2
0

qemustart 8.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340
  1. #!/usr/bin/env bash
  2. SELF="$0"
  3. # Linux bridge for connecting lan and wan network of guest machines
  4. BR_LAN="${BR_LAN:-br-lan}"
  5. BR_WAN="${BR_WAN:-br-wan}"
  6. # Host network interface providing internet access for guest machines
  7. IF_INET="${IF_INET:-eth0}"
  8. # qemu-bridge-helper does two things here
  9. #
  10. # - create tap interface
  11. # - add the tap interface to bridge
  12. #
  13. # as such it requires CAP_NET_ADMIN to do its job. It will be convenient to
  14. # have it as a root setuid program. Be aware of the security risks implied
  15. #
  16. # the helper has an acl list which defaults to deny all bridge. we need to add
  17. # $BR_LAN and $BR_WAN to its allow list
  18. #
  19. # # sudo vim /etc/qemu/bridge.conf
  20. # allow br-lan
  21. # allow br-wan
  22. #
  23. # Other allowed directives can be 'allow all', 'deny all', 'include xxx', See
  24. # qemu-bridge-helper.c of qemu source code for details.
  25. #
  26. # The helper can be provided by package qemu-system-common on debian, or
  27. # qemu-kvm-common on rhel
  28. #
  29. HELPER="${HELPER:-/usr/libexec/qemu-bridge-helper}"
  30. ### end of global settings
  31. __errmsg() {
  32. echo "$*" >&2
  33. }
  34. do_setup() {
  35. # setup bridge for LAN network
  36. sudo ip link add dev "$BR_LAN" type bridge
  37. sudo ip link set dev "$BR_LAN" up
  38. sudo ip addr add 192.168.1.3/24 dev "$BR_LAN"
  39. # setup bridge for WAN network
  40. #
  41. # minimal dnsmasq config for configuring guest wan network with dhcp
  42. #
  43. # # sudo apt-get install dnsmasq
  44. # # sudo vi /etc/dnsmasq.conf
  45. # interface=br-wan
  46. # dhcp-range=192.168.7.50,192.168.7.150,255.255.255.0,30m
  47. #
  48. sudo ip link add dev "$BR_WAN" type bridge
  49. sudo ip link set dev "$BR_WAN" up
  50. sudo ip addr add 192.168.7.1/24 dev "$BR_WAN"
  51. # guest internet access
  52. sudo sysctl -w "net.ipv4.ip_forward=1"
  53. sudo sysctl -w "net.ipv4.conf.$BR_WAN.proxy_arp=1"
  54. while sudo iptables -t nat -D POSTROUTING -o "$IF_INET" -j MASQUERADE 2>/dev/null; do true; done
  55. sudo iptables -t nat -A POSTROUTING -o "$IF_INET" -j MASQUERADE
  56. }
  57. check_setup_() {
  58. ip link show "$BR_LAN" >/dev/null || return 1
  59. ip link show "$BR_WAN" >/dev/null || return 1
  60. [ -x "$HELPER" ] || {
  61. __errmsg "helper $HELPER is not an executable"
  62. return 1
  63. }
  64. }
  65. check_setup() {
  66. [ -n "$o_network" ] || return 0
  67. check_setup_ || {
  68. __errmsg "please check the script content to see the environment requirement"
  69. return 1
  70. }
  71. }
  72. #do_setup; check_setup; exit $?
  73. usage() {
  74. cat >&2 <<EOF
  75. Usage: $SELF [-h|--help]
  76. $SELF <target>
  77. [<subtarget> [<extra-qemu-options>]]
  78. [--kernel <kernel>]
  79. [--rootfs <rootfs>]
  80. [--machine <machine>]
  81. [-n|--network]
  82. <subtarget> will default to "generic" and must be specified if
  83. <extra-qemu-options> are present
  84. e.g. <subtarget> for malta can be le, be, le64, be64, le-glibc, le64-glibc, etc
  85. <kernel>, <rootfs> can be required or optional arguments to qemu depending on
  86. the actual <target> in use. They will default to files under bin/targets/
  87. Examples
  88. $SELF x86 64
  89. $SELF x86 64 --machine q35,accel=kvm -device virtio-balloon-pci
  90. $SELF x86 64 -incoming tcp:0:4444
  91. $SELF x86 64-glibc
  92. $SELF malta be -m 64
  93. $SELF malta le64
  94. $SELF malta be-glibc
  95. $SELF armvirt 32 \\
  96. --machine virt,highmem=off \\
  97. --kernel bin/targets/armvirt/32/librecmc-armvirt-32-zImage \\
  98. --rootfs bin/targets/armvirt/32/librecmc-armvirt-32-root.ext4
  99. EOF
  100. }
  101. rand_mac() {
  102. hexdump -n 3 -e '"52:54:00" 3/1 ":%02x"' /dev/urandom
  103. }
  104. parse_args() {
  105. o_network=
  106. o_qemu_extra=()
  107. while [ "$#" -gt 0 ]; do
  108. # Cmdline options for the script itself SHOULD try to be
  109. # prefixed with two dashes to distinguish them from those for
  110. # qemu executables.
  111. #
  112. # Also note that qemu accepts both --opt and -opt
  113. case "$1" in
  114. --kernel) o_kernel="$2"; shift 2 ;;
  115. --rootfs) o_rootfs="$2"; shift 2 ;;
  116. --machine|-machine|-M) o_mach="$2"; shift 2 ;;
  117. --network|-n) o_network=1; shift ;;
  118. --help|-h)
  119. usage
  120. exit 0
  121. ;;
  122. *)
  123. if [ -z "$o_target" ]; then
  124. o_target="$1"
  125. elif [ -z "$o_subtarget" ]; then
  126. o_subtarget="$1"
  127. else
  128. o_qemu_extra+=("$1")
  129. fi
  130. shift
  131. ;;
  132. esac
  133. done
  134. MAC_LAN="$(rand_mac)"
  135. MAC_WAN="$(rand_mac)"
  136. [ -n "$o_target" ] || {
  137. usage
  138. return 1
  139. }
  140. [ -n "$o_subtarget" ] || o_subtarget="generic"
  141. o_bindir="bin/targets/$o_target/$o_subtarget"
  142. }
  143. start_qemu_armvirt() {
  144. local kernel="$o_kernel"
  145. local rootfs="$o_rootfs"
  146. local mach="${o_mach:-virt}"
  147. local cpu
  148. local qemu_exe
  149. case "${o_subtarget%-*}" in
  150. 32)
  151. qemu_exe="qemu-system-arm"
  152. cpu="cortex-a15"
  153. [ -n "$kernel" ] || kernel="$o_bindir/librecmc-$o_target-${o_subtarget%-*}-zImage-initramfs"
  154. ;;
  155. 64)
  156. qemu_exe="qemu-system-aarch64"
  157. cpu="cortex-a57"
  158. [ -n "$kernel" ] || kernel="$o_bindir/librecmc-$o_target-${o_subtarget%-*}-Image-initramfs"
  159. ;;
  160. *)
  161. __errmsg "target $o_target: unknown subtarget $o_subtarget"
  162. return 1
  163. ;;
  164. esac
  165. [ -z "$rootfs" ] || {
  166. if [ ! -f "$rootfs" -a -s "$rootfs.gz" ]; then
  167. gunzip "$rootfs.gz"
  168. fi
  169. o_qemu_extra+=( \
  170. "-drive" "file=$rootfs,format=raw,if=virtio" \
  171. "-append" "root=/dev/vda rootwait" \
  172. )
  173. }
  174. [ -z "$o_network" ] || {
  175. o_qemu_extra+=( \
  176. "-netdev" "bridge,id=lan,br=$BR_LAN,helper=$HELPER" \
  177. "-device" "virtio-net-pci,id=devlan,netdev=lan,mac=$MAC_LAN" \
  178. "-netdev" "bridge,id=wan,br=$BR_WAN,helper=$HELPER" "-device" \
  179. "virtio-net-pci,id=devwan,netdev=wan,mac=$MAC_WAN" \
  180. )
  181. }
  182. "$qemu_exe" -machine "$mach" -cpu "$cpu" -nographic \
  183. -kernel "$kernel" \
  184. "${o_qemu_extra[@]}"
  185. }
  186. start_qemu_malta() {
  187. local is64
  188. local isel
  189. local qemu_exe
  190. local rootfs="$o_rootfs"
  191. local kernel="$o_kernel"
  192. local mach="${o_mach:-malta}"
  193. # o_subtarget can be le, be, le64, be64, le-glibc, le64-glibc, etc..
  194. is64="$(echo $o_subtarget | grep -o 64)"
  195. [ "$(echo "$o_subtarget" | grep -o '^..')" = "le" ] && isel="el"
  196. qemu_exe="qemu-system-mips$is64$isel"
  197. [ -n "$kernel" ] || kernel="$o_bindir/librecmc-malta-${o_subtarget%-*}-vmlinux-initramfs.elf"
  198. [ -z "$rootfs" ] || {
  199. if [ ! -f "$rootfs" -a -s "$rootfs.gz" ]; then
  200. gunzip "$rootfs.gz"
  201. fi
  202. o_qemu_extra+=( \
  203. "-drive" "file=$rootfs,format=raw" \
  204. "-append" "root=/dev/sda rootwait" \
  205. )
  206. }
  207. # NOTE: order of wan, lan -device arguments matters as it will affect which
  208. # one will be actually used as the wan, lan network interface inside the
  209. # guest machine
  210. [ -z "$o_network" ] || {
  211. o_qemu_extra+=(
  212. -netdev bridge,id=wan,br="$BR_WAN,helper=$HELPER" -device pcnet,netdev=wan,mac="$MAC_WAN"
  213. -netdev bridge,id=lan,br="$BR_LAN,helper=$HELPER" -device pcnet,netdev=lan,mac="$MAC_LAN"
  214. )
  215. }
  216. "$qemu_exe" -machine "$mach" -nographic \
  217. -kernel "$kernel" \
  218. "${o_qemu_extra[@]}"
  219. }
  220. start_qemu_x86() {
  221. local qemu_exe
  222. local kernel="$o_kernel"
  223. local rootfs="$o_rootfs"
  224. local mach="${o_mach:-pc}"
  225. [ -n "$rootfs" ] || {
  226. rootfs="$o_bindir/librecmc-$o_target-${o_subtarget%-*}-combined-ext4.img"
  227. if [ ! -f "$rootfs" -a -s "$rootfs.gz" ]; then
  228. gunzip "$rootfs.gz"
  229. fi
  230. }
  231. #
  232. # generic: 32-bit, pentium4 (CONFIG_MPENTIUM4), kvm guest, virtio
  233. # legacy: 32-bit, i486 (CONFIG_M486)
  234. # 64: 64-bit, kvm guest, virtio
  235. #
  236. case "${o_subtarget%-*}" in
  237. legacy) qemu_exe="qemu-system-i386" ;;
  238. generic|64) qemu_exe="qemu-system-x86_64" ;;
  239. *)
  240. __errmsg "target $o_target: unknown subtarget $o_subtarget"
  241. return 1
  242. ;;
  243. esac
  244. [ -n "$kernel" ] && {
  245. o_qemu_extra+=( \
  246. "-kernel" "$kernel" \
  247. "-append" "root=/dev/vda console=ttyS0 rootwait" \
  248. )
  249. }
  250. [ -z "$o_network" ] || {
  251. case "${o_subtarget%-*}" in
  252. legacy)
  253. o_qemu_extra+=(
  254. -netdev "bridge,id=lan,br=$BR_LAN,helper=$HELPER" -device "e1000,id=devlan,netdev=lan,mac=$MAC_LAN"
  255. -netdev "bridge,id=wan,br=$BR_WAN,helper=$HELPER" -device "e1000,id=devwan,netdev=wan,mac=$MAC_WAN"
  256. )
  257. ;;
  258. generic|64)
  259. o_qemu_extra+=(
  260. -netdev "bridge,id=lan,br=$BR_LAN,helper=$HELPER" -device "virtio-net-pci,id=devlan,netdev=lan,mac=$MAC_LAN"
  261. -netdev "bridge,id=wan,br=$BR_WAN,helper=$HELPER" -device "virtio-net-pci,id=devwan,netdev=wan,mac=$MAC_WAN"
  262. )
  263. ;;
  264. esac
  265. }
  266. case "${o_subtarget%-*}" in
  267. legacy)
  268. # use IDE (PATA) disk instead of AHCI (SATA). Refer to link
  269. # [1] for related discussions
  270. #
  271. # To use AHCI interface
  272. #
  273. # -device ich9-ahci,id=ahci \
  274. # -device ide-drive,drive=drv0,bus=ahci.0 \
  275. # -drive "file=$rootfs,format=raw,id=drv0,if=none" \
  276. #
  277. # [1] https://dev.openwrt.org/ticket/17947
  278. "$qemu_exe" -machine "$mach" -nographic \
  279. -device ide-drive,drive=drv0 \
  280. -drive "file=$rootfs,format=raw,id=drv0,if=none" \
  281. "${o_qemu_extra[@]}"
  282. ;;
  283. generic|64)
  284. "$qemu_exe" -machine "$mach" -nographic \
  285. -drive "file=$rootfs,format=raw,if=virtio" \
  286. "${o_qemu_extra[@]}"
  287. ;;
  288. esac
  289. }
  290. start_qemu() {
  291. case "$o_target" in
  292. armvirt) start_qemu_armvirt ;;
  293. malta) start_qemu_malta ;;
  294. x86) start_qemu_x86 ;;
  295. *)
  296. __errmsg "target $o_target is not supported yet"
  297. return 1
  298. ;;
  299. esac
  300. }
  301. parse_args "$@" \
  302. && check_setup \
  303. && start_qemu