 13:07:46 -0800 | [diff] [blame] | 69 | kvm, xen, hax, hvf, whpx or tcg can be available. By default, tcg is used. If there is |
Thomas Huth | bde4d92 | 2017-05-04 07:24:41 +0200 | [diff] [blame] | 70 | more than one accelerator specified, the next one is used if the previous one |
| 71 | fails to initialize. |
Jan Kiszka | 6a48ffa | 2011-10-15 13:43:48 +0200 | [diff] [blame] | 72 | @item kernel_irqchip=on|off |
Matt Gingell | 32c18a2 | 2015-11-16 10:03:06 -0800 | [diff] [blame] | 73 | Controls in-kernel irqchip support for the chosen accelerator when available. |
Tiejun Chen | 7981417 | 2015-07-15 13:37:45 +0800 | [diff] [blame] | 74 | @item gfx_passthru=on|off |
| 75 | Enables IGD GFX passthrough support for the chosen machine when available. |
Don Slutz | d1048be | 2014-11-21 11:18:52 -0500 | [diff] [blame] | 76 | @item vmport=on|off|auto |
| 77 | Enables emulation of VMWare IO port, for vmmouse etc. auto says to select the |
| 78 | value based on accel. For accel=xen the default is off otherwise the default |
| 79 | is on. |
Jan Kiszka | 39d6960 | 2012-01-25 18:14:15 +0100 | [diff] [blame] | 80 | @item kvm_shadow_mem=size |
| 81 | Defines the size of the KVM shadow MMU. |
Jason Baron | ddb97f1 | 2012-08-02 15:44:16 -0400 | [diff] [blame] | 82 | @item dump-guest-core=on|off |
| 83 | Include guest memory in a core dump. The default is on. |
Luiz Capitulino | 8490fc7 | 2012-09-05 16:50:16 -0300 | [diff] [blame] | 84 | @item mem-merge=on|off |
| 85 | Enables or disables memory merge support. This feature, when supported by |
| 86 | the host, de-duplicates identical memory pages among VMs instances |
| 87 | (enabled by default). |
Tony Krowiak | 2eb1cd0 | 2015-03-12 13:53:51 +0100 | [diff] [blame] | 88 | @item aes-key-wrap=on|off |
| 89 | Enables or disables AES key wrapping support on s390-ccw hosts. This feature |
| 90 | controls whether AES wrapping keys will be created to allow |
| 91 | execution of AES cryptographic functions. The default is on. |
| 92 | @item dea-key-wrap=on|off |
| 93 | Enables or disables DEA key wrapping support on s390-ccw hosts. This feature |
| 94 | controls whether DEA wrapping keys will be created to allow |
| 95 | execution of DEA cryptographic functions. The default is on. |
Xiao Guangrong | 87252e1 | 2015-12-02 15:20:58 +0800 | [diff] [blame] | 96 | @item nvdimm=on|off |
| 97 | Enables or disables NVDIMM support. The default is off. |
Peter Xu | 16f7244 | 2017-07-07 10:54:08 +0800 | [diff] [blame] | 98 | @item enforce-config-section=on|off |
| 99 | If @option{enforce-config-section} is set to @var{on}, force migration |
| 100 | code to send configuration section even if the machine-type sets the |
| 101 | @option{migration.send-configuration} property to @var{off}. |
| 102 | NOTE: this parameter is deprecated. Please use @option{-global} |
| 103 | @option{migration.send-configuration}=@var{on|off} instead. |
Brijesh Singh | db58819 | 2018-03-08 06:48:38 -0600 | [diff] [blame] | 104 | @item memory-encryption=@var{} |
| 105 | Memory encryption object to use. The default is none. |
Jan Kiszka | 80f52a6 | 2011-07-23 12:39:46 +0200 | [diff] [blame] | 106 | @end table |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 107 | ETEXI |
| 108 | |
Jan Kiszka | 80f52a6 | 2011-07-23 12:39:46 +0200 | [diff] [blame] | 109 | HXCOMM Deprecated by -machine |
| 110 | DEF("M", HAS_ARG, QEMU_OPTION_M, "", QEMU_ARCH_ALL) |
| 111 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 112 | DEF("cpu", HAS_ARG, QEMU_OPTION_cpu, |
Peter Maydell | 585f603 | 2012-10-04 16:22:01 +0100 | [diff] [blame] | 113 | "-cpu cpu select CPU ('-cpu help' for list)\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 114 | STEXI |
| 115 | @item -cpu @var{model} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 116 | @findex -cpu |
Peter Maydell | 585f603 | 2012-10-04 16:22:01 +0100 | [diff] [blame] | 117 | Select CPU model (@code{-cpu help} for list and additional feature selection) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 118 | ETEXI |
| 119 | |
KONRAD Frederic | 8d4e914 | 2017-02-23 18:29:08 +0000 | [diff] [blame] | 120 | DEF("accel", HAS_ARG, QEMU_OPTION_accel, |
| 121 | "-accel [accel=]accelerator[,thread=single|multi]\n" |
Justin Terry (VM) | d661d9a | 2018-01-22 13:07:46 -0800 | [diff] [blame] | 122 | " select accelerator (kvm, xen, hax, hvf, whpx or tcg; use 'help' for a list)\n" |
Eduardo Habkost | 0b3c5c8 | 2018-06-11 16:56:07 -0300 | [diff] [blame] | 123 | " thread=single|multi (enable multi-threaded TCG)\n", QEMU_ARCH_ALL) |
KONRAD Frederic | 8d4e914 | 2017-02-23 18:29:08 +0000 | [diff] [blame] | 124 | STEXI |
| 125 | @item -accel @var{name}[,prop=@var{value}[,...]] |
| 126 | @findex -accel |
| 127 | This is used to enable an accelerator. Depending on the target architecture, |
Justin Terry (VM) | d661d9a | 2018-01-22 13:07:46 -0800 | [diff] [blame] | 128 | kvm, xen, hax, hvf, whpx or tcg can be available. By default, tcg is used. If there is |
Thomas Huth | bde4d92 | 2017-05-04 07:24:41 +0200 | [diff] [blame] | 129 | more than one accelerator specified, the next one is used if the previous one |
| 130 | fails to initialize. |
KONRAD Frederic | 8d4e914 | 2017-02-23 18:29:08 +0000 | [diff] [blame] | 131 | @table @option |
| 132 | @item thread=single|multi |
| 133 | Controls number of TCG threads. When the TCG is multi-threaded there will be one |
| 134 | thread per vCPU therefor taking advantage of additional host cores. The default |
| 135 | is to enable multi-threading where both the back-end and front-ends support it and |
| 136 | no incompatible TCG features have been enabled (e.g. icount/replay). |
| 137 | @end table |
| 138 | ETEXI |
| 139 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 140 | DEF("smp", HAS_ARG, QEMU_OPTION_smp, |
Michael Tokarev | 12b7f57 | 2013-06-24 15:06:52 +0400 | [diff] [blame] | 141 | "-smp [cpus=]n[,maxcpus=cpus][,cores=cores][,threads=threads][,sockets=sockets]\n" |
Jes Sorensen | 6be68d7 | 2009-07-23 17:03:42 +0200 | [diff] [blame] | 142 | " set the number of CPUs to 'n' [default=1]\n" |
| 143 | " maxcpus= maximum number of total cpus, including\n" |
Bruce Rogers | ca1a8a0 | 2010-01-06 12:33:57 -0700 | [diff] [blame] | 144 | " offline CPUs for hotplug, etc\n" |
Andre Przywara | 58a04db | 2009-08-28 10:49:57 +0200 | [diff] [blame] | 145 | " cores= number of CPU cores on one socket\n" |
| 146 | " threads= number of threads on one CPU core\n" |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 147 | " sockets= number of discrete sockets in the system\n", |
| 148 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 149 | STEXI |
Michael Tokarev | 12b7f57 | 2013-06-24 15:06:52 +0400 | [diff] [blame] | 150 | @item -smp [cpus=]@var{n}[,cores=@var{cores}][,threads=@var{threads}][,sockets=@var{sockets}][,maxcpus=@var{maxcpus}] |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 151 | @findex -smp |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 152 | Simulate an SMP system with @var{n} CPUs. On the PC target, up to 255 |
| 153 | CPUs are supported. On Sparc32 target, Linux limits the number of usable CPUs |
| 154 | to 4. |
Andre Przywara | 58a04db | 2009-08-28 10:49:57 +0200 | [diff] [blame] | 155 | For the PC target, the number of @var{cores} per socket, the number |
| 156 | of @var{threads} per cores and the total number of @var{sockets} can be |
| 157 | specified. Missing values will be computed. If any on the three values is |
| 158 | given, the total number of CPUs @var{n} can be omitted. @var{maxcpus} |
| 159 | specifies the maximum number of hotpluggable CPUs. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 160 | ETEXI |
| 161 | |
aliguori | 268a362 | 2009-04-21 22:30:27 +0000 | [diff] [blame] | 162 | DEF("numa", HAS_ARG, QEMU_OPTION_numa, |
Eduardo Habkost | e0ee9fd | 2017-01-23 16:06:31 -0200 | [diff] [blame] | 163 | "-numa node[,mem=size][,cpus=firstcpu[-lastcpu]][,nodeid=node]\n" |
He Chen | 0f20343 | 2017-04-27 10:35:58 +0800 | [diff] [blame] | 164 | "-numa node[,memdev=id][,cpus=firstcpu[-lastcpu]][,nodeid=node]\n" |
Igor Mammedov | 2d19c65 | 2017-11-28 15:53:58 +0100 | [diff] [blame] | 165 | "-numa dist,src=source,dst=destination,val=distance\n" |
| 166 | "-numa cpu,node-id=node[,socket-id=x][,core-id=y][,thread-id=z]\n", |
| 167 | QEMU_ARCH_ALL) |
aliguori | 268a362 | 2009-04-21 22:30:27 +0000 | [diff] [blame] | 168 | STEXI |
Eduardo Habkost | e0ee9fd | 2017-01-23 16:06:31 -0200 | [diff] [blame] | 169 | @item -numa node[,mem=@var{size}][,cpus=@var{firstcpu}[-@var{lastcpu}]][,nodeid=@var{node}] |
| 170 | @itemx -numa node[,memdev=@var{id}][,cpus=@var{firstcpu}[-@var{lastcpu}]][,nodeid=@var{node}] |
He Chen | 0f20343 | 2017-04-27 10:35:58 +0800 | [diff] [blame] | 171 | @itemx -numa dist,src=@var{source},dst=@var{destination},val=@var{distance} |
Igor Mammedov | 419fcde | 2017-05-10 13:30:01 +0200 | [diff] [blame] | 172 | @itemx -numa cpu,node-id=@var{node}[,socket-id=@var{x}][,core-id=@var{y}][,thread-id=@var{z}] |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 173 | @findex -numa |
Eduardo Habkost | 4b9a5dd | 2017-01-23 16:06:32 -0200 | [diff] [blame] | 174 | Define a NUMA node and assign RAM and VCPUs to it. |
He Chen | 0f20343 | 2017-04-27 10:35:58 +0800 | [diff] [blame] | 175 | Set the NUMA distance from a source node to a destination node. |
Paolo Bonzini | 7febe36 | 2014-05-14 17:43:17 +0800 | [diff] [blame] | 176 | |
Igor Mammedov | 419fcde | 2017-05-10 13:30:01 +0200 | [diff] [blame] | 177 | Legacy VCPU assignment uses @samp{cpus} option where |
Eduardo Habkost | 4b9a5dd | 2017-01-23 16:06:32 -0200 | [diff] [blame] | 178 | @var{firstcpu} and @var{lastcpu} are CPU indexes. Each |
| 179 | @samp{cpus} option represent a contiguous range of CPU indexes |
| 180 | (or a single VCPU if @var{lastcpu} is omitted). A non-contiguous |
| 181 | set of VCPUs can be represented by providing multiple @samp{cpus} |
| 182 | options. If @samp{cpus} is omitted on all nodes, VCPUs are automatically |
| 183 | split between them. |
| 184 | |
| 185 | For example, the following option assigns VCPUs 0, 1, 2 and 5 to |
| 186 | a NUMA node: |
| 187 | @example |
| 188 | -numa node,cpus=0-2,cpus=5 |
| 189 | @end example |
| 190 | |
Igor Mammedov | 419fcde | 2017-05-10 13:30:01 +0200 | [diff] [blame] | 191 | @samp{cpu} option is a new alternative to @samp{cpus} option |
| 192 | which uses @samp{socket-id|core-id|thread-id} properties to assign |
| 193 | CPU objects to a @var{node} using topology layout properties of CPU. |
| 194 | The set of properties is machine specific, and depends on used |
| 195 | machine type/@samp{smp} options. It could be queried with |
| 196 | @samp{hotpluggable-cpus} monitor command. |
| 197 | @samp{node-id} property specifies @var{node} to which CPU object |
| 198 | will be assigned, it's required for @var{node} to be declared |
| 199 | with @samp{node} option before it's used with @samp{cpu} option. |
| 200 | |
| 201 | For example: |
| 202 | @example |
| 203 | -M pc \ |
| 204 | -smp 1,sockets=2,maxcpus=2 \ |
| 205 | -numa node,nodeid=0 -numa node,nodeid=1 \ |
| 206 | -numa cpu,node-id=0,socket-id=0 -numa cpu,node-id=1,socket-id=1 |
| 207 | @end example |
| 208 | |
Eduardo Habkost | 4b9a5dd | 2017-01-23 16:06:32 -0200 | [diff] [blame] | 209 | @samp{mem} assigns a given RAM amount to a node. @samp{memdev} |
| 210 | assigns RAM from a given memory backend device to a node. If |
| 211 | @samp{mem} and @samp{memdev} are omitted in all nodes, RAM is |
| 212 | split equally between them. |
| 213 | |
| 214 | @samp{mem} and @samp{memdev} are mutually exclusive. Furthermore, |
| 215 | if one node uses @samp{memdev}, all of them have to use it. |
| 216 | |
He Chen | 0f20343 | 2017-04-27 10:35:58 +0800 | [diff] [blame] | 217 | @var{source} and @var{destination} are NUMA node IDs. |
| 218 | @var{distance} is the NUMA distance from @var{source} to @var{destination}. |
| 219 | The distance from a node to itself is always 10. If any pair of nodes is |
| 220 | given a distance, then all pairs must be given distances. Although, when |
| 221 | distances are only given in one direction for each pair of nodes, then |
| 222 | the distances in the opposite directions are assumed to be the same. If, |
| 223 | however, an asymmetrical pair of distances is given for even one node |
| 224 | pair, then all node pairs must be provided distance values for both |
| 225 | directions, even when they are symmetrical. When a node is unreachable |
| 226 | from another node, set the pair's distance to 255. |
| 227 | |
Eduardo Habkost | 4b9a5dd | 2017-01-23 16:06:32 -0200 | [diff] [blame] | 228 | Note that the -@option{numa} option doesn't allocate any of the |
| 229 | specified resources, it just assigns existing resources to NUMA |
| 230 | nodes. This means that one still has to use the @option{-m}, |
| 231 | @option{-smp} options to allocate RAM and VCPUs respectively. |
| 232 | |
aliguori | 268a362 | 2009-04-21 22:30:27 +0000 | [diff] [blame] | 233 | ETEXI |
| 234 | |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 235 | DEF("add-fd", HAS_ARG, QEMU_OPTION_add_fd, |
| 236 | "-add-fd fd=fd,set=set[,opaque=opaque]\n" |
| 237 | " Add 'fd' to fd 'set'\n", QEMU_ARCH_ALL) |
| 238 | STEXI |
| 239 | @item -add-fd fd=@var{fd},set=@var{set}[,opaque=@var{opaque}] |
| 240 | @findex -add-fd |
| 241 | |
| 242 | Add a file descriptor to an fd set. Valid options are: |
| 243 | |
| 244 | @table @option |
| 245 | @item fd=@var{fd} |
| 246 | This option defines the file descriptor of which a duplicate is added to fd set. |
| 247 | The file descriptor cannot be stdin, stdout, or stderr. |
| 248 | @item set=@var{set} |
| 249 | This option defines the ID of the fd set to add the file descriptor to. |
| 250 | @item opaque=@var{opaque} |
| 251 | This option defines a free-form string that can be used to describe @var{fd}. |
| 252 | @end table |
| 253 | |
| 254 | You can open an image using pre-opened file descriptors from an fd set: |
| 255 | @example |
| 256 | qemu-system-i386 |
| 257 | -add-fd fd=3,set=2,opaque="rdwr:/path/to/file" |
| 258 | -add-fd fd=4,set=2,opaque="rdonly:/path/to/file" |
| 259 | -drive file=/dev/fdset/2,index=0,media=disk |
| 260 | @end example |
| 261 | ETEXI |
| 262 | |
| 263 | DEF("set", HAS_ARG, QEMU_OPTION_set, |
| 264 | "-set group.id.arg=value\n" |
| 265 | " set <arg> parameter for item <id> of type <group>\n" |
| 266 | " i.e. -set drive.$id.file=/path/to/image\n", QEMU_ARCH_ALL) |
| 267 | STEXI |
| 268 | @item -set @var{group}.@var{id}.@var{arg}=@var{value} |
| 269 | @findex -set |
Michael Tokarev | e1f3b97 | 2016-10-16 17:21:37 +0300 | [diff] [blame] | 270 | Set parameter @var{arg} for item @var{id} of type @var{group} |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 271 | ETEXI |
| 272 | |
| 273 | DEF("global", HAS_ARG, QEMU_OPTION_global, |
Paolo Bonzini | 3751d7c | 2015-04-09 14:16:19 +0200 | [diff] [blame] | 274 | "-global driver.property=value\n" |
| 275 | "-global driver=driver,property=property,value=value\n" |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 276 | " set a global default for a driver property\n", |
| 277 | QEMU_ARCH_ALL) |
| 278 | STEXI |
| 279 | @item -global @var{driver}.@var{prop}=@var{value} |
Paolo Bonzini | 3751d7c | 2015-04-09 14:16:19 +0200 | [diff] [blame] | 280 | @itemx -global driver=@var{driver},property=@var{property},value=@var{value} |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 281 | @findex -global |
| 282 | Set default value of @var{driver}'s property @var{prop} to @var{value}, e.g.: |
| 283 | |
| 284 | @example |
Markus Armbruster | 1c9f3b8 | 2017-05-09 11:41:15 +0200 | [diff] [blame] | 285 | qemu-system-i386 -global ide-hd.physical_block_size=4096 disk-image.img |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 286 | @end example |
| 287 | |
Michael Tokarev | a295d24 | 2017-09-23 19:31:59 +0300 | [diff] [blame] | 288 | In particular, you can use this to set driver properties for devices which are |
| 289 | created automatically by the machine model. To create a device which is not |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 290 | created automatically and set properties on it, use -@option{device}. |
Paolo Bonzini | 3751d7c | 2015-04-09 14:16:19 +0200 | [diff] [blame] | 291 | |
Markus Armbruster | ae08fd5 | 2015-06-15 14:35:58 +0200 | [diff] [blame] | 292 | -global @var{driver}.@var{prop}=@var{value} is shorthand for -global |
| 293 | driver=@var{driver},property=@var{prop},value=@var{value}. The |
| 294 | longhand syntax works even when @var{driver} contains a dot. |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 295 | ETEXI |
| 296 | |
| 297 | DEF("boot", HAS_ARG, QEMU_OPTION_boot, |
| 298 | "-boot [order=drives][,once=drives][,menu=on|off]\n" |
Amos Kong | c8a6ae8 | 2013-03-19 14:23:27 +0800 | [diff] [blame] | 299 | " [,splash=sp_name][,splash-time=sp_time][,reboot-timeout=rb_time][,strict=on|off]\n" |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 300 | " 'drives': floppy (a), hard disk (c), CD-ROM (d), network (n)\n" |
| 301 | " 'sp_name': the file's name that would be passed to bios as logo picture, if menu=on\n" |
| 302 | " 'sp_time': the period that splash picture last if menu=on, unit is ms\n" |
| 303 | " 'rb_timeout': the timeout before guest reboot when boot failed, unit is ms\n", |
| 304 | QEMU_ARCH_ALL) |
| 305 | STEXI |
Amos Kong | c8a6ae8 | 2013-03-19 14:23:27 +0800 | [diff] [blame] | 306 | @item -boot [order=@var{drives}][,once=@var{drives}][,menu=on|off][,splash=@var{sp_name}][,splash-time=@var{sp_time}][,reboot-timeout=@var{rb_timeout}][,strict=on|off] |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 307 | @findex -boot |
| 308 | Specify boot order @var{drives} as a string of drive letters. Valid |
Gonglei | d274e07 | 2015-07-03 17:50:57 +0800 | [diff] [blame] | 309 | drive letters depend on the target architecture. The x86 PC uses: a, b |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 310 | (floppy 1 and 2), c (first hard disk), d (first CD-ROM), n-p (Etherboot |
| 311 | from network adapter 1-4), hard disk boot is the default. To apply a |
| 312 | particular boot order only on the first startup, specify it via |
Thomas Huth | c0d9f7d | 2017-02-28 18:40:01 +0100 | [diff] [blame] | 313 | @option{once}. Note that the @option{order} or @option{once} parameter |
| 314 | should not be used together with the @option{bootindex} property of |
| 315 | devices, since the firmware implementations normally do not support both |
| 316 | at the same time. |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 317 | |
| 318 | Interactive boot menus/prompts can be enabled via @option{menu=on} as far |
| 319 | as firmware/BIOS supports them. The default is non-interactive boot. |
| 320 | |
| 321 | A splash picture could be passed to bios, enabling user to show it as logo, |
| 322 | when option splash=@var{sp_name} is given and menu=on, If firmware/BIOS |
| 323 | supports them. Currently Seabios for X86 system support it. |
| 324 | limitation: The splash file could be a jpeg file or a BMP file in 24 BPP |
| 325 | format(true color). The resolution should be supported by the SVGA mode, so |
| 326 | the recommended is 320x240, 640x480, 800x640. |
| 327 | |
| 328 | A timeout could be passed to bios, guest will pause for @var{rb_timeout} ms |
| 329 | when boot failed, then reboot. If @var{rb_timeout} is '-1', guest will not |
| 330 | reboot, qemu passes '-1' to bios by default. Currently Seabios for X86 |
| 331 | system support it. |
| 332 | |
Amos Kong | c8a6ae8 | 2013-03-19 14:23:27 +0800 | [diff] [blame] | 333 | Do strict boot via @option{strict=on} as far as firmware/BIOS |
| 334 | supports it. This only effects when boot priority is changed by |
| 335 | bootindex options. The default is non-strict boot. |
| 336 | |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 337 | @example |
| 338 | # try to boot from network first, then from hard disk |
| 339 | qemu-system-i386 -boot order=nc |
| 340 | # boot from CD-ROM first, switch back to default order after reboot |
| 341 | qemu-system-i386 -boot once=d |
| 342 | # boot with a splash picture for 5 seconds. |
| 343 | qemu-system-i386 -boot menu=on,splash=/root/boot.bmp,splash-time=5000 |
| 344 | @end example |
| 345 | |
| 346 | Note: The legacy format '-boot @var{drives}' is still supported but its |
| 347 | use is discouraged as it may be removed from future versions. |
| 348 | ETEXI |
| 349 | |
| 350 | DEF("m", HAS_ARG, QEMU_OPTION_m, |
Michael Tokarev | 89f3ea2 | 2016-11-10 17:51:32 +0300 | [diff] [blame] | 351 | "-m [size=]megs[,slots=n,maxmem=size]\n" |
Igor Mammedov | 6e1d3c1 | 2013-11-27 01:27:35 +0100 | [diff] [blame] | 352 | " configure guest RAM\n" |
Alexander Graf | 0daba1f | 2015-06-05 11:05:03 +0200 | [diff] [blame] | 353 | " size: initial amount of guest memory\n" |
Igor Mammedov | c270fb9 | 2014-06-02 15:25:02 +0200 | [diff] [blame] | 354 | " slots: number of hotplug slots (default: none)\n" |
Matthew Rosato | b6fe012 | 2014-08-28 11:25:33 -0400 | [diff] [blame] | 355 | " maxmem: maximum amount of guest memory (default: none)\n" |
| 356 | "NOTE: Some architectures might enforce a specific granularity\n", |
Igor Mammedov | 6e1d3c1 | 2013-11-27 01:27:35 +0100 | [diff] [blame] | 357 | QEMU_ARCH_ALL) |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 358 | STEXI |
Luiz Capitulino | 9fcc079 | 2015-02-26 14:35:45 -0500 | [diff] [blame] | 359 | @item -m [size=]@var{megs}[,slots=n,maxmem=size] |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 360 | @findex -m |
Luiz Capitulino | 9fcc079 | 2015-02-26 14:35:45 -0500 | [diff] [blame] | 361 | Sets guest startup RAM size to @var{megs} megabytes. Default is 128 MiB. |
| 362 | Optionally, a suffix of ``M'' or ``G'' can be used to signify a value in |
| 363 | megabytes or gigabytes respectively. Optional pair @var{slots}, @var{maxmem} |
| 364 | could be used to set amount of hotpluggable memory slots and maximum amount of |
| 365 | memory. Note that @var{maxmem} must be aligned to the page size. |
| 366 | |
| 367 | For example, the following command-line sets the guest startup RAM size to |
| 368 | 1GB, creates 3 slots to hotplug additional memory and sets the maximum |
| 369 | memory the guest can reach to 4GB: |
| 370 | |
| 371 | @example |
| 372 | qemu-system-x86_64 -m 1G,slots=3,maxmem=4G |
| 373 | @end example |
| 374 | |
| 375 | If @var{slots} and @var{maxmem} are not specified, memory hotplug won't |
| 376 | be enabled and the guest startup RAM will never increase. |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 377 | ETEXI |
| 378 | |
| 379 | DEF("mem-path", HAS_ARG, QEMU_OPTION_mempath, |
| 380 | "-mem-path FILE provide backing storage for guest RAM\n", QEMU_ARCH_ALL) |
| 381 | STEXI |
| 382 | @item -mem-path @var{path} |
| 383 | @findex -mem-path |
| 384 | Allocate guest RAM from a temporarily created file in @var{path}. |
| 385 | ETEXI |
| 386 | |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 387 | DEF("mem-prealloc", 0, QEMU_OPTION_mem_prealloc, |
| 388 | "-mem-prealloc preallocate guest memory (use with -mem-path)\n", |
| 389 | QEMU_ARCH_ALL) |
| 390 | STEXI |
| 391 | @item -mem-prealloc |
| 392 | @findex -mem-prealloc |
| 393 | Preallocate memory when using -mem-path. |
| 394 | ETEXI |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 395 | |
| 396 | DEF("k", HAS_ARG, QEMU_OPTION_k, |
| 397 | "-k language use keyboard layout (for example 'fr' for French)\n", |
| 398 | QEMU_ARCH_ALL) |
| 399 | STEXI |
| 400 | @item -k @var{language} |
| 401 | @findex -k |
| 402 | Use keyboard layout @var{language} (for example @code{fr} for |
| 403 | French). This option is only needed where it is not easy to get raw PC |
Samuel Thibault | 3294547 | 2016-06-22 17:48:31 +0200 | [diff] [blame] | 404 | keycodes (e.g. on Macs, with some X11 servers or with a VNC or curses |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 405 | display). You don't normally need to use it on PC/Linux or PC/Windows |
| 406 | hosts. |
| 407 | |
| 408 | The available layouts are: |
| 409 | @example |
| 410 | ar de-ch es fo fr-ca hu ja mk no pt-br sv |
| 411 | da en-gb et fr fr-ch is lt nl pl ru th |
| 412 | de en-us fi fr-be hr it lv nl-be pt sl tr |
| 413 | @end example |
| 414 | |
| 415 | The default is @code{en-us}. |
| 416 | ETEXI |
| 417 | |
| 418 | |
| 419 | DEF("audio-help", 0, QEMU_OPTION_audio_help, |
| 420 | "-audio-help print list of audio drivers and their options\n", |
| 421 | QEMU_ARCH_ALL) |
| 422 | STEXI |
| 423 | @item -audio-help |
| 424 | @findex -audio-help |
| 425 | Will show the audio subsystem help: list of drivers, tunable |
| 426 | parameters. |
| 427 | ETEXI |
| 428 | |
| 429 | DEF("soundhw", HAS_ARG, QEMU_OPTION_soundhw, |
| 430 | "-soundhw c1,... enable audio support\n" |
| 431 | " and only specified sound cards (comma separated list)\n" |
| 432 | " use '-soundhw help' to get the list of supported cards\n" |
| 433 | " use '-soundhw all' to enable all of them\n", QEMU_ARCH_ALL) |
| 434 | STEXI |
| 435 | @item -soundhw @var{card1}[,@var{card2},...] or -soundhw all |
| 436 | @findex -soundhw |
| 437 | Enable audio and selected sound hardware. Use 'help' to print all |
| 438 | available sound hardware. |
| 439 | |
| 440 | @example |
| 441 | qemu-system-i386 -soundhw sb16,adlib disk.img |
| 442 | qemu-system-i386 -soundhw es1370 disk.img |
| 443 | qemu-system-i386 -soundhw ac97 disk.img |
| 444 | qemu-system-i386 -soundhw hda disk.img |
| 445 | qemu-system-i386 -soundhw all disk.img |
| 446 | qemu-system-i386 -soundhw help |
| 447 | @end example |
| 448 | |
| 449 | Note that Linux's i810_audio OSS kernel (for AC97) module might |
| 450 | require manually specifying clocking. |
| 451 | |
| 452 | @example |
| 453 | modprobe i810_audio clocking=48000 |
| 454 | @end example |
| 455 | ETEXI |
| 456 | |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 457 | DEF("device", HAS_ARG, QEMU_OPTION_device, |
| 458 | "-device driver[,prop[=value][,...]]\n" |
| 459 | " add device (based on driver)\n" |
| 460 | " prop=value,... sets driver properties\n" |
| 461 | " use '-device help' to print all possible drivers\n" |
| 462 | " use '-device driver,help' to print all possible properties\n", |
| 463 | QEMU_ARCH_ALL) |
| 464 | STEXI |
| 465 | @item -device @var{driver}[,@var{prop}[=@var{value}][,...]] |
| 466 | @findex -device |
| 467 | Add device @var{driver}. @var{prop}=@var{value} sets driver |
| 468 | properties. Valid properties depend on the driver. To get help on |
| 469 | possible drivers and properties, use @code{-device help} and |
| 470 | @code{-device @var{driver},help}. |
Corey Minyard | f849045 | 2015-12-17 12:50:10 -0600 | [diff] [blame] | 471 | |
| 472 | Some drivers are: |
Cédric Le Goater | 540c07d | 2017-04-05 14:41:32 +0200 | [diff] [blame] | 473 | @item -device ipmi-bmc-sim,id=@var{id}[,slave_addr=@var{val}][,sdrfile=@var{file}][,furareasize=@var{val}][,furdatafile=@var{file}] |
Corey Minyard | f849045 | 2015-12-17 12:50:10 -0600 | [diff] [blame] | 474 | |
| 475 | Add an IPMI BMC. This is a simulation of a hardware management |
| 476 | interface processor that normally sits on a system. It provides |
| 477 | a watchdog and the ability to reset and power control the system. |
| 478 | You need to connect this to an IPMI interface to make it useful |
| 479 | |
| 480 | The IPMI slave address to use for the BMC. The default is 0x20. |
| 481 | This address is the BMC's address on the I2C network of management |
| 482 | controllers. If you don't know what this means, it is safe to ignore |
| 483 | it. |
| 484 | |
Cédric Le Goater | 8c6fd7f | 2017-04-05 14:41:31 +0200 | [diff] [blame] | 485 | @table @option |
| 486 | @item bmc=@var{id} |
| 487 | The BMC to connect to, one of ipmi-bmc-sim or ipmi-bmc-extern above. |
| 488 | @item slave_addr=@var{val} |
| 489 | Define slave address to use for the BMC. The default is 0x20. |
| 490 | @item sdrfile=@var{file} |
Cédric Le Goater | 540c07d | 2017-04-05 14:41:32 +0200 | [diff] [blame] | 491 | file containing raw Sensor Data Records (SDR) data. The default is none. |
| 492 | @item fruareasize=@var{val} |
| 493 | size of a Field Replaceable Unit (FRU) area. The default is 1024. |
| 494 | @item frudatafile=@var{file} |
| 495 | file containing raw Field Replaceable Unit (FRU) inventory data. The default is none. |
Cédric Le Goater | 8c6fd7f | 2017-04-05 14:41:31 +0200 | [diff] [blame] | 496 | @end table |
| 497 | |
Corey Minyard | f849045 | 2015-12-17 12:50:10 -0600 | [diff] [blame] | 498 | @item -device ipmi-bmc-extern,id=@var{id},chardev=@var{id}[,slave_addr=@var{val}] |
| 499 | |
| 500 | Add a connection to an external IPMI BMC simulator. Instead of |
| 501 | locally emulating the BMC like the above item, instead connect |
| 502 | to an external entity that provides the IPMI services. |
| 503 | |
| 504 | A connection is made to an external BMC simulator. If you do this, it |
| 505 | is strongly recommended that you use the "reconnect=" chardev option |
| 506 | to reconnect to the simulator if the connection is lost. Note that if |
| 507 | this is not used carefully, it can be a security issue, as the |
| 508 | interface has the ability to send resets, NMIs, and power off the VM. |
| 509 | It's best if QEMU makes a connection to an external simulator running |
| 510 | on a secure port on localhost, so neither the simulator nor QEMU is |
| 511 | exposed to any outside network. |
| 512 | |
| 513 | See the "lanserv/README.vm" file in the OpenIPMI library for more |
| 514 | details on the external interface. |
| 515 | |
| 516 | @item -device isa-ipmi-kcs,bmc=@var{id}[,ioport=@var{val}][,irq=@var{val}] |
| 517 | |
| 518 | Add a KCS IPMI interafce on the ISA bus. This also adds a |
| 519 | corresponding ACPI and SMBIOS entries, if appropriate. |
| 520 | |
| 521 | @table @option |
| 522 | @item bmc=@var{id} |
| 523 | The BMC to connect to, one of ipmi-bmc-sim or ipmi-bmc-extern above. |
| 524 | @item ioport=@var{val} |
| 525 | Define the I/O address of the interface. The default is 0xca0 for KCS. |
| 526 | @item irq=@var{val} |
| 527 | Define the interrupt to use. The default is 5. To disable interrupts, |
| 528 | set this to 0. |
| 529 | @end table |
| 530 | |
| 531 | @item -device isa-ipmi-bt,bmc=@var{id}[,ioport=@var{val}][,irq=@var{val}] |
| 532 | |
| 533 | Like the KCS interface, but defines a BT interface. The default port is |
| 534 | 0xe4 and the default interrupt is 5. |
| 535 | |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 536 | ETEXI |
| 537 | |
| 538 | DEF("name", HAS_ARG, QEMU_OPTION_name, |
Dr. David Alan Gilbert | 8f480de | 2014-01-30 10:20:31 +0000 | [diff] [blame] | 539 | "-name string1[,process=string2][,debug-threads=on|off]\n" |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 540 | " set the name of the guest\n" |
Roman Bolshakov | 479a574 | 2018-12-17 23:26:01 +0300 | [diff] [blame^] | 541 | " string1 sets the window title and string2 the process name\n" |
| 542 | " When debug-threads is enabled, individual threads are given a separate name\n" |
Dr. David Alan Gilbert | 8f480de | 2014-01-30 10:20:31 +0000 | [diff] [blame] | 543 | " NOTE: The thread names are for debugging and not a stable API.\n", |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 544 | QEMU_ARCH_ALL) |
| 545 | STEXI |
| 546 | @item -name @var{name} |
| 547 | @findex -name |
| 548 | Sets the @var{name} of the guest. |
| 549 | This name will be displayed in the SDL window caption. |
| 550 | The @var{name} will also be used for the VNC server. |
| 551 | Also optionally set the top visible process name in Linux. |
Dr. David Alan Gilbert | 8f480de | 2014-01-30 10:20:31 +0000 | [diff] [blame] | 552 | Naming of individual threads can also be enabled on Linux to aid debugging. |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 553 | ETEXI |
| 554 | |
| 555 | DEF("uuid", HAS_ARG, QEMU_OPTION_uuid, |
| 556 | "-uuid %08x-%04x-%04x-%04x-%012x\n" |
| 557 | " specify machine UUID\n", QEMU_ARCH_ALL) |
| 558 | STEXI |
| 559 | @item -uuid @var{uuid} |
| 560 | @findex -uuid |
| 561 | Set system UUID. |
| 562 | ETEXI |
| 563 | |
| 564 | STEXI |
| 565 | @end table |
| 566 | ETEXI |
| 567 | DEFHEADING() |
| 568 | |
Markus Armbruster | de6b4f9 | 2017-10-02 16:03:00 +0200 | [diff] [blame] | 569 | DEFHEADING(Block device options:) |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 570 | STEXI |
| 571 | @table @option |
| 572 | ETEXI |
| 573 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 574 | DEF("fda", HAS_ARG, QEMU_OPTION_fda, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 575 | "-fda/-fdb file use 'file' as floppy disk 0/1 image\n", QEMU_ARCH_ALL) |
| 576 | DEF("fdb", HAS_ARG, QEMU_OPTION_fdb, "", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 577 | STEXI |
| 578 | @item -fda @var{file} |
Markus Armbruster | f9cfd65 | 2015-06-15 14:35:59 +0200 | [diff] [blame] | 579 | @itemx -fdb @var{file} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 580 | @findex -fda |
| 581 | @findex -fdb |
Markus Armbruster | 92a539d | 2015-03-17 17:02:20 +0100 | [diff] [blame] | 582 | Use @var{file} as floppy disk 0/1 image (@pxref{disk_images}). |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 583 | ETEXI |
| 584 | |
| 585 | DEF("hda", HAS_ARG, QEMU_OPTION_hda, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 586 | "-hda/-hdb file use 'file' as IDE hard disk 0/1 image\n", QEMU_ARCH_ALL) |
| 587 | DEF("hdb", HAS_ARG, QEMU_OPTION_hdb, "", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 588 | DEF("hdc", HAS_ARG, QEMU_OPTION_hdc, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 589 | "-hdc/-hdd file use 'file' as IDE hard disk 2/3 image\n", QEMU_ARCH_ALL) |
| 590 | DEF("hdd", HAS_ARG, QEMU_OPTION_hdd, "", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 591 | STEXI |
| 592 | @item -hda @var{file} |
Markus Armbruster | f9cfd65 | 2015-06-15 14:35:59 +0200 | [diff] [blame] | 593 | @itemx -hdb @var{file} |
| 594 | @itemx -hdc @var{file} |
| 595 | @itemx -hdd @var{file} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 596 | @findex -hda |
| 597 | @findex -hdb |
| 598 | @findex -hdc |
| 599 | @findex -hdd |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 600 | Use @var{file} as hard disk 0, 1, 2 or 3 image (@pxref{disk_images}). |
| 601 | ETEXI |
| 602 | |
| 603 | DEF("cdrom", HAS_ARG, QEMU_OPTION_cdrom, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 604 | "-cdrom file use 'file' as IDE cdrom image (cdrom is ide1 master)\n", |
| 605 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 606 | STEXI |
| 607 | @item -cdrom @var{file} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 608 | @findex -cdrom |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 609 | Use @var{file} as CD-ROM image (you cannot use @option{-hdc} and |
| 610 | @option{-cdrom} at the same time). You can use the host CD-ROM by |
| 611 | using @file{/dev/cdrom} as filename (@pxref{host_drives}). |
| 612 | ETEXI |
| 613 | |
Markus Armbruster | 42e5f39 | 2017-02-28 22:27:07 +0100 | [diff] [blame] | 614 | DEF("blockdev", HAS_ARG, QEMU_OPTION_blockdev, |
| 615 | "-blockdev [driver=]driver[,node-name=N][,discard=ignore|unmap]\n" |
| 616 | " [,cache.direct=on|off][,cache.no-flush=on|off]\n" |
| 617 | " [,read-only=on|off][,detect-zeroes=on|off|unmap]\n" |
| 618 | " [,driver specific parameters...]\n" |
| 619 | " configure a block backend\n", QEMU_ARCH_ALL) |
Kevin Wolf | dfaca46 | 2016-09-22 16:53:24 +0200 | [diff] [blame] | 620 | STEXI |
| 621 | @item -blockdev @var{option}[,@var{option}[,@var{option}[,...]]] |
| 622 | @findex -blockdev |
| 623 | |
Kevin Wolf | 370e832 | 2016-09-22 17:24:38 +0200 | [diff] [blame] | 624 | Define a new block driver node. Some of the options apply to all block drivers, |
| 625 | other options are only accepted for a specific block driver. See below for a |
| 626 | list of generic options and options for the most common block drivers. |
| 627 | |
| 628 | Options that expect a reference to another node (e.g. @code{file}) can be |
| 629 | given in two ways. Either you specify the node name of an already existing node |
| 630 | (file=@var{node-name}), or you define a new node inline, adding options |
| 631 | for the referenced node after a dot (file.filename=@var{path},file.aio=native). |
| 632 | |
| 633 | A block driver node created with @option{-blockdev} can be used for a guest |
| 634 | device by specifying its node name for the @code{drive} property in a |
| 635 | @option{-device} argument that defines a block device. |
Kevin Wolf | dfaca46 | 2016-09-22 16:53:24 +0200 | [diff] [blame] | 636 | |
| 637 | @table @option |
| 638 | @item Valid options for any block driver node: |
| 639 | |
| 640 | @table @code |
| 641 | @item driver |
| 642 | Specifies the block driver to use for the given node. |
| 643 | @item node-name |
| 644 | This defines the name of the block driver node by which it will be referenced |
| 645 | later. The name must be unique, i.e. it must not match the name of a different |
| 646 | block driver node, or (if you use @option{-drive} as well) the ID of a drive. |
| 647 | |
| 648 | If no node name is specified, it is automatically generated. The generated node |
| 649 | name is not intended to be predictable and changes between QEMU invocations. |
| 650 | For the top level, an explicit node name must be specified. |
| 651 | @item read-only |
| 652 | Open the node read-only. Guest write attempts will fail. |
| 653 | @item cache.direct |
| 654 | The host page cache can be avoided with @option{cache.direct=on}. This will |
| 655 | attempt to do disk IO directly to the guest's memory. QEMU may still perform an |
| 656 | internal copy of the data. |
| 657 | @item cache.no-flush |
| 658 | In case you don't care about data integrity over host failures, you can use |
| 659 | @option{cache.no-flush=on}. This option tells QEMU that it never needs to write |
| 660 | any data to the disk but can instead keep things in cache. If anything goes |
| 661 | wrong, like your host losing power, the disk storage getting disconnected |
| 662 | accidentally, etc. your image will most probably be rendered unusable. |
| 663 | @item discard=@var{discard} |
| 664 | @var{discard} is one of "ignore" (or "off") or "unmap" (or "on") and controls |
| 665 | whether @code{discard} (also known as @code{trim} or @code{unmap}) requests are |
| 666 | ignored or passed to the filesystem. Some machine types may not support |
| 667 | discard requests. |
| 668 | @item detect-zeroes=@var{detect-zeroes} |
| 669 | @var{detect-zeroes} is "off", "on" or "unmap" and enables the automatic |
| 670 | conversion of plain zero writes by the OS to driver specific optimized |
| 671 | zero write commands. You may even choose "unmap" if @var{discard} is set |
| 672 | to "unmap" to allow a zero write to be converted to an @code{unmap} operation. |
| 673 | @end table |
| 674 | |
Kevin Wolf | 370e832 | 2016-09-22 17:24:38 +0200 | [diff] [blame] | 675 | @item Driver-specific options for @code{file} |
| 676 | |
| 677 | This is the protocol-level block driver for accessing regular files. |
| 678 | |
| 679 | @table @code |
| 680 | @item filename |
| 681 | The path to the image file in the local filesystem |
| 682 | @item aio |
| 683 | Specifies the AIO backend (threads/native, default: threads) |
Fam Zheng | 1878eaf | 2017-11-24 16:53:51 +0800 | [diff] [blame] | 684 | @item locking |
| 685 | Specifies whether the image file is protected with Linux OFD / POSIX locks. The |
| 686 | default is to use the Linux Open File Descriptor API if available, otherwise no |
| 687 | lock is applied. (auto/on/off, default: auto) |
Kevin Wolf | 370e832 | 2016-09-22 17:24:38 +0200 | [diff] [blame] | 688 | @end table |
| 689 | Example: |
| 690 | @example |
| 691 | -blockdev driver=file,node-name=disk,filename=disk.img |
| 692 | @end example |
| 693 | |
| 694 | @item Driver-specific options for @code{raw} |
| 695 | |
| 696 | This is the image format block driver for raw images. It is usually |
| 697 | stacked on top of a protocol level block driver such as @code{file}. |
| 698 | |
| 699 | @table @code |
| 700 | @item file |
| 701 | Reference to or definition of the data source block driver node |
| 702 | (e.g. a @code{file} driver node) |
| 703 | @end table |
| 704 | Example 1: |
| 705 | @example |
| 706 | -blockdev driver=file,node-name=disk_file,filename=disk.img |
| 707 | -blockdev driver=raw,node-name=disk,file=disk_file |
| 708 | @end example |
| 709 | Example 2: |
| 710 | @example |
| 711 | -blockdev driver=raw,node-name=disk,file.driver=file,file.filename=disk.img |
| 712 | @end example |
| 713 | |
| 714 | @item Driver-specific options for @code{qcow2} |
| 715 | |
| 716 | This is the image format block driver for qcow2 images. It is usually |
| 717 | stacked on top of a protocol level block driver such as @code{file}. |
| 718 | |
| 719 | @table @code |
| 720 | @item file |
| 721 | Reference to or definition of the data source block driver node |
| 722 | (e.g. a @code{file} driver node) |
| 723 | |
| 724 | @item backing |
| 725 | Reference to or definition of the backing file block device (default is taken |
Max Reitz | 4f7be28 | 2018-02-24 16:40:33 +0100 | [diff] [blame] | 726 | from the image file). It is allowed to pass @code{null} here in order to disable |
| 727 | the default backing file. |
Kevin Wolf | 370e832 | 2016-09-22 17:24:38 +0200 | [diff] [blame] | 728 | |
| 729 | @item lazy-refcounts |
| 730 | Whether to enable the lazy refcounts feature (on/off; default is taken from the |
| 731 | image file) |
| 732 | |
| 733 | @item cache-size |
| 734 | The maximum total size of the L2 table and refcount block caches in bytes |
Leonid Bloch | 40fb215 | 2018-09-26 19:04:39 +0300 | [diff] [blame] | 735 | (default: the sum of l2-cache-size and refcount-cache-size) |
Kevin Wolf | 370e832 | 2016-09-22 17:24:38 +0200 | [diff] [blame] | 736 | |
| 737 | @item l2-cache-size |
| 738 | The maximum size of the L2 table cache in bytes |
Leonid Bloch | 80668d0 | 2018-09-26 19:04:44 +0300 | [diff] [blame] | 739 | (default: if cache-size is not specified - 32M on Linux platforms, and 8M on |
| 740 | non-Linux platforms; otherwise, as large as possible within the cache-size, |
| 741 | while permitting the requested or the minimal refcount cache size) |
Kevin Wolf | 370e832 | 2016-09-22 17:24:38 +0200 | [diff] [blame] | 742 | |
| 743 | @item refcount-cache-size |
| 744 | The maximum size of the refcount block cache in bytes |
Leonid Bloch | 40fb215 | 2018-09-26 19:04:39 +0300 | [diff] [blame] | 745 | (default: 4 times the cluster size; or if cache-size is specified, the part of |
| 746 | it which is not used for the L2 cache) |
Kevin Wolf | 370e832 | 2016-09-22 17:24:38 +0200 | [diff] [blame] | 747 | |
| 748 | @item cache-clean-interval |
| 749 | Clean unused entries in the L2 and refcount caches. The interval is in seconds. |
Leonid Bloch | e3a7b45 | 2018-09-29 12:54:54 +0300 | [diff] [blame] | 750 | The default value is 600 on supporting platforms, and 0 on other platforms. |
| 751 | Setting it to 0 disables this feature. |
Kevin Wolf | 370e832 | 2016-09-22 17:24:38 +0200 | [diff] [blame] | 752 | |
| 753 | @item pass-discard-request |
| 754 | Whether discard requests to the qcow2 device should be forwarded to the data |
| 755 | source (on/off; default: on if discard=unmap is specified, off otherwise) |
| 756 | |
| 757 | @item pass-discard-snapshot |
| 758 | Whether discard requests for the data source should be issued when a snapshot |
| 759 | operation (e.g. deleting a snapshot) frees clusters in the qcow2 file (on/off; |
| 760 | default: on) |
| 761 | |
| 762 | @item pass-discard-other |
| 763 | Whether discard requests for the data source should be issued on other |
| 764 | occasions where a cluster gets freed (on/off; default: off) |
| 765 | |
| 766 | @item overlap-check |
| 767 | Which overlap checks to perform for writes to the image |
| 768 | (none/constant/cached/all; default: cached). For details or finer |
| 769 | granularity control refer to the QAPI documentation of @code{blockdev-add}. |
| 770 | @end table |
| 771 | |
| 772 | Example 1: |
| 773 | @example |
| 774 | -blockdev driver=file,node-name=my_file,filename=/tmp/disk.qcow2 |
| 775 | -blockdev driver=qcow2,node-name=hda,file=my_file,overlap-check=none,cache-size=16777216 |
| 776 | @end example |
| 777 | Example 2: |
| 778 | @example |
| 779 | -blockdev driver=qcow2,node-name=disk,file.driver=http,file.filename=http://example.com/image.qcow2 |
| 780 | @end example |
| 781 | |
| 782 | @item Driver-specific options for other drivers |
| 783 | Please refer to the QAPI documentation of the @code{blockdev-add} QMP command. |
| 784 | |
Kevin Wolf | dfaca46 | 2016-09-22 16:53:24 +0200 | [diff] [blame] | 785 | @end table |
| 786 | |
| 787 | ETEXI |
Markus Armbruster | 42e5f39 | 2017-02-28 22:27:07 +0100 | [diff] [blame] | 788 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 789 | DEF("drive", HAS_ARG, QEMU_OPTION_drive, |
| 790 | "-drive [file=file][,if=type][,bus=n][,unit=m][,media=d][,index=i]\n" |
Stefan Hajnoczi | 92196b2 | 2011-08-04 12:26:52 +0100 | [diff] [blame] | 791 | " [,cache=writethrough|writeback|none|directsync|unsafe][,format=f]\n" |
Kevin Wolf | 572023f | 2018-06-13 11:01:30 +0200 | [diff] [blame] | 792 | " [,snapshot=on|off][,rerror=ignore|stop|report]\n" |
Stefan Hajnoczi | d1db760 | 2014-04-23 13:55:37 +0200 | [diff] [blame] | 793 | " [,werror=ignore|stop|report|enospc][,id=name][,aio=threads|native]\n" |
Stefan Hajnoczi | fb0490f | 2011-11-17 13:40:32 +0000 | [diff] [blame] | 794 | " [,readonly=on|off][,copy-on-read=on|off]\n" |
Peter Lieven | 2f7133b | 2014-07-28 21:53:02 +0200 | [diff] [blame] | 795 | " [,discard=ignore|unmap][,detect-zeroes=on|off|unmap]\n" |
Benoît Canet | 3e9fab6 | 2013-09-02 14:14:40 +0200 | [diff] [blame] | 796 | " [[,bps=b]|[[,bps_rd=r][,bps_wr=w]]]\n" |
| 797 | " [[,iops=i]|[[,iops_rd=r][,iops_wr=w]]]\n" |
| 798 | " [[,bps_max=bm]|[[,bps_rd_max=rm][,bps_wr_max=wm]]]\n" |
| 799 | " [[,iops_max=im]|[[,iops_rd_max=irm][,iops_wr_max=iwm]]]\n" |
Benoît Canet | 2024c1d | 2013-09-02 14:14:41 +0200 | [diff] [blame] | 800 | " [[,iops_size=is]]\n" |
Alberto Garcia | 76f4afb | 2015-06-08 18:17:44 +0200 | [diff] [blame] | 801 | " [[,group=g]]\n" |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 802 | " use 'file' as a drive image\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 803 | STEXI |
| 804 | @item -drive @var{option}[,@var{option}[,@var{option}[,...]]] |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 805 | @findex -drive |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 806 | |
Kevin Wolf | dfaca46 | 2016-09-22 16:53:24 +0200 | [diff] [blame] | 807 | Define a new drive. This includes creating a block driver node (the backend) as |
| 808 | well as a guest device, and is mostly a shortcut for defining the corresponding |
| 809 | @option{-blockdev} and @option{-device} options. |
| 810 | |
| 811 | @option{-drive} accepts all options that are accepted by @option{-blockdev}. In |
| 812 | addition, it knows the following options: |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 813 | |
Kevin Wolf | b3f046c | 2009-10-09 10:58:35 +0200 | [diff] [blame] | 814 | @table @option |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 815 | @item file=@var{file} |
| 816 | This option defines which disk image (@pxref{disk_images}) to use with |
| 817 | this drive. If the filename contains comma, you must double it |
| 818 | (for instance, "file=my,,file" to use file "my,file"). |
Ronnie Sahlberg | 0f5314a | 2011-10-26 23:51:37 +1100 | [diff] [blame] | 819 | |
| 820 | Special files such as iSCSI devices can be specified using protocol |
| 821 | specific URLs. See the section for "Device URL Syntax" for more information. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 822 | @item if=@var{interface} |
| 823 | This option defines on which type on interface the drive is connected. |
Craig Jellick | ed1fcd0 | 2017-03-17 08:49:55 -0700 | [diff] [blame] | 824 | Available types are: ide, scsi, sd, mtd, floppy, pflash, virtio, none. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 825 | @item bus=@var{bus},unit=@var{unit} |
| 826 | These options define where is connected the drive by defining the bus number and |
| 827 | the unit id. |
| 828 | @item index=@var{index} |
| 829 | This option defines where is connected the drive by using an index in the list |
| 830 | of available connectors of a given interface type. |
| 831 | @item media=@var{media} |
| 832 | This option defines the type of the media: disk or cdrom. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 833 | @item snapshot=@var{snapshot} |
Michael Tokarev | 9d85d55 | 2014-04-07 13:34:58 +0400 | [diff] [blame] | 834 | @var{snapshot} is "on" or "off" and controls snapshot mode for the given drive |
| 835 | (see @option{-snapshot}). |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 836 | @item cache=@var{cache} |
Kevin Wolf | dfaca46 | 2016-09-22 16:53:24 +0200 | [diff] [blame] | 837 | @var{cache} is "none", "writeback", "unsafe", "directsync" or "writethrough" |
| 838 | and controls how the host cache is used to access block data. This is a |
| 839 | shortcut that sets the @option{cache.direct} and @option{cache.no-flush} |
| 840 | options (as in @option{-blockdev}), and additionally @option{cache.writeback}, |
| 841 | which provides a default for the @option{write-cache} option of block guest |
| 842 | devices (as in @option{-device}). The modes correspond to the following |
| 843 | settings: |
| 844 | |
| 845 | @c Our texi2pod.pl script doesn't support @multitable, so fall back to using |
| 846 | @c plain ASCII art (well, UTF-8 art really). This looks okay both in the manpage |
| 847 | @c and the HTML output. |
| 848 | @example |
| 849 | @ │ cache.writeback cache.direct cache.no-flush |
| 850 | ─────────────┼───────────────────────────────────────────────── |
| 851 | writeback │ on off off |
| 852 | none │ on on off |
| 853 | writethrough │ off off off |
| 854 | directsync │ off on off |
| 855 | unsafe │ on off on |
| 856 | @end example |
| 857 | |
| 858 | The default mode is @option{cache=writeback}. |
| 859 | |
Christoph Hellwig | 5c6c3a6 | 2009-08-20 16:58:35 +0200 | [diff] [blame] | 860 | @item aio=@var{aio} |
| 861 | @var{aio} is "threads", or "native" and selects between pthread based disk I/O and native Linux AIO. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 862 | @item format=@var{format} |
| 863 | Specify which disk @var{format} will be used rather than detecting |
Michael Tokarev | d33c8a7 | 2016-05-18 15:47:53 +0300 | [diff] [blame] | 864 | the format. Can be used to specify format=raw to avoid interpreting |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 865 | an untrusted format header. |
Luiz Capitulino | ae73e59 | 2011-07-12 17:35:08 -0300 | [diff] [blame] | 866 | @item werror=@var{action},rerror=@var{action} |
| 867 | Specify which @var{action} to take on write and read errors. Valid actions are: |
| 868 | "ignore" (ignore the error and try to continue), "stop" (pause QEMU), |
| 869 | "report" (report the error to the guest), "enospc" (pause QEMU only if the |
| 870 | host disk is full; report the error to the guest otherwise). |
| 871 | The default setting is @option{werror=enospc} and @option{rerror=report}. |
Stefan Hajnoczi | fb0490f | 2011-11-17 13:40:32 +0000 | [diff] [blame] | 872 | @item copy-on-read=@var{copy-on-read} |
| 873 | @var{copy-on-read} is "on" or "off" and enables whether to copy read backing |
| 874 | file sectors into the image file. |
Stefan Hajnoczi | 01f9cfa | 2017-03-01 11:50:24 +0000 | [diff] [blame] | 875 | @item bps=@var{b},bps_rd=@var{r},bps_wr=@var{w} |
| 876 | Specify bandwidth throttling limits in bytes per second, either for all request |
| 877 | types or for reads or writes only. Small values can lead to timeouts or hangs |
| 878 | inside the guest. A safe minimum for disks is 2 MB/s. |
| 879 | @item bps_max=@var{bm},bps_rd_max=@var{rm},bps_wr_max=@var{wm} |
| 880 | Specify bursts in bytes per second, either for all request types or for reads |
| 881 | or writes only. Bursts allow the guest I/O to spike above the limit |
| 882 | temporarily. |
| 883 | @item iops=@var{i},iops_rd=@var{r},iops_wr=@var{w} |
| 884 | Specify request rate limits in requests per second, either for all request |
| 885 | types or for reads or writes only. |
| 886 | @item iops_max=@var{bm},iops_rd_max=@var{rm},iops_wr_max=@var{wm} |
| 887 | Specify bursts in requests per second, either for all request types or for reads |
| 888 | or writes only. Bursts allow the guest I/O to spike above the limit |
| 889 | temporarily. |
| 890 | @item iops_size=@var{is} |
| 891 | Let every @var{is} bytes of a request count as a new request for iops |
| 892 | throttling purposes. Use this option to prevent guests from circumventing iops |
| 893 | limits by sending fewer but larger requests. |
| 894 | @item group=@var{g} |
| 895 | Join a throttling quota group with given name @var{g}. All drives that are |
| 896 | members of the same group are accounted for together. Use this option to |
| 897 | prevent guests from circumventing throttling limits by using many small disks |
| 898 | instead of a single larger disk. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 899 | @end table |
| 900 | |
Kevin Wolf | dfaca46 | 2016-09-22 16:53:24 +0200 | [diff] [blame] | 901 | By default, the @option{cache.writeback=on} mode is used. It will report data |
Kevin Wolf | a13e5e0 | 2012-11-21 12:26:56 +0100 | [diff] [blame] | 902 | writes as completed as soon as the data is present in the host page cache. |
| 903 | This is safe as long as your guest OS makes sure to correctly flush disk caches |
| 904 | where needed. If your guest OS does not handle volatile disk write caches |
| 905 | correctly and your host crashes or loses power, then the guest may experience |
| 906 | data corruption. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 907 | |
Kevin Wolf | dfaca46 | 2016-09-22 16:53:24 +0200 | [diff] [blame] | 908 | For such guests, you should consider using @option{cache.writeback=off}. This |
Kevin Wolf | a13e5e0 | 2012-11-21 12:26:56 +0100 | [diff] [blame] | 909 | means that the host page cache will be used to read and write data, but write |
| 910 | notification will be sent to the guest only after QEMU has made sure to flush |
| 911 | each write to the disk. Be aware that this has a major impact on performance. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 912 | |
Kevin Wolf | dfaca46 | 2016-09-22 16:53:24 +0200 | [diff] [blame] | 913 | When using the @option{-snapshot} option, unsafe caching is always used. |
Alexander Graf | 016f5cf | 2010-05-26 17:51:49 +0200 | [diff] [blame] | 914 | |
Stefan Hajnoczi | fb0490f | 2011-11-17 13:40:32 +0000 | [diff] [blame] | 915 | Copy-on-read avoids accessing the same backing file sectors repeatedly and is |
| 916 | useful when the backing file is over a slow network. By default copy-on-read |
| 917 | is off. |
| 918 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 919 | Instead of @option{-cdrom} you can use: |
| 920 | @example |
Stefan Weil | 3804da9 | 2012-05-11 22:21:50 +0200 | [diff] [blame] | 921 | qemu-system-i386 -drive file=file,index=2,media=cdrom |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 922 | @end example |
| 923 | |
| 924 | Instead of @option{-hda}, @option{-hdb}, @option{-hdc}, @option{-hdd}, you can |
| 925 | use: |
| 926 | @example |
Stefan Weil | 3804da9 | 2012-05-11 22:21:50 +0200 | [diff] [blame] | 927 | qemu-system-i386 -drive file=file,index=0,media=disk |
| 928 | qemu-system-i386 -drive file=file,index=1,media=disk |
| 929 | qemu-system-i386 -drive file=file,index=2,media=disk |
| 930 | qemu-system-i386 -drive file=file,index=3,media=disk |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 931 | @end example |
| 932 | |
Corey Bryant | 587ed6b | 2012-10-18 15:19:34 -0400 | [diff] [blame] | 933 | You can open an image using pre-opened file descriptors from an fd set: |
| 934 | @example |
| 935 | qemu-system-i386 |
| 936 | -add-fd fd=3,set=2,opaque="rdwr:/path/to/file" |
| 937 | -add-fd fd=4,set=2,opaque="rdonly:/path/to/file" |
| 938 | -drive file=/dev/fdset/2,index=0,media=disk |
| 939 | @end example |
| 940 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 941 | You can connect a CDROM to the slave of ide0: |
| 942 | @example |
Stefan Weil | 3804da9 | 2012-05-11 22:21:50 +0200 | [diff] [blame] | 943 | qemu-system-i386 -drive file=file,if=ide,index=1,media=cdrom |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 944 | @end example |
| 945 | |
| 946 | If you don't specify the "file=" argument, you define an empty drive: |
| 947 | @example |
Stefan Weil | 3804da9 | 2012-05-11 22:21:50 +0200 | [diff] [blame] | 948 | qemu-system-i386 -drive if=ide,index=1,media=cdrom |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 949 | @end example |
| 950 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 951 | Instead of @option{-fda}, @option{-fdb}, you can use: |
| 952 | @example |
Stefan Weil | 3804da9 | 2012-05-11 22:21:50 +0200 | [diff] [blame] | 953 | qemu-system-i386 -drive file=file,index=0,if=floppy |
| 954 | qemu-system-i386 -drive file=file,index=1,if=floppy |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 955 | @end example |
| 956 | |
| 957 | By default, @var{interface} is "ide" and @var{index} is automatically |
| 958 | incremented: |
| 959 | @example |
Stefan Weil | 3804da9 | 2012-05-11 22:21:50 +0200 | [diff] [blame] | 960 | qemu-system-i386 -drive file=a -drive file=b" |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 961 | @end example |
| 962 | is interpreted like: |
| 963 | @example |
Stefan Weil | 3804da9 | 2012-05-11 22:21:50 +0200 | [diff] [blame] | 964 | qemu-system-i386 -hda a -hdb b |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 965 | @end example |
| 966 | ETEXI |
| 967 | |
| 968 | DEF("mtdblock", HAS_ARG, QEMU_OPTION_mtdblock, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 969 | "-mtdblock file use 'file' as on-board Flash memory image\n", |
| 970 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 971 | STEXI |
Kevin Wolf | 4e257e5 | 2009-10-09 10:58:36 +0200 | [diff] [blame] | 972 | @item -mtdblock @var{file} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 973 | @findex -mtdblock |
Kevin Wolf | 4e257e5 | 2009-10-09 10:58:36 +0200 | [diff] [blame] | 974 | Use @var{file} as on-board Flash memory image. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 975 | ETEXI |
| 976 | |
| 977 | DEF("sd", HAS_ARG, QEMU_OPTION_sd, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 978 | "-sd file use 'file' as SecureDigital card image\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 979 | STEXI |
Kevin Wolf | 4e257e5 | 2009-10-09 10:58:36 +0200 | [diff] [blame] | 980 | @item -sd @var{file} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 981 | @findex -sd |
Kevin Wolf | 4e257e5 | 2009-10-09 10:58:36 +0200 | [diff] [blame] | 982 | Use @var{file} as SecureDigital card image. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 983 | ETEXI |
| 984 | |
| 985 | DEF("pflash", HAS_ARG, QEMU_OPTION_pflash, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 986 | "-pflash file use 'file' as a parallel flash image\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 987 | STEXI |
Kevin Wolf | 4e257e5 | 2009-10-09 10:58:36 +0200 | [diff] [blame] | 988 | @item -pflash @var{file} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 989 | @findex -pflash |
Kevin Wolf | 4e257e5 | 2009-10-09 10:58:36 +0200 | [diff] [blame] | 990 | Use @var{file} as a parallel flash image. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 991 | ETEXI |
| 992 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 993 | DEF("snapshot", 0, QEMU_OPTION_snapshot, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 994 | "-snapshot write to temporary files instead of disk image files\n", |
| 995 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 996 | STEXI |
| 997 | @item -snapshot |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 998 | @findex -snapshot |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 999 | Write to temporary files instead of disk image files. In this case, |
| 1000 | the raw disk image you use is not written back. You can however force |
| 1001 | the write back by pressing @key{C-a s} (@pxref{disk_images}). |
| 1002 | ETEXI |
| 1003 | |
Gautham R Shenoy | 74db920 | 2010-04-29 17:44:43 +0530 | [diff] [blame] | 1004 | DEF("fsdev", HAS_ARG, QEMU_OPTION_fsdev, |
Aneesh Kumar K.V | 2c30dd7 | 2012-01-19 12:21:11 +0530 | [diff] [blame] | 1005 | "-fsdev fsdriver,id=id[,path=path,][security_model={mapped-xattr|mapped-file|passthrough|none}]\n" |
Tobias Schramm | b96feb2 | 2017-06-29 15:11:50 +0200 | [diff] [blame] | 1006 | " [,writeout=immediate][,readonly][,socket=socket|sock_fd=sock_fd][,fmode=fmode][,dmode=dmode]\n" |
Pradeep Jagadeesh | b8bbdb8 | 2017-02-28 10:31:46 +0100 | [diff] [blame] | 1007 | " [[,throttling.bps-total=b]|[[,throttling.bps-read=r][,throttling.bps-write=w]]]\n" |
| 1008 | " [[,throttling.iops-total=i]|[[,throttling.iops-read=r][,throttling.iops-write=w]]]\n" |
| 1009 | " [[,throttling.bps-total-max=bm]|[[,throttling.bps-read-max=rm][,throttling.bps-write-max=wm]]]\n" |
| 1010 | " [[,throttling.iops-total-max=im]|[[,throttling.iops-read-max=irm][,throttling.iops-write-max=iwm]]]\n" |
| 1011 | " [[,throttling.iops-size=is]]\n", |
Gautham R Shenoy | 74db920 | 2010-04-29 17:44:43 +0530 | [diff] [blame] | 1012 | QEMU_ARCH_ALL) |
| 1013 | |
| 1014 | STEXI |
| 1015 | |
Tobias Schramm | b96feb2 | 2017-06-29 15:11:50 +0200 | [diff] [blame] | 1016 | @item -fsdev @var{fsdriver},id=@var{id},path=@var{path},[security_model=@var{security_model}][,writeout=@var{writeout}][,readonly][,socket=@var{socket}|sock_fd=@var{sock_fd}][,fmode=@var{fmode}][,dmode=@var{dmode}] |
Gautham R Shenoy | 74db920 | 2010-04-29 17:44:43 +0530 | [diff] [blame] | 1017 | @findex -fsdev |
Aneesh Kumar K.V | 7c92a3d | 2011-10-12 19:11:24 +0530 | [diff] [blame] | 1018 | Define a new file system device. Valid options are: |
| 1019 | @table @option |
| 1020 | @item @var{fsdriver} |
| 1021 | This option specifies the fs driver backend to use. |
Greg Kurz | 93aee84 | 2018-12-12 14:18:10 +0100 | [diff] [blame] | 1022 | Currently "local" and "proxy" file system drivers are supported. |
Aneesh Kumar K.V | 7c92a3d | 2011-10-12 19:11:24 +0530 | [diff] [blame] | 1023 | @item id=@var{id} |
| 1024 | Specifies identifier for this device |
| 1025 | @item path=@var{path} |
| 1026 | Specifies the export path for the file system device. Files under |
| 1027 | this path will be available to the 9p client on the guest. |
| 1028 | @item security_model=@var{security_model} |
| 1029 | Specifies the security model to be used for this export path. |
Aneesh Kumar K.V | 2c30dd7 | 2012-01-19 12:21:11 +0530 | [diff] [blame] | 1030 | Supported security models are "passthrough", "mapped-xattr", "mapped-file" and "none". |
Aneesh Kumar K.V | 7c92a3d | 2011-10-12 19:11:24 +0530 | [diff] [blame] | 1031 | In "passthrough" security model, files are stored using the same |
Stefan Weil | b65ee4f | 2012-05-11 22:25:50 +0200 | [diff] [blame] | 1032 | credentials as they are created on the guest. This requires QEMU |
Aneesh Kumar K.V | 2c30dd7 | 2012-01-19 12:21:11 +0530 | [diff] [blame] | 1033 | to run as root. In "mapped-xattr" security model, some of the file |
Aneesh Kumar K.V | 7c92a3d | 2011-10-12 19:11:24 +0530 | [diff] [blame] | 1034 | attributes like uid, gid, mode bits and link target are stored as |
Aneesh Kumar K.V | 2c30dd7 | 2012-01-19 12:21:11 +0530 | [diff] [blame] | 1035 | file attributes. For "mapped-file" these attributes are stored in the |
| 1036 | hidden .virtfs_metadata directory. Directories exported by this security model cannot |
Aneesh Kumar K.V | 7c92a3d | 2011-10-12 19:11:24 +0530 | [diff] [blame] | 1037 | interact with other unix tools. "none" security model is same as |
| 1038 | passthrough except the sever won't report failures if it fails to |
M. Mohan Kumar | d9b36a6 | 2011-10-14 12:59:37 +0530 | [diff] [blame] | 1039 | set file attributes like ownership. Security model is mandatory |
Greg Kurz | 93aee84 | 2018-12-12 14:18:10 +0100 | [diff] [blame] | 1040 | only for local fsdriver. Other fsdrivers (like proxy) don't take |
M. Mohan Kumar | d9b36a6 | 2011-10-14 12:59:37 +0530 | [diff] [blame] | 1041 | security model as a parameter. |
Aneesh Kumar K.V | 7c92a3d | 2011-10-12 19:11:24 +0530 | [diff] [blame] | 1042 | @item writeout=@var{writeout} |
| 1043 | This is an optional argument. The only supported value is "immediate". |
| 1044 | This means that host page cache will be used to read and write data but |
| 1045 | write notification will be sent to the guest only when the data has been |
| 1046 | reported as written by the storage subsystem. |
M. Mohan Kumar | 2c74c2c | 2011-10-25 12:10:39 +0530 | [diff] [blame] | 1047 | @item readonly |
| 1048 | Enables exporting 9p share as a readonly mount for guests. By default |
| 1049 | read-write access is given. |
M. Mohan Kumar | 84a87cc | 2011-12-14 13:58:47 +0530 | [diff] [blame] | 1050 | @item socket=@var{socket} |
| 1051 | Enables proxy filesystem driver to use passed socket file for communicating |
| 1052 | with virtfs-proxy-helper |
M. Mohan Kumar | f67e3ff | 2011-12-14 13:58:46 +0530 | [diff] [blame] | 1053 | @item sock_fd=@var{sock_fd} |
| 1054 | Enables proxy filesystem driver to use passed socket descriptor for |
| 1055 | communicating with virtfs-proxy-helper. Usually a helper like libvirt |
| 1056 | will create socketpair and pass one of the fds as sock_fd |
Tobias Schramm | b96feb2 | 2017-06-29 15:11:50 +0200 | [diff] [blame] | 1057 | @item fmode=@var{fmode} |
| 1058 | Specifies the default mode for newly created files on the host. Works only |
| 1059 | with security models "mapped-xattr" and "mapped-file". |
| 1060 | @item dmode=@var{dmode} |
| 1061 | Specifies the default mode for newly created directories on the host. Works |
| 1062 | only with security models "mapped-xattr" and "mapped-file". |
Gautham R Shenoy | 74db920 | 2010-04-29 17:44:43 +0530 | [diff] [blame] | 1063 | @end table |
Aneesh Kumar K.V | 7c92a3d | 2011-10-12 19:11:24 +0530 | [diff] [blame] | 1064 | |
| 1065 | -fsdev option is used along with -device driver "virtio-9p-pci". |
| 1066 | @item -device virtio-9p-pci,fsdev=@var{id},mount_tag=@var{mount_tag} |
| 1067 | Options for virtio-9p-pci driver are: |
| 1068 | @table @option |
| 1069 | @item fsdev=@var{id} |
| 1070 | Specifies the id value specified along with -fsdev option |
| 1071 | @item mount_tag=@var{mount_tag} |
| 1072 | Specifies the tag name to be used by the guest to mount this export point |
| 1073 | @end table |
| 1074 | |
Gautham R Shenoy | 74db920 | 2010-04-29 17:44:43 +0530 | [diff] [blame] | 1075 | ETEXI |
Gautham R Shenoy | 74db920 | 2010-04-29 17:44:43 +0530 | [diff] [blame] | 1076 | |
Gautham R Shenoy | 3d54abc | 2010-04-29 17:45:03 +0530 | [diff] [blame] | 1077 | DEF("virtfs", HAS_ARG, QEMU_OPTION_virtfs, |
Aneesh Kumar K.V | 2c30dd7 | 2012-01-19 12:21:11 +0530 | [diff] [blame] | 1078 | "-virtfs local,path=path,mount_tag=tag,security_model=[mapped-xattr|mapped-file|passthrough|none]\n" |
Tobias Schramm | b96feb2 | 2017-06-29 15:11:50 +0200 | [diff] [blame] | 1079 | " [,id=id][,writeout=immediate][,readonly][,socket=socket|sock_fd=sock_fd][,fmode=fmode][,dmode=dmode]\n", |
Gautham R Shenoy | 3d54abc | 2010-04-29 17:45:03 +0530 | [diff] [blame] | 1080 | QEMU_ARCH_ALL) |
| 1081 | |
| 1082 | STEXI |
| 1083 | |
Tobias Schramm | b96feb2 | 2017-06-29 15:11:50 +0200 | [diff] [blame] | 1084 | @item -virtfs @var{fsdriver}[,path=@var{path}],mount_tag=@var{mount_tag}[,security_model=@var{security_model}][,writeout=@var{writeout}][,readonly][,socket=@var{socket}|sock_fd=@var{sock_fd}][,fmode=@var{fmode}][,dmode=@var{dmode}] |
Gautham R Shenoy | 3d54abc | 2010-04-29 17:45:03 +0530 | [diff] [blame] | 1085 | @findex -virtfs |
Gautham R Shenoy | 3d54abc | 2010-04-29 17:45:03 +0530 | [diff] [blame] | 1086 | |
Aneesh Kumar K.V | 7c92a3d | 2011-10-12 19:11:24 +0530 | [diff] [blame] | 1087 | The general form of a Virtual File system pass-through options are: |
| 1088 | @table @option |
| 1089 | @item @var{fsdriver} |
| 1090 | This option specifies the fs driver backend to use. |
Greg Kurz | 93aee84 | 2018-12-12 14:18:10 +0100 | [diff] [blame] | 1091 | Currently "local" and "proxy" file system drivers are supported. |
Aneesh Kumar K.V | 7c92a3d | 2011-10-12 19:11:24 +0530 | [diff] [blame] | 1092 | @item id=@var{id} |
| 1093 | Specifies identifier for this device |
| 1094 | @item path=@var{path} |
| 1095 | Specifies the export path for the file system device. Files under |
| 1096 | this path will be available to the 9p client on the guest. |
| 1097 | @item security_model=@var{security_model} |
| 1098 | Specifies the security model to be used for this export path. |
Aneesh Kumar K.V | 2c30dd7 | 2012-01-19 12:21:11 +0530 | [diff] [blame] | 1099 | Supported security models are "passthrough", "mapped-xattr", "mapped-file" and "none". |
Aneesh Kumar K.V | 7c92a3d | 2011-10-12 19:11:24 +0530 | [diff] [blame] | 1100 | In "passthrough" security model, files are stored using the same |
Stefan Weil | b65ee4f | 2012-05-11 22:25:50 +0200 | [diff] [blame] | 1101 | credentials as they are created on the guest. This requires QEMU |
Aneesh Kumar K.V | 2c30dd7 | 2012-01-19 12:21:11 +0530 | [diff] [blame] | 1102 | to run as root. In "mapped-xattr" security model, some of the file |
Aneesh Kumar K.V | 7c92a3d | 2011-10-12 19:11:24 +0530 | [diff] [blame] | 1103 | attributes like uid, gid, mode bits and link target are stored as |
Aneesh Kumar K.V | 2c30dd7 | 2012-01-19 12:21:11 +0530 | [diff] [blame] | 1104 | file attributes. For "mapped-file" these attributes are stored in the |
| 1105 | hidden .virtfs_metadata directory. Directories exported by this security model cannot |
Aneesh Kumar K.V | 7c92a3d | 2011-10-12 19:11:24 +0530 | [diff] [blame] | 1106 | interact with other unix tools. "none" security model is same as |
| 1107 | passthrough except the sever won't report failures if it fails to |
M. Mohan Kumar | d9b36a6 | 2011-10-14 12:59:37 +0530 | [diff] [blame] | 1108 | set file attributes like ownership. Security model is mandatory only |
Greg Kurz | 93aee84 | 2018-12-12 14:18:10 +0100 | [diff] [blame] | 1109 | for local fsdriver. Other fsdrivers (like proxy) don't take security |
M. Mohan Kumar | d9b36a6 | 2011-10-14 12:59:37 +0530 | [diff] [blame] | 1110 | model as a parameter. |
Aneesh Kumar K.V | 7c92a3d | 2011-10-12 19:11:24 +0530 | [diff] [blame] | 1111 | @item writeout=@var{writeout} |
| 1112 | This is an optional argument. The only supported value is "immediate". |
| 1113 | This means that host page cache will be used to read and write data but |
| 1114 | write notification will be sent to the guest only when the data has been |
| 1115 | reported as written by the storage subsystem. |
M. Mohan Kumar | 2c74c2c | 2011-10-25 12:10:39 +0530 | [diff] [blame] | 1116 | @item readonly |
| 1117 | Enables exporting 9p share as a readonly mount for guests. By default |
| 1118 | read-write access is given. |
M. Mohan Kumar | 84a87cc | 2011-12-14 13:58:47 +0530 | [diff] [blame] | 1119 | @item socket=@var{socket} |
| 1120 | Enables proxy filesystem driver to use passed socket file for |
| 1121 | communicating with virtfs-proxy-helper. Usually a helper like libvirt |
| 1122 | will create socketpair and pass one of the fds as sock_fd |
M. Mohan Kumar | f67e3ff | 2011-12-14 13:58:46 +0530 | [diff] [blame] | 1123 | @item sock_fd |
| 1124 | Enables proxy filesystem driver to use passed 'sock_fd' as the socket |
| 1125 | descriptor for interfacing with virtfs-proxy-helper |
Tobias Schramm | b96feb2 | 2017-06-29 15:11:50 +0200 | [diff] [blame] | 1126 | @item fmode=@var{fmode} |
| 1127 | Specifies the default mode for newly created files on the host. Works only |
| 1128 | with security models "mapped-xattr" and "mapped-file". |
| 1129 | @item dmode=@var{dmode} |
| 1130 | Specifies the default mode for newly created directories on the host. Works |
| 1131 | only with security models "mapped-xattr" and "mapped-file". |
Gautham R Shenoy | 3d54abc | 2010-04-29 17:45:03 +0530 | [diff] [blame] | 1132 | @end table |
| 1133 | ETEXI |
Gautham R Shenoy | 3d54abc | 2010-04-29 17:45:03 +0530 | [diff] [blame] | 1134 | |
Aneesh Kumar K.V | 9db221a | 2011-10-25 12:10:40 +0530 | [diff] [blame] | 1135 | DEF("virtfs_synth", 0, QEMU_OPTION_virtfs_synth, |
| 1136 | "-virtfs_synth Create synthetic file system image\n", |
| 1137 | QEMU_ARCH_ALL) |
| 1138 | STEXI |
| 1139 | @item -virtfs_synth |
| 1140 | @findex -virtfs_synth |
| 1141 | Create synthetic file system image |
| 1142 | ETEXI |
| 1143 | |
Markus Armbruster | 61d7048 | 2017-10-02 16:03:03 +0200 | [diff] [blame] | 1144 | DEF("iscsi", HAS_ARG, QEMU_OPTION_iscsi, |
| 1145 | "-iscsi [user=user][,password=password]\n" |
| 1146 | " [,header-digest=CRC32C|CR32C-NONE|NONE-CRC32C|NONE\n" |
| 1147 | " [,initiator-name=initiator-iqn][,id=target-iqn]\n" |
| 1148 | " [,timeout=timeout]\n" |
| 1149 | " iSCSI session parameters\n", QEMU_ARCH_ALL) |
| 1150 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1151 | STEXI |
Markus Armbruster | 4474314 | 2017-10-02 16:03:04 +0200 | [diff] [blame] | 1152 | @item -iscsi |
| 1153 | @findex -iscsi |
| 1154 | Configure iSCSI session parameters. |
| 1155 | ETEXI |
| 1156 | |
| 1157 | STEXI |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1158 | @end table |
| 1159 | ETEXI |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1160 | DEFHEADING() |
| 1161 | |
Markus Armbruster | de6b4f9 | 2017-10-02 16:03:00 +0200 | [diff] [blame] | 1162 | DEFHEADING(USB options:) |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 1163 | STEXI |
| 1164 | @table @option |
| 1165 | ETEXI |
| 1166 | |
| 1167 | DEF("usb", 0, QEMU_OPTION_usb, |
Thomas Huth | a358a3a | 2017-05-19 08:35:16 +0200 | [diff] [blame] | 1168 | "-usb enable the USB driver (if it is not used by default yet)\n", |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 1169 | QEMU_ARCH_ALL) |
| 1170 | STEXI |
| 1171 | @item -usb |
| 1172 | @findex -usb |
Thomas Huth | a358a3a | 2017-05-19 08:35:16 +0200 | [diff] [blame] | 1173 | Enable the USB driver (if it is not used by default yet). |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 1174 | ETEXI |
| 1175 | |
| 1176 | DEF("usbdevice", HAS_ARG, QEMU_OPTION_usbdevice, |
| 1177 | "-usbdevice name add the host or guest USB device 'name'\n", |
| 1178 | QEMU_ARCH_ALL) |
| 1179 | STEXI |
| 1180 | |
| 1181 | @item -usbdevice @var{devname} |
| 1182 | @findex -usbdevice |
Thomas Huth | a358a3a | 2017-05-19 08:35:16 +0200 | [diff] [blame] | 1183 | Add the USB device @var{devname}. Note that this option is deprecated, |
| 1184 | please use @code{-device usb-...} instead. @xref{usb_devices}. |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 1185 | |
| 1186 | @table @option |
| 1187 | |
| 1188 | @item mouse |
| 1189 | Virtual Mouse. This will override the PS/2 mouse emulation when activated. |
| 1190 | |
| 1191 | @item tablet |
| 1192 | Pointer device that uses absolute coordinates (like a touchscreen). This |
| 1193 | means QEMU is able to report the mouse position without having to grab the |
| 1194 | mouse. Also overrides the PS/2 mouse emulation when activated. |
| 1195 | |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 1196 | @item braille |
| 1197 | Braille device. This will use BrlAPI to display the braille output on a real |
| 1198 | or fake device. |
| 1199 | |
Markus Armbruster | 10adb8b | 2013-02-13 19:49:43 +0100 | [diff] [blame] | 1200 | @end table |
| 1201 | ETEXI |
| 1202 | |
| 1203 | STEXI |
| 1204 | @end table |
| 1205 | ETEXI |
| 1206 | DEFHEADING() |
| 1207 | |
Markus Armbruster | de6b4f9 | 2017-10-02 16:03:00 +0200 | [diff] [blame] | 1208 | DEFHEADING(Display options:) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1209 | STEXI |
| 1210 | @table @option |
| 1211 | ETEXI |
| 1212 | |
Jes Sorensen | 1472a95 | 2011-03-16 13:33:31 +0100 | [diff] [blame] | 1213 | DEF("display", HAS_ARG, QEMU_OPTION_display, |
| 1214 | "-display sdl[,frame=on|off][,alt_grab=on|off][,ctrl_grab=on|off]\n" |
Elie Tournier | 4867e47 | 2018-04-13 14:58:42 +0100 | [diff] [blame] | 1215 | " [,window_close=on|off][,gl=on|core|es|off]\n" |
Robert Ho | f04ec5a | 2016-07-26 18:17:11 +0800 | [diff] [blame] | 1216 | "-display gtk[,grab_on_hover=on|off][,gl=on|off]|\n" |
| 1217 | "-display vnc=<display>[,<optargs>]\n" |
| 1218 | "-display curses\n" |
Erik Skultety | 144aaa9 | 2018-11-16 11:14:44 +0100 | [diff] [blame] | 1219 | "-display none\n" |
| 1220 | "-display egl-headless[,rendernode=<file>]" |
Robert Ho | f04ec5a | 2016-07-26 18:17:11 +0800 | [diff] [blame] | 1221 | " select display type\n" |
| 1222 | "The default display is equivalent to\n" |
| 1223 | #if defined(CONFIG_GTK) |
| 1224 | "\t\"-display gtk\"\n" |
| 1225 | #elif defined(CONFIG_SDL) |
| 1226 | "\t\"-display sdl\"\n" |
| 1227 | #elif defined(CONFIG_COCOA) |
| 1228 | "\t\"-display cocoa\"\n" |
| 1229 | #elif defined(CONFIG_VNC) |
| 1230 | "\t\"-vnc localhost:0,to=99,id=default\"\n" |
| 1231 | #else |
| 1232 | "\t\"-display none\"\n" |
| 1233 | #endif |
| 1234 | , QEMU_ARCH_ALL) |
Jes Sorensen | 1472a95 | 2011-03-16 13:33:31 +0100 | [diff] [blame] | 1235 | STEXI |
| 1236 | @item -display @var{type} |
| 1237 | @findex -display |
| 1238 | Select type of display to use. This option is a replacement for the |
| 1239 | old style -sdl/-curses/... options. Valid values for @var{type} are |
| 1240 | @table @option |
| 1241 | @item sdl |
| 1242 | Display video output via SDL (usually in a separate graphics |
| 1243 | window; see the SDL documentation for other possibilities). |
| 1244 | @item curses |
| 1245 | Display video output via curses. For graphics device models which |
| 1246 | support a text mode, QEMU can display this output using a |
| 1247 | curses/ncurses interface. Nothing is displayed when the graphics |
| 1248 | device is in graphical mode or if the graphics device does not support |
| 1249 | a text mode. Generally only the VGA device models support text mode. |
Jes Sorensen | 4171d32 | 2011-03-16 13:33:32 +0100 | [diff] [blame] | 1250 | @item none |
| 1251 | Do not display video output. The guest will still see an emulated |
| 1252 | graphics card, but its output will not be displayed to the QEMU |
| 1253 | user. This option differs from the -nographic option in that it |
| 1254 | only affects what is done with video output; -nographic also changes |
| 1255 | the destination of the serial and parallel port data. |
Jan Kiszka | 881249c | 2014-03-12 08:33:50 +0100 | [diff] [blame] | 1256 | @item gtk |
| 1257 | Display video output in a GTK window. This interface provides drop-down |
| 1258 | menus and other UI elements to configure and control the VM during |
| 1259 | runtime. |
Jes Sorensen | 3264ff1 | 2011-03-16 13:33:33 +0100 | [diff] [blame] | 1260 | @item vnc |
| 1261 | Start a VNC server on display <arg> |
Erik Skultety | 144aaa9 | 2018-11-16 11:14:44 +0100 | [diff] [blame] | 1262 | @item egl-headless |
| 1263 | Offload all OpenGL operations to a local DRI device. For any graphical display, |
| 1264 | this display needs to be paired with either VNC or SPICE displays. |
Jes Sorensen | 1472a95 | 2011-03-16 13:33:31 +0100 | [diff] [blame] | 1265 | @end table |
| 1266 | ETEXI |
| 1267 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1268 | DEF("nographic", 0, QEMU_OPTION_nographic, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 1269 | "-nographic disable graphical output and redirect serial I/Os to console\n", |
| 1270 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1271 | STEXI |
| 1272 | @item -nographic |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 1273 | @findex -nographic |
Colin Lord | dc0a3e4 | 2016-08-12 15:30:48 -0400 | [diff] [blame] | 1274 | Normally, if QEMU is compiled with graphical window support, it displays |
| 1275 | output such as guest graphics, guest console, and the QEMU monitor in a |
| 1276 | window. With this option, you can totally disable graphical output so |
| 1277 | that QEMU is a simple command line application. The emulated serial port |
| 1278 | is redirected on the console and muxed with the monitor (unless |
| 1279 | redirected elsewhere explicitly). Therefore, you can still use QEMU to |
| 1280 | debug a Linux kernel with a serial console. Use @key{C-a h} for help on |
| 1281 | switching between the console and monitor. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1282 | ETEXI |
| 1283 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1284 | DEF("curses", 0, QEMU_OPTION_curses, |
Robert Ho | f04ec5a | 2016-07-26 18:17:11 +0800 | [diff] [blame] | 1285 | "-curses shorthand for -display curses\n", |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 1286 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1287 | STEXI |
| 1288 | @item -curses |
Markus Armbruster | b8f490e | 2013-02-13 19:49:38 +0100 | [diff] [blame] | 1289 | @findex -curses |
Colin Lord | dc0a3e4 | 2016-08-12 15:30:48 -0400 | [diff] [blame] | 1290 | Normally, if QEMU is compiled with graphical window support, it displays |
| 1291 | output such as guest graphics, guest console, and the QEMU monitor in a |
| 1292 | window. With this option, QEMU can display the VGA output when in text |
| 1293 | mode using a curses/ncurses interface. Nothing is displayed in graphical |
| 1294 | mode. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1295 | ETEXI |
| 1296 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1297 | DEF("no-frame", 0, QEMU_OPTION_no_frame, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 1298 | "-no-frame open SDL window without a frame and window decorations\n", |
| 1299 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1300 | STEXI |
| 1301 | @item -no-frame |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 1302 | @findex -no-frame |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1303 | Do not use decorations for SDL windows and start them using the whole |
| 1304 | available screen space. This makes the using QEMU in a dedicated desktop |
| 1305 | workspace more convenient. |
| 1306 | ETEXI |
| 1307 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1308 | DEF("alt-grab", 0, QEMU_OPTION_alt_grab, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 1309 | "-alt-grab use Ctrl-Alt-Shift to grab mouse (instead of Ctrl-Alt)\n", |
| 1310 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1311 | STEXI |
| 1312 | @item -alt-grab |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 1313 | @findex -alt-grab |
Brad Hards | de1db2a | 2011-04-29 21:46:12 +1000 | [diff] [blame] | 1314 | Use Ctrl-Alt-Shift to grab mouse (instead of Ctrl-Alt). Note that this also |
| 1315 | affects the special keys (for fullscreen, monitor-mode switching, etc). |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1316 | ETEXI |
| 1317 | |
Dustin Kirkland | 0ca9f8a | 2009-09-17 15:48:04 -0500 | [diff] [blame] | 1318 | DEF("ctrl-grab", 0, QEMU_OPTION_ctrl_grab, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 1319 | "-ctrl-grab use Right-Ctrl to grab mouse (instead of Ctrl-Alt)\n", |
| 1320 | QEMU_ARCH_ALL) |
Dustin Kirkland | 0ca9f8a | 2009-09-17 15:48:04 -0500 | [diff] [blame] | 1321 | STEXI |
| 1322 | @item -ctrl-grab |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 1323 | @findex -ctrl-grab |
Brad Hards | de1db2a | 2011-04-29 21:46:12 +1000 | [diff] [blame] | 1324 | Use Right-Ctrl to grab mouse (instead of Ctrl-Alt). Note that this also |
| 1325 | affects the special keys (for fullscreen, monitor-mode switching, etc). |
Dustin Kirkland | 0ca9f8a | 2009-09-17 15:48:04 -0500 | [diff] [blame] | 1326 | ETEXI |
| 1327 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1328 | DEF("no-quit", 0, QEMU_OPTION_no_quit, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 1329 | "-no-quit disable SDL window close capability\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1330 | STEXI |
| 1331 | @item -no-quit |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 1332 | @findex -no-quit |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1333 | Disable SDL window close capability. |
| 1334 | ETEXI |
| 1335 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1336 | DEF("sdl", 0, QEMU_OPTION_sdl, |
Robert Ho | f04ec5a | 2016-07-26 18:17:11 +0800 | [diff] [blame] | 1337 | "-sdl shorthand for -display sdl\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1338 | STEXI |
| 1339 | @item -sdl |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 1340 | @findex -sdl |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1341 | Enable SDL. |
| 1342 | ETEXI |
| 1343 | |
Gerd Hoffmann | 29b0040 | 2010-03-11 11:13:27 -0300 | [diff] [blame] | 1344 | DEF("spice", HAS_ARG, QEMU_OPTION_spice, |
Yonit Halperin | 27af778 | 2012-08-21 13:54:20 +0300 | [diff] [blame] | 1345 | "-spice [port=port][,tls-port=secured-port][,x509-dir=<dir>]\n" |
| 1346 | " [,x509-key-file=<file>][,x509-key-password=<file>]\n" |
| 1347 | " [,x509-cert-file=<file>][,x509-cacert-file=<file>]\n" |
Marc-André Lureau | fe4831b | 2015-01-13 17:57:51 +0100 | [diff] [blame] | 1348 | " [,x509-dh-key-file=<file>][,addr=addr][,ipv4|ipv6|unix]\n" |
Yonit Halperin | 27af778 | 2012-08-21 13:54:20 +0300 | [diff] [blame] | 1349 | " [,tls-ciphers=<list>]\n" |
| 1350 | " [,tls-channel=[main|display|cursor|inputs|record|playback]]\n" |
| 1351 | " [,plaintext-channel=[main|display|cursor|inputs|record|playback]]\n" |
| 1352 | " [,sasl][,password=<secret>][,disable-ticketing]\n" |
| 1353 | " [,image-compression=[auto_glz|auto_lz|quic|glz|lz|off]]\n" |
| 1354 | " [,jpeg-wan-compression=[auto|never|always]]\n" |
| 1355 | " [,zlib-glz-wan-compression=[auto|never|always]]\n" |
| 1356 | " [,streaming-video=[off|all|filter]][,disable-copy-paste]\n" |
Hans de Goede | 5ad24e5 | 2013-06-08 15:37:27 +0200 | [diff] [blame] | 1357 | " [,disable-agent-file-xfer][,agent-mouse=[on|off]]\n" |
| 1358 | " [,playback-compression=[on|off]][,seamless-migration=[on|off]]\n" |
Marc-André Lureau | 7b52550 | 2017-02-12 15:21:18 +0400 | [diff] [blame] | 1359 | " [,gl=[on|off]][,rendernode=<file>]\n" |
Yonit Halperin | 27af778 | 2012-08-21 13:54:20 +0300 | [diff] [blame] | 1360 | " enable spice\n" |
| 1361 | " at least one of {port, tls-port} is mandatory\n", |
| 1362 | QEMU_ARCH_ALL) |
Gerd Hoffmann | 29b0040 | 2010-03-11 11:13:27 -0300 | [diff] [blame] | 1363 | STEXI |
| 1364 | @item -spice @var{option}[,@var{option}[,...]] |
| 1365 | @findex -spice |
| 1366 | Enable the spice remote desktop protocol. Valid options are |
| 1367 | |
| 1368 | @table @option |
| 1369 | |
| 1370 | @item port=<nr> |
Gerd Hoffmann | c448e85 | 2010-03-11 11:13:32 -0300 | [diff] [blame] | 1371 | Set the TCP port spice is listening on for plaintext channels. |
Gerd Hoffmann | 29b0040 | 2010-03-11 11:13:27 -0300 | [diff] [blame] | 1372 | |
Gerd Hoffmann | 333b0ee | 2010-08-27 14:29:16 +0200 | [diff] [blame] | 1373 | @item addr=<addr> |
| 1374 | Set the IP address spice is listening on. Default is any address. |
| 1375 | |
| 1376 | @item ipv4 |
Markus Armbruster | f9cfd65 | 2015-06-15 14:35:59 +0200 | [diff] [blame] | 1377 | @itemx ipv6 |
| 1378 | @itemx unix |
Gerd Hoffmann | 333b0ee | 2010-08-27 14:29:16 +0200 | [diff] [blame] | 1379 | Force using the specified IP version. |
| 1380 | |
Gerd Hoffmann | 29b0040 | 2010-03-11 11:13:27 -0300 | [diff] [blame] | 1381 | @item password=<secret> |
| 1382 | Set the password you need to authenticate. |
| 1383 | |
Marc-André Lureau | 48b3ed0 | 2011-05-17 10:40:33 +0200 | [diff] [blame] | 1384 | @item sasl |
| 1385 | Require that the client use SASL to authenticate with the spice. |
| 1386 | The exact choice of authentication method used is controlled from the |
| 1387 | system / user's SASL configuration file for the 'qemu' service. This |
| 1388 | is typically found in /etc/sasl2/qemu.conf. If running QEMU as an |
| 1389 | unprivileged user, an environment variable SASL_CONF_PATH can be used |
| 1390 | to make it search alternate locations for the service config. |
| 1391 | While some SASL auth methods can also provide data encryption (eg GSSAPI), |
| 1392 | it is recommended that SASL always be combined with the 'tls' and |
| 1393 | 'x509' settings to enable use of SSL and server certificates. This |
| 1394 | ensures a data encryption preventing compromise of authentication |
| 1395 | credentials. |
| 1396 | |
Gerd Hoffmann | 29b0040 | 2010-03-11 11:13:27 -0300 | [diff] [blame] | 1397 | @item disable-ticketing |
| 1398 | Allow client connects without authentication. |
| 1399 | |
Hans de Goede | d4970b0 | 2011-03-27 16:43:54 +0200 | [diff] [blame] | 1400 | @item disable-copy-paste |
| 1401 | Disable copy paste between the client and the guest. |
| 1402 | |
Hans de Goede | 5ad24e5 | 2013-06-08 15:37:27 +0200 | [diff] [blame] | 1403 | @item disable-agent-file-xfer |
| 1404 | Disable spice-vdagent based file-xfer between the client and the guest. |
| 1405 | |
Gerd Hoffmann | c448e85 | 2010-03-11 11:13:32 -0300 | [diff] [blame] | 1406 | @item tls-port=<nr> |
| 1407 | Set the TCP port spice is listening on for encrypted channels. |
| 1408 | |
| 1409 | @item x509-dir=<dir> |
| 1410 | Set the x509 file directory. Expects same filenames as -vnc $display,x509=$dir |
| 1411 | |
| 1412 | @item x509-key-file=<file> |
Markus Armbruster | f9cfd65 | 2015-06-15 14:35:59 +0200 | [diff] [blame] | 1413 | @itemx x509-key-password=<file> |
| 1414 | @itemx x509-cert-file=<file> |
| 1415 | @itemx x509-cacert-file=<file> |
| 1416 | @itemx x509-dh-key-file=<file> |
Gerd Hoffmann | c448e85 | 2010-03-11 11:13:32 -0300 | [diff] [blame] | 1417 | The x509 file names can also be configured individually. |
| 1418 | |
| 1419 | @item tls-ciphers=<list> |
| 1420 | Specify which ciphers to use. |
| 1421 | |
Alon Levy | d70d6b3 | 2011-12-20 13:05:18 +0200 | [diff] [blame] | 1422 | @item tls-channel=[main|display|cursor|inputs|record|playback] |
Markus Armbruster | f9cfd65 | 2015-06-15 14:35:59 +0200 | [diff] [blame] | 1423 | @itemx plaintext-channel=[main|display|cursor|inputs|record|playback] |
Gerd Hoffmann | 17b6dea | 2010-08-27 14:09:56 +0200 | [diff] [blame] | 1424 | Force specific channel to be used with or without TLS encryption. The |
| 1425 | options can be specified multiple times to configure multiple |
| 1426 | channels. The special name "default" can be used to set the default |
| 1427 | mode. For channels which are not explicitly forced into one mode the |
| 1428 | spice client is allowed to pick tls/plaintext as he pleases. |
| 1429 | |
Yonit Halperin | 9f04e09 | 2010-07-14 13:26:34 +0300 | [diff] [blame] | 1430 | @item image-compression=[auto_glz|auto_lz|quic|glz|lz|off] |
| 1431 | Configure image compression (lossless). |
| 1432 | Default is auto_glz. |
| 1433 | |
| 1434 | @item jpeg-wan-compression=[auto|never|always] |
Markus Armbruster | f9cfd65 | 2015-06-15 14:35:59 +0200 | [diff] [blame] | 1435 | @itemx zlib-glz-wan-compression=[auto|never|always] |
Yonit Halperin | 9f04e09 | 2010-07-14 13:26:34 +0300 | [diff] [blame] | 1436 | Configure wan image compression (lossy for slow links). |
| 1437 | Default is auto. |
| 1438 | |
Gerd Hoffmann | 84a23f2 | 2010-08-30 16:36:53 +0200 | [diff] [blame] | 1439 | @item streaming-video=[off|all|filter] |
Li Zhijian | 93ca519 | 2016-08-01 12:06:59 +0800 | [diff] [blame] | 1440 | Configure video stream detection. Default is off. |
Gerd Hoffmann | 84a23f2 | 2010-08-30 16:36:53 +0200 | [diff] [blame] | 1441 | |
| 1442 | @item agent-mouse=[on|off] |
| 1443 | Enable/disable passing mouse events via vdagent. Default is on. |
| 1444 | |
| 1445 | @item playback-compression=[on|off] |
| 1446 | Enable/disable audio stream compression (using celt 0.5.1). Default is on. |
| 1447 | |
Yonit Halperin | 8c95705 | 2012-08-21 11:51:59 +0300 | [diff] [blame] | 1448 | @item seamless-migration=[on|off] |
| 1449 | Enable/disable spice seamless migration. Default is off. |
| 1450 | |
Gerd Hoffmann | 474114b | 2015-10-13 15:39:34 +0200 | [diff] [blame] | 1451 | @item gl=[on|off] |
| 1452 | Enable/disable OpenGL context. Default is off. |
| 1453 | |
Marc-André Lureau | 7b52550 | 2017-02-12 15:21:18 +0400 | [diff] [blame] | 1454 | @item rendernode=<file> |
| 1455 | DRM render node for OpenGL rendering. If not specified, it will pick |
| 1456 | the first available. (Since 2.9) |
| 1457 | |
Gerd Hoffmann | 29b0040 | 2010-03-11 11:13:27 -0300 | [diff] [blame] | 1458 | @end table |
| 1459 | ETEXI |
| 1460 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1461 | DEF("portrait", 0, QEMU_OPTION_portrait, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 1462 | "-portrait rotate graphical output 90 deg left (only PXA LCD)\n", |
| 1463 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1464 | STEXI |
| 1465 | @item -portrait |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 1466 | @findex -portrait |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1467 | Rotate graphical output 90 deg left (only PXA LCD). |
| 1468 | ETEXI |
| 1469 | |
Vasily Khoruzhick | 9312805 | 2011-06-17 13:04:36 +0300 | [diff] [blame] | 1470 | DEF("rotate", HAS_ARG, QEMU_OPTION_rotate, |
| 1471 | "-rotate <deg> rotate graphical output some deg left (only PXA LCD)\n", |
| 1472 | QEMU_ARCH_ALL) |
| 1473 | STEXI |
Markus Armbruster | 6265c43 | 2013-02-13 19:49:39 +0100 | [diff] [blame] | 1474 | @item -rotate @var{deg} |
Vasily Khoruzhick | 9312805 | 2011-06-17 13:04:36 +0300 | [diff] [blame] | 1475 | @findex -rotate |
| 1476 | Rotate graphical output some deg left (only PXA LCD). |
| 1477 | ETEXI |
| 1478 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1479 | DEF("vga", HAS_ARG, QEMU_OPTION_vga, |
Gerd Hoffmann | a94f0c5 | 2014-09-10 14:28:48 +0200 | [diff] [blame] | 1480 | "-vga [std|cirrus|vmware|qxl|xenfb|tcx|cg3|virtio|none]\n" |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 1481 | " select video card type\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1482 | STEXI |
malc | e4558dc | 2012-08-27 18:33:21 +0400 | [diff] [blame] | 1483 | @item -vga @var{type} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 1484 | @findex -vga |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1485 | Select type of VGA card to emulate. Valid values for @var{type} are |
Kevin Wolf | b3f046c | 2009-10-09 10:58:35 +0200 | [diff] [blame] | 1486 | @table @option |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1487 | @item cirrus |
| 1488 | Cirrus Logic GD5446 Video card. All Windows versions starting from |
| 1489 | Windows 95 should recognize and use this graphic card. For optimal |
| 1490 | performances, use 16 bit color depth in the guest and the host OS. |
Alberto Garcia | 41eeb0e | 2017-01-27 11:41:54 +0200 | [diff] [blame] | 1491 | (This card was the default before QEMU 2.2) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1492 | @item std |
| 1493 | Standard VGA card with Bochs VBE extensions. If your guest OS |
| 1494 | supports the VESA 2.0 VBE extensions (e.g. Windows XP) and if you want |
| 1495 | to use high resolution modes (>= 1280x1024x16) then you should use |
Alberto Garcia | 41eeb0e | 2017-01-27 11:41:54 +0200 | [diff] [blame] | 1496 | this option. (This card is the default since QEMU 2.2) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1497 | @item vmware |
| 1498 | VMWare SVGA-II compatible adapter. Use it if you have sufficiently |
| 1499 | recent XFree86/XOrg server or Windows guest with a driver for this |
| 1500 | card. |
Gerd Hoffmann | a19cbfb | 2010-04-27 11:50:11 +0200 | [diff] [blame] | 1501 | @item qxl |
| 1502 | QXL paravirtual graphic card. It is VGA compatible (including VESA |
| 1503 | 2.0 VBE support). Works best with qxl guest drivers installed though. |
| 1504 | Recommended choice when using the spice protocol. |
Mark Cave-Ayland | 3363278 | 2014-03-17 21:46:25 +0000 | [diff] [blame] | 1505 | @item tcx |
| 1506 | (sun4m only) Sun TCX framebuffer. This is the default framebuffer for |
| 1507 | sun4m machines and offers both 8-bit and 24-bit colour depths at a |
| 1508 | fixed resolution of 1024x768. |
| 1509 | @item cg3 |
| 1510 | (sun4m only) Sun cgthree framebuffer. This is a simple 8-bit framebuffer |
| 1511 | for sun4m machines available in both 1024x768 (OpenBIOS) and 1152x900 (OBP) |
| 1512 | resolutions aimed at people wishing to run older Solaris versions. |
Gerd Hoffmann | a94f0c5 | 2014-09-10 14:28:48 +0200 | [diff] [blame] | 1513 | @item virtio |
| 1514 | Virtio VGA card. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1515 | @item none |
| 1516 | Disable VGA card. |
| 1517 | @end table |
| 1518 | ETEXI |
| 1519 | |
| 1520 | DEF("full-screen", 0, QEMU_OPTION_full_screen, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 1521 | "-full-screen start in full screen\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1522 | STEXI |
| 1523 | @item -full-screen |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 1524 | @findex -full-screen |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1525 | Start in full screen. |
| 1526 | ETEXI |
| 1527 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1528 | DEF("g", 1, QEMU_OPTION_g , |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 1529 | "-g WxH[xDEPTH] Set the initial graphical resolution and depth\n", |
| 1530 | QEMU_ARCH_PPC | QEMU_ARCH_SPARC) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1531 | STEXI |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 1532 | @item -g @var{width}x@var{height}[x@var{depth}] |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 1533 | @findex -g |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 1534 | Set the initial graphical resolution and depth (PPC, SPARC only). |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1535 | ETEXI |
| 1536 | |
| 1537 | DEF("vnc", HAS_ARG, QEMU_OPTION_vnc , |
Robert Ho | f04ec5a | 2016-07-26 18:17:11 +0800 | [diff] [blame] | 1538 | "-vnc <display> shorthand for -display vnc=<display>\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1539 | STEXI |
| 1540 | @item -vnc @var{display}[,@var{option}[,@var{option}[,...]]] |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 1541 | @findex -vnc |
Colin Lord | dc0a3e4 | 2016-08-12 15:30:48 -0400 | [diff] [blame] | 1542 | Normally, if QEMU is compiled with graphical window support, it displays |
| 1543 | output such as guest graphics, guest console, and the QEMU monitor in a |
| 1544 | window. With this option, you can have QEMU listen on VNC display |
| 1545 | @var{display} and redirect the VGA display over the VNC session. It is |
| 1546 | very useful to enable the usb tablet device when using this option |
Thomas Huth | a358a3a | 2017-05-19 08:35:16 +0200 | [diff] [blame] | 1547 | (option @option{-device usb-tablet}). When using the VNC display, you |
Colin Lord | dc0a3e4 | 2016-08-12 15:30:48 -0400 | [diff] [blame] | 1548 | must use the @option{-k} parameter to set the keyboard layout if you are |
| 1549 | not using en-us. Valid syntax for the @var{display} is |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1550 | |
Kevin Wolf | b3f046c | 2009-10-09 10:58:35 +0200 | [diff] [blame] | 1551 | @table @option |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1552 | |
Robert Ho | 99a9a52 | 2016-05-31 15:03:09 +0800 | [diff] [blame] | 1553 | @item to=@var{L} |
| 1554 | |
| 1555 | With this option, QEMU will try next available VNC @var{display}s, until the |
| 1556 | number @var{L}, if the origianlly defined "-vnc @var{display}" is not |
| 1557 | available, e.g. port 5900+@var{display} is already used by another |
| 1558 | application. By default, to=0. |
| 1559 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1560 | @item @var{host}:@var{d} |
| 1561 | |
| 1562 | TCP connections will only be allowed from @var{host} on display @var{d}. |
| 1563 | By convention the TCP port is 5900+@var{d}. Optionally, @var{host} can |
| 1564 | be omitted in which case the server will accept connections from any host. |
| 1565 | |
Kevin Wolf | 4e257e5 | 2009-10-09 10:58:36 +0200 | [diff] [blame] | 1566 | @item unix:@var{path} |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1567 | |
| 1568 | Connections will be allowed over UNIX domain sockets where @var{path} is the |
| 1569 | location of a unix socket to listen for connections on. |
| 1570 | |
| 1571 | @item none |
| 1572 | |
| 1573 | VNC is initialized but not started. The monitor @code{change} command |
| 1574 | can be used to later start the VNC server. |
| 1575 | |
| 1576 | @end table |
| 1577 | |
| 1578 | Following the @var{display} value there may be one or more @var{option} flags |
| 1579 | separated by commas. Valid options are |
| 1580 | |
Kevin Wolf | b3f046c | 2009-10-09 10:58:35 +0200 | [diff] [blame] | 1581 | @table @option |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1582 | |
| 1583 | @item reverse |
| 1584 | |
| 1585 | Connect to a listening VNC client via a ``reverse'' connection. The |
| 1586 | client is specified by the @var{display}. For reverse network |
| 1587 | connections (@var{host}:@var{d},@code{reverse}), the @var{d} argument |
| 1588 | is a TCP port number, not a display number. |
| 1589 | |
Tim Hardeck | 7536ee4 | 2013-01-21 11:04:44 +0100 | [diff] [blame] | 1590 | @item websocket |
| 1591 | |
| 1592 | Opens an additional TCP listening port dedicated to VNC Websocket connections. |
Daniel P. Berrange | 275e0d6 | 2017-02-03 12:06:45 +0000 | [diff] [blame] | 1593 | If a bare @var{websocket} option is given, the Websocket port is |
| 1594 | 5700+@var{display}. An alternative port can be specified with the |
| 1595 | syntax @code{websocket}=@var{port}. |
| 1596 | |
| 1597 | If @var{host} is specified connections will only be allowed from this host. |
| 1598 | It is possible to control the websocket listen address independently, using |
| 1599 | the syntax @code{websocket}=@var{host}:@var{port}. |
| 1600 | |
Daniel P. Berrange | 3e305e4 | 2015-08-06 14:39:32 +0100 | [diff] [blame] | 1601 | If no TLS credentials are provided, the websocket connection runs in |
| 1602 | unencrypted mode. If TLS credentials are provided, the websocket connection |
| 1603 | requires encrypted client connections. |
Tim Hardeck | 7536ee4 | 2013-01-21 11:04:44 +0100 | [diff] [blame] | 1604 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1605 | @item password |
| 1606 | |
| 1607 | Require that password based authentication is used for client connections. |
Michal Novotny | 86ee5bc | 2012-07-16 15:54:38 +0200 | [diff] [blame] | 1608 | |
| 1609 | The password must be set separately using the @code{set_password} command in |
| 1610 | the @ref{pcsys_monitor}. The syntax to change your password is: |
| 1611 | @code{set_password <protocol> <password>} where <protocol> could be either |
| 1612 | "vnc" or "spice". |
| 1613 | |
| 1614 | If you would like to change <protocol> password expiration, you should use |
| 1615 | @code{expire_password <protocol> <expiration-time>} where expiration time could |
| 1616 | be one of the following options: now, never, +seconds or UNIX time of |
| 1617 | expiration, e.g. +60 to make password expire in 60 seconds, or 1335196800 |
| 1618 | to make password expire on "Mon Apr 23 12:00:00 EDT 2012" (UNIX time for this |
| 1619 | date and time). |
| 1620 | |
| 1621 | You can also use keywords "now" or "never" for the expiration time to |
| 1622 | allow <protocol> password to expire immediately or never expire. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1623 | |
Daniel P. Berrange | 3e305e4 | 2015-08-06 14:39:32 +0100 | [diff] [blame] | 1624 | @item tls-creds=@var{ID} |
| 1625 | |
| 1626 | Provides the ID of a set of TLS credentials to use to secure the |
| 1627 | VNC server. They will apply to both the normal VNC server socket |
| 1628 | and the websocket socket (if enabled). Setting TLS credentials |
| 1629 | will cause the VNC server socket to enable the VeNCrypt auth |
| 1630 | mechanism. The credentials should have been previously created |
| 1631 | using the @option{-object tls-creds} argument. |
| 1632 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1633 | @item sasl |
| 1634 | |
| 1635 | Require that the client use SASL to authenticate with the VNC server. |
| 1636 | The exact choice of authentication method used is controlled from the |
| 1637 | system / user's SASL configuration file for the 'qemu' service. This |
| 1638 | is typically found in /etc/sasl2/qemu.conf. If running QEMU as an |
| 1639 | unprivileged user, an environment variable SASL_CONF_PATH can be used |
| 1640 | to make it search alternate locations for the service config. |
| 1641 | While some SASL auth methods can also provide data encryption (eg GSSAPI), |
| 1642 | it is recommended that SASL always be combined with the 'tls' and |
| 1643 | 'x509' settings to enable use of SSL and server certificates. This |
| 1644 | ensures a data encryption preventing compromise of authentication |
| 1645 | credentials. See the @ref{vnc_security} section for details on using |
| 1646 | SASL authentication. |
| 1647 | |
| 1648 | @item acl |
| 1649 | |
| 1650 | Turn on access control lists for checking of the x509 client certificate |
| 1651 | and SASL party. For x509 certs, the ACL check is made against the |
| 1652 | certificate's distinguished name. This is something that looks like |
| 1653 | @code{C=GB,O=ACME,L=Boston,CN=bob}. For SASL party, the ACL check is |
| 1654 | made against the username, which depending on the SASL plugin, may |
| 1655 | include a realm component, eg @code{bob} or @code{bob@@EXAMPLE.COM}. |
| 1656 | When the @option{acl} flag is set, the initial access list will be |
| 1657 | empty, with a @code{deny} policy. Thus no one will be allowed to |
| 1658 | use the VNC server until the ACLs have been loaded. This can be |
| 1659 | achieved using the @code{acl} monitor command. |
| 1660 | |
Corentin Chary | 6f9c78c | 2010-07-07 20:57:51 +0200 | [diff] [blame] | 1661 | @item lossy |
| 1662 | |
| 1663 | Enable lossy compression methods (gradient, JPEG, ...). If this |
| 1664 | option is set, VNC client may receive lossy framebuffer updates |
| 1665 | depending on its encoding settings. Enabling this option can save |
| 1666 | a lot of bandwidth at the expense of quality. |
| 1667 | |
Corentin Chary | 80e0c8c | 2011-02-04 09:06:08 +0100 | [diff] [blame] | 1668 | @item non-adaptive |
| 1669 | |
| 1670 | Disable adaptive encodings. Adaptive encodings are enabled by default. |
| 1671 | An adaptive encoding will try to detect frequently updated screen regions, |
| 1672 | and send updates in these regions using a lossy encoding (like JPEG). |
Stefan Weil | 61cc870 | 2011-04-13 22:45:22 +0200 | [diff] [blame] | 1673 | This can be really helpful to save bandwidth when playing videos. Disabling |
Michael Tokarev | 9d85d55 | 2014-04-07 13:34:58 +0400 | [diff] [blame] | 1674 | adaptive encodings restores the original static behavior of encodings |
Corentin Chary | 80e0c8c | 2011-02-04 09:06:08 +0100 | [diff] [blame] | 1675 | like Tight. |
| 1676 | |
Gerd Hoffmann | 8cf3648 | 2011-11-24 18:10:49 +0100 | [diff] [blame] | 1677 | @item share=[allow-exclusive|force-shared|ignore] |
| 1678 | |
| 1679 | Set display sharing policy. 'allow-exclusive' allows clients to ask |
| 1680 | for exclusive access. As suggested by the rfb spec this is |
| 1681 | implemented by dropping other connections. Connecting multiple |
| 1682 | clients in parallel requires all clients asking for a shared session |
| 1683 | (vncviewer: -shared switch). This is the default. 'force-shared' |
| 1684 | disables exclusive client access. Useful for shared desktop sessions, |
| 1685 | where you don't want someone forgetting specify -shared disconnect |
| 1686 | everybody else. 'ignore' completely ignores the shared flag and |
| 1687 | allows everybody connect unconditionally. Doesn't conform to the rfb |
Stefan Weil | b65ee4f | 2012-05-11 22:25:50 +0200 | [diff] [blame] | 1688 | spec but is traditional QEMU behavior. |
Gerd Hoffmann | 8cf3648 | 2011-11-24 18:10:49 +0100 | [diff] [blame] | 1689 | |
Gerd Hoffmann | c5ce833 | 2016-06-01 08:22:30 +0200 | [diff] [blame] | 1690 | @item key-delay-ms |
| 1691 | |
| 1692 | Set keyboard delay, for key down and key up events, in milliseconds. |
Alexander Graf | d3b0db6 | 2017-07-12 14:43:45 +0200 | [diff] [blame] | 1693 | Default is 10. Keyboards are low-bandwidth devices, so this slowdown |
Gerd Hoffmann | c5ce833 | 2016-06-01 08:22:30 +0200 | [diff] [blame] | 1694 | can help the device and guest to keep up and not lose events in case |
| 1695 | events are arriving in bulk. Possible causes for the latter are flaky |
| 1696 | network connections, or scripts for automated testing. |
| 1697 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1698 | @end table |
| 1699 | ETEXI |
| 1700 | |
| 1701 | STEXI |
| 1702 | @end table |
| 1703 | ETEXI |
Michael Ellerman | a3adb7a | 2011-12-19 17:19:31 +1100 | [diff] [blame] | 1704 | ARCHHEADING(, QEMU_ARCH_I386) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1705 | |
Markus Armbruster | de6b4f9 | 2017-10-02 16:03:00 +0200 | [diff] [blame] | 1706 | ARCHHEADING(i386 target only:, QEMU_ARCH_I386) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1707 | STEXI |
| 1708 | @table @option |
| 1709 | ETEXI |
| 1710 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1711 | DEF("win2k-hack", 0, QEMU_OPTION_win2k_hack, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 1712 | "-win2k-hack use it when installing Windows 2000 to avoid a disk full bug\n", |
| 1713 | QEMU_ARCH_I386) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1714 | STEXI |
| 1715 | @item -win2k-hack |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 1716 | @findex -win2k-hack |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1717 | Use it when installing Windows 2000 to avoid a disk full bug. After |
| 1718 | Windows 2000 is installed, you no longer need this option (this option |
| 1719 | slows down the IDE transfers). |
| 1720 | ETEXI |
| 1721 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1722 | DEF("no-fd-bootchk", 0, QEMU_OPTION_no_fd_bootchk, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 1723 | "-no-fd-bootchk disable boot signature checking for floppy disks\n", |
| 1724 | QEMU_ARCH_I386) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1725 | STEXI |
| 1726 | @item -no-fd-bootchk |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 1727 | @findex -no-fd-bootchk |
Markus Armbruster | 4eda32f | 2013-06-14 13:15:06 +0200 | [diff] [blame] | 1728 | Disable boot signature checking for floppy disks in BIOS. May |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1729 | be needed to boot from old floppy disks. |
| 1730 | ETEXI |
| 1731 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1732 | DEF("no-acpi", 0, QEMU_OPTION_no_acpi, |
Shannon Zhao | f5d8c8c | 2015-05-29 11:28:54 +0100 | [diff] [blame] | 1733 | "-no-acpi disable ACPI\n", QEMU_ARCH_I386 | QEMU_ARCH_ARM) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1734 | STEXI |
| 1735 | @item -no-acpi |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 1736 | @findex -no-acpi |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1737 | Disable ACPI (Advanced Configuration and Power Interface) support. Use |
| 1738 | it if your guest OS complains about ACPI problems (PC target machine |
| 1739 | only). |
| 1740 | ETEXI |
| 1741 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1742 | DEF("no-hpet", 0, QEMU_OPTION_no_hpet, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 1743 | "-no-hpet disable HPET\n", QEMU_ARCH_I386) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1744 | STEXI |
| 1745 | @item -no-hpet |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 1746 | @findex -no-hpet |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1747 | Disable HPET support. |
| 1748 | ETEXI |
| 1749 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1750 | DEF("acpitable", HAS_ARG, QEMU_OPTION_acpitable, |
Michael Tokarev | 104bf02 | 2011-05-12 18:44:17 +0400 | [diff] [blame] | 1751 | "-acpitable [sig=str][,rev=n][,oem_id=str][,oem_table_id=str][,oem_rev=n][,asl_compiler_id=str][,asl_compiler_rev=n][,{data|file}=file1[:file2]...]\n" |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 1752 | " ACPI table description\n", QEMU_ARCH_I386) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1753 | STEXI |
| 1754 | @item -acpitable [sig=@var{str}][,rev=@var{n}][,oem_id=@var{str}][,oem_table_id=@var{str}][,oem_rev=@var{n}] [,asl_compiler_id=@var{str}][,asl_compiler_rev=@var{n}][,data=@var{file1}[:@var{file2}]...] |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 1755 | @findex -acpitable |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1756 | Add ACPI table with specified header fields and context from specified files. |
Michael Tokarev | 104bf02 | 2011-05-12 18:44:17 +0400 | [diff] [blame] | 1757 | For file=, take whole ACPI table from the specified files, including all |
| 1758 | ACPI headers (possible overridden by other options). |
| 1759 | For data=, only data |
| 1760 | portion of the table is used, all header information is specified in the |
| 1761 | command line. |
Laszlo Ersek | ae12374 | 2016-01-18 15:12:13 +0100 | [diff] [blame] | 1762 | If a SLIC table is supplied to QEMU, then the SLIC's oem_id and oem_table_id |
| 1763 | fields will override the same in the RSDT and the FADT (a.k.a. FACP), in order |
| 1764 | to ensure the field matches required by the Microsoft SLIC spec and the ACPI |
| 1765 | spec. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1766 | ETEXI |
| 1767 | |
aliguori | b6f6e3d | 2009-04-17 18:59:56 +0000 | [diff] [blame] | 1768 | DEF("smbios", HAS_ARG, QEMU_OPTION_smbios, |
| 1769 | "-smbios file=binary\n" |
Bruce Rogers | ca1a8a0 | 2010-01-06 12:33:57 -0700 | [diff] [blame] | 1770 | " load SMBIOS entry from binary file\n" |
Gabriel L. Somlo | b155eb1 | 2015-02-05 11:45:30 -0500 | [diff] [blame] | 1771 | "-smbios type=0[,vendor=str][,version=str][,date=str][,release=%d.%d]\n" |
| 1772 | " [,uefi=on|off]\n" |
Bruce Rogers | ca1a8a0 | 2010-01-06 12:33:57 -0700 | [diff] [blame] | 1773 | " specify SMBIOS type 0 fields\n" |
aliguori | b6f6e3d | 2009-04-17 18:59:56 +0000 | [diff] [blame] | 1774 | "-smbios type=1[,manufacturer=str][,product=str][,version=str][,serial=str]\n" |
| 1775 | " [,uuid=uuid][,sku=str][,family=str]\n" |
Gabriel L. Somlo | b155eb1 | 2015-02-05 11:45:30 -0500 | [diff] [blame] | 1776 | " specify SMBIOS type 1 fields\n" |
| 1777 | "-smbios type=2[,manufacturer=str][,product=str][,version=str][,serial=str]\n" |
| 1778 | " [,asset=str][,location=str]\n" |
| 1779 | " specify SMBIOS type 2 fields\n" |
| 1780 | "-smbios type=3[,manufacturer=str][,version=str][,serial=str][,asset=str]\n" |
| 1781 | " [,sku=str]\n" |
| 1782 | " specify SMBIOS type 3 fields\n" |
| 1783 | "-smbios type=4[,sock_pfx=str][,manufacturer=str][,version=str][,serial=str]\n" |
| 1784 | " [,asset=str][,part=str]\n" |
| 1785 | " specify SMBIOS type 4 fields\n" |
| 1786 | "-smbios type=17[,loc_pfx=str][,bank=str][,manufacturer=str][,serial=str]\n" |
Gabriel L. Somlo | 3ebd6cc | 2015-03-11 13:58:01 -0400 | [diff] [blame] | 1787 | " [,asset=str][,part=str][,speed=%d]\n" |
Gabriel L. Somlo | b155eb1 | 2015-02-05 11:45:30 -0500 | [diff] [blame] | 1788 | " specify SMBIOS type 17 fields\n", |
Wei Huang | c30e156 | 2015-09-07 10:39:29 +0100 | [diff] [blame] | 1789 | QEMU_ARCH_I386 | QEMU_ARCH_ARM) |
aliguori | b6f6e3d | 2009-04-17 18:59:56 +0000 | [diff] [blame] | 1790 | STEXI |
| 1791 | @item -smbios file=@var{binary} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 1792 | @findex -smbios |
aliguori | b6f6e3d | 2009-04-17 18:59:56 +0000 | [diff] [blame] | 1793 | Load SMBIOS entry from binary file. |
| 1794 | |
Gabriel L. Somlo | 8435184 | 2014-05-19 10:09:54 -0400 | [diff] [blame] | 1795 | @item -smbios type=0[,vendor=@var{str}][,version=@var{str}][,date=@var{str}][,release=@var{%d.%d}][,uefi=on|off] |
aliguori | b6f6e3d | 2009-04-17 18:59:56 +0000 | [diff] [blame] | 1796 | Specify SMBIOS type 0 fields |
| 1797 | |
Gabriel L. Somlo | b155eb1 | 2015-02-05 11:45:30 -0500 | [diff] [blame] | 1798 | @item -smbios type=1[,manufacturer=@var{str}][,product=@var{str}][,version=@var{str}][,serial=@var{str}][,uuid=@var{uuid}][,sku=@var{str}][,family=@var{str}] |
aliguori | b6f6e3d | 2009-04-17 18:59:56 +0000 | [diff] [blame] | 1799 | Specify SMBIOS type 1 fields |
Gabriel L. Somlo | b155eb1 | 2015-02-05 11:45:30 -0500 | [diff] [blame] | 1800 | |
| 1801 | @item -smbios type=2[,manufacturer=@var{str}][,product=@var{str}][,version=@var{str}][,serial=@var{str}][,asset=@var{str}][,location=@var{str}][,family=@var{str}] |
| 1802 | Specify SMBIOS type 2 fields |
| 1803 | |
| 1804 | @item -smbios type=3[,manufacturer=@var{str}][,version=@var{str}][,serial=@var{str}][,asset=@var{str}][,sku=@var{str}] |
| 1805 | Specify SMBIOS type 3 fields |
| 1806 | |
| 1807 | @item -smbios type=4[,sock_pfx=@var{str}][,manufacturer=@var{str}][,version=@var{str}][,serial=@var{str}][,asset=@var{str}][,part=@var{str}] |
| 1808 | Specify SMBIOS type 4 fields |
| 1809 | |
Gabriel L. Somlo | 3ebd6cc | 2015-03-11 13:58:01 -0400 | [diff] [blame] | 1810 | @item -smbios type=17[,loc_pfx=@var{str}][,bank=@var{str}][,manufacturer=@var{str}][,serial=@var{str}][,asset=@var{str}][,part=@var{str}][,speed=@var{%d}] |
Gabriel L. Somlo | b155eb1 | 2015-02-05 11:45:30 -0500 | [diff] [blame] | 1811 | Specify SMBIOS type 17 fields |
aliguori | b6f6e3d | 2009-04-17 18:59:56 +0000 | [diff] [blame] | 1812 | ETEXI |
| 1813 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1814 | STEXI |
| 1815 | @end table |
| 1816 | ETEXI |
Markus Armbruster | c70a01e | 2013-02-13 19:49:40 +0100 | [diff] [blame] | 1817 | DEFHEADING() |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1818 | |
Markus Armbruster | de6b4f9 | 2017-10-02 16:03:00 +0200 | [diff] [blame] | 1819 | DEFHEADING(Network options:) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1820 | STEXI |
| 1821 | @table @option |
| 1822 | ETEXI |
| 1823 | |
Thomas Huth | 6a8b4a5 | 2015-05-15 16:58:24 +0200 | [diff] [blame] | 1824 | DEF("netdev", HAS_ARG, QEMU_OPTION_netdev, |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1825 | #ifdef CONFIG_SLIRP |
Samuel Thibault | 0b11c03 | 2016-03-20 12:29:54 +0100 | [diff] [blame] | 1826 | "-netdev user,id=str[,ipv4[=on|off]][,net=addr[/mask]][,host=addr]\n" |
| 1827 | " [,ipv6[=on|off]][,ipv6-net=addr[/int]][,ipv6-host=addr]\n" |
| 1828 | " [,restrict=on|off][,hostname=host][,dhcpstart=addr]\n" |
Benjamin Drung | f18d137 | 2018-02-27 17:06:01 +0100 | [diff] [blame] | 1829 | " [,dns=addr][,ipv6-dns=addr][,dnssearch=domain][,domainname=domain]\n" |
Fam Zheng | 0fca92b | 2018-09-14 15:26:16 +0800 | [diff] [blame] | 1830 | " [,tftp=dir][,tftp-server-name=name][,bootfile=f][,hostfwd=rule][,guestfwd=rule]" |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 1831 | #ifndef _WIN32 |
Jan Kiszka | c92ef6a | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 1832 | "[,smb=dir[,smbserver=addr]]\n" |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 1833 | #endif |
Thomas Huth | 6a8b4a5 | 2015-05-15 16:58:24 +0200 | [diff] [blame] | 1834 | " configure a user mode network backend with ID 'str',\n" |
| 1835 | " its DHCP server and optional services\n" |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1836 | #endif |
| 1837 | #ifdef _WIN32 |
Thomas Huth | 6a8b4a5 | 2015-05-15 16:58:24 +0200 | [diff] [blame] | 1838 | "-netdev tap,id=str,ifname=name\n" |
| 1839 | " configure a host TAP network backend with ID 'str'\n" |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1840 | #else |
Thomas Huth | 6a8b4a5 | 2015-05-15 16:58:24 +0200 | [diff] [blame] | 1841 | "-netdev tap,id=str[,fd=h][,fds=x:y:...:z][,ifname=name][,script=file][,downscript=dfile]\n" |
Alexey Kardashevskiy | 584613e | 2016-09-13 17:11:54 +1000 | [diff] [blame] | 1842 | " [,br=bridge][,helper=helper][,sndbuf=nbytes][,vnet_hdr=on|off][,vhost=on|off]\n" |
Thomas Huth | 6a8b4a5 | 2015-05-15 16:58:24 +0200 | [diff] [blame] | 1843 | " [,vhostfd=h][,vhostfds=x:y:...:z][,vhostforce=on|off][,queues=n]\n" |
Jason Wang | 69e87b3 | 2016-07-06 09:57:55 +0800 | [diff] [blame] | 1844 | " [,poll-us=n]\n" |
Thomas Huth | 6a8b4a5 | 2015-05-15 16:58:24 +0200 | [diff] [blame] | 1845 | " configure a host TAP network backend with ID 'str'\n" |
Alexey Kardashevskiy | 584613e | 2016-09-13 17:11:54 +1000 | [diff] [blame] | 1846 | " connected to a bridge (default=" DEFAULT_BRIDGE_INTERFACE ")\n" |
Corey Bryant | a7c36ee | 2012-01-26 09:42:27 -0500 | [diff] [blame] | 1847 | " use network scripts 'file' (default=" DEFAULT_NETWORK_SCRIPT ")\n" |
| 1848 | " to configure it and 'dfile' (default=" DEFAULT_NETWORK_DOWN_SCRIPT ")\n" |
| 1849 | " to deconfigure it\n" |
Bruce Rogers | ca1a8a0 | 2010-01-06 12:33:57 -0700 | [diff] [blame] | 1850 | " use '[down]script=no' to disable script execution\n" |
Corey Bryant | a7c36ee | 2012-01-26 09:42:27 -0500 | [diff] [blame] | 1851 | " use network helper 'helper' (default=" DEFAULT_BRIDGE_HELPER ") to\n" |
| 1852 | " configure it\n" |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1853 | " use 'fd=h' to connect to an already opened TAP interface\n" |
Jason Wang | 2ca81ba | 2013-02-20 18:04:01 +0800 | [diff] [blame] | 1854 | " use 'fds=x:y:...:z' to connect to already opened multiqueue capable TAP interfaces\n" |
Bruce Rogers | ca1a8a0 | 2010-01-06 12:33:57 -0700 | [diff] [blame] | 1855 | " use 'sndbuf=nbytes' to limit the size of the send buffer (the\n" |
Michael S. Tsirkin | f157ed2 | 2011-02-01 14:25:40 +0200 | [diff] [blame] | 1856 | " default is disabled 'sndbuf=0' to enable flow control set 'sndbuf=1048576')\n" |
Bruce Rogers | ca1a8a0 | 2010-01-06 12:33:57 -0700 | [diff] [blame] | 1857 | " use vnet_hdr=off to avoid enabling the IFF_VNET_HDR tap flag\n" |
| 1858 | " use vnet_hdr=on to make the lack of IFF_VNET_HDR support an error condition\n" |
Michael S. Tsirkin | 82b0d80 | 2010-03-17 13:08:24 +0200 | [diff] [blame] | 1859 | " use vhost=on to enable experimental in kernel accelerator\n" |
mst@redhat.com | 5430a28 | 2011-02-01 22:13:42 +0200 | [diff] [blame] | 1860 | " (only has effect for virtio guests which use MSIX)\n" |
| 1861 | " use vhostforce=on to force vhost on for non-MSIX virtio guests\n" |
Michael S. Tsirkin | 82b0d80 | 2010-03-17 13:08:24 +0200 | [diff] [blame] | 1862 | " use 'vhostfd=h' to connect to an already opened vhost net device\n" |
Jason Wang | 2ca81ba | 2013-02-20 18:04:01 +0800 | [diff] [blame] | 1863 | " use 'vhostfds=x:y:...:z to connect to multiple already opened vhost net devices\n" |
Jason Wang | ec39601 | 2013-02-22 22:57:52 +0800 | [diff] [blame] | 1864 | " use 'queues=n' to specify the number of queues to be created for multiqueue TAP\n" |
Jason Wang | 69e87b3 | 2016-07-06 09:57:55 +0800 | [diff] [blame] | 1865 | " use 'poll-us=n' to speciy the maximum number of microseconds that could be\n" |
| 1866 | " spent on busy polling for vhost net\n" |
Thomas Huth | 6a8b4a5 | 2015-05-15 16:58:24 +0200 | [diff] [blame] | 1867 | "-netdev bridge,id=str[,br=bridge][,helper=helper]\n" |
| 1868 | " configure a host TAP network backend with ID 'str' that is\n" |
| 1869 | " connected to a bridge (default=" DEFAULT_BRIDGE_INTERFACE ")\n" |
| 1870 | " using the program 'helper (default=" DEFAULT_BRIDGE_HELPER ")\n" |
Mark McLoughlin | 0df0ff6 | 2009-06-18 18:21:34 +0100 | [diff] [blame] | 1871 | #endif |
Anton Ivanov | 3fb69aa | 2014-06-20 10:34:41 +0100 | [diff] [blame] | 1872 | #ifdef __linux__ |
Thomas Huth | 6a8b4a5 | 2015-05-15 16:58:24 +0200 | [diff] [blame] | 1873 | "-netdev l2tpv3,id=str,src=srcaddr,dst=dstaddr[,srcport=srcport][,dstport=dstport]\n" |
| 1874 | " [,rxsession=rxsession],txsession=txsession[,ipv6=on/off][,udp=on/off]\n" |
| 1875 | " [,cookie64=on/off][,counter][,pincounter][,txcookie=txcookie]\n" |
| 1876 | " [,rxcookie=rxcookie][,offset=offset]\n" |
| 1877 | " configure a network backend with ID 'str' connected to\n" |
| 1878 | " an Ethernet over L2TPv3 pseudowire.\n" |
Anton Ivanov | 3fb69aa | 2014-06-20 10:34:41 +0100 | [diff] [blame] | 1879 | " Linux kernel 3.3+ as well as most routers can talk\n" |
Michael Tokarev | 2f47b40 | 2014-07-24 20:10:17 +0400 | [diff] [blame] | 1880 | " L2TPv3. This transport allows connecting a VM to a VM,\n" |
Anton Ivanov | 3fb69aa | 2014-06-20 10:34:41 +0100 | [diff] [blame] | 1881 | " VM to a router and even VM to Host. It is a nearly-universal\n" |
| 1882 | " standard (RFC3391). Note - this implementation uses static\n" |
| 1883 | " pre-configured tunnels (same as the Linux kernel).\n" |
| 1884 | " use 'src=' to specify source address\n" |
| 1885 | " use 'dst=' to specify destination address\n" |
| 1886 | " use 'udp=on' to specify udp encapsulation\n" |
Gonglei | 3952651 | 2014-08-14 14:35:48 +0800 | [diff] [blame] | 1887 | " use 'srcport=' to specify source udp port\n" |
Anton Ivanov | 3fb69aa | 2014-06-20 10:34:41 +0100 | [diff] [blame] | 1888 | " use 'dstport=' to specify destination udp port\n" |
| 1889 | " use 'ipv6=on' to force v6\n" |
| 1890 | " L2TPv3 uses cookies to prevent misconfiguration as\n" |
| 1891 | " well as a weak security measure\n" |
| 1892 | " use 'rxcookie=0x012345678' to specify a rxcookie\n" |
| 1893 | " use 'txcookie=0x012345678' to specify a txcookie\n" |
| 1894 | " use 'cookie64=on' to set cookie size to 64 bit, otherwise 32\n" |
| 1895 | " use 'counter=off' to force a 'cut-down' L2TPv3 with no counter\n" |
| 1896 | " use 'pincounter=on' to work around broken counter handling in peer\n" |
| 1897 | " use 'offset=X' to add an extra offset between header and data\n" |
| 1898 | #endif |
Thomas Huth | 6a8b4a5 | 2015-05-15 16:58:24 +0200 | [diff] [blame] | 1899 | "-netdev socket,id=str[,fd=h][,listen=[host]:port][,connect=host:port]\n" |
| 1900 | " configure a network backend to connect to another network\n" |
| 1901 | " using a socket connection\n" |
| 1902 | "-netdev socket,id=str[,fd=h][,mcast=maddr:port[,localaddr=addr]]\n" |
| 1903 | " configure a network backend to connect to a multicast maddr and port\n" |
Mike Ryan | 3a75e74 | 2010-12-01 11:16:47 -0800 | [diff] [blame] | 1904 | " use 'localaddr=addr' to specify the host address to send packets from\n" |
Thomas Huth | 6a8b4a5 | 2015-05-15 16:58:24 +0200 | [diff] [blame] | 1905 | "-netdev socket,id=str[,fd=h][,udp=host:port][,localaddr=host:port]\n" |
| 1906 | " configure a network backend to connect to another network\n" |
| 1907 | " using an UDP tunnel\n" |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1908 | #ifdef CONFIG_VDE |
Thomas Huth | 6a8b4a5 | 2015-05-15 16:58:24 +0200 | [diff] [blame] | 1909 | "-netdev vde,id=str[,sock=socketpath][,port=n][,group=groupname][,mode=octalmode]\n" |
| 1910 | " configure a network backend to connect to port 'n' of a vde switch\n" |
| 1911 | " running on host and listening for incoming connections on 'socketpath'.\n" |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1912 | " Use group 'groupname' and mode 'octalmode' to change default\n" |
| 1913 | " ownership and permissions for communication port.\n" |
| 1914 | #endif |
Vincenzo Maffione | 5895213 | 2013-11-06 11:44:06 +0100 | [diff] [blame] | 1915 | #ifdef CONFIG_NETMAP |
Thomas Huth | 6a8b4a5 | 2015-05-15 16:58:24 +0200 | [diff] [blame] | 1916 | "-netdev netmap,id=str,ifname=name[,devname=nmname]\n" |
Vincenzo Maffione | 5895213 | 2013-11-06 11:44:06 +0100 | [diff] [blame] | 1917 | " attach to the existing netmap-enabled network interface 'name', or to a\n" |
| 1918 | " VALE port (created on the fly) called 'name' ('nmname' is name of the \n" |
| 1919 | " netmap device, defaults to '/dev/netmap')\n" |
| 1920 | #endif |
Thomas Huth | 253dc14 | 2018-02-21 11:18:32 +0100 | [diff] [blame] | 1921 | #ifdef CONFIG_POSIX |
Thomas Huth | 6a8b4a5 | 2015-05-15 16:58:24 +0200 | [diff] [blame] | 1922 | "-netdev vhost-user,id=str,chardev=dev[,vhostforce=on|off]\n" |
| 1923 | " configure a vhost-user network, backed by a chardev 'dev'\n" |
Thomas Huth | 253dc14 | 2018-02-21 11:18:32 +0100 | [diff] [blame] | 1924 | #endif |
Thomas Huth | 18d65d2 | 2018-01-15 20:50:55 +0100 | [diff] [blame] | 1925 | "-netdev hubport,id=str,hubid=n[,netdev=nd]\n" |
Thomas Huth | af1a5c3 | 2018-04-30 20:02:23 +0200 | [diff] [blame] | 1926 | " configure a hub port on the hub with ID 'n'\n", QEMU_ARCH_ALL) |
Thomas Huth | 78cd6f7 | 2018-02-21 11:18:36 +0100 | [diff] [blame] | 1927 | DEF("nic", HAS_ARG, QEMU_OPTION_nic, |
BALATON Zoltan | dfaa7d5 | 2018-07-16 21:12:08 +0200 | [diff] [blame] | 1928 | "-nic [tap|bridge|" |
Thomas Huth | 78cd6f7 | 2018-02-21 11:18:36 +0100 | [diff] [blame] | 1929 | #ifdef CONFIG_SLIRP |
| 1930 | "user|" |
| 1931 | #endif |
| 1932 | #ifdef __linux__ |
| 1933 | "l2tpv3|" |
| 1934 | #endif |
| 1935 | #ifdef CONFIG_VDE |
| 1936 | "vde|" |
| 1937 | #endif |
| 1938 | #ifdef CONFIG_NETMAP |
| 1939 | "netmap|" |
| 1940 | #endif |
| 1941 | #ifdef CONFIG_POSIX |
| 1942 | "vhost-user|" |
| 1943 | #endif |
| 1944 | "socket][,option][,...][mac=macaddr]\n" |
| 1945 | " initialize an on-board / default host NIC (using MAC address\n" |
| 1946 | " macaddr) and connect it to the given host network backend\n" |
BALATON Zoltan | dfaa7d5 | 2018-07-16 21:12:08 +0200 | [diff] [blame] | 1947 | "-nic none use it alone to have zero network devices (the default is to\n" |
Thomas Huth | 78cd6f7 | 2018-02-21 11:18:36 +0100 | [diff] [blame] | 1948 | " provided a 'user' network connection)\n", |
| 1949 | QEMU_ARCH_ALL) |
Thomas Huth | 6a8b4a5 | 2015-05-15 16:58:24 +0200 | [diff] [blame] | 1950 | DEF("net", HAS_ARG, QEMU_OPTION_net, |
Thomas Huth | af1a5c3 | 2018-04-30 20:02:23 +0200 | [diff] [blame] | 1951 | "-net nic[,macaddr=mac][,model=type][,name=str][,addr=str][,vectors=v]\n" |
Thomas Huth | 0e60a82 | 2017-12-19 16:28:55 +0100 | [diff] [blame] | 1952 | " configure or create an on-board (or machine default) NIC and\n" |
Thomas Huth | af1a5c3 | 2018-04-30 20:02:23 +0200 | [diff] [blame] | 1953 | " connect it to hub 0 (please use -nic unless you need a hub)\n" |
Thomas Huth | 6a8b4a5 | 2015-05-15 16:58:24 +0200 | [diff] [blame] | 1954 | "-net [" |
Mark McLoughlin | a1ea458 | 2009-10-08 19:58:26 +0100 | [diff] [blame] | 1955 | #ifdef CONFIG_SLIRP |
| 1956 | "user|" |
| 1957 | #endif |
| 1958 | "tap|" |
Corey Bryant | a7c36ee | 2012-01-26 09:42:27 -0500 | [diff] [blame] | 1959 | "bridge|" |
Mark McLoughlin | a1ea458 | 2009-10-08 19:58:26 +0100 | [diff] [blame] | 1960 | #ifdef CONFIG_VDE |
| 1961 | "vde|" |
| 1962 | #endif |
Vincenzo Maffione | 5895213 | 2013-11-06 11:44:06 +0100 | [diff] [blame] | 1963 | #ifdef CONFIG_NETMAP |
| 1964 | "netmap|" |
| 1965 | #endif |
Thomas Huth | af1a5c3 | 2018-04-30 20:02:23 +0200 | [diff] [blame] | 1966 | "socket][,option][,option][,...]\n" |
Thomas Huth | 6a8b4a5 | 2015-05-15 16:58:24 +0200 | [diff] [blame] | 1967 | " old way to initialize a host network interface\n" |
| 1968 | " (use the -netdev option if possible instead)\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1969 | STEXI |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 1970 | @item -nic [tap|bridge|user|l2tpv3|vde|netmap|vhost-user|socket][,...][,mac=macaddr][,model=mn] |
| 1971 | @findex -nic |
| 1972 | This option is a shortcut for configuring both the on-board (default) guest |
| 1973 | NIC hardware and the host network backend in one go. The host backend options |
| 1974 | are the same as with the corresponding @option{-netdev} options below. |
| 1975 | The guest NIC model can be set with @option{model=@var{modelname}}. |
| 1976 | Use @option{model=help} to list the available device types. |
| 1977 | The hardware MAC address can be set with @option{mac=@var{macaddr}}. |
| 1978 | |
| 1979 | The following two example do exactly the same, to show how @option{-nic} can |
| 1980 | be used to shorten the command line length (note that the e1000 is the default |
| 1981 | on i386, so the @option{model=e1000} parameter could even be omitted here, too): |
| 1982 | @example |
| 1983 | qemu-system-i386 -netdev user,id=n1,ipv6=off -device e1000,netdev=n1,mac=52:54:98:76:54:32 |
| 1984 | qemu-system-i386 -nic user,ipv6=off,model=e1000,mac=52:54:98:76:54:32 |
| 1985 | @end example |
| 1986 | |
| 1987 | @item -nic none |
| 1988 | Indicate that no network devices should be configured. It is used to override |
| 1989 | the default configuration (default NIC with ``user'' host network backend) |
| 1990 | which is activated if no other networking options are provided. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1991 | |
Stefan Hajnoczi | 08d1202 | 2012-08-14 14:14:27 +0100 | [diff] [blame] | 1992 | @item -netdev user,id=@var{id}[,@var{option}][,@var{option}][,...] |
Markus Armbruster | b8f490e | 2013-02-13 19:49:38 +0100 | [diff] [blame] | 1993 | @findex -netdev |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 1994 | Configure user mode host network backend which requires no administrator |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 1995 | privilege to run. Valid options are: |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 1996 | |
Kevin Wolf | b3f046c | 2009-10-09 10:58:35 +0200 | [diff] [blame] | 1997 | @table @option |
Stefan Hajnoczi | 08d1202 | 2012-08-14 14:14:27 +0100 | [diff] [blame] | 1998 | @item id=@var{id} |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 1999 | Assign symbolic name for use in monitor commands. |
| 2000 | |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2001 | @item ipv4=on|off and ipv6=on|off |
| 2002 | Specify that either IPv4 or IPv6 must be enabled. If neither is specified |
| 2003 | both protocols are enabled. |
Samuel Thibault | 0b11c03 | 2016-03-20 12:29:54 +0100 | [diff] [blame] | 2004 | |
Jan Kiszka | c92ef6a | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2005 | @item net=@var{addr}[/@var{mask}] |
| 2006 | Set IP network address the guest will see. Optionally specify the netmask, |
| 2007 | either in the form a.b.c.d or as number of valid top-most bits. Default is |
Brad Hards | b0b36e5 | 2011-04-24 17:19:56 +1000 | [diff] [blame] | 2008 | 10.0.2.0/24. |
Jan Kiszka | c92ef6a | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2009 | |
| 2010 | @item host=@var{addr} |
| 2011 | Specify the guest-visible address of the host. Default is the 2nd IP in the |
| 2012 | guest network, i.e. x.x.x.2. |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2013 | |
Samuel Thibault | d8eb386 | 2016-03-25 00:02:58 +0100 | [diff] [blame] | 2014 | @item ipv6-net=@var{addr}[/@var{int}] |
| 2015 | Set IPv6 network address the guest will see (default is fec0::/64). The |
| 2016 | network prefix is given in the usual hexadecimal IPv6 address |
| 2017 | notation. The prefix size is optional, and is given as the number of |
| 2018 | valid top-most bits (default is 64). |
Yann Bordenave | 7aac531 | 2016-03-15 10:31:22 +0100 | [diff] [blame] | 2019 | |
Samuel Thibault | d8eb386 | 2016-03-25 00:02:58 +0100 | [diff] [blame] | 2020 | @item ipv6-host=@var{addr} |
Yann Bordenave | 7aac531 | 2016-03-15 10:31:22 +0100 | [diff] [blame] | 2021 | Specify the guest-visible IPv6 address of the host. Default is the 2nd IPv6 in |
| 2022 | the guest network, i.e. xxxx::2. |
| 2023 | |
Jan Kiszka | c54ed5b | 2011-07-20 12:20:14 +0200 | [diff] [blame] | 2024 | @item restrict=on|off |
Brad Hards | caef55e | 2011-06-09 07:50:43 +1000 | [diff] [blame] | 2025 | If this option is enabled, the guest will be isolated, i.e. it will not be |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2026 | able to contact the host and no guest IP packets will be routed over the host |
Brad Hards | caef55e | 2011-06-09 07:50:43 +1000 | [diff] [blame] | 2027 | to the outside. This option does not affect any explicitly set forwarding rules. |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2028 | |
| 2029 | @item hostname=@var{name} |
Klaus Stengel | 63d2960 | 2012-10-27 19:53:39 +0200 | [diff] [blame] | 2030 | Specifies the client hostname reported by the built-in DHCP server. |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2031 | |
Jan Kiszka | c92ef6a | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2032 | @item dhcpstart=@var{addr} |
| 2033 | Specify the first of the 16 IPs the built-in DHCP server can assign. Default |
Brad Hards | b0b36e5 | 2011-04-24 17:19:56 +1000 | [diff] [blame] | 2034 | is the 15th to 31st IP in the guest network, i.e. x.x.x.15 to x.x.x.31. |
Jan Kiszka | c92ef6a | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2035 | |
| 2036 | @item dns=@var{addr} |
| 2037 | Specify the guest-visible address of the virtual nameserver. The address must |
| 2038 | be different from the host address. Default is the 3rd IP in the guest network, |
| 2039 | i.e. x.x.x.3. |
| 2040 | |
Samuel Thibault | d8eb386 | 2016-03-25 00:02:58 +0100 | [diff] [blame] | 2041 | @item ipv6-dns=@var{addr} |
Yann Bordenave | 7aac531 | 2016-03-15 10:31:22 +0100 | [diff] [blame] | 2042 | Specify the guest-visible address of the IPv6 virtual nameserver. The address |
| 2043 | must be different from the host address. Default is the 3rd IP in the guest |
| 2044 | network, i.e. xxxx::3. |
| 2045 | |
Klaus Stengel | 63d2960 | 2012-10-27 19:53:39 +0200 | [diff] [blame] | 2046 | @item dnssearch=@var{domain} |
| 2047 | Provides an entry for the domain-search list sent by the built-in |
| 2048 | DHCP server. More than one domain suffix can be transmitted by specifying |
| 2049 | this option multiple times. If supported, this will cause the guest to |
| 2050 | automatically try to append the given domain suffix(es) in case a domain name |
| 2051 | can not be resolved. |
| 2052 | |
| 2053 | Example: |
| 2054 | @example |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2055 | qemu-system-i386 -nic user,dnssearch=mgmt.example.org,dnssearch=example.org |
Klaus Stengel | 63d2960 | 2012-10-27 19:53:39 +0200 | [diff] [blame] | 2056 | @end example |
| 2057 | |
Benjamin Drung | f18d137 | 2018-02-27 17:06:01 +0100 | [diff] [blame] | 2058 | @item domainname=@var{domain} |
| 2059 | Specifies the client domain name reported by the built-in DHCP server. |
| 2060 | |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2061 | @item tftp=@var{dir} |
| 2062 | When using the user mode network stack, activate a built-in TFTP |
| 2063 | server. The files in @var{dir} will be exposed as the root of a TFTP server. |
| 2064 | The TFTP client on the guest must be configured in binary mode (use the command |
Jan Kiszka | c92ef6a | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2065 | @code{bin} of the Unix TFTP client). |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2066 | |
Fam Zheng | 0fca92b | 2018-09-14 15:26:16 +0800 | [diff] [blame] | 2067 | @item tftp-server-name=@var{name} |
| 2068 | In BOOTP reply, broadcast @var{name} as the "TFTP server name" (RFC2132 option |
| 2069 | 66). This can be used to advise the guest to load boot files or configurations |
| 2070 | from a different server than the host address. |
| 2071 | |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2072 | @item bootfile=@var{file} |
| 2073 | When using the user mode network stack, broadcast @var{file} as the BOOTP |
| 2074 | filename. In conjunction with @option{tftp}, this can be used to network boot |
| 2075 | a guest from a local directory. |
| 2076 | |
| 2077 | Example (using pxelinux): |
| 2078 | @example |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2079 | qemu-system-i386 -hda linux.img -boot n -device e1000,netdev=n1 \ |
| 2080 | -netdev user,id=n1,tftp=/path/to/tftp/files,bootfile=/pxelinux.0 |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2081 | @end example |
| 2082 | |
Jan Kiszka | c92ef6a | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2083 | @item smb=@var{dir}[,smbserver=@var{addr}] |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2084 | When using the user mode network stack, activate a built-in SMB |
| 2085 | server so that Windows OSes can access to the host files in @file{@var{dir}} |
Jan Kiszka | c92ef6a | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2086 | transparently. The IP address of the SMB server can be set to @var{addr}. By |
| 2087 | default the 4th IP in the guest network is used, i.e. x.x.x.4. |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2088 | |
| 2089 | In the guest Windows OS, the line: |
| 2090 | @example |
| 2091 | 10.0.2.4 smbserver |
| 2092 | @end example |
| 2093 | must be added in the file @file{C:\WINDOWS\LMHOSTS} (for windows 9x/Me) |
| 2094 | or @file{C:\WINNT\SYSTEM32\DRIVERS\ETC\LMHOSTS} (Windows NT/2000). |
| 2095 | |
| 2096 | Then @file{@var{dir}} can be accessed in @file{\\smbserver\qemu}. |
| 2097 | |
Brad | e2d8830 | 2011-09-02 16:53:28 -0400 | [diff] [blame] | 2098 | Note that a SAMBA server must be installed on the host OS. |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2099 | |
Jan Kiszka | 3c6a058 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2100 | @item hostfwd=[tcp|udp]:[@var{hostaddr}]:@var{hostport}-[@var{guestaddr}]:@var{guestport} |
Jan Kiszka | c92ef6a | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2101 | Redirect incoming TCP or UDP connections to the host port @var{hostport} to |
| 2102 | the guest IP address @var{guestaddr} on guest port @var{guestport}. If |
| 2103 | @var{guestaddr} is not specified, its value is x.x.x.15 (default first address |
Jan Kiszka | 3c6a058 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2104 | given by the built-in DHCP server). By specifying @var{hostaddr}, the rule can |
| 2105 | be bound to a specific host interface. If no connection type is set, TCP is |
Jan Kiszka | c92ef6a | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2106 | used. This option can be given multiple times. |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2107 | |
| 2108 | For example, to redirect host X11 connection from screen 1 to guest |
| 2109 | screen 0, use the following: |
| 2110 | |
| 2111 | @example |
| 2112 | # on the host |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2113 | qemu-system-i386 -nic user,hostfwd=tcp:127.0.0.1:6001-:6000 |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2114 | # this host xterm should open in the guest X11 server |
| 2115 | xterm -display :1 |
| 2116 | @end example |
| 2117 | |
| 2118 | To redirect telnet connections from host port 5555 to telnet port on |
| 2119 | the guest, use the following: |
| 2120 | |
| 2121 | @example |
| 2122 | # on the host |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2123 | qemu-system-i386 -nic user,hostfwd=tcp::5555-:23 |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2124 | telnet localhost 5555 |
| 2125 | @end example |
| 2126 | |
| 2127 | Then when you use on the host @code{telnet localhost 5555}, you |
| 2128 | connect to the guest telnet server. |
| 2129 | |
Jan Kiszka | c92ef6a | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2130 | @item guestfwd=[tcp]:@var{server}:@var{port}-@var{dev} |
Markus Armbruster | f9cfd65 | 2015-06-15 14:35:59 +0200 | [diff] [blame] | 2131 | @itemx guestfwd=[tcp]:@var{server}:@var{port}-@var{cmd:command} |
Jan Kiszka | 3c6a058 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2132 | Forward guest TCP connections to the IP address @var{server} on port @var{port} |
Alexander Graf | b412eb6 | 2012-06-03 09:45:01 +0200 | [diff] [blame] | 2133 | to the character device @var{dev} or to a program executed by @var{cmd:command} |
| 2134 | which gets spawned for each connection. This option can be given multiple times. |
| 2135 | |
Stefan Weil | 43ffe61 | 2012-07-20 23:26:02 +0200 | [diff] [blame] | 2136 | You can either use a chardev directly and have that one used throughout QEMU's |
Alexander Graf | b412eb6 | 2012-06-03 09:45:01 +0200 | [diff] [blame] | 2137 | lifetime, like in the following example: |
| 2138 | |
| 2139 | @example |
| 2140 | # open 10.10.1.1:4321 on bootup, connect 10.0.2.100:1234 to it whenever |
| 2141 | # the guest accesses it |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2142 | qemu-system-i386 -nic user,guestfwd=tcp:10.0.2.100:1234-tcp:10.10.1.1:4321 |
Alexander Graf | b412eb6 | 2012-06-03 09:45:01 +0200 | [diff] [blame] | 2143 | @end example |
| 2144 | |
| 2145 | Or you can execute a command on every TCP connection established by the guest, |
Stefan Weil | 43ffe61 | 2012-07-20 23:26:02 +0200 | [diff] [blame] | 2146 | so that QEMU behaves similar to an inetd process for that virtual server: |
Alexander Graf | b412eb6 | 2012-06-03 09:45:01 +0200 | [diff] [blame] | 2147 | |
| 2148 | @example |
| 2149 | # call "netcat 10.10.1.1 4321" on every TCP connection to 10.0.2.100:1234 |
| 2150 | # and connect the TCP stream to its stdin/stdout |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2151 | qemu-system-i386 -nic 'user,id=n1,guestfwd=tcp:10.0.2.100:1234-cmd:netcat 10.10.1.1 4321' |
Alexander Graf | b412eb6 | 2012-06-03 09:45:01 +0200 | [diff] [blame] | 2152 | @end example |
Jan Kiszka | ad196a9 | 2009-06-24 14:42:28 +0200 | [diff] [blame] | 2153 | |
| 2154 | @end table |
| 2155 | |
Alexey Kardashevskiy | 584613e | 2016-09-13 17:11:54 +1000 | [diff] [blame] | 2156 | @item -netdev tap,id=@var{id}[,fd=@var{h}][,ifname=@var{name}][,script=@var{file}][,downscript=@var{dfile}][,br=@var{bridge}][,helper=@var{helper}] |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2157 | Configure a host TAP network backend with ID @var{id}. |
Corey Bryant | a7c36ee | 2012-01-26 09:42:27 -0500 | [diff] [blame] | 2158 | |
| 2159 | Use the network script @var{file} to configure it and the network script |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2160 | @var{dfile} to deconfigure it. If @var{name} is not provided, the OS |
Corey Bryant | a7c36ee | 2012-01-26 09:42:27 -0500 | [diff] [blame] | 2161 | automatically provides one. The default network configure script is |
| 2162 | @file{/etc/qemu-ifup} and the default network deconfigure script is |
| 2163 | @file{/etc/qemu-ifdown}. Use @option{script=no} or @option{downscript=no} |
| 2164 | to disable script execution. |
| 2165 | |
| 2166 | If running QEMU as an unprivileged user, use the network helper |
Alexey Kardashevskiy | 584613e | 2016-09-13 17:11:54 +1000 | [diff] [blame] | 2167 | @var{helper} to configure the TAP interface and attach it to the bridge. |
| 2168 | The default network helper executable is @file{/path/to/qemu-bridge-helper} |
| 2169 | and the default bridge device is @file{br0}. |
Corey Bryant | a7c36ee | 2012-01-26 09:42:27 -0500 | [diff] [blame] | 2170 | |
| 2171 | @option{fd}=@var{h} can be used to specify the handle of an already |
| 2172 | opened host TAP interface. |
| 2173 | |
| 2174 | Examples: |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2175 | |
| 2176 | @example |
Corey Bryant | a7c36ee | 2012-01-26 09:42:27 -0500 | [diff] [blame] | 2177 | #launch a QEMU instance with the default network script |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2178 | qemu-system-i386 linux.img -nic tap |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2179 | @end example |
| 2180 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2181 | @example |
Corey Bryant | a7c36ee | 2012-01-26 09:42:27 -0500 | [diff] [blame] | 2182 | #launch a QEMU instance with two NICs, each one connected |
| 2183 | #to a TAP device |
Stefan Weil | 3804da9 | 2012-05-11 22:21:50 +0200 | [diff] [blame] | 2184 | qemu-system-i386 linux.img \ |
Thomas Huth | 74f78b9 | 2018-01-15 08:40:17 +0100 | [diff] [blame] | 2185 | -netdev tap,id=nd0,ifname=tap0 -device e1000,netdev=nd0 \ |
| 2186 | -netdev tap,id=nd1,ifname=tap1 -device rtl8139,netdev=nd1 |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2187 | @end example |
| 2188 | |
Corey Bryant | a7c36ee | 2012-01-26 09:42:27 -0500 | [diff] [blame] | 2189 | @example |
| 2190 | #launch a QEMU instance with the default network helper to |
| 2191 | #connect a TAP device to bridge br0 |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2192 | qemu-system-i386 linux.img -device virtio-net-pci,netdev=n1 \ |
| 2193 | -netdev tap,id=n1,"helper=/path/to/qemu-bridge-helper" |
Corey Bryant | a7c36ee | 2012-01-26 09:42:27 -0500 | [diff] [blame] | 2194 | @end example |
| 2195 | |
Stefan Hajnoczi | 08d1202 | 2012-08-14 14:14:27 +0100 | [diff] [blame] | 2196 | @item -netdev bridge,id=@var{id}[,br=@var{bridge}][,helper=@var{helper}] |
Corey Bryant | a7c36ee | 2012-01-26 09:42:27 -0500 | [diff] [blame] | 2197 | Connect a host TAP network interface to a host bridge device. |
| 2198 | |
| 2199 | Use the network helper @var{helper} to configure the TAP interface and |
| 2200 | attach it to the bridge. The default network helper executable is |
Amos Kong | 420508f | 2013-10-23 04:49:28 +0800 | [diff] [blame] | 2201 | @file{/path/to/qemu-bridge-helper} and the default bridge |
Corey Bryant | a7c36ee | 2012-01-26 09:42:27 -0500 | [diff] [blame] | 2202 | device is @file{br0}. |
| 2203 | |
| 2204 | Examples: |
| 2205 | |
| 2206 | @example |
| 2207 | #launch a QEMU instance with the default network helper to |
| 2208 | #connect a TAP device to bridge br0 |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2209 | qemu-system-i386 linux.img -netdev bridge,id=n1 -device virtio-net,netdev=n1 |
Corey Bryant | a7c36ee | 2012-01-26 09:42:27 -0500 | [diff] [blame] | 2210 | @end example |
| 2211 | |
| 2212 | @example |
| 2213 | #launch a QEMU instance with the default network helper to |
| 2214 | #connect a TAP device to bridge qemubr0 |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2215 | qemu-system-i386 linux.img -netdev bridge,br=qemubr0,id=n1 -device virtio-net,netdev=n1 |
Corey Bryant | a7c36ee | 2012-01-26 09:42:27 -0500 | [diff] [blame] | 2216 | @end example |
| 2217 | |
Stefan Hajnoczi | 08d1202 | 2012-08-14 14:14:27 +0100 | [diff] [blame] | 2218 | @item -netdev socket,id=@var{id}[,fd=@var{h}][,listen=[@var{host}]:@var{port}][,connect=@var{host}:@var{port}] |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2219 | |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2220 | This host network backend can be used to connect the guest's network to |
| 2221 | another QEMU virtual machine using a TCP socket connection. If @option{listen} |
| 2222 | is specified, QEMU waits for incoming connections on @var{port} |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2223 | (@var{host} is optional). @option{connect} is used to connect to |
| 2224 | another QEMU instance using the @option{listen} option. @option{fd}=@var{h} |
| 2225 | specifies an already opened TCP socket. |
| 2226 | |
| 2227 | Example: |
| 2228 | @example |
| 2229 | # launch a first QEMU instance |
Stefan Weil | 3804da9 | 2012-05-11 22:21:50 +0200 | [diff] [blame] | 2230 | qemu-system-i386 linux.img \ |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2231 | -device e1000,netdev=n1,mac=52:54:00:12:34:56 \ |
| 2232 | -netdev socket,id=n1,listen=:1234 |
| 2233 | # connect the network of this instance to the network of the first instance |
Stefan Weil | 3804da9 | 2012-05-11 22:21:50 +0200 | [diff] [blame] | 2234 | qemu-system-i386 linux.img \ |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2235 | -device e1000,netdev=n2,mac=52:54:00:12:34:57 \ |
| 2236 | -netdev socket,id=n2,connect=127.0.0.1:1234 |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2237 | @end example |
| 2238 | |
Stefan Hajnoczi | 08d1202 | 2012-08-14 14:14:27 +0100 | [diff] [blame] | 2239 | @item -netdev socket,id=@var{id}[,fd=@var{h}][,mcast=@var{maddr}:@var{port}[,localaddr=@var{addr}]] |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2240 | |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2241 | Configure a socket host network backend to share the guest's network traffic |
| 2242 | with another QEMU virtual machines using a UDP multicast socket, effectively |
| 2243 | making a bus for every QEMU with same multicast address @var{maddr} and @var{port}. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2244 | NOTES: |
| 2245 | @enumerate |
| 2246 | @item |
| 2247 | Several QEMU can be running on different hosts and share same bus (assuming |
| 2248 | correct multicast setup for these hosts). |
| 2249 | @item |
| 2250 | mcast support is compatible with User Mode Linux (argument @option{eth@var{N}=mcast}), see |
| 2251 | @url{http://user-mode-linux.sf.net}. |
| 2252 | @item |
| 2253 | Use @option{fd=h} to specify an already opened UDP multicast socket. |
| 2254 | @end enumerate |
| 2255 | |
| 2256 | Example: |
| 2257 | @example |
| 2258 | # launch one QEMU instance |
Stefan Weil | 3804da9 | 2012-05-11 22:21:50 +0200 | [diff] [blame] | 2259 | qemu-system-i386 linux.img \ |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2260 | -device e1000,netdev=n1,mac=52:54:00:12:34:56 \ |
| 2261 | -netdev socket,id=n1,mcast=230.0.0.1:1234 |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2262 | # launch another QEMU instance on same "bus" |
Stefan Weil | 3804da9 | 2012-05-11 22:21:50 +0200 | [diff] [blame] | 2263 | qemu-system-i386 linux.img \ |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2264 | -device e1000,netdev=n2,mac=52:54:00:12:34:57 \ |
| 2265 | -netdev socket,id=n2,mcast=230.0.0.1:1234 |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2266 | # launch yet another QEMU instance on same "bus" |
Stefan Weil | 3804da9 | 2012-05-11 22:21:50 +0200 | [diff] [blame] | 2267 | qemu-system-i386 linux.img \ |
Thomas Huth | 37a4442 | 2018-08-13 13:51:44 +0200 | [diff] [blame] | 2268 | -device e1000,netdev=n3,mac=52:54:00:12:34:58 \ |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2269 | -netdev socket,id=n3,mcast=230.0.0.1:1234 |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2270 | @end example |
| 2271 | |
| 2272 | Example (User Mode Linux compat.): |
| 2273 | @example |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2274 | # launch QEMU instance (note mcast address selected is UML's default) |
Stefan Weil | 3804da9 | 2012-05-11 22:21:50 +0200 | [diff] [blame] | 2275 | qemu-system-i386 linux.img \ |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2276 | -device e1000,netdev=n1,mac=52:54:00:12:34:56 \ |
| 2277 | -netdev socket,id=n1,mcast=239.192.168.1:1102 |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2278 | # launch UML |
| 2279 | /path/to/linux ubd0=/path/to/root_fs eth0=mcast |
| 2280 | @end example |
| 2281 | |
Mike Ryan | 3a75e74 | 2010-12-01 11:16:47 -0800 | [diff] [blame] | 2282 | Example (send packets from host's 1.2.3.4): |
| 2283 | @example |
Stefan Weil | 3804da9 | 2012-05-11 22:21:50 +0200 | [diff] [blame] | 2284 | qemu-system-i386 linux.img \ |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2285 | -device e1000,netdev=n1,mac=52:54:00:12:34:56 \ |
| 2286 | -netdev socket,id=n1,mcast=239.192.168.1:1102,localaddr=1.2.3.4 |
Mike Ryan | 3a75e74 | 2010-12-01 11:16:47 -0800 | [diff] [blame] | 2287 | @end example |
| 2288 | |
Anton Ivanov | 3fb69aa | 2014-06-20 10:34:41 +0100 | [diff] [blame] | 2289 | @item -netdev l2tpv3,id=@var{id},src=@var{srcaddr},dst=@var{dstaddr}[,srcport=@var{srcport}][,dstport=@var{dstport}],txsession=@var{txsession}[,rxsession=@var{rxsession}][,ipv6][,udp][,cookie64][,counter][,pincounter][,txcookie=@var{txcookie}][,rxcookie=@var{rxcookie}][,offset=@var{offset}] |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2290 | Configure a L2TPv3 pseudowire host network backend. L2TPv3 (RFC3391) is a |
| 2291 | popular protocol to transport Ethernet (and other Layer 2) data frames between |
Anton Ivanov | 3fb69aa | 2014-06-20 10:34:41 +0100 | [diff] [blame] | 2292 | two systems. It is present in routers, firewalls and the Linux kernel |
| 2293 | (from version 3.3 onwards). |
| 2294 | |
| 2295 | This transport allows a VM to communicate to another VM, router or firewall directly. |
| 2296 | |
Markus Armbruster | 1e9a737 | 2017-10-02 16:03:01 +0200 | [diff] [blame] | 2297 | @table @option |
Anton Ivanov | 3fb69aa | 2014-06-20 10:34:41 +0100 | [diff] [blame] | 2298 | @item src=@var{srcaddr} |
| 2299 | source address (mandatory) |
| 2300 | @item dst=@var{dstaddr} |
| 2301 | destination address (mandatory) |
| 2302 | @item udp |
| 2303 | select udp encapsulation (default is ip). |
| 2304 | @item srcport=@var{srcport} |
| 2305 | source udp port. |
| 2306 | @item dstport=@var{dstport} |
| 2307 | destination udp port. |
| 2308 | @item ipv6 |
| 2309 | force v6, otherwise defaults to v4. |
| 2310 | @item rxcookie=@var{rxcookie} |
Markus Armbruster | f9cfd65 | 2015-06-15 14:35:59 +0200 | [diff] [blame] | 2311 | @itemx txcookie=@var{txcookie} |
Anton Ivanov | 3fb69aa | 2014-06-20 10:34:41 +0100 | [diff] [blame] | 2312 | Cookies are a weak form of security in the l2tpv3 specification. |
| 2313 | Their function is mostly to prevent misconfiguration. By default they are 32 |
| 2314 | bit. |
| 2315 | @item cookie64 |
| 2316 | Set cookie size to 64 bit instead of the default 32 |
| 2317 | @item counter=off |
| 2318 | Force a 'cut-down' L2TPv3 with no counter as in |
| 2319 | draft-mkonstan-l2tpext-keyed-ipv6-tunnel-00 |
| 2320 | @item pincounter=on |
| 2321 | Work around broken counter handling in peer. This may also help on |
| 2322 | networks which have packet reorder. |
| 2323 | @item offset=@var{offset} |
| 2324 | Add an extra offset between header and data |
Markus Armbruster | 1e9a737 | 2017-10-02 16:03:01 +0200 | [diff] [blame] | 2325 | @end table |
Anton Ivanov | 3fb69aa | 2014-06-20 10:34:41 +0100 | [diff] [blame] | 2326 | |
| 2327 | For example, to attach a VM running on host 4.3.2.1 via L2TPv3 to the bridge br-lan |
| 2328 | on the remote Linux host 1.2.3.4: |
| 2329 | @example |
| 2330 | # Setup tunnel on linux host using raw ip as encapsulation |
| 2331 | # on 1.2.3.4 |
| 2332 | ip l2tp add tunnel remote 4.3.2.1 local 1.2.3.4 tunnel_id 1 peer_tunnel_id 1 \ |
| 2333 | encap udp udp_sport 16384 udp_dport 16384 |
| 2334 | ip l2tp add session tunnel_id 1 name vmtunnel0 session_id \ |
| 2335 | 0xFFFFFFFF peer_session_id 0xFFFFFFFF |
| 2336 | ifconfig vmtunnel0 mtu 1500 |
| 2337 | ifconfig vmtunnel0 up |
| 2338 | brctl addif br-lan vmtunnel0 |
| 2339 | |
| 2340 | |
| 2341 | # on 4.3.2.1 |
| 2342 | # launch QEMU instance - if your network has reorder or is very lossy add ,pincounter |
| 2343 | |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2344 | qemu-system-i386 linux.img -device e1000,netdev=n1 \ |
| 2345 | -netdev l2tpv3,id=n1,src=4.2.3.1,dst=1.2.3.4,udp,srcport=16384,dstport=16384,rxsession=0xffffffff,txsession=0xffffffff,counter |
Anton Ivanov | 3fb69aa | 2014-06-20 10:34:41 +0100 | [diff] [blame] | 2346 | |
| 2347 | @end example |
| 2348 | |
Stefan Hajnoczi | 08d1202 | 2012-08-14 14:14:27 +0100 | [diff] [blame] | 2349 | @item -netdev vde,id=@var{id}[,sock=@var{socketpath}][,port=@var{n}][,group=@var{groupname}][,mode=@var{octalmode}] |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2350 | Configure VDE backend to connect to PORT @var{n} of a vde switch running on host and |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2351 | listening for incoming connections on @var{socketpath}. Use GROUP @var{groupname} |
| 2352 | and MODE @var{octalmode} to change default ownership and permissions for |
Stefan Weil | c1ba4e0 | 2011-09-05 18:13:03 +0200 | [diff] [blame] | 2353 | communication port. This option is only available if QEMU has been compiled |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2354 | with vde support enabled. |
| 2355 | |
| 2356 | Example: |
| 2357 | @example |
| 2358 | # launch vde switch |
| 2359 | vde_switch -F -sock /tmp/myswitch |
| 2360 | # launch QEMU instance |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2361 | qemu-system-i386 linux.img -nic vde,sock=/tmp/myswitch |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2362 | @end example |
| 2363 | |
Changchun Ouyang | b931bfb | 2015-09-23 12:20:00 +0800 | [diff] [blame] | 2364 | @item -netdev vhost-user,chardev=@var{id}[,vhostforce=on|off][,queues=n] |
Nikolay Nikolaev | 03ce574 | 2014-06-10 13:02:16 +0300 | [diff] [blame] | 2365 | |
| 2366 | Establish a vhost-user netdev, backed by a chardev @var{id}. The chardev should |
| 2367 | be a unix domain socket backed one. The vhost-user uses a specifically defined |
| 2368 | protocol to pass vhost ioctl replacement messages to an application on the other |
| 2369 | end of the socket. On non-MSIX guests, the feature can be forced with |
Changchun Ouyang | b931bfb | 2015-09-23 12:20:00 +0800 | [diff] [blame] | 2370 | @var{vhostforce}. Use 'queues=@var{n}' to specify the number of queues to |
| 2371 | be created for multiqueue vhost-user. |
Nikolay Nikolaev | 03ce574 | 2014-06-10 13:02:16 +0300 | [diff] [blame] | 2372 | |
| 2373 | Example: |
| 2374 | @example |
| 2375 | qemu -m 512 -object memory-backend-file,id=mem,size=512M,mem-path=/hugetlbfs,share=on \ |
| 2376 | -numa node,memdev=mem \ |
Vincenzo Maffione | 79cad2f | 2017-02-20 17:45:09 +0100 | [diff] [blame] | 2377 | -chardev socket,id=chr0,path=/path/to/socket \ |
Nikolay Nikolaev | 03ce574 | 2014-06-10 13:02:16 +0300 | [diff] [blame] | 2378 | -netdev type=vhost-user,id=net0,chardev=chr0 \ |
| 2379 | -device virtio-net-pci,netdev=net0 |
| 2380 | @end example |
| 2381 | |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2382 | @item -netdev hubport,id=@var{id},hubid=@var{hubid}[,netdev=@var{nd}] |
Thomas Huth | 78cd6f7 | 2018-02-21 11:18:36 +0100 | [diff] [blame] | 2383 | |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2384 | Create a hub port on the emulated hub with ID @var{hubid}. |
Thomas Huth | 78cd6f7 | 2018-02-21 11:18:36 +0100 | [diff] [blame] | 2385 | |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2386 | The hubport netdev lets you connect a NIC to a QEMU emulated hub instead of a |
Thomas Huth | af1a5c3 | 2018-04-30 20:02:23 +0200 | [diff] [blame] | 2387 | single netdev. Alternatively, you can also connect the hubport to another |
| 2388 | netdev with ID @var{nd} by using the @option{netdev=@var{nd}} option. |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2389 | |
Thomas Huth | af1a5c3 | 2018-04-30 20:02:23 +0200 | [diff] [blame] | 2390 | @item -net nic[,netdev=@var{nd}][,macaddr=@var{mac}][,model=@var{type}] [,name=@var{name}][,addr=@var{addr}][,vectors=@var{v}] |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2391 | @findex -net |
| 2392 | Legacy option to configure or create an on-board (or machine default) Network |
Thomas Huth | af1a5c3 | 2018-04-30 20:02:23 +0200 | [diff] [blame] | 2393 | Interface Card(NIC) and connect it either to the emulated hub with ID 0 (i.e. |
| 2394 | the default hub), or to the netdev @var{nd}. |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2395 | The NIC is an e1000 by default on the PC target. Optionally, the MAC address |
| 2396 | can be changed to @var{mac}, the device address set to @var{addr} (PCI cards |
| 2397 | only), and a @var{name} can be assigned for use in monitor commands. |
| 2398 | Optionally, for PCI cards, you can specify the number @var{v} of MSI-X vectors |
| 2399 | that the card should have; this option currently only affects virtio cards; set |
| 2400 | @var{v} = 0 to disable MSI-X. If no @option{-net} option is specified, a single |
| 2401 | NIC is created. QEMU can emulate several different models of network card. |
| 2402 | Use @code{-net nic,model=help} for a list of available devices for your target. |
| 2403 | |
Thomas Huth | af1a5c3 | 2018-04-30 20:02:23 +0200 | [diff] [blame] | 2404 | @item -net user|tap|bridge|socket|l2tpv3|vde[,...][,name=@var{name}] |
Thomas Huth | abbbb03 | 2018-03-12 13:20:50 +0100 | [diff] [blame] | 2405 | Configure a host network backend (with the options corresponding to the same |
Thomas Huth | af1a5c3 | 2018-04-30 20:02:23 +0200 | [diff] [blame] | 2406 | @option{-netdev} option) and connect it to the emulated hub 0 (the default |
| 2407 | hub). Use @var{name} to specify the name of the hub port. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2408 | ETEXI |
| 2409 | |
Markus Armbruster | c70a01e | 2013-02-13 19:49:40 +0100 | [diff] [blame] | 2410 | STEXI |
| 2411 | @end table |
| 2412 | ETEXI |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2413 | DEFHEADING() |
| 2414 | |
Markus Armbruster | de6b4f9 | 2017-10-02 16:03:00 +0200 | [diff] [blame] | 2415 | DEFHEADING(Character device options:) |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2416 | |
| 2417 | DEF("chardev", HAS_ARG, QEMU_OPTION_chardev, |
Lin Ma | 517b3d4 | 2016-08-17 01:13:52 +0800 | [diff] [blame] | 2418 | "-chardev help\n" |
Daniel P. Berrange | d0d7708 | 2016-01-11 12:44:41 +0000 | [diff] [blame] | 2419 | "-chardev null,id=id[,mux=on|off][,logfile=PATH][,logappend=on|off]\n" |
Corey Minyard | 5dd1f02 | 2014-10-02 11:17:37 -0500 | [diff] [blame] | 2420 | "-chardev socket,id=id[,host=host],port=port[,to=to][,ipv4][,ipv6][,nodelay][,reconnect=seconds]\n" |
Julia Suvorova | 981b06e | 2018-10-19 01:35:00 +0300 | [diff] [blame] | 2421 | " [,server][,nowait][,telnet][,websocket][,reconnect=seconds][,mux=on|off]\n" |
Daniel P. Berrange | a8fb542 | 2016-01-19 11:14:31 +0000 | [diff] [blame] | 2422 | " [,logfile=PATH][,logappend=on|off][,tls-creds=ID] (tcp)\n" |
Julia Suvorova | 981b06e | 2018-10-19 01:35:00 +0300 | [diff] [blame] | 2423 | "-chardev socket,id=id,path=path[,server][,nowait][,telnet][,websocket][,reconnect=seconds]\n" |
Daniel P. Berrange | d0d7708 | 2016-01-11 12:44:41 +0000 | [diff] [blame] | 2424 | " [,mux=on|off][,logfile=PATH][,logappend=on|off] (unix)\n" |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2425 | "-chardev udp,id=id[,host=host],port=port[,localaddr=localaddr]\n" |
Jan Kiszka | 9733128 | 2010-04-06 16:55:54 +0200 | [diff] [blame] | 2426 | " [,localport=localport][,ipv4][,ipv6][,mux=on|off]\n" |
Daniel P. Berrange | d0d7708 | 2016-01-11 12:44:41 +0000 | [diff] [blame] | 2427 | " [,logfile=PATH][,logappend=on|off]\n" |
| 2428 | "-chardev msmouse,id=id[,mux=on|off][,logfile=PATH][,logappend=on|off]\n" |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2429 | "-chardev vc,id=id[[,width=width][,height=height]][[,cols=cols][,rows=rows]]\n" |
Daniel P. Berrange | d0d7708 | 2016-01-11 12:44:41 +0000 | [diff] [blame] | 2430 | " [,mux=on|off][,logfile=PATH][,logappend=on|off]\n" |
| 2431 | "-chardev ringbuf,id=id[,size=size][,logfile=PATH][,logappend=on|off]\n" |
| 2432 | "-chardev file,id=id,path=path[,mux=on|off][,logfile=PATH][,logappend=on|off]\n" |
| 2433 | "-chardev pipe,id=id,path=path[,mux=on|off][,logfile=PATH][,logappend=on|off]\n" |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2434 | #ifdef _WIN32 |
Daniel P. Berrange | d0d7708 | 2016-01-11 12:44:41 +0000 | [diff] [blame] | 2435 | "-chardev console,id=id[,mux=on|off][,logfile=PATH][,logappend=on|off]\n" |
| 2436 | "-chardev serial,id=id,path=path[,mux=on|off][,logfile=PATH][,logappend=on|off]\n" |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2437 | #else |
Daniel P. Berrange | d0d7708 | 2016-01-11 12:44:41 +0000 | [diff] [blame] | 2438 | "-chardev pty,id=id[,mux=on|off][,logfile=PATH][,logappend=on|off]\n" |
| 2439 | "-chardev stdio,id=id[,mux=on|off][,signal=on|off][,logfile=PATH][,logappend=on|off]\n" |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2440 | #endif |
| 2441 | #ifdef CONFIG_BRLAPI |
Daniel P. Berrange | d0d7708 | 2016-01-11 12:44:41 +0000 | [diff] [blame] | 2442 | "-chardev braille,id=id[,mux=on|off][,logfile=PATH][,logappend=on|off]\n" |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2443 | #endif |
| 2444 | #if defined(__linux__) || defined(__sun__) || defined(__FreeBSD__) \ |
| 2445 | || defined(__NetBSD__) || defined(__OpenBSD__) || defined(__DragonFly__) |
Daniel P. Berrange | d0d7708 | 2016-01-11 12:44:41 +0000 | [diff] [blame] | 2446 | "-chardev serial,id=id,path=path[,mux=on|off][,logfile=PATH][,logappend=on|off]\n" |
| 2447 | "-chardev tty,id=id,path=path[,mux=on|off][,logfile=PATH][,logappend=on|off]\n" |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2448 | #endif |
| 2449 | #if defined(__linux__) || defined(__FreeBSD__) || defined(__DragonFly__) |
Daniel P. Berrange | d0d7708 | 2016-01-11 12:44:41 +0000 | [diff] [blame] | 2450 | "-chardev parallel,id=id,path=path[,mux=on|off][,logfile=PATH][,logappend=on|off]\n" |
| 2451 | "-chardev parport,id=id,path=path[,mux=on|off][,logfile=PATH][,logappend=on|off]\n" |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2452 | #endif |
Alon Levy | cbcc633 | 2011-01-19 10:49:50 +0200 | [diff] [blame] | 2453 | #if defined(CONFIG_SPICE) |
Daniel P. Berrange | d0d7708 | 2016-01-11 12:44:41 +0000 | [diff] [blame] | 2454 | "-chardev spicevmc,id=id,name=name[,debug=debug][,logfile=PATH][,logappend=on|off]\n" |
| 2455 | "-chardev spiceport,id=id,name=name[,debug=debug][,logfile=PATH][,logappend=on|off]\n" |
Alon Levy | cbcc633 | 2011-01-19 10:49:50 +0200 | [diff] [blame] | 2456 | #endif |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 2457 | , QEMU_ARCH_ALL |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2458 | ) |
| 2459 | |
| 2460 | STEXI |
Markus Armbruster | dddba06 | 2017-10-02 16:03:06 +0200 | [diff] [blame] | 2461 | |
| 2462 | The general form of a character device option is: |
| 2463 | @table @option |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2464 | @item -chardev @var{backend},id=@var{id}[,mux=on|off][,@var{options}] |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 2465 | @findex -chardev |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2466 | Backend is one of: |
| 2467 | @option{null}, |
| 2468 | @option{socket}, |
| 2469 | @option{udp}, |
| 2470 | @option{msmouse}, |
| 2471 | @option{vc}, |
Markus Armbruster | 4f57378 | 2013-07-26 16:44:32 +0200 | [diff] [blame] | 2472 | @option{ringbuf}, |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2473 | @option{file}, |
| 2474 | @option{pipe}, |
| 2475 | @option{console}, |
| 2476 | @option{serial}, |
| 2477 | @option{pty}, |
| 2478 | @option{stdio}, |
| 2479 | @option{braille}, |
| 2480 | @option{tty}, |
Gerd Hoffmann | 88a946d | 2013-01-10 14:20:58 +0100 | [diff] [blame] | 2481 | @option{parallel}, |
Alon Levy | cbcc633 | 2011-01-19 10:49:50 +0200 | [diff] [blame] | 2482 | @option{parport}, |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2483 | @option{spicevmc}, |
Marc-André Lureau | 5a49d3e | 2012-12-05 16:15:34 +0100 | [diff] [blame] | 2484 | @option{spiceport}. |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2485 | The specific backend will determine the applicable options. |
| 2486 | |
Markus Armbruster | dddba06 | 2017-10-02 16:03:06 +0200 | [diff] [blame] | 2487 | Use @code{-chardev help} to print all available chardev backend types. |
Lin Ma | 517b3d4 | 2016-08-17 01:13:52 +0800 | [diff] [blame] | 2488 | |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2489 | All devices must have an id, which can be any string up to 127 characters long. |
| 2490 | It is used to uniquely identify this device in other command line directives. |
| 2491 | |
Jan Kiszka | 9733128 | 2010-04-06 16:55:54 +0200 | [diff] [blame] | 2492 | A character device may be used in multiplexing mode by multiple front-ends. |
Peter Maydell | a40db1b | 2016-02-16 17:28:58 +0000 | [diff] [blame] | 2493 | Specify @option{mux=on} to enable this mode. |
| 2494 | A multiplexer is a "1:N" device, and here the "1" end is your specified chardev |
| 2495 | backend, and the "N" end is the various parts of QEMU that can talk to a chardev. |
| 2496 | If you create a chardev with @option{id=myid} and @option{mux=on}, QEMU will |
| 2497 | create a multiplexer with your specified ID, and you can then configure multiple |
| 2498 | front ends to use that chardev ID for their input/output. Up to four different |
| 2499 | front ends can be connected to a single multiplexed chardev. (Without |
| 2500 | multiplexing enabled, a chardev can only be used by a single front end.) |
| 2501 | For instance you could use this to allow a single stdio chardev to be used by |
| 2502 | two serial ports and the QEMU monitor: |
| 2503 | |
| 2504 | @example |
| 2505 | -chardev stdio,mux=on,id=char0 \ |
Marc-André Lureau | bdbcb54 | 2016-10-11 21:41:21 +0400 | [diff] [blame] | 2506 | -mon chardev=char0,mode=readline \ |
Peter Maydell | a40db1b | 2016-02-16 17:28:58 +0000 | [diff] [blame] | 2507 | -serial chardev:char0 \ |
| 2508 | -serial chardev:char0 |
| 2509 | @end example |
| 2510 | |
| 2511 | You can have more than one multiplexer in a system configuration; for instance |
| 2512 | you could have a TCP port multiplexed between UART 0 and UART 1, and stdio |
| 2513 | multiplexed between the QEMU monitor and a parallel port: |
| 2514 | |
| 2515 | @example |
| 2516 | -chardev stdio,mux=on,id=char0 \ |
Marc-André Lureau | bdbcb54 | 2016-10-11 21:41:21 +0400 | [diff] [blame] | 2517 | -mon chardev=char0,mode=readline \ |
Peter Maydell | a40db1b | 2016-02-16 17:28:58 +0000 | [diff] [blame] | 2518 | -parallel chardev:char0 \ |
| 2519 | -chardev tcp,...,mux=on,id=char1 \ |
| 2520 | -serial chardev:char1 \ |
| 2521 | -serial chardev:char1 |
| 2522 | @end example |
| 2523 | |
| 2524 | When you're using a multiplexed character device, some escape sequences are |
| 2525 | interpreted in the input. @xref{mux_keys, Keys in the character backend |
| 2526 | multiplexer}. |
| 2527 | |
| 2528 | Note that some other command line options may implicitly create multiplexed |
| 2529 | character backends; for instance @option{-serial mon:stdio} creates a |
| 2530 | multiplexed stdio backend connected to the serial port and the QEMU monitor, |
| 2531 | and @option{-nographic} also multiplexes the console and the monitor to |
| 2532 | stdio. |
| 2533 | |
| 2534 | There is currently no support for multiplexing in the other direction |
| 2535 | (where a single QEMU front end takes input and output from multiple chardevs). |
Jan Kiszka | 9733128 | 2010-04-06 16:55:54 +0200 | [diff] [blame] | 2536 | |
Daniel P. Berrange | d0d7708 | 2016-01-11 12:44:41 +0000 | [diff] [blame] | 2537 | Every backend supports the @option{logfile} option, which supplies the path |
| 2538 | to a file to record all data transmitted via the backend. The @option{logappend} |
| 2539 | option controls whether the log file will be truncated or appended to when |
| 2540 | opened. |
| 2541 | |
Markus Armbruster | dddba06 | 2017-10-02 16:03:06 +0200 | [diff] [blame] | 2542 | @end table |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2543 | |
Markus Armbruster | dddba06 | 2017-10-02 16:03:06 +0200 | [diff] [blame] | 2544 | The available backends are: |
| 2545 | |
| 2546 | @table @option |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2547 | @item -chardev null,id=@var{id} |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2548 | A void device. This device will not emit any data, and will drop any data it |
| 2549 | receives. The null backend does not take any options. |
| 2550 | |
Julia Suvorova | 981b06e | 2018-10-19 01:35:00 +0300 | [diff] [blame] | 2551 | @item -chardev socket,id=@var{id}[,@var{TCP options} or @var{unix options}][,server][,nowait][,telnet][,websocket][,reconnect=@var{seconds}][,tls-creds=@var{id}] |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2552 | |
| 2553 | Create a two-way stream socket, which can be either a TCP or a unix socket. A |
| 2554 | unix socket will be created if @option{path} is specified. Behaviour is |
| 2555 | undefined if TCP options are specified for a unix socket. |
| 2556 | |
| 2557 | @option{server} specifies that the socket shall be a listening socket. |
| 2558 | |
| 2559 | @option{nowait} specifies that QEMU should not block waiting for a client to |
| 2560 | connect to a listening socket. |
| 2561 | |
| 2562 | @option{telnet} specifies that traffic on the socket should interpret telnet |
| 2563 | escape sequences. |
| 2564 | |
Julia Suvorova | 981b06e | 2018-10-19 01:35:00 +0300 | [diff] [blame] | 2565 | @option{websocket} specifies that the socket uses WebSocket protocol for |
| 2566 | communication. |
| 2567 | |
Corey Minyard | 5dd1f02 | 2014-10-02 11:17:37 -0500 | [diff] [blame] | 2568 | @option{reconnect} sets the timeout for reconnecting on non-server sockets when |
| 2569 | the remote end goes away. qemu will delay this many seconds and then attempt |
| 2570 | to reconnect. Zero disables reconnecting, and is the default. |
| 2571 | |
Daniel P. Berrange | a8fb542 | 2016-01-19 11:14:31 +0000 | [diff] [blame] | 2572 | @option{tls-creds} requests enablement of the TLS protocol for encryption, |
| 2573 | and specifies the id of the TLS credentials to use for the handshake. The |
| 2574 | credentials must be previously created with the @option{-object tls-creds} |
| 2575 | argument. |
| 2576 | |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2577 | TCP and unix socket options are given below: |
| 2578 | |
| 2579 | @table @option |
| 2580 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2581 | @item TCP options: port=@var{port}[,host=@var{host}][,to=@var{to}][,ipv4][,ipv6][,nodelay] |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2582 | |
| 2583 | @option{host} for a listening socket specifies the local address to be bound. |
| 2584 | For a connecting socket species the remote host to connect to. @option{host} is |
| 2585 | optional for listening sockets. If not specified it defaults to @code{0.0.0.0}. |
| 2586 | |
| 2587 | @option{port} for a listening socket specifies the local port to be bound. For a |
| 2588 | connecting socket specifies the port on the remote host to connect to. |
| 2589 | @option{port} can be given as either a port number or a service name. |
| 2590 | @option{port} is required. |
| 2591 | |
| 2592 | @option{to} is only relevant to listening sockets. If it is specified, and |
| 2593 | @option{port} cannot be bound, QEMU will attempt to bind to subsequent ports up |
| 2594 | to and including @option{to} until it succeeds. @option{to} must be specified |
| 2595 | as a port number. |
| 2596 | |
| 2597 | @option{ipv4} and @option{ipv6} specify that either IPv4 or IPv6 must be used. |
| 2598 | If neither is specified the socket may use either protocol. |
| 2599 | |
| 2600 | @option{nodelay} disables the Nagle algorithm. |
| 2601 | |
| 2602 | @item unix options: path=@var{path} |
| 2603 | |
| 2604 | @option{path} specifies the local path of the unix socket. @option{path} is |
| 2605 | required. |
| 2606 | |
| 2607 | @end table |
| 2608 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2609 | @item -chardev udp,id=@var{id}[,host=@var{host}],port=@var{port}[,localaddr=@var{localaddr}][,localport=@var{localport}][,ipv4][,ipv6] |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2610 | |
| 2611 | Sends all traffic from the guest to a remote host over UDP. |
| 2612 | |
| 2613 | @option{host} specifies the remote host to connect to. If not specified it |
| 2614 | defaults to @code{localhost}. |
| 2615 | |
| 2616 | @option{port} specifies the port on the remote host to connect to. @option{port} |
| 2617 | is required. |
| 2618 | |
| 2619 | @option{localaddr} specifies the local address to bind to. If not specified it |
| 2620 | defaults to @code{0.0.0.0}. |
| 2621 | |
| 2622 | @option{localport} specifies the local port to bind to. If not specified any |
| 2623 | available local port will be used. |
| 2624 | |
| 2625 | @option{ipv4} and @option{ipv6} specify that either IPv4 or IPv6 must be used. |
| 2626 | If neither is specified the device may use either protocol. |
| 2627 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2628 | @item -chardev msmouse,id=@var{id} |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2629 | |
| 2630 | Forward QEMU's emulated msmouse events to the guest. @option{msmouse} does not |
| 2631 | take any options. |
| 2632 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2633 | @item -chardev vc,id=@var{id}[[,width=@var{width}][,height=@var{height}]][[,cols=@var{cols}][,rows=@var{rows}]] |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2634 | |
| 2635 | Connect to a QEMU text console. @option{vc} may optionally be given a specific |
| 2636 | size. |
| 2637 | |
| 2638 | @option{width} and @option{height} specify the width and height respectively of |
| 2639 | the console, in pixels. |
| 2640 | |
| 2641 | @option{cols} and @option{rows} specify that the console be sized to fit a text |
| 2642 | console with the given dimensions. |
| 2643 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2644 | @item -chardev ringbuf,id=@var{id}[,size=@var{size}] |
Lei Li | 51767e7 | 2013-01-25 00:03:19 +0800 | [diff] [blame] | 2645 | |
Markus Armbruster | 3949e59 | 2013-02-06 21:27:24 +0100 | [diff] [blame] | 2646 | Create a ring buffer with fixed size @option{size}. |
Stefan Hajnoczi | e69f7d2 | 2016-09-19 11:56:26 +0100 | [diff] [blame] | 2647 | @var{size} must be a power of two and defaults to @code{64K}. |
Lei Li | 51767e7 | 2013-01-25 00:03:19 +0800 | [diff] [blame] | 2648 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2649 | @item -chardev file,id=@var{id},path=@var{path} |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2650 | |
| 2651 | Log all traffic received from the guest to a file. |
| 2652 | |
| 2653 | @option{path} specifies the path of the file to be opened. This file will be |
| 2654 | created if it does not already exist, and overwritten if it does. @option{path} |
| 2655 | is required. |
| 2656 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2657 | @item -chardev pipe,id=@var{id},path=@var{path} |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2658 | |
| 2659 | Create a two-way connection to the guest. The behaviour differs slightly between |
| 2660 | Windows hosts and other hosts: |
| 2661 | |
| 2662 | On Windows, a single duplex pipe will be created at |
| 2663 | @file{\\.pipe\@option{path}}. |
| 2664 | |
| 2665 | On other hosts, 2 pipes will be created called @file{@option{path}.in} and |
| 2666 | @file{@option{path}.out}. Data written to @file{@option{path}.in} will be |
| 2667 | received by the guest. Data written by the guest can be read from |
| 2668 | @file{@option{path}.out}. QEMU will not create these fifos, and requires them to |
| 2669 | be present. |
| 2670 | |
| 2671 | @option{path} forms part of the pipe path as described above. @option{path} is |
| 2672 | required. |
| 2673 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2674 | @item -chardev console,id=@var{id} |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2675 | |
| 2676 | Send traffic from the guest to QEMU's standard output. @option{console} does not |
| 2677 | take any options. |
| 2678 | |
| 2679 | @option{console} is only available on Windows hosts. |
| 2680 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2681 | @item -chardev serial,id=@var{id},path=@option{path} |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2682 | |
| 2683 | Send traffic from the guest to a serial device on the host. |
| 2684 | |
Gerd Hoffmann | d59044e | 2012-12-19 13:50:29 +0100 | [diff] [blame] | 2685 | On Unix hosts serial will actually accept any tty device, |
| 2686 | not only serial lines. |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2687 | |
| 2688 | @option{path} specifies the name of the serial device to open. |
| 2689 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2690 | @item -chardev pty,id=@var{id} |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2691 | |
| 2692 | Create a new pseudo-terminal on the host and connect to it. @option{pty} does |
| 2693 | not take any options. |
| 2694 | |
| 2695 | @option{pty} is not available on Windows hosts. |
| 2696 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2697 | @item -chardev stdio,id=@var{id}[,signal=on|off] |
Stefan Weil | b65ee4f | 2012-05-11 22:25:50 +0200 | [diff] [blame] | 2698 | Connect to standard input and standard output of the QEMU process. |
Aurelien Jarno | b7fdb3a | 2010-07-13 21:13:12 +0200 | [diff] [blame] | 2699 | |
| 2700 | @option{signal} controls if signals are enabled on the terminal, that includes |
| 2701 | exiting QEMU with the key sequence @key{Control-c}. This option is enabled by |
| 2702 | default, use @option{signal=off} to disable it. |
| 2703 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2704 | @item -chardev braille,id=@var{id} |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2705 | |
| 2706 | Connect to a local BrlAPI server. @option{braille} does not take any options. |
| 2707 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2708 | @item -chardev tty,id=@var{id},path=@var{path} |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2709 | |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2710 | @option{tty} is only available on Linux, Sun, FreeBSD, NetBSD, OpenBSD and |
Markus Armbruster | d037d6b | 2013-02-13 15:54:15 +0100 | [diff] [blame] | 2711 | DragonFlyBSD hosts. It is an alias for @option{serial}. |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2712 | |
| 2713 | @option{path} specifies the path to the tty. @option{path} is required. |
| 2714 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2715 | @item -chardev parallel,id=@var{id},path=@var{path} |
| 2716 | @itemx -chardev parport,id=@var{id},path=@var{path} |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2717 | |
Gerd Hoffmann | 88a946d | 2013-01-10 14:20:58 +0100 | [diff] [blame] | 2718 | @option{parallel} is only available on Linux, FreeBSD and DragonFlyBSD hosts. |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2719 | |
| 2720 | Connect to a local parallel port. |
| 2721 | |
| 2722 | @option{path} specifies the path to the parallel port device. @option{path} is |
| 2723 | required. |
| 2724 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2725 | @item -chardev spicevmc,id=@var{id},debug=@var{debug},name=@var{name} |
Alon Levy | cbcc633 | 2011-01-19 10:49:50 +0200 | [diff] [blame] | 2726 | |
Stefan Hajnoczi | 3a84690 | 2011-10-06 11:24:12 +0100 | [diff] [blame] | 2727 | @option{spicevmc} is only available when spice support is built in. |
| 2728 | |
Alon Levy | cbcc633 | 2011-01-19 10:49:50 +0200 | [diff] [blame] | 2729 | @option{debug} debug level for spicevmc |
| 2730 | |
| 2731 | @option{name} name of spice channel to connect to |
| 2732 | |
| 2733 | Connect to a spice virtual machine channel, such as vdiport. |
Alon Levy | cbcc633 | 2011-01-19 10:49:50 +0200 | [diff] [blame] | 2734 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2735 | @item -chardev spiceport,id=@var{id},debug=@var{debug},name=@var{name} |
Marc-André Lureau | 5a49d3e | 2012-12-05 16:15:34 +0100 | [diff] [blame] | 2736 | |
| 2737 | @option{spiceport} is only available when spice support is built in. |
| 2738 | |
| 2739 | @option{debug} debug level for spicevmc |
| 2740 | |
| 2741 | @option{name} name of spice port to connect to |
| 2742 | |
| 2743 | Connect to a spice port, allowing a Spice client to handle the traffic |
| 2744 | identified by a name (preferably a fqdn). |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2745 | ETEXI |
| 2746 | |
Markus Armbruster | c70a01e | 2013-02-13 19:49:40 +0100 | [diff] [blame] | 2747 | STEXI |
| 2748 | @end table |
| 2749 | ETEXI |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2750 | DEFHEADING() |
| 2751 | |
Markus Armbruster | de6b4f9 | 2017-10-02 16:03:00 +0200 | [diff] [blame] | 2752 | DEFHEADING(Bluetooth(R) options:) |
Markus Armbruster | c70a01e | 2013-02-13 19:49:40 +0100 | [diff] [blame] | 2753 | STEXI |
| 2754 | @table @option |
| 2755 | ETEXI |
Matthew Booth | 7273a2d | 2009-10-30 13:41:12 +0000 | [diff] [blame] | 2756 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2757 | DEF("bt", HAS_ARG, QEMU_OPTION_bt, \ |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2758 | "-bt hci,null dumb bluetooth HCI - doesn't respond to commands\n" \ |
| 2759 | "-bt hci,host[:id]\n" \ |
| 2760 | " use host's HCI with the given name\n" \ |
| 2761 | "-bt hci[,vlan=n]\n" \ |
| 2762 | " emulate a standard HCI in virtual scatternet 'n'\n" \ |
| 2763 | "-bt vhci[,vlan=n]\n" \ |
| 2764 | " add host computer to virtual scatternet 'n' using VHCI\n" \ |
| 2765 | "-bt device:dev[,vlan=n]\n" \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 2766 | " emulate a bluetooth device 'dev' in scatternet 'n'\n", |
| 2767 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2768 | STEXI |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2769 | @item -bt hci[...] |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 2770 | @findex -bt |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2771 | Defines the function of the corresponding Bluetooth HCI. -bt options |
| 2772 | are matched with the HCIs present in the chosen machine type. For |
| 2773 | example when emulating a machine with only one HCI built into it, only |
| 2774 | the first @code{-bt hci[...]} option is valid and defines the HCI's |
| 2775 | logic. The Transport Layer is decided by the machine type. Currently |
| 2776 | the machines @code{n800} and @code{n810} have one HCI and all other |
| 2777 | machines have none. |
| 2778 | |
Thomas Huth | c0188e6 | 2018-11-12 11:00:30 +0100 | [diff] [blame] | 2779 | Note: This option and the whole bluetooth subsystem is considered as deprecated. |
| 2780 | If you still use it, please send a mail to @email{qemu-devel@@nongnu.org} where |
| 2781 | you describe your usecase. |
| 2782 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2783 | @anchor{bt-hcis} |
| 2784 | The following three types are recognized: |
| 2785 | |
Kevin Wolf | b3f046c | 2009-10-09 10:58:35 +0200 | [diff] [blame] | 2786 | @table @option |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2787 | @item -bt hci,null |
| 2788 | (default) The corresponding Bluetooth HCI assumes no internal logic |
| 2789 | and will not respond to any HCI commands or emit events. |
| 2790 | |
| 2791 | @item -bt hci,host[:@var{id}] |
| 2792 | (@code{bluez} only) The corresponding HCI passes commands / events |
| 2793 | to / from the physical HCI identified by the name @var{id} (default: |
| 2794 | @code{hci0}) on the computer running QEMU. Only available on @code{bluez} |
| 2795 | capable systems like Linux. |
| 2796 | |
| 2797 | @item -bt hci[,vlan=@var{n}] |
| 2798 | Add a virtual, standard HCI that will participate in the Bluetooth |
| 2799 | scatternet @var{n} (default @code{0}). Similarly to @option{-net} |
| 2800 | VLANs, devices inside a bluetooth network @var{n} can only communicate |
| 2801 | with other devices in the same network (scatternet). |
| 2802 | @end table |
| 2803 | |
| 2804 | @item -bt vhci[,vlan=@var{n}] |
| 2805 | (Linux-host only) Create a HCI in scatternet @var{n} (default 0) attached |
| 2806 | to the host bluetooth stack instead of to the emulated target. This |
| 2807 | allows the host and target machines to participate in a common scatternet |
| 2808 | and communicate. Requires the Linux @code{vhci} driver installed. Can |
| 2809 | be used as following: |
| 2810 | |
| 2811 | @example |
Stefan Weil | 3804da9 | 2012-05-11 22:21:50 +0200 | [diff] [blame] | 2812 | qemu-system-i386 [...OPTIONS...] -bt hci,vlan=5 -bt vhci,vlan=5 |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2813 | @end example |
| 2814 | |
| 2815 | @item -bt device:@var{dev}[,vlan=@var{n}] |
| 2816 | Emulate a bluetooth device @var{dev} and place it in network @var{n} |
| 2817 | (default @code{0}). QEMU can only emulate one type of bluetooth devices |
| 2818 | currently: |
| 2819 | |
Kevin Wolf | b3f046c | 2009-10-09 10:58:35 +0200 | [diff] [blame] | 2820 | @table @option |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2821 | @item keyboard |
| 2822 | Virtual wireless keyboard implementing the HIDP bluetooth profile. |
| 2823 | @end table |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2824 | ETEXI |
| 2825 | |
Markus Armbruster | c70a01e | 2013-02-13 19:49:40 +0100 | [diff] [blame] | 2826 | STEXI |
| 2827 | @end table |
| 2828 | ETEXI |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2829 | DEFHEADING() |
| 2830 | |
Stefan Berger | d1a0cf7 | 2013-02-27 12:47:49 -0500 | [diff] [blame] | 2831 | #ifdef CONFIG_TPM |
Markus Armbruster | de6b4f9 | 2017-10-02 16:03:00 +0200 | [diff] [blame] | 2832 | DEFHEADING(TPM device options:) |
Stefan Berger | d1a0cf7 | 2013-02-27 12:47:49 -0500 | [diff] [blame] | 2833 | |
| 2834 | DEF("tpmdev", HAS_ARG, QEMU_OPTION_tpmdev, \ |
Stefan Berger | 92dcc23 | 2013-02-27 12:47:54 -0500 | [diff] [blame] | 2835 | "-tpmdev passthrough,id=id[,path=path][,cancel-path=path]\n" |
| 2836 | " use path to provide path to a character device; default is /dev/tpm0\n" |
| 2837 | " use cancel-path to provide path to TPM's cancel sysfs entry; if\n" |
Amarnath Valluri | f4ede81 | 2017-09-29 14:10:20 +0300 | [diff] [blame] | 2838 | " not provided it will be searched for in /sys/class/misc/tpm?/device\n" |
| 2839 | "-tpmdev emulator,id=id,chardev=dev\n" |
| 2840 | " configure the TPM device using chardev backend\n", |
Stefan Berger | d1a0cf7 | 2013-02-27 12:47:49 -0500 | [diff] [blame] | 2841 | QEMU_ARCH_ALL) |
| 2842 | STEXI |
| 2843 | |
| 2844 | The general form of a TPM device option is: |
| 2845 | @table @option |
| 2846 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2847 | @item -tpmdev @var{backend},id=@var{id}[,@var{options}] |
Stefan Berger | d1a0cf7 | 2013-02-27 12:47:49 -0500 | [diff] [blame] | 2848 | @findex -tpmdev |
Stefan Berger | d1a0cf7 | 2013-02-27 12:47:49 -0500 | [diff] [blame] | 2849 | |
| 2850 | The specific backend type will determine the applicable options. |
Corey Bryant | 28c4fa3 | 2013-03-20 12:34:49 -0400 | [diff] [blame] | 2851 | The @code{-tpmdev} option creates the TPM backend and requires a |
| 2852 | @code{-device} option that specifies the TPM frontend interface model. |
Stefan Berger | d1a0cf7 | 2013-02-27 12:47:49 -0500 | [diff] [blame] | 2853 | |
Markus Armbruster | 2252aaf | 2017-10-02 16:03:05 +0200 | [diff] [blame] | 2854 | Use @code{-tpmdev help} to print all available TPM backend types. |
Stefan Berger | d1a0cf7 | 2013-02-27 12:47:49 -0500 | [diff] [blame] | 2855 | |
Markus Armbruster | 2252aaf | 2017-10-02 16:03:05 +0200 | [diff] [blame] | 2856 | @end table |
| 2857 | |
| 2858 | The available backends are: |
| 2859 | |
| 2860 | @table @option |
Stefan Berger | d1a0cf7 | 2013-02-27 12:47:49 -0500 | [diff] [blame] | 2861 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2862 | @item -tpmdev passthrough,id=@var{id},path=@var{path},cancel-path=@var{cancel-path} |
Stefan Berger | 4549a8b | 2013-02-27 12:47:53 -0500 | [diff] [blame] | 2863 | |
| 2864 | (Linux-host only) Enable access to the host's TPM using the passthrough |
| 2865 | driver. |
| 2866 | |
| 2867 | @option{path} specifies the path to the host's TPM device, i.e., on |
| 2868 | a Linux host this would be @code{/dev/tpm0}. |
| 2869 | @option{path} is optional and by default @code{/dev/tpm0} is used. |
| 2870 | |
Stefan Berger | 92dcc23 | 2013-02-27 12:47:54 -0500 | [diff] [blame] | 2871 | @option{cancel-path} specifies the path to the host TPM device's sysfs |
| 2872 | entry allowing for cancellation of an ongoing TPM command. |
| 2873 | @option{cancel-path} is optional and by default QEMU will search for the |
| 2874 | sysfs entry to use. |
| 2875 | |
Stefan Berger | 4549a8b | 2013-02-27 12:47:53 -0500 | [diff] [blame] | 2876 | Some notes about using the host's TPM with the passthrough driver: |
| 2877 | |
| 2878 | The TPM device accessed by the passthrough driver must not be |
| 2879 | used by any other application on the host. |
| 2880 | |
| 2881 | Since the host's firmware (BIOS/UEFI) has already initialized the TPM, |
| 2882 | the VM's firmware (BIOS/UEFI) will not be able to initialize the |
| 2883 | TPM again and may therefore not show a TPM-specific menu that would |
| 2884 | otherwise allow the user to configure the TPM, e.g., allow the user to |
| 2885 | enable/disable or activate/deactivate the TPM. |
| 2886 | Further, if TPM ownership is released from within a VM then the host's TPM |
| 2887 | will get disabled and deactivated. To enable and activate the |
| 2888 | TPM again afterwards, the host has to be rebooted and the user is |
| 2889 | required to enter the firmware's menu to enable and activate the TPM. |
| 2890 | If the TPM is left disabled and/or deactivated most TPM commands will fail. |
| 2891 | |
| 2892 | To create a passthrough TPM use the following two options: |
| 2893 | @example |
| 2894 | -tpmdev passthrough,id=tpm0 -device tpm-tis,tpmdev=tpm0 |
| 2895 | @end example |
| 2896 | Note that the @code{-tpmdev} id is @code{tpm0} and is referenced by |
| 2897 | @code{tpmdev=tpm0} in the device option. |
| 2898 | |
Thomas Huth | 16fdc56 | 2018-01-30 10:36:21 +0100 | [diff] [blame] | 2899 | @item -tpmdev emulator,id=@var{id},chardev=@var{dev} |
Amarnath Valluri | f4ede81 | 2017-09-29 14:10:20 +0300 | [diff] [blame] | 2900 | |
| 2901 | (Linux-host only) Enable access to a TPM emulator using Unix domain socket based |
| 2902 | chardev backend. |
| 2903 | |
| 2904 | @option{chardev} specifies the unique ID of a character device backend that provides connection to the software TPM server. |
| 2905 | |
| 2906 | To create a TPM emulator backend device with chardev socket backend: |
| 2907 | @example |
| 2908 | |
| 2909 | -chardev socket,id=chrtpm,path=/tmp/swtpm-sock -tpmdev emulator,id=tpm0,chardev=chrtpm -device tpm-tis,tpmdev=tpm0 |
| 2910 | |
| 2911 | @end example |
| 2912 | |
Stefan Berger | d1a0cf7 | 2013-02-27 12:47:49 -0500 | [diff] [blame] | 2913 | ETEXI |
| 2914 | |
Markus Armbruster | 2252aaf | 2017-10-02 16:03:05 +0200 | [diff] [blame] | 2915 | STEXI |
| 2916 | @end table |
| 2917 | ETEXI |
Stefan Berger | d1a0cf7 | 2013-02-27 12:47:49 -0500 | [diff] [blame] | 2918 | DEFHEADING() |
| 2919 | |
| 2920 | #endif |
| 2921 | |
Markus Armbruster | de6b4f9 | 2017-10-02 16:03:00 +0200 | [diff] [blame] | 2922 | DEFHEADING(Linux/Multiboot boot specific:) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2923 | STEXI |
Alexander Graf | 7677f05 | 2009-06-28 16:55:55 +0200 | [diff] [blame] | 2924 | |
| 2925 | When using these options, you can use a given Linux or Multiboot |
| 2926 | kernel without installing it in the disk image. It can be useful |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2927 | for easier testing of various kernels. |
| 2928 | |
| 2929 | @table @option |
| 2930 | ETEXI |
| 2931 | |
| 2932 | DEF("kernel", HAS_ARG, QEMU_OPTION_kernel, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 2933 | "-kernel bzImage use 'bzImage' as kernel image\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2934 | STEXI |
| 2935 | @item -kernel @var{bzImage} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 2936 | @findex -kernel |
Alexander Graf | 7677f05 | 2009-06-28 16:55:55 +0200 | [diff] [blame] | 2937 | Use @var{bzImage} as kernel image. The kernel can be either a Linux kernel |
| 2938 | or in multiboot format. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2939 | ETEXI |
| 2940 | |
| 2941 | DEF("append", HAS_ARG, QEMU_OPTION_append, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 2942 | "-append cmdline use 'cmdline' as kernel command line\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2943 | STEXI |
| 2944 | @item -append @var{cmdline} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 2945 | @findex -append |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2946 | Use @var{cmdline} as kernel command line |
| 2947 | ETEXI |
| 2948 | |
| 2949 | DEF("initrd", HAS_ARG, QEMU_OPTION_initrd, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 2950 | "-initrd file use 'file' as initial ram disk\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2951 | STEXI |
| 2952 | @item -initrd @var{file} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 2953 | @findex -initrd |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2954 | Use @var{file} as initial ram disk. |
Alexander Graf | 7677f05 | 2009-06-28 16:55:55 +0200 | [diff] [blame] | 2955 | |
| 2956 | @item -initrd "@var{file1} arg=foo,@var{file2}" |
| 2957 | |
| 2958 | This syntax is only available with multiboot. |
| 2959 | |
| 2960 | Use @var{file1} and @var{file2} as modules and pass arg=foo as parameter to the |
| 2961 | first module. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2962 | ETEXI |
| 2963 | |
Grant Likely | 412beee | 2012-03-02 11:56:38 +0000 | [diff] [blame] | 2964 | DEF("dtb", HAS_ARG, QEMU_OPTION_dtb, \ |
Peter A. G. Crosthwaite | 379b5c7 | 2012-03-04 21:03:54 +1000 | [diff] [blame] | 2965 | "-dtb file use 'file' as device tree image\n", QEMU_ARCH_ALL) |
Grant Likely | 412beee | 2012-03-02 11:56:38 +0000 | [diff] [blame] | 2966 | STEXI |
| 2967 | @item -dtb @var{file} |
| 2968 | @findex -dtb |
| 2969 | Use @var{file} as a device tree binary (dtb) image and pass it to the kernel |
| 2970 | on boot. |
| 2971 | ETEXI |
| 2972 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2973 | STEXI |
| 2974 | @end table |
| 2975 | ETEXI |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2976 | DEFHEADING() |
| 2977 | |
Markus Armbruster | de6b4f9 | 2017-10-02 16:03:00 +0200 | [diff] [blame] | 2978 | DEFHEADING(Debug/Expert options:) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 2979 | STEXI |
| 2980 | @table @option |
| 2981 | ETEXI |
| 2982 | |
Gabriel L. Somlo | 81b2b81 | 2015-04-29 11:21:53 -0400 | [diff] [blame] | 2983 | DEF("fw_cfg", HAS_ARG, QEMU_OPTION_fwcfg, |
| 2984 | "-fw_cfg [name=]<name>,file=<file>\n" |
Markus Armbruster | 63d3145 | 2016-04-18 18:29:50 +0200 | [diff] [blame] | 2985 | " add named fw_cfg entry with contents from file\n" |
Gabriel L. Somlo | 6407d76 | 2015-09-29 12:29:01 -0400 | [diff] [blame] | 2986 | "-fw_cfg [name=]<name>,string=<str>\n" |
Markus Armbruster | 63d3145 | 2016-04-18 18:29:50 +0200 | [diff] [blame] | 2987 | " add named fw_cfg entry with contents from string\n", |
Gabriel L. Somlo | 81b2b81 | 2015-04-29 11:21:53 -0400 | [diff] [blame] | 2988 | QEMU_ARCH_ALL) |
| 2989 | STEXI |
Markus Armbruster | 63d3145 | 2016-04-18 18:29:50 +0200 | [diff] [blame] | 2990 | |
Gabriel L. Somlo | 81b2b81 | 2015-04-29 11:21:53 -0400 | [diff] [blame] | 2991 | @item -fw_cfg [name=]@var{name},file=@var{file} |
| 2992 | @findex -fw_cfg |
Markus Armbruster | 63d3145 | 2016-04-18 18:29:50 +0200 | [diff] [blame] | 2993 | Add named fw_cfg entry with contents from file @var{file}. |
Gabriel L. Somlo | 6407d76 | 2015-09-29 12:29:01 -0400 | [diff] [blame] | 2994 | |
| 2995 | @item -fw_cfg [name=]@var{name},string=@var{str} |
Markus Armbruster | 63d3145 | 2016-04-18 18:29:50 +0200 | [diff] [blame] | 2996 | Add named fw_cfg entry with contents from string @var{str}. |
| 2997 | |
| 2998 | The terminating NUL character of the contents of @var{str} will not be |
| 2999 | included as part of the fw_cfg item data. To insert contents with |
| 3000 | embedded NUL characters, you have to use the @var{file} parameter. |
| 3001 | |
| 3002 | The fw_cfg entries are passed by QEMU through to the guest. |
| 3003 | |
| 3004 | Example: |
| 3005 | @example |
| 3006 | -fw_cfg name=opt/com.mycompany/blob,file=./my_blob.bin |
| 3007 | @end example |
| 3008 | creates an fw_cfg entry named opt/com.mycompany/blob with contents |
| 3009 | from ./my_blob.bin. |
| 3010 | |
Gabriel L. Somlo | 81b2b81 | 2015-04-29 11:21:53 -0400 | [diff] [blame] | 3011 | ETEXI |
| 3012 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3013 | DEF("serial", HAS_ARG, QEMU_OPTION_serial, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3014 | "-serial dev redirect the serial port to char device 'dev'\n", |
| 3015 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3016 | STEXI |
| 3017 | @item -serial @var{dev} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3018 | @findex -serial |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3019 | Redirect the virtual serial port to host character device |
| 3020 | @var{dev}. The default device is @code{vc} in graphical mode and |
| 3021 | @code{stdio} in non graphical mode. |
| 3022 | |
| 3023 | This option can be used several times to simulate up to 4 serial |
| 3024 | ports. |
| 3025 | |
| 3026 | Use @code{-serial none} to disable all serial ports. |
| 3027 | |
| 3028 | Available character devices are: |
Kevin Wolf | b3f046c | 2009-10-09 10:58:35 +0200 | [diff] [blame] | 3029 | @table @option |
Kevin Wolf | 4e257e5 | 2009-10-09 10:58:36 +0200 | [diff] [blame] | 3030 | @item vc[:@var{W}x@var{H}] |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3031 | Virtual console. Optionally, a width and height can be given in pixel with |
| 3032 | @example |
| 3033 | vc:800x600 |
| 3034 | @end example |
| 3035 | It is also possible to specify width or height in characters: |
| 3036 | @example |
| 3037 | vc:80Cx24C |
| 3038 | @end example |
| 3039 | @item pty |
| 3040 | [Linux only] Pseudo TTY (a new PTY is automatically allocated) |
| 3041 | @item none |
| 3042 | No device is allocated. |
| 3043 | @item null |
| 3044 | void device |
Ingo van Lil | 88e020e | 2013-12-20 14:44:53 +0100 | [diff] [blame] | 3045 | @item chardev:@var{id} |
| 3046 | Use a named character device defined with the @code{-chardev} option. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3047 | @item /dev/XXX |
| 3048 | [Linux only] Use host tty, e.g. @file{/dev/ttyS0}. The host serial port |
| 3049 | parameters are set according to the emulated ones. |
| 3050 | @item /dev/parport@var{N} |
| 3051 | [Linux only, parallel port only] Use host parallel port |
| 3052 | @var{N}. Currently SPP and EPP parallel port features can be used. |
| 3053 | @item file:@var{filename} |
| 3054 | Write output to @var{filename}. No character can be read. |
| 3055 | @item stdio |
| 3056 | [Unix only] standard input/output |
| 3057 | @item pipe:@var{filename} |
| 3058 | name pipe @var{filename} |
| 3059 | @item COM@var{n} |
| 3060 | [Windows only] Use host serial port @var{n} |
| 3061 | @item udp:[@var{remote_host}]:@var{remote_port}[@@[@var{src_ip}]:@var{src_port}] |
| 3062 | This implements UDP Net Console. |
| 3063 | When @var{remote_host} or @var{src_ip} are not specified |
| 3064 | they default to @code{0.0.0.0}. |
| 3065 | When not using a specified @var{src_port} a random port is automatically chosen. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3066 | |
| 3067 | If you just want a simple readonly console you can use @code{netcat} or |
Stefan Weil | b65ee4f | 2012-05-11 22:25:50 +0200 | [diff] [blame] | 3068 | @code{nc}, by starting QEMU with: @code{-serial udp::4555} and nc as: |
| 3069 | @code{nc -u -l -p 4555}. Any time QEMU writes something to that port it |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3070 | will appear in the netconsole session. |
| 3071 | |
| 3072 | If you plan to send characters back via netconsole or you want to stop |
Stefan Weil | b65ee4f | 2012-05-11 22:25:50 +0200 | [diff] [blame] | 3073 | and start QEMU a lot of times, you should have QEMU use the same |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3074 | source port each time by using something like @code{-serial |
Stefan Weil | b65ee4f | 2012-05-11 22:25:50 +0200 | [diff] [blame] | 3075 | udp::4555@@:4556} to QEMU. Another approach is to use a patched |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3076 | version of netcat which can listen to a TCP port and send and receive |
| 3077 | characters via udp. If you have a patched version of netcat which |
| 3078 | activates telnet remote echo and single char transfer, then you can |
Marc-André Lureau | bd1caa3 | 2016-12-22 18:56:38 +0400 | [diff] [blame] | 3079 | use the following options to set up a netcat redirector to allow |
Stefan Weil | b65ee4f | 2012-05-11 22:25:50 +0200 | [diff] [blame] | 3080 | telnet on port 5555 to access the QEMU port. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3081 | @table @code |
Stefan Weil | 071c939 | 2012-04-07 09:23:36 +0200 | [diff] [blame] | 3082 | @item QEMU Options: |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3083 | -serial udp::4555@@:4556 |
| 3084 | @item netcat options: |
| 3085 | -u -P 4555 -L 0.0.0.0:4556 -t -p 5555 -I -T |
| 3086 | @item telnet options: |
| 3087 | localhost 5555 |
| 3088 | @end table |
| 3089 | |
Corey Minyard | 5dd1f02 | 2014-10-02 11:17:37 -0500 | [diff] [blame] | 3090 | @item tcp:[@var{host}]:@var{port}[,@var{server}][,nowait][,nodelay][,reconnect=@var{seconds}] |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3091 | The TCP Net Console has two modes of operation. It can send the serial |
| 3092 | I/O to a location or wait for a connection from a location. By default |
| 3093 | the TCP Net Console is sent to @var{host} at the @var{port}. If you use |
| 3094 | the @var{server} option QEMU will wait for a client socket application |
| 3095 | to connect to the port before continuing, unless the @code{nowait} |
| 3096 | option was specified. The @code{nodelay} option disables the Nagle buffering |
Corey Minyard | 5dd1f02 | 2014-10-02 11:17:37 -0500 | [diff] [blame] | 3097 | algorithm. The @code{reconnect} option only applies if @var{noserver} is |
| 3098 | set, if the connection goes down it will attempt to reconnect at the |
| 3099 | given interval. If @var{host} is omitted, 0.0.0.0 is assumed. Only |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3100 | one TCP connection at a time is accepted. You can use @code{telnet} to |
| 3101 | connect to the corresponding character device. |
| 3102 | @table @code |
| 3103 | @item Example to send tcp console to 192.168.0.2 port 4444 |
| 3104 | -serial tcp:192.168.0.2:4444 |
| 3105 | @item Example to listen and wait on port 4444 for connection |
| 3106 | -serial tcp::4444,server |
| 3107 | @item Example to not wait and listen on ip 192.168.0.100 port 4444 |
| 3108 | -serial tcp:192.168.0.100:4444,server,nowait |
| 3109 | @end table |
| 3110 | |
| 3111 | @item telnet:@var{host}:@var{port}[,server][,nowait][,nodelay] |
| 3112 | The telnet protocol is used instead of raw tcp sockets. The options |
| 3113 | work the same as if you had specified @code{-serial tcp}. The |
| 3114 | difference is that the port acts like a telnet server or client using |
| 3115 | telnet option negotiation. This will also allow you to send the |
| 3116 | MAGIC_SYSRQ sequence if you use a telnet that supports sending the break |
| 3117 | sequence. Typically in unix telnet you do it with Control-] and then |
| 3118 | type "send break" followed by pressing the enter key. |
| 3119 | |
Julia Suvorova | 981b06e | 2018-10-19 01:35:00 +0300 | [diff] [blame] | 3120 | @item websocket:@var{host}:@var{port},server[,nowait][,nodelay] |
| 3121 | The WebSocket protocol is used instead of raw tcp socket. The port acts as |
| 3122 | a WebSocket server. Client mode is not supported. |
| 3123 | |
Corey Minyard | 5dd1f02 | 2014-10-02 11:17:37 -0500 | [diff] [blame] | 3124 | @item unix:@var{path}[,server][,nowait][,reconnect=@var{seconds}] |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3125 | A unix domain socket is used instead of a tcp socket. The option works the |
| 3126 | same as if you had specified @code{-serial tcp} except the unix domain socket |
| 3127 | @var{path} is used for connections. |
| 3128 | |
| 3129 | @item mon:@var{dev_string} |
| 3130 | This is a special option to allow the monitor to be multiplexed onto |
| 3131 | another serial port. The monitor is accessed with key sequence of |
Paolo Bonzini | 02c4bdf | 2013-07-03 20:29:45 +0400 | [diff] [blame] | 3132 | @key{Control-a} and then pressing @key{c}. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3133 | @var{dev_string} should be any one of the serial devices specified |
| 3134 | above. An example to multiplex the monitor onto a telnet server |
| 3135 | listening on port 4444 would be: |
| 3136 | @table @code |
| 3137 | @item -serial mon:telnet::4444,server,nowait |
| 3138 | @end table |
Michael Tokarev | be022d6 | 2013-07-11 12:55:50 +0400 | [diff] [blame] | 3139 | When the monitor is multiplexed to stdio in this way, Ctrl+C will not terminate |
| 3140 | QEMU any more but will be passed to the guest instead. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3141 | |
| 3142 | @item braille |
| 3143 | Braille device. This will use BrlAPI to display the braille output on a real |
| 3144 | or fake device. |
| 3145 | |
Kevin Wolf | be8b28a | 2009-10-09 10:58:37 +0200 | [diff] [blame] | 3146 | @item msmouse |
| 3147 | Three button serial mouse. Configure the guest to use Microsoft protocol. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3148 | @end table |
| 3149 | ETEXI |
| 3150 | |
| 3151 | DEF("parallel", HAS_ARG, QEMU_OPTION_parallel, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3152 | "-parallel dev redirect the parallel port to char device 'dev'\n", |
| 3153 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3154 | STEXI |
| 3155 | @item -parallel @var{dev} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3156 | @findex -parallel |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3157 | Redirect the virtual parallel port to host device @var{dev} (same |
| 3158 | devices as the serial port). On Linux hosts, @file{/dev/parportN} can |
| 3159 | be used to use hardware devices connected on the corresponding host |
| 3160 | parallel port. |
| 3161 | |
| 3162 | This option can be used several times to simulate up to 3 parallel |
| 3163 | ports. |
| 3164 | |
| 3165 | Use @code{-parallel none} to disable all parallel ports. |
| 3166 | ETEXI |
| 3167 | |
| 3168 | DEF("monitor", HAS_ARG, QEMU_OPTION_monitor, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3169 | "-monitor dev redirect the monitor to char device 'dev'\n", |
| 3170 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3171 | STEXI |
Gerd Hoffmann | 4e307fc | 2009-12-08 13:11:37 +0100 | [diff] [blame] | 3172 | @item -monitor @var{dev} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3173 | @findex -monitor |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3174 | Redirect the monitor to host device @var{dev} (same devices as the |
| 3175 | serial port). |
| 3176 | The default device is @code{vc} in graphical mode and @code{stdio} in |
| 3177 | non graphical mode. |
Luiz Capitulino | 70e098a | 2013-05-16 12:02:55 -0400 | [diff] [blame] | 3178 | Use @code{-monitor none} to disable the default monitor. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3179 | ETEXI |
Gerd Hoffmann | 6ca5582 | 2009-12-08 13:11:52 +0100 | [diff] [blame] | 3180 | DEF("qmp", HAS_ARG, QEMU_OPTION_qmp, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3181 | "-qmp dev like -monitor but opens in 'control' mode\n", |
| 3182 | QEMU_ARCH_ALL) |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 3183 | STEXI |
| 3184 | @item -qmp @var{dev} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3185 | @findex -qmp |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 3186 | Like -monitor but opens in 'control' mode. |
| 3187 | ETEXI |
Max Reitz | 4821cd4 | 2014-11-17 13:31:04 +0100 | [diff] [blame] | 3188 | DEF("qmp-pretty", HAS_ARG, QEMU_OPTION_qmp_pretty, \ |
| 3189 | "-qmp-pretty dev like -qmp but uses pretty JSON formatting\n", |
| 3190 | QEMU_ARCH_ALL) |
| 3191 | STEXI |
| 3192 | @item -qmp-pretty @var{dev} |
| 3193 | @findex -qmp-pretty |
| 3194 | Like -qmp but uses pretty JSON formatting. |
| 3195 | ETEXI |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3196 | |
Gerd Hoffmann | 22a0e04 | 2009-12-08 13:11:51 +0100 | [diff] [blame] | 3197 | DEF("mon", HAS_ARG, QEMU_OPTION_mon, \ |
Vicente Jimenez Aguilar | ef67072 | 2017-11-14 09:11:27 +0100 | [diff] [blame] | 3198 | "-mon [chardev=]name[,mode=readline|control][,pretty[=on|off]]\n", QEMU_ARCH_ALL) |
Gerd Hoffmann | 22a0e04 | 2009-12-08 13:11:51 +0100 | [diff] [blame] | 3199 | STEXI |
Vicente Jimenez Aguilar | ef67072 | 2017-11-14 09:11:27 +0100 | [diff] [blame] | 3200 | @item -mon [chardev=]name[,mode=readline|control][,pretty[=on|off]] |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3201 | @findex -mon |
Vicente Jimenez Aguilar | ef67072 | 2017-11-14 09:11:27 +0100 | [diff] [blame] | 3202 | Setup monitor on chardev @var{name}. @code{pretty} turns on JSON pretty printing |
| 3203 | easing human reading and debugging. |
Gerd Hoffmann | 22a0e04 | 2009-12-08 13:11:51 +0100 | [diff] [blame] | 3204 | ETEXI |
| 3205 | |
H. Peter Anvin | c9f398e | 2009-12-29 13:51:36 -0800 | [diff] [blame] | 3206 | DEF("debugcon", HAS_ARG, QEMU_OPTION_debugcon, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3207 | "-debugcon dev redirect the debug console to char device 'dev'\n", |
| 3208 | QEMU_ARCH_ALL) |
H. Peter Anvin | c9f398e | 2009-12-29 13:51:36 -0800 | [diff] [blame] | 3209 | STEXI |
| 3210 | @item -debugcon @var{dev} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3211 | @findex -debugcon |
H. Peter Anvin | c9f398e | 2009-12-29 13:51:36 -0800 | [diff] [blame] | 3212 | Redirect the debug console to host device @var{dev} (same devices as the |
| 3213 | serial port). The debug console is an I/O port which is typically port |
| 3214 | 0xe9; writing to that I/O port sends output to this device. |
| 3215 | The default device is @code{vc} in graphical mode and @code{stdio} in |
| 3216 | non graphical mode. |
| 3217 | ETEXI |
| 3218 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3219 | DEF("pidfile", HAS_ARG, QEMU_OPTION_pidfile, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3220 | "-pidfile file write PID to 'file'\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3221 | STEXI |
| 3222 | @item -pidfile @var{file} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3223 | @findex -pidfile |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3224 | Store the QEMU process PID in @var{file}. It is useful if you launch QEMU |
| 3225 | from a script. |
| 3226 | ETEXI |
| 3227 | |
aurel32 | 1b530a6 | 2009-04-05 20:08:59 +0000 | [diff] [blame] | 3228 | DEF("singlestep", 0, QEMU_OPTION_singlestep, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3229 | "-singlestep always run in singlestep mode\n", QEMU_ARCH_ALL) |
aurel32 | 1b530a6 | 2009-04-05 20:08:59 +0000 | [diff] [blame] | 3230 | STEXI |
| 3231 | @item -singlestep |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3232 | @findex -singlestep |
aurel32 | 1b530a6 | 2009-04-05 20:08:59 +0000 | [diff] [blame] | 3233 | Run the emulation in single step mode. |
| 3234 | ETEXI |
| 3235 | |
Igor Mammedov | 047f703 | 2018-05-11 19:24:43 +0200 | [diff] [blame] | 3236 | DEF("preconfig", 0, QEMU_OPTION_preconfig, \ |
Markus Armbruster | 361ac94 | 2018-07-05 11:14:02 +0200 | [diff] [blame] | 3237 | "--preconfig pause QEMU before machine is initialized (experimental)\n", |
Igor Mammedov | 047f703 | 2018-05-11 19:24:43 +0200 | [diff] [blame] | 3238 | QEMU_ARCH_ALL) |
| 3239 | STEXI |
| 3240 | @item --preconfig |
| 3241 | @findex --preconfig |
| 3242 | Pause QEMU for interactive configuration before the machine is created, |
| 3243 | which allows querying and configuring properties that will affect |
Markus Armbruster | 361ac94 | 2018-07-05 11:14:02 +0200 | [diff] [blame] | 3244 | machine initialization. Use QMP command 'x-exit-preconfig' to exit |
| 3245 | the preconfig state and move to the next state (i.e. run guest if -S |
| 3246 | isn't used or pause the second time if -S is used). This option is |
| 3247 | experimental. |
Igor Mammedov | 047f703 | 2018-05-11 19:24:43 +0200 | [diff] [blame] | 3248 | ETEXI |
| 3249 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3250 | DEF("S", 0, QEMU_OPTION_S, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3251 | "-S freeze CPU at startup (use 'c' to start execution)\n", |
| 3252 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3253 | STEXI |
| 3254 | @item -S |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3255 | @findex -S |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3256 | Do not start CPU at startup (you must type 'c' in the monitor). |
| 3257 | ETEXI |
| 3258 | |
Satoru Moriya | 888a6bc | 2013-04-19 16:42:06 +0200 | [diff] [blame] | 3259 | DEF("realtime", HAS_ARG, QEMU_OPTION_realtime, |
| 3260 | "-realtime [mlock=on|off]\n" |
| 3261 | " run qemu with realtime features\n" |
| 3262 | " mlock=on|off controls mlock support (default: on)\n", |
| 3263 | QEMU_ARCH_ALL) |
| 3264 | STEXI |
| 3265 | @item -realtime mlock=on|off |
| 3266 | @findex -realtime |
| 3267 | Run qemu with realtime features. |
| 3268 | mlocking qemu and guest memory can be enabled via @option{mlock=on} |
| 3269 | (enabled by default). |
| 3270 | ETEXI |
| 3271 | |
Michael S. Tsirkin | 6f131f1 | 2018-06-22 22:22:05 +0300 | [diff] [blame] | 3272 | DEF("overcommit", HAS_ARG, QEMU_OPTION_overcommit, |
BALATON Zoltan | dfaa7d5 | 2018-07-16 21:12:08 +0200 | [diff] [blame] | 3273 | "-overcommit [mem-lock=on|off][cpu-pm=on|off]\n" |
Michael S. Tsirkin | 6f131f1 | 2018-06-22 22:22:05 +0300 | [diff] [blame] | 3274 | " run qemu with overcommit hints\n" |
| 3275 | " mem-lock=on|off controls memory lock support (default: off)\n" |
| 3276 | " cpu-pm=on|off controls cpu power management (default: off)\n", |
| 3277 | QEMU_ARCH_ALL) |
| 3278 | STEXI |
| 3279 | @item -overcommit mem-lock=on|off |
| 3280 | @item -overcommit cpu-pm=on|off |
| 3281 | @findex -overcommit |
| 3282 | Run qemu with hints about host resource overcommit. The default is |
| 3283 | to assume that host overcommits all resources. |
| 3284 | |
| 3285 | Locking qemu and guest memory can be enabled via @option{mem-lock=on} (disabled |
| 3286 | by default). This works when host memory is not overcommitted and reduces the |
| 3287 | worst-case latency for guest. This is equivalent to @option{realtime}. |
| 3288 | |
| 3289 | Guest ability to manage power state of host cpus (increasing latency for other |
| 3290 | processes on the same host cpu, but decreasing latency for guest) can be |
| 3291 | enabled via @option{cpu-pm=on} (disabled by default). This works best when |
| 3292 | host CPU is not overcommitted. When used, host estimates of CPU cycle and power |
| 3293 | utilization will be incorrect, not taking into account guest idle time. |
| 3294 | ETEXI |
| 3295 | |
aliguori | 59030a8 | 2009-04-05 18:43:41 +0000 | [diff] [blame] | 3296 | DEF("gdb", HAS_ARG, QEMU_OPTION_gdb, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3297 | "-gdb dev wait for gdb connection on 'dev'\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3298 | STEXI |
aliguori | 59030a8 | 2009-04-05 18:43:41 +0000 | [diff] [blame] | 3299 | @item -gdb @var{dev} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3300 | @findex -gdb |
aliguori | 59030a8 | 2009-04-05 18:43:41 +0000 | [diff] [blame] | 3301 | Wait for gdb connection on device @var{dev} (@pxref{gdb_usage}). Typical |
| 3302 | connections will likely be TCP-based, but also UDP, pseudo TTY, or even |
Stefan Weil | b65ee4f | 2012-05-11 22:25:50 +0200 | [diff] [blame] | 3303 | stdio are reasonable use case. The latter is allowing to start QEMU from |
aliguori | 59030a8 | 2009-04-05 18:43:41 +0000 | [diff] [blame] | 3304 | within gdb and establish the connection via a pipe: |
| 3305 | @example |
Stefan Weil | 3804da9 | 2012-05-11 22:21:50 +0200 | [diff] [blame] | 3306 | (gdb) target remote | exec qemu-system-i386 -gdb stdio ... |
aliguori | 59030a8 | 2009-04-05 18:43:41 +0000 | [diff] [blame] | 3307 | @end example |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3308 | ETEXI |
| 3309 | |
aliguori | 59030a8 | 2009-04-05 18:43:41 +0000 | [diff] [blame] | 3310 | DEF("s", 0, QEMU_OPTION_s, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3311 | "-s shorthand for -gdb tcp::" DEFAULT_GDBSTUB_PORT "\n", |
| 3312 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3313 | STEXI |
aliguori | 59030a8 | 2009-04-05 18:43:41 +0000 | [diff] [blame] | 3314 | @item -s |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3315 | @findex -s |
aliguori | 59030a8 | 2009-04-05 18:43:41 +0000 | [diff] [blame] | 3316 | Shorthand for -gdb tcp::1234, i.e. open a gdbserver on TCP port 1234 |
| 3317 | (@pxref{gdb_usage}). |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3318 | ETEXI |
| 3319 | |
| 3320 | DEF("d", HAS_ARG, QEMU_OPTION_d, \ |
Peter Maydell | 989b697 | 2013-02-26 17:52:40 +0000 | [diff] [blame] | 3321 | "-d item1,... enable logging of specified items (use '-d help' for a list of log items)\n", |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3322 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3323 | STEXI |
Peter Maydell | 989b697 | 2013-02-26 17:52:40 +0000 | [diff] [blame] | 3324 | @item -d @var{item1}[,...] |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3325 | @findex -d |
Peter Maydell | 989b697 | 2013-02-26 17:52:40 +0000 | [diff] [blame] | 3326 | Enable logging of specified items. Use '-d help' for a list of log items. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3327 | ETEXI |
| 3328 | |
Matthew Fernandez | c235d73 | 2011-06-07 16:32:40 +0000 | [diff] [blame] | 3329 | DEF("D", HAS_ARG, QEMU_OPTION_D, \ |
Peter Maydell | 989b697 | 2013-02-26 17:52:40 +0000 | [diff] [blame] | 3330 | "-D logfile output log to logfile (default stderr)\n", |
Matthew Fernandez | c235d73 | 2011-06-07 16:32:40 +0000 | [diff] [blame] | 3331 | QEMU_ARCH_ALL) |
| 3332 | STEXI |
Stefan Weil | 8bd383b | 2012-05-11 22:40:50 +0200 | [diff] [blame] | 3333 | @item -D @var{logfile} |
Matthew Fernandez | c235d73 | 2011-06-07 16:32:40 +0000 | [diff] [blame] | 3334 | @findex -D |
Peter Maydell | 989b697 | 2013-02-26 17:52:40 +0000 | [diff] [blame] | 3335 | Output log in @var{logfile} instead of to stderr |
Matthew Fernandez | c235d73 | 2011-06-07 16:32:40 +0000 | [diff] [blame] | 3336 | ETEXI |
| 3337 | |
Alex Bennée | 3514552 | 2016-03-15 14:30:20 +0000 | [diff] [blame] | 3338 | DEF("dfilter", HAS_ARG, QEMU_OPTION_DFILTER, \ |
| 3339 | "-dfilter range,.. filter debug output to range of addresses (useful for -d cpu,exec,etc..)\n", |
| 3340 | QEMU_ARCH_ALL) |
| 3341 | STEXI |
| 3342 | @item -dfilter @var{range1}[,...] |
| 3343 | @findex -dfilter |
| 3344 | Filter debug output to that relevant to a range of target addresses. The filter |
| 3345 | spec can be either @var{start}+@var{size}, @var{start}-@var{size} or |
| 3346 | @var{start}..@var{end} where @var{start} @var{end} and @var{size} are the |
| 3347 | addresses and sizes required. For example: |
| 3348 | @example |
| 3349 | -dfilter 0x8000..0x8fff,0xffffffc000080000+0x200,0xffffffc000060000-0x1000 |
| 3350 | @end example |
| 3351 | Will dump output for any code in the 0x1000 sized block starting at 0x8000 and |
| 3352 | the 0x200 sized block starting at 0xffffffc000080000 and another 0x1000 sized |
| 3353 | block starting at 0xffffffc00005f000. |
| 3354 | ETEXI |
| 3355 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3356 | DEF("L", HAS_ARG, QEMU_OPTION_L, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3357 | "-L path set the directory for the BIOS, VGA BIOS and keymaps\n", |
| 3358 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3359 | STEXI |
| 3360 | @item -L @var{path} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3361 | @findex -L |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3362 | Set the directory for the BIOS, VGA BIOS and keymaps. |
Richard W.M. Jones | 37146e7 | 2016-05-16 17:34:35 +0100 | [diff] [blame] | 3363 | |
| 3364 | To list all the data directories, use @code{-L help}. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3365 | ETEXI |
| 3366 | |
| 3367 | DEF("bios", HAS_ARG, QEMU_OPTION_bios, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3368 | "-bios file set the filename for the BIOS\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3369 | STEXI |
| 3370 | @item -bios @var{file} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3371 | @findex -bios |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3372 | Set the filename for the BIOS. |
| 3373 | ETEXI |
| 3374 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3375 | DEF("enable-kvm", 0, QEMU_OPTION_enable_kvm, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3376 | "-enable-kvm enable KVM full virtualization support\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3377 | STEXI |
| 3378 | @item -enable-kvm |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3379 | @findex -enable-kvm |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3380 | Enable KVM full virtualization support. This option is only available |
| 3381 | if KVM support is enabled when compiling. |
| 3382 | ETEXI |
| 3383 | |
Vincent Palatin | b0cb0a6 | 2017-01-10 11:59:57 +0100 | [diff] [blame] | 3384 | DEF("enable-hax", 0, QEMU_OPTION_enable_hax, \ |
| 3385 | "-enable-hax enable HAX virtualization support\n", QEMU_ARCH_I386) |
| 3386 | STEXI |
| 3387 | @item -enable-hax |
| 3388 | @findex -enable-hax |
| 3389 | Enable HAX (Hardware-based Acceleration eXecution) support. This option |
| 3390 | is only available if HAX support is enabled when compiling. HAX is only |
| 3391 | applicable to MAC and Windows platform, and thus does not conflict with |
Thomas Huth | c44df2f | 2018-06-25 20:22:13 +0200 | [diff] [blame] | 3392 | KVM. This option is deprecated, use @option{-accel hax} instead. |
Vincent Palatin | b0cb0a6 | 2017-01-10 11:59:57 +0100 | [diff] [blame] | 3393 | ETEXI |
| 3394 | |
aliguori | e37630c | 2009-04-22 15:19:10 +0000 | [diff] [blame] | 3395 | DEF("xen-domid", HAS_ARG, QEMU_OPTION_xen_domid, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3396 | "-xen-domid id specify xen guest domain id\n", QEMU_ARCH_ALL) |
aliguori | e37630c | 2009-04-22 15:19:10 +0000 | [diff] [blame] | 3397 | DEF("xen-create", 0, QEMU_OPTION_xen_create, |
| 3398 | "-xen-create create domain using xen hypercalls, bypassing xend\n" |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3399 | " warning: should not be used when xend is in use\n", |
| 3400 | QEMU_ARCH_ALL) |
aliguori | e37630c | 2009-04-22 15:19:10 +0000 | [diff] [blame] | 3401 | DEF("xen-attach", 0, QEMU_OPTION_xen_attach, |
| 3402 | "-xen-attach attach to existing xen domain\n" |
Stefan Weil | b65ee4f | 2012-05-11 22:25:50 +0200 | [diff] [blame] | 3403 | " xend will use this when starting QEMU\n", |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3404 | QEMU_ARCH_ALL) |
Paul Durrant | 1c59947 | 2017-03-22 09:39:15 +0000 | [diff] [blame] | 3405 | DEF("xen-domid-restrict", 0, QEMU_OPTION_xen_domid_restrict, |
| 3406 | "-xen-domid-restrict restrict set of available xen operations\n" |
| 3407 | " to specified domain id. (Does not affect\n" |
| 3408 | " xenpv machine type).\n", |
| 3409 | QEMU_ARCH_ALL) |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 3410 | STEXI |
| 3411 | @item -xen-domid @var{id} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3412 | @findex -xen-domid |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 3413 | Specify xen guest domain @var{id} (XEN only). |
| 3414 | @item -xen-create |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3415 | @findex -xen-create |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 3416 | Create domain using xen hypercalls, bypassing xend. |
| 3417 | Warning: should not be used when xend is in use (XEN only). |
| 3418 | @item -xen-attach |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3419 | @findex -xen-attach |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 3420 | Attach to existing xen domain. |
Stefan Weil | b65ee4f | 2012-05-11 22:25:50 +0200 | [diff] [blame] | 3421 | xend will use this when starting QEMU (XEN only). |
Paul Durrant | 1c59947 | 2017-03-22 09:39:15 +0000 | [diff] [blame] | 3422 | @findex -xen-domid-restrict |
| 3423 | Restrict set of available xen operations to specified domain id (XEN only). |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 3424 | ETEXI |
aliguori | e37630c | 2009-04-22 15:19:10 +0000 | [diff] [blame] | 3425 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3426 | DEF("no-reboot", 0, QEMU_OPTION_no_reboot, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3427 | "-no-reboot exit instead of rebooting\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3428 | STEXI |
| 3429 | @item -no-reboot |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3430 | @findex -no-reboot |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3431 | Exit instead of rebooting. |
| 3432 | ETEXI |
| 3433 | |
| 3434 | DEF("no-shutdown", 0, QEMU_OPTION_no_shutdown, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3435 | "-no-shutdown stop before shutdown\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3436 | STEXI |
| 3437 | @item -no-shutdown |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3438 | @findex -no-shutdown |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3439 | Don't exit QEMU on guest shutdown, but instead only stop the emulation. |
| 3440 | This allows for instance switching to monitor to commit changes to the |
| 3441 | disk image. |
| 3442 | ETEXI |
| 3443 | |
| 3444 | DEF("loadvm", HAS_ARG, QEMU_OPTION_loadvm, \ |
| 3445 | "-loadvm [tag|id]\n" \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3446 | " start right away with a saved state (loadvm in monitor)\n", |
| 3447 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3448 | STEXI |
| 3449 | @item -loadvm @var{file} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3450 | @findex -loadvm |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3451 | Start right away with a saved state (@code{loadvm} in monitor) |
| 3452 | ETEXI |
| 3453 | |
| 3454 | #ifndef _WIN32 |
| 3455 | DEF("daemonize", 0, QEMU_OPTION_daemonize, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3456 | "-daemonize daemonize QEMU after initializing\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3457 | #endif |
| 3458 | STEXI |
| 3459 | @item -daemonize |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3460 | @findex -daemonize |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3461 | Daemonize the QEMU process after initialization. QEMU will not detach from |
| 3462 | standard IO until it is ready to receive connections on any of its devices. |
| 3463 | This option is a useful way for external programs to launch QEMU without having |
| 3464 | to cope with initialization race conditions. |
| 3465 | ETEXI |
| 3466 | |
| 3467 | DEF("option-rom", HAS_ARG, QEMU_OPTION_option_rom, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3468 | "-option-rom rom load a file, rom, into the option ROM space\n", |
| 3469 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3470 | STEXI |
| 3471 | @item -option-rom @var{file} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3472 | @findex -option-rom |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3473 | Load the contents of @var{file} as an option ROM. |
| 3474 | This option is useful to load things like EtherBoot. |
| 3475 | ETEXI |
| 3476 | |
Markus Armbruster | e218052 | 2014-10-06 16:19:07 +0200 | [diff] [blame] | 3477 | HXCOMM Silently ignored for compatibility |
| 3478 | DEF("clock", HAS_ARG, QEMU_OPTION_clock, "", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3479 | |
Jan Kiszka | 1ed2fc1 | 2009-09-15 13:36:04 +0200 | [diff] [blame] | 3480 | DEF("rtc", HAS_ARG, QEMU_OPTION_rtc, \ |
Artem Pisarenko | 238d124 | 2018-10-18 13:12:52 +0600 | [diff] [blame] | 3481 | "-rtc [base=utc|localtime|<datetime>][,clock=host|rt|vm][,driftfix=none|slew]\n" \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3482 | " set the RTC base and clock, enable drift fix for clock ticks (x86 only)\n", |
| 3483 | QEMU_ARCH_ALL) |
Jan Kiszka | 1ed2fc1 | 2009-09-15 13:36:04 +0200 | [diff] [blame] | 3484 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3485 | STEXI |
| 3486 | |
Artem Pisarenko | 238d124 | 2018-10-18 13:12:52 +0600 | [diff] [blame] | 3487 | @item -rtc [base=utc|localtime|@var{datetime}][,clock=host|rt|vm][,driftfix=none|slew] |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3488 | @findex -rtc |
Jan Kiszka | 1ed2fc1 | 2009-09-15 13:36:04 +0200 | [diff] [blame] | 3489 | Specify @option{base} as @code{utc} or @code{localtime} to let the RTC start at the current |
| 3490 | UTC or local time, respectively. @code{localtime} is required for correct date in |
Artem Pisarenko | 238d124 | 2018-10-18 13:12:52 +0600 | [diff] [blame] | 3491 | MS-DOS or Windows. To start at a specific point in time, provide @var{datetime} in the |
Jan Kiszka | 1ed2fc1 | 2009-09-15 13:36:04 +0200 | [diff] [blame] | 3492 | format @code{2006-06-17T16:01:21} or @code{2006-06-17}. The default base is UTC. |
| 3493 | |
Michael Tokarev | 9d85d55 | 2014-04-07 13:34:58 +0400 | [diff] [blame] | 3494 | By default the RTC is driven by the host system time. This allows using of the |
Jan Kiszka | 6875204 | 2009-09-15 13:36:04 +0200 | [diff] [blame] | 3495 | RTC as accurate reference clock inside the guest, specifically if the host |
| 3496 | time is smoothly following an accurate external reference clock, e.g. via NTP. |
Paolo Bonzini | 7880814 | 2012-03-30 10:31:21 +0000 | [diff] [blame] | 3497 | If you want to isolate the guest time from the host, you can set @option{clock} |
Artem Pisarenko | 238d124 | 2018-10-18 13:12:52 +0600 | [diff] [blame] | 3498 | to @code{rt} instead, which provides a host monotonic clock if host support it. |
| 3499 | To even prevent the RTC from progressing during suspension, you can set @option{clock} |
| 3500 | to @code{vm} (virtual clock). @samp{clock=vm} is recommended especially in |
| 3501 | icount mode in order to preserve determinism; however, note that in icount mode |
| 3502 | the speed of the virtual clock is variable and can in general differ from the |
| 3503 | host clock. |
Jan Kiszka | 6875204 | 2009-09-15 13:36:04 +0200 | [diff] [blame] | 3504 | |
Jan Kiszka | 1ed2fc1 | 2009-09-15 13:36:04 +0200 | [diff] [blame] | 3505 | Enable @option{driftfix} (i386 targets only) if you experience time drift problems, |
| 3506 | specifically with Windows' ACPI HAL. This option will try to figure out how |
| 3507 | many timer interrupts were not processed by the Windows guest and will |
| 3508 | re-inject them. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3509 | ETEXI |
| 3510 | |
| 3511 | DEF("icount", HAS_ARG, QEMU_OPTION_icount, \ |
Pavel Dovgalyuk | 9c2037d | 2017-01-24 10:17:47 +0300 | [diff] [blame] | 3512 | "-icount [shift=N|auto][,align=on|off][,sleep=on|off,rr=record|replay,rrfile=<filename>,rrsnapshot=<snapshot>]\n" \ |
aliguori | bc14ca2 | 2009-04-05 18:43:37 +0000 | [diff] [blame] | 3513 | " enable virtual instruction counter with 2^N clock ticks per\n" \ |
Victor CLEMENT | f1f4b57 | 2015-05-29 17:14:05 +0200 | [diff] [blame] | 3514 | " instruction, enable aligning the host and virtual clocks\n" \ |
| 3515 | " or disable real time cpu sleeping\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3516 | STEXI |
Pavel Dovgalyuk | 9c2037d | 2017-01-24 10:17:47 +0300 | [diff] [blame] | 3517 | @item -icount [shift=@var{N}|auto][,rr=record|replay,rrfile=@var{filename},rrsnapshot=@var{snapshot}] |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3518 | @findex -icount |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3519 | Enable virtual instruction counter. The virtual cpu will execute one |
Kevin Wolf | 4e257e5 | 2009-10-09 10:58:36 +0200 | [diff] [blame] | 3520 | instruction every 2^@var{N} ns of virtual time. If @code{auto} is specified |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3521 | then the virtual cpu speed will be automatically adjusted to keep virtual |
| 3522 | time within a few seconds of real time. |
| 3523 | |
Victor CLEMENT | f1f4b57 | 2015-05-29 17:14:05 +0200 | [diff] [blame] | 3524 | When the virtual cpu is sleeping, the virtual time will advance at default |
Pranith Kumar | 778d9f9 | 2016-02-26 10:16:51 -0500 | [diff] [blame] | 3525 | speed unless @option{sleep=on|off} is specified. |
| 3526 | With @option{sleep=on|off}, the virtual time will jump to the next timer deadline |
Victor CLEMENT | f1f4b57 | 2015-05-29 17:14:05 +0200 | [diff] [blame] | 3527 | instantly whenever the virtual cpu goes to sleep mode and will not advance |
| 3528 | if no timer is enabled. This behavior give deterministic execution times from |
| 3529 | the guest point of view. |
| 3530 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3531 | Note that while this option can give deterministic behavior, it does not |
| 3532 | provide cycle accurate emulation. Modern CPUs contain superscalar out of |
| 3533 | order cores with complex cache hierarchies. The number of instructions |
| 3534 | executed often has little or no correlation with actual performance. |
Sebastian Tanase | a8bfac3 | 2014-07-25 11:56:29 +0200 | [diff] [blame] | 3535 | |
Daniel P. Berrange | b6af097 | 2015-08-26 12:17:13 +0100 | [diff] [blame] | 3536 | @option{align=on} will activate the delay algorithm which will try |
Sebastian Tanase | a8bfac3 | 2014-07-25 11:56:29 +0200 | [diff] [blame] | 3537 | to synchronise the host clock and the virtual clock. The goal is to |
| 3538 | have a guest running at the real frequency imposed by the shift option. |
| 3539 | Whenever the guest clock is behind the host clock and if |
Michael Tokarev | 8259761 | 2015-04-27 11:12:49 +0300 | [diff] [blame] | 3540 | @option{align=on} is specified then we print a message to the user |
Sebastian Tanase | a8bfac3 | 2014-07-25 11:56:29 +0200 | [diff] [blame] | 3541 | to inform about the delay. |
| 3542 | Currently this option does not work when @option{shift} is @code{auto}. |
| 3543 | Note: The sync algorithm will work for those shift values for which |
| 3544 | the guest clock runs ahead of the host clock. Typically this happens |
| 3545 | when the shift value is high (how high depends on the host machine). |
Pavel Dovgalyuk | 4c27b85 | 2015-09-17 19:25:18 +0300 | [diff] [blame] | 3546 | |
| 3547 | When @option{rr} option is specified deterministic record/replay is enabled. |
| 3548 | Replay log is written into @var{filename} file in record mode and |
| 3549 | read from this file in replay mode. |
Pavel Dovgalyuk | 9c2037d | 2017-01-24 10:17:47 +0300 | [diff] [blame] | 3550 | |
| 3551 | Option rrsnapshot is used to create new vm snapshot named @var{snapshot} |
| 3552 | at the start of execution recording. In replay mode this option is used |
| 3553 | to load the initial VM state. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3554 | ETEXI |
| 3555 | |
Richard W.M. Jones | 9dd986c | 2009-04-25 13:56:19 +0100 | [diff] [blame] | 3556 | DEF("watchdog", HAS_ARG, QEMU_OPTION_watchdog, \ |
Xu Wang | d7933ef | 2015-06-11 17:32:05 +0200 | [diff] [blame] | 3557 | "-watchdog model\n" \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3558 | " enable virtual hardware watchdog [default=none]\n", |
| 3559 | QEMU_ARCH_ALL) |
Richard W.M. Jones | 9dd986c | 2009-04-25 13:56:19 +0100 | [diff] [blame] | 3560 | STEXI |
| 3561 | @item -watchdog @var{model} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3562 | @findex -watchdog |
Richard W.M. Jones | 9dd986c | 2009-04-25 13:56:19 +0100 | [diff] [blame] | 3563 | Create a virtual hardware watchdog device. Once enabled (by a guest |
| 3564 | action), the watchdog must be periodically polled by an agent inside |
Xu Wang | d7933ef | 2015-06-11 17:32:05 +0200 | [diff] [blame] | 3565 | the guest or else the guest will be restarted. Choose a model for |
| 3566 | which your guest has drivers. |
Richard W.M. Jones | 9dd986c | 2009-04-25 13:56:19 +0100 | [diff] [blame] | 3567 | |
Xu Wang | d7933ef | 2015-06-11 17:32:05 +0200 | [diff] [blame] | 3568 | The @var{model} is the model of hardware watchdog to emulate. Use |
| 3569 | @code{-watchdog help} to list available hardware models. Only one |
Richard W.M. Jones | 9dd986c | 2009-04-25 13:56:19 +0100 | [diff] [blame] | 3570 | watchdog can be enabled for a guest. |
Xu Wang | d7933ef | 2015-06-11 17:32:05 +0200 | [diff] [blame] | 3571 | |
| 3572 | The following models may be available: |
| 3573 | @table @option |
| 3574 | @item ib700 |
| 3575 | iBASE 700 is a very simple ISA watchdog with a single timer. |
| 3576 | @item i6300esb |
| 3577 | Intel 6300ESB I/O controller hub is a much more featureful PCI-based |
| 3578 | dual-timer watchdog. |
Xu Wang | 188f24c | 2015-02-05 18:28:32 +0800 | [diff] [blame] | 3579 | @item diag288 |
| 3580 | A virtual watchdog for s390x backed by the diagnose 288 hypercall |
| 3581 | (currently KVM only). |
Xu Wang | d7933ef | 2015-06-11 17:32:05 +0200 | [diff] [blame] | 3582 | @end table |
Richard W.M. Jones | 9dd986c | 2009-04-25 13:56:19 +0100 | [diff] [blame] | 3583 | ETEXI |
| 3584 | |
| 3585 | DEF("watchdog-action", HAS_ARG, QEMU_OPTION_watchdog_action, \ |
Markus Armbruster | 7ad9270 | 2017-10-02 16:03:07 +0200 | [diff] [blame] | 3586 | "-watchdog-action reset|shutdown|poweroff|inject-nmi|pause|debug|none\n" \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3587 | " action when watchdog fires [default=reset]\n", |
| 3588 | QEMU_ARCH_ALL) |
Richard W.M. Jones | 9dd986c | 2009-04-25 13:56:19 +0100 | [diff] [blame] | 3589 | STEXI |
| 3590 | @item -watchdog-action @var{action} |
Markus Armbruster | b8f490e | 2013-02-13 19:49:38 +0100 | [diff] [blame] | 3591 | @findex -watchdog-action |
Richard W.M. Jones | 9dd986c | 2009-04-25 13:56:19 +0100 | [diff] [blame] | 3592 | |
| 3593 | The @var{action} controls what QEMU will do when the watchdog timer |
| 3594 | expires. |
| 3595 | The default is |
| 3596 | @code{reset} (forcefully reset the guest). |
| 3597 | Other possible actions are: |
| 3598 | @code{shutdown} (attempt to gracefully shutdown the guest), |
| 3599 | @code{poweroff} (forcefully poweroff the guest), |
Markus Armbruster | 7ad9270 | 2017-10-02 16:03:07 +0200 | [diff] [blame] | 3600 | @code{inject-nmi} (inject a NMI into the guest), |
Richard W.M. Jones | 9dd986c | 2009-04-25 13:56:19 +0100 | [diff] [blame] | 3601 | @code{pause} (pause the guest), |
| 3602 | @code{debug} (print a debug message and continue), or |
| 3603 | @code{none} (do nothing). |
| 3604 | |
| 3605 | Note that the @code{shutdown} action requires that the guest responds |
| 3606 | to ACPI signals, which it may not be able to do in the sort of |
| 3607 | situations where the watchdog would have expired, and thus |
| 3608 | @code{-watchdog-action shutdown} is not recommended for production use. |
| 3609 | |
| 3610 | Examples: |
| 3611 | |
| 3612 | @table @code |
| 3613 | @item -watchdog i6300esb -watchdog-action pause |
Markus Armbruster | f9cfd65 | 2015-06-15 14:35:59 +0200 | [diff] [blame] | 3614 | @itemx -watchdog ib700 |
Richard W.M. Jones | 9dd986c | 2009-04-25 13:56:19 +0100 | [diff] [blame] | 3615 | @end table |
| 3616 | ETEXI |
| 3617 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3618 | DEF("echr", HAS_ARG, QEMU_OPTION_echr, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3619 | "-echr chr set terminal escape character instead of ctrl-a\n", |
| 3620 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3621 | STEXI |
| 3622 | |
Kevin Wolf | 4e257e5 | 2009-10-09 10:58:36 +0200 | [diff] [blame] | 3623 | @item -echr @var{numeric_ascii_value} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3624 | @findex -echr |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3625 | Change the escape character used for switching to the monitor when using |
| 3626 | monitor and serial sharing. The default is @code{0x01} when using the |
| 3627 | @code{-nographic} option. @code{0x01} is equal to pressing |
| 3628 | @code{Control-a}. You can select a different character from the ascii |
| 3629 | control keys where 1 through 26 map to Control-a through Control-z. For |
| 3630 | instance you could use the either of the following to change the escape |
| 3631 | character to Control-t. |
| 3632 | @table @code |
| 3633 | @item -echr 0x14 |
Markus Armbruster | f9cfd65 | 2015-06-15 14:35:59 +0200 | [diff] [blame] | 3634 | @itemx -echr 20 |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3635 | @end table |
| 3636 | ETEXI |
| 3637 | |
| 3638 | DEF("virtioconsole", HAS_ARG, QEMU_OPTION_virtiocon, \ |
| 3639 | "-virtioconsole c\n" \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3640 | " set virtio console\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3641 | STEXI |
| 3642 | @item -virtioconsole @var{c} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3643 | @findex -virtioconsole |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3644 | Set virtio console. |
Thomas Huth | 4540129 | 2018-05-04 17:13:10 +0200 | [diff] [blame] | 3645 | This option is deprecated, please use @option{-device virtconsole} instead. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3646 | ETEXI |
| 3647 | |
| 3648 | DEF("show-cursor", 0, QEMU_OPTION_show_cursor, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3649 | "-show-cursor show cursor\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3650 | STEXI |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 3651 | @item -show-cursor |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3652 | @findex -show-cursor |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 3653 | Show cursor. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3654 | ETEXI |
| 3655 | |
| 3656 | DEF("tb-size", HAS_ARG, QEMU_OPTION_tb_size, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3657 | "-tb-size n set TB size\n", QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3658 | STEXI |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 3659 | @item -tb-size @var{n} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3660 | @findex -tb-size |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 3661 | Set TB size. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3662 | ETEXI |
| 3663 | |
| 3664 | DEF("incoming", HAS_ARG, QEMU_OPTION_incoming, \ |
Michael Tokarev | 7c60180 | 2015-02-10 22:40:47 +0300 | [diff] [blame] | 3665 | "-incoming tcp:[host]:port[,to=maxport][,ipv4][,ipv6]\n" \ |
| 3666 | "-incoming rdma:host:port[,ipv4][,ipv6]\n" \ |
| 3667 | "-incoming unix:socketpath\n" \ |
| 3668 | " prepare for incoming migration, listen on\n" \ |
| 3669 | " specified protocol and socket address\n" \ |
| 3670 | "-incoming fd:fd\n" \ |
| 3671 | "-incoming exec:cmdline\n" \ |
| 3672 | " accept incoming migration on given file descriptor\n" \ |
Dr. David Alan Gilbert | 1597051 | 2015-05-29 19:52:52 +0100 | [diff] [blame] | 3673 | " or from given external command\n" \ |
| 3674 | "-incoming defer\n" \ |
| 3675 | " wait for the URI to be specified via migrate_incoming\n", |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3676 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3677 | STEXI |
Michael Tokarev | 7c60180 | 2015-02-10 22:40:47 +0300 | [diff] [blame] | 3678 | @item -incoming tcp:[@var{host}]:@var{port}[,to=@var{maxport}][,ipv4][,ipv6] |
Markus Armbruster | f9cfd65 | 2015-06-15 14:35:59 +0200 | [diff] [blame] | 3679 | @itemx -incoming rdma:@var{host}:@var{port}[,ipv4][,ipv6] |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3680 | @findex -incoming |
Michael Tokarev | 7c60180 | 2015-02-10 22:40:47 +0300 | [diff] [blame] | 3681 | Prepare for incoming migration, listen on a given tcp port. |
| 3682 | |
| 3683 | @item -incoming unix:@var{socketpath} |
| 3684 | Prepare for incoming migration, listen on a given unix socket. |
| 3685 | |
| 3686 | @item -incoming fd:@var{fd} |
| 3687 | Accept incoming migration from a given filedescriptor. |
| 3688 | |
| 3689 | @item -incoming exec:@var{cmdline} |
| 3690 | Accept incoming migration as an output from specified external command. |
Dr. David Alan Gilbert | 1597051 | 2015-05-29 19:52:52 +0100 | [diff] [blame] | 3691 | |
| 3692 | @item -incoming defer |
| 3693 | Wait for the URI to be specified via migrate_incoming. The monitor can |
| 3694 | be used to change settings (such as migration parameters) prior to issuing |
| 3695 | the migrate_incoming to allow the migration to begin. |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3696 | ETEXI |
| 3697 | |
Ashijeet Acharya | d15c05f | 2017-01-16 17:01:51 +0530 | [diff] [blame] | 3698 | DEF("only-migratable", 0, QEMU_OPTION_only_migratable, \ |
| 3699 | "-only-migratable allow only migratable devices\n", QEMU_ARCH_ALL) |
| 3700 | STEXI |
| 3701 | @item -only-migratable |
| 3702 | @findex -only-migratable |
| 3703 | Only allow migratable devices. Devices will not be allowed to enter an |
| 3704 | unmigratable state. |
| 3705 | ETEXI |
| 3706 | |
Gerd Hoffmann | d8c208d | 2009-12-08 13:11:46 +0100 | [diff] [blame] | 3707 | DEF("nodefaults", 0, QEMU_OPTION_nodefaults, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3708 | "-nodefaults don't create default devices\n", QEMU_ARCH_ALL) |
Gerd Hoffmann | d8c208d | 2009-12-08 13:11:46 +0100 | [diff] [blame] | 3709 | STEXI |
Stefan Weil | 3dbf2c7 | 2010-01-16 18:19:44 +0100 | [diff] [blame] | 3710 | @item -nodefaults |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3711 | @findex -nodefaults |
Michal Novotny | 66c19bf | 2012-07-16 14:35:10 +0200 | [diff] [blame] | 3712 | Don't create default devices. Normally, QEMU sets the default devices like serial |
| 3713 | port, parallel port, virtual console, monitor device, VGA adapter, floppy and |
| 3714 | CD-ROM drive and others. The @code{-nodefaults} option will disable all those |
| 3715 | default devices. |
Gerd Hoffmann | d8c208d | 2009-12-08 13:11:46 +0100 | [diff] [blame] | 3716 | ETEXI |
| 3717 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3718 | #ifndef _WIN32 |
| 3719 | DEF("chroot", HAS_ARG, QEMU_OPTION_chroot, \ |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3720 | "-chroot dir chroot to dir just before starting the VM\n", |
| 3721 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3722 | #endif |
| 3723 | STEXI |
Kevin Wolf | 4e257e5 | 2009-10-09 10:58:36 +0200 | [diff] [blame] | 3724 | @item -chroot @var{dir} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3725 | @findex -chroot |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3726 | Immediately before starting guest execution, chroot to the specified |
| 3727 | directory. Especially useful in combination with -runas. |
| 3728 | ETEXI |
| 3729 | |
| 3730 | #ifndef _WIN32 |
| 3731 | DEF("runas", HAS_ARG, QEMU_OPTION_runas, \ |
Ian Jackson | 2c42f1e | 2017-09-15 18:10:44 +0100 | [diff] [blame] | 3732 | "-runas user change to user id user just before starting the VM\n" \ |
| 3733 | " user can be numeric uid:gid instead\n", |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3734 | QEMU_ARCH_ALL) |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3735 | #endif |
| 3736 | STEXI |
Kevin Wolf | 4e257e5 | 2009-10-09 10:58:36 +0200 | [diff] [blame] | 3737 | @item -runas @var{user} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3738 | @findex -runas |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3739 | Immediately before starting guest execution, drop root privileges, switching |
| 3740 | to the specified user. |
| 3741 | ETEXI |
| 3742 | |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3743 | DEF("prom-env", HAS_ARG, QEMU_OPTION_prom_env, |
| 3744 | "-prom-env variable=value\n" |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3745 | " set OpenBIOS nvram variables\n", |
| 3746 | QEMU_ARCH_PPC | QEMU_ARCH_SPARC) |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 3747 | STEXI |
| 3748 | @item -prom-env @var{variable}=@var{value} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3749 | @findex -prom-env |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 3750 | Set OpenBIOS nvram @var{variable} to given @var{value} (PPC, SPARC only). |
| 3751 | ETEXI |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3752 | DEF("semihosting", 0, QEMU_OPTION_semihosting, |
Michael Walle | f7bbcfb | 2014-04-22 20:18:42 +0200 | [diff] [blame] | 3753 | "-semihosting semihosting mode\n", |
Leon Alrae | 3b3c169 | 2015-06-19 11:08:43 +0100 | [diff] [blame] | 3754 | QEMU_ARCH_ARM | QEMU_ARCH_M68K | QEMU_ARCH_XTENSA | QEMU_ARCH_LM32 | |
| 3755 | QEMU_ARCH_MIPS) |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 3756 | STEXI |
| 3757 | @item -semihosting |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3758 | @findex -semihosting |
Leon Alrae | 3b3c169 | 2015-06-19 11:08:43 +0100 | [diff] [blame] | 3759 | Enable semihosting mode (ARM, M68K, Xtensa, MIPS only). |
Liviu Ionescu | a38bb07 | 2014-12-11 12:07:48 +0000 | [diff] [blame] | 3760 | ETEXI |
| 3761 | DEF("semihosting-config", HAS_ARG, QEMU_OPTION_semihosting_config, |
Leon Alrae | a59d31a | 2015-06-19 14:17:45 +0100 | [diff] [blame] | 3762 | "-semihosting-config [enable=on|off][,target=native|gdb|auto][,arg=str[,...]]\n" \ |
| 3763 | " semihosting configuration\n", |
Leon Alrae | 3b3c169 | 2015-06-19 11:08:43 +0100 | [diff] [blame] | 3764 | QEMU_ARCH_ARM | QEMU_ARCH_M68K | QEMU_ARCH_XTENSA | QEMU_ARCH_LM32 | |
| 3765 | QEMU_ARCH_MIPS) |
Liviu Ionescu | a38bb07 | 2014-12-11 12:07:48 +0000 | [diff] [blame] | 3766 | STEXI |
Leon Alrae | a59d31a | 2015-06-19 14:17:45 +0100 | [diff] [blame] | 3767 | @item -semihosting-config [enable=on|off][,target=native|gdb|auto][,arg=str[,...]] |
Liviu Ionescu | a38bb07 | 2014-12-11 12:07:48 +0000 | [diff] [blame] | 3768 | @findex -semihosting-config |
Leon Alrae | 3b3c169 | 2015-06-19 11:08:43 +0100 | [diff] [blame] | 3769 | Enable and configure semihosting (ARM, M68K, Xtensa, MIPS only). |
Leon Alrae | a59d31a | 2015-06-19 14:17:45 +0100 | [diff] [blame] | 3770 | @table @option |
| 3771 | @item target=@code{native|gdb|auto} |
| 3772 | Defines where the semihosting calls will be addressed, to QEMU (@code{native}) |
| 3773 | or to GDB (@code{gdb}). The default is @code{auto}, which means @code{gdb} |
| 3774 | during debug sessions and @code{native} otherwise. |
| 3775 | @item arg=@var{str1},arg=@var{str2},... |
| 3776 | Allows the user to pass input arguments, and can be used multiple times to build |
| 3777 | up a list. The old-style @code{-kernel}/@code{-append} method of passing a |
| 3778 | command line is still supported for backward compatibility. If both the |
| 3779 | @code{--semihosting-config arg} and the @code{-kernel}/@code{-append} are |
| 3780 | specified, the former is passed to semihosting as it always takes precedence. |
| 3781 | @end table |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 3782 | ETEXI |
blueswir1 | 5824d65 | 2009-03-28 06:44:27 +0000 | [diff] [blame] | 3783 | DEF("old-param", 0, QEMU_OPTION_old_param, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3784 | "-old-param old param mode\n", QEMU_ARCH_ARM) |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 3785 | STEXI |
| 3786 | @item -old-param |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3787 | @findex -old-param (ARM) |
Stefan Weil | 95d5f08 | 2010-01-20 22:25:27 +0100 | [diff] [blame] | 3788 | Old param mode (ARM only). |
| 3789 | ETEXI |
| 3790 | |
Eduardo Otubo | 7d76ad4 | 2012-08-14 18:44:08 -0300 | [diff] [blame] | 3791 | DEF("sandbox", HAS_ARG, QEMU_OPTION_sandbox, \ |
Eduardo Otubo | 73a1e64 | 2017-03-13 22:13:27 +0100 | [diff] [blame] | 3792 | "-sandbox on[,obsolete=allow|deny][,elevateprivileges=allow|deny|children]\n" \ |
Eduardo Otubo | 24f8cdc | 2017-03-13 22:18:51 +0100 | [diff] [blame] | 3793 | " [,spawn=allow|deny][,resourcecontrol=allow|deny]\n" \ |
Eduardo Otubo | 2b716fa | 2017-03-01 23:17:29 +0100 | [diff] [blame] | 3794 | " Enable seccomp mode 2 system call filter (default 'off').\n" \ |
| 3795 | " use 'obsolete' to allow obsolete system calls that are provided\n" \ |
| 3796 | " by the kernel, but typically no longer used by modern\n" \ |
Eduardo Otubo | 73a1e64 | 2017-03-13 22:13:27 +0100 | [diff] [blame] | 3797 | " C library implementations.\n" \ |
| 3798 | " use 'elevateprivileges' to allow or deny QEMU process to elevate\n" \ |
| 3799 | " its privileges by blacklisting all set*uid|gid system calls.\n" \ |
| 3800 | " The value 'children' will deny set*uid|gid system calls for\n" \ |
Eduardo Otubo | 995a226 | 2017-03-13 22:16:01 +0100 | [diff] [blame] | 3801 | " main QEMU process but will allow forks and execves to run unprivileged\n" \ |
| 3802 | " use 'spawn' to avoid QEMU to spawn new threads or processes by\n" \ |
Eduardo Otubo | 24f8cdc | 2017-03-13 22:18:51 +0100 | [diff] [blame] | 3803 | " blacklisting *fork and execve\n" \ |
| 3804 | " use 'resourcecontrol' to disable process affinity and schedular priority\n", |
Eduardo Otubo | 7d76ad4 | 2012-08-14 18:44:08 -0300 | [diff] [blame] | 3805 | QEMU_ARCH_ALL) |
| 3806 | STEXI |
Eduardo Otubo | 24f8cdc | 2017-03-13 22:18:51 +0100 | [diff] [blame] | 3807 | @item -sandbox @var{arg}[,obsolete=@var{string}][,elevateprivileges=@var{string}][,spawn=@var{string}][,resourcecontrol=@var{string}] |
Eduardo Otubo | 7d76ad4 | 2012-08-14 18:44:08 -0300 | [diff] [blame] | 3808 | @findex -sandbox |
| 3809 | Enable Seccomp mode 2 system call filter. 'on' will enable syscall filtering and 'off' will |
| 3810 | disable it. The default is 'off'. |
Eduardo Otubo | 2b716fa | 2017-03-01 23:17:29 +0100 | [diff] [blame] | 3811 | @table @option |
| 3812 | @item obsolete=@var{string} |
| 3813 | Enable Obsolete system calls |
Eduardo Otubo | 73a1e64 | 2017-03-13 22:13:27 +0100 | [diff] [blame] | 3814 | @item elevateprivileges=@var{string} |
| 3815 | Disable set*uid|gid system calls |
Eduardo Otubo | 995a226 | 2017-03-13 22:16:01 +0100 | [diff] [blame] | 3816 | @item spawn=@var{string} |
| 3817 | Disable *fork and execve |
Eduardo Otubo | 24f8cdc | 2017-03-13 22:18:51 +0100 | [diff] [blame] | 3818 | @item resourcecontrol=@var{string} |
| 3819 | Disable process affinity and schedular priority |
Eduardo Otubo | 2b716fa | 2017-03-01 23:17:29 +0100 | [diff] [blame] | 3820 | @end table |
Eduardo Otubo | 7d76ad4 | 2012-08-14 18:44:08 -0300 | [diff] [blame] | 3821 | ETEXI |
| 3822 | |
Gerd Hoffmann | 715a664 | 2009-10-14 10:39:28 +0200 | [diff] [blame] | 3823 | DEF("readconfig", HAS_ARG, QEMU_OPTION_readconfig, |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3824 | "-readconfig <file>\n", QEMU_ARCH_ALL) |
Stefan Weil | 3dbf2c7 | 2010-01-16 18:19:44 +0100 | [diff] [blame] | 3825 | STEXI |
| 3826 | @item -readconfig @var{file} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3827 | @findex -readconfig |
Michal Novotny | ed24cfa | 2012-07-16 14:28:32 +0200 | [diff] [blame] | 3828 | Read device configuration from @var{file}. This approach is useful when you want to spawn |
| 3829 | QEMU process with many command line options but you don't want to exceed the command line |
| 3830 | character limit. |
Stefan Weil | 3dbf2c7 | 2010-01-16 18:19:44 +0100 | [diff] [blame] | 3831 | ETEXI |
Gerd Hoffmann | 715a664 | 2009-10-14 10:39:28 +0200 | [diff] [blame] | 3832 | DEF("writeconfig", HAS_ARG, QEMU_OPTION_writeconfig, |
| 3833 | "-writeconfig <file>\n" |
Blue Swirl | ad96090 | 2010-03-29 19:23:52 +0000 | [diff] [blame] | 3834 | " read/write config file\n", QEMU_ARCH_ALL) |
Stefan Weil | 3dbf2c7 | 2010-01-16 18:19:44 +0100 | [diff] [blame] | 3835 | STEXI |
| 3836 | @item -writeconfig @var{file} |
Stefan Weil | 6616b2a | 2010-02-05 23:52:05 +0100 | [diff] [blame] | 3837 | @findex -writeconfig |
Michal Novotny | ed24cfa | 2012-07-16 14:28:32 +0200 | [diff] [blame] | 3838 | Write device configuration to @var{file}. The @var{file} can be either filename to save |
| 3839 | command line and device configuration into file or dash @code{-}) character to print the |
| 3840 | output to stdout. This can be later used as input file for @code{-readconfig} option. |
Stefan Weil | 3dbf2c7 | 2010-01-16 18:19:44 +0100 | [diff] [blame] | 3841 | ETEXI |
Thomas Huth | 2feac45 | 2018-08-21 12:59:56 +0200 | [diff] [blame] | 3842 | |
Eduardo Habkost | f29a561 | 2012-05-02 13:07:29 -0300 | [diff] [blame] | 3843 | DEF("no-user-config", 0, QEMU_OPTION_nouserconfig, |
| 3844 | "-no-user-config\n" |
Eduardo Habkost | 3478eae | 2017-10-04 00:00:25 -0300 | [diff] [blame] | 3845 | " do not load default user-provided config files at startup\n", |
Eduardo Habkost | f29a561 | 2012-05-02 13:07:29 -0300 | [diff] [blame] | 3846 | QEMU_ARCH_ALL) |
| 3847 | STEXI |
| 3848 | @item -no-user-config |
| 3849 | @findex -no-user-config |
| 3850 | The @code{-no-user-config} option makes QEMU not load any of the user-provided |
Eduardo Habkost | 3478eae | 2017-10-04 00:00:25 -0300 | [diff] [blame] | 3851 | config files on @var{sysconfdir}. |
Anthony Liguori | 292444c | 2010-01-21 10:57:58 -0600 | [diff] [blame] | 3852 | ETEXI |
Thomas Huth | 2feac45 | 2018-08-21 12:59:56 +0200 | [diff] [blame] | 3853 | |
Prerna Saxena | ab6540d | 2010-08-09 11:48:32 +0100 | [diff] [blame] | 3854 | DEF("trace", HAS_ARG, QEMU_OPTION_trace, |
Paolo Bonzini | 10578a2 | 2016-01-07 16:55:26 +0300 | [diff] [blame] | 3855 | "-trace [[enable=]<pattern>][,events=<file>][,file=<file>]\n" |
LluÃs | 23d15e8 | 2011-08-31 20:31:31 +0200 | [diff] [blame] | 3856 | " specify tracing options\n", |
Prerna Saxena | ab6540d | 2010-08-09 11:48:32 +0100 | [diff] [blame] | 3857 | QEMU_ARCH_ALL) |
| 3858 | STEXI |
LluÃs | 23d15e8 | 2011-08-31 20:31:31 +0200 | [diff] [blame] | 3859 | HXCOMM This line is not accurate, as some sub-options are backend-specific but |
| 3860 | HXCOMM HX does not support conditional compilation of text. |
Denis V. Lunev | e370ad9 | 2016-06-17 17:44:08 +0300 | [diff] [blame] | 3861 | @item -trace [[enable=]@var{pattern}][,events=@var{file}][,file=@var{file}] |
Prerna Saxena | ab6540d | 2010-08-09 11:48:32 +0100 | [diff] [blame] | 3862 | @findex -trace |
Denis V. Lunev | eeb2b8f | 2016-06-17 17:44:09 +0300 | [diff] [blame] | 3863 | @include qemu-option-trace.texi |
Prerna Saxena | ab6540d | 2010-08-09 11:48:32 +0100 | [diff] [blame] | 3864 | ETEXI |
Stefan Weil | 3dbf2c7 | 2010-01-16 18:19:44 +0100 | [diff] [blame] | 3865 | |
Markus Armbruster | 31e70d6 | 2013-02-13 19:49:37 +0100 | [diff] [blame] | 3866 | HXCOMM Internal use |
| 3867 | DEF("qtest", HAS_ARG, QEMU_OPTION_qtest, "", QEMU_ARCH_ALL) |
| 3868 | DEF("qtest-log", HAS_ARG, QEMU_OPTION_qtest_log, "", QEMU_ARCH_ALL) |
Anthony Liguori | c7f0f3b | 2012-03-28 15:42:02 +0200 | [diff] [blame] | 3869 | |
Paul Moore | 0f66998 | 2012-08-03 14:39:21 -0400 | [diff] [blame] | 3870 | #ifdef __linux__ |
| 3871 | DEF("enable-fips", 0, QEMU_OPTION_enablefips, |
| 3872 | "-enable-fips enable FIPS 140-2 compliance\n", |
| 3873 | QEMU_ARCH_ALL) |
| 3874 | #endif |
| 3875 | STEXI |
| 3876 | @item -enable-fips |
| 3877 | @findex -enable-fips |
| 3878 | Enable FIPS 140-2 compliance mode. |
| 3879 | ETEXI |
| 3880 | |
Jan Kiszka | a0dac02 | 2012-10-05 14:51:45 -0300 | [diff] [blame] | 3881 | HXCOMM Deprecated by -machine accel=tcg property |
Bruce Rogers | c6e88b3 | 2012-11-20 07:11:21 -0700 | [diff] [blame] | 3882 | DEF("no-kvm", 0, QEMU_OPTION_no_kvm, "", QEMU_ARCH_I386) |
Jan Kiszka | a0dac02 | 2012-10-05 14:51:45 -0300 | [diff] [blame] | 3883 | |
Seiji Aguchi | 5e2ac51 | 2013-07-03 23:02:46 -0400 | [diff] [blame] | 3884 | DEF("msg", HAS_ARG, QEMU_OPTION_msg, |
| 3885 | "-msg timestamp[=on|off]\n" |
| 3886 | " change the format of messages\n" |
| 3887 | " on|off controls leading timestamps (default:on)\n", |
| 3888 | QEMU_ARCH_ALL) |
| 3889 | STEXI |
| 3890 | @item -msg timestamp[=on|off] |
| 3891 | @findex -msg |
| 3892 | prepend a timestamp to each log message.(default:on) |
| 3893 | ETEXI |
| 3894 | |
Amit Shah | abfd9ce | 2014-06-20 18:56:08 +0530 | [diff] [blame] | 3895 | DEF("dump-vmstate", HAS_ARG, QEMU_OPTION_dump_vmstate, |
| 3896 | "-dump-vmstate <file>\n" |
| 3897 | " Output vmstate information in JSON format to file.\n" |
| 3898 | " Use the scripts/vmstate-static-checker.py file to\n" |
| 3899 | " check for possible regressions in migration code\n" |
Laurent Vivier | 2382053 | 2015-09-04 21:30:04 +0200 | [diff] [blame] | 3900 | " by comparing two such vmstate dumps.\n", |
Amit Shah | abfd9ce | 2014-06-20 18:56:08 +0530 | [diff] [blame] | 3901 | QEMU_ARCH_ALL) |
| 3902 | STEXI |
| 3903 | @item -dump-vmstate @var{file} |
| 3904 | @findex -dump-vmstate |
| 3905 | Dump json-encoded vmstate information for current machine type to file |
| 3906 | in @var{file} |
| 3907 | ETEXI |
| 3908 | |
Emilio G. Cota | 12df189 | 2018-08-15 11:42:49 -0400 | [diff] [blame] | 3909 | DEF("enable-sync-profile", 0, QEMU_OPTION_enable_sync_profile, |
| 3910 | "-enable-sync-profile\n" |
| 3911 | " enable synchronization profiling\n", |
| 3912 | QEMU_ARCH_ALL) |
| 3913 | STEXI |
| 3914 | @item -enable-sync-profile |
| 3915 | @findex -enable-sync-profile |
| 3916 | Enable synchronization profiling. |
| 3917 | ETEXI |
| 3918 | |
Paolo Bonzini | 43f187a | 2017-01-04 13:50:37 +0100 | [diff] [blame] | 3919 | STEXI |
| 3920 | @end table |
| 3921 | ETEXI |
| 3922 | DEFHEADING() |
Markus Armbruster | de6b4f9 | 2017-10-02 16:03:00 +0200 | [diff] [blame] | 3923 | |
| 3924 | DEFHEADING(Generic object creation:) |
Paolo Bonzini | 43f187a | 2017-01-04 13:50:37 +0100 | [diff] [blame] | 3925 | STEXI |
| 3926 | @table @option |
| 3927 | ETEXI |
Daniel P. Berrange | b9174d4 | 2015-05-13 17:14:03 +0100 | [diff] [blame] | 3928 | |
| 3929 | DEF("object", HAS_ARG, QEMU_OPTION_object, |
| 3930 | "-object TYPENAME[,PROP1=VALUE1,...]\n" |
| 3931 | " create a new object of type TYPENAME setting properties\n" |
| 3932 | " in the order they are specified. Note that the 'id'\n" |
| 3933 | " property must be set. These objects are placed in the\n" |
| 3934 | " '/objects' path.\n", |
| 3935 | QEMU_ARCH_ALL) |
| 3936 | STEXI |
| 3937 | @item -object @var{typename}[,@var{prop1}=@var{value1},...] |
| 3938 | @findex -object |
| 3939 | Create a new object of type @var{typename} setting properties |
| 3940 | in the order they are specified. Note that the 'id' |
| 3941 | property must be set. These objects are placed in the |
| 3942 | '/objects' path. |
| 3943 | |
| 3944 | @table @option |
| 3945 | |
Haozhong Zhang | 9837684 | 2017-12-11 15:28:04 +0800 | [diff] [blame] | 3946 | @item -object memory-backend-file,id=@var{id},size=@var{size},mem-path=@var{dir},share=@var{on|off},discard-data=@var{on|off},merge=@var{on|off},dump=@var{on|off},prealloc=@var{on|off},host-nodes=@var{host-nodes},policy=@var{default|preferred|bind|interleave},align=@var{align} |
Daniel P. Berrange | b9174d4 | 2015-05-13 17:14:03 +0100 | [diff] [blame] | 3947 | |
| 3948 | Creates a memory file backend object, which can be used to back |
Stefan Hajnoczi | c7cddce | 2017-11-28 16:15:28 +0000 | [diff] [blame] | 3949 | the guest RAM with huge pages. |
| 3950 | |
| 3951 | The @option{id} parameter is a unique ID that will be used to reference this |
| 3952 | memory region when configuring the @option{-numa} argument. |
| 3953 | |
| 3954 | The @option{size} option provides the size of the memory region, and accepts |
| 3955 | common suffixes, eg @option{500M}. |
| 3956 | |
| 3957 | The @option{mem-path} provides the path to either a shared memory or huge page |
| 3958 | filesystem mount. |
| 3959 | |
Daniel P. Berrange | b9174d4 | 2015-05-13 17:14:03 +0100 | [diff] [blame] | 3960 | The @option{share} boolean option determines whether the memory |
| 3961 | region is marked as private to QEMU, or shared. The latter allows |
| 3962 | a co-operating external process to access the QEMU memory region. |
Stefan Hajnoczi | c7cddce | 2017-11-28 16:15:28 +0000 | [diff] [blame] | 3963 | |
Marcel Apfelbaum | 06329cc | 2017-12-13 16:37:37 +0200 | [diff] [blame] | 3964 | The @option{share} is also required for pvrdma devices due to |
| 3965 | limitations in the RDMA API provided by Linux. |
| 3966 | |
| 3967 | Setting share=on might affect the ability to configure NUMA |
| 3968 | bindings for the memory backend under some circumstances, see |
| 3969 | Documentation/vm/numa_memory_policy.txt on the Linux kernel |
| 3970 | source tree for additional details. |
| 3971 | |
Eduardo Habkost | 11ae6ed | 2017-08-24 16:23:15 -0300 | [diff] [blame] | 3972 | Setting the @option{discard-data} boolean option to @var{on} |
| 3973 | indicates that file contents can be destroyed when QEMU exits, |
| 3974 | to avoid unnecessarily flushing data to the backing file. Note |
| 3975 | that @option{discard-data} is only an optimization, and QEMU |
| 3976 | might not discard file contents if it aborts unexpectedly or is |
| 3977 | terminated using SIGKILL. |
Daniel P. Berrange | b9174d4 | 2015-05-13 17:14:03 +0100 | [diff] [blame] | 3978 | |
Stefan Hajnoczi | c7cddce | 2017-11-28 16:15:28 +0000 | [diff] [blame] | 3979 | The @option{merge} boolean option enables memory merge, also known as |
| 3980 | MADV_MERGEABLE, so that Kernel Samepage Merging will consider the pages for |
| 3981 | memory deduplication. |
| 3982 | |
| 3983 | Setting the @option{dump} boolean option to @var{off} excludes the memory from |
| 3984 | core dumps. This feature is also known as MADV_DONTDUMP. |
| 3985 | |
| 3986 | The @option{prealloc} boolean option enables memory preallocation. |
| 3987 | |
| 3988 | The @option{host-nodes} option binds the memory range to a list of NUMA host |
| 3989 | nodes. |
| 3990 | |
| 3991 | The @option{policy} option sets the NUMA policy to one of the following values: |
| 3992 | |
| 3993 | @table @option |
| 3994 | @item @var{default} |
| 3995 | default host policy |
| 3996 | |
| 3997 | @item @var{preferred} |
| 3998 | prefer the given host node list for allocation |
| 3999 | |
| 4000 | @item @var{bind} |
| 4001 | restrict memory allocation to the given host node list |
| 4002 | |
| 4003 | @item @var{interleave} |
| 4004 | interleave memory allocations across the given host node list |
| 4005 | @end table |
| 4006 | |
Haozhong Zhang | 9837684 | 2017-12-11 15:28:04 +0800 | [diff] [blame] | 4007 | The @option{align} option specifies the base address alignment when |
| 4008 | QEMU mmap(2) @option{mem-path}, and accepts common suffixes, eg |
| 4009 | @option{2M}. Some backend store specified by @option{mem-path} |
| 4010 | requires an alignment different than the default one used by QEMU, eg |
| 4011 | the device DAX /dev/dax0.0 requires 2M alignment rather than 4K. In |
| 4012 | such cases, users can specify the required alignment via this option. |
| 4013 | |
Junyan He | a4de855 | 2018-07-18 15:48:00 +0800 | [diff] [blame] | 4014 | The @option{pmem} option specifies whether the backing file specified |
| 4015 | by @option{mem-path} is in host persistent memory that can be accessed |
| 4016 | using the SNIA NVM programming model (e.g. Intel NVDIMM). |
| 4017 | If @option{pmem} is set to 'on', QEMU will take necessary operations to |
| 4018 | guarantee the persistence of its own writes to @option{mem-path} |
| 4019 | (e.g. in vNVDIMM label emulation and live migration). |
| 4020 | |
Marcel Apfelbaum | 06329cc | 2017-12-13 16:37:37 +0200 | [diff] [blame] | 4021 | @item -object memory-backend-ram,id=@var{id},merge=@var{on|off},dump=@var{on|off},share=@var{on|off},prealloc=@var{on|off},size=@var{size},host-nodes=@var{host-nodes},policy=@var{default|preferred|bind|interleave} |
Stefan Hajnoczi | cd19491 | 2017-11-28 16:15:29 +0000 | [diff] [blame] | 4022 | |
| 4023 | Creates a memory backend object, which can be used to back the guest RAM. |
| 4024 | Memory backend objects offer more control than the @option{-m} option that is |
| 4025 | traditionally used to define guest RAM. Please refer to |
| 4026 | @option{memory-backend-file} for a description of the options. |
| 4027 | |
Marc-André Lureau | 36ea397 | 2018-08-28 17:38:40 +0200 | [diff] [blame] | 4028 | @item -object memory-backend-memfd,id=@var{id},merge=@var{on|off},dump=@var{on|off},share=@var{on|off},prealloc=@var{on|off},size=@var{size},host-nodes=@var{host-nodes},policy=@var{default|preferred|bind|interleave},seal=@var{on|off},hugetlb=@var{on|off},hugetlbsize=@var{size} |
Marc-André Lureau | dbb9e0f | 2018-02-01 14:27:54 +0100 | [diff] [blame] | 4029 | |
| 4030 | Creates an anonymous memory file backend object, which allows QEMU to |
| 4031 | share the memory with an external process (e.g. when using |
| 4032 | vhost-user). The memory is allocated with memfd and optional |
| 4033 | sealing. (Linux only) |
| 4034 | |
| 4035 | The @option{seal} option creates a sealed-file, that will block |
| 4036 | further resizing the memory ('on' by default). |
| 4037 | |
| 4038 | The @option{hugetlb} option specify the file to be created resides in |
| 4039 | the hugetlbfs filesystem (since Linux 4.14). Used in conjunction with |
| 4040 | the @option{hugetlb} option, the @option{hugetlbsize} option specify |
| 4041 | the hugetlb page size on systems that support multiple hugetlb page |
| 4042 | sizes (it must be a power of 2 value supported by the system). |
| 4043 | |
| 4044 | In some versions of Linux, the @option{hugetlb} option is incompatible |
| 4045 | with the @option{seal} option (requires at least Linux 4.16). |
| 4046 | |
| 4047 | Please refer to @option{memory-backend-file} for a description of the |
| 4048 | other options. |
| 4049 | |
Marc-André Lureau | 36ea397 | 2018-08-28 17:38:40 +0200 | [diff] [blame] | 4050 | The @option{share} boolean option is @var{on} by default with memfd. |
| 4051 | |
Daniel P. Berrange | b9174d4 | 2015-05-13 17:14:03 +0100 | [diff] [blame] | 4052 | @item -object rng-random,id=@var{id},filename=@var{/dev/random} |
| 4053 | |
| 4054 | Creates a random number generator backend which obtains entropy from |
| 4055 | a device on the host. The @option{id} parameter is a unique ID that |
| 4056 | will be used to reference this entropy backend from the @option{virtio-rng} |
| 4057 | device. The @option{filename} parameter specifies which file to obtain |
| 4058 | entropy from and if omitted defaults to @option{/dev/random}. |
| 4059 | |
| 4060 | @item -object rng-egd,id=@var{id},chardev=@var{chardevid} |
| 4061 | |
| 4062 | Creates a random number generator backend which obtains entropy from |
| 4063 | an external daemon running on the host. The @option{id} parameter is |
| 4064 | a unique ID that will be used to reference this entropy backend from |
| 4065 | the @option{virtio-rng} device. The @option{chardev} parameter is |
| 4066 | the unique ID of a character device backend that provides the connection |
| 4067 | to the RNG daemon. |
| 4068 | |
Daniel P. Berrange | e00adf6 | 2015-03-13 17:39:26 +0000 | [diff] [blame] | 4069 | @item -object tls-creds-anon,id=@var{id},endpoint=@var{endpoint},dir=@var{/path/to/cred/dir},verify-peer=@var{on|off} |
| 4070 | |
| 4071 | Creates a TLS anonymous credentials object, which can be used to provide |
| 4072 | TLS support on network backends. The @option{id} parameter is a unique |
| 4073 | ID which network backends will use to access the credentials. The |
| 4074 | @option{endpoint} is either @option{server} or @option{client} depending |
| 4075 | on whether the QEMU network backend that uses the credentials will be |
| 4076 | acting as a client or as a server. If @option{verify-peer} is enabled |
| 4077 | (the default) then once the handshake is completed, the peer credentials |
| 4078 | will be verified, though this is a no-op for anonymous credentials. |
| 4079 | |
| 4080 | The @var{dir} parameter tells QEMU where to find the credential |
| 4081 | files. For server endpoints, this directory may contain a file |
| 4082 | @var{dh-params.pem} providing diffie-hellman parameters to use |
| 4083 | for the TLS server. If the file is missing, QEMU will generate |
| 4084 | a set of DH parameters at startup. This is a computationally |
| 4085 | expensive operation that consumes random pool entropy, so it is |
| 4086 | recommended that a persistent set of parameters be generated |
| 4087 | upfront and saved. |
| 4088 | |
Richard W.M. Jones | e1a6dc9 | 2018-07-03 09:03:03 +0100 | [diff] [blame] | 4089 | @item -object tls-creds-psk,id=@var{id},endpoint=@var{endpoint},dir=@var{/path/to/keys/dir}[,username=@var{username}] |
| 4090 | |
| 4091 | Creates a TLS Pre-Shared Keys (PSK) credentials object, which can be used to provide |
| 4092 | TLS support on network backends. The @option{id} parameter is a unique |
| 4093 | ID which network backends will use to access the credentials. The |
| 4094 | @option{endpoint} is either @option{server} or @option{client} depending |
| 4095 | on whether the QEMU network backend that uses the credentials will be |
| 4096 | acting as a client or as a server. For clients only, @option{username} |
| 4097 | is the username which will be sent to the server. If omitted |
| 4098 | it defaults to ``qemu''. |
| 4099 | |
| 4100 | The @var{dir} parameter tells QEMU where to find the keys file. |
| 4101 | It is called ``@var{dir}/keys.psk'' and contains ``username:key'' |
| 4102 | pairs. This file can most easily be created using the GnuTLS |
| 4103 | @code{psktool} program. |
| 4104 | |
| 4105 | For server endpoints, @var{dir} may also contain a file |
| 4106 | @var{dh-params.pem} providing diffie-hellman parameters to use |
| 4107 | for the TLS server. If the file is missing, QEMU will generate |
| 4108 | a set of DH parameters at startup. This is a computationally |
| 4109 | expensive operation that consumes random pool entropy, so it is |
| 4110 | recommended that a persistent set of parameters be generated |
| 4111 | up front and saved. |
| 4112 | |
Christophe Fergeau | 00e5e9d | 2017-12-08 15:14:30 +0100 | [diff] [blame] | 4113 | @item -object tls-creds-x509,id=@var{id},endpoint=@var{endpoint},dir=@var{/path/to/cred/dir},priority=@var{priority},verify-peer=@var{on|off},passwordid=@var{id} |
Daniel P. Berrange | 85bcbc7 | 2015-03-13 17:39:26 +0000 | [diff] [blame] | 4114 | |
| 4115 | Creates a TLS anonymous credentials object, which can be used to provide |
| 4116 | TLS support on network backends. The @option{id} parameter is a unique |
| 4117 | ID which network backends will use to access the credentials. The |
| 4118 | @option{endpoint} is either @option{server} or @option{client} depending |
| 4119 | on whether the QEMU network backend that uses the credentials will be |
| 4120 | acting as a client or as a server. If @option{verify-peer} is enabled |
| 4121 | (the default) then once the handshake is completed, the peer credentials |
| 4122 | will be verified. With x509 certificates, this implies that the clients |
| 4123 | must be provided with valid client certificates too. |
| 4124 | |
| 4125 | The @var{dir} parameter tells QEMU where to find the credential |
| 4126 | files. For server endpoints, this directory may contain a file |
| 4127 | @var{dh-params.pem} providing diffie-hellman parameters to use |
| 4128 | for the TLS server. If the file is missing, QEMU will generate |
| 4129 | a set of DH parameters at startup. This is a computationally |
| 4130 | expensive operation that consumes random pool entropy, so it is |
| 4131 | recommended that a persistent set of parameters be generated |
| 4132 | upfront and saved. |
| 4133 | |
| 4134 | For x509 certificate credentials the directory will contain further files |
| 4135 | providing the x509 certificates. The certificates must be stored |
| 4136 | in PEM format, in filenames @var{ca-cert.pem}, @var{ca-crl.pem} (optional), |
| 4137 | @var{server-cert.pem} (only servers), @var{server-key.pem} (only servers), |
| 4138 | @var{client-cert.pem} (only clients), and @var{client-key.pem} (only clients). |
| 4139 | |
Daniel P. Berrange | 1d7b5b4 | 2015-10-15 16:14:42 +0100 | [diff] [blame] | 4140 | For the @var{server-key.pem} and @var{client-key.pem} files which |
| 4141 | contain sensitive private keys, it is possible to use an encrypted |
| 4142 | version by providing the @var{passwordid} parameter. This provides |
| 4143 | the ID of a previously created @code{secret} object containing the |
| 4144 | password for decryption. |
| 4145 | |
Christophe Fergeau | 00e5e9d | 2017-12-08 15:14:30 +0100 | [diff] [blame] | 4146 | The @var{priority} parameter allows to override the global default |
| 4147 | priority used by gnutls. This can be useful if the system administrator |
| 4148 | needs to use a weaker set of crypto priorities for QEMU without |
| 4149 | potentially forcing the weakness onto all applications. Or conversely |
| 4150 | if one wants wants a stronger default for QEMU than for all other |
| 4151 | applications, they can do this through this parameter. Its format is |
| 4152 | a gnutls priority string as described at |
| 4153 | @url{https://gnutls.org/manual/html_node/Priority-Strings.html}. |
| 4154 | |
zhanghailiang | 338d3f4 | 2016-03-01 13:37:02 +0800 | [diff] [blame] | 4155 | @item -object filter-buffer,id=@var{id},netdev=@var{netdevid},interval=@var{t}[,queue=@var{all|rx|tx}][,status=@var{on|off}] |
Yang Hongyang | 7dbb11c | 2015-10-07 11:52:21 +0800 | [diff] [blame] | 4156 | |
| 4157 | Interval @var{t} can't be 0, this filter batches the packet delivery: all |
| 4158 | packets arriving in a given interval on netdev @var{netdevid} are delayed |
| 4159 | until the end of the interval. Interval is in microseconds. |
zhanghailiang | 338d3f4 | 2016-03-01 13:37:02 +0800 | [diff] [blame] | 4160 | @option{status} is optional that indicate whether the netfilter is |
| 4161 | on (enabled) or off (disabled), the default status for netfilter will be 'on'. |
Yang Hongyang | 7dbb11c | 2015-10-07 11:52:21 +0800 | [diff] [blame] | 4162 | |
| 4163 | queue @var{all|rx|tx} is an option that can be applied to any netfilter. |
| 4164 | |
| 4165 | @option{all}: the filter is attached both to the receive and the transmit |
| 4166 | queue of the netdev (default). |
| 4167 | |
| 4168 | @option{rx}: the filter is attached to the receive queue of the netdev, |
| 4169 | where it will receive packets sent to the netdev. |
| 4170 | |
| 4171 | @option{tx}: the filter is attached to the transmit queue of the netdev, |
| 4172 | where it will receive packets sent by the netdev. |
| 4173 | |
Zhang Chen | e2521f0 | 2017-07-04 14:53:48 +0800 | [diff] [blame] | 4174 | @item -object filter-mirror,id=@var{id},netdev=@var{netdevid},outdev=@var{chardevid},queue=@var{all|rx|tx}[,vnet_hdr_support] |
Zhang Chen | f6d3afb | 2016-03-15 15:41:33 +0800 | [diff] [blame] | 4175 | |
Zhang Chen | e2521f0 | 2017-07-04 14:53:48 +0800 | [diff] [blame] | 4176 | filter-mirror on netdev @var{netdevid},mirror net packet to chardev@var{chardevid}, if it has the vnet_hdr_support flag, filter-mirror will mirror packet with vnet_hdr_len. |
Zhang Chen | f6d3afb | 2016-03-15 15:41:33 +0800 | [diff] [blame] | 4177 | |
Zhang Chen | 00d5c24 | 2017-07-04 14:53:49 +0800 | [diff] [blame] | 4178 | @item -object filter-redirector,id=@var{id},netdev=@var{netdevid},indev=@var{chardevid},outdev=@var{chardevid},queue=@var{all|rx|tx}[,vnet_hdr_support] |
Zhang Chen | d46f75b | 2016-03-17 16:16:26 +0800 | [diff] [blame] | 4179 | |
| 4180 | filter-redirector on netdev @var{netdevid},redirect filter's net packet to chardev |
Zhang Chen | 00d5c24 | 2017-07-04 14:53:49 +0800 | [diff] [blame] | 4181 | @var{chardevid},and redirect indev's packet to filter.if it has the vnet_hdr_support flag, |
| 4182 | filter-redirector will redirect packet with vnet_hdr_len. |
Zhang Chen | d46f75b | 2016-03-17 16:16:26 +0800 | [diff] [blame] | 4183 | Create a filter-redirector we need to differ outdev id from indev id, id can not |
| 4184 | be the same. we can just use indev or outdev, but at least one of indev or outdev |
| 4185 | need to be specified. |
| 4186 | |
Zhang Chen | 4b39bdc | 2017-07-04 14:53:55 +0800 | [diff] [blame] | 4187 | @item -object filter-rewriter,id=@var{id},netdev=@var{netdevid},queue=@var{all|rx|tx},[vnet_hdr_support] |
Zhang Chen | e6eee8a | 2016-09-27 10:22:32 +0800 | [diff] [blame] | 4188 | |
| 4189 | Filter-rewriter is a part of COLO project.It will rewrite tcp packet to |
| 4190 | secondary from primary to keep secondary tcp connection,and rewrite |
| 4191 | tcp packet to primary from secondary make tcp packet can be handled by |
Zhang Chen | 4b39bdc | 2017-07-04 14:53:55 +0800 | [diff] [blame] | 4192 | client.if it has the vnet_hdr_support flag, we can parse packet with vnet header. |
Zhang Chen | e6eee8a | 2016-09-27 10:22:32 +0800 | [diff] [blame] | 4193 | |
| 4194 | usage: |
| 4195 | colo secondary: |
| 4196 | -object filter-redirector,id=f1,netdev=hn0,queue=tx,indev=red0 |
| 4197 | -object filter-redirector,id=f2,netdev=hn0,queue=rx,outdev=red1 |
| 4198 | -object filter-rewriter,id=rew0,netdev=hn0,queue=all |
| 4199 | |
Changlong Xie | c551cd5 | 2016-10-11 13:28:32 +0800 | [diff] [blame] | 4200 | @item -object filter-dump,id=@var{id},netdev=@var{dev}[,file=@var{filename}][,maxlen=@var{len}] |
Thomas Huth | d3e0c03 | 2015-10-13 12:40:02 +0200 | [diff] [blame] | 4201 | |
| 4202 | Dump the network traffic on netdev @var{dev} to the file specified by |
| 4203 | @var{filename}. At most @var{len} bytes (64k by default) per packet are stored. |
| 4204 | The file format is libpcap, so it can be analyzed with tools such as tcpdump |
| 4205 | or Wireshark. |
| 4206 | |
Zhang Chen | aa3a703 | 2017-07-04 14:53:52 +0800 | [diff] [blame] | 4207 | @item -object colo-compare,id=@var{id},primary_in=@var{chardevid},secondary_in=@var{chardevid},outdev=@var{chardevid}[,vnet_hdr_support] |
Zhang Chen | 7dce4e6 | 2016-09-27 10:22:26 +0800 | [diff] [blame] | 4208 | |
| 4209 | Colo-compare gets packet from primary_in@var{chardevid} and secondary_in@var{chardevid}, than compare primary packet with |
| 4210 | secondary packet. If the packets are same, we will output primary |
| 4211 | packet to outdev@var{chardevid}, else we will notify colo-frame |
| 4212 | do checkpoint and send primary packet to outdev@var{chardevid}. |
Zhang Chen | aa3a703 | 2017-07-04 14:53:52 +0800 | [diff] [blame] | 4213 | if it has the vnet_hdr_support flag, colo compare will send/recv packet with vnet_hdr_len. |
Zhang Chen | 7dce4e6 | 2016-09-27 10:22:26 +0800 | [diff] [blame] | 4214 | |
| 4215 | we must use it with the help of filter-mirror and filter-redirector. |
| 4216 | |
| 4217 | @example |
| 4218 | |
| 4219 | primary: |
| 4220 | -netdev tap,id=hn0,vhost=off,script=/etc/qemu-ifup,downscript=/etc/qemu-ifdown |
| 4221 | -device e1000,id=e0,netdev=hn0,mac=52:a4:00:12:78:66 |
| 4222 | -chardev socket,id=mirror0,host=3.3.3.3,port=9003,server,nowait |
| 4223 | -chardev socket,id=compare1,host=3.3.3.3,port=9004,server,nowait |
| 4224 | -chardev socket,id=compare0,host=3.3.3.3,port=9001,server,nowait |
| 4225 | -chardev socket,id=compare0-0,host=3.3.3.3,port=9001 |
| 4226 | -chardev socket,id=compare_out,host=3.3.3.3,port=9005,server,nowait |
| 4227 | -chardev socket,id=compare_out0,host=3.3.3.3,port=9005 |
| 4228 | -object filter-mirror,id=m0,netdev=hn0,queue=tx,outdev=mirror0 |
| 4229 | -object filter-redirector,netdev=hn0,id=redire0,queue=rx,indev=compare_out |
| 4230 | -object filter-redirector,netdev=hn0,id=redire1,queue=rx,outdev=compare0 |
| 4231 | -object colo-compare,id=comp0,primary_in=compare0-0,secondary_in=compare1,outdev=compare_out0 |
| 4232 | |
| 4233 | secondary: |
| 4234 | -netdev tap,id=hn0,vhost=off,script=/etc/qemu-ifup,down script=/etc/qemu-ifdown |
| 4235 | -device e1000,netdev=hn0,mac=52:a4:00:12:78:66 |
| 4236 | -chardev socket,id=red0,host=3.3.3.3,port=9003 |
| 4237 | -chardev socket,id=red1,host=3.3.3.3,port=9004 |
| 4238 | -object filter-redirector,id=f1,netdev=hn0,queue=tx,indev=red0 |
| 4239 | -object filter-redirector,id=f2,netdev=hn0,queue=rx,outdev=red1 |
| 4240 | |
| 4241 | @end example |
| 4242 | |
| 4243 | If you want to know the detail of above command line, you can read |
| 4244 | the colo-compare git log. |
| 4245 | |
Gonglei | 1653a5f | 2016-10-28 16:33:23 +0800 | [diff] [blame] | 4246 | @item -object cryptodev-backend-builtin,id=@var{id}[,queues=@var{queues}] |
| 4247 | |
| 4248 | Creates a cryptodev backend which executes crypto opreation from |
| 4249 | the QEMU cipher APIS. The @var{id} parameter is |
| 4250 | a unique ID that will be used to reference this cryptodev backend from |
| 4251 | the @option{virtio-crypto} device. The @var{queues} parameter is optional, |
| 4252 | which specify the queue number of cryptodev backend, the default of |
| 4253 | @var{queues} is 1. |
| 4254 | |
| 4255 | @example |
| 4256 | |
| 4257 | # qemu-system-x86_64 \ |
| 4258 | [...] \ |
| 4259 | -object cryptodev-backend-builtin,id=cryptodev0 \ |
| 4260 | -device virtio-crypto-pci,id=crypto0,cryptodev=cryptodev0 \ |
| 4261 | [...] |
| 4262 | @end example |
| 4263 | |
Gonglei | 042cea2 | 2018-03-01 21:46:28 +0800 | [diff] [blame] | 4264 | @item -object cryptodev-vhost-user,id=@var{id},chardev=@var{chardevid}[,queues=@var{queues}] |
| 4265 | |
| 4266 | Creates a vhost-user cryptodev backend, backed by a chardev @var{chardevid}. |
| 4267 | The @var{id} parameter is a unique ID that will be used to reference this |
| 4268 | cryptodev backend from the @option{virtio-crypto} device. |
| 4269 | The chardev should be a unix domain socket backed one. The vhost-user uses |
| 4270 | a specifically defined protocol to pass vhost ioctl replacement messages |
| 4271 | to an application on the other end of the socket. |
| 4272 | The @var{queues} parameter is optional, which specify the queue number |
| 4273 | of cryptodev backend for multiqueue vhost-user, the default of @var{queues} is 1. |
| 4274 | |
| 4275 | @example |
| 4276 | |
| 4277 | # qemu-system-x86_64 \ |
| 4278 | [...] \ |
| 4279 | -chardev socket,id=chardev0,path=/path/to/socket \ |
| 4280 | -object cryptodev-vhost-user,id=cryptodev0,chardev=chardev0 \ |
| 4281 | -device virtio-crypto-pci,id=crypto0,cryptodev=cryptodev0 \ |
| 4282 | [...] |
| 4283 | @end example |
| 4284 | |
Daniel P. Berrange | ac1d887 | 2015-10-14 09:58:38 +0100 | [diff] [blame] | 4285 | @item -object secret,id=@var{id},data=@var{string},format=@var{raw|base64}[,keyid=@var{secretid},iv=@var{string}] |
| 4286 | @item -object secret,id=@var{id},file=@var{filename},format=@var{raw|base64}[,keyid=@var{secretid},iv=@var{string}] |
| 4287 | |
| 4288 | Defines a secret to store a password, encryption key, or some other sensitive |
| 4289 | data. The sensitive data can either be passed directly via the @var{data} |
| 4290 | parameter, or indirectly via the @var{file} parameter. Using the @var{data} |
| 4291 | parameter is insecure unless the sensitive data is encrypted. |
| 4292 | |
| 4293 | The sensitive data can be provided in raw format (the default), or base64. |
| 4294 | When encoded as JSON, the raw format only supports valid UTF-8 characters, |
| 4295 | so base64 is recommended for sending binary data. QEMU will convert from |
| 4296 | which ever format is provided to the format it needs internally. eg, an |
| 4297 | RBD password can be provided in raw format, even though it will be base64 |
| 4298 | encoded when passed onto the RBD sever. |
| 4299 | |
| 4300 | For added protection, it is possible to encrypt the data associated with |
| 4301 | a secret using the AES-256-CBC cipher. Use of encryption is indicated |
| 4302 | by providing the @var{keyid} and @var{iv} parameters. The @var{keyid} |
| 4303 | parameter provides the ID of a previously defined secret that contains |
| 4304 | the AES-256 decryption key. This key should be 32-bytes long and be |
| 4305 | base64 encoded. The @var{iv} parameter provides the random initialization |
| 4306 | vector used for encryption of this particular secret and should be a |
Daniel P. Berrange | 69c0b27 | 2016-04-04 10:33:55 +0100 | [diff] [blame] | 4307 | base64 encrypted string of the 16-byte IV. |
Daniel P. Berrange | ac1d887 | 2015-10-14 09:58:38 +0100 | [diff] [blame] | 4308 | |
| 4309 | The simplest (insecure) usage is to provide the secret inline |
| 4310 | |
| 4311 | @example |
| 4312 | |
| 4313 | # $QEMU -object secret,id=sec0,data=letmein,format=raw |
| 4314 | |
| 4315 | @end example |
| 4316 | |
| 4317 | The simplest secure usage is to provide the secret via a file |
| 4318 | |
Eric Blake | b43671f | 2017-07-03 13:09:50 -0500 | [diff] [blame] | 4319 | # printf "letmein" > mypasswd.txt |
Daniel P. Berrange | ac1d887 | 2015-10-14 09:58:38 +0100 | [diff] [blame] | 4320 | # $QEMU -object secret,id=sec0,file=mypasswd.txt,format=raw |
| 4321 | |
| 4322 | For greater security, AES-256-CBC should be used. To illustrate usage, |
| 4323 | consider the openssl command line tool which can encrypt the data. Note |
| 4324 | that when encrypting, the plaintext must be padded to the cipher block |
| 4325 | size (32 bytes) using the standard PKCS#5/6 compatible padding algorithm. |
| 4326 | |
| 4327 | First a master key needs to be created in base64 encoding: |
| 4328 | |
| 4329 | @example |
| 4330 | # openssl rand -base64 32 > key.b64 |
| 4331 | # KEY=$(base64 -d key.b64 | hexdump -v -e '/1 "%02X"') |
| 4332 | @end example |
| 4333 | |
| 4334 | Each secret to be encrypted needs to have a random initialization vector |
| 4335 | generated. These do not need to be kept secret |
| 4336 | |
| 4337 | @example |
| 4338 | # openssl rand -base64 16 > iv.b64 |
| 4339 | # IV=$(base64 -d iv.b64 | hexdump -v -e '/1 "%02X"') |
| 4340 | @end example |
| 4341 | |
| 4342 | The secret to be defined can now be encrypted, in this case we're |
| 4343 | telling openssl to base64 encode the result, but it could be left |
| 4344 | as raw bytes if desired. |
| 4345 | |
| 4346 | @example |
Eric Blake | b43671f | 2017-07-03 13:09:50 -0500 | [diff] [blame] | 4347 | # SECRET=$(printf "letmein" | |
Daniel P. Berrange | ac1d887 | 2015-10-14 09:58:38 +0100 | [diff] [blame] | 4348 | openssl enc -aes-256-cbc -a -K $KEY -iv $IV) |
| 4349 | @end example |
| 4350 | |
| 4351 | When launching QEMU, create a master secret pointing to @code{key.b64} |
| 4352 | and specify that to be used to decrypt the user password. Pass the |
| 4353 | contents of @code{iv.b64} to the second secret |
| 4354 | |
| 4355 | @example |
| 4356 | # $QEMU \ |
| 4357 | -object secret,id=secmaster0,format=base64,file=key.b64 \ |
| 4358 | -object secret,id=sec0,keyid=secmaster0,format=base64,\ |
| 4359 | data=$SECRET,iv=$(<iv.b64) |
| 4360 | @end example |
| 4361 | |
Brijesh Singh | a9b4942 | 2018-03-08 06:48:41 -0600 | [diff] [blame] | 4362 | @item -object sev-guest,id=@var{id},cbitpos=@var{cbitpos},reduced-phys-bits=@var{val},[sev-device=@var{string},policy=@var{policy},handle=@var{handle},dh-cert-file=@var{file},session-file=@var{file}] |
| 4363 | |
| 4364 | Create a Secure Encrypted Virtualization (SEV) guest object, which can be used |
| 4365 | to provide the guest memory encryption support on AMD processors. |
| 4366 | |
| 4367 | When memory encryption is enabled, one of the physical address bit (aka the |
| 4368 | C-bit) is utilized to mark if a memory page is protected. The @option{cbitpos} |
| 4369 | is used to provide the C-bit position. The C-bit position is Host family dependent |
| 4370 | hence user must provide this value. On EPYC, the value should be 47. |
| 4371 | |
| 4372 | When memory encryption is enabled, we loose certain bits in physical address space. |
| 4373 | The @option{reduced-phys-bits} is used to provide the number of bits we loose in |
| 4374 | physical address space. Similar to C-bit, the value is Host family dependent. |
| 4375 | On EPYC, the value should be 5. |
| 4376 | |
| 4377 | The @option{sev-device} provides the device file to use for communicating with |
| 4378 | the SEV firmware running inside AMD Secure Processor. The default device is |
| 4379 | '/dev/sev'. If hardware supports memory encryption then /dev/sev devices are |
| 4380 | created by CCP driver. |
| 4381 | |
| 4382 | The @option{policy} provides the guest policy to be enforced by the SEV firmware |
| 4383 | and restrict what configuration and operational commands can be performed on this |
| 4384 | guest by the hypervisor. The policy should be provided by the guest owner and is |
| 4385 | bound to the guest and cannot be changed throughout the lifetime of the guest. |
| 4386 | The default is 0. |
| 4387 | |
| 4388 | If guest @option{policy} allows sharing the key with another SEV guest then |
| 4389 | @option{handle} can be use to provide handle of the guest from which to share |
| 4390 | the key. |
| 4391 | |
| 4392 | The @option{dh-cert-file} and @option{session-file} provides the guest owner's |
| 4393 | Public Diffie-Hillman key defined in SEV spec. The PDH and session parameters |
| 4394 | are used for establishing a cryptographic session with the guest owner to |
| 4395 | negotiate keys used for attestation. The file must be encoded in base64. |
| 4396 | |
| 4397 | e.g to launch a SEV guest |
| 4398 | @example |
| 4399 | # $QEMU \ |
| 4400 | ...... |
| 4401 | -object sev-guest,id=sev0,cbitpos=47,reduced-phys-bits=5 \ |
| 4402 | -machine ...,memory-encryption=sev0 |
| 4403 | ..... |
| 4404 | |
| 4405 | @end example |
Daniel P. Berrange | b9174d4 | 2015-05-13 17:14:03 +0100 | [diff] [blame] | 4406 | @end table |
| 4407 | |
| 4408 | ETEXI |
| 4409 | |
| 4410 | |
Stefan Weil | 3dbf2c7 | 2010-01-16 18:19:44 +0100 | [diff] [blame] | 4411 | HXCOMM This is the last statement. Insert new options before this line! |
| 4412 | STEXI |
| 4413 | @end table |
| 4414 | ETEXI |