[Qemu-devel] qemu-system-ppc64 fails (invalid/unsupported opcode: 1e - 03 - 0f)

[Qemu-devel] qemu-system-ppc64 fails (invalid/unsupported opcode: 1e - 03 - 0f)

[Richard W.M. Jones]

[Does qemu have a bug tracker?  I couldn't find one.]

I have a problem booting a Linux appliance on an x86-64 host using
qemu-system-ppc64 (this is with qemu from git).  The command which
fails is:

$ ~/d/qemu/ppc64-softmmu/qemu-system-ppc64 \
    -L ~/d/qemu/pc-bios \
    -hda /dev/null \
    -kernel vmlinuz.fedora-12.powerpc64 \
    -initrd initramfs.fedora-12.powerpc64.img \
    -append console=ttyS0 -nographic -serial stdio
>> =============================================================
>> OpenBIOS 1.0 [Mar 31 2009 15:35]
>> Configuration device id QEMU version 1 machine id 2
>> CPUs: 1
>> Memory: 128M
>> UUID: 00000000-0000-0000-0000-000000000000
>> CPU type PowerPC,750
Welcome to OpenBIOS v1.0 built on Mar 31 2009 15:35

>> [ppc] Kernel already loaded (0x01000000 + 0x00fa5be4) (initrd 0x01800000 + 0x01cfdf36)
>> [ppc] Kernel command line: console=ttyS0
invalid/unsupported opcode: 1e - 03 - 0f (798c83c6) 00000000010082ec 1
invalid bits: 00400000 for opcode: 0b - 19 - 15 (2d746572) 0000000000009230

(at this point qemu hangs until I kill it).

I am currently uploading the kernel & initrd which I'm using here, in
case anyone wants to try reproducing this:

http://et.redhat.com/~rjones/tmp/

f025eb7950653d2581199161668e95ef  initramfs.fedora-12.powerpc64.img
1c22078a5954ff0964b405a7dfecf7e8  vmlinuz.fedora-12.powerpc64

                  30400310 bytes  initramfs.fedora-12.powerpc64.img
                  15392296 bytes  vmlinuz.fedora-12.powerpc64

Rich.

-- 
Richard Jones, Emerging Technologies, Red Hat  http://et.redhat.com/~rjones
Read my programming blog: http://rwmj.wordpress.com
Fedora now supports 75 OCaml packages (the OPEN alternative to F#)
http://cocan.org/getting_started_with_ocaml_on_red_hat_and_fedora

[Qemu-devel] Anyone got qemu-system-ppc{,64} to boot anything?

[Richard W.M. Jones]

The problem in the parent message was because I was using the wrong
CPU.  Although the binary is called 'qemu-system-ppc64', don't be
misled into thinking that means it'll emulate a 64 bit PowerPC
processor!  Oh no, you have to supply the extra '-cpu ppc64'
parameter.

Most of the '-M' options appear to be non-functional, segfaulting or
hanging or complaining about missing BIOS images.

I've had no more luck with 'qemu-system-ppc'.

So has _anyone_ got an example of qemu-system-ppc{,64} booting an OS
that they can share with us?

Rich.

-- 
Richard Jones, Emerging Technologies, Red Hat  http://et.redhat.com/~rjones
Read my programming blog: http://rwmj.wordpress.com
Fedora now supports 75 OCaml packages (the OPEN alternative to F#)
http://cocan.org/getting_started_with_ocaml_on_red_hat_and_fedora

Re: [Qemu-devel] Anyone got qemu-system-ppc{,64} to boot anything?

[Andreas Färber]

Am 11.06.2009 um 12:07 schrieb Richard W.M. Jones:

> I've had no more luck with 'qemu-system-ppc'.
>
> So has _anyone_ got an example of qemu-system-ppc{,64} booting an OS
> that they can share with us?

Some weeks ago Debian Etch (or Lenny) installation CD booted okay with  
qemu-system-ppc, without specifying CPU or machine parameters.

HTH,
Andreas

Re: [Qemu-devel] Anyone got qemu-system-ppc{,64} to boot anything?

[Stefan Weil]

Richard W.M. Jones schrieb:
> The problem in the parent message was because I was using the wrong
> CPU. Although the binary is called 'qemu-system-ppc64', don't be
> misled into thinking that means it'll emulate a 64 bit PowerPC
> processor! Oh no, you have to supply the extra '-cpu ppc64'
> parameter.
>
> Most of the '-M' options appear to be non-functional, segfaulting or
> hanging or complaining about missing BIOS images.
>
> I've had no more luck with 'qemu-system-ppc'.
>
> So has _anyone_ got an example of qemu-system-ppc{,64} booting an OS
> that they can share with us?
>
> Rich.
>

Debian lenny works, no problems.
I use a NFS root configuration to test endianess issues
(qemu x86 on qemu ppc on x86 host):

ppc-softmmu/qemu-system-ppc \
    -L ~/src/qemu/savannah/qemu/pc-bios \
    -kernel /tftpboot/powerpc/boot/vmlinux-2.6.26-2-powerpc \
    -initrd /tftpboot/powerpc/boot/initrd.img-2.6.26-2-powerpc.nfs \
    -append \
    "debug root=/dev/nfs rw ip=::::xxx::dhcp
nfsroot=10.0.2.2:/tftpboot/powerpc /tftpboot/powerpc nohz=off" \
    -m 512 --net nic,model=ne2k_pci --net user,hostname=powerpc \
    -hdb /media/vm/qemu/powerpc-swap.qcow2 -boot n \
    --redir tcp:10022::22 --redir tcp:10080::80

Regards,

Stefan

Re: [Qemu-devel] Anyone got qemu-system-ppc{,64} to boot anything?

[Blue Swirl]

On 6/11/09, Richard W.M. Jones <rjones@redhat.com> wrote:
>
>  The problem in the parent message was because I was using the wrong
>  CPU.  Although the binary is called 'qemu-system-ppc64', don't be
>  misled into thinking that means it'll emulate a 64 bit PowerPC
>  processor!  Oh no, you have to supply the extra '-cpu ppc64'
>  parameter.
>
>  Most of the '-M' options appear to be non-functional, segfaulting or
>  hanging or complaining about missing BIOS images.
>
>  I've had no more luck with 'qemu-system-ppc'.
>
>  So has _anyone_ got an example of qemu-system-ppc{,64} booting an OS
>  that they can share with us?

Debian 4.0 R6:
qemu-system-ppc64 -boot d -cdrom debian-40r6-powerpc-businesscard.iso
-M mac99 -usb -usbdevice keyboard -usbdevice mouse -cpu 970fx

Select 'install64'.

Gentoo 2008.0:
qemu-system-ppc64 -boot d -cdrom install-powerpc-minimal-2008.0.iso -M
mac99  -cpu 970fx -prom-env 'boot-device=cd:0,\boot\yaboot' -prom-env
'boot-args=conf=cd:0,\boot\yaboot.conf'

Select G5 (default).

Both above get to userspace, but they seem to hang soon.

Re: [Qemu-devel] Anyone got qemu-system-ppc{,64} to boot anything?

[Alexander Graf]

On 11.06.2009, at 22:21, Blue Swirl wrote:

> On 6/11/09, Richard W.M. Jones <rjones@redhat.com> wrote:
>>
>> The problem in the parent message was because I was using the wrong
>> CPU.  Although the binary is called 'qemu-system-ppc64', don't be
>> misled into thinking that means it'll emulate a 64 bit PowerPC
>> processor!  Oh no, you have to supply the extra '-cpu ppc64'
>> parameter.
>>
>> Most of the '-M' options appear to be non-functional, segfaulting or
>> hanging or complaining about missing BIOS images.
>>
>> I've had no more luck with 'qemu-system-ppc'.
>>
>> So has _anyone_ got an example of qemu-system-ppc{,64} booting an OS
>> that they can share with us?
>
> Debian 4.0 R6:
> qemu-system-ppc64 -boot d -cdrom debian-40r6-powerpc-businesscard.iso
> -M mac99 -usb -usbdevice keyboard -usbdevice mouse -cpu 970fx
>
> Select 'install64'.
>
> Gentoo 2008.0:
> qemu-system-ppc64 -boot d -cdrom install-powerpc-minimal-2008.0.iso -M
> mac99  -cpu 970fx -prom-env 'boot-device=cd:0,\boot\yaboot' -prom-env
> 'boot-args=conf=cd:0,\boot\yaboot.conf'
>
> Select G5 (default).
>
> Both above get to userspace, but they seem to hang soon.

Yes, PPC64 support is utterly broken atm.

For starters, Openbios needs to provide Linux with interrupt parent  
nodes, so Linux can find the interrupt controller responsible for the  
specific device. Right now it doesn't.

I hacked in some support for that but it also looks like the newworld  
PIC setup is not exactly ... sane. The ESCC is coupled to a dummy PIC  
that isn't even present in the system?

Also the mac99 target emulates the via-cuda ADB controller. As soon as  
CONFIG_PPC64 is set, Linux refuses to compile support for cuda in  
though, so you're stuck without keyboard + mouse.

It'd be awesome if someone could take on (some of) these issues. I  
only have limited time I can put into PPC and would love spending that  
on getting kvm running properly instead of fixing qemu.

Alex

Re: [Qemu-devel] Anyone got qemu-system-ppc{,64} to boot anything?

[Rob Landley]

On Thursday 11 June 2009 05:07:18 Richard W.M. Jones wrote:
> The problem in the parent message was because I was using the wrong
> CPU.  Although the binary is called 'qemu-system-ppc64', don't be
> misled into thinking that means it'll emulate a 64 bit PowerPC
> processor!  Oh no, you have to supply the extra '-cpu ppc64'
> parameter.
>
> Most of the '-M' options appear to be non-functional, segfaulting or
> hanging or complaining about missing BIOS images.
>
> I've had no more luck with 'qemu-system-ppc'.
>
> So has _anyone_ got an example of qemu-system-ppc{,64} booting an OS
> that they can share with us?

I was using this:

http://impactlinux.com/fwl/downloads/binaries/system-image/system-image-powerpc.tar.bz2

Extract the tarball, cd into the directory, and ./run-emulator.sh

That booted fine under svn 6657 (which is git 2d18e637e5ec), but every single
version since then has had something wrong with it.  (The following commit
screwed up openbios, which has since been fixed but other things broke.)

One of the problems is that since qemu started querying the hard drives from
openbios (git 513f789f6b18) the -hda option now sets /dev/hdc, and the cdrom
is /dev/hda.  (I.E. the primary and secondary controllers are swapped relative
to what the command line options claim to set.)

But that's easy enough to work around (just use -hdc on the command line and
/dev/hda in the kernel).  The second problem I haven't found a workaround for
yet, the kernel panics shortly after init takes control:

>Type exit when done.Unable to handle kernel paging request for data at
> address 0x0000007c Faulting instruction address: 0xc0125610
>Oops: Kernel access of bad area, sig: 11 [#1]
>PowerMac
>NIP: c0125610 LR: c013ea9c CTR: c013ea88
>REGS: c7827be0 TRAP: 0300   Not tainted  (2.6.29)
>MSR: 00009032 <EE,ME,IR,DR>  CR: 42224022  XER: 00000000
>DAR: 0000007c, DSISR: 40000000
>TASK = c78257f0[1] 'init.sh' THREAD: c7826000
>GPR00: c013ea9c c7827c90 c78257f0 00000000 c7825820 00000000 b9e82cb0
> 00000000 GPR08: c7821ed8 00000001 c013ea88 00000000 577d0280 100834dc
> 28220022 10060000 GPR16: 10080000 100852a8 00000000 10040000 00000000
> c0310000 c031594c c0270000 GPR24: 00000001 c0310000 0000000a c0310000
> c02ee370 00000000 00000001 00000000 NIP [c0125610] tty_wakeup+0x14/0xa0
>LR [c013ea9c] uart_tasklet_action+0x14/0x24
>Call Trace:
>[c7827c90] [c0125630] tty_wakeup+0x34/0xa0 (unreliable)
>[c7827ca0] [c013ea9c] uart_tasklet_action+0x14/0x24
>[c7827cb0] [c00303c8] tasklet_action+0x88/0x104
>[c7827cd0] [c00304d0] __do_softirq+0x8c/0x134
>[c7827d10] [c0006ba0] do_softirq+0x58/0x5c
>[c7827d20] [c003033c] irq_exit+0x94/0x98
>[c7827d30] [c0006c40] do_IRQ+0x9c/0xc0
>[c7827d50] [c0012778] ret_from_except+0x0/0x1c
>--- Exception: 501 at uart_start+0x24/0x38
>    LR = uart_start+0x20/0x38
>[c7827e30] [c014043c] uart_write+0xc4/0xe8
>[c7827e60] [c01293a0] n_tty_write+0x1d4/0x3c4
>[c7827eb0] [c0126540] tty_write+0x180/0x268
>[c7827ef0] [c007feec] vfs_write+0xc4/0x16c
>[c7827f10] [c0080404] sys_write+0x4c/0x90
>[c7827f40] [c00120ac] ret_from_syscall+0x0/0x40
>--- Exception: c01 at 0x4803a2dc
>    LR = 0x4804c490
>Instruction dump:
>38c00000 4bf02255 80010024 bba10014 38210020 7c0803a6 4e800020 9421fff0
>7c0802a6 bfc10008 7c7f1b78 90010014 <8003007c> 70090020 4082002c 387f00d8
>Kernel panic - not syncing: Fatal exception in interrupt

This exact same binary image runs just fine under the earlier qemu version. 

Rob
-- 
Latency is more important than throughput. It's that simple. - Linus Torvalds

RE: [Qemu-devel] Anyone got qemu-system-ppc{,64} to boot anything?

[Laurent Vivier]

[...]
>So has _anyone_ got an example of qemu-system-ppc{,64} booting an OS
>that they can share with us?

qemu-system-ppc boots fine the lenny debian install CD:

http://gensho.acc.umu.se/debian-cd/5.0.1/powerpc/iso-cd/debian-501-powerpc-netinst.iso

(commit abc0754527e30acf278765f66d2157b6c75dc549)

command line:

./ppc-softmmu/qemu-system-ppc -L ./pc-bios/ -cdrom debian-501-powerpc-netinst.iso

OpenFirmware command:

boot cd:

Boot a debian, it makes you happy ;-)

BTW, I guess you doesn't the good openfirmware... try a make install.

Regards,
Laurent
-- 
--------------------- Laurent@vivier.eu  ---------------------
"Tout ce qui est impossible reste à accomplir"    Jules Verne
"Things are only impossible until they're not" Jean-Luc Picard

Re: [Qemu-devel] Anyone got qemu-system-ppc{,64} to boot anything?

[Richard W.M. Jones]

On Thu, Jun 11, 2009 at 01:18:01PM +0200, Laurent Vivier wrote:
> [...]
> >So has _anyone_ got an example of qemu-system-ppc{,64} booting an OS
> >that they can share with us?
> 
> qemu-system-ppc boots fine the lenny debian install CD:
> 
> http://gensho.acc.umu.se/debian-cd/5.0.1/powerpc/iso-cd/debian-501-powerpc-netinst.iso
> 
> (commit abc0754527e30acf278765f66d2157b6c75dc549)
> 
> command line:
> 
> ./ppc-softmmu/qemu-system-ppc -L ./pc-bios/ -cdrom debian-501-powerpc-netinst.iso

Excellent, and using the same technique I also managed to boot my own
appliance.  The problem, it turned out, was the serial console doesn't
work, ie:

  -append "console=ttyS0" -serial stdio

produces no output.  I'm still looking into this issue.

Rich.

-- 
Richard Jones, Emerging Technologies, Red Hat  http://et.redhat.com/~rjones
New in Fedora 11: Fedora Windows cross-compiler. Compile Windows
programs, test, and build Windows installers. Over 70 libraries supprt'd
http://fedoraproject.org/wiki/MinGW http://www.annexia.org/fedora_mingw

Re: [Qemu-devel] Anyone got qemu-system-ppc{,64} to boot anything?

[Baojun Wang]

could qemu emulate some board like bamboo (without kvm) or MPC8544ds now? Thanks

Wang Baojun

On Thu, Jun 11, 2009 at 8:26 PM, Richard W.M. Jones<rjones@redhat.com> wrote:
> On Thu, Jun 11, 2009 at 01:18:01PM +0200, Laurent Vivier wrote:
>> [...]
>> >So has _anyone_ got an example of qemu-system-ppc{,64} booting an OS
>> >that they can share with us?
>>
>> qemu-system-ppc boots fine the lenny debian install CD:
>>
>> http://gensho.acc.umu.se/debian-cd/5.0.1/powerpc/iso-cd/debian-501-powerpc-netinst.iso
>>
>> (commit abc0754527e30acf278765f66d2157b6c75dc549)
>>
>> command line:
>>
>> ./ppc-softmmu/qemu-system-ppc -L ./pc-bios/ -cdrom debian-501-powerpc-netinst.iso
>
> Excellent, and using the same technique I also managed to boot my own
> appliance.  The problem, it turned out, was the serial console doesn't
> work, ie:
>
>  -append "console=ttyS0" -serial stdio
>
> produces no output.  I'm still looking into this issue.
>
> Rich.
>
> --
> Richard Jones, Emerging Technologies, Red Hat  http://et.redhat.com/~rjones
> New in Fedora 11: Fedora Windows cross-compiler. Compile Windows
> programs, test, and build Windows installers. Over 70 libraries supprt'd
> http://fedoraproject.org/wiki/MinGW http://www.annexia.org/fedora_mingw
>
>
>
>

Re: [Qemu-devel] Anyone got qemu-system-ppc{,64} to boot anything?

[Blue Swirl]

On 6/11/09, Baojun Wang <wangbj@gmail.com> wrote:
> could qemu emulate some board like bamboo (without kvm) or MPC8544ds now? Thanks

Yes, if someone adds emulation for these devices: UIC, PLB, DMA, POB,
EBC, IIC, ZMII. Maybe some are not needed in all cases.

Re: [Qemu-devel] Anyone got qemu-system-ppc{,64} to boot anything?

[Hollis Blanchard]

[-- Attachment #1: Type: text/plain, Size: 625 bytes --]

On Fri, Jun 12, 2009 at 10:48 AM, Blue Swirl <blauwirbel@gmail.com> wrote:

> On 6/11/09, Baojun Wang <wangbj@gmail.com> wrote:
> > could qemu emulate some board like bamboo (without kvm) or MPC8544ds now?
> Thanks
>
> Yes, if someone adds emulation for these devices: UIC, PLB, DMA, POB,
> EBC, IIC, ZMII. Maybe some are not needed in all cases.
>

No, qemu still doesn't emulate Book E cores, such as the PowerPC 440 in a
Bamboo board.

UIC is of course emulated, otherwise KVM guests on 440 wouldn't get very
far. :) Enough 440 SoC devices are emulated to support Linux boot with a
properly stripped device tree.

-Hollis

[-- Attachment #2: Type: text/html, Size: 996 bytes --]

Re: [Qemu-devel] Anyone got qemu-system-ppc{,64} to boot anything?

[Baojun Wang]

in hw/ppc440.c:

    env = cpu_ppc_init("440EP");
    if (!env && kvm_enabled()) {
        /* XXX Since qemu doesn't yet emulate 440, we just say it's a 405.
         * Since KVM doesn't use qemu's CPU emulation it seems to be working
         * OK. */
        env = cpu_ppc_init("405");
    }
    if (!env) {
        fprintf(stderr, "Unable to initialize CPU!\n");
        exit(1);
    }

also in hw/ppc.c:

I can find ppc40x_irq_init/e500_irq_init(used mpc8544ds), but there is
no ppcbooke_irq_init? It seems hw/ppc405_uc.c is emulation for DCRs,
PLB, DMA, GPIO, I2C.., but there is no hw/ppc44x_uc.c.

the qemu source I used is 0.10.5.

Also in ppc/translate_init.c, there lots of CONFIG_USER_ONLY, but I
many of them are DEBUG or CACHE related SPR emulation, and since qemu
doesn't emulate cache, I think it's OK.

  Thanks,
Wang

On Sun, Jun 14, 2009 at 1:47 AM, Hollis Blanchard<hollis@penguinppc.org> wrote:
> On Fri, Jun 12, 2009 at 10:48 AM, Blue Swirl <blauwirbel@gmail.com> wrote:
>>
>> On 6/11/09, Baojun Wang <wangbj@gmail.com> wrote:
>> > could qemu emulate some board like bamboo (without kvm) or MPC8544ds
>> > now? Thanks
>>
>> Yes, if someone adds emulation for these devices: UIC, PLB, DMA, POB,
>> EBC, IIC, ZMII. Maybe some are not needed in all cases.
>
> No, qemu still doesn't emulate Book E cores, such as the PowerPC 440 in a
> Bamboo board.
>
> UIC is of course emulated, otherwise KVM guests on 440 wouldn't get very
> far. :) Enough 440 SoC devices are emulated to support Linux boot with a
> properly stripped device tree.
>
> -Hollis
>

Re: [Qemu-devel] Anyone got qemu-system-ppc{,64} to boot anything?

[Laurent Vivier]

>On Thu, Jun 11, 2009 at 01:18:01PM +0200, Laurent Vivier wrote:
>> [...]
>> >So has _anyone_ got an example of qemu-system-ppc{,64} booting an OS
>> >that they can share with us?
>> 
>> qemu-system-ppc boots fine the lenny debian install CD:
>> 
>> 
>http://gensho.acc.umu.se/debian-cd/5.0.1/powerpc/iso-cd/debian-501-powerpc-neti
>nst.iso
>> 
>> (commit abc0754527e30acf278765f66d2157b6c75dc549)
>> 
>> command line:
>> 
>> ./ppc-softmmu/qemu-system-ppc -L ./pc-bios/ -cdrom 
>debian-501-powerpc-netinst.iso
>
>Excellent, and using the same technique I also managed to boot my own
>appliance.  The problem, it turned out, was the serial console doesn't
>work, ie:
>
>  -append "console=ttyS0" -serial stdio
>

try "console=ttyPZ0".

Laurent
-- 
--------------------- Laurent@vivier.eu  ---------------------
"Tout ce qui est impossible reste à accomplir"    Jules Verne
"Things are only impossible until they're not" Jean-Luc Picard

Re: [Qemu-devel] Anyone got qemu-system-ppc{,64} to boot anything?

[Richard W.M. Jones]

On Thu, Jun 11, 2009 at 03:28:33PM +0200, Laurent Vivier wrote:
> try "console=ttyPZ0".

Excellent again, I don't think I would ever has guessed or Googled
that.

This works ... with the Debian kernel.  It seems like the Fedora
kernel in my appliance has the serial console compiled out, or
something else is wrong.  Anyway, qemu is vindicated, thanks.

Rich.

-- 
Richard Jones, Emerging Technologies, Red Hat  http://et.redhat.com/~rjones
virt-p2v converts physical machines to virtual machines.  Boot with a
live CD or over the network (PXE) and turn machines into Xen guests.
http://et.redhat.com/~rjones/virt-p2v