First QEMU Users Forum

Transcription

1 Cooperative Computing & Communication Laboratory First QEMU Users Forum Alpexpo Grenoble, March 18 th 2011 Frédéric Pétrot & Wolfgang Mueller

2 What is QEMU? Open source library for hardware emulation and virtualization Fast CPU and device emulator based on dynamic binary translation Execution of SW binaries of a guest instruction set on host PC Development of drivers and application SW on host PC Debugging of guest binaries Development of SW tool chain for guest SW Different operation modes full system emulation user mode emulation KQEMU/KVM 2

3 QEMU History Open source project initiated by Fabrice Bellard First release v0.1.0 (2003) Current version v Development community (~3000 entries in mailing list) project Wiki / GIT quellcode repository 3

4 QEMU Emulation Modes Full System Emulation Execution of Application software programs Complete drivers and communication stack Operating system Memory Management Unit (MMU) CPU & devices Guest System Applications RT(OS) & Divers CPU, Memory & I/Os Host Process Full System Emulation User Mode Emulation Execution of a single application program (unprivileged instructions) System calls are redirected to host operating system Guest Process Application CPU (User Mode) Host Process User Mode Emulation 4

5 Operating Systems Host Operating Systems Linux BSD Mac OS X Windows+Cygwin Windows (llimited /older version) Guest Operating Systems Approx. 300 supported operating systems see 5

6 Guest CPUs Supported Guest Platforms x86 i386 ARM PowerPC Sparc32/Sparc64 MIPS ColdFire (m68k) Alpha ETRAX CRIS Microblaze SH4 S390x Information -cpu? : list of supported instruction sets -help : list of supported devices -M? : list of supported boards 6

7 Device Emulations Devices for x86 Emulation: Graphics card (Cirrus CLGD 5446 PCI VGA-card, Standard-VGA) Network card (RealTek + PCI Adapter) Sound cards Parallel port Serial interface PCI ATA interfaces PCI and ISA systems USB-Controller CD-ROM/DVD drive by ISO image Floppy disk Loudspeaker PS/2 mouse and keyboard 7

8 Binary Translation Instruction Mapping Micro Operations Guest Instructions Host Instructions Register and Memory Mapping 8

9 Dynamic Binary Translation Known PC? Fetch Decode Branch? Execute Microcode Instructions Code Generator Translation Cache [Adapted from: M. Gligor et al. - Using binary translation in event driven simulation for fast and flexible MPSoC simulation, CODES+ISSS 09, Grenoble, France] 9

10 Dynamic Binary Translation Known PC? Fetch Decode Branch? Execute Micro code Instructions Code Generator Translation Cache guest_instr_x [Adapted from: M. Gligor et al. - Using binary translation in event driven simulation for fast and flexible MPSoC simulation, CODES+ISSS 09, Grenoble, France] 10

11 Dynamic Binary Translation Known PC? Fetch Decode Branch? Execute Micro code Instructions Code Generator Translation Cache guest_instr_x micro_op1_x micro_op2_x [Adapted from: M. Gligor et al. - Using binary translation in event driven simulation for fast and flexible MPSoC simulation, CODES+ISSS 09, Grenoble, France] 11

12 Dynamic Binary Translation Known PC? Fetch Decode Branch? Execute Micro code Instructions Code Generator Translation Cache guest_instr_x micro_op1_x host_instr1_x host_instr2_x t host_instr3_x micro_op2_x host_instr4_x host instr5 X Trans slated Bl lock (TP )host_instr5_x [Adapted from: M. Gligor et al. - Using binary translation in event driven simulation for fast and flexible MPSoC simulation, CODES+ISSS 09, Grenoble, France] 12

13 Translation Cache Direct Block Chaining while { FindNextTB(PC) } Hash Table 0xd3ef 0xeffc 0xffcb Translation Cache 0xd3ef 0ffb 0xffcb 0xeffc qemu_set_irq () Translated Blocks 13

14 Copyrights and Licensing QEMU registered trademark of Fabrice Bellard QEMU in general: GNU Public License (GPL) libqemu.a: GNU Lesser Public License (LGPL) Parts of source code some devices : BSD License KQEMU kernel module GPL2 License 14

15 Research Outlook (1/2) Motivation Transaction- level models RTOS-aware refinement flow Conclusion Research outlook 15