qemu-options.hx 112.6 KB
Newer Older
1 2 3
HXCOMM Use DEFHEADING() to define headings in both help text and texi
HXCOMM Text between STEXI and ETEXI are copied to texi version and
HXCOMM discarded from C version
4 5 6
HXCOMM DEF(option, HAS_ARG/0, opt_enum, opt_help, arch_mask) is used to
HXCOMM construct option structures, enums and help message for specified
HXCOMM architectures.
7 8 9 10 11 12 13 14
HXCOMM HXCOMM can be used for comments, discarded from both texi and C

DEFHEADING(Standard options:)
STEXI
@table @option
ETEXI

DEF("help", 0, QEMU_OPTION_h,
15
    "-h or -help     display this help and exit\n", QEMU_ARCH_ALL)
16 17
STEXI
@item -h
18
@findex -h
19 20 21
Display help and exit
ETEXI

P
pbrook 已提交
22
DEF("version", 0, QEMU_OPTION_version,
23
    "-version        display version information and exit\n", QEMU_ARCH_ALL)
P
pbrook 已提交
24 25
STEXI
@item -version
26
@findex -version
P
pbrook 已提交
27 28 29
Display version information and exit
ETEXI

J
Jan Kiszka 已提交
30 31
DEF("machine", HAS_ARG, QEMU_OPTION_machine, \
    "-machine [type=]name[,prop[=value][,...]]\n"
32
    "                selects emulated machine ('-machine help' for list)\n"
J
Jan Kiszka 已提交
33
    "                property accel=accel1[:accel2[:...]] selects accelerator\n"
34
    "                supported accelerators are kvm, xen, tcg (default: tcg)\n"
J
Jan Kiszka 已提交
35
    "                kernel_irqchip=on|off controls accelerated irqchip support\n"
36
    "                kvm_shadow_mem=size of KVM shadow MMU\n"
37 38
    "                dump-guest-core=on|off include guest memory in a core dump (default=on)\n"
    "                mem-merge=on|off controls memory merge support (default: on)\n",
J
Jan Kiszka 已提交
39
    QEMU_ARCH_ALL)
40
STEXI
J
Jan Kiszka 已提交
41 42
@item -machine [type=]@var{name}[,prop=@var{value}[,...]]
@findex -machine
43
Select the emulated machine by @var{name}. Use @code{-machine help} to list
J
Jan Kiszka 已提交
44 45 46 47 48 49 50
available machines. Supported machine properties are:
@table @option
@item accel=@var{accels1}[:@var{accels2}[:...]]
This is used to enable an accelerator. Depending on the target architecture,
kvm, xen, or tcg can be available. By default, tcg is used. If there is more
than one accelerator specified, the next one is used if the previous one fails
to initialize.
51 52
@item kernel_irqchip=on|off
Enables in-kernel irqchip support for the chosen accelerator when available.
J
Jan Kiszka 已提交
53 54
@item kvm_shadow_mem=size
Defines the size of the KVM shadow MMU.
55 56
@item dump-guest-core=on|off
Include guest memory in a core dump. The default is on.
57 58 59 60
@item mem-merge=on|off
Enables or disables memory merge support. This feature, when supported by
the host, de-duplicates identical memory pages among VMs instances
(enabled by default).
J
Jan Kiszka 已提交
61
@end table
62 63
ETEXI

J
Jan Kiszka 已提交
64 65 66
HXCOMM Deprecated by -machine
DEF("M", HAS_ARG, QEMU_OPTION_M, "", QEMU_ARCH_ALL)

67
DEF("cpu", HAS_ARG, QEMU_OPTION_cpu,
68
    "-cpu cpu        select CPU ('-cpu help' for list)\n", QEMU_ARCH_ALL)
69 70
STEXI
@item -cpu @var{model}
71
@findex -cpu
72
Select CPU model (@code{-cpu help} for list and additional feature selection)
73 74 75
ETEXI

DEF("smp", HAS_ARG, QEMU_OPTION_smp,
76
    "-smp [cpus=]n[,maxcpus=cpus][,cores=cores][,threads=threads][,sockets=sockets]\n"
77 78
    "                set the number of CPUs to 'n' [default=1]\n"
    "                maxcpus= maximum number of total cpus, including\n"
79
    "                offline CPUs for hotplug, etc\n"
80 81
    "                cores= number of CPU cores on one socket\n"
    "                threads= number of threads on one CPU core\n"
82 83
    "                sockets= number of discrete sockets in the system\n",
        QEMU_ARCH_ALL)
84
STEXI
85
@item -smp [cpus=]@var{n}[,cores=@var{cores}][,threads=@var{threads}][,sockets=@var{sockets}][,maxcpus=@var{maxcpus}]
86
@findex -smp
87 88 89
Simulate an SMP system with @var{n} CPUs. On the PC target, up to 255
CPUs are supported. On Sparc32 target, Linux limits the number of usable CPUs
to 4.
90 91 92 93 94
For the PC target, the number of @var{cores} per socket, the number
of @var{threads} per cores and the total number of @var{sockets} can be
specified. Missing values will be computed. If any on the three values is
given, the total number of CPUs @var{n} can be omitted. @var{maxcpus}
specifies the maximum number of hotpluggable CPUs.
95 96
ETEXI

97
DEF("numa", HAS_ARG, QEMU_OPTION_numa,
98
    "-numa node[,mem=size][,cpus=cpu[-cpu]][,nodeid=node]\n", QEMU_ARCH_ALL)
99 100
STEXI
@item -numa @var{opts}
101
@findex -numa
102 103 104 105
Simulate a multi node NUMA system. If mem and cpus are omitted, resources
are split equally.
ETEXI

106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133
DEF("add-fd", HAS_ARG, QEMU_OPTION_add_fd,
    "-add-fd fd=fd,set=set[,opaque=opaque]\n"
    "                Add 'fd' to fd 'set'\n", QEMU_ARCH_ALL)
STEXI
@item -add-fd fd=@var{fd},set=@var{set}[,opaque=@var{opaque}]
@findex -add-fd

Add a file descriptor to an fd set.  Valid options are:

@table @option
@item fd=@var{fd}
This option defines the file descriptor of which a duplicate is added to fd set.
The file descriptor cannot be stdin, stdout, or stderr.
@item set=@var{set}
This option defines the ID of the fd set to add the file descriptor to.
@item opaque=@var{opaque}
This option defines a free-form string that can be used to describe @var{fd}.
@end table

You can open an image using pre-opened file descriptors from an fd set:
@example
qemu-system-i386
-add-fd fd=3,set=2,opaque="rdwr:/path/to/file"
-add-fd fd=4,set=2,opaque="rdonly:/path/to/file"
-drive file=/dev/fdset/2,index=0,media=disk
@end example
ETEXI

134 135 136
DEF("set", HAS_ARG, QEMU_OPTION_set,
    "-set group.id.arg=value\n"
    "                set <arg> parameter for item <id> of type <group>\n"
137
    "                i.e. -set drive.$id.file=/path/to/image\n", QEMU_ARCH_ALL)
138
STEXI
139
@item -set @var{group}.@var{id}.@var{arg}=@var{value}
140
@findex -set
141
Set parameter @var{arg} for item @var{id} of type @var{group}\n"
142 143 144
ETEXI

DEF("global", HAS_ARG, QEMU_OPTION_global,
145
    "-global driver.prop=value\n"
146 147
    "                set a global default for a driver property\n",
    QEMU_ARCH_ALL)
148
STEXI
149
@item -global @var{driver}.@var{prop}=@var{value}
150
@findex -global
151 152 153
Set default value of @var{driver}'s property @var{prop} to @var{value}, e.g.:

@example
154
qemu-system-i386 -global ide-drive.physical_block_size=4096 -drive file=file,if=ide,index=0,media=disk
155 156 157 158 159
@end example

In particular, you can use this to set driver properties for devices which are 
created automatically by the machine model. To create a device which is not 
created automatically and set properties on it, use -@option{device}.
160 161
ETEXI

162
DEF("boot", HAS_ARG, QEMU_OPTION_boot,
J
Jan Kiszka 已提交
163
    "-boot [order=drives][,once=drives][,menu=on|off]\n"
A
Amos Kong 已提交
164
    "      [,splash=sp_name][,splash-time=sp_time][,reboot-timeout=rb_time][,strict=on|off]\n"
W
wayne 已提交
165 166
    "                'drives': floppy (a), hard disk (c), CD-ROM (d), network (n)\n"
    "                'sp_name': the file's name that would be passed to bios as logo picture, if menu=on\n"
167 168
    "                'sp_time': the period that splash picture last if menu=on, unit is ms\n"
    "                'rb_timeout': the timeout before guest reboot when boot failed, unit is ms\n",
169
    QEMU_ARCH_ALL)
170
STEXI
A
Amos Kong 已提交
171
@item -boot [order=@var{drives}][,once=@var{drives}][,menu=on|off][,splash=@var{sp_name}][,splash-time=@var{sp_time}][,reboot-timeout=@var{rb_timeout}][,strict=on|off]
172
@findex -boot
J
Jan Kiszka 已提交
173 174 175 176 177 178 179 180 181 182
Specify boot order @var{drives} as a string of drive letters. Valid
drive letters depend on the target achitecture. The x86 PC uses: a, b
(floppy 1 and 2), c (first hard disk), d (first CD-ROM), n-p (Etherboot
from network adapter 1-4), hard disk boot is the default. To apply a
particular boot order only on the first startup, specify it via
@option{once}.

Interactive boot menus/prompts can be enabled via @option{menu=on} as far
as firmware/BIOS supports them. The default is non-interactive boot.

W
wayne 已提交
183 184 185 186 187 188 189
A splash picture could be passed to bios, enabling user to show it as logo,
when option splash=@var{sp_name} is given and menu=on, If firmware/BIOS
supports them. Currently Seabios for X86 system support it.
limitation: The splash file could be a jpeg file or a BMP file in 24 BPP
format(true color). The resolution should be supported by the SVGA mode, so
the recommended is 320x240, 640x480, 800x640.

190 191 192 193 194
A timeout could be passed to bios, guest will pause for @var{rb_timeout} ms
when boot failed, then reboot. If @var{rb_timeout} is '-1', guest will not
reboot, qemu passes '-1' to bios by default. Currently Seabios for X86
system support it.

A
Amos Kong 已提交
195 196 197 198
Do strict boot via @option{strict=on} as far as firmware/BIOS
supports it. This only effects when boot priority is changed by
bootindex options. The default is non-strict boot.

J
Jan Kiszka 已提交
199 200
@example
# try to boot from network first, then from hard disk
201
qemu-system-i386 -boot order=nc
J
Jan Kiszka 已提交
202
# boot from CD-ROM first, switch back to default order after reboot
203
qemu-system-i386 -boot once=d
W
wayne 已提交
204
# boot with a splash picture for 5 seconds.
205
qemu-system-i386 -boot menu=on,splash=/root/boot.bmp,splash-time=5000
J
Jan Kiszka 已提交
206 207 208 209
@end example

Note: The legacy format '-boot @var{drives}' is still supported but its
use is discouraged as it may be removed from future versions.
210 211 212
ETEXI

DEF("m", HAS_ARG, QEMU_OPTION_m,
213
    "-m megs         set virtual RAM size to megs MB [default="
214
    stringify(DEFAULT_RAM_SIZE) "]\n", QEMU_ARCH_ALL)
215 216
STEXI
@item -m @var{megs}
217
@findex -m
218 219 220 221 222
Set virtual RAM size to @var{megs} megabytes. Default is 128 MiB.  Optionally,
a suffix of ``M'' or ``G'' can be used to signify a value in megabytes or
gigabytes respectively.
ETEXI

223
DEF("mem-path", HAS_ARG, QEMU_OPTION_mempath,
224
    "-mem-path FILE  provide backing storage for guest RAM\n", QEMU_ARCH_ALL)
225 226
STEXI
@item -mem-path @var{path}
227
@findex -mem-path
228 229 230 231 232
Allocate guest RAM from a temporarily created file in @var{path}.
ETEXI

#ifdef MAP_POPULATE
DEF("mem-prealloc", 0, QEMU_OPTION_mem_prealloc,
233 234
    "-mem-prealloc   preallocate guest memory (use with -mem-path)\n",
    QEMU_ARCH_ALL)
235 236
STEXI
@item -mem-prealloc
237
@findex -mem-prealloc
238 239 240 241
Preallocate memory when using -mem-path.
ETEXI
#endif

242
DEF("k", HAS_ARG, QEMU_OPTION_k,
243 244
    "-k language     use keyboard layout (for example 'fr' for French)\n",
    QEMU_ARCH_ALL)
245 246
STEXI
@item -k @var{language}
247
@findex -k
248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265
Use keyboard layout @var{language} (for example @code{fr} for
French). This option is only needed where it is not easy to get raw PC
keycodes (e.g. on Macs, with some X11 servers or with a VNC
display). You don't normally need to use it on PC/Linux or PC/Windows
hosts.

The available layouts are:
@example
ar  de-ch  es  fo     fr-ca  hu  ja  mk     no  pt-br  sv
da  en-gb  et  fr     fr-ch  is  lt  nl     pl  ru     th
de  en-us  fi  fr-be  hr     it  lv  nl-be  pt  sl     tr
@end example

The default is @code{en-us}.
ETEXI


DEF("audio-help", 0, QEMU_OPTION_audio_help,
266 267
    "-audio-help     print list of audio drivers and their options\n",
    QEMU_ARCH_ALL)
268 269
STEXI
@item -audio-help
270
@findex -audio-help
271 272 273 274 275 276 277
Will show the audio subsystem help: list of drivers, tunable
parameters.
ETEXI

DEF("soundhw", HAS_ARG, QEMU_OPTION_soundhw,
    "-soundhw c1,... enable audio support\n"
    "                and only specified sound cards (comma separated list)\n"
278 279
    "                use '-soundhw help' to get the list of supported cards\n"
    "                use '-soundhw all' to enable all of them\n", QEMU_ARCH_ALL)
280 281
STEXI
@item -soundhw @var{card1}[,@var{card2},...] or -soundhw all
282
@findex -soundhw
283
Enable audio and selected sound hardware. Use 'help' to print all
284 285 286
available sound hardware.

@example
287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446
qemu-system-i386 -soundhw sb16,adlib disk.img
qemu-system-i386 -soundhw es1370 disk.img
qemu-system-i386 -soundhw ac97 disk.img
qemu-system-i386 -soundhw hda disk.img
qemu-system-i386 -soundhw all disk.img
qemu-system-i386 -soundhw help
@end example

Note that Linux's i810_audio OSS kernel (for AC97) module might
require manually specifying clocking.

@example
modprobe i810_audio clocking=48000
@end example
ETEXI

DEF("balloon", HAS_ARG, QEMU_OPTION_balloon,
    "-balloon none   disable balloon device\n"
    "-balloon virtio[,addr=str]\n"
    "                enable virtio balloon device (default)\n", QEMU_ARCH_ALL)
STEXI
@item -balloon none
@findex -balloon
Disable balloon device.
@item -balloon virtio[,addr=@var{addr}]
Enable virtio balloon device (default), optionally with PCI address
@var{addr}.
ETEXI

DEF("device", HAS_ARG, QEMU_OPTION_device,
    "-device driver[,prop[=value][,...]]\n"
    "                add device (based on driver)\n"
    "                prop=value,... sets driver properties\n"
    "                use '-device help' to print all possible drivers\n"
    "                use '-device driver,help' to print all possible properties\n",
    QEMU_ARCH_ALL)
STEXI
@item -device @var{driver}[,@var{prop}[=@var{value}][,...]]
@findex -device
Add device @var{driver}.  @var{prop}=@var{value} sets driver
properties.  Valid properties depend on the driver.  To get help on
possible drivers and properties, use @code{-device help} and
@code{-device @var{driver},help}.
ETEXI

DEF("name", HAS_ARG, QEMU_OPTION_name,
    "-name string1[,process=string2]\n"
    "                set the name of the guest\n"
    "                string1 sets the window title and string2 the process name (on Linux)\n",
    QEMU_ARCH_ALL)
STEXI
@item -name @var{name}
@findex -name
Sets the @var{name} of the guest.
This name will be displayed in the SDL window caption.
The @var{name} will also be used for the VNC server.
Also optionally set the top visible process name in Linux.
ETEXI

DEF("uuid", HAS_ARG, QEMU_OPTION_uuid,
    "-uuid %08x-%04x-%04x-%04x-%012x\n"
    "                specify machine UUID\n", QEMU_ARCH_ALL)
STEXI
@item -uuid @var{uuid}
@findex -uuid
Set system UUID.
ETEXI

STEXI
@end table
ETEXI
DEFHEADING()

DEFHEADING(Block device options:)
STEXI
@table @option
ETEXI

DEF("fda", HAS_ARG, QEMU_OPTION_fda,
    "-fda/-fdb file  use 'file' as floppy disk 0/1 image\n", QEMU_ARCH_ALL)
DEF("fdb", HAS_ARG, QEMU_OPTION_fdb, "", QEMU_ARCH_ALL)
STEXI
@item -fda @var{file}
@item -fdb @var{file}
@findex -fda
@findex -fdb
Use @var{file} as floppy disk 0/1 image (@pxref{disk_images}). You can
use the host floppy by using @file{/dev/fd0} as filename (@pxref{host_drives}).
ETEXI

DEF("hda", HAS_ARG, QEMU_OPTION_hda,
    "-hda/-hdb file  use 'file' as IDE hard disk 0/1 image\n", QEMU_ARCH_ALL)
DEF("hdb", HAS_ARG, QEMU_OPTION_hdb, "", QEMU_ARCH_ALL)
DEF("hdc", HAS_ARG, QEMU_OPTION_hdc,
    "-hdc/-hdd file  use 'file' as IDE hard disk 2/3 image\n", QEMU_ARCH_ALL)
DEF("hdd", HAS_ARG, QEMU_OPTION_hdd, "", QEMU_ARCH_ALL)
STEXI
@item -hda @var{file}
@item -hdb @var{file}
@item -hdc @var{file}
@item -hdd @var{file}
@findex -hda
@findex -hdb
@findex -hdc
@findex -hdd
Use @var{file} as hard disk 0, 1, 2 or 3 image (@pxref{disk_images}).
ETEXI

DEF("cdrom", HAS_ARG, QEMU_OPTION_cdrom,
    "-cdrom file     use 'file' as IDE cdrom image (cdrom is ide1 master)\n",
    QEMU_ARCH_ALL)
STEXI
@item -cdrom @var{file}
@findex -cdrom
Use @var{file} as CD-ROM image (you cannot use @option{-hdc} and
@option{-cdrom} at the same time). You can use the host CD-ROM by
using @file{/dev/cdrom} as filename (@pxref{host_drives}).
ETEXI

DEF("drive", HAS_ARG, QEMU_OPTION_drive,
    "-drive [file=file][,if=type][,bus=n][,unit=m][,media=d][,index=i]\n"
    "       [,cyls=c,heads=h,secs=s[,trans=t]][,snapshot=on|off]\n"
    "       [,cache=writethrough|writeback|none|directsync|unsafe][,format=f]\n"
    "       [,serial=s][,addr=A][,id=name][,aio=threads|native]\n"
    "       [,readonly=on|off][,copy-on-read=on|off]\n"
    "       [[,bps=b]|[[,bps_rd=r][,bps_wr=w]]][[,iops=i]|[[,iops_rd=r][,iops_wr=w]]\n"
    "                use 'file' as a drive image\n", QEMU_ARCH_ALL)
STEXI
@item -drive @var{option}[,@var{option}[,@var{option}[,...]]]
@findex -drive

Define a new drive. Valid options are:

@table @option
@item file=@var{file}
This option defines which disk image (@pxref{disk_images}) to use with
this drive. If the filename contains comma, you must double it
(for instance, "file=my,,file" to use file "my,file").

Special files such as iSCSI devices can be specified using protocol
specific URLs. See the section for "Device URL Syntax" for more information.
@item if=@var{interface}
This option defines on which type on interface the drive is connected.
Available types are: ide, scsi, sd, mtd, floppy, pflash, virtio.
@item bus=@var{bus},unit=@var{unit}
These options define where is connected the drive by defining the bus number and
the unit id.
@item index=@var{index}
This option defines where is connected the drive by using an index in the list
of available connectors of a given interface type.
@item media=@var{media}
This option defines the type of the media: disk or cdrom.
@item cyls=@var{c},heads=@var{h},secs=@var{s}[,trans=@var{t}]
These options have the same definition as they have in @option{-hdachs}.
@item snapshot=@var{snapshot}
@var{snapshot} is "on" or "off" and allows to enable snapshot for given drive (see @option{-snapshot}).
@item cache=@var{cache}
@var{cache} is "none", "writeback", "unsafe", "directsync" or "writethrough" and controls how the host cache is used to access block data.
@item aio=@var{aio}
@var{aio} is "threads", or "native" and selects between pthread based disk I/O and native Linux AIO.
447 448
@item discard=@var{discard}
@var{discard} is one of "ignore" (or "off") or "unmap" (or "on") and controls whether @dfn{discard} (also known as @dfn{trim} or @dfn{unmap}) requests are ignored or passed to the filesystem.  Some machine types may not support discard requests.
449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527
@item format=@var{format}
Specify which disk @var{format} will be used rather than detecting
the format.  Can be used to specifiy format=raw to avoid interpreting
an untrusted format header.
@item serial=@var{serial}
This option specifies the serial number to assign to the device.
@item addr=@var{addr}
Specify the controller's PCI address (if=virtio only).
@item werror=@var{action},rerror=@var{action}
Specify which @var{action} to take on write and read errors. Valid actions are:
"ignore" (ignore the error and try to continue), "stop" (pause QEMU),
"report" (report the error to the guest), "enospc" (pause QEMU only if the
host disk is full; report the error to the guest otherwise).
The default setting is @option{werror=enospc} and @option{rerror=report}.
@item readonly
Open drive @option{file} as read-only. Guest write attempts will fail.
@item copy-on-read=@var{copy-on-read}
@var{copy-on-read} is "on" or "off" and enables whether to copy read backing
file sectors into the image file.
@end table

By default, the @option{cache=writeback} mode is used. It will report data
writes as completed as soon as the data is present in the host page cache.
This is safe as long as your guest OS makes sure to correctly flush disk caches
where needed. If your guest OS does not handle volatile disk write caches
correctly and your host crashes or loses power, then the guest may experience
data corruption.

For such guests, you should consider using @option{cache=writethrough}. This
means that the host page cache will be used to read and write data, but write
notification will be sent to the guest only after QEMU has made sure to flush
each write to the disk. Be aware that this has a major impact on performance.

The host page cache can be avoided entirely with @option{cache=none}.  This will
attempt to do disk IO directly to the guest's memory.  QEMU may still perform
an internal copy of the data. Note that this is considered a writeback mode and
the guest OS must handle the disk write cache correctly in order to avoid data
corruption on host crashes.

The host page cache can be avoided while only sending write notifications to
the guest when the data has been flushed to the disk using
@option{cache=directsync}.

In case you don't care about data integrity over host failures, use
@option{cache=unsafe}. This option tells QEMU that it never needs to write any
data to the disk but can instead keep things in cache. If anything goes wrong,
like your host losing power, the disk storage getting disconnected accidentally,
etc. your image will most probably be rendered unusable.   When using
the @option{-snapshot} option, unsafe caching is always used.

Copy-on-read avoids accessing the same backing file sectors repeatedly and is
useful when the backing file is over a slow network.  By default copy-on-read
is off.

Instead of @option{-cdrom} you can use:
@example
qemu-system-i386 -drive file=file,index=2,media=cdrom
@end example

Instead of @option{-hda}, @option{-hdb}, @option{-hdc}, @option{-hdd}, you can
use:
@example
qemu-system-i386 -drive file=file,index=0,media=disk
qemu-system-i386 -drive file=file,index=1,media=disk
qemu-system-i386 -drive file=file,index=2,media=disk
qemu-system-i386 -drive file=file,index=3,media=disk
@end example

You can open an image using pre-opened file descriptors from an fd set:
@example
qemu-system-i386
-add-fd fd=3,set=2,opaque="rdwr:/path/to/file"
-add-fd fd=4,set=2,opaque="rdonly:/path/to/file"
-drive file=/dev/fdset/2,index=0,media=disk
@end example

You can connect a CDROM to the slave of ide0:
@example
qemu-system-i386 -drive file=file,if=ide,index=1,media=cdrom
528 529
@end example

530 531 532 533
If you don't specify the "file=" argument, you define an empty drive:
@example
qemu-system-i386 -drive if=ide,index=1,media=cdrom
@end example
534

535
You can connect a SCSI disk with unit ID 6 on the bus #0:
536
@example
537
qemu-system-i386 -drive file=file,if=scsi,bus=0,unit=6
538 539
@end example

540 541 542 543 544
Instead of @option{-fda}, @option{-fdb}, you can use:
@example
qemu-system-i386 -drive file=file,index=0,if=floppy
qemu-system-i386 -drive file=file,index=1,if=floppy
@end example
545

546 547 548 549 550 551 552 553 554
By default, @var{interface} is "ide" and @var{index} is automatically
incremented:
@example
qemu-system-i386 -drive file=a -drive file=b"
@end example
is interpreted like:
@example
qemu-system-i386 -hda a -hdb b
@end example
555 556
ETEXI

557 558
DEF("mtdblock", HAS_ARG, QEMU_OPTION_mtdblock,
    "-mtdblock file  use 'file' as on-board Flash memory image\n",
559 560
    QEMU_ARCH_ALL)
STEXI
561 562 563
@item -mtdblock @var{file}
@findex -mtdblock
Use @var{file} as on-board Flash memory image.
564 565
ETEXI

566 567
DEF("sd", HAS_ARG, QEMU_OPTION_sd,
    "-sd file        use 'file' as SecureDigital card image\n", QEMU_ARCH_ALL)
568
STEXI
569 570 571
@item -sd @var{file}
@findex -sd
Use @var{file} as SecureDigital card image.
572 573
ETEXI

574 575
DEF("pflash", HAS_ARG, QEMU_OPTION_pflash,
    "-pflash file    use 'file' as a parallel flash image\n", QEMU_ARCH_ALL)
576
STEXI
577 578 579
@item -pflash @var{file}
@findex -pflash
Use @var{file} as a parallel flash image.
580
ETEXI
581

582 583
DEF("snapshot", 0, QEMU_OPTION_snapshot,
    "-snapshot       write to temporary files instead of disk image files\n",
584 585
    QEMU_ARCH_ALL)
STEXI
586 587 588 589 590
@item -snapshot
@findex -snapshot
Write to temporary files instead of disk image files. In this case,
the raw disk image you use is not written back. You can however force
the write back by pressing @key{C-a s} (@pxref{disk_images}).
591 592
ETEXI

593 594 595 596
DEF("hdachs", HAS_ARG, QEMU_OPTION_hdachs, \
    "-hdachs c,h,s[,t]\n" \
    "                force hard disk 0 physical geometry and the optional BIOS\n" \
    "                translation (t=none or lba) (usually QEMU can guess them)\n",
597
    QEMU_ARCH_ALL)
598
STEXI
599 600 601 602 603 604 605
@item -hdachs @var{c},@var{h},@var{s},[,@var{t}]
@findex -hdachs
Force hard disk 0 physical geometry (1 <= @var{c} <= 16383, 1 <=
@var{h} <= 16, 1 <= @var{s} <= 63) and optionally force the BIOS
translation mode (@var{t}=none, lba or auto). Usually QEMU can guess
all those parameters. This option is useful for old MS-DOS disk
images.
606
ETEXI
607 608

DEF("fsdev", HAS_ARG, QEMU_OPTION_fsdev,
609
    "-fsdev fsdriver,id=id[,path=path,][security_model={mapped-xattr|mapped-file|passthrough|none}]\n"
610
    " [,writeout=immediate][,readonly][,socket=socket|sock_fd=sock_fd]\n",
611 612 613 614
    QEMU_ARCH_ALL)

STEXI

615
@item -fsdev @var{fsdriver},id=@var{id},path=@var{path},[security_model=@var{security_model}][,writeout=@var{writeout}][,readonly][,socket=@var{socket}|sock_fd=@var{sock_fd}]
616
@findex -fsdev
617 618 619 620
Define a new file system device. Valid options are:
@table @option
@item @var{fsdriver}
This option specifies the fs driver backend to use.
621
Currently "local", "handle" and "proxy" file system drivers are supported.
622 623 624 625 626 627 628
@item id=@var{id}
Specifies identifier for this device
@item path=@var{path}
Specifies the export path for the file system device. Files under
this path will be available to the 9p client on the guest.
@item security_model=@var{security_model}
Specifies the security model to be used for this export path.
629
Supported security models are "passthrough", "mapped-xattr", "mapped-file" and "none".
630
In "passthrough" security model, files are stored using the same
631
credentials as they are created on the guest. This requires QEMU
632
to run as root. In "mapped-xattr" security model, some of the file
633
attributes like uid, gid, mode bits and link target are stored as
634 635
file attributes. For "mapped-file" these attributes are stored in the
hidden .virtfs_metadata directory. Directories exported by this security model cannot
636 637
interact with other unix tools. "none" security model is same as
passthrough except the sever won't report failures if it fails to
638
set file attributes like ownership. Security model is mandatory
639
only for local fsdriver. Other fsdrivers (like handle, proxy) don't take
640
security model as a parameter.
641 642 643 644 645
@item writeout=@var{writeout}
This is an optional argument. The only supported value is "immediate".
This means that host page cache will be used to read and write data but
write notification will be sent to the guest only when the data has been
reported as written by the storage subsystem.
646 647 648
@item readonly
Enables exporting 9p share as a readonly mount for guests. By default
read-write access is given.
649 650 651
@item socket=@var{socket}
Enables proxy filesystem driver to use passed socket file for communicating
with virtfs-proxy-helper
652 653 654 655
@item sock_fd=@var{sock_fd}
Enables proxy filesystem driver to use passed socket descriptor for
communicating with virtfs-proxy-helper. Usually a helper like libvirt
will create socketpair and pass one of the fds as sock_fd
656
@end table
657

658 659 660 661 662 663 664 665
-fsdev option is used along with -device driver "virtio-9p-pci".
@item -device virtio-9p-pci,fsdev=@var{id},mount_tag=@var{mount_tag}
Options for virtio-9p-pci driver are:
@table @option
@item fsdev=@var{id}
Specifies the id value specified along with -fsdev option
@item mount_tag=@var{mount_tag}
Specifies the tag name to be used by the guest to mount this export point
666
@end table
667

668 669
ETEXI

670
DEF("virtfs", HAS_ARG, QEMU_OPTION_virtfs,
671
    "-virtfs local,path=path,mount_tag=tag,security_model=[mapped-xattr|mapped-file|passthrough|none]\n"
672
    "        [,writeout=immediate][,readonly][,socket=socket|sock_fd=sock_fd]\n",
673 674 675 676
    QEMU_ARCH_ALL)

STEXI

677
@item -virtfs @var{fsdriver}[,path=@var{path}],mount_tag=@var{mount_tag}[,security_model=@var{security_model}][,writeout=@var{writeout}][,readonly][,socket=@var{socket}|sock_fd=@var{sock_fd}]
678 679
@findex -virtfs

680 681 682 683
The general form of a Virtual File system pass-through options are:
@table @option
@item @var{fsdriver}
This option specifies the fs driver backend to use.
684
Currently "local", "handle" and "proxy" file system drivers are supported.
685 686 687 688 689 690 691
@item id=@var{id}
Specifies identifier for this device
@item path=@var{path}
Specifies the export path for the file system device. Files under
this path will be available to the 9p client on the guest.
@item security_model=@var{security_model}
Specifies the security model to be used for this export path.
692
Supported security models are "passthrough", "mapped-xattr", "mapped-file" and "none".
693
In "passthrough" security model, files are stored using the same
694
credentials as they are created on the guest. This requires QEMU
695
to run as root. In "mapped-xattr" security model, some of the file
696
attributes like uid, gid, mode bits and link target are stored as
697 698
file attributes. For "mapped-file" these attributes are stored in the
hidden .virtfs_metadata directory. Directories exported by this security model cannot
699 700
interact with other unix tools. "none" security model is same as
passthrough except the sever won't report failures if it fails to
701
set file attributes like ownership. Security model is mandatory only
702
for local fsdriver. Other fsdrivers (like handle, proxy) don't take security
703
model as a parameter.
704 705 706 707 708
@item writeout=@var{writeout}
This is an optional argument. The only supported value is "immediate".
This means that host page cache will be used to read and write data but
write notification will be sent to the guest only when the data has been
reported as written by the storage subsystem.
709 710 711
@item readonly
Enables exporting 9p share as a readonly mount for guests. By default
read-write access is given.
712 713 714 715
@item socket=@var{socket}
Enables proxy filesystem driver to use passed socket file for
communicating with virtfs-proxy-helper. Usually a helper like libvirt
will create socketpair and pass one of the fds as sock_fd
716 717 718
@item sock_fd
Enables proxy filesystem driver to use passed 'sock_fd' as the socket
descriptor for interfacing with virtfs-proxy-helper
719 720 721
@end table
ETEXI

722 723 724 725 726 727 728 729 730
DEF("virtfs_synth", 0, QEMU_OPTION_virtfs_synth,
    "-virtfs_synth Create synthetic file system image\n",
    QEMU_ARCH_ALL)
STEXI
@item -virtfs_synth
@findex -virtfs_synth
Create synthetic file system image
ETEXI

731 732 733 734 735
STEXI
@end table
ETEXI
DEFHEADING()

736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799
DEFHEADING(USB options:)
STEXI
@table @option
ETEXI

DEF("usb", 0, QEMU_OPTION_usb,
    "-usb            enable the USB driver (will be the default soon)\n",
    QEMU_ARCH_ALL)
STEXI
@item -usb
@findex -usb
Enable the USB driver (will be the default soon)
ETEXI

DEF("usbdevice", HAS_ARG, QEMU_OPTION_usbdevice,
    "-usbdevice name add the host or guest USB device 'name'\n",
    QEMU_ARCH_ALL)
STEXI

@item -usbdevice @var{devname}
@findex -usbdevice
Add the USB device @var{devname}. @xref{usb_devices}.

@table @option

@item mouse
Virtual Mouse. This will override the PS/2 mouse emulation when activated.

@item tablet
Pointer device that uses absolute coordinates (like a touchscreen). This
means QEMU is able to report the mouse position without having to grab the
mouse. Also overrides the PS/2 mouse emulation when activated.

@item disk:[format=@var{format}]:@var{file}
Mass storage device based on file. The optional @var{format} argument
will be used rather than detecting the format. Can be used to specifiy
@code{format=raw} to avoid interpreting an untrusted format header.

@item host:@var{bus}.@var{addr}
Pass through the host device identified by @var{bus}.@var{addr} (Linux only).

@item host:@var{vendor_id}:@var{product_id}
Pass through the host device identified by @var{vendor_id}:@var{product_id}
(Linux only).

@item serial:[vendorid=@var{vendor_id}][,productid=@var{product_id}]:@var{dev}
Serial converter to host character device @var{dev}, see @code{-serial} for the
available devices.

@item braille
Braille device.  This will use BrlAPI to display the braille output on a real
or fake device.

@item net:@var{options}
Network adapter that supports CDC ethernet and RNDIS protocols.

@end table
ETEXI

STEXI
@end table
ETEXI
DEFHEADING()

800 801 802 803 804
DEFHEADING(Display options:)
STEXI
@table @option
ETEXI

J
Jes Sorensen 已提交
805 806
DEF("display", HAS_ARG, QEMU_OPTION_display,
    "-display sdl[,frame=on|off][,alt_grab=on|off][,ctrl_grab=on|off]\n"
J
Jes Sorensen 已提交
807 808
    "            [,window_close=on|off]|curses|none|\n"
    "            vnc=<display>[,<optargs>]\n"
J
Jes Sorensen 已提交
809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824
    "                select display type\n", QEMU_ARCH_ALL)
STEXI
@item -display @var{type}
@findex -display
Select type of display to use. This option is a replacement for the
old style -sdl/-curses/... options. Valid values for @var{type} are
@table @option
@item sdl
Display video output via SDL (usually in a separate graphics
window; see the SDL documentation for other possibilities).
@item curses
Display video output via curses. For graphics device models which
support a text mode, QEMU can display this output using a
curses/ncurses interface. Nothing is displayed when the graphics
device is in graphical mode or if the graphics device does not support
a text mode. Generally only the VGA device models support text mode.
J
Jes Sorensen 已提交
825 826 827 828 829 830
@item none
Do not display video output. The guest will still see an emulated
graphics card, but its output will not be displayed to the QEMU
user. This option differs from the -nographic option in that it
only affects what is done with video output; -nographic also changes
the destination of the serial and parallel port data.
J
Jes Sorensen 已提交
831 832
@item vnc
Start a VNC server on display <arg>
J
Jes Sorensen 已提交
833 834 835
@end table
ETEXI

836
DEF("nographic", 0, QEMU_OPTION_nographic,
837 838
    "-nographic      disable graphical output and redirect serial I/Os to console\n",
    QEMU_ARCH_ALL)
839 840
STEXI
@item -nographic
841
@findex -nographic
842 843 844
Normally, QEMU uses SDL to display the VGA output. With this option,
you can totally disable graphical output so that QEMU is a simple
command line application. The emulated serial port is redirected on
845 846
the console and muxed with the monitor (unless redirected elsewhere
explicitly). Therefore, you can still use QEMU to debug a Linux kernel
847 848
with a serial console.  Use @key{C-a h} for help on switching between
the console and monitor.
849 850 851
ETEXI

DEF("curses", 0, QEMU_OPTION_curses,
852 853
    "-curses         use a curses/ncurses interface instead of SDL\n",
    QEMU_ARCH_ALL)
854 855
STEXI
@item -curses
856
@findex -curses
857 858 859 860 861 862
Normally, QEMU uses SDL to display the VGA output.  With this option,
QEMU can display the VGA output when in text mode using a
curses/ncurses interface.  Nothing is displayed in graphical mode.
ETEXI

DEF("no-frame", 0, QEMU_OPTION_no_frame,
863 864
    "-no-frame       open SDL window without a frame and window decorations\n",
    QEMU_ARCH_ALL)
865 866
STEXI
@item -no-frame
867
@findex -no-frame
868 869 870 871 872 873
Do not use decorations for SDL windows and start them using the whole
available screen space. This makes the using QEMU in a dedicated desktop
workspace more convenient.
ETEXI

DEF("alt-grab", 0, QEMU_OPTION_alt_grab,
874 875
    "-alt-grab       use Ctrl-Alt-Shift to grab mouse (instead of Ctrl-Alt)\n",
    QEMU_ARCH_ALL)
876 877
STEXI
@item -alt-grab
878
@findex -alt-grab
879 880
Use Ctrl-Alt-Shift to grab mouse (instead of Ctrl-Alt). Note that this also
affects the special keys (for fullscreen, monitor-mode switching, etc).
881 882
ETEXI

883
DEF("ctrl-grab", 0, QEMU_OPTION_ctrl_grab,
884 885
    "-ctrl-grab      use Right-Ctrl to grab mouse (instead of Ctrl-Alt)\n",
    QEMU_ARCH_ALL)
886 887
STEXI
@item -ctrl-grab
888
@findex -ctrl-grab
889 890
Use Right-Ctrl to grab mouse (instead of Ctrl-Alt). Note that this also
affects the special keys (for fullscreen, monitor-mode switching, etc).
891 892
ETEXI

893
DEF("no-quit", 0, QEMU_OPTION_no_quit,
894
    "-no-quit        disable SDL window close capability\n", QEMU_ARCH_ALL)
895 896
STEXI
@item -no-quit
897
@findex -no-quit
898 899 900 901
Disable SDL window close capability.
ETEXI

DEF("sdl", 0, QEMU_OPTION_sdl,
902
    "-sdl            enable SDL\n", QEMU_ARCH_ALL)
903 904
STEXI
@item -sdl
905
@findex -sdl
906 907 908
Enable SDL.
ETEXI

G
Gerd Hoffmann 已提交
909
DEF("spice", HAS_ARG, QEMU_OPTION_spice,
910 911 912 913 914 915 916 917 918 919 920 921
    "-spice [port=port][,tls-port=secured-port][,x509-dir=<dir>]\n"
    "       [,x509-key-file=<file>][,x509-key-password=<file>]\n"
    "       [,x509-cert-file=<file>][,x509-cacert-file=<file>]\n"
    "       [,x509-dh-key-file=<file>][,addr=addr][,ipv4|ipv6]\n"
    "       [,tls-ciphers=<list>]\n"
    "       [,tls-channel=[main|display|cursor|inputs|record|playback]]\n"
    "       [,plaintext-channel=[main|display|cursor|inputs|record|playback]]\n"
    "       [,sasl][,password=<secret>][,disable-ticketing]\n"
    "       [,image-compression=[auto_glz|auto_lz|quic|glz|lz|off]]\n"
    "       [,jpeg-wan-compression=[auto|never|always]]\n"
    "       [,zlib-glz-wan-compression=[auto|never|always]]\n"
    "       [,streaming-video=[off|all|filter]][,disable-copy-paste]\n"
922 923
    "       [,disable-agent-file-xfer][,agent-mouse=[on|off]]\n"
    "       [,playback-compression=[on|off]][,seamless-migration=[on|off]]\n"
924 925 926
    "   enable spice\n"
    "   at least one of {port, tls-port} is mandatory\n",
    QEMU_ARCH_ALL)
G
Gerd Hoffmann 已提交
927 928 929 930 931 932 933 934
STEXI
@item -spice @var{option}[,@var{option}[,...]]
@findex -spice
Enable the spice remote desktop protocol. Valid options are

@table @option

@item port=<nr>
G
Gerd Hoffmann 已提交
935
Set the TCP port spice is listening on for plaintext channels.
G
Gerd Hoffmann 已提交
936

937 938 939 940 941 942 943
@item addr=<addr>
Set the IP address spice is listening on.  Default is any address.

@item ipv4
@item ipv6
Force using the specified IP version.

G
Gerd Hoffmann 已提交
944 945 946
@item password=<secret>
Set the password you need to authenticate.

M
Marc-André Lureau 已提交
947 948 949 950 951 952 953 954 955 956 957 958 959
@item sasl
Require that the client use SASL to authenticate with the spice.
The exact choice of authentication method used is controlled from the
system / user's SASL configuration file for the 'qemu' service. This
is typically found in /etc/sasl2/qemu.conf. If running QEMU as an
unprivileged user, an environment variable SASL_CONF_PATH can be used
to make it search alternate locations for the service config.
While some SASL auth methods can also provide data encryption (eg GSSAPI),
it is recommended that SASL always be combined with the 'tls' and
'x509' settings to enable use of SSL and server certificates. This
ensures a data encryption preventing compromise of authentication
credentials.

G
Gerd Hoffmann 已提交
960 961 962
@item disable-ticketing
Allow client connects without authentication.

963 964 965
@item disable-copy-paste
Disable copy paste between the client and the guest.

966 967 968
@item disable-agent-file-xfer
Disable spice-vdagent based file-xfer between the client and the guest.

G
Gerd Hoffmann 已提交
969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984
@item tls-port=<nr>
Set the TCP port spice is listening on for encrypted channels.

@item x509-dir=<dir>
Set the x509 file directory. Expects same filenames as -vnc $display,x509=$dir

@item x509-key-file=<file>
@item x509-key-password=<file>
@item x509-cert-file=<file>
@item x509-cacert-file=<file>
@item x509-dh-key-file=<file>
The x509 file names can also be configured individually.

@item tls-ciphers=<list>
Specify which ciphers to use.

985 986
@item tls-channel=[main|display|cursor|inputs|record|playback]
@item plaintext-channel=[main|display|cursor|inputs|record|playback]
987 988 989 990 991 992
Force specific channel to be used with or without TLS encryption.  The
options can be specified multiple times to configure multiple
channels.  The special name "default" can be used to set the default
mode.  For channels which are not explicitly forced into one mode the
spice client is allowed to pick tls/plaintext as he pleases.

993 994 995 996 997 998 999 1000 1001
@item image-compression=[auto_glz|auto_lz|quic|glz|lz|off]
Configure image compression (lossless).
Default is auto_glz.

@item jpeg-wan-compression=[auto|never|always]
@item zlib-glz-wan-compression=[auto|never|always]
Configure wan image compression (lossy for slow links).
Default is auto.

G
Gerd Hoffmann 已提交
1002 1003 1004 1005 1006 1007 1008 1009 1010
@item streaming-video=[off|all|filter]
Configure video stream detection.  Default is filter.

@item agent-mouse=[on|off]
Enable/disable passing mouse events via vdagent.  Default is on.

@item playback-compression=[on|off]
Enable/disable audio stream compression (using celt 0.5.1).  Default is on.

1011 1012 1013
@item seamless-migration=[on|off]
Enable/disable spice seamless migration. Default is off.

G
Gerd Hoffmann 已提交
1014 1015 1016
@end table
ETEXI

1017
DEF("portrait", 0, QEMU_OPTION_portrait,
1018 1019
    "-portrait       rotate graphical output 90 deg left (only PXA LCD)\n",
    QEMU_ARCH_ALL)
1020 1021
STEXI
@item -portrait
1022
@findex -portrait
1023 1024 1025
Rotate graphical output 90 deg left (only PXA LCD).
ETEXI

1026 1027 1028 1029
DEF("rotate", HAS_ARG, QEMU_OPTION_rotate,
    "-rotate <deg>   rotate graphical output some deg left (only PXA LCD)\n",
    QEMU_ARCH_ALL)
STEXI
1030
@item -rotate @var{deg}
1031 1032 1033 1034
@findex -rotate
Rotate graphical output some deg left (only PXA LCD).
ETEXI

1035
DEF("vga", HAS_ARG, QEMU_OPTION_vga,
G
Gerd Hoffmann 已提交
1036
    "-vga [std|cirrus|vmware|qxl|xenfb|none]\n"
1037
    "                select video card type\n", QEMU_ARCH_ALL)
1038
STEXI
1039
@item -vga @var{type}
1040
@findex -vga
1041
Select type of VGA card to emulate. Valid values for @var{type} are
1042
@table @option
1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056
@item cirrus
Cirrus Logic GD5446 Video card. All Windows versions starting from
Windows 95 should recognize and use this graphic card. For optimal
performances, use 16 bit color depth in the guest and the host OS.
(This one is the default)
@item std
Standard VGA card with Bochs VBE extensions.  If your guest OS
supports the VESA 2.0 VBE extensions (e.g. Windows XP) and if you want
to use high resolution modes (>= 1280x1024x16) then you should use
this option.
@item vmware
VMWare SVGA-II compatible adapter. Use it if you have sufficiently
recent XFree86/XOrg server or Windows guest with a driver for this
card.
G
Gerd Hoffmann 已提交
1057 1058 1059 1060
@item qxl
QXL paravirtual graphic card.  It is VGA compatible (including VESA
2.0 VBE support).  Works best with qxl guest drivers installed though.
Recommended choice when using the spice protocol.
1061 1062 1063 1064 1065 1066
@item none
Disable VGA card.
@end table
ETEXI

DEF("full-screen", 0, QEMU_OPTION_full_screen,
1067
    "-full-screen    start in full screen\n", QEMU_ARCH_ALL)
1068 1069
STEXI
@item -full-screen
1070
@findex -full-screen
1071 1072 1073 1074
Start in full screen.
ETEXI

DEF("g", 1, QEMU_OPTION_g ,
1075 1076
    "-g WxH[xDEPTH]  Set the initial graphical resolution and depth\n",
    QEMU_ARCH_PPC | QEMU_ARCH_SPARC)
1077
STEXI
1078
@item -g @var{width}x@var{height}[x@var{depth}]
1079
@findex -g
1080
Set the initial graphical resolution and depth (PPC, SPARC only).
1081 1082 1083
ETEXI

DEF("vnc", HAS_ARG, QEMU_OPTION_vnc ,
1084
    "-vnc display    start a VNC server on display\n", QEMU_ARCH_ALL)
1085 1086
STEXI
@item -vnc @var{display}[,@var{option}[,@var{option}[,...]]]
1087
@findex -vnc
1088 1089 1090 1091 1092 1093 1094 1095
Normally, QEMU uses SDL to display the VGA output.  With this option,
you can have QEMU listen on VNC display @var{display} and redirect the VGA
display over the VNC session.  It is very useful to enable the usb
tablet device when using this option (option @option{-usbdevice
tablet}). When using the VNC display, you must use the @option{-k}
parameter to set the keyboard layout if you are not using en-us. Valid
syntax for the @var{display} is

1096
@table @option
1097 1098 1099 1100 1101 1102 1103

@item @var{host}:@var{d}

TCP connections will only be allowed from @var{host} on display @var{d}.
By convention the TCP port is 5900+@var{d}. Optionally, @var{host} can
be omitted in which case the server will accept connections from any host.

1104
@item unix:@var{path}
1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118

Connections will be allowed over UNIX domain sockets where @var{path} is the
location of a unix socket to listen for connections on.

@item none

VNC is initialized but not started. The monitor @code{change} command
can be used to later start the VNC server.

@end table

Following the @var{display} value there may be one or more @var{option} flags
separated by commas. Valid options are

1119
@table @option
1120 1121 1122 1123 1124 1125 1126 1127

@item reverse

Connect to a listening VNC client via a ``reverse'' connection. The
client is specified by the @var{display}. For reverse network
connections (@var{host}:@var{d},@code{reverse}), the @var{d} argument
is a TCP port number, not a display number.

1128 1129 1130
@item websocket

Opens an additional TCP listening port dedicated to VNC Websocket connections.
P
Peter Maydell 已提交
1131
By definition the Websocket port is 5700+@var{display}. If @var{host} is
1132 1133 1134
specified connections will only be allowed from this host.
As an alternative the Websocket port could be specified by using
@code{websocket}=@var{port}.
T
Tim Hardeck 已提交
1135 1136
TLS encryption for the Websocket connection is supported if the required
certificates are specified with the VNC option @option{x509}.
1137

1138 1139 1140
@item password

Require that password based authentication is used for client connections.
1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153 1154 1155

The password must be set separately using the @code{set_password} command in
the @ref{pcsys_monitor}. The syntax to change your password is:
@code{set_password <protocol> <password>} where <protocol> could be either
"vnc" or "spice".

If you would like to change <protocol> password expiration, you should use
@code{expire_password <protocol> <expiration-time>} where expiration time could
be one of the following options: now, never, +seconds or UNIX time of
expiration, e.g. +60 to make password expire in 60 seconds, or 1335196800
to make password expire on "Mon Apr 23 12:00:00 EDT 2012" (UNIX time for this
date and time).

You can also use keywords "now" or "never" for the expiration time to
allow <protocol> password to expire immediately or never expire.
1156 1157 1158 1159 1160 1161

@item tls

Require that client use TLS when communicating with the VNC server. This
uses anonymous TLS credentials so is susceptible to a man-in-the-middle
attack. It is recommended that this option be combined with either the
1162
@option{x509} or @option{x509verify} options.
1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181 1182 1183 1184 1185 1186 1187 1188 1189 1190 1191 1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213

@item x509=@var{/path/to/certificate/dir}

Valid if @option{tls} is specified. Require that x509 credentials are used
for negotiating the TLS session. The server will send its x509 certificate
to the client. It is recommended that a password be set on the VNC server
to provide authentication of the client when this is used. The path following
this option specifies where the x509 certificates are to be loaded from.
See the @ref{vnc_security} section for details on generating certificates.

@item x509verify=@var{/path/to/certificate/dir}

Valid if @option{tls} is specified. Require that x509 credentials are used
for negotiating the TLS session. The server will send its x509 certificate
to the client, and request that the client send its own x509 certificate.
The server will validate the client's certificate against the CA certificate,
and reject clients when validation fails. If the certificate authority is
trusted, this is a sufficient authentication mechanism. You may still wish
to set a password on the VNC server as a second authentication layer. The
path following this option specifies where the x509 certificates are to
be loaded from. See the @ref{vnc_security} section for details on generating
certificates.

@item sasl

Require that the client use SASL to authenticate with the VNC server.
The exact choice of authentication method used is controlled from the
system / user's SASL configuration file for the 'qemu' service. This
is typically found in /etc/sasl2/qemu.conf. If running QEMU as an
unprivileged user, an environment variable SASL_CONF_PATH can be used
to make it search alternate locations for the service config.
While some SASL auth methods can also provide data encryption (eg GSSAPI),
it is recommended that SASL always be combined with the 'tls' and
'x509' settings to enable use of SSL and server certificates. This
ensures a data encryption preventing compromise of authentication
credentials. See the @ref{vnc_security} section for details on using
SASL authentication.

@item acl

Turn on access control lists for checking of the x509 client certificate
and SASL party. For x509 certs, the ACL check is made against the
certificate's distinguished name. This is something that looks like
@code{C=GB,O=ACME,L=Boston,CN=bob}. For SASL party, the ACL check is
made against the username, which depending on the SASL plugin, may
include a realm component, eg @code{bob} or @code{bob@@EXAMPLE.COM}.
When the @option{acl} flag is set, the initial access list will be
empty, with a @code{deny} policy. Thus no one will be allowed to
use the VNC server until the ACLs have been loaded. This can be
achieved using the @code{acl} monitor command.

C
Corentin Chary 已提交
1214 1215 1216 1217 1218 1219 1220
@item lossy

Enable lossy compression methods (gradient, JPEG, ...). If this
option is set, VNC client may receive lossy framebuffer updates
depending on its encoding settings. Enabling this option can save
a lot of bandwidth at the expense of quality.

C
Corentin Chary 已提交
1221 1222 1223 1224 1225
@item non-adaptive

Disable adaptive encodings. Adaptive encodings are enabled by default.
An adaptive encoding will try to detect frequently updated screen regions,
and send updates in these regions using a lossy encoding (like JPEG).
1226 1227
This can be really helpful to save bandwidth when playing videos. Disabling
adaptive encodings allows to restore the original static behavior of encodings
C
Corentin Chary 已提交
1228 1229
like Tight.

1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240
@item share=[allow-exclusive|force-shared|ignore]

Set display sharing policy.  'allow-exclusive' allows clients to ask
for exclusive access.  As suggested by the rfb spec this is
implemented by dropping other connections.  Connecting multiple
clients in parallel requires all clients asking for a shared session
(vncviewer: -shared switch).  This is the default.  'force-shared'
disables exclusive client access.  Useful for shared desktop sessions,
where you don't want someone forgetting specify -shared disconnect
everybody else.  'ignore' completely ignores the shared flag and
allows everybody connect unconditionally.  Doesn't conform to the rfb
1241
spec but is traditional QEMU behavior.
1242

1243 1244 1245 1246 1247 1248
@end table
ETEXI

STEXI
@end table
ETEXI
1249
ARCHHEADING(, QEMU_ARCH_I386)
1250

1251
ARCHHEADING(i386 target only:, QEMU_ARCH_I386)
1252 1253 1254 1255 1256
STEXI
@table @option
ETEXI

DEF("win2k-hack", 0, QEMU_OPTION_win2k_hack,
1257 1258
    "-win2k-hack     use it when installing Windows 2000 to avoid a disk full bug\n",
    QEMU_ARCH_I386)
1259 1260
STEXI
@item -win2k-hack
1261
@findex -win2k-hack
1262 1263 1264 1265 1266
Use it when installing Windows 2000 to avoid a disk full bug. After
Windows 2000 is installed, you no longer need this option (this option
slows down the IDE transfers).
ETEXI

J
Jan Kiszka 已提交
1267
HXCOMM Deprecated by -rtc
1268
DEF("rtc-td-hack", 0, QEMU_OPTION_rtc_td_hack, "", QEMU_ARCH_I386)
1269 1270

DEF("no-fd-bootchk", 0, QEMU_OPTION_no_fd_bootchk,
1271 1272
    "-no-fd-bootchk  disable boot signature checking for floppy disks\n",
    QEMU_ARCH_I386)
1273 1274
STEXI
@item -no-fd-bootchk
1275
@findex -no-fd-bootchk
1276
Disable boot signature checking for floppy disks in BIOS. May
1277 1278 1279 1280
be needed to boot from old floppy disks.
ETEXI

DEF("no-acpi", 0, QEMU_OPTION_no_acpi,
1281
           "-no-acpi        disable ACPI\n", QEMU_ARCH_I386)
1282 1283
STEXI
@item -no-acpi
1284
@findex -no-acpi
1285 1286 1287 1288 1289 1290
Disable ACPI (Advanced Configuration and Power Interface) support. Use
it if your guest OS complains about ACPI problems (PC target machine
only).
ETEXI

DEF("no-hpet", 0, QEMU_OPTION_no_hpet,
1291
    "-no-hpet        disable HPET\n", QEMU_ARCH_I386)
1292 1293
STEXI
@item -no-hpet
1294
@findex -no-hpet
1295 1296 1297 1298
Disable HPET support.
ETEXI

DEF("acpitable", HAS_ARG, QEMU_OPTION_acpitable,
1299
    "-acpitable [sig=str][,rev=n][,oem_id=str][,oem_table_id=str][,oem_rev=n][,asl_compiler_id=str][,asl_compiler_rev=n][,{data|file}=file1[:file2]...]\n"
1300
    "                ACPI table description\n", QEMU_ARCH_I386)
1301 1302
STEXI
@item -acpitable [sig=@var{str}][,rev=@var{n}][,oem_id=@var{str}][,oem_table_id=@var{str}][,oem_rev=@var{n}] [,asl_compiler_id=@var{str}][,asl_compiler_rev=@var{n}][,data=@var{file1}[:@var{file2}]...]
1303
@findex -acpitable
1304
Add ACPI table with specified header fields and context from specified files.
1305 1306 1307 1308 1309
For file=, take whole ACPI table from the specified files, including all
ACPI headers (possible overridden by other options).
For data=, only data
portion of the table is used, all header information is specified in the
command line.
1310 1311
ETEXI

1312 1313
DEF("smbios", HAS_ARG, QEMU_OPTION_smbios,
    "-smbios file=binary\n"
1314
    "                load SMBIOS entry from binary file\n"
1315
    "-smbios type=0[,vendor=str][,version=str][,date=str][,release=%d.%d]\n"
1316
    "                specify SMBIOS type 0 fields\n"
1317 1318
    "-smbios type=1[,manufacturer=str][,product=str][,version=str][,serial=str]\n"
    "              [,uuid=uuid][,sku=str][,family=str]\n"
1319
    "                specify SMBIOS type 1 fields\n", QEMU_ARCH_I386)
1320 1321
STEXI
@item -smbios file=@var{binary}
1322
@findex -smbios
1323 1324 1325 1326 1327
Load SMBIOS entry from binary file.

@item -smbios type=0[,vendor=@var{str}][,version=@var{str}][,date=@var{str}][,release=@var{%d.%d}]
Specify SMBIOS type 0 fields

B
Blue Swirl 已提交
1328
@item -smbios type=1[,manufacturer=@var{str}][,product=@var{str}] [,version=@var{str}][,serial=@var{str}][,uuid=@var{uuid}][,sku=@var{str}] [,family=@var{str}]
1329 1330 1331
Specify SMBIOS type 1 fields
ETEXI

1332 1333 1334
STEXI
@end table
ETEXI
1335
DEFHEADING()
1336 1337 1338 1339 1340 1341

DEFHEADING(Network options:)
STEXI
@table @option
ETEXI

1342 1343
HXCOMM Legacy slirp options (now moved to -net user):
#ifdef CONFIG_SLIRP
1344 1345 1346
DEF("tftp", HAS_ARG, QEMU_OPTION_tftp, "", QEMU_ARCH_ALL)
DEF("bootp", HAS_ARG, QEMU_OPTION_bootp, "", QEMU_ARCH_ALL)
DEF("redir", HAS_ARG, QEMU_OPTION_redir, "", QEMU_ARCH_ALL)
1347
#ifndef _WIN32
1348
DEF("smb", HAS_ARG, QEMU_OPTION_smb, "", QEMU_ARCH_ALL)
1349 1350 1351
#endif
#endif

B
Blue Swirl 已提交
1352
DEF("net", HAS_ARG, QEMU_OPTION_net,
1353
    "-net nic[,vlan=n][,macaddr=mac][,model=type][,name=str][,addr=str][,vectors=v]\n"
1354 1355
    "                create a new Network Interface Card and connect it to VLAN 'n'\n"
#ifdef CONFIG_SLIRP
J
Jan Kiszka 已提交
1356
    "-net user[,vlan=n][,name=str][,net=addr[/mask]][,host=addr][,restrict=on|off]\n"
1357 1358
    "         [,hostname=host][,dhcpstart=addr][,dns=addr][,dnssearch=domain][,tftp=dir]\n"
    "         [,bootfile=f][,hostfwd=rule][,guestfwd=rule]"
1359
#ifndef _WIN32
1360
                                             "[,smb=dir[,smbserver=addr]]\n"
1361 1362 1363
#endif
    "                connect the user mode network stack to VLAN 'n', configure its\n"
    "                DHCP server and enabled optional services\n"
1364 1365 1366 1367 1368
#endif
#ifdef _WIN32
    "-net tap[,vlan=n][,name=str],ifname=name\n"
    "                connect the host TAP network interface to VLAN 'n'\n"
#else
1369
    "-net tap[,vlan=n][,name=str][,fd=h][,fds=x:y:...:z][,ifname=name][,script=file][,downscript=dfile][,helper=helper][,sndbuf=nbytes][,vnet_hdr=on|off][,vhost=on|off][,vhostfd=h][,vhostfds=x:y:...:z][,vhostforce=on|off][,queues=n]\n"
M
Michal Privoznik 已提交
1370
    "                connect the host TAP network interface to VLAN 'n'\n"
C
Corey Bryant 已提交
1371 1372 1373
    "                use network scripts 'file' (default=" DEFAULT_NETWORK_SCRIPT ")\n"
    "                to configure it and 'dfile' (default=" DEFAULT_NETWORK_DOWN_SCRIPT ")\n"
    "                to deconfigure it\n"
1374
    "                use '[down]script=no' to disable script execution\n"
C
Corey Bryant 已提交
1375 1376
    "                use network helper 'helper' (default=" DEFAULT_BRIDGE_HELPER ") to\n"
    "                configure it\n"
1377
    "                use 'fd=h' to connect to an already opened TAP interface\n"
1378
    "                use 'fds=x:y:...:z' to connect to already opened multiqueue capable TAP interfaces\n"
1379
    "                use 'sndbuf=nbytes' to limit the size of the send buffer (the\n"
M
Michael S. Tsirkin 已提交
1380
    "                default is disabled 'sndbuf=0' to enable flow control set 'sndbuf=1048576')\n"
1381 1382
    "                use vnet_hdr=off to avoid enabling the IFF_VNET_HDR tap flag\n"
    "                use vnet_hdr=on to make the lack of IFF_VNET_HDR support an error condition\n"
1383
    "                use vhost=on to enable experimental in kernel accelerator\n"
1384 1385
    "                    (only has effect for virtio guests which use MSIX)\n"
    "                use vhostforce=on to force vhost on for non-MSIX virtio guests\n"
1386
    "                use 'vhostfd=h' to connect to an already opened vhost net device\n"
1387
    "                use 'vhostfds=x:y:...:z to connect to multiple already opened vhost net devices\n"
1388
    "                use 'queues=n' to specify the number of queues to be created for multiqueue TAP\n"
C
Corey Bryant 已提交
1389 1390 1391 1392
    "-net bridge[,vlan=n][,name=str][,br=bridge][,helper=helper]\n"
    "                connects a host TAP network interface to a host bridge device 'br'\n"
    "                (default=" DEFAULT_BRIDGE_INTERFACE ") using the program 'helper'\n"
    "                (default=" DEFAULT_BRIDGE_HELPER ")\n"
1393 1394 1395
#endif
    "-net socket[,vlan=n][,name=str][,fd=h][,listen=[host]:port][,connect=host:port]\n"
    "                connect the vlan 'n' to another VLAN using a socket connection\n"
1396
    "-net socket[,vlan=n][,name=str][,fd=h][,mcast=maddr:port[,localaddr=addr]]\n"
1397
    "                connect the vlan 'n' to multicast maddr and port\n"
1398
    "                use 'localaddr=addr' to specify the host address to send packets from\n"
1399 1400
    "-net socket[,vlan=n][,name=str][,fd=h][,udp=host:port][,localaddr=host:port]\n"
    "                connect the vlan 'n' to another VLAN using an UDP tunnel\n"
1401 1402 1403 1404 1405 1406 1407
#ifdef CONFIG_VDE
    "-net vde[,vlan=n][,name=str][,sock=socketpath][,port=n][,group=groupname][,mode=octalmode]\n"
    "                connect the vlan 'n' to port 'n' of a vde switch running\n"
    "                on host and listening for incoming connections on 'socketpath'.\n"
    "                Use group 'groupname' and mode 'octalmode' to change default\n"
    "                ownership and permissions for communication port.\n"
#endif
1408 1409
    "-net dump[,vlan=n][,file=f][,len=n]\n"
    "                dump traffic on vlan 'n' to file 'f' (max n bytes per packet)\n"
1410
    "-net none       use it alone to have zero network devices. If no -net option\n"
1411
    "                is provided, the default is '-net nic -net user'\n", QEMU_ARCH_ALL)
M
Mark McLoughlin 已提交
1412 1413 1414 1415 1416 1417
DEF("netdev", HAS_ARG, QEMU_OPTION_netdev,
    "-netdev ["
#ifdef CONFIG_SLIRP
    "user|"
#endif
    "tap|"
C
Corey Bryant 已提交
1418
    "bridge|"
M
Mark McLoughlin 已提交
1419 1420 1421
#ifdef CONFIG_VDE
    "vde|"
#endif
S
Stefan Hajnoczi 已提交
1422 1423
    "socket|"
    "hubport],id=str[,option][,option][,...]\n", QEMU_ARCH_ALL)
1424
STEXI
B
Blue Swirl 已提交
1425
@item -net nic[,vlan=@var{n}][,macaddr=@var{mac}][,model=@var{type}] [,name=@var{name}][,addr=@var{addr}][,vectors=@var{v}]
1426
@findex -net
1427
Create a new Network Interface Card and connect it to VLAN @var{n} (@var{n}
1428
= 0 is the default). The NIC is an e1000 by default on the PC
1429 1430
target. Optionally, the MAC address can be changed to @var{mac}, the
device address set to @var{addr} (PCI cards only),
1431 1432 1433 1434
and a @var{name} can be assigned for use in monitor commands.
Optionally, for PCI cards, you can specify the number @var{v} of MSI-X vectors
that the card should have; this option currently only affects virtio cards; set
@var{v} = 0 to disable MSI-X. If no @option{-net} option is specified, a single
1435
NIC is created.  QEMU can emulate several different models of network card.
1436
Valid values for @var{type} are
1437
@code{virtio}, @code{i82551}, @code{i82557b}, @code{i82559er},
1438 1439
@code{ne2k_pci}, @code{ne2k_isa}, @code{pcnet}, @code{rtl8139},
@code{e1000}, @code{smc91c111}, @code{lance} and @code{mcf_fec}.
1440
Not all devices are supported on all targets.  Use @code{-net nic,model=help}
1441 1442
for a list of available devices for your target.

1443
@item -netdev user,id=@var{id}[,@var{option}][,@var{option}][,...]
1444
@findex -netdev
1445
@item -net user[,@var{option}][,@var{option}][,...]
1446
Use the user mode network stack which requires no administrator
1447 1448
privilege to run. Valid options are:

1449
@table @option
1450 1451 1452
@item vlan=@var{n}
Connect user mode stack to VLAN @var{n} (@var{n} = 0 is the default).

1453
@item id=@var{id}
1454 1455 1456
@item name=@var{name}
Assign symbolic name for use in monitor commands.

1457 1458 1459
@item net=@var{addr}[/@var{mask}]
Set IP network address the guest will see. Optionally specify the netmask,
either in the form a.b.c.d or as number of valid top-most bits. Default is
B
Brad Hards 已提交
1460
10.0.2.0/24.
1461 1462 1463 1464

@item host=@var{addr}
Specify the guest-visible address of the host. Default is the 2nd IP in the
guest network, i.e. x.x.x.2.
1465

J
Jan Kiszka 已提交
1466
@item restrict=on|off
B
Brad Hards 已提交
1467
If this option is enabled, the guest will be isolated, i.e. it will not be
1468
able to contact the host and no guest IP packets will be routed over the host
B
Brad Hards 已提交
1469
to the outside. This option does not affect any explicitly set forwarding rules.
1470 1471

@item hostname=@var{name}
1472
Specifies the client hostname reported by the built-in DHCP server.
1473

1474 1475
@item dhcpstart=@var{addr}
Specify the first of the 16 IPs the built-in DHCP server can assign. Default
B
Brad Hards 已提交
1476
is the 15th to 31st IP in the guest network, i.e. x.x.x.15 to x.x.x.31.
1477 1478 1479 1480 1481 1482

@item dns=@var{addr}
Specify the guest-visible address of the virtual nameserver. The address must
be different from the host address. Default is the 3rd IP in the guest network,
i.e. x.x.x.3.

1483 1484 1485 1486 1487 1488 1489 1490 1491 1492 1493 1494
@item dnssearch=@var{domain}
Provides an entry for the domain-search list sent by the built-in
DHCP server. More than one domain suffix can be transmitted by specifying
this option multiple times. If supported, this will cause the guest to
automatically try to append the given domain suffix(es) in case a domain name
can not be resolved.

Example:
@example
qemu -net user,dnssearch=mgmt.example.org,dnssearch=example.org [...]
@end example

1495 1496 1497 1498
@item tftp=@var{dir}
When using the user mode network stack, activate a built-in TFTP
server. The files in @var{dir} will be exposed as the root of a TFTP server.
The TFTP client on the guest must be configured in binary mode (use the command
1499
@code{bin} of the Unix TFTP client).
1500 1501 1502 1503 1504 1505 1506 1507

@item bootfile=@var{file}
When using the user mode network stack, broadcast @var{file} as the BOOTP
filename. In conjunction with @option{tftp}, this can be used to network boot
a guest from a local directory.

Example (using pxelinux):
@example
1508
qemu-system-i386 -hda linux.img -boot n -net user,tftp=/path/to/tftp/files,bootfile=/pxelinux.0
1509 1510
@end example

1511
@item smb=@var{dir}[,smbserver=@var{addr}]
1512 1513
When using the user mode network stack, activate a built-in SMB
server so that Windows OSes can access to the host files in @file{@var{dir}}
1514 1515
transparently. The IP address of the SMB server can be set to @var{addr}. By
default the 4th IP in the guest network is used, i.e. x.x.x.4.
1516 1517 1518 1519 1520 1521 1522 1523 1524 1525

In the guest Windows OS, the line:
@example
10.0.2.4 smbserver
@end example
must be added in the file @file{C:\WINDOWS\LMHOSTS} (for windows 9x/Me)
or @file{C:\WINNT\SYSTEM32\DRIVERS\ETC\LMHOSTS} (Windows NT/2000).

Then @file{@var{dir}} can be accessed in @file{\\smbserver\qemu}.

1526 1527 1528
Note that a SAMBA server must be installed on the host OS.
QEMU was tested successfully with smbd versions from Red Hat 9,
Fedora Core 3 and OpenSUSE 11.x.
1529

1530
@item hostfwd=[tcp|udp]:[@var{hostaddr}]:@var{hostport}-[@var{guestaddr}]:@var{guestport}
1531 1532 1533
Redirect incoming TCP or UDP connections to the host port @var{hostport} to
the guest IP address @var{guestaddr} on guest port @var{guestport}. If
@var{guestaddr} is not specified, its value is x.x.x.15 (default first address
1534 1535
given by the built-in DHCP server). By specifying @var{hostaddr}, the rule can
be bound to a specific host interface. If no connection type is set, TCP is
1536
used. This option can be given multiple times.
1537 1538 1539 1540 1541 1542

For example, to redirect host X11 connection from screen 1 to guest
screen 0, use the following:

@example
# on the host
1543
qemu-system-i386 -net user,hostfwd=tcp:127.0.0.1:6001-:6000 [...]
1544 1545 1546 1547 1548 1549 1550 1551 1552
# this host xterm should open in the guest X11 server
xterm -display :1
@end example

To redirect telnet connections from host port 5555 to telnet port on
the guest, use the following:

@example
# on the host
1553
qemu-system-i386 -net user,hostfwd=tcp::5555-:23 [...]
1554 1555 1556 1557 1558
telnet localhost 5555
@end example

Then when you use on the host @code{telnet localhost 5555}, you
connect to the guest telnet server.
1559

1560
@item guestfwd=[tcp]:@var{server}:@var{port}-@var{dev}
1561
@item guestfwd=[tcp]:@var{server}:@var{port}-@var{cmd:command}
1562
Forward guest TCP connections to the IP address @var{server} on port @var{port}
1563 1564 1565
to the character device @var{dev} or to a program executed by @var{cmd:command}
which gets spawned for each connection. This option can be given multiple times.

1566
You can either use a chardev directly and have that one used throughout QEMU's
1567 1568 1569 1570 1571 1572 1573 1574 1575
lifetime, like in the following example:

@example
# open 10.10.1.1:4321 on bootup, connect 10.0.2.100:1234 to it whenever
# the guest accesses it
qemu -net user,guestfwd=tcp:10.0.2.100:1234-tcp:10.10.1.1:4321 [...]
@end example

Or you can execute a command on every TCP connection established by the guest,
1576
so that QEMU behaves similar to an inetd process for that virtual server:
1577 1578 1579 1580 1581 1582

@example
# call "netcat 10.10.1.1 4321" on every TCP connection to 10.0.2.100:1234
# and connect the TCP stream to its stdin/stdout
qemu -net 'user,guestfwd=tcp:10.0.2.100:1234-cmd:netcat 10.10.1.1 4321'
@end example
1583 1584 1585 1586 1587 1588 1589

@end table

Note: Legacy stand-alone options -tftp, -bootp, -smb and -redir are still
processed and applied to -net user. Mixing them with the new configuration
syntax gives undefined results. Their use for new applications is discouraged
as they will be removed from future versions.
1590

1591
@item -netdev tap,id=@var{id}[,fd=@var{h}][,ifname=@var{name}][,script=@var{file}][,downscript=@var{dfile}][,helper=@var{helper}]
C
Corey Bryant 已提交
1592 1593 1594 1595
@item -net tap[,vlan=@var{n}][,name=@var{name}][,fd=@var{h}][,ifname=@var{name}][,script=@var{file}][,downscript=@var{dfile}][,helper=@var{helper}]
Connect the host TAP network interface @var{name} to VLAN @var{n}.

Use the network script @var{file} to configure it and the network script
1596
@var{dfile} to deconfigure it. If @var{name} is not provided, the OS
C
Corey Bryant 已提交
1597 1598 1599 1600 1601 1602 1603 1604 1605 1606 1607 1608 1609
automatically provides one. The default network configure script is
@file{/etc/qemu-ifup} and the default network deconfigure script is
@file{/etc/qemu-ifdown}. Use @option{script=no} or @option{downscript=no}
to disable script execution.

If running QEMU as an unprivileged user, use the network helper
@var{helper} to configure the TAP interface. The default network
helper executable is @file{/usr/local/libexec/qemu-bridge-helper}.

@option{fd}=@var{h} can be used to specify the handle of an already
opened host TAP interface.

Examples:
1610 1611

@example
C
Corey Bryant 已提交
1612
#launch a QEMU instance with the default network script
1613
qemu-system-i386 linux.img -net nic -net tap
1614 1615 1616
@end example

@example
C
Corey Bryant 已提交
1617 1618
#launch a QEMU instance with two NICs, each one connected
#to a TAP device
1619 1620 1621
qemu-system-i386 linux.img \
                 -net nic,vlan=0 -net tap,vlan=0,ifname=tap0 \
                 -net nic,vlan=1 -net tap,vlan=1,ifname=tap1
1622 1623
@end example

C
Corey Bryant 已提交
1624 1625 1626
@example
#launch a QEMU instance with the default network helper to
#connect a TAP device to bridge br0
1627 1628
qemu-system-i386 linux.img \
                 -net nic -net tap,"helper=/usr/local/libexec/qemu-bridge-helper"
C
Corey Bryant 已提交
1629 1630
@end example

1631
@item -netdev bridge,id=@var{id}[,br=@var{bridge}][,helper=@var{helper}]
C
Corey Bryant 已提交
1632 1633 1634 1635 1636 1637 1638 1639 1640 1641 1642 1643 1644
@item -net bridge[,vlan=@var{n}][,name=@var{name}][,br=@var{bridge}][,helper=@var{helper}]
Connect a host TAP network interface to a host bridge device.

Use the network helper @var{helper} to configure the TAP interface and
attach it to the bridge. The default network helper executable is
@file{/usr/local/libexec/qemu-bridge-helper} and the default bridge
device is @file{br0}.

Examples:

@example
#launch a QEMU instance with the default network helper to
#connect a TAP device to bridge br0
1645
qemu-system-i386 linux.img -net bridge -net nic,model=virtio
C
Corey Bryant 已提交
1646 1647 1648 1649 1650
@end example

@example
#launch a QEMU instance with the default network helper to
#connect a TAP device to bridge qemubr0
1651
qemu-system-i386 linux.img -net bridge,br=qemubr0 -net nic,model=virtio
C
Corey Bryant 已提交
1652 1653
@end example

1654
@item -netdev socket,id=@var{id}[,fd=@var{h}][,listen=[@var{host}]:@var{port}][,connect=@var{host}:@var{port}]
B
Blue Swirl 已提交
1655
@item -net socket[,vlan=@var{n}][,name=@var{name}][,fd=@var{h}] [,listen=[@var{host}]:@var{port}][,connect=@var{host}:@var{port}]
1656 1657 1658 1659 1660 1661 1662 1663 1664 1665 1666

Connect the VLAN @var{n} to a remote VLAN in another QEMU virtual
machine using a TCP socket connection. If @option{listen} is
specified, QEMU waits for incoming connections on @var{port}
(@var{host} is optional). @option{connect} is used to connect to
another QEMU instance using the @option{listen} option. @option{fd}=@var{h}
specifies an already opened TCP socket.

Example:
@example
# launch a first QEMU instance
1667 1668 1669
qemu-system-i386 linux.img \
                 -net nic,macaddr=52:54:00:12:34:56 \
                 -net socket,listen=:1234
1670 1671
# connect the VLAN 0 of this instance to the VLAN 0
# of the first instance
1672 1673 1674
qemu-system-i386 linux.img \
                 -net nic,macaddr=52:54:00:12:34:57 \
                 -net socket,connect=127.0.0.1:1234
1675 1676
@end example

1677
@item -netdev socket,id=@var{id}[,fd=@var{h}][,mcast=@var{maddr}:@var{port}[,localaddr=@var{addr}]]
1678
@item -net socket[,vlan=@var{n}][,name=@var{name}][,fd=@var{h}][,mcast=@var{maddr}:@var{port}[,localaddr=@var{addr}]]
1679 1680 1681 1682 1683 1684 1685 1686 1687 1688 1689 1690 1691 1692 1693 1694 1695 1696 1697

Create a VLAN @var{n} shared with another QEMU virtual
machines using a UDP multicast socket, effectively making a bus for
every QEMU with same multicast address @var{maddr} and @var{port}.
NOTES:
@enumerate
@item
Several QEMU can be running on different hosts and share same bus (assuming
correct multicast setup for these hosts).
@item
mcast support is compatible with User Mode Linux (argument @option{eth@var{N}=mcast}), see
@url{http://user-mode-linux.sf.net}.
@item
Use @option{fd=h} to specify an already opened UDP multicast socket.
@end enumerate

Example:
@example
# launch one QEMU instance
1698 1699 1700
qemu-system-i386 linux.img \
                 -net nic,macaddr=52:54:00:12:34:56 \
                 -net socket,mcast=230.0.0.1:1234
1701
# launch another QEMU instance on same "bus"
1702 1703 1704
qemu-system-i386 linux.img \
                 -net nic,macaddr=52:54:00:12:34:57 \
                 -net socket,mcast=230.0.0.1:1234
1705
# launch yet another QEMU instance on same "bus"
1706 1707 1708
qemu-system-i386 linux.img \
                 -net nic,macaddr=52:54:00:12:34:58 \
                 -net socket,mcast=230.0.0.1:1234
1709 1710 1711 1712 1713 1714
@end example

Example (User Mode Linux compat.):
@example
# launch QEMU instance (note mcast address selected
# is UML's default)
1715 1716 1717
qemu-system-i386 linux.img \
                 -net nic,macaddr=52:54:00:12:34:56 \
                 -net socket,mcast=239.192.168.1:1102
1718 1719 1720 1721
# launch UML
/path/to/linux ubd0=/path/to/root_fs eth0=mcast
@end example

1722 1723
Example (send packets from host's 1.2.3.4):
@example
1724 1725 1726
qemu-system-i386 linux.img \
                 -net nic,macaddr=52:54:00:12:34:56 \
                 -net socket,mcast=239.192.168.1:1102,localaddr=1.2.3.4
1727 1728
@end example

1729
@item -netdev vde,id=@var{id}[,sock=@var{socketpath}][,port=@var{n}][,group=@var{groupname}][,mode=@var{octalmode}]
B
Blue Swirl 已提交
1730
@item -net vde[,vlan=@var{n}][,name=@var{name}][,sock=@var{socketpath}] [,port=@var{n}][,group=@var{groupname}][,mode=@var{octalmode}]
1731 1732 1733
Connect VLAN @var{n} to PORT @var{n} of a vde switch running on host and
listening for incoming connections on @var{socketpath}. Use GROUP @var{groupname}
and MODE @var{octalmode} to change default ownership and permissions for
1734
communication port. This option is only available if QEMU has been compiled
1735 1736 1737 1738 1739 1740 1741
with vde support enabled.

Example:
@example
# launch vde switch
vde_switch -F -sock /tmp/myswitch
# launch QEMU instance
1742
qemu-system-i386 linux.img -net nic -net vde,sock=/tmp/myswitch
1743 1744
@end example

S
Stefan Hajnoczi 已提交
1745 1746 1747 1748 1749 1750 1751 1752
@item -netdev hubport,id=@var{id},hubid=@var{hubid}

Create a hub port on QEMU "vlan" @var{hubid}.

The hubport netdev lets you connect a NIC to a QEMU "vlan" instead of a single
netdev.  @code{-net} and @code{-device} with parameter @option{vlan} create the
required hub automatically.

1753 1754 1755 1756 1757
@item -net dump[,vlan=@var{n}][,file=@var{file}][,len=@var{len}]
Dump network traffic on VLAN @var{n} to file @var{file} (@file{qemu-vlan0.pcap} by default).
At most @var{len} bytes (64k by default) per packet are stored. The file format is
libpcap, so it can be analyzed with tools such as tcpdump or Wireshark.

1758 1759 1760 1761
@item -net none
Indicate that no network devices should be configured. It is used to
override the default configuration (@option{-net nic -net user}) which
is activated if no @option{-net} options are provided.
1762
ETEXI
1763

1764
STEXI
1765 1766
@end table
ETEXI
1767 1768 1769
DEFHEADING()

DEFHEADING(Character device options:)
1770 1771 1772 1773 1774
STEXI

The general form of a character device option is:
@table @option
ETEXI
1775 1776

DEF("chardev", HAS_ARG, QEMU_OPTION_chardev,
J
Jan Kiszka 已提交
1777
    "-chardev null,id=id[,mux=on|off]\n"
1778
    "-chardev socket,id=id[,host=host],port=host[,to=to][,ipv4][,ipv6][,nodelay]\n"
J
Jan Kiszka 已提交
1779 1780
    "         [,server][,nowait][,telnet][,mux=on|off] (tcp)\n"
    "-chardev socket,id=id,path=path[,server][,nowait][,telnet],[mux=on|off] (unix)\n"
1781
    "-chardev udp,id=id[,host=host],port=port[,localaddr=localaddr]\n"
J
Jan Kiszka 已提交
1782 1783
    "         [,localport=localport][,ipv4][,ipv6][,mux=on|off]\n"
    "-chardev msmouse,id=id[,mux=on|off]\n"
1784
    "-chardev vc,id=id[[,width=width][,height=height]][[,cols=cols][,rows=rows]]\n"
J
Jan Kiszka 已提交
1785
    "         [,mux=on|off]\n"
1786
    "-chardev ringbuf,id=id[,size=size]\n"
J
Jan Kiszka 已提交
1787 1788
    "-chardev file,id=id,path=path[,mux=on|off]\n"
    "-chardev pipe,id=id,path=path[,mux=on|off]\n"
1789
#ifdef _WIN32
J
Jan Kiszka 已提交
1790 1791
    "-chardev console,id=id[,mux=on|off]\n"
    "-chardev serial,id=id,path=path[,mux=on|off]\n"
1792
#else
J
Jan Kiszka 已提交
1793
    "-chardev pty,id=id[,mux=on|off]\n"
1794
    "-chardev stdio,id=id[,mux=on|off][,signal=on|off]\n"
1795 1796
#endif
#ifdef CONFIG_BRLAPI
J
Jan Kiszka 已提交
1797
    "-chardev braille,id=id[,mux=on|off]\n"
1798 1799 1800
#endif
#if defined(__linux__) || defined(__sun__) || defined(__FreeBSD__) \
        || defined(__NetBSD__) || defined(__OpenBSD__) || defined(__DragonFly__)
1801
    "-chardev serial,id=id,path=path[,mux=on|off]\n"
J
Jan Kiszka 已提交
1802
    "-chardev tty,id=id,path=path[,mux=on|off]\n"
1803 1804
#endif
#if defined(__linux__) || defined(__FreeBSD__) || defined(__DragonFly__)
1805
    "-chardev parallel,id=id,path=path[,mux=on|off]\n"
J
Jan Kiszka 已提交
1806
    "-chardev parport,id=id,path=path[,mux=on|off]\n"
A
Alon Levy 已提交
1807 1808 1809
#endif
#if defined(CONFIG_SPICE)
    "-chardev spicevmc,id=id,name=name[,debug=debug]\n"
1810
    "-chardev spiceport,id=id,name=name[,debug=debug]\n"
1811
#endif
1812
    , QEMU_ARCH_ALL
1813 1814 1815
)

STEXI
J
Jan Kiszka 已提交
1816
@item -chardev @var{backend} ,id=@var{id} [,mux=on|off] [,@var{options}]
1817
@findex -chardev
1818 1819 1820 1821 1822 1823
Backend is one of:
@option{null},
@option{socket},
@option{udp},
@option{msmouse},
@option{vc},
1824
@option{ringbuf},
1825 1826 1827 1828 1829 1830 1831 1832
@option{file},
@option{pipe},
@option{console},
@option{serial},
@option{pty},
@option{stdio},
@option{braille},
@option{tty},
1833
@option{parallel},
A
Alon Levy 已提交
1834 1835
@option{parport},
@option{spicevmc}.
1836
@option{spiceport}.
1837 1838 1839 1840 1841
The specific backend will determine the applicable options.

All devices must have an id, which can be any string up to 127 characters long.
It is used to uniquely identify this device in other command line directives.

J
Jan Kiszka 已提交
1842 1843 1844 1845
A character device may be used in multiplexing mode by multiple front-ends.
The key sequence of @key{Control-a} and @key{c} will rotate the input focus
between attached front-ends. Specify @option{mux=on} to enable this mode.

1846 1847 1848 1849 1850 1851 1852 1853 1854 1855 1856 1857 1858 1859 1860 1861 1862 1863 1864 1865 1866 1867 1868 1869
Options to each backend are described below.

@item -chardev null ,id=@var{id}
A void device. This device will not emit any data, and will drop any data it
receives. The null backend does not take any options.

@item -chardev socket ,id=@var{id} [@var{TCP options} or @var{unix options}] [,server] [,nowait] [,telnet]

Create a two-way stream socket, which can be either a TCP or a unix socket. A
unix socket will be created if @option{path} is specified. Behaviour is
undefined if TCP options are specified for a unix socket.

@option{server} specifies that the socket shall be a listening socket.

@option{nowait} specifies that QEMU should not block waiting for a client to
connect to a listening socket.

@option{telnet} specifies that traffic on the socket should interpret telnet
escape sequences.

TCP and unix socket options are given below:

@table @option

A
Aurelien Jarno 已提交
1870
@item TCP options: port=@var{port} [,host=@var{host}] [,to=@var{to}] [,ipv4] [,ipv6] [,nodelay]
1871 1872 1873 1874 1875 1876 1877 1878 1879 1880 1881 1882 1883 1884 1885 1886 1887 1888 1889 1890 1891 1892 1893 1894 1895 1896 1897 1898 1899 1900 1901 1902 1903 1904 1905 1906 1907 1908 1909 1910 1911 1912 1913 1914 1915 1916 1917 1918 1919 1920 1921 1922 1923 1924 1925 1926 1927 1928 1929 1930 1931 1932

@option{host} for a listening socket specifies the local address to be bound.
For a connecting socket species the remote host to connect to. @option{host} is
optional for listening sockets. If not specified it defaults to @code{0.0.0.0}.

@option{port} for a listening socket specifies the local port to be bound. For a
connecting socket specifies the port on the remote host to connect to.
@option{port} can be given as either a port number or a service name.
@option{port} is required.

@option{to} is only relevant to listening sockets. If it is specified, and
@option{port} cannot be bound, QEMU will attempt to bind to subsequent ports up
to and including @option{to} until it succeeds. @option{to} must be specified
as a port number.

@option{ipv4} and @option{ipv6} specify that either IPv4 or IPv6 must be used.
If neither is specified the socket may use either protocol.

@option{nodelay} disables the Nagle algorithm.

@item unix options: path=@var{path}

@option{path} specifies the local path of the unix socket. @option{path} is
required.

@end table

@item -chardev udp ,id=@var{id} [,host=@var{host}] ,port=@var{port} [,localaddr=@var{localaddr}] [,localport=@var{localport}] [,ipv4] [,ipv6]

Sends all traffic from the guest to a remote host over UDP.

@option{host} specifies the remote host to connect to. If not specified it
defaults to @code{localhost}.

@option{port} specifies the port on the remote host to connect to. @option{port}
is required.

@option{localaddr} specifies the local address to bind to. If not specified it
defaults to @code{0.0.0.0}.

@option{localport} specifies the local port to bind to. If not specified any
available local port will be used.

@option{ipv4} and @option{ipv6} specify that either IPv4 or IPv6 must be used.
If neither is specified the device may use either protocol.

@item -chardev msmouse ,id=@var{id}

Forward QEMU's emulated msmouse events to the guest. @option{msmouse} does not
take any options.

@item -chardev vc ,id=@var{id} [[,width=@var{width}] [,height=@var{height}]] [[,cols=@var{cols}] [,rows=@var{rows}]]

Connect to a QEMU text console. @option{vc} may optionally be given a specific
size.

@option{width} and @option{height} specify the width and height respectively of
the console, in pixels.

@option{cols} and @option{rows} specify that the console be sized to fit a text
console with the given dimensions.

1933
@item -chardev ringbuf ,id=@var{id} [,size=@var{size}]
1934

1935 1936
Create a ring buffer with fixed size @option{size}.
@var{size} must be a power of two, and defaults to @code{64K}).
1937

1938 1939 1940 1941 1942 1943 1944 1945 1946 1947 1948 1949 1950 1951 1952 1953 1954 1955 1956 1957 1958 1959 1960 1961 1962 1963 1964 1965 1966 1967 1968 1969 1970 1971 1972 1973
@item -chardev file ,id=@var{id} ,path=@var{path}

Log all traffic received from the guest to a file.

@option{path} specifies the path of the file to be opened. This file will be
created if it does not already exist, and overwritten if it does. @option{path}
is required.

@item -chardev pipe ,id=@var{id} ,path=@var{path}

Create a two-way connection to the guest. The behaviour differs slightly between
Windows hosts and other hosts:

On Windows, a single duplex pipe will be created at
@file{\\.pipe\@option{path}}.

On other hosts, 2 pipes will be created called @file{@option{path}.in} and
@file{@option{path}.out}. Data written to @file{@option{path}.in} will be
received by the guest. Data written by the guest can be read from
@file{@option{path}.out}. QEMU will not create these fifos, and requires them to
be present.

@option{path} forms part of the pipe path as described above. @option{path} is
required.

@item -chardev console ,id=@var{id}

Send traffic from the guest to QEMU's standard output. @option{console} does not
take any options.

@option{console} is only available on Windows hosts.

@item -chardev serial ,id=@var{id} ,path=@option{path}

Send traffic from the guest to a serial device on the host.

1974 1975
On Unix hosts serial will actually accept any tty device,
not only serial lines.
1976 1977 1978 1979 1980 1981 1982 1983 1984 1985

@option{path} specifies the name of the serial device to open.

@item -chardev pty ,id=@var{id}

Create a new pseudo-terminal on the host and connect to it. @option{pty} does
not take any options.

@option{pty} is not available on Windows hosts.

1986
@item -chardev stdio ,id=@var{id} [,signal=on|off]
1987
Connect to standard input and standard output of the QEMU process.
1988 1989 1990 1991 1992 1993

@option{signal} controls if signals are enabled on the terminal, that includes
exiting QEMU with the key sequence @key{Control-c}. This option is enabled by
default, use @option{signal=off} to disable it.

@option{stdio} is not available on Windows hosts.
1994 1995 1996 1997 1998 1999 2000 2001

@item -chardev braille ,id=@var{id}

Connect to a local BrlAPI server. @option{braille} does not take any options.

@item -chardev tty ,id=@var{id} ,path=@var{path}

@option{tty} is only available on Linux, Sun, FreeBSD, NetBSD, OpenBSD and
2002
DragonFlyBSD hosts.  It is an alias for @option{serial}.
2003 2004 2005

@option{path} specifies the path to the tty. @option{path} is required.

2006
@item -chardev parallel ,id=@var{id} ,path=@var{path}
2007 2008
@item -chardev parport ,id=@var{id} ,path=@var{path}

2009
@option{parallel} is only available on Linux, FreeBSD and DragonFlyBSD hosts.
2010 2011 2012 2013 2014 2015

Connect to a local parallel port.

@option{path} specifies the path to the parallel port device. @option{path} is
required.

A
Alon Levy 已提交
2016 2017
@item -chardev spicevmc ,id=@var{id} ,debug=@var{debug}, name=@var{name}

2018 2019
@option{spicevmc} is only available when spice support is built in.

A
Alon Levy 已提交
2020 2021 2022 2023 2024 2025
@option{debug} debug level for spicevmc

@option{name} name of spice channel to connect to

Connect to a spice virtual machine channel, such as vdiport.

2026 2027 2028 2029 2030 2031 2032 2033 2034 2035
@item -chardev spiceport ,id=@var{id} ,debug=@var{debug}, name=@var{name}

@option{spiceport} is only available when spice support is built in.

@option{debug} debug level for spicevmc

@option{name} name of spice port to connect to

Connect to a spice port, allowing a Spice client to handle the traffic
identified by a name (preferably a fqdn).
2036
ETEXI
2037

2038
STEXI
2039 2040 2041 2042
@end table
ETEXI
DEFHEADING()

R
Ronnie Sahlberg 已提交
2043
DEFHEADING(Device URL Syntax:)
2044
STEXI
R
Ronnie Sahlberg 已提交
2045 2046 2047 2048 2049 2050 2051 2052 2053 2054 2055 2056 2057

In addition to using normal file images for the emulated storage devices,
QEMU can also use networked resources such as iSCSI devices. These are
specified using a special URL syntax.

@table @option
@item iSCSI
iSCSI support allows QEMU to access iSCSI resources directly and use as
images for the guest storage. Both disk and cdrom images are supported.

Syntax for specifying iSCSI LUNs is
``iscsi://<target-ip>[:<port>]/<target-iqn>/<lun>''

2058 2059 2060 2061 2062
By default qemu will use the iSCSI initiator-name
'iqn.2008-11.org.linux-kvm[:<name>]' but this can also be set from the command
line or a configuration file.


R
Ronnie Sahlberg 已提交
2063 2064
Example (without authentication):
@example
2065 2066 2067
qemu-system-i386 -iscsi initiator-name=iqn.2001-04.com.example:my-initiator \
                 -cdrom iscsi://192.0.2.1/iqn.2001-04.com.example/2 \
                 -drive file=iscsi://192.0.2.1/iqn.2001-04.com.example/1
R
Ronnie Sahlberg 已提交
2068 2069 2070 2071
@end example

Example (CHAP username/password via URL):
@example
2072
qemu-system-i386 -drive file=iscsi://user%password@@192.0.2.1/iqn.2001-04.com.example/1
R
Ronnie Sahlberg 已提交
2073 2074 2075 2076 2077 2078
@end example

Example (CHAP username/password via environment variables):
@example
LIBISCSI_CHAP_USERNAME="user" \
LIBISCSI_CHAP_PASSWORD="password" \
2079
qemu-system-i386 -drive file=iscsi://192.0.2.1/iqn.2001-04.com.example/1
R
Ronnie Sahlberg 已提交
2080 2081 2082 2083
@end example

iSCSI support is an optional feature of QEMU and only available when
compiled and linked against libiscsi.
2084 2085 2086 2087 2088 2089 2090
ETEXI
DEF("iscsi", HAS_ARG, QEMU_OPTION_iscsi,
    "-iscsi [user=user][,password=password]\n"
    "       [,header-digest=CRC32C|CR32C-NONE|NONE-CRC32C|NONE\n"
    "       [,initiator-name=iqn]\n"
    "                iSCSI session parameters\n", QEMU_ARCH_ALL)
STEXI
R
Ronnie Sahlberg 已提交
2091

2092 2093 2094
iSCSI parameters such as username and password can also be specified via
a configuration file. See qemu-doc for more information and examples.

2095 2096 2097 2098 2099 2100 2101 2102 2103 2104 2105 2106 2107
@item NBD
QEMU supports NBD (Network Block Devices) both using TCP protocol as well
as Unix Domain Sockets.

Syntax for specifying a NBD device using TCP
``nbd:<server-ip>:<port>[:exportname=<export>]''

Syntax for specifying a NBD device using Unix Domain Sockets
``nbd:unix:<domain-socket>[:exportname=<export>]''


Example for TCP
@example
2108
qemu-system-i386 --drive file=nbd:192.0.2.1:30000
2109 2110 2111 2112
@end example

Example for Unix Domain Sockets
@example
2113
qemu-system-i386 --drive file=nbd:unix:/tmp/nbd-socket
2114 2115
@end example

2116 2117 2118 2119 2120 2121 2122 2123 2124 2125 2126 2127
@item SSH
QEMU supports SSH (Secure Shell) access to remote disks.

Examples:
@example
qemu-system-i386 -drive file=ssh://user@@host/path/to/disk.img
qemu-system-i386 -drive file.driver=ssh,file.user=user,file.host=host,file.port=22,file.path=/path/to/disk.img
@end example

Currently authentication must be done using ssh-agent.  Other
authentication methods may be supported in future.

2128 2129 2130 2131 2132 2133
@item Sheepdog
Sheepdog is a distributed storage system for QEMU.
QEMU supports using either local sheepdog devices or remote networked
devices.

Syntax for specifying a sheepdog device
M
MORITA Kazutaka 已提交
2134
@example
2135
sheepdog[+tcp|+unix]://[host:port]/vdiname[?socket=path][#snapid|#tag]
M
MORITA Kazutaka 已提交
2136
@end example
2137 2138 2139

Example
@example
M
MORITA Kazutaka 已提交
2140
qemu-system-i386 --drive file=sheepdog://192.0.2.1:30000/MyVirtualMachine
2141 2142 2143 2144
@end example

See also @url{http://http://www.osrg.net/sheepdog/}.

2145 2146 2147 2148 2149 2150 2151 2152 2153 2154 2155 2156 2157
@item GlusterFS
GlusterFS is an user space distributed file system.
QEMU supports the use of GlusterFS volumes for hosting VM disk images using
TCP, Unix Domain Sockets and RDMA transport protocols.

Syntax for specifying a VM disk image on GlusterFS volume is
@example
gluster[+transport]://[server[:port]]/volname/image[?socket=...]
@end example


Example
@example
2158
qemu-system-x86_64 --drive file=gluster://192.0.2.1/testvol/a.img
2159 2160 2161
@end example

See also @url{http://www.gluster.org}.
2162 2163 2164
ETEXI

STEXI
R
Ronnie Sahlberg 已提交
2165 2166 2167
@end table
ETEXI

2168
DEFHEADING(Bluetooth(R) options:)
2169 2170 2171
STEXI
@table @option
ETEXI
2172

2173 2174 2175 2176 2177 2178 2179 2180 2181
DEF("bt", HAS_ARG, QEMU_OPTION_bt, \
    "-bt hci,null    dumb bluetooth HCI - doesn't respond to commands\n" \
    "-bt hci,host[:id]\n" \
    "                use host's HCI with the given name\n" \
    "-bt hci[,vlan=n]\n" \
    "                emulate a standard HCI in virtual scatternet 'n'\n" \
    "-bt vhci[,vlan=n]\n" \
    "                add host computer to virtual scatternet 'n' using VHCI\n" \
    "-bt device:dev[,vlan=n]\n" \
2182 2183
    "                emulate a bluetooth device 'dev' in scatternet 'n'\n",
    QEMU_ARCH_ALL)
2184 2185
STEXI
@item -bt hci[...]
2186
@findex -bt
2187 2188 2189 2190 2191 2192 2193 2194 2195 2196 2197
Defines the function of the corresponding Bluetooth HCI.  -bt options
are matched with the HCIs present in the chosen machine type.  For
example when emulating a machine with only one HCI built into it, only
the first @code{-bt hci[...]} option is valid and defines the HCI's
logic.  The Transport Layer is decided by the machine type.  Currently
the machines @code{n800} and @code{n810} have one HCI and all other
machines have none.

@anchor{bt-hcis}
The following three types are recognized:

2198
@table @option
2199 2200 2201 2202 2203 2204 2205 2206 2207 2208 2209 2210 2211 2212 2213 2214 2215 2216 2217 2218 2219 2220 2221 2222 2223
@item -bt hci,null
(default) The corresponding Bluetooth HCI assumes no internal logic
and will not respond to any HCI commands or emit events.

@item -bt hci,host[:@var{id}]
(@code{bluez} only) The corresponding HCI passes commands / events
to / from the physical HCI identified by the name @var{id} (default:
@code{hci0}) on the computer running QEMU.  Only available on @code{bluez}
capable systems like Linux.

@item -bt hci[,vlan=@var{n}]
Add a virtual, standard HCI that will participate in the Bluetooth
scatternet @var{n} (default @code{0}).  Similarly to @option{-net}
VLANs, devices inside a bluetooth network @var{n} can only communicate
with other devices in the same network (scatternet).
@end table

@item -bt vhci[,vlan=@var{n}]
(Linux-host only) Create a HCI in scatternet @var{n} (default 0) attached
to the host bluetooth stack instead of to the emulated target.  This
allows the host and target machines to participate in a common scatternet
and communicate.  Requires the Linux @code{vhci} driver installed.  Can
be used as following:

@example
2224
qemu-system-i386 [...OPTIONS...] -bt hci,vlan=5 -bt vhci,vlan=5
2225 2226 2227 2228 2229 2230 2231
@end example

@item -bt device:@var{dev}[,vlan=@var{n}]
Emulate a bluetooth device @var{dev} and place it in network @var{n}
(default @code{0}).  QEMU can only emulate one type of bluetooth devices
currently:

2232
@table @option
2233 2234 2235 2236 2237
@item keyboard
Virtual wireless keyboard implementing the HIDP bluetooth profile.
@end table
ETEXI

2238 2239 2240
STEXI
@end table
ETEXI
2241 2242
DEFHEADING()

2243 2244 2245 2246
#ifdef CONFIG_TPM
DEFHEADING(TPM device options:)

DEF("tpmdev", HAS_ARG, QEMU_OPTION_tpmdev, \
2247 2248 2249 2250
    "-tpmdev passthrough,id=id[,path=path][,cancel-path=path]\n"
    "                use path to provide path to a character device; default is /dev/tpm0\n"
    "                use cancel-path to provide path to TPM's cancel sysfs entry; if\n"
    "                not provided it will be searched for in /sys/class/misc/tpm?/device\n",
2251 2252 2253 2254 2255 2256 2257 2258 2259
    QEMU_ARCH_ALL)
STEXI

The general form of a TPM device option is:
@table @option

@item -tpmdev @var{backend} ,id=@var{id} [,@var{options}]
@findex -tpmdev
Backend type must be:
2260
@option{passthrough}.
2261 2262

The specific backend type will determine the applicable options.
2263 2264
The @code{-tpmdev} option creates the TPM backend and requires a
@code{-device} option that specifies the TPM frontend interface model.
2265 2266 2267 2268 2269 2270 2271 2272

Options to each backend are described below.

Use 'help' to print all available TPM backend types.
@example
qemu -tpmdev help
@end example

2273
@item -tpmdev passthrough, id=@var{id}, path=@var{path}, cancel-path=@var{cancel-path}
2274 2275 2276 2277 2278 2279 2280 2281

(Linux-host only) Enable access to the host's TPM using the passthrough
driver.

@option{path} specifies the path to the host's TPM device, i.e., on
a Linux host this would be @code{/dev/tpm0}.
@option{path} is optional and by default @code{/dev/tpm0} is used.

2282 2283 2284 2285 2286
@option{cancel-path} specifies the path to the host TPM device's sysfs
entry allowing for cancellation of an ongoing TPM command.
@option{cancel-path} is optional and by default QEMU will search for the
sysfs entry to use.

2287 2288 2289 2290 2291 2292 2293 2294 2295 2296 2297 2298 2299 2300 2301 2302 2303 2304 2305 2306 2307 2308 2309
Some notes about using the host's TPM with the passthrough driver:

The TPM device accessed by the passthrough driver must not be
used by any other application on the host.

Since the host's firmware (BIOS/UEFI) has already initialized the TPM,
the VM's firmware (BIOS/UEFI) will not be able to initialize the
TPM again and may therefore not show a TPM-specific menu that would
otherwise allow the user to configure the TPM, e.g., allow the user to
enable/disable or activate/deactivate the TPM.
Further, if TPM ownership is released from within a VM then the host's TPM
will get disabled and deactivated. To enable and activate the
TPM again afterwards, the host has to be rebooted and the user is
required to enter the firmware's menu to enable and activate the TPM.
If the TPM is left disabled and/or deactivated most TPM commands will fail.

To create a passthrough TPM use the following two options:
@example
-tpmdev passthrough,id=tpm0 -device tpm-tis,tpmdev=tpm0
@end example
Note that the @code{-tpmdev} id is @code{tpm0} and is referenced by
@code{tpmdev=tpm0} in the device option.

2310 2311 2312 2313 2314 2315 2316 2317
@end table

ETEXI

DEFHEADING()

#endif

A
Alexander Graf 已提交
2318
DEFHEADING(Linux/Multiboot boot specific:)
2319
STEXI
A
Alexander Graf 已提交
2320 2321 2322

When using these options, you can use a given Linux or Multiboot
kernel without installing it in the disk image. It can be useful
2323 2324 2325 2326 2327 2328
for easier testing of various kernels.

@table @option
ETEXI

DEF("kernel", HAS_ARG, QEMU_OPTION_kernel, \
2329
    "-kernel bzImage use 'bzImage' as kernel image\n", QEMU_ARCH_ALL)
2330 2331
STEXI
@item -kernel @var{bzImage}
2332
@findex -kernel
A
Alexander Graf 已提交
2333 2334
Use @var{bzImage} as kernel image. The kernel can be either a Linux kernel
or in multiboot format.
2335 2336 2337
ETEXI

DEF("append", HAS_ARG, QEMU_OPTION_append, \
2338
    "-append cmdline use 'cmdline' as kernel command line\n", QEMU_ARCH_ALL)
2339 2340
STEXI
@item -append @var{cmdline}
2341
@findex -append
2342 2343 2344 2345
Use @var{cmdline} as kernel command line
ETEXI

DEF("initrd", HAS_ARG, QEMU_OPTION_initrd, \
2346
           "-initrd file    use 'file' as initial ram disk\n", QEMU_ARCH_ALL)
2347 2348
STEXI
@item -initrd @var{file}
2349
@findex -initrd
2350
Use @var{file} as initial ram disk.
A
Alexander Graf 已提交
2351 2352 2353 2354 2355 2356 2357

@item -initrd "@var{file1} arg=foo,@var{file2}"

This syntax is only available with multiboot.

Use @var{file1} and @var{file2} as modules and pass arg=foo as parameter to the
first module.
2358 2359
ETEXI

G
Grant Likely 已提交
2360
DEF("dtb", HAS_ARG, QEMU_OPTION_dtb, \
2361
    "-dtb    file    use 'file' as device tree image\n", QEMU_ARCH_ALL)
G
Grant Likely 已提交
2362 2363 2364 2365 2366 2367 2368
STEXI
@item -dtb @var{file}
@findex -dtb
Use @var{file} as a device tree binary (dtb) image and pass it to the kernel
on boot.
ETEXI

2369 2370 2371 2372 2373 2374 2375 2376 2377 2378 2379
STEXI
@end table
ETEXI
DEFHEADING()

DEFHEADING(Debug/Expert options:)
STEXI
@table @option
ETEXI

DEF("serial", HAS_ARG, QEMU_OPTION_serial, \
2380 2381
    "-serial dev     redirect the serial port to char device 'dev'\n",
    QEMU_ARCH_ALL)
2382 2383
STEXI
@item -serial @var{dev}
2384
@findex -serial
2385 2386 2387 2388 2389 2390 2391 2392 2393 2394
Redirect the virtual serial port to host character device
@var{dev}. The default device is @code{vc} in graphical mode and
@code{stdio} in non graphical mode.

This option can be used several times to simulate up to 4 serial
ports.

Use @code{-serial none} to disable all serial ports.

Available character devices are:
2395
@table @option
2396
@item vc[:@var{W}x@var{H}]
2397 2398 2399 2400 2401 2402 2403 2404 2405 2406 2407 2408 2409 2410 2411 2412 2413 2414 2415 2416 2417 2418 2419 2420 2421 2422 2423 2424 2425 2426 2427 2428 2429 2430 2431
Virtual console. Optionally, a width and height can be given in pixel with
@example
vc:800x600
@end example
It is also possible to specify width or height in characters:
@example
vc:80Cx24C
@end example
@item pty
[Linux only] Pseudo TTY (a new PTY is automatically allocated)
@item none
No device is allocated.
@item null
void device
@item /dev/XXX
[Linux only] Use host tty, e.g. @file{/dev/ttyS0}. The host serial port
parameters are set according to the emulated ones.
@item /dev/parport@var{N}
[Linux only, parallel port only] Use host parallel port
@var{N}. Currently SPP and EPP parallel port features can be used.
@item file:@var{filename}
Write output to @var{filename}. No character can be read.
@item stdio
[Unix only] standard input/output
@item pipe:@var{filename}
name pipe @var{filename}
@item COM@var{n}
[Windows only] Use host serial port @var{n}
@item udp:[@var{remote_host}]:@var{remote_port}[@@[@var{src_ip}]:@var{src_port}]
This implements UDP Net Console.
When @var{remote_host} or @var{src_ip} are not specified
they default to @code{0.0.0.0}.
When not using a specified @var{src_port} a random port is automatically chosen.

If you just want a simple readonly console you can use @code{netcat} or
2432 2433
@code{nc}, by starting QEMU with: @code{-serial udp::4555} and nc as:
@code{nc -u -l -p 4555}. Any time QEMU writes something to that port it
2434 2435 2436
will appear in the netconsole session.

If you plan to send characters back via netconsole or you want to stop
2437
and start QEMU a lot of times, you should have QEMU use the same
2438
source port each time by using something like @code{-serial
2439
udp::4555@@:4556} to QEMU. Another approach is to use a patched
2440 2441 2442 2443
version of netcat which can listen to a TCP port and send and receive
characters via udp.  If you have a patched version of netcat which
activates telnet remote echo and single char transfer, then you can
use the following options to step up a netcat redirector to allow
2444
telnet on port 5555 to access the QEMU port.
2445
@table @code
2446
@item QEMU Options:
2447 2448 2449 2450 2451 2452 2453 2454 2455 2456 2457 2458 2459 2460 2461 2462 2463 2464 2465 2466 2467 2468 2469 2470 2471 2472 2473 2474 2475 2476 2477 2478 2479 2480 2481 2482 2483 2484 2485 2486 2487 2488 2489
-serial udp::4555@@:4556
@item netcat options:
-u -P 4555 -L 0.0.0.0:4556 -t -p 5555 -I -T
@item telnet options:
localhost 5555
@end table

@item tcp:[@var{host}]:@var{port}[,@var{server}][,nowait][,nodelay]
The TCP Net Console has two modes of operation.  It can send the serial
I/O to a location or wait for a connection from a location.  By default
the TCP Net Console is sent to @var{host} at the @var{port}.  If you use
the @var{server} option QEMU will wait for a client socket application
to connect to the port before continuing, unless the @code{nowait}
option was specified.  The @code{nodelay} option disables the Nagle buffering
algorithm.  If @var{host} is omitted, 0.0.0.0 is assumed. Only
one TCP connection at a time is accepted. You can use @code{telnet} to
connect to the corresponding character device.
@table @code
@item Example to send tcp console to 192.168.0.2 port 4444
-serial tcp:192.168.0.2:4444
@item Example to listen and wait on port 4444 for connection
-serial tcp::4444,server
@item Example to not wait and listen on ip 192.168.0.100 port 4444
-serial tcp:192.168.0.100:4444,server,nowait
@end table

@item telnet:@var{host}:@var{port}[,server][,nowait][,nodelay]
The telnet protocol is used instead of raw tcp sockets.  The options
work the same as if you had specified @code{-serial tcp}.  The
difference is that the port acts like a telnet server or client using
telnet option negotiation.  This will also allow you to send the
MAGIC_SYSRQ sequence if you use a telnet that supports sending the break
sequence.  Typically in unix telnet you do it with Control-] and then
type "send break" followed by pressing the enter key.

@item unix:@var{path}[,server][,nowait]
A unix domain socket is used instead of a tcp socket.  The option works the
same as if you had specified @code{-serial tcp} except the unix domain socket
@var{path} is used for connections.

@item mon:@var{dev_string}
This is a special option to allow the monitor to be multiplexed onto
another serial port.  The monitor is accessed with key sequence of
2490
@key{Control-a} and then pressing @key{c}.
2491 2492 2493 2494 2495 2496
@var{dev_string} should be any one of the serial devices specified
above.  An example to multiplex the monitor onto a telnet server
listening on port 4444 would be:
@table @code
@item -serial mon:telnet::4444,server,nowait
@end table
2497 2498
When the monitor is multiplexed to stdio in this way, Ctrl+C will not terminate
QEMU any more but will be passed to the guest instead.
2499 2500 2501 2502 2503

@item braille
Braille device.  This will use BrlAPI to display the braille output on a real
or fake device.

2504 2505
@item msmouse
Three button serial mouse. Configure the guest to use Microsoft protocol.
2506 2507 2508 2509
@end table
ETEXI

DEF("parallel", HAS_ARG, QEMU_OPTION_parallel, \
2510 2511
    "-parallel dev   redirect the parallel port to char device 'dev'\n",
    QEMU_ARCH_ALL)
2512 2513
STEXI
@item -parallel @var{dev}
2514
@findex -parallel
2515 2516 2517 2518 2519 2520 2521 2522 2523 2524 2525 2526
Redirect the virtual parallel port to host device @var{dev} (same
devices as the serial port). On Linux hosts, @file{/dev/parportN} can
be used to use hardware devices connected on the corresponding host
parallel port.

This option can be used several times to simulate up to 3 parallel
ports.

Use @code{-parallel none} to disable all parallel ports.
ETEXI

DEF("monitor", HAS_ARG, QEMU_OPTION_monitor, \
2527 2528
    "-monitor dev    redirect the monitor to char device 'dev'\n",
    QEMU_ARCH_ALL)
2529
STEXI
2530
@item -monitor @var{dev}
2531
@findex -monitor
2532 2533 2534 2535
Redirect the monitor to host device @var{dev} (same devices as the
serial port).
The default device is @code{vc} in graphical mode and @code{stdio} in
non graphical mode.
2536
Use @code{-monitor none} to disable the default monitor.
2537
ETEXI
G
Gerd Hoffmann 已提交
2538
DEF("qmp", HAS_ARG, QEMU_OPTION_qmp, \
2539 2540
    "-qmp dev        like -monitor but opens in 'control' mode\n",
    QEMU_ARCH_ALL)
2541 2542
STEXI
@item -qmp @var{dev}
2543
@findex -qmp
2544 2545
Like -monitor but opens in 'control' mode.
ETEXI
2546

G
Gerd Hoffmann 已提交
2547
DEF("mon", HAS_ARG, QEMU_OPTION_mon, \
2548
    "-mon [chardev=]name[,mode=readline|control][,default]\n", QEMU_ARCH_ALL)
G
Gerd Hoffmann 已提交
2549
STEXI
2550
@item -mon [chardev=]name[,mode=readline|control][,default]
2551
@findex -mon
G
Gerd Hoffmann 已提交
2552 2553 2554
Setup monitor on chardev @var{name}.
ETEXI

2555
DEF("debugcon", HAS_ARG, QEMU_OPTION_debugcon, \
2556 2557
    "-debugcon dev   redirect the debug console to char device 'dev'\n",
    QEMU_ARCH_ALL)
2558 2559
STEXI
@item -debugcon @var{dev}
2560
@findex -debugcon
2561 2562 2563 2564 2565 2566 2567
Redirect the debug console to host device @var{dev} (same devices as the
serial port).  The debug console is an I/O port which is typically port
0xe9; writing to that I/O port sends output to this device.
The default device is @code{vc} in graphical mode and @code{stdio} in
non graphical mode.
ETEXI

2568
DEF("pidfile", HAS_ARG, QEMU_OPTION_pidfile, \
2569
    "-pidfile file   write PID to 'file'\n", QEMU_ARCH_ALL)
2570 2571
STEXI
@item -pidfile @var{file}
2572
@findex -pidfile
2573 2574 2575 2576
Store the QEMU process PID in @var{file}. It is useful if you launch QEMU
from a script.
ETEXI

2577
DEF("singlestep", 0, QEMU_OPTION_singlestep, \
2578
    "-singlestep     always run in singlestep mode\n", QEMU_ARCH_ALL)
2579 2580
STEXI
@item -singlestep
2581
@findex -singlestep
2582 2583 2584
Run the emulation in single step mode.
ETEXI

2585
DEF("S", 0, QEMU_OPTION_S, \
2586 2587
    "-S              freeze CPU at startup (use 'c' to start execution)\n",
    QEMU_ARCH_ALL)
2588 2589
STEXI
@item -S
2590
@findex -S
2591 2592 2593
Do not start CPU at startup (you must type 'c' in the monitor).
ETEXI

2594 2595 2596 2597 2598 2599 2600 2601 2602 2603 2604 2605 2606
DEF("realtime", HAS_ARG, QEMU_OPTION_realtime,
    "-realtime [mlock=on|off]\n"
    "                run qemu with realtime features\n"
    "                mlock=on|off controls mlock support (default: on)\n",
    QEMU_ARCH_ALL)
STEXI
@item -realtime mlock=on|off
@findex -realtime
Run qemu with realtime features.
mlocking qemu and guest memory can be enabled via @option{mlock=on}
(enabled by default).
ETEXI

2607
DEF("gdb", HAS_ARG, QEMU_OPTION_gdb, \
2608
    "-gdb dev        wait for gdb connection on 'dev'\n", QEMU_ARCH_ALL)
2609 2610
STEXI
@item -gdb @var{dev}
2611
@findex -gdb
2612 2613
Wait for gdb connection on device @var{dev} (@pxref{gdb_usage}). Typical
connections will likely be TCP-based, but also UDP, pseudo TTY, or even
2614
stdio are reasonable use case. The latter is allowing to start QEMU from
2615 2616
within gdb and establish the connection via a pipe:
@example
2617
(gdb) target remote | exec qemu-system-i386 -gdb stdio ...
2618
@end example
2619 2620
ETEXI

2621
DEF("s", 0, QEMU_OPTION_s, \
2622 2623
    "-s              shorthand for -gdb tcp::" DEFAULT_GDBSTUB_PORT "\n",
    QEMU_ARCH_ALL)
2624
STEXI
2625
@item -s
2626
@findex -s
2627 2628
Shorthand for -gdb tcp::1234, i.e. open a gdbserver on TCP port 1234
(@pxref{gdb_usage}).
2629 2630 2631
ETEXI

DEF("d", HAS_ARG, QEMU_OPTION_d, \
2632
    "-d item1,...    enable logging of specified items (use '-d help' for a list of log items)\n",
2633
    QEMU_ARCH_ALL)
2634
STEXI
2635
@item -d @var{item1}[,...]
2636
@findex -d
2637
Enable logging of specified items. Use '-d help' for a list of log items.
2638 2639
ETEXI

2640
DEF("D", HAS_ARG, QEMU_OPTION_D, \
2641
    "-D logfile      output log to logfile (default stderr)\n",
2642 2643
    QEMU_ARCH_ALL)
STEXI
2644
@item -D @var{logfile}
2645
@findex -D
2646
Output log in @var{logfile} instead of to stderr
2647 2648
ETEXI

2649
DEF("L", HAS_ARG, QEMU_OPTION_L, \
2650 2651
    "-L path         set the directory for the BIOS, VGA BIOS and keymaps\n",
    QEMU_ARCH_ALL)
2652 2653
STEXI
@item -L  @var{path}
2654
@findex -L
2655 2656 2657 2658
Set the directory for the BIOS, VGA BIOS and keymaps.
ETEXI

DEF("bios", HAS_ARG, QEMU_OPTION_bios, \
2659
    "-bios file      set the filename for the BIOS\n", QEMU_ARCH_ALL)
2660 2661
STEXI
@item -bios @var{file}
2662
@findex -bios
2663 2664 2665 2666
Set the filename for the BIOS.
ETEXI

DEF("enable-kvm", 0, QEMU_OPTION_enable_kvm, \
2667
    "-enable-kvm     enable KVM full virtualization support\n", QEMU_ARCH_ALL)
2668 2669
STEXI
@item -enable-kvm
2670
@findex -enable-kvm
2671 2672 2673 2674
Enable KVM full virtualization support. This option is only available
if KVM support is enabled when compiling.
ETEXI

2675
DEF("xen-domid", HAS_ARG, QEMU_OPTION_xen_domid,
2676
    "-xen-domid id   specify xen guest domain id\n", QEMU_ARCH_ALL)
2677 2678
DEF("xen-create", 0, QEMU_OPTION_xen_create,
    "-xen-create     create domain using xen hypercalls, bypassing xend\n"
2679 2680
    "                warning: should not be used when xend is in use\n",
    QEMU_ARCH_ALL)
2681 2682
DEF("xen-attach", 0, QEMU_OPTION_xen_attach,
    "-xen-attach     attach to existing xen domain\n"
2683
    "                xend will use this when starting QEMU\n",
2684
    QEMU_ARCH_ALL)
2685 2686
STEXI
@item -xen-domid @var{id}
2687
@findex -xen-domid
2688 2689
Specify xen guest domain @var{id} (XEN only).
@item -xen-create
2690
@findex -xen-create
2691 2692 2693
Create domain using xen hypercalls, bypassing xend.
Warning: should not be used when xend is in use (XEN only).
@item -xen-attach
2694
@findex -xen-attach
2695
Attach to existing xen domain.
2696
xend will use this when starting QEMU (XEN only).
2697
ETEXI
2698

2699
DEF("no-reboot", 0, QEMU_OPTION_no_reboot, \
2700
    "-no-reboot      exit instead of rebooting\n", QEMU_ARCH_ALL)
2701 2702
STEXI
@item -no-reboot
2703
@findex -no-reboot
2704 2705 2706 2707
Exit instead of rebooting.
ETEXI

DEF("no-shutdown", 0, QEMU_OPTION_no_shutdown, \
2708
    "-no-shutdown    stop before shutdown\n", QEMU_ARCH_ALL)
2709 2710
STEXI
@item -no-shutdown
2711
@findex -no-shutdown
2712 2713 2714 2715 2716 2717 2718
Don't exit QEMU on guest shutdown, but instead only stop the emulation.
This allows for instance switching to monitor to commit changes to the
disk image.
ETEXI

DEF("loadvm", HAS_ARG, QEMU_OPTION_loadvm, \
    "-loadvm [tag|id]\n" \
2719 2720
    "                start right away with a saved state (loadvm in monitor)\n",
    QEMU_ARCH_ALL)
2721 2722
STEXI
@item -loadvm @var{file}
2723
@findex -loadvm
2724 2725 2726 2727 2728
Start right away with a saved state (@code{loadvm} in monitor)
ETEXI

#ifndef _WIN32
DEF("daemonize", 0, QEMU_OPTION_daemonize, \
2729
    "-daemonize      daemonize QEMU after initializing\n", QEMU_ARCH_ALL)
2730 2731 2732
#endif
STEXI
@item -daemonize
2733
@findex -daemonize
2734 2735 2736 2737 2738 2739 2740
Daemonize the QEMU process after initialization.  QEMU will not detach from
standard IO until it is ready to receive connections on any of its devices.
This option is a useful way for external programs to launch QEMU without having
to cope with initialization race conditions.
ETEXI

DEF("option-rom", HAS_ARG, QEMU_OPTION_option_rom, \
2741 2742
    "-option-rom rom load a file, rom, into the option ROM space\n",
    QEMU_ARCH_ALL)
2743 2744
STEXI
@item -option-rom @var{file}
2745
@findex -option-rom
2746 2747 2748 2749 2750 2751
Load the contents of @var{file} as an option ROM.
This option is useful to load things like EtherBoot.
ETEXI

DEF("clock", HAS_ARG, QEMU_OPTION_clock, \
    "-clock          force the use of the given methods for timer alarm.\n" \
2752
    "                To see what timers are available use '-clock help'\n",
2753
    QEMU_ARCH_ALL)
2754 2755
STEXI
@item -clock @var{method}
2756
@findex -clock
2757
Force the use of the given methods for timer alarm. To see what timers
2758
are available use @code{-clock help}.
2759 2760
ETEXI

J
Jan Kiszka 已提交
2761
HXCOMM Options deprecated by -rtc
2762 2763
DEF("localtime", 0, QEMU_OPTION_localtime, "", QEMU_ARCH_ALL)
DEF("startdate", HAS_ARG, QEMU_OPTION_startdate, "", QEMU_ARCH_ALL)
J
Jan Kiszka 已提交
2764 2765

DEF("rtc", HAS_ARG, QEMU_OPTION_rtc, \
P
Paolo Bonzini 已提交
2766
    "-rtc [base=utc|localtime|date][,clock=host|rt|vm][,driftfix=none|slew]\n" \
2767 2768
    "                set the RTC base and clock, enable drift fix for clock ticks (x86 only)\n",
    QEMU_ARCH_ALL)
2769 2770 2771

STEXI

J
Jan Kiszka 已提交
2772
@item -rtc [base=utc|localtime|@var{date}][,clock=host|vm][,driftfix=none|slew]
2773
@findex -rtc
J
Jan Kiszka 已提交
2774 2775 2776 2777 2778
Specify @option{base} as @code{utc} or @code{localtime} to let the RTC start at the current
UTC or local time, respectively. @code{localtime} is required for correct date in
MS-DOS or Windows. To start at a specific point in time, provide @var{date} in the
format @code{2006-06-17T16:01:21} or @code{2006-06-17}. The default base is UTC.

J
Jan Kiszka 已提交
2779 2780 2781
By default the RTC is driven by the host system time. This allows to use the
RTC as accurate reference clock inside the guest, specifically if the host
time is smoothly following an accurate external reference clock, e.g. via NTP.
P
Paolo Bonzini 已提交
2782 2783 2784
If you want to isolate the guest time from the host, you can set @option{clock}
to @code{rt} instead.  To even prevent it from progressing during suspension,
you can set it to @code{vm}.
J
Jan Kiszka 已提交
2785

J
Jan Kiszka 已提交
2786 2787 2788 2789
Enable @option{driftfix} (i386 targets only) if you experience time drift problems,
specifically with Windows' ACPI HAL. This option will try to figure out how
many timer interrupts were not processed by the Windows guest and will
re-inject them.
2790 2791 2792 2793
ETEXI

DEF("icount", HAS_ARG, QEMU_OPTION_icount, \
    "-icount [N|auto]\n" \
2794
    "                enable virtual instruction counter with 2^N clock ticks per\n" \
2795
    "                instruction\n", QEMU_ARCH_ALL)
2796
STEXI
2797
@item -icount [@var{N}|auto]
2798
@findex -icount
2799
Enable virtual instruction counter.  The virtual cpu will execute one
2800
instruction every 2^@var{N} ns of virtual time.  If @code{auto} is specified
2801 2802 2803 2804 2805 2806 2807 2808 2809
then the virtual cpu speed will be automatically adjusted to keep virtual
time within a few seconds of real time.

Note that while this option can give deterministic behavior, it does not
provide cycle accurate emulation.  Modern CPUs contain superscalar out of
order cores with complex cache hierarchies.  The number of instructions
executed often has little or no correlation with actual performance.
ETEXI

R
Richard W.M. Jones 已提交
2810 2811
DEF("watchdog", HAS_ARG, QEMU_OPTION_watchdog, \
    "-watchdog i6300esb|ib700\n" \
2812 2813
    "                enable virtual hardware watchdog [default=none]\n",
    QEMU_ARCH_ALL)
R
Richard W.M. Jones 已提交
2814 2815
STEXI
@item -watchdog @var{model}
2816
@findex -watchdog
R
Richard W.M. Jones 已提交
2817 2818 2819 2820 2821 2822 2823 2824 2825 2826
Create a virtual hardware watchdog device.  Once enabled (by a guest
action), the watchdog must be periodically polled by an agent inside
the guest or else the guest will be restarted.

The @var{model} is the model of hardware watchdog to emulate.  Choices
for model are: @code{ib700} (iBASE 700) which is a very simple ISA
watchdog with a single timer, or @code{i6300esb} (Intel 6300ESB I/O
controller hub) which is a much more featureful PCI-based dual-timer
watchdog.  Choose a model for which your guest has drivers.

2827
Use @code{-watchdog help} to list available hardware models.  Only one
R
Richard W.M. Jones 已提交
2828 2829 2830 2831 2832
watchdog can be enabled for a guest.
ETEXI

DEF("watchdog-action", HAS_ARG, QEMU_OPTION_watchdog_action, \
    "-watchdog-action reset|shutdown|poweroff|pause|debug|none\n" \
2833 2834
    "                action when watchdog fires [default=reset]\n",
    QEMU_ARCH_ALL)
R
Richard W.M. Jones 已提交
2835 2836
STEXI
@item -watchdog-action @var{action}
2837
@findex -watchdog-action
R
Richard W.M. Jones 已提交
2838 2839 2840 2841 2842 2843 2844 2845 2846 2847 2848 2849 2850 2851 2852 2853 2854 2855 2856 2857 2858 2859 2860 2861 2862

The @var{action} controls what QEMU will do when the watchdog timer
expires.
The default is
@code{reset} (forcefully reset the guest).
Other possible actions are:
@code{shutdown} (attempt to gracefully shutdown the guest),
@code{poweroff} (forcefully poweroff the guest),
@code{pause} (pause the guest),
@code{debug} (print a debug message and continue), or
@code{none} (do nothing).

Note that the @code{shutdown} action requires that the guest responds
to ACPI signals, which it may not be able to do in the sort of
situations where the watchdog would have expired, and thus
@code{-watchdog-action shutdown} is not recommended for production use.

Examples:

@table @code
@item -watchdog i6300esb -watchdog-action pause
@item -watchdog ib700
@end table
ETEXI

2863
DEF("echr", HAS_ARG, QEMU_OPTION_echr, \
2864 2865
    "-echr chr       set terminal escape character instead of ctrl-a\n",
    QEMU_ARCH_ALL)
2866 2867
STEXI

2868
@item -echr @var{numeric_ascii_value}
2869
@findex -echr
2870 2871 2872 2873 2874 2875 2876 2877 2878 2879 2880 2881 2882 2883 2884
Change the escape character used for switching to the monitor when using
monitor and serial sharing.  The default is @code{0x01} when using the
@code{-nographic} option.  @code{0x01} is equal to pressing
@code{Control-a}.  You can select a different character from the ascii
control keys where 1 through 26 map to Control-a through Control-z.  For
instance you could use the either of the following to change the escape
character to Control-t.
@table @code
@item -echr 0x14
@item -echr 20
@end table
ETEXI

DEF("virtioconsole", HAS_ARG, QEMU_OPTION_virtiocon, \
    "-virtioconsole c\n" \
2885
    "                set virtio console\n", QEMU_ARCH_ALL)
2886 2887
STEXI
@item -virtioconsole @var{c}
2888
@findex -virtioconsole
2889
Set virtio console.
2890 2891 2892 2893

This option is maintained for backward compatibility.

Please use @code{-device virtconsole} for the new way of invocation.
2894 2895 2896
ETEXI

DEF("show-cursor", 0, QEMU_OPTION_show_cursor, \
2897
    "-show-cursor    show cursor\n", QEMU_ARCH_ALL)
2898
STEXI
2899
@item -show-cursor
2900
@findex -show-cursor
2901
Show cursor.
2902 2903 2904
ETEXI

DEF("tb-size", HAS_ARG, QEMU_OPTION_tb_size, \
2905
    "-tb-size n      set TB size\n", QEMU_ARCH_ALL)
2906
STEXI
2907
@item -tb-size @var{n}
2908
@findex -tb-size
2909
Set TB size.
2910 2911 2912
ETEXI

DEF("incoming", HAS_ARG, QEMU_OPTION_incoming, \
2913 2914
    "-incoming p     prepare for incoming migration, listen on port p\n",
    QEMU_ARCH_ALL)
2915
STEXI
2916
@item -incoming @var{port}
2917
@findex -incoming
2918
Prepare for incoming migration, listen on @var{port}.
2919 2920
ETEXI

2921
DEF("nodefaults", 0, QEMU_OPTION_nodefaults, \
2922
    "-nodefaults     don't create default devices\n", QEMU_ARCH_ALL)
2923
STEXI
2924
@item -nodefaults
2925
@findex -nodefaults
2926 2927 2928 2929
Don't create default devices. Normally, QEMU sets the default devices like serial
port, parallel port, virtual console, monitor device, VGA adapter, floppy and
CD-ROM drive and others. The @code{-nodefaults} option will disable all those
default devices.
2930 2931
ETEXI

2932 2933
#ifndef _WIN32
DEF("chroot", HAS_ARG, QEMU_OPTION_chroot, \
2934 2935
    "-chroot dir     chroot to dir just before starting the VM\n",
    QEMU_ARCH_ALL)
2936 2937
#endif
STEXI
2938
@item -chroot @var{dir}
2939
@findex -chroot
2940 2941 2942 2943 2944 2945
Immediately before starting guest execution, chroot to the specified
directory.  Especially useful in combination with -runas.
ETEXI

#ifndef _WIN32
DEF("runas", HAS_ARG, QEMU_OPTION_runas, \
2946 2947
    "-runas user     change to user id user just before starting the VM\n",
    QEMU_ARCH_ALL)
2948 2949
#endif
STEXI
2950
@item -runas @var{user}
2951
@findex -runas
2952 2953 2954 2955 2956 2957
Immediately before starting guest execution, drop root privileges, switching
to the specified user.
ETEXI

DEF("prom-env", HAS_ARG, QEMU_OPTION_prom_env,
    "-prom-env variable=value\n"
2958 2959
    "                set OpenBIOS nvram variables\n",
    QEMU_ARCH_PPC | QEMU_ARCH_SPARC)
2960 2961
STEXI
@item -prom-env @var{variable}=@var{value}
2962
@findex -prom-env
2963 2964
Set OpenBIOS nvram @var{variable} to given @var{value} (PPC, SPARC only).
ETEXI
2965
DEF("semihosting", 0, QEMU_OPTION_semihosting,
M
Max Filippov 已提交
2966
    "-semihosting    semihosting mode\n", QEMU_ARCH_ARM | QEMU_ARCH_M68K | QEMU_ARCH_XTENSA)
2967 2968
STEXI
@item -semihosting
2969
@findex -semihosting
M
Max Filippov 已提交
2970
Semihosting mode (ARM, M68K, Xtensa only).
2971
ETEXI
2972
DEF("old-param", 0, QEMU_OPTION_old_param,
2973
    "-old-param      old param mode\n", QEMU_ARCH_ARM)
2974 2975
STEXI
@item -old-param
2976
@findex -old-param (ARM)
2977 2978 2979
Old param mode (ARM only).
ETEXI

2980 2981 2982 2983
DEF("sandbox", HAS_ARG, QEMU_OPTION_sandbox, \
    "-sandbox <arg>  Enable seccomp mode 2 system call filter (default 'off').\n",
    QEMU_ARCH_ALL)
STEXI
2984
@item -sandbox @var{arg}
2985 2986 2987 2988 2989
@findex -sandbox
Enable Seccomp mode 2 system call filter. 'on' will enable syscall filtering and 'off' will
disable it.  The default is 'off'.
ETEXI

2990
DEF("readconfig", HAS_ARG, QEMU_OPTION_readconfig,
2991
    "-readconfig <file>\n", QEMU_ARCH_ALL)
2992 2993
STEXI
@item -readconfig @var{file}
2994
@findex -readconfig
2995 2996 2997
Read device configuration from @var{file}. This approach is useful when you want to spawn
QEMU process with many command line options but you don't want to exceed the command line
character limit.
2998
ETEXI
2999 3000
DEF("writeconfig", HAS_ARG, QEMU_OPTION_writeconfig,
    "-writeconfig <file>\n"
3001
    "                read/write config file\n", QEMU_ARCH_ALL)
3002 3003
STEXI
@item -writeconfig @var{file}
3004
@findex -writeconfig
3005 3006 3007
Write device configuration to @var{file}. The @var{file} can be either filename to save
command line and device configuration into file or dash @code{-}) character to print the
output to stdout. This can be later used as input file for @code{-readconfig} option.
3008
ETEXI
3009 3010
DEF("nodefconfig", 0, QEMU_OPTION_nodefconfig,
    "-nodefconfig\n"
3011 3012
    "                do not load default config files at startup\n",
    QEMU_ARCH_ALL)
3013 3014
STEXI
@item -nodefconfig
3015
@findex -nodefconfig
3016 3017 3018 3019 3020 3021 3022 3023 3024 3025 3026 3027 3028
Normally QEMU loads configuration files from @var{sysconfdir} and @var{datadir} at startup.
The @code{-nodefconfig} option will prevent QEMU from loading any of those config files.
ETEXI
DEF("no-user-config", 0, QEMU_OPTION_nouserconfig,
    "-no-user-config\n"
    "                do not load user-provided config files at startup\n",
    QEMU_ARCH_ALL)
STEXI
@item -no-user-config
@findex -no-user-config
The @code{-no-user-config} option makes QEMU not load any of the user-provided
config files on @var{sysconfdir}, but won't make it skip the QEMU-provided config
files from @var{datadir}.
3029
ETEXI
3030
DEF("trace", HAS_ARG, QEMU_OPTION_trace,
3031 3032
    "-trace [events=<file>][,file=<file>]\n"
    "                specify tracing options\n",
3033 3034
    QEMU_ARCH_ALL)
STEXI
3035 3036 3037
HXCOMM This line is not accurate, as some sub-options are backend-specific but
HXCOMM HX does not support conditional compilation of text.
@item -trace [events=@var{file}][,file=@var{file}]
3038
@findex -trace
3039

3040 3041 3042 3043 3044 3045 3046
Specify tracing options.

@table @option
@item events=@var{file}
Immediately enable events listed in @var{file}.
The file must contain one event name (as listed in the @var{trace-events} file)
per line.
3047 3048
This option is only available if QEMU has been compiled with
either @var{simple} or @var{stderr} tracing backend.
3049 3050 3051
@item file=@var{file}
Log output traces to @var{file}.

3052 3053
This option is only available if QEMU has been compiled with
the @var{simple} tracing backend.
3054
@end table
3055
ETEXI
3056

3057 3058 3059
HXCOMM Internal use
DEF("qtest", HAS_ARG, QEMU_OPTION_qtest, "", QEMU_ARCH_ALL)
DEF("qtest-log", HAS_ARG, QEMU_OPTION_qtest_log, "", QEMU_ARCH_ALL)
A
Anthony Liguori 已提交
3060

3061 3062 3063 3064 3065 3066 3067 3068 3069 3070 3071
#ifdef __linux__
DEF("enable-fips", 0, QEMU_OPTION_enablefips,
    "-enable-fips    enable FIPS 140-2 compliance\n",
    QEMU_ARCH_ALL)
#endif
STEXI
@item -enable-fips
@findex -enable-fips
Enable FIPS 140-2 compliance mode.
ETEXI

J
Jan Kiszka 已提交
3072
HXCOMM Deprecated by -machine accel=tcg property
3073
DEF("no-kvm", 0, QEMU_OPTION_no_kvm, "", QEMU_ARCH_I386)
J
Jan Kiszka 已提交
3074

3075
HXCOMM Deprecated by kvm-pit driver properties
3076
DEF("no-kvm-pit-reinjection", 0, QEMU_OPTION_no_kvm_pit_reinjection,
3077 3078
    "", QEMU_ARCH_I386)

3079
HXCOMM Deprecated (ignored)
3080
DEF("no-kvm-pit", 0, QEMU_OPTION_no_kvm_pit, "", QEMU_ARCH_I386)
3081

3082
HXCOMM Deprecated by -machine kernel_irqchip=on|off property
3083
DEF("no-kvm-irqchip", 0, QEMU_OPTION_no_kvm_irqchip, "", QEMU_ARCH_I386)
3084

3085 3086 3087
HXCOMM Deprecated (ignored)
DEF("tdf", 0, QEMU_OPTION_tdf,"", QEMU_ARCH_ALL)

3088 3089 3090 3091 3092 3093 3094
DEF("object", HAS_ARG, QEMU_OPTION_object,
    "-object TYPENAME[,PROP1=VALUE1,...]\n"
    "                create an new object of type TYPENAME setting properties\n"
    "                in the order they are specified.  Note that the 'id'\n"
    "                property must be set.  These objects are placed in the\n"
    "                '/objects' path.\n",
    QEMU_ARCH_ALL)
3095 3096 3097 3098 3099 3100 3101 3102
STEXI
@item -object @var{typename}[,@var{prop1}=@var{value1},...]
@findex -object
Create an new object of type @var{typename} setting properties
in the order they are specified.  Note that the 'id'
property must be set.  These objects are placed in the
'/objects' path.
ETEXI
3103

S
Seiji Aguchi 已提交
3104 3105 3106 3107 3108 3109 3110 3111 3112 3113 3114
DEF("msg", HAS_ARG, QEMU_OPTION_msg,
    "-msg timestamp[=on|off]\n"
    "                change the format of messages\n"
    "                on|off controls leading timestamps (default:on)\n",
    QEMU_ARCH_ALL)
STEXI
@item -msg timestamp[=on|off]
@findex -msg
prepend a timestamp to each log message.(default:on)
ETEXI

3115 3116 3117 3118
HXCOMM This is the last statement. Insert new options before this line!
STEXI
@end table
ETEXI