1 |
<html> |
<html><head><title>Gavare's eXperimental Emulator: Experimenting with GXemul</title> |
2 |
<head><title>GXemul documentation: Experimenting with GXemul</title> |
<meta name="robots" content="noarchive,nofollow,noindex"></head> |
|
</head> |
|
3 |
<body bgcolor="#f8f8f8" text="#000000" link="#4040f0" vlink="#404040" alink="#ff0000"> |
<body bgcolor="#f8f8f8" text="#000000" link="#4040f0" vlink="#404040" alink="#ff0000"> |
4 |
<table border=0 width=100% bgcolor="#d0d0d0"><tr> |
<table border=0 width=100% bgcolor="#d0d0d0"><tr> |
5 |
<td width=100% align=center valign=center><table border=0 width=100%><tr> |
<td width=100% align=center valign=center><table border=0 width=100%><tr> |
6 |
<td align="left" valign=center bgcolor="#d0efff"><font color="#6060e0" size="6"> |
<td align="left" valign=center bgcolor="#d0efff"><font color="#6060e0" size="6"> |
7 |
<b>GXemul documentation:</b></font> |
<b>Gavare's eXperimental Emulator:</b></font><br> |
8 |
<font color="#000000" size="6"><b>Experimenting with GXemul</b> |
<font color="#000000" size="6"><b>Experimenting with GXemul</b> |
9 |
</font></td></tr></table></td></tr></table><p> |
</font></td></tr></table></td></tr></table><p> |
|
<!-- The first 10 lines are cut away by the homepage updating script. --> |
|
|
|
|
10 |
|
|
11 |
<!-- |
<!-- |
12 |
|
|
13 |
$Id: experiments.html,v 1.60 2005/04/16 00:29:45 debug Exp $ |
$Id: experiments.html,v 1.96 2006/02/18 13:15:20 debug Exp $ |
14 |
|
|
15 |
Copyright (C) 2003-2005 Anders Gavare. All rights reserved. |
Copyright (C) 2003-2006 Anders Gavare. All rights reserved. |
16 |
|
|
17 |
Redistribution and use in source and binary forms, with or without |
Redistribution and use in source and binary forms, with or without |
18 |
modification, are permitted provided that the following conditions are met: |
modification, are permitted provided that the following conditions are met: |
48 |
<ul> |
<ul> |
49 |
<li><a href="#hello">Hello world</a> |
<li><a href="#hello">Hello world</a> |
50 |
<li><a href="#expdevices">Experimental devices</a> |
<li><a href="#expdevices">Experimental devices</a> |
|
<li><a href="#experiments">Experiments with other kernels and guest OSes</a> |
|
51 |
</ul> |
</ul> |
52 |
|
|
53 |
|
|
70 |
</ul> |
</ul> |
71 |
|
|
72 |
<p> |
<p> |
|
The emulator has several modes where it doesn't emulate any real machine. |
|
|
It can either run in "bare" mode, where no devices are included by default |
|
|
(just the CPU), or in a "test" mode where some simple devices are |
|
|
emulated. |
|
|
|
|
|
<p> |
|
73 |
<table border="0"><tr><td width="40"> </td><td> |
<table border="0"><tr><td width="40"> </td><td> |
74 |
<pre> |
<pre> |
75 |
<font color=#f00000>/* Hello world for GXemul */ |
<font color=#f00000>/* Hello world for GXemul */ |
103 |
</font></pre> |
</font></pre> |
104 |
</td></tr></table> |
</td></tr></table> |
105 |
|
|
106 |
This hello world program is available here as well: |
<p>(This hello world program is available here as well: |
107 |
<a href="hello_mips.c">hello_mips.c</a> |
<a href="hello_mips.c"><tt>hello_mips.c</tt></a>) |
108 |
<p> |
|
109 |
I recommend that you build a GCC cross compiler for the |
<p>I recommend that you build a GCC cross compiler for the |
110 |
<b>mips64-unknown-elf</b> target, and install it. Other compilers could |
<b>mips64-unknown-elf</b> target, and install it. Other compilers could |
111 |
work too, but GCC is good because of its portability. Then try to compile |
work too, but GCC is good because of its portability. Then try to compile |
112 |
the hello world program: |
and link the hello world program: |
113 |
<pre> |
<pre> |
114 |
$ <b>mips64-unknown-elf-gcc -O2 hello_mips.c -mips4 -mabi=64 -c</b> |
$ <b>mips64-unknown-elf-gcc -O2 hello_mips.c -mips4 -mabi=64 -c</b> |
115 |
$ <b>mips64-unknown-elf-ld -Ttext 0xa800000000030000 -e f hello_mips.o -o hello_mips --oformat=elf64-bigmips</b> |
$ <b>mips64-unknown-elf-ld -Ttext 0xa800000000030000 -e f hello_mips.o -o hello_mips --oformat=elf64-bigmips</b> |
165 |
a800000000030038: 00021600 sll v0,v0,24 |
a800000000030038: 00021600 sll v0,v0,24 |
166 |
GXemul> <b>print v0</b> |
GXemul> <b>print v0</b> |
167 |
v0 = 0x0000000048000000 |
v0 = 0x0000000048000000 |
168 |
GXemul> <b><blink>_</blink></b> |
GXemul> <b>_</b> |
169 |
</pre> |
</pre> |
170 |
|
|
171 |
<p> |
<p>The syntax of the single-step debugger shouldn't be too hard to grasp. |
172 |
The syntax of the single-step debugger shouldn't be too hard to grasp. |
Type "<tt>s</tt>" to single-step one instruction. For some commands (e.g. |
173 |
Type 's' to single-step one instruction. Just pressing enter after that |
the single-step command), just pressing enter on a blank line will cause |
174 |
will repeat the 's' command. Type 'quit' to quit. |
the last command to be repeated. Type "<tt>quit</tt>" to quit. |
175 |
|
|
176 |
<p> |
<p> |
177 |
Hopefully this is enough to get you inspired. :-) |
Hopefully this is enough to get you inspired. :-) |
178 |
|
|
179 |
|
|
180 |
|
|
|
<p><br> |
|
|
<h4>Hello World for GXemul's PPC mode</h4> |
|
|
|
|
|
GXemul also has an experimental PowerPC emulation mode. |
|
|
<a href="hello_ppc.c">hello_ppc.c</a> is similar to hello_mips.c, but |
|
|
should be compiled and run as follows: |
|
|
<p> |
|
|
<pre> |
|
|
$ <b>ppc-unknown-elf-gcc -O2 hello_ppc.c -c</b> |
|
|
$ <b>ppc-unknown-elf-ld -e f hello_ppc.o -o hello_ppc</b> |
|
|
$ <b>file hello_ppc</b> |
|
|
hello_ppc: ELF 32-bit MSB executable, PowerPC or cisco 4500, |
|
|
version 1 (SYSV), statically linked, not stripped |
|
|
$ <b>gxemul -q -E testppc hello_ppc</b> |
|
|
Hello world |
|
|
</pre> |
|
|
|
|
|
<p> |
|
|
[ 2005-02-18: I haven't yet been able to build a GCC for ppc64 (only the |
|
|
binutils toolchain), because the gcc sources seem to include Linux header files |
|
|
that aren't present on my FreeBSD system. 32-bit PPC works ok, though. ] |
|
|
|
|
|
|
|
|
|
|
181 |
|
|
182 |
|
|
183 |
|
|
185 |
<a name="expdevices"></a> |
<a name="expdevices"></a> |
186 |
<h3>Experimental devices:</h3> |
<h3>Experimental devices:</h3> |
187 |
|
|
188 |
The "test" MIPS machine has the following experimental devices: |
The emulator has several modes where it doesn't emulate any real machine. |
189 |
|
It can either run in "bare" mode, where no devices are included by default |
190 |
|
(just the CPU), or in a "test" mode where some simple devices are |
191 |
|
emulated. |
192 |
|
|
193 |
|
<p>The test machines (<tt>testmips</tt>, <tt>testppc</tt>, etc) have the |
194 |
|
following experimental devices: |
195 |
|
|
196 |
<p> |
<p> |
197 |
<center><table border="0" width="80%"> |
<center><table border="0" width="80%"> |
198 |
|
|
199 |
<tr> |
<tr> |
200 |
<td align="left" valign="top" width="200"> |
<td align="left" valign="top" width="200"> |
201 |
<b>cons:</b> |
<a name="expdevices_cons"><b><tt>cons</tt>:</b></a> |
202 |
<p>This is a simple console device, for writing |
<p>A simple console device, for writing |
203 |
characters to the controlling terminal. |
characters to the controlling terminal |
204 |
<p>Source code: <font color="#0000f0">devices/dev_cons.c</font> |
and receiving keypresses. |
205 |
|
<p>Source code: <font color="#0000f0"><tt>src/devices/dev_cons.c</tt></font> |
206 |
<br>Default physical address:  <font color="#0000f0">0x10000000</font> |
<br>Default physical address:  <font color="#0000f0">0x10000000</font> |
207 |
</td> |
</td> |
208 |
<td align="left" valign="top" width="25"> </td> |
<td align="left" valign="top" width="25"> </td> |
213 |
<td align="left" valign="top"><i><u>Effect:</u></i></td> |
<td align="left" valign="top"><i><u>Effect:</u></i></td> |
214 |
</tr> |
</tr> |
215 |
<tr> |
<tr> |
216 |
<td align="left" valign="top">0x0000</td> |
<td align="left" valign="top"><tt>0x00</tt></td> |
217 |
<td align="left" valign="top"> |
<td align="left" valign="top"> |
218 |
Read: <b>getchar()</b> (non-blocking)<br> |
Read: <b><tt>getchar()</tt></b> (non-blocking; returns |
219 |
Write: <b>putchar(ch)</b></td> |
<tt>0</tt> if no char was available)<br> |
220 |
|
Write: <b><tt>putchar(ch)</tt></b></td> |
221 |
</tr> |
</tr> |
222 |
<tr> |
<tr> |
223 |
<td align="left" valign="top">0x0010</td> |
<td align="left" valign="top"><tt>0x10</tt></td> |
224 |
<td align="left" valign="top">Read or write: <b>halt()</b><br> |
<td align="left" valign="top">Read or write: <b><tt>halt()</tt></b><br> |
225 |
(Useful for exiting the emulator.)</td> |
(Useful for exiting the emulator.)</td> |
226 |
</tr> |
</tr> |
227 |
</table> |
</table> |
234 |
|
|
235 |
<tr> |
<tr> |
236 |
<td align="left" valign="top"> |
<td align="left" valign="top"> |
237 |
<b>mp:</b> |
<a name="expdevices_mp"><b><tt>mp</tt>:</b></a> |
238 |
<p>This device controls the behaviour of CPUs in an emulated |
<p>This device controls the behaviour of CPUs in an emulated |
239 |
multi-processor system. |
multi-processor system. |
240 |
<p>Source code: <font color="#0000f0">devices/dev_mp.c</font> |
<p>Source code: <font color="#0000f0"><tt>src/devices/dev_mp.c</tt></font> |
241 |
<br>Default physical address:  <font color="#0000f0">0x11000000</font> |
<br>Default physical address:  <font color="#0000f0">0x11000000</font> |
242 |
</td> |
</td> |
243 |
<td></td> |
<td></td> |
248 |
<td align="left" valign="top"><i><u>Effect:</u></i></td> |
<td align="left" valign="top"><i><u>Effect:</u></i></td> |
249 |
</tr> |
</tr> |
250 |
<tr> |
<tr> |
251 |
<td align="left" valign="top">0x0000</td> |
<td align="left" valign="top"><tt>0x0000</tt></td> |
252 |
<td align="left" valign="top">Read: <b>whoami()</b>. |
<td align="left" valign="top">Read: <b><tt>whoami()</tt></b>. |
253 |
Returns the id of the CPU doing the read.</td> |
Returns the id of the CPU doing the read.</td> |
254 |
</tr> |
</tr> |
255 |
<tr> |
<tr> |
256 |
<td align="left" valign="top">0x0010</td> |
<td align="left" valign="top"><tt>0x0010</tt></td> |
257 |
<td align="left" valign="top">Read: <b>ncpus()</b>. |
<td align="left" valign="top">Read: <b><tt>ncpus()</tt></b>. |
258 |
Returns the number of CPUs in the system.</td> |
Returns the number of CPUs in the system.</td> |
259 |
</tr> |
</tr> |
260 |
<tr> |
<tr> |
261 |
<td align="left" valign="top">0x0020</td> |
<td align="left" valign="top"><tt>0x0020</tt></td> |
262 |
<td align="left" valign="top">Write: <b>startupcpu(i)</b>. |
<td align="left" valign="top">Write: <b><tt>startupcpu(i)</tt></b>. |
263 |
Starts CPU i. It begins execution at the address |
Starts CPU i. It begins execution at the address |
264 |
set by a write to startupaddr (see below).</td> |
set by a write to startupaddr (see below).</td> |
265 |
</tr> |
</tr> |
266 |
<tr> |
<tr> |
267 |
<td align="left" valign="top">0x0030</td> |
<td align="left" valign="top"><tt>0x0030</tt></td> |
268 |
<td align="left" valign="top">Write: <b>startupaddr(addr)</b>. |
<td align="left" valign="top">Write: <b><tt>startupaddr(addr)</tt></b>. |
269 |
Sets the starting address for CPUs.</td> |
Sets the starting address for CPUs.</td> |
270 |
</tr> |
</tr> |
271 |
<tr> |
<tr> |
272 |
<td align="left" valign="top">0x0040</td> |
<td align="left" valign="top"><tt>0x0040</tt></td> |
273 |
<td align="left" valign="top">Write: <b>pause_addr(addr)</b>. |
<td align="left" valign="top">Write: <b><tt>pause_addr(addr)</tt></b>. |
274 |
Sets the pause address. (TODO: This is not |
Sets the pause address. (TODO: This is not |
275 |
used anymore?)</td> |
used anymore?)</td> |
276 |
</tr> |
</tr> |
277 |
<tr> |
<tr> |
278 |
<td align="left" valign="top">0x0050</td> |
<td align="left" valign="top"><tt>0x0050</tt></td> |
279 |
<td align="left" valign="top">Write: <b>pause_cpu(i)</b>. |
<td align="left" valign="top">Write: <b><tt>pause_cpu(i)</tt></b>. |
280 |
Stops all CPUs <i>except</i> CPU i.</td> |
Stops all CPUs <i>except</i> CPU i.</td> |
281 |
</tr> |
</tr> |
282 |
<tr> |
<tr> |
283 |
<td align="left" valign="top">0x0060</td> |
<td align="left" valign="top"><tt>0x0060</tt></td> |
284 |
<td align="left" valign="top">Write: <b>unpause_cpu(i)</b>. |
<td align="left" valign="top">Write: <b><tt>unpause_cpu(i)</tt></b>. |
285 |
Unpauses all CPUs <i>except</i> CPU i.</td> |
Unpauses all CPUs <i>except</i> CPU i.</td> |
286 |
</tr> |
</tr> |
287 |
<tr> |
<tr> |
288 |
<td align="left" valign="top">0x0070</td> |
<td align="left" valign="top"><tt>0x0070</tt></td> |
289 |
<td align="left" valign="top">Write: <b>startupstack(addr)</b>. |
<td align="left" valign="top">Write: <b><tt>startupstack(addr)</tt></b>. |
290 |
Sets the startup stack address. (CPUs started with |
Sets the startup stack address. (CPUs started with |
291 |
startupcpu() above will have their stack pointer |
startupcpu() above will have their stack pointer |
292 |
set to this value.)</td> |
set to this value.)</td> |
293 |
</tr> |
</tr> |
294 |
<tr> |
<tr> |
295 |
<td align="left" valign="top">0x0080</td> |
<td align="left" valign="top"><tt>0x0080</tt></td> |
296 |
<td align="left" valign="top">Read: <b>hardware_random()</b>. |
<td align="left" valign="top">Read: <b><tt>hardware_random()</tt></b>. |
297 |
This produces a "random" number.</td> |
This produces a "random" number.</td> |
298 |
</tr> |
</tr> |
299 |
<tr> |
<tr> |
300 |
<td align="left" valign="top">0x0090</td> |
<td align="left" valign="top"><tt>0x0090</tt></td> |
301 |
<td align="left" valign="top">Read: <b>memory()</b>. |
<td align="left" valign="top">Read: <b><tt>memory()</tt></b>. |
302 |
Returns the number of bytes of RAM in the system.</td> |
Returns the number of bytes of RAM in the system.</td> |
303 |
</tr> |
</tr> |
304 |
|
<tr> |
305 |
|
<td align="left" valign="top"><tt>0x00a0</tt></td> |
306 |
|
<td align="left" valign="top">Write: <b><tt>ipi_one((nr << 16) + cpuid)</tt></b>. |
307 |
|
Sends IPI <tt>nr</tt> to a specific CPU.</td> |
308 |
|
</tr> |
309 |
|
<tr> |
310 |
|
<td align="left" valign="top"><tt>0x00b0</tt></td> |
311 |
|
<td align="left" valign="top">Write: <b><tt>ipi_many((nr << 16) + cpuid)</tt></b>. |
312 |
|
Sends IPI <tt>nr</tt> to all CPUs <i>except</i> |
313 |
|
the specified one.</td> |
314 |
|
</tr> |
315 |
|
<tr> |
316 |
|
<td align="left" valign="top">0x00c0</tt></td> |
317 |
|
<td align="left" valign="top">Read: <b><tt>ipi_read()</tt></b>. |
318 |
|
Returns the next pending IPI. 0 is returned if there is no |
319 |
|
pending IPI (so 0 shouldn't be used for valid IPIs). |
320 |
|
Hardware int 6 is deasserted when the IPI queue is empty. |
321 |
|
<br>Write: <b><tt>ipi_flush()</tt></b>. |
322 |
|
Clears the IPI queue, discarding any pending IPIs.</td> |
323 |
|
</tr> |
324 |
|
<tr> |
325 |
|
<td align="left" valign="top">0x00d0</tt></td> |
326 |
|
<td align="left" valign="top">Read: <b><tt>ncycles()</tt></b>. |
327 |
|
Returns approximately the number of cycles executed. |
328 |
|
Note: this value is not updated for every instruction, |
329 |
|
so it cannot be used for small measurements.</td> |
330 |
|
</tr> |
331 |
</table> |
</table> |
332 |
</td> |
</td> |
333 |
</tr> |
</tr> |
338 |
|
|
339 |
<tr> |
<tr> |
340 |
<td align="left" valign="top"> |
<td align="left" valign="top"> |
341 |
<b>fb:</b> |
<a name="expdevices_fb"><b><tt>fb</tt>:</b></a> |
342 |
<p>A simple linear framebuffer, for graphics output. |
<p>A simple linear framebuffer, for graphics output. |
343 |
640 x 480 pixels, 3 bytes per pixel (red, green, blue, 8 bits each). |
640 x 480 pixels, 3 bytes per pixel (red, green, blue, 8 bits each). |
344 |
<p>Source code: <font color="#0000f0">devices/dev_fb.c</font> |
<p>Source code: <font color="#0000f0"><tt>src/devices/dev_fb.c</tt></font> |
345 |
<br>Default physical address:  <font color="#0000f0">0x12000000</font> |
<br>Default physical address:  <font color="#0000f0">0x12000000</font> |
346 |
</td> |
</td> |
347 |
<td></td> |
<td></td> |
352 |
<td align="left" valign="top"><i><u>Effect:</u></i></td> |
<td align="left" valign="top"><i><u>Effect:</u></i></td> |
353 |
</tr> |
</tr> |
354 |
<tr> |
<tr> |
355 |
<td align="left" valign="top">...</td> |
<td align="left" valign="top"><tt>0x00000-</tt><br><tt>0xe0fff</tt></td> |
356 |
<td align="left" valign="top">Read: read pixel values. |
<td align="left" valign="top">Read: read pixel values. |
357 |
<br>Write: write pixel values.</td> |
<br>Write: write pixel values.</td> |
358 |
</tr> |
</tr> |
360 |
</td> |
</td> |
361 |
</tr> |
</tr> |
362 |
|
|
363 |
</table></center> |
<tr height="15"> |
364 |
|
<td height="15"> </td> |
365 |
<p> |
</tr> |
|
While these devices may resemble real-world hardware, they are |
|
|
intentionally made simpler to use. (An exception is the framebuffer; |
|
|
some machines actually have simple linear framebuffers like this.) |
|
|
|
|
|
<p> |
|
|
If the physical address is 0x10000000, then for MIPS that means that it |
|
|
can be accessed at virtual address 0xffffffffb0000000. (Actually it can be |
|
|
accessed at 0xffffffff90000000 too, but devices should usually be accessed |
|
|
in a non-cached manner.) |
|
|
|
|
|
<p> |
|
|
(When using the PPC test machine, "testppc", the addresses are |
|
|
0x10000000, 0x11000000 etc., so no need to add any virtual displacement.) |
|
|
|
|
|
<p> |
|
|
The <b>mp</b> device is agnostic when it comes to |
|
|
word-length. For example, when reading offset 0x0000 of the <b>mp</b> |
|
|
device, you may use any kind of read (an 8-bit read will work just as well |
|
|
as a 64-bit read, although the value will be truncated to 8 bits in the |
|
|
first case). |
|
|
|
|
|
<p> |
|
|
The <b>cons</b> device should be accessed using 8-bit reads and writes. |
|
|
Doing a getchar() (ie reading from offset 0x0000) returns 0x00 if no |
|
|
character was available. |
|
|
|
|
|
<p> |
|
|
On MIPS, the <b>cons</b> device is hardwired to interrupt 2 (the lowest |
|
|
hardware interrupt). Whenever a character is available, the interrupt is |
|
|
asserted. When there are no more available characters, the interrupt is |
|
|
deasserted. (Remember that the interrupt has to be enabled in the status |
|
|
register of the system coprocessor.) |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<p><br> |
|
|
<a name="experiments"></a> |
|
|
<h3>Experiments with other kernels and guest OSes:</h3> |
|
|
|
|
|
<p> |
|
|
Operating system kernels and other test programs can be downloaded from |
|
|
various places. Here are links to some of the kernels that I usually |
|
|
experiment with. |
|
|
|
|
|
<p> |
|
|
<font color="#ff0000"> |
|
|
NOTE: This is <i>not</i> a list of kernels that work in the emulator. |
|
|
It is a list of kernels that I experiment with. |
|
|
</font> |
|
|
|
|
|
<p> |
|
|
For more information about which of these that actually work, read the |
|
|
<a href="intro.html#guestos">section in the Introduction chapter</a> |
|
|
that lists guest operating systems. If a system is not listed there, it |
|
|
probably doesn't work in GXemul. |
|
|
|
|
|
<p> |
|
|
<ul> |
|
|
<li>DECstation: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/pmax/">NetBSD/pmax</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmax/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmax/binary/kernel/netbsd-INSTALL.gz</a> |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmax/binary/kernel/netbsd-INSTALL.symbols.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmax/binary/kernel/netbsd-INSTALL.symbols.gz</a> |
|
|
<br>gunzip the files, and run the emulator with <b>-E dec -e 3max -q -N -XY2</b> |
|
|
for a graphical framebuffer console. Remove <b>-XY2</b> and <b>-N</b> to use serial (stdin/stdout) console. |
|
|
Read <a href="guestoses.html#netbsdinstall">this section</a> about how to install NetBSD/pmax onto a harddisk image. |
|
|
<p> |
|
|
<li><a href="http://www.openbsd.org/pmax.html">OpenBSD/pmax</a>: |
|
|
<br><a href="ftp://ftp.se.openbsd.org/pub/OpenBSD/2.8/pmax/bsd">ftp://ftp.se.openbsd.org/pub/OpenBSD/2.8/pmax/bsd</a> |
|
|
<br>This is an old OpenBSD kernel in a.out format. Try <b>-E dec -e 3max</b>. |
|
|
<br>Read <a href="guestoses.html#openbsdinstall">this section</a> about how to install OpenBSD/pmax onto a harddisk image. |
|
|
It's a bit more complicated than installing NetBSD/pmax, but might work. |
|
|
<p> |
|
|
<li>Linux for DECstation: |
|
|
<br>Here is a Debian package containing a Linux 2.4.26 kernel for |
|
|
DECstation which supports framebuffer! |
|
|
<br><a href="http://ftp.debian.org/debian/pool/main/k/kernel-patch-2.4.26-mips/kernel-image-2.4.26-r3k-kn02_2.4.26-0.040505.1_mipsel.deb">http://ftp.debian.org/debian/pool/main/k/kernel-patch-2.4.26-mips/ |
|
|
<br>kernel-image-2.4.26-r3k-kn02_2.4.26-0.040505.1_mipsel.deb</a> |
|
|
<br>Run the following commands to extract the kernel:<pre> |
|
|
<b>ar x kernel-image-2.4.26-r3k-kn02_2.4.26-0.040505.1_mipsel.deb data.tar.gz</b> |
|
|
<b>tar xfzv data.tar.gz ./boot/vmlinux-2.4.26-r3k-kn02</b> |
|
|
<b>mv boot/vmlinux-* .; rmdir boot</b> |
|
|
</pre> |
|
|
<br>To try with the framebuffer: <b>-E dec -e 3max -X vmlinux-2.4.26-r3k-kn02</b> |
|
|
<br>To try with serial console: <b>-E dec -e 3max -o 'console=ttyS3' vmlinux-2.4.26-r3k-kn02</b> |
|
|
<br>Read <a href="guestoses.html#declinux">this section</a> about how to run a Debian Linux install kernel. |
|
|
<br>Here are some older kernels (these don't support framebuffer, I think): |
|
|
<a href="http://www.xs4all.nl/~vhouten/mipsel/kernels.html">http://www.xs4all.nl/~vhouten/mipsel/kernels.html</a> |
|
|
<br>Note: Make sure you add <b>-CR4400</b> to the command line for |
|
|
R4000 kernels, as Linux doesn't autodetect CPU type at runtime. |
|
|
<p> |
|
|
<li>Sprite: |
|
|
<br>The Unix Heritage Society (TUHS, <a href="http://www.tuhs.org">www.tuhs.org</a>) |
|
|
has preserved a copy of a harddisk image for a DECstation 5000/200: |
|
|
<a href="http://www.es.embnet.org/Services/ftp/misc/TUHS/other_os/Sprite/">http://www.es.embnet.org/Services/ftp/misc/TUHS/other_os/Sprite</a>/<a href="http://www.es.embnet.org/Services/ftp/misc/TUHS/other_os/Sprite/ds5000.bt">ds5000.bt</a> |
|
|
<br>(MD5 (ds5000.bt) = ec84eeeb20fe77b758370d5e312e4a5e) |
|
|
<br>Read <a href="guestoses.html#sprite">this section</a> for more information |
|
|
about running this harddisk image in the emulator. |
|
|
<p> |
|
|
<li><a href="http://www-2.cs.cmu.edu/afs/cs/project/mach/public/www/mach.html">Mach</a>: |
|
|
<br>Important! Run <b>./configure --caches; make</b> |
|
|
<br>Download <a href="http://lost-contact.mit.edu/afs/athena/user/d/a/daveg/Info/Links/Mach/src/release/">http://lost-contact.mit.edu/afs/athena/user/d/a/daveg/Info/Links/Mach/src/release</a>/<a href="http://lost-contact.mit.edu/afs/athena/user/d/a/daveg/Info/Links/Mach/src/release/pmax.tar.Z">pmax.tar.Z</a> |
|
|
<br>tar xfvz pmax.tar.Z pmax_mach/special/mach.boot.MK83.STD+ANY |
|
|
<br><b>gxemul -E dec -e 3max -X pmax_mach/special/mach.boot.MK83.STD+ANY</b> |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>SGI: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/sgimips/">NetBSD/sgimips</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP3x.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP3x.gz</a> |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP3x.symbols.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP3x.symbols.gz</a> |
|
|
<br>gunzip, and try running with <b>-E sgi -e ip32</b>. |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP2x.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP2x.gz</a> |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP2x.symbols.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP2x.symbols.gz</a> |
|
|
<br>gunzip, and try running with <b>-E sgi -e ip22</b> (or <b>-e ip24</b> or <b>-e ip20</b>). |
|
|
<p> |
|
|
<li>Linux/SGI: |
|
|
<br>Some kernels are available here: <a href="http://www.linux-mips.org/~glaurung/">http://www.linux-mips.org/~glaurung/</a> |
|
|
<br>Try running with <b>-E sgi -e ip32 -X</b> for a graphical framebuffer, or |
|
|
<b>-E sgi -e ip32 -o 'console=ttyS0'</b> for serial console. |
|
|
<br>Adding -b (bintrans) might work sometimes. |
|
|
<br>(You need to add <b>-CR5000</b> if you're trying to run |
|
|
a kernel compiled for R5000, because Linux |
|
|
doesn't autodetect CPU at runtime.) |
|
|
<br>Also: <a href="http://www.tal.org/~milang/o2/kernels/">http://www.tal.org/~milang/o2/kernels</a>/<a href="http://home.tal.org/~milang/o2/kernels/vmlinux64-2.6.8.1-IP32">vmlinux64-2.6.8.1-IP32</a> |
|
|
<br>Try <b>-E sgi -e ip32 -b -X -CR5000 vmlinux64-2.6.8.1-IP32</b>. |
|
|
<br>And also some IP27 kernels: |
|
|
<a href="http://www.total-knowledge.com/progs/mips/kernels/vmlinux.ip27-20040428">http://www.total-knowledge.com/progs/mips/kernels/vmlinux.ip27-20040428</a> |
|
|
and |
|
|
<a href="http://www.total-knowledge.com/progs/mips/kernels/vmlinux.ip27-20040528.bz2">http://www.total-knowledge.com/progs/mips/kernels/vmlinux.ip27-20040528.bz2</a> |
|
|
(but unfortunately these lack symbols). |
|
|
<br>Try the IP27 kernels with <b>-E sgi -e ip27 -t</b>. |
|
|
<p> |
|
|
<li><a href="http://www.openbsd.org/sgi.html">OpenBSD/sgi</a>: |
|
|
<br>Snapshots can be found at <a href="ftp://ftp.OpenBSD.org/pub/OpenBSD/snapshots/sgi/">ftp://ftp.OpenBSD.org/pub/OpenBSD/snapshots/sgi/</a>. |
|
|
<br>Try <b>gxemul -b -E sgi -e ip32 bsd.rd</b> |
|
|
<p> |
|
|
<li><a href="http://www.freebsd.org/platforms/mips.html">FreeBSD/MIPS</a>: |
|
|
I don't think public binary snapshots are available yet. |
|
|
<p> |
|
|
<li>arcdiag: |
|
|
<br>The NetBSD people have also made available an "arcdiag" for SGI-IP22: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/arch/sgimips/arcdiag.ip22">ftp://ftp.netbsd.org/pub/NetBSD/arch/sgimips/arcdiag.ip22</a> |
|
|
<br>Try running <b>gxemul -E sgi -e ip22 -x arcdiag.ip22</b>. |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>ARC: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/arc/">NetBSD/arc</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/arc/binary/kernel/netbsd-RAMDISK.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/arc/binary/kernel/netbsd-RAMDISK.gz</a> |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/arc/binary/kernel/netbsd-RAMDISK.symbols.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/arc/binary/kernel/netbsd-RAMDISK.symbols.gz</a> |
|
|
<br>gunzip, and try with <b>-E arc -e rd94</b>. |
|
|
<br>(You may also try other ARC models.) |
|
|
<br>Read <a href="guestoses.html#netbsdarcinstall">this section</a> about how |
|
|
to install NetBSD/arc onto a harddisk image. |
|
|
<p> |
|
|
<li><a href="http://www.openbsd.org/arc.html">OpenBSD/arc</a>: |
|
|
<br><a href="ftp://ftp.se.openbsd.org/pub/OpenBSD/2.3/arc/bsd.rd.elf">ftp://ftp.se.openbsd.org/pub/OpenBSD/2.3/arc/bsd.rd.elf</a> |
|
|
<br>Try running with <b>-X -E arc -e pica</b> or <b>-X -E arc -e tyne</b>. |
|
|
<br>Read <a href="guestoses.html#openbsdarcinstall">this section</a> about how |
|
|
to install OpenBSD/arc onto a harddisk image. |
|
|
<p> |
|
|
<li>Linux: |
|
|
<br><a href="ftp://ftp.linux-mips.org/pub/linux/mips/mipsel-linux/boot/vmlinux-m700-2.1.131.gz">ftp://ftp.linux-mips.org/pub/linux/mips/mipsel-linux/boot/vmlinux-m700-2.1.131.gz</a> |
|
|
<br>gunzip, and run with <b>-v -J -X -N -E arc -e m700</b> (Olivetti M700) |
|
|
<p> |
|
|
<li>Pandora: |
|
|
<br><a href="ftp://ftp.linux-mips.org/pub/linux/mips/ancient/milo/">ftp://ftp.linux-mips.org/pub/linux/mips/ancient/milo</a>/<a href="ftp://ftp.linux-mips.org/pub/linux/mips/ancient/milo/milo-0.27.1.tar.gz">milo-0.27.1.tar.gz</a> |
|
|
<br>A generic test/diagnostics program for ARC-based machines. |
|
|
<br>Run with <b>-E arc -e r94 milo-0.27.1/pandora</b> |
|
|
<p> |
|
|
<li>arcdiag: |
|
|
<br>Precompiled binary:<a href="ftp://ftp.netbsd.org/pub/NetBSD/arch/arc/arcdiag">ftp://ftp.netbsd.org/pub/NetBSD/arch/arc/arcdiag</a> |
|
|
<br>(alternative: <a href="http://www.sensi.org/~alec/mips/arcdiag">http://www.sensi.org/~alec/mips/arcdiag</a>) |
|
|
<br>A generic test/diagnostics program for ARC-based machines. |
|
|
<br>Run with <b>-E arc -e pica arcdiag</b> (or some other ARC mode). |
|
|
<br>Example arcdiag output (from real machines): |
|
|
<br><a href="http://mail-index.netbsd.org/port-arc/2000/10/18/0001.html">http://mail-index.netbsd.org/port-arc/2000/10/18/0001.html</a> (Olivetti M700-10) |
|
|
<br><a href="http://www.sensi.org/~alec/mips/arcdiag.txt">http://www.sensi.org/~alec/mips/arcdiag.txt</a> (PICA-61) |
|
|
<br><a href="http://mail-index.netbsd.org/port-arc/2000/10/14/0000.html">http://mail-index.netbsd.org/port-arc/2000/10/14/0000.html</a> (Deskstation Tyne) |
|
|
<br><a href="http://mail-index.netbsd.org/port-arc/2004/02/01/0001.html">http://mail-index.netbsd.org/port-arc/2004/02/01/0001.html</a> (NEC RISCserver 4200) |
|
|
<br><a href="http://mirror.aarnet.edu.au/pub/NetBSD/misc/chs/arcdiag.out">http://mirror.aarnet.edu.au/pub/NetBSD/misc/chs/arcdiag.out</a> (NEC-R96) |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>HPCmips: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/hpcmips/">NetBSD/hpcmips</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/hpcmips/installation/">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/hpcmips/installation</a>/<a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/hpcmips/installation/netbsd.gz">netbsd.gz</a> |
|
|
<br>Try <b>gxemul -X -b -E hpc -e mobilepro770 netbsd</b> |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/hpcmips/binary/kernel/netbsd-GENERIC.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/hpcmips/binary/kernel/netbsd-GENERIC.gz</a> |
|
|
<br>Try <b>gxemul -X -b -E hpc -e mobilepro770 netbsd-GENERIC</b> |
|
|
<p> |
|
|
<li>Linux for BE300: |
|
|
<br><a href="http://www.linux4.be/2004/linux4be20040908.zip">http://www.linux4.be/2004/linux4be20040908.zip</a> |
|
|
<br>Try <b>gxemul -X -b -E hpc -e be300 vmlinux</b> |
|
|
<p> |
|
|
<li>Linux for Agenda VR3: |
|
|
<br>Download <a href="http://agenda-snow.sourceforge.net/kernel-old-versions/binary/">http://agenda-snow.sourceforge.net/kernel-old-versions/binary</a>/<a href="http://agenda-snow.sourceforge.net/kernel-old-versions/binary/root1.2.6.kernel-8.00">root1.2.6.kernel-8.00</a> |
|
|
<br>and <a href="http://vr3.uid0.sk/cd/Software/VR3_Distributions/H2O/">http://vr3.uid0.sk/cd/Software/VR3_Distributions/H2O</a>/<a href="http://vr3.uid0.sk/cd/Software/VR3_Distributions/H2O/root1.2.6.cramfs">root1.2.6.cramfs</a>. |
|
|
<br>(or <a href="http://www.ipsec.info/~www/agenda/dream-1-noxip.cramfs">http://www.ipsec.info/~www/agenda/dream-1-noxip.cramfs</a>) |
|
|
<br>Try <b>gxemul -b -X -E hpc -e vr3 -x 0xbf200000:root1.2.6.cramfs 0xbf000000:0:0xbf0005e0:root1.2.6.kernel-8.00</b> |
|
|
<br>(or replace root1.2.6.cramfs with dream-1-noxip.cramfs) |
|
|
<br>Remove <b>-X</b> to try with serial console instead of X, and |
|
|
remove <b>-b</b> to try without (old) bintrans. |
|
|
<br>Add <b>-o 'init=/bin/sh'</b> to boot into a single-user shell. |
|
|
<br>Add <b>-o 'init=/sbin/restore_defaults'</b> to run |
|
|
a /sbin/restore_defaults (attempt to initialize the flash |
|
|
memory). |
|
|
<p> |
|
|
<li>Linux for MobilePro etc.: |
|
|
<br><a href="http://pc1.peanuts.gr.jp/~kei/Hard-Float/Kernels/">http://pc1.peanuts.gr.jp/~kei/Hard-Float/Kernels/</a> |
|
|
<br>Uncompress the archive to get a kernel, vmlinux-800 for example. |
|
|
<br>Try <b>./gxemul -b -X -o 'root=/dev/hda1' -d r:disk.img -d r:disk.img -Ehpc -e mobilepro800 vmlinux-800</b> |
|
|
<br>where disk.img is an ext2fs filesystem with contents from |
|
|
<a href="http://pc1.peanuts.gr.jp/~kei/Hard-Float/Miniroots/miniroot-20010330.tar.bz2">http://pc1.peanuts.gr.jp/~kei/Hard-Float/Miniroots/miniroot-20010330.tar.bz2</a> |
|
|
<br>(Note the double disk arguments.) |
|
|
<br>Note 2: This doesn't work yet. |
|
|
<p> |
|
|
<li><a href="http://www.disorder.ru/openbsd/be300/">OpenBSD/be300</a>: |
|
|
<br><a href="http://www.disorder.ru/openbsd/be300/bsd.rd">http://www.disorder.ru/openbsd/be300/bsd.rd</a> |
|
|
<br>Try <b>gxemul -X -b -E hpc -e be300 bsd.rd</b> |
|
|
<br>Note: -b might be buggy, so you can try without that if you want to. |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>Playstation 2: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/playstation2/">NetBSD/playstation2</a>: |
|
|
<br>NetBSD/playstation2 snapshot kernels are available here: (RAMDISK and GENERIC) |
|
|
<br><a href="ftp://ftp.NetBSD.org/pub/NetBSD/arch/playstation2/snapshot/20020327/installation/netbsd.gz">ftp://ftp.NetBSD.org/pub/NetBSD/arch/playstation2/snapshot/20020327/installation/netbsd.gz</a> |
|
|
<br><a href="ftp://ftp.NetBSD.org/pub/NetBSD/arch/playstation2/snapshot/20020327/binary/kernel/netbsd-GENERIC.gz">ftp://ftp.NetBSD.org/pub/NetBSD/arch/playstation2/snapshot/20020327/binary/kernel/netbsd-GENERIC.gz</a> |
|
|
<br>Try running with <b>-X -E playstation2</b> (<b>-X</b> is required, for the framebuffer). |
|
|
|
|
|
<p> |
|
|
<li>Linux: |
|
|
<br>A Linux kernel (2.2.21-pre1-xr7) is available from |
|
|
<a href="http://playstation2-linux.com/projects/xrhino-kernel/">http://playstation2-linux.com/projects/xrhino-kernel/</a> |
|
|
<br>Try running with <b>-X -E playstation2</b> (<b>-X</b> is required, for the framebuffer). |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
</ul> |
|
|
|
|
|
<p> |
|
|
The following work even less than the ones listed above: |
|
|
|
|
|
<p> |
|
|
<ul> |
|
|
<li>Cobalt: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/cobalt/">NetBSD/cobalt</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-1.6.2/cobalt/binary/kernel/netbsd-GENERIC.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-1.6.2/cobalt/binary/kernel/netbsd-GENERIC.gz</a> |
|
|
<br>gunzip, and run with <b>-E cobalt</b> |
|
|
<p> |
|
|
<li>Linux: |
|
|
<br><a href="http://people.debian.org/~pm/mips-cobalt/nfsroot/vmlinux_raq-2800.gz">http://people.debian.org/~pm/mips-cobalt/nfsroot/vmlinux_raq-2800.gz</a> |
|
|
<br>gunzip, and run with <b>-E cobalt</b> |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>Sony NeWS: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/newsmips/">NetBSD/newsmips</a>: |
|
|
<br>A NetBSD/newsmips kernel and corresponding symbols are |
|
|
available here: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/newsmips/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/newsmips/binary/kernel/netbsd-INSTALL.gz</a> |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/newsmips/binary/kernel/netbsd-INSTALL.symbols.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/newsmips/binary/kernel/netbsd-INSTALL.symbols.gz</a> |
|
|
<br>Try running with <b>-E sonynews</b>. |
|
|
<br>There's also a boot floppy available, but the emulator currently |
|
|
doesn't support booting from it: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-1.6/newsmips/installation/floppy/boot.fs">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-1.6/newsmips/installation/floppy/boot.fs</a> |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li><a href="http://www.meshcube.org/">MeshCube</a>: |
|
|
<ul> |
|
|
<li>Linux: |
|
|
<br>A Linux kernel is available from |
|
|
<a href="http://www.meshcube.org/feed/stable/">http://www.meshcube.org/feed/stable</a>/<a href="http://www.meshcube.org/feed/stable/kernel-image-mtx_2.4.24-3_mipsel.ipk">kernel-image-mtx_2.4.24-3_mipsel.ipk</a> |
|
|
<br>(This is a Debian package, you can use <b>ar</b> and <b>tar</b> |
|
|
to extract kernel.img from it.) |
|
|
<br>Try running with <b>-E meshcube 0x80800000:kernel.img</b>. |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li><a href="http://www.seattlewireless.net/index.cgi/NetgearWG602">NetGear WG602</a>: |
|
|
<ul> |
|
|
<li>Linux: |
|
|
<br>A Linux kernel is available from |
|
|
<a href="ftp://downloads.netgear.com/files/wg602_v1715.zip">ftp://downloads.netgear.com/files/wg602_v1715.zip</a> |
|
|
<br>(Unzip wg602_v1715.zip to get WG602_V1715.img.) |
|
|
<br>Try running with <b>-E netgear 0xbfc80000:0x40:WG602_V1715.img</b>. |
|
|
<br>(It takes some time to decompress the kernel, so be patient.) |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>Linksys WRT54G: |
|
|
<ul> |
|
|
<li>Linux: |
|
|
<br><a href="http://openwrt.org/">OpenWRT</a> is a Linux |
|
|
distribution for the WRT54G. |
|
|
<br><a href="http://www.batbox.org/wrt54g-linux.html">BatBox</a> |
|
|
is another distribution. |
|
|
<br>Download <a href="http://pjf.dotgeek.org/downloads/openwrt/openwrt-g-code.bin">http://pjf.dotgeek.org/downloads/openwrt/openwrt-g-code.bin</a> |
|
|
(or a similar .bin file). |
|
|
<br>From offset 60 and forward in the bin file, there is a gzip file. |
|
|
<br>$ <b>dd if=openwrt-g-code.bin of=piggy.gz bs=60 iseek=1 oseek=0</b> |
|
|
<br>$ <b>gunzip piggy.gz</b> |
|
|
<br>$ <b>gxemul -E linksys -t 0x80001000:piggy</b> |
|
|
<br>There's also a .bin file available from linksys: |
|
|
<a href="ftp://ftp.linksys.com/pub/network/WRT54G_1.30.7_US_code.bin">ftp://ftp.linksys.com/pub/network/WRT54G_1.30.7_US_code.bin</a> |
|
|
</ul> |
|
|
</li> |
|
|
</ul> |
|
366 |
|
|
367 |
<p> |
<tr> |
368 |
The following don't work at all, actually, because the PPC and SPARC |
<td align="left" valign="top"> |
369 |
modes are just skeletons so far. |
<a name="expdevices_disk"><b><tt>disk</tt>:</b></a> |
370 |
|
<p>Disk controller, which can read from and write |
371 |
|
to disk images. It does not use interrupts; read and |
372 |
|
write operations finish instantaneously. |
373 |
|
<p>Source code: <font color="#0000f0"><tt>src/devices/dev_disk.c</tt></font> |
374 |
|
<br>Default physical address:  <font color="#0000f0">0x13000000</font> |
375 |
|
</td> |
376 |
|
<td></td> |
377 |
|
<td align="left" valign="top"> |
378 |
|
<table border="0"> |
379 |
|
<tr> |
380 |
|
<td align="left" valign="top"><i><u>Offset:</u></i> </td> |
381 |
|
<td align="left" valign="top"><i><u>Effect:</u></i></td> |
382 |
|
</tr> |
383 |
|
<tr> |
384 |
|
<td align="left" valign="top"><tt>0x0000</tt></td> |
385 |
|
<td align="left" valign="top">Write: Set the offset (in bytes) from the beginning |
386 |
|
of the disk image. This offset will be used for the next read/write operation.</td> |
387 |
|
</tr> |
388 |
|
<tr> |
389 |
|
<td align="left" valign="top"><tt>0x0010</tt></td> |
390 |
|
<td align="left" valign="top">Write: Select the SCSI ID to be used in the next |
391 |
|
read/write operation.</td> |
392 |
|
</tr> |
393 |
|
<tr> |
394 |
|
<td align="left" valign="top"><tt>0x0020</tt></td> |
395 |
|
<td align="left" valign="top">Write: Start a read or write operation. |
396 |
|
(Writing <tt>0</tt> means a Read operation, a <tt>1</tt> means a |
397 |
|
Write operation.)</td> |
398 |
|
</tr> |
399 |
|
<tr> |
400 |
|
<td align="left" valign="top"><tt>0x0030</tt></td> |
401 |
|
<td align="left" valign="top">Read: Get status of the last operation. |
402 |
|
(Status 0 means failure, non-zero means success.)</td> |
403 |
|
</tr> |
404 |
|
<tr> |
405 |
|
<td align="left" valign="top"><tt>0x4000-</tt><br><tt>0x41ff</tt> </td> |
406 |
|
<td align="left" valign="top">Read/Write: 512 bytes data buffer.</td> |
407 |
|
</tr> |
408 |
|
</table> |
409 |
|
</td> |
410 |
|
</tr> |
411 |
|
|
412 |
<p> |
<tr height="15"> |
413 |
<ul> |
<td height="15"> </td> |
414 |
|
</tr> |
415 |
|
|
416 |
<li>Walnut (evbppc): |
<tr> |
417 |
<ul> |
<td align="left" valign="top"> |
418 |
<li><a href="http://www.netbsd.org/Ports/evbppc/">NetBSD/evbppc</a>: |
<a name="expdevices_ether"><b><tt>ether</tt>:</b></a> |
419 |
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/evbppc/binary/kernel/netbsd-INSTALL_WALNUT.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/evbppc/binary/kernel/netbsd-INSTALL_WALNUT.gz</a> |
<p>A simple ethernet controller, enough to send |
420 |
<br>gunzip, and try the following: |
and receive packets on a simulated network. |
421 |
<br>$ <b>gxemul -E walnut -v -t netbsd-INSTALL_WALNUT</b> |
<p>Source code: <font color="#0000f0"><tt>src/devices/dev_ether.c</tt></font> |
422 |
</ul> |
<br>Default physical address:  <font color="#0000f0">0x14000000</font> |
423 |
</li> |
</td> |
424 |
|
<td></td> |
425 |
<p> |
<td align="left" valign="top"> |
426 |
|
<table border="0"> |
427 |
<li>Artesyn's PM/PPC board (pmppc): |
<tr> |
428 |
<ul> |
<td align="left" valign="top"><i><u>Offset:</u></i> </td> |
429 |
<li><a href="http://www.netbsd.org/Ports/pmppc/">NetBSD/pmppc</a>: |
<td align="left" valign="top"><i><u>Effect:</u></i></td> |
430 |
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmppc/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmppc/binary/kernel/netbsd-INSTALL.gz</a> |
</tr> |
431 |
<br>gunzip, and try the following: |
<tr> |
432 |
<br>$ <b>gxemul -E pmppc netbsd-INSTALL</b> |
<td align="left" valign="top"><tt>0x0000-</tt><br><tt>0x3fff</tt></td> |
433 |
</ul> |
<td align="left" valign="top">Read/write buffer for the packet to be sent/received.</td> |
434 |
</li> |
</tr> |
435 |
|
<tr> |
436 |
<p> |
<td align="left" valign="top"><tt>0x4000</tt></td> |
437 |
|
<td align="left" valign="top">Read: status word, one or more of these: |
438 |
<li>Motorola Sandpoint (sandpoint): |
<br><tt>0x01</tt> = something was received (because of |
439 |
<ul> |
the last command) |
440 |
<li><a href="http://www.netbsd.org/Ports/sandpoint/">NetBSD/sandpoint</a>: |
<br><tt>0x02</tt> = more packets are available |
441 |
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sandpoint/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sandpoint/binary/kernel/netbsd-INSTALL.gz</a> |
<br><i>NOTE:</i> Whenever the status word is non-zero, |
442 |
<br>gunzip, and try the following: |
an interrupt is asserted. Reading the status word |
443 |
<br>$ <b>gxemul -E sandpoint -v -t netbsd-INSTALL</b> |
clears it, and deasserts the interrupt.</td> |
444 |
</ul> |
</tr> |
445 |
</li> |
<tr> |
446 |
|
<td align="left" valign="top"><tt>0x4010</tt></td> |
447 |
<p> |
<td align="left" valign="top">Read: get the Length of the received packet |
448 |
|
<br>Write: set the Length of the next packet to transmit</td> |
449 |
<li>PReP: |
</tr> |
450 |
<ul> |
<tr> |
451 |
<li><a href="http://www.netbsd.org/Ports/prep/">NetBSD/prep</a>: |
<td align="left" valign="top"><tt>0x4020</tt></td> |
452 |
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/prep/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/prep/binary/kernel/netbsd-INSTALL.gz</a> |
<td align="left" valign="top">Write: command: |
453 |
<br>gunzip, and try the following: |
<br><tt>0x00:</tt> receive a packet |
454 |
<br>$ <b>gxemul -E prep -v -t netbsd-INSTALL</b> |
<br><tt>0x01:</tt> send a packet</td> |
455 |
<p> |
</tr> |
456 |
<li>Linux: |
</table> |
457 |
<br><a href="http://jocelyn.mayer.free.fr/qemu-ppc/linux_images/2.4.25-PPC/vmlinux">http://jocelyn.mayer.free.fr/qemu-ppc/linux_images/2.4.25-PPC/vmlinux</a> |
</td> |
458 |
<br>$ <b>gxemul -E prep -v -t vmlinux</b> |
</tr> |
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>MacPPC: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/macppc/">NetBSD/macppc</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/macppc/binary/kernel/">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/macppc/binary/kernel</a>/<a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/macppc/binary/kernel/netbsd-INSTALL.gz">netbsd-INSTALL.gz</a> |
|
|
<br>$ <b>gxemul -E macppc -e g4 -t netbsd-INSTALL</b> |
|
|
<p> |
|
|
<li><a href="http://www.openbsd.org/macppc.html">OpenBSD/macppc</a>: |
|
|
<br><a href="ftp://ftp.openbsd.org/pub/OpenBSD/3.6/macppc/">ftp://ftp.openbsd.org/pub/OpenBSD/3.6/macppc</a>/<a href="ftp://ftp.openbsd.org/pub/OpenBSD/3.6/macppc/bsd.rd">bsd.rd</a> |
|
|
<br>$ <b>gxemul -E macppc -e g4 -t bsd.rd</b> |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>BeBox: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/bebox/">NetBSD/bebox</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/arch/bebox/snapshot/19981119/">ftp://ftp.netbsd.org/pub/NetBSD/arch/bebox/snapshot/19981119</a>/<a href="ftp://ftp.netbsd.org/pub/NetBSD/arch/bebox/snapshot/19981119/kern.tgz">kern.tgz</a> |
|
|
<br>$ <b>tar tvzf kern.tgz</b> |
|
|
<br>$ <b>gxemul -E bebox netbsd</b> |
|
|
<p> |
|
|
<li><a href="http://www.bebox.nu/os.php?s=os/linux/index">Linux/bebox</a>: |
|
|
<br><a href="http://www.bebox.nu/files/linux/BeBox-scsi-980610.gz">http://www.bebox.nu/files/linux/BeBox-scsi-980610.gz</a> |
|
|
<br>$ <b>gunzip BeBox-scsi-980610.gz</b> |
|
|
<br>$ <b>gxemul -E bebox 0x3100:0x400:BeBox-scsi-980610</b> |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>SPARC64: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/sparc64/">NetBSD/sparc64</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sparc64/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sparc64/binary/kernel/netbsd-INSTALL.gz</a> |
|
|
<br>gunzip, and try the following: |
|
|
<br>$ <b>gxemul -E ultra1 -v -i netbsd-INSTALL</b> |
|
|
<p> |
|
|
<li><a href="http://www.openbsd.org/sparc64.html">OpenBSD/sparc64</a>: |
|
|
<br><a href="ftp://ftp.openbsd.org/pub/OpenBSD/3.6/sparc64/bsd.rd">ftp://ftp.openbsd.org/pub/OpenBSD/3.6/sparc64/bsd.rd</a> |
|
|
<br>rename to bsd.rd.gz, gunzip, and try the following: |
|
|
<br>$ <b>gxemul -E ultra1 -v -i bsd.rd</b> |
|
|
</ul> |
|
|
</li> |
|
|
</ul> |
|
459 |
|
|
460 |
<p> |
</table></center> |
|
The URISC emulation mode is just for fun. (Read |
|
|
<a href="http://en.wikipedia.org/wiki/URISC">http://en.wikipedia.org/wiki/URISC</a> |
|
|
for more info.) |
|
461 |
|
|
462 |
<p> |
<p> |
463 |
<ul> |
While these devices may resemble real-world hardware, they are |
464 |
|
intentionally made simpler to use. (An exception is the framebuffer; |
465 |
<li>URISC: |
some machines actually have simple linear framebuffers like this.) |
|
<ul> |
|
|
<li>I've placed a small test program in the experiments directory. |
|
|
<br>Start like this: <b>gxemul -E testurisc 0:urisc_test.bin</b> |
|
|
<br>or, if you want to single-step: |
|
|
<b>gxemul -V -E testurisc 0:urisc_test.bin</b> |
|
|
<br>2005-03-01: All outputed characters are printed twice. I'll |
|
|
try to make a pseudo-device for outputing to "normal" devices |
|
|
later. |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
</ul> |
|
|
|
|
466 |
|
|
467 |
|
<p>If the physical address is <tt>0x10000000</tt>, then for MIPS that |
468 |
|
means that it can be accessed at virtual address |
469 |
|
<tt>0xffffffffb0000000</tt>. (Actually it can be accessed at |
470 |
|
<tt>0xffffffff90000000</tt> too, but devices should usually be accessed in |
471 |
|
a non-cached manner.) |
472 |
|
|
473 |
|
<p> (When using the PPC test machine (<tt>testppc</tt>), the addresses are |
474 |
|
<tt>0x10000000</tt>, <tt>0x11000000</tt> etc., so no need to add any |
475 |
|
virtual displacement.) |
476 |
|
|
477 |
|
<p>The <b><tt>mp</tt></b>, <b><tt>disk</tt></b>, and <b><tt>ether</tt></b> |
478 |
|
devices are agnostic when it comes to word-length. For example, when |
479 |
|
reading offset <tt>0x0000</tt> of the <b><tt>mp</tt></b> |
480 |
|
device, you may use any kind of read (an 8-bit read will work just as well |
481 |
|
as a 64-bit read, although the value will be truncated to 8 bits in the |
482 |
|
first case). You can <i>not</i>, however, read one byte from <tt>0x0000</tt> |
483 |
|
and one from <tt>0x0001</tt>, and combine the result. The read from |
484 |
|
<tt>0x0001</tt> will be invalid. |
485 |
|
|
486 |
|
<p>The <b><tt>cons</tt></b> device should be accessed using 8-bit reads |
487 |
|
and writes. Doing a getchar() (ie reading from offset <tt>0x00</tt>) |
488 |
|
returns <tt>0</tt> if no character was available. |
489 |
|
|
490 |
|
<p>On MIPS, the <b><tt>cons</tt></b> device is hardwired to interrupt 2 |
491 |
|
(the lowest hardware interrupt). Whenever a character is available, the |
492 |
|
interrupt is asserted. When there are no more available characters, the |
493 |
|
interrupt is deasserted. (Remember that the interrupt has to be enabled in |
494 |
|
the status register of the system coprocessor.) |
495 |
|
|
496 |
|
<p>The <b><tt>ether</tt></b> device is hardwired to interrupt 3. |
497 |
|
|
498 |
|
<p>The IPIs controlled by the <b><tt>mp</tt></b> device are hardwired to |
499 |
|
interrupt 6. Whenever an IPI is "sent", interrupt 6 is asserted on the |
500 |
|
target CPU(s), and the IPI number is added last in the IPI queue for that |
501 |
|
CPU. It is then up to that CPU to read from offset <tt>0x00c0</tt>, to |
502 |
|
figure out what kind of IPI it was. |
503 |
|
|
504 |
|
<p>A simple tutorial on how to use the <tt>disk</tt> device, if not clear |
505 |
|
from the description above, can be found here: <a |
506 |
|
href="test_disk.c"><tt>test_disk.c</tt></a> |
507 |
|
|
508 |
|
|
509 |
|
|