trunk/doc/experiments.html

<html>
<head><title>GXemul documentation: Experimenting with GXemul</title>
<meta name="robots" content="noarchive,nofollow,noindex">
</head>
<body bgcolor="#f8f8f8" text="#000000" link="#4040f0" vlink="#404040" alink="#ff0000">
<table border=0 width=100% bgcolor="#d0d0d0"><tr>
<td width=100% align=center valign=center><table border=0 width=100%><tr>
<td align="left" valign=center bgcolor="#d0efff"><font color="#6060e0" size="6">
<b>GXemul documentation:</b></font>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
<font color="#000000" size="6"><b>Experimenting with GXemul</b>
</font></td></tr></table></td></tr></table><p>

<!--

$Id: experiments.html,v 1.71 2005/06/12 12:31:53 debug Exp $

Copyright (C) 2003-2005  Anders Gavare.  All rights reserved.

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright
   notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright
   notice, this list of conditions and the following disclaimer in the
   documentation and/or other materials provided with the distribution.
3. The name of the author may not be used to endorse or promote products
   derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
SUCH DAMAGE.

-->

<a href="./">Back to the index</a>

<p><br>
<h2>Experimenting with GXemul</h2>

<p>
<ul>
  <li><a href="#hello">Hello world</a>
  <li><a href="#expdevices">Experimental devices</a>
  <li><a href="#experiments">Experiments with other kernels and guest OSes</a>
</ul>


<p><br>
<a name="hello"></a>
<h3>Hello world:</h3>

You might want to use the emulator to develop programs on your own,
not just run precompiled kernels such as NetBSD. To get started, I recommend
that you do two things:

<p>
<ul>
  <li>Build and install a cross-compiler for MIPS.
  <li>Compile this hello world program, and run it in the emulator.
</ul>

<p>
<table border="0"><tr><td width="40">&nbsp;</td><td>
<pre>
<font color=#f00000>/*  Hello world for GXemul  */

/*  Note: The cast to a signed int causes the address to be sign-extended
    correctly to 0xffffffffb00000xx when compiled in 64-bit mode  */
</font><font color=#a0a0a0>#define      PUTCHAR_ADDRESS         ((signed int)0xb0000000)
#define HALT_ADDRESS            ((signed int)0xb0000010)

</font><font color=#c000c0>void </font><font color=#000000><a name="printchar">printchar</a>(</font><font color=#c000c0>char </font><font color=#000000>ch)
{
        *((</font><font color=#c000c0>volatile unsigned char </font><font color=#000000>*) PUTCHAR_ADDRESS) = ch;
}

</font><font color=#c000c0>void </font><font color=#000000><a name="halt">halt</a>(</font><font color=#c000c0>void</font><font color=#000000>)
{
        *((</font><font color=#c000c0>volatile unsigned char </font><font color=#000000>*) HALT_ADDRESS) = 0;
}

</font><font color=#c000c0>void </font><font color=#000000><a name="printstr">printstr</a>(</font><font color=#c000c0>char </font><font color=#000000>*s)
{
        </font><font color=#c000c0>while </font><font color=#000000>(*s)
                printchar(*s++);
}

</font><font color=#c000c0>void </font><font color=#000000>f(</font><font color=#c000c0>void</font><font color=#000000>)
{
        printstr(</font><font color=#00c000>"Hello world\n"</font><font color=#000000>);
        halt();
}
</font></pre>
</td></tr></table>

<p>
(This hello world program is available here as well:
<a href="hello_mips.c">hello_mips.c</a>)

<p>
I recommend that you build a GCC cross compiler for the
<b>mips64-unknown-elf</b> target, and install it. Other compilers could
work too, but GCC is good because of its portability. Then try to compile
the hello world program:
<pre>
        $ <b>mips64-unknown-elf-gcc -O2 hello_mips.c -mips4 -mabi=64 -c</b>
        $ <b>mips64-unknown-elf-ld -Ttext 0xa800000000030000 -e f hello_mips.o -o hello_mips --oformat=elf64-bigmips</b>
        $ <b>file hello_mips</b>
        hello_mips: ELF 64-bit MSB mips-4 executable, MIPS R3000_BE, version 1 (SYSV), statically linked, not stripped
        $ <b>gxemul -q -E testmips hello_mips</b>
        Hello world

        $ <b>mips64-unknown-elf-gcc -O2 hello_mips.c -c</b>
        $ <b>mips64-unknown-elf-ld -Ttext 0x80030000 -e f hello_mips.o -o hello_mips</b>
        $ <b>file hello_mips</b>
        hello_mips: ELF 32-bit MSB mips-3 executable, MIPS R3000_BE, version 1 (SYSV), statically linked, not stripped
        $ <b>gxemul -q -E testmips hello_mips</b>
        Hello world
</pre>

<p>
As you can see above, a GCC configured for mips64-unknown-elf can produce
both 64-bit and 32-bit binaries. If you don't want to run the entire
Hello World program, but want to single-step through the execution to
learn more about how MIPS programs run, then add -V to the command line:

<p>
<pre>
        $ <b>gxemul -V -E testmips hello_mips</b>
        ..
        GXemul&gt; <b>r</b>
        cpu0:    pc = a800000000030078    <f>
        cpu0:    hi = 0000000000000000    lo = 0000000000000000
        cpu0:    zr = 0000000000000000    at = 0000000000000000
        cpu0:    v0 = 0000000000000000    v1 = 0000000000000000
        ..
        cpu0:    gp = a8000000000780c0    sp = ffffffffa0007f00
        cpu0:    fp = 0000000000000000    ra = 0000000000000000
        GXemul&gt; <b>s 15</b>
        &lt;f&gt;
        a800000000030078: 67bdfff0      daddiu  sp,sp,-16
        a80000000003007c: 3c04a800      lui     a0,0xa800
        a800000000030080: 3c010003      lui     at,0x3
        a800000000030084: 64840000      daddiu  a0,a0,0
        a800000000030088: 642100b8      daddiu  at,at,184
        a80000000003008c: 0004203c      dsll32  a0,a0,0
        a800000000030090: 0081202d      daddu   a0,a0,at
        a800000000030094: ffbf0000      sd      ra,0(sp)  [0xffffffffa0007ef0, data=0x0000000000000000]
        a800000000030098: 0c00c00a      jal     0xa800000000030028 &lt;printstr&gt;
        a80000000003009c: 00000000 (d)  nop
          &lt;printstr("Hello world\n",0,0,0,..)&gt;
        &lt;printstr&gt;
        a800000000030028: 67bdfff0      daddiu  sp,sp,-16
        a80000000003002c: ffb00000      sd      s0,0(sp)  [0xffffffffa0007ee0, data=0x0000000000000000]
        a800000000030030: ffbf0008      sd      ra,8(sp)  [0xffffffffa0007ee8, data=0xa8000000000300a0]
        a800000000030034: 90820000      lbu     v0,0(a0)  [0xa8000000000300b8 = $LC0, data=0x48]
        a800000000030038: 00021600      sll     v0,v0,24
        GXemul&gt; <b>print v0</b>
        v0 = 0x0000000048000000
        GXemul&gt; <b><blink>_</blink></b>
</pre>

<p>
The syntax of the single-step debugger shouldn't be too hard to grasp.
Type 's' to single-step one instruction. Just pressing enter after that
will repeat the 's' command. Type 'quit' to quit.

<p>
Hopefully this is enough to get you inspired. :-)


<p><br>
<h4>Hello World for GXemul's PPC mode</h4>

GXemul also has an experimental PowerPC emulation mode.
<a href="hello_ppc.c">hello_ppc.c</a> is similar to hello_mips.c, but 
should be compiled and run as follows:
<p>
<pre>
        $ <b>ppc-unknown-elf-gcc -O2 hello_ppc.c -c</b>
        $ <b>ppc-unknown-elf-ld -e f hello_ppc.o -o hello_ppc</b>
        $ <b>file hello_ppc</b>
        hello_ppc: ELF 32-bit MSB executable, PowerPC or cisco 4500,
          version 1 (SYSV), statically linked, not stripped
        $ <b>gxemul -q -E testppc hello_ppc</b>
        Hello world
</pre>

<p>
[&nbsp;2005-02-18: I haven't yet been able to build a GCC for ppc64 (only the
binutils toolchain), because the gcc sources seem to include Linux header files 
that aren't present on my FreeBSD system. 32-bit PPC works ok, though.&nbsp;]


<p><br>
<a name="expdevices"></a>
<h3>Experimental devices:</h3>

The emulator has several modes where it doesn't emulate any real machine.
It can either run in "bare" mode, where no devices are included by default
(just the CPU), or in a "test" mode where some simple devices are 
emulated.

<p>
The <tt>testmips</tt> machine has the following experimental devices:

<p>
<center><table border="0" width="80%">

  <tr>
    <td align="left" valign="top" width="200">
        <b><tt>cons</tt>:</b>
        <p>This is a simple console device, for writing
        characters to the controlling terminal.
        <p>Source code:&nbsp;&nbsp;<font color="#0000f0"><tt>src/devices/dev_cons.c</tt></font>
        <br>Default physical address:&nbsp&nbsp;<font color="#0000f0">0x10000000</font>
    </td>
    <td align="left" valign="top" width="25">&nbsp;</td>
    <td align="left" valign="top">
        <table border="0">
          <tr>
            <td align="left" valign="top"><i><u>Offset:</u></i>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
            <td align="left" valign="top"><i><u>Effect:</u></i></td>
          </tr>
          <tr>
            <td align="left" valign="top">0x0000</td>
            <td align="left" valign="top">
                Read: <b><tt>getchar()</tt></b> (non-blocking)<br>
                Write: <b><tt>putchar(ch)</tt></b></td>
          </tr>
          <tr>
            <td align="left" valign="top">0x0010</td>
            <td align="left" valign="top">Read or write: <b><tt>halt()</tt></b><br>
                (Useful for exiting the emulator.)</td>
          </tr>
        </table>
    </td>
  </tr>

  <tr height="15">
    <td height="15">&nbsp;</td>
  </tr>

  <tr>
    <td align="left" valign="top">
        <b><tt>mp</tt>:</b>
        <p>This device controls the behaviour of CPUs in an emulated
        multi-processor system.
        <p>Source code:&nbsp;&nbsp;<font color="#0000f0"><tt>src/devices/dev_mp.c</tt></font>
        <br>Default physical address:&nbsp&nbsp;<font color="#0000f0">0x11000000</font>
    </td>
    <td></td>
    <td align="left" valign="top">
        <table border="0">
          <tr>
            <td align="left" valign="top"><i><u>Offset:</u></i>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
            <td align="left" valign="top"><i><u>Effect:</u></i></td>
          </tr>
          <tr>
            <td align="left" valign="top">0x0000</td>
            <td align="left" valign="top">Read: <b><tt>whoami()</tt></b>.
                Returns the id of the CPU doing the read.</td>
          </tr>
          <tr>
            <td align="left" valign="top">0x0010</td>
            <td align="left" valign="top">Read: <b><tt>ncpus()</tt></b>.
                Returns the number of CPUs in the system.</td>
          </tr>
          <tr>
            <td align="left" valign="top">0x0020</td>
            <td align="left" valign="top">Write: <b><tt>startupcpu(i)</tt></b>.
                Starts CPU i. It begins execution at the address
                set by a write to startupaddr (see below).</td>
          </tr>
          <tr>
            <td align="left" valign="top">0x0030</td>
            <td align="left" valign="top">Write: <b><tt>startupaddr(addr)</tt></b>.
                Sets the starting address for CPUs.</td>
          </tr>
          <tr>
            <td align="left" valign="top">0x0040</td>
            <td align="left" valign="top">Write: <b><tt>pause_addr(addr)</tt></b>.
                Sets the pause address. (TODO: This is not
                used anymore?)</td>
          </tr>
          <tr>
            <td align="left" valign="top">0x0050</td>
            <td align="left" valign="top">Write: <b><tt>pause_cpu(i)</tt></b>.
                Stops all CPUs <i>except</i> CPU i.</td>
          </tr>
          <tr>
            <td align="left" valign="top">0x0060</td>
            <td align="left" valign="top">Write: <b><tt>unpause_cpu(i)</tt></b>.
                Unpauses all CPUs <i>except</i> CPU i.</td>
          </tr>
          <tr>
            <td align="left" valign="top">0x0070</td>
            <td align="left" valign="top">Write: <b><tt>startupstack(addr)</tt></b>.
                Sets the startup stack address. (CPUs started with
                startupcpu() above will have their stack pointer
                set to this value.)</td>
          </tr>
          <tr>
            <td align="left" valign="top">0x0080</td>
            <td align="left" valign="top">Read: <b><tt>hardware_random()</tt></b>.
                This produces a "random" number.</td>
          </tr>
          <tr>
            <td align="left" valign="top">0x0090</td>
            <td align="left" valign="top">Read: <b><tt>memory()</tt></b>.
                Returns the number of bytes of RAM in the system.</td>
          </tr>
          <tr>
            <td align="left" valign="top">0x00a0</td>
            <td align="left" valign="top">Write: <b><tt>ipi_one((nr &lt;&lt; 16) + cpuid)</tt></b>.
                Sends IPI <tt>nr</tt> to a specific CPU.</td>
          </tr>
          <tr>
            <td align="left" valign="top">0x00b0</td>
            <td align="left" valign="top">Write: <b><tt>ipi_many((nr &lt;&lt; 16) + cpuid)</tt></b>.
                Sends IPI <tt>nr</tt> to all CPUs <i>except</i>
                the specified one.</td>
          </tr>
          <tr>
            <td align="left" valign="top">0x00c0</td>
            <td align="left" valign="top">Read: <b><tt>ipi_read()</tt></b>.
                Returns the next pending IPI. 0 is returned if there is no 
                pending IPI (so 0 shouldn't be used for valid IPIs).
                Hardware int 6 is deasserted when the IPI queue is empty.
            <br>Write: <b><tt>ipi_flush()</tt></b>.
                Clears the IPI queue, discarding any pending IPIs.</td>
          </tr>
        </table>
    </td>
  </tr>

  <tr height="15">
    <td height="15">&nbsp;</td>
  </tr>

  <tr>
    <td align="left" valign="top">
        <b><tt>fb</tt>:</b>
        <p>A simple linear framebuffer, for graphics output.
        640 x 480 pixels, 3 bytes per pixel (red, green, blue, 8 bits each).
        <p>Source code:&nbsp;&nbsp;<font color="#0000f0"><tt>src/devices/dev_fb.c</tt></font>
        <br>Default physical address:&nbsp&nbsp;<font color="#0000f0">0x12000000</font>
    </td>
    <td></td>
    <td align="left" valign="top">
        <table border="0">
          <tr>
            <td align="left" valign="top"><i><u>Offset:</u></i>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
            <td align="left" valign="top"><i><u>Effect:</u></i></td>
          </tr>
          <tr>
            <td align="left" valign="top">...</td>
            <td align="left" valign="top">Read: read pixel values.
                <br>Write: write pixel values.</td>
          </tr>
        </table>
    </td>
  </tr>

</table></center>

<p>
While these devices may resemble real-world hardware, they are 
intentionally made simpler to use. (An exception is the framebuffer;
some machines actually have simple linear framebuffers like this.)

<p>
If the physical address is 0x10000000, then for MIPS that means that it 
can be accessed at virtual address 0xffffffffb0000000. (Actually it can be 
accessed at 0xffffffff90000000 too, but devices should usually be accessed
in a non-cached manner.)

<p>
(When using the PPC test machine (<tt>testppc</tt>), the addresses are 
0x10000000, 0x11000000 etc., so no need to add any virtual displacement.)

<p>The <b><tt>mp</tt></b> device is agnostic when it comes to word-length.
For example, when reading offset 0x0000 of the <b><tt>mp</tt></b> device,
you may use any kind of read (an 8-bit read will work just as well as a
64-bit read, although the value will be truncated to 8 bits in the first
case).

<p>The <b><tt>cons</tt></b> device should be accessed using 8-bit reads
and writes. Doing a getchar() (ie reading from offset 0x0000) returns 0x00
if no character was available.

<p>On MIPS, the <b><tt>cons</tt></b> device is hardwired to interrupt 2
(the lowest hardware interrupt). Whenever a character is available, the
interrupt is asserted. When there are no more available characters, the
interrupt is deasserted. (Remember that the interrupt has to be enabled in
the status register of the system coprocessor.)

<p>The IPIs controlled by the <b><tt>mp</tt></b> device are hardwired to 
interrupt 6. Whenever an IPI is "sent", interrupt 6 is asserted on the 
target CPU(s), and the IPI number is added last in the IPI queue for that 
CPU. It is then up to that CPU to read from offset 0x00c0, to figure out 
what kind of IPI it was.


<p><br>
<a name="experiments"></a>
<h3>Experiments with other kernels and guest OSes:</h3>

<p>
Free Operating system kernels and other test programs can be
downloaded from various places on the Internet. Other kinds of software 
(non-Free), if obsolete enough (such as Ultrix or Windows NT), can
sometimes be found in garbage containers, or perhaps be found for a cheap
price on ebay or at a flea market.

<p>
<font color="#ff0000">
NOTE: This is <i>not</i> a list of kernels that work in the emulator.
It is a list of kernels that I experiment with.
</font>

<p>
For more information about which of these that actually work, read the 
<a href="intro.html#guestos">section in the Introduction chapter</a>
that lists guest operating systems. If a system is not listed there, it 
probably doesn't work in GXemul.

<p>
<ul>
  <li>DECstation:
    <ul>
      <li><a href="http://www.netbsd.org/Ports/pmax/">NetBSD/pmax</a>:
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmax/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmax/binary/kernel/netbsd-INSTALL.gz</a>
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmax/binary/kernel/netbsd-INSTALL.symbols.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmax/binary/kernel/netbsd-INSTALL.symbols.gz</a>
        <br>gunzip the files, and run the emulator with <b><tt>-E dec -e 3max -q -N -XY2</tt></b>
        for a graphical framebuffer console. Remove <b><tt>-XY2</tt></b> and <b><tt>-N</tt></b> to use serial (stdin/stdout) console.
        Read <a href="guestoses.html#netbsdinstall">this section</a> about how to install NetBSD/pmax onto a harddisk image.
      <p>
      <li><a href="http://www.openbsd.org/pmax.html">OpenBSD/pmax</a>:
        <br><a href="ftp://ftp.se.openbsd.org/pub/OpenBSD/2.8/pmax/bsd">ftp://ftp.se.openbsd.org/pub/OpenBSD/2.8/pmax/bsd</a>
        <br>This is an old OpenBSD kernel in a.out format. Try <b><tt>-E dec -e 3max</tt></b>.
        <br>Read <a href="guestoses.html#openbsdinstall">this section</a> about how to install OpenBSD/pmax onto a harddisk image.
        It's a bit more complicated than installing NetBSD/pmax, but 
        it usually works.
      <p>
      <li>Linux for DECstation:
        <br>Read <a href="guestoses.html#declinux">this section</a> about how to run a Debian Linux install kernel.
        <br>Here are some older kernels (these don't support framebuffer, I think):
                <a href="http://www.xs4all.nl/~vhouten/mipsel/kernels.html">http://www.xs4all.nl/~vhouten/mipsel/kernels.html</a>
        <br>Note: Make sure you add <b><tt>-CR4400</tt></b> to the command line for
                R4000 kernels, as Linux doesn't autodetect CPU type at runtime.
        <br>Linux also doesn't detect automatically whether you are booting
                in graphical or serial console mode, so you need to add
                <tt><b>-o 'console=ttyS3'</b></tt> or similar for serial
                console mode.
      <p>
      <li><a href="http://www.cs.berkeley.edu/projects/sprite/retrospective.html">Sprite</a>:
        <br>The Unix Heritage Society (TUHS, <a href="http://www.tuhs.org">www.tuhs.org</a>)
                has preserved a copy of a harddisk image for a DECstation
                5000/200 (3MAX).
        <br>Read <a href="guestoses.html#sprite">this section</a> for more information
                about running this harddisk image in the emulator.
      <p>
      <li><a href="http://www-2.cs.cmu.edu/afs/cs/project/mach/public/www/mach.html">Mach</a>:
        <br>Important! Run <b><tt>./configure --caches; make</tt></b>
        <br>Also important: This is broken right now. :-(
        <br>Download <a href="http://lost-contact.mit.edu/afs/athena/user/d/a/daveg/Info/Links/Mach/src/release/">http://lost-contact.mit.edu/afs/athena/user/d/a/daveg/Info/Links/Mach/src/release</a>/<a href="http://lost-contact.mit.edu/afs/athena/user/d/a/daveg/Info/Links/Mach/src/release/pmax.tar.Z">pmax.tar.Z</a>
        <br><tt><b>tar xfvz pmax.tar.Z pmax_mach/special/mach.boot.MK83.STD+ANY</b></tt>
        <br><tt><b>gxemul -E dec -e 3max -X pmax_mach/special/mach.boot.MK83.STD+ANY</b></tt>
    </ul>
  </li>

  <p>

  <li>SGI:
    <ul>
      <li><a href="http://www.netbsd.org/Ports/sgimips/">NetBSD/sgimips</a>:
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP3x.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP3x.gz</a>
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP3x.symbols.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP3x.symbols.gz</a>
        <br>gunzip, and try running with <b><tt>-E sgi -e ip32</tt></b>.
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP2x.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP2x.gz</a>
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP2x.symbols.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP2x.symbols.gz</a>
        <br>gunzip, and try running with <b><tt>-E sgi -e ip22</tt></b> (or <b><tt>ip24</tt></b> or <b><tt>ip20</tt></b>).
      <p>
      <li>Linux/SGI:
        <br>Some kernels are available here: <a href="http://www.linux-mips.org/~glaurung/">http://www.linux-mips.org/~glaurung/</a>
        <br>Try running with <b><tt>-E sgi -e ip32 -X</tt></b> for a graphical framebuffer, or
                <b><tt>-E sgi -e ip32 -o 'console=ttyS0'</tt></b> for serial console.
        <br>Adding <b><tt>-b</tt></b> (bintrans) might work sometimes.
        <br>(You need to add <b><tt>-CR5000</tt></b> if you're trying to run
                a kernel compiled for R5000, because Linux doesn't autodetect
                the CPU type at runtime.)
        <br>Also: <a href="http://www.tal.org/~milang/o2/kernels/">http://www.tal.org/~milang/o2/kernels</a>/<a href="http://home.tal.org/~milang/o2/kernels/vmlinux64-2.6.8.1-IP32">vmlinux64-2.6.8.1-IP32</a>
        <br>Try <b><tt>-E sgi -e ip32 -b -X -CR5000 vmlinux64-2.6.8.1-IP32</tt></b>.
        <br>And also some IP27 kernels:
                <a href="http://www.total-knowledge.com/progs/mips/kernels/vmlinux.ip27-20040428">http://www.total-knowledge.com/progs/mips/kernels/vmlinux.ip27-20040428</a>
                and
                <a href="http://www.total-knowledge.com/progs/mips/kernels/vmlinux.ip27-20040528.bz2">http://www.total-knowledge.com/progs/mips/kernels/vmlinux.ip27-20040528.bz2</a>
                (but unfortunately these lack symbols).
        <br>Try the IP27 kernels with <b><tt>-E sgi -e ip27 -t</tt></b>.
      <p>
      <li><a href="http://www.openbsd.org/sgi.html">OpenBSD/sgi</a>:
        <br><a href="ftp://ftp.openbsd.org/pub/OpenBSD/3.7/sgi/bsd.rd">ftp://ftp.openbsd.org/pub/OpenBSD/3.7/sgi/bsd.rd</a>
        <br>More recent snapshots can be found at <a href="ftp://ftp.OpenBSD.org/pub/OpenBSD/snapshots/sgi/">ftp://ftp.OpenBSD.org/pub/OpenBSD/snapshots/sgi/</a>.
        <br>Try <b><tt>gxemul -b -E sgi -e ip32 bsd.rd</tt></b>
      <p>
      <li><a href="http://www.freebsd.org/platforms/mips.html">FreeBSD/MIPS</a>:
                I don't think public binary snapshots are available yet.
      <p>
      <li>arcdiag:
        <br>The NetBSD people have also made available an "arcdiag" for SGI-IP22:
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/arch/sgimips/arcdiag.ip22">ftp://ftp.netbsd.org/pub/NetBSD/arch/sgimips/arcdiag.ip22</a>
        <br>Try running <tt><b>gxemul -E sgi -e ip22 -x arcdiag.ip22</b></tt>.
    </ul>
  </li>

  <p>

  <li>ARC:
    <ul>
      <li><a href="http://www.netbsd.org/Ports/arc/">NetBSD/arc</a>:
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/arc/binary/kernel/netbsd-RAMDISK.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/arc/binary/kernel/netbsd-RAMDISK.gz</a>
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/arc/binary/kernel/netbsd-RAMDISK.symbols.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/arc/binary/kernel/netbsd-RAMDISK.symbols.gz</a>
        <br>gunzip, and try with <b><tt>-E arc -e rd94</tt></b>.
        <br>(You may also try other ARC models.)
        <br>Read <a href="guestoses.html#netbsdarcinstall">this section</a> about how
                to install NetBSD/arc 1.6.2 onto a harddisk image.
        <br>(NetBSD/arc 2.0 doesn't work with disk images yet in GXemul.)
      <p>
      <li><a href="http://www.openbsd.org/arc.html">OpenBSD/arc</a>:
        <br><a href="ftp://ftp.se.openbsd.org/pub/OpenBSD/2.3/arc/bsd.rd.elf">ftp://ftp.se.openbsd.org/pub/OpenBSD/2.3/arc/bsd.rd.elf</a>
        <br>Try running with <b><tt>-X -E arc -e pica</tt></b> or <b><tt>-X -E arc -e tyne</tt></b>.
        <br>Read <a href="guestoses.html#openbsdarcinstall">this section</a> about how
                to install OpenBSD/arc onto a harddisk image.
      <p>
      <li>Linux:
        <br><a href="ftp://ftp.linux-mips.org/pub/linux/mips/mipsel-linux/boot/vmlinux-m700-2.1.131.gz">ftp://ftp.linux-mips.org/pub/linux/mips/mipsel-linux/boot/vmlinux-m700-2.1.131.gz</a>
        <br>gunzip, and run with <b><tt>-v -J -X -N -E arc -e m700</tt></b> (Olivetti M700)
        <br>(This probably doesn't work anymore.)
      <p>
      <li>Pandora:
        <br><a href="ftp://ftp.linux-mips.org/pub/linux/mips/ancient/milo/">ftp://ftp.linux-mips.org/pub/linux/mips/ancient/milo</a>/<a href="ftp://ftp.linux-mips.org/pub/linux/mips/ancient/milo/milo-0.27.1.tar.gz">milo-0.27.1.tar.gz</a>
        <br>A generic test/diagnostics program for ARC-based machines.
        <br>Run with <b><tt>-E arc -e r94 milo-0.27.1/pandora</tt></b>
      <p>
      <li>arcdiag:
        <br>Precompiled binary:<a href="ftp://ftp.netbsd.org/pub/NetBSD/arch/arc/arcdiag">ftp://ftp.netbsd.org/pub/NetBSD/arch/arc/arcdiag</a>
        <br>(alternative: <a href="http://www.sensi.org/~alec/mips/arcdiag">http://www.sensi.org/~alec/mips/arcdiag</a>)
        <br>A generic test/diagnostics program for ARC-based machines.
        <br>Run with <b><tt>-E arc -e pica arcdiag</tt></b> (or some other ARC mode).
        <br>Example arcdiag output (from real machines):
        <br><a href="http://mail-index.netbsd.org/port-arc/2000/10/18/0001.html">http://mail-index.netbsd.org/port-arc/2000/10/18/0001.html</a> (Olivetti M700-10)
        <br><a href="http://www.sensi.org/~alec/mips/arcdiag.txt">http://www.sensi.org/~alec/mips/arcdiag.txt</a> (PICA-61)
        <br><a href="http://mail-index.netbsd.org/port-arc/2000/10/14/0000.html">http://mail-index.netbsd.org/port-arc/2000/10/14/0000.html</a> (Deskstation Tyne)
        <br><a href="http://mail-index.netbsd.org/port-arc/2004/02/01/0001.html">http://mail-index.netbsd.org/port-arc/2004/02/01/0001.html</a> (NEC RISCserver 4200)
        <br><a href="http://mirror.aarnet.edu.au/pub/NetBSD/misc/chs/arcdiag.out">http://mirror.aarnet.edu.au/pub/NetBSD/misc/chs/arcdiag.out</a> (NEC-R96)
        <br>For some machines, such as <tt><b>-e pica</b></tt>, you can
                add <b><tt>-X</tt></b> to boot with a graphical VGA-style
                console. This however is probably a bit unstable and/or
                broken right now.
      <p>
      <li>Windows NT:
        <br>Put a "Windows NT 4.0 for MIPS" CDROM (or similar) into
                your CDROM drive. (On FreeBSD systems, it is usually called
                /dev/cd0c or similar. Change that to whatever the CDROM
                is called on your system, or the name of a raw .iso image.)
        <br>I have tried this with the Swedish version, but it might
                work with other versions too.<pre>
        $ <b><tt>dd if=/dev/zero of=winnt_test.img bs=1024 count=1 seek=999000</tt></b>
        $ <b><tt>gxemul -X -b -Earc -epica -d winnt_test.img -d bc6:/dev/cd0c -j MIPS\\ARCINST</tt></b>
        $ <b><tt>gxemul -X -b -Earc -epica -d winnt_test.img -d bc6:/dev/cd0c -j MIPS\\SETUPLDR</tt></b>
</pre>  <br><tt>ARCINST</tt> tries to prepare the disk image for installation. (It <i>almost</i> works.)
        <br><tt>SETUPLDR</tt> should load some drivers from the cdrom, but then it crashes with a bluescreen.
    </ul>
  </li>

  <p>

  <li>HPCmips:
    <ul>
      <li><a href="http://www.netbsd.org/Ports/hpcmips/">NetBSD/hpcmips</a>:
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/hpcmips/installation/">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/hpcmips/installation</a>/<a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/hpcmips/installation/netbsd.gz">netbsd.gz</a>
        <br>Try <b><tt>gxemul -X -b -E hpc -e mobilepro770 netbsd</tt></b>
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/hpcmips/binary/kernel/netbsd-GENERIC.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/hpcmips/binary/kernel/netbsd-GENERIC.gz</a>
        <br>Try <b><tt>gxemul -X -b -E hpc -e mobilepro770 netbsd-GENERIC</tt></b>
      <p>
      <li>Linux for BE300:
        <br><a href="http://www.linux4.be/2004/linux4be20040908.zip">http://www.linux4.be/2004/linux4be20040908.zip</a>
        <br>Try <b><tt>gxemul -X -b -E hpc -e be300 vmlinux</tt></b>
      <p>
      <li>Linux for Agenda VR3:
        <br>Download <a href="http://agenda-snow.sourceforge.net/kernel-old-versions/binary/">http://agenda-snow.sourceforge.net/kernel-old-versions/binary</a>/<a href="http://agenda-snow.sourceforge.net/kernel-old-versions/binary/root1.2.6.kernel-8.00">root1.2.6.kernel-8.00</a>
        <br>and <a href="http://vr3.uid0.sk/cd/Software/VR3_Distributions/H2O/">http://vr3.uid0.sk/cd/Software/VR3_Distributions/H2O</a>/<a href="http://vr3.uid0.sk/cd/Software/VR3_Distributions/H2O/root1.2.6.cramfs">root1.2.6.cramfs</a>.
        <br>(or <a href="http://www.ipsec.info/~www/agenda/dream-1-noxip.cramfs">http://www.ipsec.info/~www/agenda/dream-1-noxip.cramfs</a>)
        <br>Try <b><tt>gxemul -b -X -E hpc -e vr3 -x 0xbf200000:root1.2.6.cramfs 0xbf000000:0:0xbf0005e0:root1.2.6.kernel-8.00</tt></b>
        <br>(or replace root1.2.6.cramfs with dream-1-noxip.cramfs)
        <br>Remove <b><tt>-X</tt></b> to try with serial console instead of X, and
                remove <b><tt>-b</tt></b> to try without (old) bintrans.
        <br>Add <b><tt>-o 'init=/bin/sh'</tt></b> to boot into a single-user shell.
        <br>Add <b><tt>-o 'init=/sbin/restore_defaults'</tt></b> to run
                a <tt>/sbin/restore_defaults</tt> (attempt to initialize the
                flash memory).
      <p>
      <li>Linux for MobilePro etc.:
        <br><a href="http://pc1.peanuts.gr.jp/~kei/Hard-Float/Kernels/">http://pc1.peanuts.gr.jp/~kei/Hard-Float/Kernels/</a>
        <br>Uncompress the archive to get a kernel, vmlinux-800 for example.
        <br>Try <b><tt>./gxemul -b -X -o 'root=/dev/hda1' -d r:disk.img -d r:disk.img -Ehpc -e mobilepro800 vmlinux-800</tt></b>
        <br>where disk.img is an ext2fs filesystem with contents from
        <a href="http://pc1.peanuts.gr.jp/~kei/Hard-Float/Miniroots/miniroot-20010330.tar.bz2">http://pc1.peanuts.gr.jp/~kei/Hard-Float/Miniroots/miniroot-20010330.tar.bz2</a>
        <br>(Note the double disk arguments.)
        <br>Note 2: This doesn't work yet.
      <p>
      <li><a href="http://www.disorder.ru/openbsd/be300/">OpenBSD/be300</a>:
        <br><a href="http://www.disorder.ru/openbsd/be300/bsd.rd">http://www.disorder.ru/openbsd/be300/bsd.rd</a>
        <br>Try <b><tt>gxemul -X -b -E hpc -e be300 bsd.rd</tt></b>
        <br>Note: -b might be buggy, so you can try without that if you want to.
    </ul>
  </li>

  <p>

  <li>Cobalt:
    <ul>
      <li><a href="http://www.netbsd.org/Ports/cobalt/">NetBSD/cobalt</a>:
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-1.6.2/cobalt/binary/kernel/netbsd-GENERIC.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-1.6.2/cobalt/binary/kernel/netbsd-GENERIC.gz</a>
        <br>gunzip, and run with <b><tt>-E cobalt</tt></b>
        <br>(Or read <a href="guestoses.html#netbsdcobaltinstall">this
        section</a> on how to install NetBSD/cobalt onto a harddisk image.)
      <p>
      <li>Linux:
        <br><a href="http://people.debian.org/~pm/mips-cobalt/nfsroot/vmlinux_raq-2800.gz">http://people.debian.org/~pm/mips-cobalt/nfsroot/vmlinux_raq-2800.gz</a>
        <br>gunzip, and run with <b><tt>-E cobalt</tt></b>
      <p>
      <li>CoLo:
        <br><a href="http://www.colonel-panic.org/cobalt-mips/colo/colo-1.19.tar.gz">http://www.colonel-panic.org/cobalt-mips/colo/colo-1.19.tar.gz</a>
        <br><tt><b>tar zxvf colo-1.19.tar.gz colo-1.19/binaries/colo-rom-image.bin</b></tt>
        <br><tt><b>gxemul -Q -Ecobalt -v 0xbfc00000:colo-1.19/binaries/colo-rom-image.bin</b></tt>
        <br>(This doesn't work yet.)
    </ul>
  </li>

  <p>

  <li>Playstation 2:
    <ul>
      <li><a href="http://www.netbsd.org/Ports/playstation2/">NetBSD/playstation2</a>:
        <br>NetBSD/playstation2 snapshot kernels are available here: (RAMDISK and GENERIC)
        <br><a href="ftp://ftp.NetBSD.org/pub/NetBSD/arch/playstation2/snapshot/20020327/installation/netbsd.gz">ftp://ftp.NetBSD.org/pub/NetBSD/arch/playstation2/snapshot/20020327/installation/netbsd.gz</a>
        <br><a href="ftp://ftp.NetBSD.org/pub/NetBSD/arch/playstation2/snapshot/20020327/binary/kernel/netbsd-GENERIC.gz">ftp://ftp.NetBSD.org/pub/NetBSD/arch/playstation2/snapshot/20020327/binary/kernel/netbsd-GENERIC.gz</a>
        <br>Try running with <b><tt>-X -E playstation2</tt></b>  (<b><tt>-X</tt></b> is required, for the framebuffer).

      <p>
      <li>Linux:
        <br>A Linux kernel (2.2.21-pre1-xr7) is available from
        <a href="http://playstation2-linux.com/projects/xrhino-kernel/">http://playstation2-linux.com/projects/xrhino-kernel/</a>
        <br>Try running with <b><tt>-X -E playstation2</tt></b>  (<b><tt>-X</tt></b> is required, for the framebuffer).
    </ul>
  </li>

</ul>

<p>
The following don't work at all, or just very very little.

<p>
<ul>
  <li>Sony NeWS:
    <ul>
      <li><a href="http://www.netbsd.org/Ports/newsmips/">NetBSD/newsmips</a>:
        <br>A NetBSD/newsmips kernel and corresponding symbols are
                available here:
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/newsmips/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/newsmips/binary/kernel/netbsd-INSTALL.gz</a>
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/newsmips/binary/kernel/netbsd-INSTALL.symbols.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/newsmips/binary/kernel/netbsd-INSTALL.symbols.gz</a>
        <br>Try running with <b><tt>-E sonynews</tt></b>.
        <br>There's also a boot floppy available, but the emulator currently
                doesn't support booting from it:
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-1.6/newsmips/installation/floppy/boot.fs">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-1.6/newsmips/installation/floppy/boot.fs</a>
    </ul>
  </li>

  <p>

  <li><a href="http://www.meshcube.org/">MeshCube</a>:
    <ul>
      <li>Linux:
        <br>A Linux kernel is available from
        <a href="http://www.meshcube.org/feed/stable/">http://www.meshcube.org/feed/stable</a>/<a href="http://www.meshcube.org/feed/stable/kernel-image-mtx_2.4.24-3_mipsel.ipk">kernel-image-mtx_2.4.24-3_mipsel.ipk</a>
        <br>(This is a Debian package, you can use <tt><b>ar</b></tt> and
                <tt><b>tar</b></tt> to extract kernel.img from it.)
        <br>Try running with <b><tt>-E meshcube 0x80800000:kernel.img</tt></b>.
    </ul>
  </li>

  <p>

  <li><a href="http://www.seattlewireless.net/index.cgi/NetgearWG602">NetGear WG602</a>:
    <ul>
      <li>Linux:
        <br>A Linux kernel is available from
        <a href="ftp://downloads.netgear.com/files/wg602_v1715.zip">ftp://downloads.netgear.com/files/wg602_v1715.zip</a>
        <br>(Unzip wg602_v1715.zip to get WG602_V1715.img.)
        <br>Try running with <b><tt>-E netgear 0xbfc80000:0x40:WG602_V1715.img</tt></b>.
        <br>(It takes some time to decompress the kernel, so be patient.)
        <br>(This doesn't really work yet.)
    </ul>
  </li>

  <p>

  <li>EVBMIPS:
    <ul>
      <li><a href="http://www.netbsd.org/Ports/evbmips/">NetBSD/evbmips</a>:
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0.2/evbmips-mipseb/binary/kernel/">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0.2/evbmips-mipseb/binary/kernel</a>/<a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0.2/evbmips-mipseb/binary/kernel/netbsd-MALTA.gz">netbsd-MALTA.gz</a>
        <br><b><tt>gxemul -t -E evbmips -e malta netbsd-MALTA</tt></b>
        <br>or
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0.2/evbmips-mipseb/binary/kernel/">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0.2/evbmips-mipseb/binary/kernel</a>/<a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0.2/evbmips-mipseb/binary/kernel/netbsd-PB1000.gz">netbsd-PB1000.gz</a>
        <br><b><tt>gxemul -t -E evbmips -e pb1000 netbsd-PB1000</tt></b>
    </ul>
  </li>

  <p>

  <li>Walnut (evbppc):
    <ul>
      <li><a href="http://www.netbsd.org/Ports/evbppc/">NetBSD/evbppc</a>:
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/evbppc/binary/kernel/netbsd-INSTALL_WALNUT.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/evbppc/binary/kernel/netbsd-INSTALL_WALNUT.gz</a>
        <br>gunzip, and try the following:
        <br><tt><b>gxemul -E walnut -v -t netbsd-INSTALL_WALNUT</b></tt>
    </ul>
  </li>

  <p>

  <li>Artesyn's PM/PPC board (pmppc):
    <ul>
      <li><a href="http://www.netbsd.org/Ports/pmppc/">NetBSD/pmppc</a>:
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmppc/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmppc/binary/kernel/netbsd-INSTALL.gz</a>
        <br>gunzip, and try the following:
        <br><tt><b>gxemul -E pmppc netbsd-INSTALL</b></tt>
    </ul>
  </li>

  <p>

  <li>Motorola Sandpoint (sandpoint):
    <ul>
      <li><a href="http://www.netbsd.org/Ports/sandpoint/">NetBSD/sandpoint</a>:
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sandpoint/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sandpoint/binary/kernel/netbsd-INSTALL.gz</a>
        <br>gunzip, and try the following:
        <br><tt><b>gxemul -E sandpoint -v -t netbsd-INSTALL</b></tt>
    </ul>
  </li>

  <p>

  <li>PReP:
    <ul>
      <li><a href="http://www.netbsd.org/Ports/prep/">NetBSD/prep</a>:
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/prep/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/prep/binary/kernel/netbsd-INSTALL.gz</a>
        <br>gunzip, and try the following:
        <br><tt><b>gxemul -E prep -v -t netbsd-INSTALL</b></tt>
      <p>
      <li>Linux:
        <br><a href="http://jocelyn.mayer.free.fr/qemu-ppc/linux_images/2.4.25-PPC/vmlinux">http://jocelyn.mayer.free.fr/qemu-ppc/linux_images/2.4.25-PPC/vmlinux</a>
        <br><tt><b>gxemul -E prep -v -t vmlinux</b></tt>
    </ul>
  </li>

  <p>

  <li>MacPPC:
    <ul>
      <li><a href="http://www.netbsd.org/Ports/macppc/">NetBSD/macppc</a>:
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/macppc/binary/kernel/">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/macppc/binary/kernel</a>/<a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/macppc/binary/kernel/netbsd-INSTALL.gz">netbsd-INSTALL.gz</a>
        <br><tt><b>gxemul -E macppc -e g4 -t netbsd-INSTALL</b></tt>
      <p>
      <li><a href="http://www.openbsd.org/macppc.html">OpenBSD/macppc</a>:
        <br><a href="ftp://ftp.openbsd.org/pub/OpenBSD/3.6/macppc/">ftp://ftp.openbsd.org/pub/OpenBSD/3.6/macppc</a>/<a href="ftp://ftp.openbsd.org/pub/OpenBSD/3.6/macppc/bsd.rd">bsd.rd</a>
        <br><tt><b>gxemul -E macppc -e g4 -t bsd.rd</b></tt>
    </ul>
  </li>

  <p>

  <li>BeBox:
    <ul>
      <li><a href="http://www.netbsd.org/Ports/bebox/">NetBSD/bebox</a>:
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/arch/bebox/snapshot/19981119/">ftp://ftp.netbsd.org/pub/NetBSD/arch/bebox/snapshot/19981119</a>/<a href="ftp://ftp.netbsd.org/pub/NetBSD/arch/bebox/snapshot/19981119/kern.tgz">kern.tgz</a>
        <br><tt><b>tar xvzf kern.tgz</b></tt>
        <br><tt><b>gxemul -E bebox netbsd</b></tt>
      <p>
      <li><a href="http://www.bebox.nu/os.php?s=os/linux/index">Linux/bebox</a>:
        <br><a href="http://www.bebox.nu/files/linux/BeBox-scsi-980610.gz">http://www.bebox.nu/files/linux/BeBox-scsi-980610.gz</a>
        <br><tt><b>gunzip BeBox-scsi-980610.gz</b></tt>
        <br><tt><b>gxemul -E bebox 0x3100:0x400:BeBox-scsi-980610</b></tt>
    </ul>
  </li>

  <p>

  <li>SPARC64:
    <ul>
      <li><a href="http://www.netbsd.org/Ports/sparc64/">NetBSD/sparc64</a>:
        <br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sparc64/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sparc64/binary/kernel/netbsd-INSTALL.gz</a>
        <br>gunzip, and try the following:
        <br><tt><b>gxemul -E ultra1 -v -i netbsd-INSTALL</b></tt>
      <p>
      <li><a href="http://www.openbsd.org/sparc64.html">OpenBSD/sparc64</a>:
        <br><a href="ftp://ftp.openbsd.org/pub/OpenBSD/3.6/sparc64/bsd.rd">ftp://ftp.openbsd.org/pub/OpenBSD/3.6/sparc64/bsd.rd</a>
        <br>rename to bsd.rd.gz, gunzip, and try the following:
        <br><tt><b>gxemul -E ultra1 -v -i bsd.rd</b></tt>
    </ul>
  </li>
</ul>

<p>
The URISC emulation mode is just for fun. (Read
<a href="http://en.wikipedia.org/wiki/URISC">http://en.wikipedia.org/wiki/URISC</a>
for more info.)

<p>
<ul>

  <li>URISC:
    <ul>
      <li>I've placed a small test program in the experiments directory.
        <br>Start like this: <tt><b>gxemul -E testurisc 0:urisc_test.bin</b></tt>
        <br>or, if you want to single-step:
                <b><tt>gxemul -V -E testurisc 0:urisc_test.bin</b></tt>
        <br>2005-03-01: All outputed characters are printed twice. I'll
        try to make a pseudo-device for outputing to "normal" devices
        later.
    </ul>
  </li>

</ul>


</p>

</body>
</html>