QEMU QMP Reference Manualïƒ
Introductionïƒ
This manual describes the commands and events supported by the QEMU Monitor Protocol (QMP).
For locating a particular item, please see the QMP Index.
The following notation is used in examples:
Example:
-> ... text sent by client (commands) ...
<- ... text sent by server (command responses and events) ...
Example text is formatted for readability. However, in real protocol usage, its commonly emitted as a single line.
Please refer to the QEMU Machine Protocol Specification for the general format of commands, responses, and events.
QMP errorsïƒ
- Enum QapiErrorClass (Since: 1.2)ïƒ
QEMU error classes
- Values:
GenericError – this is used for errors that don’t require a specific error class. This should be the default case for most errors
CommandNotFound – the requested command has not been found
DeviceNotActive – a device has failed to be become active
DeviceNotFound – the requested device has not been found
KVMMissingCap – the requested operation can’t be fulfilled because a required KVM capability is missing
Common data typesïƒ
- Enum IoOperationType (Since: 2.1)ïƒ
An enumeration of the I/O operation types
- Values:
read – read operation
write – write operation
- Enum OnOffAuto (Since: 2.2)ïƒ
An enumeration of three options: on, off, and auto
- Values:
auto – QEMU selects the value between on and off
on – Enabled
off – Disabled
- Enum OnOffSplit (Since: 2.6)ïƒ
An enumeration of three values: on, off, and split
- Values:
on – Enabled
off – Disabled
split – Mixed
- Alternate StrOrNull (Since: 2.10)ïƒ
This is a string value or the explicit lack of a string (null pointer in C). Intended for cases when ‘optional absent’ already has a different meaning.
- Alternatives:
s (
string) – the string valuen (
null) – no string value
- Enum OffAutoPCIBAR (Since: 2.12)ïƒ
An enumeration of options for specifying a PCI BAR
- Values:
off – The specified feature is disabled
auto – The PCI BAR for the feature is automatically selected
bar0 – PCI BAR0 is used for the feature
bar1 – PCI BAR1 is used for the feature
bar2 – PCI BAR2 is used for the feature
bar3 – PCI BAR3 is used for the feature
bar4 – PCI BAR4 is used for the feature
bar5 – PCI BAR5 is used for the feature
- Enum PCIELinkSpeed (Since: 4.0)ïƒ
An enumeration of PCIe link speeds in units of GT/s
- Values:
2_5 – 2.5GT/s
5 – 5.0GT/s
8 – 8.0GT/s
16 – 16.0GT/s
32 – 32.0GT/s (since 9.0)
64 – 64.0GT/s (since 9.0)
- Enum PCIELinkWidth (Since: 4.0)ïƒ
An enumeration of PCIe link width
- Values:
1 – x1
2 – x2
4 – x4
8 – x8
12 – x12
16 – x16
32 – x32
- Enum HostMemPolicy (Since: 2.1)ïƒ
Host memory policy types
- Values:
default – restore default policy, remove any nondefault policy
preferred – set the preferred host nodes for allocation
bind – a strict policy that restricts memory allocation to the host nodes specified
interleave – memory allocations are interleaved across the set of host nodes specified
- Enum NetFilterDirection (Since: 2.5)ïƒ
Indicates whether a netfilter is attached to a netdev’s transmit queue or receive queue or both.
- Values:
all – the filter is attached both to the receive and the transmit queue of the netdev (default).
rx – the filter is attached to the receive queue of the netdev, where it will receive packets sent to the netdev.
tx – the filter is attached to the transmit queue of the netdev, where it will receive packets sent by the netdev.
- Enum GrabToggleKeys (Since: 4.0)ïƒ
Key combinations to toggle input-linux between host and guest.
- Values:
ctrl-ctrl – left and right control key
alt-alt – left and right alt key
shift-shift – left and right shift key
meta-meta – left and right meta key
scrolllock – scroll lock key
ctrl-scrolllock – either control key and scroll lock key
- Object HumanReadableText (Since: 6.2)ïƒ
- Members:
human-readable-text (
string) – Formatted output intended for humans.
- Enum EndianMode (Since: 10.0)ïƒ
- Values:
unspecified – Endianness not specified
little – Little endianness
big – Big endianness
Socket data typesïƒ
- Enum NetworkAddressFamily (Since: 2.1)ïƒ
The network address family
- Values:
ipv4 – IPV4 family
ipv6 – IPV6 family
unix – unix socket
vsock – vsock family (since 2.8)
unknown – otherwise
- Object InetSocketAddressBaseïƒ
- Members:
host (
string) – host part of the addressport (
string) – port part of the address
- Object InetSocketAddress (Since: 1.3)ïƒ
Captures a socket address or address range in the Internet namespace.
- Members:
numeric (
boolean, optional) – true if the host/port are guaranteed to be numeric, false if name resolution should be attempted. Defaults to false. (Since 2.9)to (
int, optional) – If present, this is range of possible addresses, with port betweenportandto.ipv4 (
boolean, optional) – whether to accept IPv4 addresses, default try both IPv4 and IPv6ipv6 (
boolean, optional) – whether to accept IPv6 addresses, default try both IPv4 and IPv6keep-alive (
boolean, optional) – enable keep-alive when connecting to this socket. Not supported for passive sockets. (Since 4.2)mptcp (
boolean, optional) – enable multi-path TCP. (Since 6.1)The members of
InetSocketAddressBase.
- Object UnixSocketAddress (Since: 1.3)ïƒ
Captures a socket address in the local (“Unix socketâ€) namespace.
- Members:
path (
string) – filesystem path to useabstract (
boolean, optional) – if true, this is a Linux abstract socket address.pathwill be prefixed by a null byte, and optionally padded with null bytes. Defaults to false. (Since 5.1)tight (
boolean, optional) – if false, pad an abstract socket address with enough null bytes to make it fill struct sockaddr_un member sun_path. Defaults to true. (Since 5.1)
- Object VsockSocketAddress (Since: 2.8)ïƒ
Captures a socket address in the vsock namespace.
- Members:
cid (
string) – unique host identifierport (
string) – port
Note
String types are used to allow for possible future hostname or service resolution support.
- Object FdSocketAddress (Since: 1.2)ïƒ
A file descriptor name or number.
- Members:
str (
string) – decimal is for file descriptor number, otherwise it’s a file descriptor name. Named file descriptors are permitted in monitor commands, in combination with the ‘getfd’ command. Decimal file descriptors are permitted at startup or other contexts where no monitor context is active.
- Object InetSocketAddressWrapper (Since: 1.3)ïƒ
- Members:
data (
InetSocketAddress) – internet domain socket address
- Object UnixSocketAddressWrapper (Since: 1.3)ïƒ
- Members:
data (
UnixSocketAddress) – UNIX domain socket address
- Object VsockSocketAddressWrapper (Since: 2.8)ïƒ
- Members:
data (
VsockSocketAddress) – VSOCK domain socket address
- Object FdSocketAddressWrapper (Since: 1.3)ïƒ
- Members:
data (
FdSocketAddress) – file descriptor name or number
- Object SocketAddressLegacy (Since: 1.3)ïƒ
Captures the address of a socket, which could also be a named file descriptor
- Members:
type (
SocketAddressType) – Transport typeWhen
typeisinet: The members ofInetSocketAddressWrapper.When
typeisunix: The members ofUnixSocketAddressWrapper.When
typeisvsock: The members ofVsockSocketAddressWrapper.When
typeisfd: The members ofFdSocketAddressWrapper.
- Enum SocketAddressType (Since: 2.9)ïƒ
Available SocketAddress types
- Values:
inet – Internet address
unix – Unix domain socket
vsock – VMCI address
fd – Socket file descriptor
- Object SocketAddress (Since: 2.9)ïƒ
Captures the address of a socket, which could also be a socket file descriptor
- Members:
type (
SocketAddressType) – Transport typeWhen
typeisinet: The members ofInetSocketAddress.When
typeisunix: The members ofUnixSocketAddress.When
typeisvsock: The members ofVsockSocketAddress.When
typeisfd: The members ofFdSocketAddress.
VM run stateïƒ
- Enum RunStateïƒ
An enumeration of VM run states.
- Values:
debug – QEMU is running on a debugger
finish-migrate – guest is paused to finish the migration process
inmigrate – guest is paused waiting for an incoming migration. Note that this state does not tell whether the machine will start at the end of the migration. This depends on the command-line -S option and any invocation of ‘stop’ or ‘cont’ that has happened since QEMU was started.
internal-error – An internal error that prevents further guest execution has occurred
io-error – the last IOP has failed and the device is configured to pause on I/O errors
paused – guest has been paused via the ‘stop’ command
postmigrate – guest is paused following a successful ‘migrate’
prelaunch – QEMU was started with -S and guest has not started
restore-vm – guest is paused to restore VM state
running – guest is actively running
save-vm – guest is paused to save the VM state
shutdown – guest is shut down (and -no-shutdown is in use)
suspended – guest is suspended (ACPI S3)
watchdog – the watchdog action is configured to pause and has been triggered
guest-panicked – guest has been panicked as a result of guest OS panic
colo – guest is paused to save/restore VM state under colo checkpoint, VM can not get into this state unless colo capability is enabled for migration. (since 2.8)
- Enum ShutdownCauseïƒ
An enumeration of reasons for a Shutdown.
- Values:
none – No shutdown request pending
host-error – An error prevents further use of guest
host-qmp-quit – Reaction to the QMP command ‘quit’
host-qmp-system-reset – Reaction to the QMP command ‘system_reset’
host-signal – Reaction to a signal, such as SIGINT
host-ui – Reaction to a UI event, like window close
guest-shutdown – Guest shutdown/suspend request, via ACPI or other hardware-specific means
guest-reset – Guest reset request, and command line turns that into a shutdown
guest-panic – Guest panicked, and command line turns that into a shutdown
subsystem-reset – Partial guest reset that does not trigger QMP events and ignores –no-reboot. This is useful for sanitizing hypercalls on s390 that are used during kexec/kdump/boot
snapshot-load – A snapshot is being loaded by the record & replay subsystem. This value is used only within QEMU. It doesn’t occur in QMP. (since 7.2)
- Object StatusInfo (Since: 0.14)ïƒ
Information about VM run state
- Members:
running (
boolean) – true if all VCPUs are runnable, false if not runnablestatus (
RunState) – the virtual machineRunState
- Command query-status (Since: 0.14)ïƒ
Query the run status of the VM
- Return:
StatusInfo–StatusInforeflecting the VM
Example:
-> { "execute": "query-status" } <- { "return": { "running": true, "status": "running" } }
- Event SHUTDOWN (Since: 0.12)ïƒ
Emitted when the virtual machine has shut down, indicating that qemu is about to exit.
- Members:
guest (
boolean) – If true, the shutdown was triggered by a guest request (such as a guest-initiated ACPI shutdown request or other hardware-specific action) rather than a host request (such as sending qemu a SIGINT). (since 2.10)reason (
ShutdownCause) – TheShutdownCausewhich resulted in the SHUTDOWN. (since 4.0)
Note
If the command-line option
-no-shutdownhas been specified, qemu will not exit, and a STOP event will eventually follow the SHUTDOWN event.Example:
<- { "event": "SHUTDOWN", "data": { "guest": true, "reason": "guest-shutdown" }, "timestamp": { "seconds": 1267040730, "microseconds": 682951 } }
- Event POWERDOWN (Since: 0.12)ïƒ
Emitted when the virtual machine is powered down through the power control system, such as via ACPI.
Example:
<- { "event": "POWERDOWN", "timestamp": { "seconds": 1267040730, "microseconds": 682951 } }
- Event RESET (Since: 0.12)ïƒ
Emitted when the virtual machine is reset
- Members:
guest (
boolean) – If true, the reset was triggered by a guest request (such as a guest-initiated ACPI reboot request or other hardware-specific action) rather than a host request (such as the QMP command system_reset). (since 2.10)reason (
ShutdownCause) – TheShutdownCauseof the RESET. (since 4.0)
Example:
<- { "event": "RESET", "data": { "guest": false, "reason": "guest-reset" }, "timestamp": { "seconds": 1267041653, "microseconds": 9518 } }
- Event STOP (Since: 0.12)ïƒ
Emitted when the virtual machine is stopped
Example:
<- { "event": "STOP", "timestamp": { "seconds": 1267041730, "microseconds": 281295 } }
- Event RESUME (Since: 0.12)ïƒ
Emitted when the virtual machine resumes execution
Example:
<- { "event": "RESUME", "timestamp": { "seconds": 1271770767, "microseconds": 582542 } }
- Event SUSPEND (Since: 1.1)ïƒ
Emitted when guest enters a hardware suspension state, for example, S3 state, which is sometimes called standby state
Example:
<- { "event": "SUSPEND", "timestamp": { "seconds": 1344456160, "microseconds": 309119 } }
- Event SUSPEND_DISK (Since: 1.2)ïƒ
Emitted when guest enters a hardware suspension state with data saved on disk, for example, S4 state, which is sometimes called hibernate state
Note
QEMU shuts down (similar to event
SHUTDOWN) when entering this state.Example:
<- { "event": "SUSPEND_DISK", "timestamp": { "seconds": 1344456160, "microseconds": 309119 } }
- Event WAKEUP (Since: 1.1)ïƒ
Emitted when the guest has woken up from suspend state and is running
Example:
<- { "event": "WAKEUP", "timestamp": { "seconds": 1344522075, "microseconds": 745528 } }
- Event WATCHDOG (Since: 0.13)ïƒ
Emitted when the watchdog device’s timer is expired
- Members:
action (
WatchdogAction) – action that has been taken
Note
If action is “resetâ€, “shutdownâ€, or “pause†the WATCHDOG event is followed respectively by the RESET, SHUTDOWN, or STOP events.
Note
This event is rate-limited.
Example:
<- { "event": "WATCHDOG", "data": { "action": "reset" }, "timestamp": { "seconds": 1267061043, "microseconds": 959568 } }
- Enum WatchdogAction (Since: 2.1)ïƒ
An enumeration of the actions taken when the watchdog device’s timer is expired
- Values:
reset – system resets
shutdown – system shutdown, note that it is similar to
powerdown, which tries to set to system status and notify guestpoweroff – system poweroff, the emulator program exits
pause – system pauses, similar to
stopdebug – system enters debug state
none – nothing is done
inject-nmi – a non-maskable interrupt is injected into the first VCPU (all VCPUS on x86) (since 2.4)
- Enum RebootAction (Since: 6.0)ïƒ
Possible QEMU actions upon guest reboot
- Values:
reset – Reset the VM
shutdown – Shutdown the VM and exit, according to the shutdown action
- Enum ShutdownAction (Since: 6.0)ïƒ
Possible QEMU actions upon guest shutdown
- Values:
poweroff – Shutdown the VM and exit
pause – pause the VM
- Enum PanicAction (Since: 6.0)ïƒ
- Values:
none – Continue VM execution
pause – Pause the VM
shutdown – Shutdown the VM and exit, according to the shutdown action
exit-failure – Shutdown the VM and exit with nonzero status (since 7.1)
- Command watchdog-set-action (Since: 2.11)ïƒ
Set watchdog action.
- Arguments:
action (
WatchdogAction) –WatchdogActionaction taken when watchdog timer expires.
Example:
-> { "execute": "watchdog-set-action", "arguments": { "action": "inject-nmi" } } <- { "return": {} }
- Command set-action (Since: 6.0)ïƒ
Set the actions that will be taken by the emulator in response to guest events.
- Arguments:
reboot (
RebootAction, optional) –RebootActionaction taken on guest reboot.shutdown (
ShutdownAction, optional) –ShutdownActionaction taken on guest shutdown.panic (
PanicAction, optional) –PanicActionaction taken on guest panic.watchdog (
WatchdogAction, optional) –WatchdogActionaction taken when watchdog timer expires.
Example:
-> { "execute": "set-action", "arguments": { "reboot": "shutdown", "shutdown" : "pause", "panic": "pause", "watchdog": "inject-nmi" } } <- { "return": {} }
- Event GUEST_PANICKED (Since: 1.5)ïƒ
Emitted when guest OS panic is detected
- Members:
action (
GuestPanicAction) – action that has been taken, currently always “pauseâ€info (
GuestPanicInformation, optional) – information about a panic (since 2.9)
Example:
<- { "event": "GUEST_PANICKED", "data": { "action": "pause" }, "timestamp": { "seconds": 1648245231, "microseconds": 900001 } }
- Event GUEST_CRASHLOADED (Since: 5.0)ïƒ
Emitted when guest OS crash loaded is detected
- Members:
action (
GuestPanicAction) – action that has been taken, currently always “runâ€info (
GuestPanicInformation, optional) – information about a panic
Example:
<- { "event": "GUEST_CRASHLOADED", "data": { "action": "run" }, "timestamp": { "seconds": 1648245259, "microseconds": 893771 } }
- Event GUEST_PVSHUTDOWN (Since: 9.1)ïƒ
Emitted when guest submits a shutdown request via pvpanic interface
Example:
<- { "event": "GUEST_PVSHUTDOWN", "timestamp": { "seconds": 1648245259, "microseconds": 893771 } }
- Enum GuestPanicAction (Since: 2.1)ïƒ
An enumeration of the actions taken when guest OS panic is detected
- Values:
pause – system pauses
poweroff – system powers off (since 2.8)
run – system continues to run (since 5.0)
- Enum GuestPanicInformationType (Since: 2.9)ïƒ
An enumeration of the guest panic information types
- Values:
hyper-v – hyper-v guest panic information type
s390 – s390 guest panic information type (Since: 2.12)
- Object GuestPanicInformation (Since: 2.9)ïƒ
Information about a guest panic
- Members:
type (
GuestPanicInformationType) – Crash type that defines the hypervisor specific informationWhen
typeishyper-v: The members ofGuestPanicInformationHyperV.When
typeiss390: The members ofGuestPanicInformationS390.
- Object GuestPanicInformationHyperV (Since: 2.9)ïƒ
Hyper-V specific guest panic information (HV crash MSRs)
- Members:
arg1 (
int) – for Windows, STOP code for the guest crash. For Linux, an error code.arg2 (
int) – for Windows, first argument of the STOP. For Linux, the guest OS ID, which has the kernel version in bits 16-47 and 0x8100 in bits 48-63.arg3 (
int) – for Windows, second argument of the STOP. For Linux, the program counter of the guest.arg4 (
int) – for Windows, third argument of the STOP. For Linux, the RAX register (x86) or the stack pointer (aarch64) of the guest.arg5 (
int) – for Windows, fourth argument of the STOP. For x86 Linux, the stack pointer of the guest.
- Enum S390CrashReason (Since: 2.12)ïƒ
Reason why the CPU is in a crashed state.
- Values:
unknown – no crash reason was set
disabled-wait – the CPU has entered a disabled wait state
extint-loop – clock comparator or cpu timer interrupt with new PSW enabled for external interrupts
pgmint-loop – program interrupt with BAD new PSW
opint-loop – operation exception interrupt with invalid code at the program interrupt new PSW
- Object GuestPanicInformationS390 (Since: 2.12)ïƒ
S390 specific guest panic information (PSW)
- Members:
core (
int) – core id of the CPU that crashedpsw-mask (
int) – control fields of guest PSWpsw-addr (
int) – guest instruction addressreason (
S390CrashReason) – guest crash reason
- Event MEMORY_FAILURE (Since: 5.2)ïƒ
Emitted when a memory failure occurs on host side.
- Members:
recipient (
MemoryFailureRecipient) – recipient is defined asMemoryFailureRecipient.action (
MemoryFailureAction) – action that has been taken.flags (
MemoryFailureFlags) – flags for MemoryFailureAction.
Example:
<- { "event": "MEMORY_FAILURE", "data": { "recipient": "hypervisor", "action": "fatal", "flags": { "action-required": false, "recursive": false } }, "timestamp": { "seconds": 1267061043, "microseconds": 959568 } }
- Enum MemoryFailureRecipient (Since: 5.2)ïƒ
Hardware memory failure occurs, handled by recipient.
- Values:
hypervisor – memory failure at QEMU process address space. (none guest memory, but used by QEMU itself).
guest – memory failure at guest memory,
- Enum MemoryFailureAction (Since: 5.2)ïƒ
Actions taken by QEMU in response to a hardware memory failure.
- Values:
ignore – the memory failure could be ignored. This will only be the case for action-optional failures.
inject – memory failure occurred in guest memory, the guest enabled MCE handling mechanism, and QEMU could inject the MCE into the guest successfully.
fatal – the failure is unrecoverable. This occurs for action-required failures if the recipient is the hypervisor; QEMU will exit.
reset – the failure is unrecoverable but confined to the guest. This occurs if the recipient is a guest guest which is not ready to handle memory failures.
- Object MemoryFailureFlags (Since: 5.2)ïƒ
Additional information on memory failures.
- Members:
action-required (
boolean) – whether a memory failure event is action-required or action-optional (e.g. a failure during memory scrub).recursive (
boolean) – whether the failure occurred while the previous failure was still in progress.
- Enum NotifyVmexitOption (Since: 7.2)ïƒ
An enumeration of the options specified when enabling notify VM exit
- Values:
run – enable the feature, do nothing and continue if the notify VM exit happens.
internal-error – enable the feature, raise a internal error if the notify VM exit happens.
disable – disable the feature.
Cryptographyïƒ
- Enum QCryptoTLSCredsEndpoint (Since: 2.5)ïƒ
The type of network endpoint that will be using the credentials. Most types of credential require different setup / structures depending on whether they will be used in a server versus a client.
- Values:
client – the network endpoint is acting as the client
server – the network endpoint is acting as the server
- Enum QCryptoSecretFormat (Since: 2.6)ïƒ
The data format that the secret is provided in
- Values:
raw – raw bytes. When encoded in JSON only valid UTF-8 sequences can be used
base64 – arbitrary base64 encoded binary data
- Enum QCryptoHashAlgo (Since: 2.6)ïƒ
The supported algorithms for computing content digests
- Values:
md5 – MD5. Should not be used in any new code, legacy compat only
sha1 – SHA-1. Should not be used in any new code, legacy compat only
sha224 – SHA-224. (since 2.7)
sha256 – SHA-256. Current recommended strong hash.
sha384 – SHA-384. (since 2.7)
sha512 – SHA-512. (since 2.7)
ripemd160 – RIPEMD-160. (since 2.7)
sm3 – SM3. (since 9.2.0)
- Enum QCryptoCipherAlgo (Since: 2.6)ïƒ
The supported algorithms for content encryption ciphers
- Values:
aes-128 – AES with 128 bit / 16 byte keys
aes-192 – AES with 192 bit / 24 byte keys
aes-256 – AES with 256 bit / 32 byte keys
des – DES with 56 bit / 8 byte keys. Do not use except in VNC. (since 6.1)
3des – 3DES(EDE) with 192 bit / 24 byte keys (since 2.9)
cast5-128 – Cast5 with 128 bit / 16 byte keys
serpent-128 – Serpent with 128 bit / 16 byte keys
serpent-192 – Serpent with 192 bit / 24 byte keys
serpent-256 – Serpent with 256 bit / 32 byte keys
twofish-128 – Twofish with 128 bit / 16 byte keys
twofish-192 – Twofish with 192 bit / 24 byte keys
twofish-256 – Twofish with 256 bit / 32 byte keys
sm4 – SM4 with 128 bit / 16 byte keys (since 9.0)
- Enum QCryptoCipherMode (Since: 2.6)ïƒ
The supported modes for content encryption ciphers
- Values:
ecb – Electronic Code Book
cbc – Cipher Block Chaining
xts – XEX with tweaked code book and ciphertext stealing
ctr – Counter (Since 2.8)
- Enum QCryptoIVGenAlgo (Since: 2.6)ïƒ
The supported algorithms for generating initialization vectors for full disk encryption. The ‘plain’ generator should not be used for disks with sector numbers larger than 2^32, except where compatibility with pre-existing Linux dm-crypt volumes is required.
- Values:
plain – 64-bit sector number truncated to 32-bits
plain64 – 64-bit sector number
essiv – 64-bit sector number encrypted with a hash of the encryption key
- Enum QCryptoBlockFormat (Since: 2.6)ïƒ
The supported full disk encryption formats
- Values:
qcow – QCow/QCow2 built-in AES-CBC encryption. Use only for liberating data from old images.
luks – LUKS encryption format. Recommended for new images
- Object QCryptoBlockOptionsBase (Since: 2.6)ïƒ
The common options that apply to all full disk encryption formats
- Members:
format (
QCryptoBlockFormat) – the encryption format
- Object QCryptoBlockOptionsQCow (Since: 2.6)ïƒ
The options that apply to QCow/QCow2 AES-CBC encryption format
- Members:
key-secret (
string, optional) – the ID of a QCryptoSecret object providing the decryption key. Mandatory except when probing image for metadata only.
- Object QCryptoBlockOptionsLUKS (Since: 2.6)ïƒ
The options that apply to LUKS encryption format
- Members:
key-secret (
string, optional) – the ID of a QCryptoSecret object providing the decryption key. Mandatory except when probing image for metadata only.
- Object QCryptoBlockCreateOptionsLUKS (Since: 2.6)ïƒ
The options that apply to LUKS encryption format initialization
- Members:
cipher-alg (
QCryptoCipherAlgo, optional) – the cipher algorithm for data encryption Currently defaults to ‘aes-256’.cipher-mode (
QCryptoCipherMode, optional) – the cipher mode for data encryption Currently defaults to ‘xts’ivgen-alg (
QCryptoIVGenAlgo, optional) – the initialization vector generator Currently defaults to ‘plain64’ivgen-hash-alg (
QCryptoHashAlgo, optional) – the initialization vector generator hash Currently defaults to ‘sha256’hash-alg (
QCryptoHashAlgo, optional) – the master key hash algorithm Currently defaults to ‘sha256’iter-time (
int, optional) – number of milliseconds to spend in PBKDF passphrase processing. Currently defaults to 2000. (since 2.8)The members of
QCryptoBlockOptionsLUKS.
- Object QCryptoBlockOpenOptions (Since: 2.6)ïƒ
The options that are available for all encryption formats when opening an existing volume
- Members:
The members of
QCryptoBlockOptionsBase.When
formatisqcow: The members ofQCryptoBlockOptionsQCow.When
formatisluks: The members ofQCryptoBlockOptionsLUKS.
- Object QCryptoBlockCreateOptions (Since: 2.6)ïƒ
The options that are available for all encryption formats when initializing a new volume
- Members:
The members of
QCryptoBlockOptionsBase.When
formatisqcow: The members ofQCryptoBlockOptionsQCow.When
formatisluks: The members ofQCryptoBlockCreateOptionsLUKS.
- Object QCryptoBlockInfoBase (Since: 2.7)ïƒ
The common information that applies to all full disk encryption formats
- Members:
format (
QCryptoBlockFormat) – the encryption format
- Object QCryptoBlockInfoLUKSSlot (Since: 2.7)ïƒ
Information about the LUKS block encryption key slot options
- Members:
active (
boolean) – whether the key slot is currently in usekey-offset (
int) – offset to the key material in bytesiters (
int, optional) – number of PBKDF2 iterations for key materialstripes (
int, optional) – number of stripes for splitting key material
- Object QCryptoBlockInfoLUKS (Since: 2.7)ïƒ
Information about the LUKS block encryption options
- Members:
cipher-alg (
QCryptoCipherAlgo) – the cipher algorithm for data encryptioncipher-mode (
QCryptoCipherMode) – the cipher mode for data encryptionivgen-alg (
QCryptoIVGenAlgo) – the initialization vector generatorivgen-hash-alg (
QCryptoHashAlgo, optional) – the initialization vector generator hashhash-alg (
QCryptoHashAlgo) – the master key hash algorithmdetached-header (
boolean) – whether the LUKS header is detached (Since 9.0)payload-offset (
int) – offset to the payload data in bytesmaster-key-iters (
int) – number of PBKDF2 iterations for key materialuuid (
string) – unique identifier for the volumeslots (
[QCryptoBlockInfoLUKSSlot]) – information about each key slot
- Object QCryptoBlockInfo (Since: 2.7)ïƒ
Information about the block encryption options
- Members:
The members of
QCryptoBlockInfoBase.When
formatisluks: The members ofQCryptoBlockInfoLUKS.
- Enum QCryptoBlockLUKSKeyslotState (Since: 5.1)ïƒ
Defines state of keyslots that are affected by the update
- Values:
active – The slots contain the given password and marked as active
inactive – The slots are erased (contain garbage) and marked as inactive
- Object QCryptoBlockAmendOptionsLUKS (Since: 5.1)ïƒ
This struct defines the update parameters that activate/de-activate set of keyslots
- Members:
state (
QCryptoBlockLUKSKeyslotState) – the desired state of the keyslotsnew-secret (
string, optional) – The ID of a QCryptoSecret object providing the password to be written into added active keyslotsold-secret (
string, optional) – Optional (for deactivation only) If given will deactivate all keyslots that match password located in QCryptoSecret with this IDiter-time (
int, optional) – Optional (for activation only) Number of milliseconds to spend in PBKDF passphrase processing for the newly activated keyslot. Currently defaults to 2000.keyslot (
int, optional) –Optional. ID of the keyslot to activate/deactivate. For keyslot activation, keyslot should not be active already (this is unsafe to update an active keyslot), but possible if ‘force’ parameter is given. If keyslot is not given, first free keyslot will be written.
For keyslot deactivation, this parameter specifies the exact keyslot to deactivate
secret (
string, optional) – Optional. The ID of a QCryptoSecret object providing the password to use to retrieve current master key. Defaults to the same secret that was used to open the image
- Object QCryptoBlockAmendOptions (Since: 5.1)ïƒ
The options that are available for all encryption formats when amending encryption settings
- Members:
The members of
QCryptoBlockOptionsBase.When
formatisluks: The members ofQCryptoBlockAmendOptionsLUKS.
- Object SecretCommonProperties (Since: 2.6)ïƒ
Properties for objects of classes derived from secret-common.
- Members:
format (
QCryptoSecretFormat, optional) – the data format that the secret is provided in (default: raw)keyid (
string, optional) – the name of another secret that should be used to decrypt the provided data. If not present, the data is assumed to be unencrypted.iv (
string, optional) – the random initialization vector used for encryption of this particular secret. Should be a base64 encrypted string of the 16-byte IV. Mandatory ifkeyidis given. Ignored ifkeyidis absent.
- Object SecretProperties (Since: 2.6)ïƒ
Properties for secret objects.
Either
dataorfilemust be provided, but not both.- Members:
data (
string, optional) – the associated with the secret fromfile (
string, optional) – the filename to load the data associated with the secret fromThe members of
SecretCommonProperties.
- Object SecretKeyringProperties (Since: 5.1)ïƒ
- Availability:
CONFIG_SECRET_KEYRINGProperties for secret_keyring objects.
- Members:
serial (
int) – serial number that identifies a key to get from the kernelThe members of
SecretCommonProperties.
- Object TlsCredsProperties (Since: 2.5)ïƒ
Properties for objects of classes derived from tls-creds.
- Members:
verify-peer (
boolean, optional) – if true the peer credentials will be verified once the handshake is completed. This is a no-op for anonymous credentials. (default: true)dir (
string, optional) – the path of the directory that contains the credential filesendpoint (
QCryptoTLSCredsEndpoint, optional) – whether the QEMU network backend that uses the credentials will be acting as a client or as a server (default: client)priority (
string, optional) – a gnutls priority string as described at https://gnutls.org/manual/html_node/Priority-Strings.html
- Object TlsCredsAnonProperties (Since: 2.5)ïƒ
Properties for tls-creds-anon objects.
- Members:
The members of
TlsCredsProperties.
- Object TlsCredsPskProperties (Since: 3.0)ïƒ
Properties for tls-creds-psk objects.
- Members:
username (
string, optional) – the username which will be sent to the server. For clients only. If absent, “qemu†is sent and the property will read back as an empty string.The members of
TlsCredsProperties.
- Object TlsCredsX509Properties (Since: 2.5)ïƒ
Properties for tls-creds-x509 objects.
- Members:
sanity-check (
boolean, optional) – if true, perform some sanity checks before using the credentials (default: true)passwordid (
string, optional) – For the server-key.pem and client-key.pem files which contain sensitive private keys, it is possible to use an encrypted version by providing thepasswordidparameter. This provides the ID of a previously created secret object containing the password for decryption.The members of
TlsCredsProperties.
- Enum QCryptoAkCipherAlgo (Since: 7.1)ïƒ
The supported algorithms for asymmetric encryption ciphers
- Values:
rsa – RSA algorithm
- Enum QCryptoAkCipherKeyType (Since: 7.1)ïƒ
The type of asymmetric keys.
- Values:
public – public key
private – private key
- Enum QCryptoRSAPaddingAlgo (Since: 7.1)ïƒ
The padding algorithm for RSA.
- Values:
raw – no padding used
pkcs1 – pkcs1#v1.5
- Object QCryptoAkCipherOptionsRSA (Since: 7.1)ïƒ
Specific parameters for RSA algorithm.
- Members:
hash-alg (
QCryptoHashAlgo) – QCryptoHashAlgopadding-alg (
QCryptoRSAPaddingAlgo) – QCryptoRSAPaddingAlgo
- Object QCryptoAkCipherOptions (Since: 7.1)ïƒ
The options that are available for all asymmetric key algorithms when creating a new QCryptoAkCipher.
- Members:
alg (
QCryptoAkCipherAlgo) – encryption cipher algorithmWhen
algisrsa: The members ofQCryptoAkCipherOptionsRSA.
Background jobsïƒ
- Enum JobType (Since: 1.7)ïƒ
Type of a background job.
- Values:
commit – block commit job type, see “block-commitâ€
stream – block stream job type, see “block-streamâ€
mirror – drive mirror job type, see “drive-mirrorâ€
backup – drive backup job type, see “drive-backupâ€
create – image creation job type, see “blockdev-create†(since 3.0)
amend – image options amend job type, see “x-blockdev-amend†(since 5.1)
snapshot-load – snapshot load job type, see “snapshot-load†(since 6.0)
snapshot-save – snapshot save job type, see “snapshot-save†(since 6.0)
snapshot-delete – snapshot delete job type, see “snapshot-delete†(since 6.0)
- Enum JobStatus (Since: 2.12)ïƒ
Indicates the present state of a given job in its lifetime.
- Values:
undefined – Erroneous, default state. Should not ever be visible.
created – The job has been created, but not yet started.
running – The job is currently running.
paused – The job is running, but paused. The pause may be requested by either the QMP user or by internal processes.
ready – The job is running, but is ready for the user to signal completion. This is used for long-running jobs like mirror that are designed to run indefinitely.
standby – The job is ready, but paused. This is nearly identical to
paused. The job may return toreadyor otherwise be canceled.waiting – The job is waiting for other jobs in the transaction to converge to the waiting state. This status will likely not be visible for the last job in a transaction.
pending – The job has finished its work, but has finalization steps that it needs to make prior to completing. These changes will require manual intervention via
job-finalizeif auto-finalize was set to false. These pending changes may still fail.aborting – The job is in the process of being aborted, and will finish with an error. The job will afterwards report that it is
concluded. This status may not be visible to the management process.concluded – The job has finished all work. If auto-dismiss was set to false, the job will remain in the query list until it is dismissed via
job-dismiss.null – The job is in the process of being dismantled. This state should not ever be visible externally.
- Enum JobVerb (Since: 2.12)ïƒ
Represents command verbs that can be applied to a job.
- Values:
cancel – see
job-cancelpause – see
job-pauseresume – see
job-resumeset-speed – see
block-job-set-speedcomplete – see
job-completedismiss – see
job-dismissfinalize – see
job-finalizechange – see
block-job-change(since 8.2)
- Event JOB_STATUS_CHANGE (Since: 3.0)ïƒ
Emitted when a job transitions to a different status.
- Members:
id (
string) – The job identifierstatus (
JobStatus) – The new job status
- Command job-pause (Since: 3.0)ïƒ
Pause an active job.
This command returns immediately after marking the active job for pausing. Pausing an already paused job is an error.
The job will pause as soon as possible, which means transitioning into the PAUSED state if it was RUNNING, or into STANDBY if it was READY. The corresponding JOB_STATUS_CHANGE event will be emitted.
Cancelling a paused job automatically resumes it.
- Arguments:
id (
string) – The job identifier.
- Command job-resume (Since: 3.0)ïƒ
Resume a paused job.
This command returns immediately after resuming a paused job. Resuming an already running job is an error.
- Arguments:
id (
string) – The job identifier.
- Command job-cancel (Since: 3.0)ïƒ
Instruct an active background job to cancel at the next opportunity. This command returns immediately after marking the active job for cancellation.
The job will cancel as soon as possible and then emit a JOB_STATUS_CHANGE event. Usually, the status will change to ABORTING, but it is possible that a job successfully completes (e.g. because it was almost done and there was no opportunity to cancel earlier than completing the job) and transitions to PENDING instead.
- Arguments:
id (
string) – The job identifier.
- Command job-complete (Since: 3.0)ïƒ
Manually trigger completion of an active job in the READY state.
- Arguments:
id (
string) – The job identifier.
- Command job-dismiss (Since: 3.0)ïƒ
Deletes a job that is in the CONCLUDED state. This command only needs to be run explicitly for jobs that don’t have automatic dismiss enabled.
This command will refuse to operate on any job that has not yet reached its terminal state, JOB_STATUS_CONCLUDED. For jobs that make use of JOB_READY event, job-cancel or job-complete will still need to be used as appropriate.
- Arguments:
id (
string) – The job identifier.
- Command job-finalize (Since: 3.0)ïƒ
Instructs all jobs in a transaction (or a single job if it is not part of any transaction) to finalize any graph changes and do any necessary cleanup. This command requires that all involved jobs are in the PENDING state.
For jobs in a transaction, instructing one job to finalize will force ALL jobs in the transaction to finalize, so it is only necessary to instruct a single member job to finalize.
- Arguments:
id (
string) – The identifier of any job in the transaction, or of a job that is not part of any transaction.
- Object JobInfo (Since: 3.0)ïƒ
Information about a job.
- Members:
id (
string) – The job identifiertype (
JobType) – The kind of job that is being performedstatus (
JobStatus) – Current job state/statuscurrent-progress (
int) – Progress made until now. The unit is arbitrary and the value can only meaningfully be used for the ratio ofcurrent-progresstototal-progress. The value is monotonically increasing.total-progress (
int) – Estimatedcurrent-progressvalue at the completion of the job. This value can arbitrarily change while the job is running, in both directions.error (
string, optional) –If this field is present, the job failed; if it is still missing in the CONCLUDED state, this indicates successful completion.
The value is a human-readable error message to describe the reason for the job failure. It should not be parsed by applications.
Block devicesïƒ
Block device exportsïƒ
- Object NbdServerOptionsBaseïƒ
- Members:
handshake-max-seconds (
int, optional) – Time limit, in seconds, at which a client that has not completed the negotiation handshake will be disconnected, or 0 for no limit (since 10.0; default: 10).tls-creds (
string, optional) – ID of the TLS credentials object (since 2.6).tls-authz (
string, optional) – ID of the QAuthZ authorization object used to validate the client’s x509 distinguished name. This object is is only resolved at time of use, so can be deleted and recreated on the fly while the NBD server is active. If missing, it will default to denying access (since 4.0).max-connections (
int, optional) – The maximum number of connections to allow at the same time, 0 for unlimited. Setting this to 1 also stops the server from advertising multiple client support (since 5.2; default: 100).
- Object NbdServerOptionsïƒ
Keep this type consistent with the NbdServerOptionsLegacy type. The only intended difference is using SocketAddress instead of SocketAddressLegacy.
- Members:
addr (
SocketAddress) – Address on which to listen (since 4.2).The members of
NbdServerOptionsBase.
- Object NbdServerOptionsLegacyïƒ
Keep this type consistent with the NbdServerOptions type. The only intended difference is using SocketAddressLegacy instead of SocketAddress.
- Members:
addr (
SocketAddressLegacy) – Address on which to listen (since 1.3).The members of
NbdServerOptionsBase.
- Command nbd-server-start (Since: 1.3)ïƒ
Start an NBD server listening on the given host and port. Block devices can then be exported using
nbd-server-add. The NBD server will present them as named exports; for example, another QEMU instance could refer to them as “nbd:HOST:PORT:exportname=NAMEâ€.- Arguments:
The members of
NbdServerOptionsLegacy.
- Errors:
if the server is already running
- Object BlockExportOptionsNbdBase (Since: 5.0)ïƒ
An NBD block export (common options shared between nbd-server-add and the NBD branch of block-export-add).
- Members:
name (
string, optional) – Export name. If unspecified, thedeviceparameter is used as the export name. (Since 2.12)description (
string, optional) – Free-form description of the export, up to 4096 bytes. (Since 5.0)
- Object BlockExportOptionsNbd (Since: 5.2)ïƒ
An NBD block export (distinct options used in the NBD branch of block-export-add).
- Members:
bitmaps (
[BlockDirtyBitmapOrStr], optional) – Also export each of the named dirty bitmaps reachable fromdevice, so the NBD client can use NBD_OPT_SET_META_CONTEXT with the metadata context name “qemu:dirty-bitmap:BITMAP†to inspect each bitmap. Since 7.1 bitmap may be specified by node/name pair.allocation-depth (
boolean, optional) – Also export the allocation depth map fordevice, so the NBD client can use NBD_OPT_SET_META_CONTEXT with the metadata context name “qemu:allocation-depth†to inspect allocation details. (since 5.2)The members of
BlockExportOptionsNbdBase.
- Object BlockExportOptionsVhostUserBlk (Since: 5.2)ïƒ
A vhost-user-blk block export.
- Members:
addr (
SocketAddress) – The vhost-user socket on which to listen. Both ‘unix’ and ‘fd’ SocketAddress types are supported. Passed fds must be UNIX domain sockets.logical-block-size (
int, optional) – Logical block size in bytes. Defaults to 512 bytes.num-queues (
int, optional) – Number of request virtqueues. Must be greater than 0. Defaults to 1.
- Enum FuseExportAllowOther (Since: 6.1)ïƒ
Possible allow_other modes for FUSE exports.
- Values:
off – Do not pass allow_other as a mount option.
on – Pass allow_other as a mount option.
auto – Try mounting with allow_other first, and if that fails, retry without allow_other.
- Object BlockExportOptionsFuse (Since: 6.0)ïƒ
- Availability:
CONFIG_FUSEOptions for exporting a block graph node on some (file) mountpoint as a raw image.
- Members:
mountpoint (
string) – Path on which to export the block device via FUSE. This must point to an existing regular file.growable (
boolean, optional) – Whether writes beyond the EOF should grow the block node accordingly. (default: false)allow-other (
FuseExportAllowOther, optional) – If this is off, only qemu’s user is allowed access to this export. That cannot be changed even with chmod or chown. Enabling this option will allow other users access to the export with the FUSE mount option “allow_otherâ€. Note that using allow_other as a non-root user requires user_allow_other to be enabled in the global fuse.conf configuration file. In auto mode (the default), the FUSE export driver will first attempt to mount the export with allow_other, and if that fails, try again without. (since 6.1; default: auto)
- Object BlockExportOptionsVduseBlk (Since: 7.1)ïƒ
A vduse-blk block export.
- Members:
name (
string) – the name of VDUSE device (must be unique across the host).num-queues (
int, optional) – the number of virtqueues. Defaults to 1.queue-size (
int, optional) – the size of virtqueue. Defaults to 256.logical-block-size (
int, optional) – Logical block size in bytes. Range [512, PAGE_SIZE] and must be power of 2. Defaults to 512 bytes.serial (
string, optional) – the serial number of virtio block device. Defaults to empty string.
- Object NbdServerAddOptions (Since: 5.0)ïƒ
An NBD block export, per legacy nbd-server-add command.
- Members:
device (
string) – The device name or node name of the node to be exportedwritable (
boolean, optional) – Whether clients should be able to write to the device via the NBD connection (default false).bitmap (
string, optional) – Also export a single dirty bitmap reachable fromdevice, so the NBD client can use NBD_OPT_SET_META_CONTEXT with the metadata context name “qemu:dirty-bitmap:BITMAP†to inspect the bitmap (since 4.0).The members of
BlockExportOptionsNbdBase.
- Command nbd-server-add (Since: 1.3)ïƒ
- This command is deprecated.
Export a block node to QEMU’s embedded NBD server.
The export name will be used as the id for the resulting block export.
- Arguments:
The members of
NbdServerAddOptions.
- Features:
deprecated – This command is deprecated. Use
block-export-addinstead.
- Errors:
if the server is not running
if an export with the same name already exists
- Enum BlockExportRemoveMode (Since: 2.12)ïƒ
Mode for removing a block export.
- Values:
safe – Remove export if there are no existing connections, fail otherwise.
hard – Drop all connections immediately and remove export.
- Command nbd-server-remove (Since: 2.12)ïƒ
- This command is deprecated.
Remove NBD export by name.
- Arguments:
name (
string) – Block export id.mode (
BlockExportRemoveMode, optional) – Mode of command operation. SeeBlockExportRemoveModedescription. Default is ‘safe’.
- Features:
deprecated – This command is deprecated. Use
block-export-delinstead.
- Errors:
if the server is not running
if export is not found
if mode is ‘safe’ and there are existing connections
- Command nbd-server-stop (Since: 1.3)ïƒ
Stop QEMU’s embedded NBD server, and unregister all devices previously added via
nbd-server-add.
- Enum BlockExportType (Since: 4.2)ïƒ
An enumeration of block export types
- Values:
nbd – NBD export
vhost-user-blk – vhost-user-blk export (since 5.2)
fuse – FUSE export (since: 6.0)
vduse-blk – vduse-blk export (since 7.1)
- Object BlockExportOptions (Since: 4.2)ïƒ
Describes a block export, i.e. how single node should be exported on an external interface.
- Members:
type (
BlockExportType) – Block export typeid (
string) – A unique identifier for the block export (across all export types)node-name (
string) – The node name of the block node to be exported (since: 5.2)writable (
boolean, optional) – True if clients should be able to write to the export (default false)writethrough (
boolean, optional) – If true, caches are flushed after every write request to the export before completion is signalled. (since: 5.2; default: false)iothread (
string, optional) – The name of the iothread object where the export will run. The default is to use the thread currently associated with the block node. (since: 5.2)fixed-iothread (
boolean, optional) – True prevents the block node from being moved to another thread while the export is active. If true andiothreadis given, export creation fails if the block node cannot be moved to the iothread. The default is false. (since: 5.2)allow-inactive (
boolean, optional) – If true, the export allows the exported node to be inactive. If it is created for an inactive block node, the node remains inactive. If the export type doesn’t support running on an inactive node, an error is returned. If false, inactive block nodes are automatically activated before creating the export and trying to inactivate them later fails. (since: 10.0; default: false)When
typeisnbd: The members ofBlockExportOptionsNbd.When
typeisvhost-user-blk: The members ofBlockExportOptionsVhostUserBlk.When
typeisfuse: The members ofBlockExportOptionsFuse.When
typeisvduse-blk: The members ofBlockExportOptionsVduseBlk.
- Command block-export-add (Since: 5.2)ïƒ
Creates a new block export.
- Arguments:
The members of
BlockExportOptions.
- Command block-export-del (Since: 5.2)ïƒ
Request to remove a block export. This drops the user’s reference to the export, but the export may still stay around after this command returns until the shutdown of the export has completed.
- Arguments:
id (
string) – Block export id.mode (
BlockExportRemoveMode, optional) – Mode of command operation. SeeBlockExportRemoveModedescription. Default is ‘safe’.
- Errors:
if the export is not found
if
modeis ‘safe’ and the export is still in use (e.g. by existing client connections)
- Event BLOCK_EXPORT_DELETED (Since: 5.2)ïƒ
Emitted when a block export is removed and its id can be reused.
- Members:
id (
string) – Block export id.
- Object BlockExportInfo (Since: 5.2)ïƒ
Information about a single block export.
- Members:
id (
string) – The unique identifier for the block exporttype (
BlockExportType) – The block export typenode-name (
string) – The node name of the block node that is exportedshutting-down (
boolean) – True if the export is shutting down (e.g. after a block-export-del command, but before the shutdown has completed)
- Command query-block-exports (Since: 5.2)ïƒ
- Return:
[BlockExportInfo]– A list of BlockExportInfo describing all block exports
Character devicesïƒ
- Object ChardevInfo (Since: 0.14)ïƒ
Information about a character device.
- Members:
label (
string) – the label of the character devicefilename (
string) – the filename of the character devicefrontend-open (
boolean) – shows whether the frontend device attached to this backend (e.g. with the chardev=… option) is in open or closed state (since 2.1)
Note
filenameis encoded using the QEMU command line character device encoding. See the QEMU man page for details.
- Command query-chardev (Since: 0.14)ïƒ
Returns information about current character devices.
- Return:
[ChardevInfo]– a list ofChardevInfo
Example:
-> { "execute": "query-chardev" } <- { "return": [ { "label": "charchannel0", "filename": "unix:/var/lib/libvirt/qemu/seabios.rhel6.agent,server=on", "frontend-open": false }, { "label": "charmonitor", "filename": "unix:/var/lib/libvirt/qemu/seabios.rhel6.monitor,server=on", "frontend-open": true }, { "label": "charserial0", "filename": "pty:/dev/pts/2", "frontend-open": true } ] }
- Object ChardevBackendInfo (Since: 2.0)ïƒ
Information about a character device backend
- Members:
name (
string) – The backend name
- Command query-chardev-backends (Since: 2.0)ïƒ
Returns information about character device backends.
- Return:
[ChardevBackendInfo]– a list ofChardevBackendInfo
Example:
-> { "execute": "query-chardev-backends" } <- { "return":[ { "name":"udp" }, { "name":"tcp" }, { "name":"unix" }, { "name":"spiceport" } ] }
- Enum DataFormat (Since: 1.4)ïƒ
An enumeration of data format.
- Values:
utf8 – Data is a UTF-8 string (RFC 3629)
base64 – Data is Base64 encoded binary (RFC 3548)
- Command ringbuf-write (Since: 1.4)ïƒ
Write to a ring buffer character device.
- Arguments:
device (
string) – the ring buffer character device namedata (
string) – data to writeformat (
DataFormat, optional) –data encoding (default ‘utf8’).
base64: data must be base64 encoded text. Its binary decoding gets written.
utf8: data’s UTF-8 encoding is written
data itself is always Unicode regardless of format, like any other string.
Example:
-> { "execute": "ringbuf-write", "arguments": { "device": "foo", "data": "abcdefgh", "format": "utf8" } } <- { "return": {} }
- Command ringbuf-read (Since: 1.4)ïƒ
Read from a ring buffer character device.
- Arguments:
device (
string) – the ring buffer character device namesize (
int) – how many bytes to read at mostformat (
DataFormat, optional) –data encoding (default ‘utf8’).
base64: the data read is returned in base64 encoding.
utf8: the data read is interpreted as UTF-8. Bug: can screw up when the buffer contains invalid UTF-8 sequences, NUL characters, after the ring buffer lost data, and when reading stops because the size limit is reached.
The return value is always Unicode regardless of format, like any other string.
- Return:
string– data read from the device
Example:
-> { "execute": "ringbuf-read", "arguments": { "device": "foo", "size": 1000, "format": "utf8" } } <- { "return": "abcdefgh" }
- Object ChardevCommon (Since: 2.6)ïƒ
Configuration shared across all chardev backends
- Members:
logfile (
string, optional) – The name of a logfile to save outputlogappend (
boolean, optional) – true to append instead of truncate (default to false to truncate)
- Object ChardevFile (Since: 1.4)ïƒ
Configuration info for file chardevs.
- Members:
in (
string, optional) – The name of the input fileout (
string) – The name of the output fileappend (
boolean, optional) – Open the file in append mode (default false to truncate) (Since 2.6)The members of
ChardevCommon.
- Object ChardevHostdev (Since: 1.4)ïƒ
Configuration info for device and pipe chardevs.
- Members:
device (
string) – The name of the special file for the device, i.e. /dev/ttyS0 on Unix or COM1: on WindowsThe members of
ChardevCommon.
- Object ChardevSocket (Since: 1.4)ïƒ
Configuration info for (stream) socket chardevs.
- Members:
addr (
SocketAddressLegacy) – socket address to listen on (server=true) or connect to (server=false)tls-creds (
string, optional) – the ID of the TLS credentials object (since 2.6)tls-authz (
string, optional) – the ID of the QAuthZ authorization object against which the client’s x509 distinguished name will be validated. This object is only resolved at time of use, so can be deleted and recreated on the fly while the chardev server is active. If missing, it will default to denying access (since 4.0)server (
boolean, optional) – create server socket (default: true)wait (
boolean, optional) – wait for incoming connection on server sockets (default: false). Silently ignored with server: false. This use is deprecated.nodelay (
boolean, optional) – set TCP_NODELAY socket option (default: false)telnet (
boolean, optional) – enable telnet protocol on server sockets (default: false)tn3270 (
boolean, optional) – enable tn3270 protocol on server sockets (default: false) (Since: 2.10)websocket (
boolean, optional) – enable websocket protocol on server sockets (default: false) (Since: 3.1)reconnect (
int, optional) – For a client socket, if a socket is disconnected, then attempt a reconnect after the given number of seconds. Setting this to zero disables this function. The use of this member is deprecated, usereconnect-msinstead. (default: 0) (Since: 2.2)reconnect-ms (
int, optional) – For a client socket, if a socket is disconnected, then attempt a reconnect after the given number of milliseconds. Setting this to zero disables this function. This member is mutually exclusive withreconnect. (default: 0) (Since: 9.2)The members of
ChardevCommon.
- Features:
deprecated – Member
reconnectis deprecated. Usereconnect-msinstead.
- Object ChardevUdp (Since: 1.5)ïƒ
Configuration info for datagram socket chardevs.
- Members:
remote (
SocketAddressLegacy) – remote addresslocal (
SocketAddressLegacy, optional) – local addressThe members of
ChardevCommon.
- Object ChardevMux (Since: 1.5)ïƒ
Configuration info for mux chardevs.
- Members:
chardev (
string) – name of the base chardev.The members of
ChardevCommon.
- Object ChardevHub (Since: 10.0)ïƒ
Configuration info for hub chardevs.
- Members:
chardevs (
[string]) – IDs to be added to this hub (maximum 4 devices).The members of
ChardevCommon.
- Object ChardevStdio (Since: 1.5)ïƒ
Configuration info for stdio chardevs.
- Members:
signal (
boolean, optional) – Allow signals (such as SIGINT triggered by ^C) be delivered to qemu. Default: true.The members of
ChardevCommon.
- Object ChardevSpiceChannel (Since: 1.5)ïƒ
- Availability:
CONFIG_SPICEConfiguration info for spice vm channel chardevs.
- Members:
type (
string) – kind of channel (for example vdagent).The members of
ChardevCommon.
- Object ChardevSpicePort (Since: 1.5)ïƒ
- Availability:
CONFIG_SPICEConfiguration info for spice port chardevs.
- Members:
fqdn (
string) – name of the channel (see docs/spice-port-fqdn.txt)The members of
ChardevCommon.
- Object ChardevDBus (Since: 7.0)ïƒ
- Availability:
CONFIG_DBUS_DISPLAYConfiguration info for DBus chardevs.
- Members:
name (
string) – name of the channel (following docs/spice-port-fqdn.txt)The members of
ChardevCommon.
- Object ChardevVC (Since: 1.5)ïƒ
Configuration info for virtual console chardevs.
- Members:
width (
int, optional) – console width, in pixelsheight (
int, optional) – console height, in pixelscols (
int, optional) – console width, in charsrows (
int, optional) – console height, in charsThe members of
ChardevCommon.
Note
The options are only effective when the VNC or SDL graphical display backend is active. They are ignored with the GTK, Spice, VNC and D-Bus display backends.
- Object ChardevRingbuf (Since: 1.5)ïƒ
Configuration info for ring buffer chardevs.
- Members:
size (
int, optional) – ring buffer size, must be power of two, default is 65536The members of
ChardevCommon.
- Object ChardevQemuVDAgent (Since: 6.1)ïƒ
- Availability:
CONFIG_SPICE_PROTOCOLConfiguration info for qemu vdagent implementation.
- Members:
mouse (
boolean, optional) – enable/disable mouse, default is enabled.clipboard (
boolean, optional) – enable/disable clipboard, default is disabled.The members of
ChardevCommon.
- Object ChardevPty (Since: 9.2)ïƒ
Configuration info for pty implementation.
- Members:
path (
string, optional) – optional path to create a symbolic link that points to the allocated PTYThe members of
ChardevCommon.
- Enum ChardevBackendKind (Since: 1.4)ïƒ
- Values:
file – regular files
serial – serial host device
parallel – parallel host device
pipe – pipes (since 1.5)
socket – stream socket
udp – datagram socket (since 1.5)
pty – pseudo-terminal
null – provides no input, throws away output
mux – (since 1.5)
hub – (since 10.0)
msmouse – emulated Microsoft serial mouse (since 1.5)
wctablet – emulated Wacom Penpartner serial tablet (since 2.9)
braille – Baum Braille device (since 1.5)
testdev – device for test-suite control (since 2.2)
stdio – standard I/O (since 1.5)
console – Windows console (since 1.5)
spicevmc – spice vm channel (since 1.5)
spiceport – Spice port channel (since 1.5)
qemu-vdagent – Spice vdagent (since 6.1)
dbus – D-Bus channel (since 7.0)
vc – virtual console (since 1.5)
ringbuf – memory ring buffer (since 1.6)
memory – synonym for
ringbuf(since 1.5)
- Features:
deprecated – Member
memoryis deprecated. Useringbufinstead.
- Object ChardevFileWrapper (Since: 1.4)ïƒ
- Members:
data (
ChardevFile) – Configuration info for file chardevs
- Object ChardevHostdevWrapper (Since: 1.4)ïƒ
- Members:
data (
ChardevHostdev) – Configuration info for device and pipe chardevs
- Object ChardevSocketWrapper (Since: 1.4)ïƒ
- Members:
data (
ChardevSocket) – Configuration info for (stream) socket chardevs
- Object ChardevUdpWrapper (Since: 1.5)ïƒ
- Members:
data (
ChardevUdp) – Configuration info for datagram socket chardevs
- Object ChardevCommonWrapper (Since: 2.6)ïƒ
- Members:
data (
ChardevCommon) – Configuration shared across all chardev backends
- Object ChardevMuxWrapper (Since: 1.5)ïƒ
- Members:
data (
ChardevMux) – Configuration info for mux chardevs
- Object ChardevHubWrapper (Since: 10.0)ïƒ
- Members:
data (
ChardevHub) – Configuration info for hub chardevs
- Object ChardevStdioWrapper (Since: 1.5)ïƒ
- Members:
data (
ChardevStdio) – Configuration info for stdio chardevs
- Object ChardevSpiceChannelWrapper (Since: 1.5)ïƒ
- Availability:
CONFIG_SPICE- Members:
data (
ChardevSpiceChannel) – Configuration info for spice vm channel chardevs
- Object ChardevSpicePortWrapper (Since: 1.5)ïƒ
- Availability:
CONFIG_SPICE- Members:
data (
ChardevSpicePort) – Configuration info for spice port chardevs
- Object ChardevQemuVDAgentWrapper (Since: 6.1)ïƒ
- Availability:
CONFIG_SPICE_PROTOCOL- Members:
data (
ChardevQemuVDAgent) – Configuration info for qemu vdagent implementation
- Object ChardevDBusWrapper (Since: 7.0)ïƒ
- Availability:
CONFIG_DBUS_DISPLAY- Members:
data (
ChardevDBus) – Configuration info for DBus chardevs
- Object ChardevVCWrapper (Since: 1.5)ïƒ
- Members:
data (
ChardevVC) – Configuration info for virtual console chardevs
- Object ChardevRingbufWrapper (Since: 1.5)ïƒ
- Members:
data (
ChardevRingbuf) – Configuration info for ring buffer chardevs
- Object ChardevPtyWrapper (Since: 9.2)ïƒ
- Members:
data (
ChardevPty) – Configuration info for pty chardevs
- Object ChardevBackend (Since: 1.4)ïƒ
Configuration info for the new chardev backend.
- Members:
type (
ChardevBackendKind) – backend typeWhen
typeisfile: The members ofChardevFileWrapper.When
typeisserial: The members ofChardevHostdevWrapper.When
typeisparallel: The members ofChardevHostdevWrapper.When
typeispipe: The members ofChardevHostdevWrapper.When
typeissocket: The members ofChardevSocketWrapper.When
typeisudp: The members ofChardevUdpWrapper.When
typeispty: The members ofChardevPtyWrapper.When
typeisnull: The members ofChardevCommonWrapper.When
typeismux: The members ofChardevMuxWrapper.When
typeishub: The members ofChardevHubWrapper.When
typeismsmouse: The members ofChardevCommonWrapper.When
typeiswctablet: The members ofChardevCommonWrapper.When
typeisbraille: The members ofChardevCommonWrapper.When
typeistestdev: The members ofChardevCommonWrapper.When
typeisstdio: The members ofChardevStdioWrapper.When
typeisconsole: The members ofChardevCommonWrapper.When
typeisspicevmc: The members ofChardevSpiceChannelWrapper.When
typeisspiceport: The members ofChardevSpicePortWrapper.When
typeisqemu-vdagent: The members ofChardevQemuVDAgentWrapper.When
typeisdbus: The members ofChardevDBusWrapper.When
typeisvc: The members ofChardevVCWrapper.When
typeisringbuf: The members ofChardevRingbufWrapper.When
typeismemory: The members ofChardevRingbufWrapper.
- Object ChardevReturn (Since: 1.4)ïƒ
Return info about the chardev backend just created.
- Members:
pty (
string, optional) – name of the slave pseudoterminal device, present if and only if a chardev of type ‘pty’ was created
- Command chardev-add (Since: 1.4)ïƒ
Add a character device backend
- Arguments:
id (
string) – the chardev’s ID, must be uniquebackend (
ChardevBackend) – backend type and parameters
- Return:
ChardevReturn– ChardevReturn.
Example:
-> { "execute" : "chardev-add", "arguments" : { "id" : "foo", "backend" : { "type" : "null", "data" : {} } } } <- { "return": {} }
Example:
-> { "execute" : "chardev-add", "arguments" : { "id" : "bar", "backend" : { "type" : "file", "data" : { "out" : "/tmp/bar.log" } } } } <- { "return": {} }
Example:
-> { "execute" : "chardev-add", "arguments" : { "id" : "baz", "backend" : { "type" : "pty", "data" : {} } } } <- { "return": { "pty" : "/dev/pty/42" } }
- Command chardev-change (Since: 2.10)ïƒ
Change a character device backend
- Arguments:
id (
string) – the chardev’s ID, must existbackend (
ChardevBackend) – new backend type and parameters
- Return:
ChardevReturn– ChardevReturn.
Example:
-> { "execute" : "chardev-change", "arguments" : { "id" : "baz", "backend" : { "type" : "pty", "data" : {} } } } <- { "return": { "pty" : "/dev/pty/42" } }
Example:
-> {"execute" : "chardev-change", "arguments" : { "id" : "charchannel2", "backend" : { "type" : "socket", "data" : { "addr" : { "type" : "unix" , "data" : { "path" : "/tmp/charchannel2.socket" } }, "server" : true, "wait" : false }}}} <- {"return": {}}
- Command chardev-remove (Since: 1.4)ïƒ
Remove a character device backend
- Arguments:
id (
string) – the chardev’s ID, must exist and not be in use
Example:
-> { "execute": "chardev-remove", "arguments": { "id" : "foo" } } <- { "return": {} }
- Command chardev-send-break (Since: 2.10)ïƒ
Send a break to a character device
- Arguments:
id (
string) – the chardev’s ID, must exist
Example:
-> { "execute": "chardev-send-break", "arguments": { "id" : "foo" } } <- { "return": {} }
- Event VSERPORT_CHANGE (Since: 2.1)ïƒ
Emitted when the guest opens or closes a virtio-serial port.
- Members:
id (
string) – device identifier of the virtio-serial portopen (
boolean) – true if the guest has opened the virtio-serial port
Note
This event is rate-limited.
Example:
<- { "event": "VSERPORT_CHANGE", "data": { "id": "channel0", "open": true }, "timestamp": { "seconds": 1401385907, "microseconds": 422329 } }
Dump guest memoryïƒ
- Enum DumpGuestMemoryFormat (Since: 2.0)ïƒ
An enumeration of guest-memory-dump’s format.
- Values:
elf – elf format
kdump-zlib – makedumpfile flattened, kdump-compressed format with zlib compression
kdump-lzo – makedumpfile flattened, kdump-compressed format with lzo compression
kdump-snappy – makedumpfile flattened, kdump-compressed format with snappy compression
kdump-raw-zlib – raw assembled kdump-compressed format with zlib compression (since 8.2)
kdump-raw-lzo – raw assembled kdump-compressed format with lzo compression (since 8.2)
kdump-raw-snappy – raw assembled kdump-compressed format with snappy compression (since 8.2)
win-dmp – Windows full crashdump format, can be used instead of ELF converting (since 2.13)
- Command dump-guest-memory (Since: 1.2)ïƒ
Dump guest’s memory to vmcore. It is a synchronous operation that can take very long depending on the amount of guest memory.
- Arguments:
paging (
boolean) –if true, do paging to get guest’s memory mapping. This allows using gdb to process the core file.
IMPORTANT: this option can make QEMU allocate several gigabytes of RAM. This can happen for a large guest, or a malicious guest pretending to be large.
Also, paging=true has the following limitations:
The guest may be in a catastrophic state or can have corrupted memory, which cannot be trusted
The guest can be in real-mode even if paging is enabled. For example, the guest uses ACPI to sleep, and ACPI sleep state goes in real-mode
Currently only supported on i386 and x86_64.
protocol (
string) –the filename or file descriptor of the vmcore. The supported protocols are:
file: the protocol starts with “file:â€, and the following string is the file’s path.
fd: the protocol starts with “fd:â€, and the following string is the fd’s name.
detach (
boolean, optional) – if true, QMP will return immediately rather than waiting for the dump to finish. The user can track progress using “query-dumpâ€. (since 2.6).begin (
int, optional) – if specified, the starting physical address.length (
int, optional) – if specified, the memory size, in bytes. If you don’t want to dump all guest’s memory, please specify the startbeginandlengthformat (
DumpGuestMemoryFormat, optional) – if specified, the format of guest memory dump. But non-elf format is conflict with paging and filter, ie.paging,beginandlengthis not allowed to be specified with non-elfformatat the same time (since 2.0)
Note
All boolean arguments default to false.
Example:
-> { "execute": "dump-guest-memory", "arguments": { "paging": false, "protocol": "fd:dump" } } <- { "return": {} }
- Enum DumpStatus (Since: 2.6)ïƒ
Describe the status of a long-running background guest memory dump.
- Values:
none – no dump-guest-memory has started yet.
active – there is one dump running in background.
completed – the last dump has finished successfully.
failed – the last dump has failed.
- Object DumpQueryResult (Since: 2.6)ïƒ
The result format for ‘query-dump’.
- Members:
status (
DumpStatus) – enum ofDumpStatus, which shows current dump statuscompleted (
int) – bytes written in latest dump (uncompressed)total (
int) – total bytes to be written in latest dump (uncompressed)
- Command query-dump (Since: 2.6)ïƒ
Query latest dump status.
- Return:
DumpQueryResult– ADumpStatusobject showing the dump status.
Example:
-> { "execute": "query-dump" } <- { "return": { "status": "active", "completed": 1024000, "total": 2048000 } }
- Event DUMP_COMPLETED (Since: 2.6)ïƒ
Emitted when background dump has completed
- Members:
result (
DumpQueryResult) – final dump statuserror (
string, optional) – human-readable error string that provides hint on why dump failed. Only presents on failure. The user should not try to interpret the error string.
Example:
<- { "event": "DUMP_COMPLETED", "data": { "result": { "total": 1090650112, "status": "completed", "completed": 1090650112 } }, "timestamp": { "seconds": 1648244171, "microseconds": 950316 } }
- Object DumpGuestMemoryCapability (Since: 2.0)ïƒ
- Members:
formats (
[DumpGuestMemoryFormat]) – the available formats for dump-guest-memory
- Command query-dump-guest-memory-capability (Since: 2.0)ïƒ
Returns the available formats for dump-guest-memory
- Return:
DumpGuestMemoryCapability– ADumpGuestMemoryCapabilityobject listing available formats for dump-guest-memory
Example:
-> { "execute": "query-dump-guest-memory-capability" } <- { "return": { "formats": ["elf", "kdump-zlib", "kdump-lzo", "kdump-snappy"] } }
Net devicesïƒ
- Command set_link (Since: 0.14)ïƒ
Sets the link status of a virtual network adapter.
- Arguments:
name (
string) – the device name of the virtual network adapterup (
boolean) – true to set the link status to be up
- Errors:
If
nameis not a valid network device, DeviceNotFound
Note
Not all network adapters support setting link status. This command will succeed even if the network adapter does not support link status notification.
Example:
-> { "execute": "set_link", "arguments": { "name": "e1000.0", "up": false } } <- { "return": {} }
- Command netdev_add (Since: 0.14)ïƒ
Add a network backend.
Additional arguments depend on the type.
- Arguments:
The members of
Netdev.
- Errors:
If
typeis not a valid network backend, DeviceNotFound
Example:
-> { "execute": "netdev_add", "arguments": { "type": "user", "id": "netdev1", "dnssearch": [ { "str": "example.org" } ] } } <- { "return": {} }
- Command netdev_del (Since: 0.14)ïƒ
Remove a network backend.
- Arguments:
id (
string) – the name of the network backend to remove
- Errors:
If
idis not a valid network backend, DeviceNotFound
Example:
-> { "execute": "netdev_del", "arguments": { "id": "netdev1" } } <- { "return": {} }
- Object NetLegacyNicOptions (Since: 1.2)ïƒ
Create a new Network Interface Card.
- Members:
netdev (
string, optional) – id of -netdev to connect tomacaddr (
string, optional) – MAC addressmodel (
string, optional) – device model (e1000, rtl8139, virtio etc.)addr (
string, optional) – PCI device addressvectors (
int, optional) – number of MSI-x vectors, 0 to disable MSI-X
- Object String (Since: 1.2)ïƒ
A fat type wrapping ‘str’, to be embedded in lists.
- Members:
str (
string) – Not documented
- Object NetdevUserOptions (Since: 1.2)ïƒ
Use the user mode network stack which requires no administrator privilege to run.
- Members:
hostname (
string, optional) – client hostname reported by the builtin DHCP serverrestrict (
boolean, optional) – isolate the guest from the hostipv4 (
boolean, optional) – whether to support IPv4, default true for enabled (since 2.6)ipv6 (
boolean, optional) – whether to support IPv6, default true for enabled (since 2.6)ip (
string, optional) – legacy parameter, use net= insteadnet (
string, optional) – IP network address that the guest will see, in the form addr[/netmask] The netmask is optional, and can be either in the form a.b.c.d or as a number of valid top-most bits. Default is 10.0.2.0/24.host (
string, optional) – guest-visible address of the hosttftp (
string, optional) – root directory of the built-in TFTP serverbootfile (
string, optional) – BOOTP filename, for use with tftp=dhcpstart (
string, optional) – the first of the 16 IPs the built-in DHCP server can assigndns (
string, optional) – guest-visible address of the virtual nameserverdnssearch (
[String], optional) – list of DNS suffixes to search, passed as DHCP option to the guestdomainname (
string, optional) – guest-visible domain name of the virtual nameserver (since 3.0)ipv6-prefix (
string, optional) – IPv6 network prefix (default is fec0::) (since 2.6). The network prefix is given in the usual hexadecimal IPv6 address notation.ipv6-prefixlen (
int, optional) – IPv6 network prefix length (default is 64) (since 2.6)ipv6-host (
string, optional) – guest-visible IPv6 address of the host (since 2.6)ipv6-dns (
string, optional) – guest-visible IPv6 address of the virtual nameserver (since 2.6)smb (
string, optional) – root directory of the built-in SMB serversmbserver (
string, optional) – IP address of the built-in SMB serverhostfwd (
[String], optional) – redirect incoming TCP or UDP host connections to guest endpointsguestfwd (
[String], optional) – forward guest TCP connectionstftp-server-name (
string, optional) – RFC2132 “TFTP server name†string (Since 3.1)
- Object NetdevTapOptions (Since: 1.2)ïƒ
Used to configure a host TAP network interface backend.
- Members:
ifname (
string, optional) – interface namefd (
string, optional) – file descriptor of an already opened tapfds (
string, optional) – multiple file descriptors of already opened multiqueue capable tapscript (
string, optional) – script to initialize the interfacedownscript (
string, optional) – script to shut down the interfacebr (
string, optional) – bridge name (since 2.8)helper (
string, optional) – command to execute to configure bridgesndbuf (
int, optional) – send buffer limit. Understands [TGMKkb] suffixes.vnet_hdr (
boolean, optional) – enable the IFF_VNET_HDR flag on the tap interfacevhost (
boolean, optional) – enable vhost-net network acceleratorvhostfd (
string, optional) – file descriptor of an already opened vhost net devicevhostfds (
string, optional) – file descriptors of multiple already opened vhost net devicesvhostforce (
boolean, optional) – vhost on for non-MSIX virtio guestsqueues (
int, optional) – number of queues to be created for multiqueue capable tappoll-us (
int, optional) – maximum number of microseconds that could be spent on busy polling for tap (since 2.7)
- Object NetdevSocketOptions (Since: 1.2)ïƒ
Socket netdevs are used to establish a network connection to another QEMU virtual machine via a TCP socket.
- Members:
fd (
string, optional) – file descriptor of an already opened socketlisten (
string, optional) – port number, and optional hostname, to listen onconnect (
string, optional) – port number, and optional hostname, to connect tomcast (
string, optional) – UDP multicast address and port numberlocaladdr (
string, optional) – source address and port for multicast and udp packetsudp (
string, optional) – UDP unicast address and port number
- Object NetdevL2TPv3Options (Since: 2.1)ïƒ
Configure an Ethernet over L2TPv3 tunnel.
- Members:
src (
string) – source addressdst (
string) – destination addresssrcport (
string, optional) – source port - mandatory for udp, optional for ipdstport (
string, optional) – destination port - mandatory for udp, optional for ipipv6 (
boolean, optional) – force the use of ipv6udp (
boolean, optional) – use the udp version of l2tpv3 encapsulationcookie64 (
boolean, optional) – use 64 bit cookiescounter (
boolean, optional) – have sequence counterpincounter (
boolean, optional) – pin sequence counter to zero - workaround for buggy implementations or networks with packet reordertxcookie (
int, optional) – 32 or 64 bit transmit cookierxcookie (
int, optional) – 32 or 64 bit receive cookietxsession (
int) – 32 bit transmit sessionrxsession (
int, optional) – 32 bit receive session - if not specified set to the same value as transmitoffset (
int, optional) – additional offset - allows the insertion of additional application-specific data before the packet payload
- Object NetdevVdeOptions (Since: 1.2)ïƒ
Connect to a vde switch running on the host.
- Members:
sock (
string, optional) – socket pathport (
int, optional) – port numbergroup (
string, optional) – group owner of socketmode (
int, optional) – permissions for socket
- Object NetdevBridgeOptions (Since: 1.2)ïƒ
Connect a host TAP network interface to a host bridge device.
- Members:
br (
string, optional) – bridge namehelper (
string, optional) – command to execute to configure bridge
- Object NetdevHubPortOptions (Since: 1.2)ïƒ
Connect two or more net clients through a software hub.
- Members:
hubid (
int) – hub identifier numbernetdev (
string, optional) – used to connect hub to a netdev instead of a device (since 2.12)
- Object NetdevNetmapOptions (Since: 2.0)ïƒ
Connect a client to a netmap-enabled NIC or to a VALE switch port
- Members:
ifname (
string) – Either the name of an existing network interface supported by netmap, or the name of a VALE port (created on the fly). A VALE port name is in the form ‘valeXXX:YYY’, where XXX and YYY are non-negative integers. XXX identifies a switch and YYY identifies a port of the switch. VALE ports having the same XXX are therefore connected to the same switch.devname (
string, optional) – path of the netmap device (default: ‘/dev/netmap’).
- Enum AFXDPMode (Since: 8.2)ïƒ
- Availability:
CONFIG_AF_XDPAttach mode for a default XDP program
- Values:
skb – generic mode, no driver support necessary
native – DRV mode, program is attached to a driver, packets are passed to the socket without allocation of skb.
- Object NetdevAFXDPOptions (Since: 8.2)ïƒ
- Availability:
CONFIG_AF_XDPAF_XDP network backend
- Members:
ifname (
string) – The name of an existing network interface.mode (
AFXDPMode, optional) – Attach mode for a default XDP program. If not specified, then ‘native’ will be tried first, then ‘skb’.force-copy (
boolean, optional) – Force XDP copy mode even if device supports zero-copy. (default: false)queues (
int, optional) – number of queues to be used for multiqueue interfaces (default: 1).start-queue (
int, optional) – Usequeuesstarting from this queue number (default: 0).inhibit (
boolean, optional) – Don’t load a default XDP program, use one already loaded to the interface (default: false). Requiressock-fds.sock-fds (
string, optional) – A colon (:) separated list of file descriptors for already open but not bound AF_XDP sockets in the queue order. One fd per queue. These descriptors should already be added into XDP socket map for corresponding queues. Requiresinhibit.
- Object NetdevVhostUserOptions (Since: 2.1)ïƒ
Vhost-user network backend
- Members:
chardev (
string) – name of a unix socket chardevvhostforce (
boolean, optional) – vhost on for non-MSIX virtio guests (default: false).queues (
int, optional) – number of queues to be created for multiqueue vhost-user (default: 1) (Since 2.5)
- Object NetdevVhostVDPAOptions (Since: 5.1)ïƒ
Vhost-vdpa network backend
vDPA device is a device that uses a datapath which complies with the virtio specifications with a vendor specific control path.
- Members:
vhostdev (
string, optional) – path of vhost-vdpa device (default:’/dev/vhost-vdpa-0’)vhostfd (
string, optional) – file descriptor of an already opened vhost vdpa devicequeues (
int, optional) – number of queues to be created for multiqueue vhost-vdpa (default: 1)x-svq (
boolean, optional) – Start device with (experimental) shadow virtqueue. (Since 7.1) (default: false)
- Features:
unstable – Member
x-svqis experimental.
- Object NetdevVmnetHostOptions (Since: 7.1)ïƒ
- Availability:
CONFIG_VMNETvmnet (host mode) network backend.
Allows the vmnet interface to communicate with other vmnet interfaces that are in host mode and also with the host.
- Members:
start-address (
string, optional) – The starting IPv4 address to use for the interface. Must be in the private IP range (RFC 1918). Must be specified along withend-addressandsubnet-mask. This address is used as the gateway address. The subsequent address up to and including end-address are placed in the DHCP pool.end-address (
string, optional) – The DHCP IPv4 range end address to use for the interface. Must be in the private IP range (RFC 1918). Must be specified along withstart-addressandsubnet-mask.subnet-mask (
string, optional) – The IPv4 subnet mask to use on the interface. Must be specified along withstart-addressandsubnet-mask.isolated (
boolean, optional) – Enable isolation for this interface. Interface isolation ensures that vmnet interface is not able to communicate with any other vmnet interfaces. Only communication with host is allowed. Requires at least macOS Big Sur 11.0.net-uuid (
string, optional) – The identifier (UUID) to uniquely identify the isolated network vmnet interface should be added to. If set, no DHCP service is provided for this interface and network communication is allowed only with other interfaces added to this network identified by the UUID. Requires at least macOS Big Sur 11.0.
- Availability:
CONFIG_VMNETvmnet (shared mode) network backend.
Allows traffic originating from the vmnet interface to reach the Internet through a network address translator (NAT). The vmnet interface can communicate with the host and with other shared mode interfaces on the same subnet. If no DHCP settings, subnet mask and IPv6 prefix specified, the interface can communicate with any of other interfaces in shared mode.
- Members:
start-address (
string, optional) – The starting IPv4 address to use for the interface. Must be in the private IP range (RFC 1918). Must be specified along withend-addressandsubnet-mask. This address is used as the gateway address. The subsequent address up to and including end-address are placed in the DHCP pool.end-address (
string, optional) – The DHCP IPv4 range end address to use for the interface. Must be in the private IP range (RFC 1918). Must be specified along withstart-addressandsubnet-mask.subnet-mask (
string, optional) – The IPv4 subnet mask to use on the interface. Must be specified along withstart-addressandsubnet-mask.isolated (
boolean, optional) – Enable isolation for this interface. Interface isolation ensures that vmnet interface is not able to communicate with any other vmnet interfaces. Only communication with host is allowed. Requires at least macOS Big Sur 11.0.nat66-prefix (
string, optional) – The IPv6 prefix to use into guest network. Must be a unique local address i.e. start with fd00::/8 and have length of 64.
- Object NetdevVmnetBridgedOptions (Since: 7.1)ïƒ
- Availability:
CONFIG_VMNETvmnet (bridged mode) network backend.
Bridges the vmnet interface with a physical network interface.
- Members:
ifname (
string) – The name of the physical interface to be bridged.isolated (
boolean, optional) – Enable isolation for this interface. Interface isolation ensures that vmnet interface is not able to communicate with any other vmnet interfaces. Only communication with host is allowed. Requires at least macOS Big Sur 11.0.
- Object NetdevStreamOptions (Since: 7.2)ïƒ
Configuration info for stream socket netdev
- Members:
addr (
SocketAddress) – socket address to listen on (server=true) or connect to (server=false)server (
boolean, optional) – create server socket (default: false)reconnect (
int, optional) – For a client socket, if a socket is disconnected, then attempt a reconnect after the given number of seconds. Setting this to zero disables this function. (default: 0) (since 8.0)reconnect-ms (
int, optional) – For a client socket, if a socket is disconnected, then attempt a reconnect after the given number of milliseconds. Setting this to zero disables this function. This member is mutually exclusive withreconnect. (default: 0) (Since: 9.2)
Only SocketAddress types ‘unix’, ‘inet’ and ‘fd’ are supported.
- Features:
deprecated – Member
reconnectis deprecated. Usereconnect-msinstead.
- Object NetdevDgramOptions (Since: 7.2)ïƒ
Configuration info for datagram socket netdev.
- Members:
remote (
SocketAddress, optional) – remote addresslocal (
SocketAddress, optional) – local address
Only SocketAddress types ‘unix’, ‘inet’ and ‘fd’ are supported.
If remote address is present and it’s a multicast address, local address is optional. Otherwise local address is required and remote address is optional.
Valid parameters combination tableïƒ remote
local
okay?
absent
absent
no
absent
not fd
no
absent
fd
yes
multicast
absent
yes
multicast
present
yes
not multicast
absent
no
not multicast
present
yes
- Enum NetClientDriver (Since: 2.7)ïƒ
Available netdev drivers.
- Values:
l2tpv3 – since 2.1
vhost-vdpa – since 5.1
vmnet-host – since 7.1
vmnet-shared – since 7.1
vmnet-bridged – since 7.1
stream – since 7.2
dgram – since 7.2
af-xdp – since 8.2
none – Not documented
nic – Not documented
user – Not documented
tap – Not documented
socket – Not documented
vde – Not documented
bridge – Not documented
hubport – Not documented
netmap – Not documented
vhost-user – Not documented
- Object Netdev (Since: 1.2)ïƒ
Captures the configuration of a network device.
- Members:
id (
string) – identifier for monitor commands.type (
NetClientDriver) – Specify the driver used for interpreting remaining arguments.When
typeisnic: The members ofNetLegacyNicOptions.When
typeisuser: The members ofNetdevUserOptions.When
typeistap: The members ofNetdevTapOptions.When
typeisl2tpv3: The members ofNetdevL2TPv3Options.When
typeissocket: The members ofNetdevSocketOptions.When
typeisstream: The members ofNetdevStreamOptions.When
typeisdgram: The members ofNetdevDgramOptions.When
typeisvde: The members ofNetdevVdeOptions.When
typeisbridge: The members ofNetdevBridgeOptions.When
typeishubport: The members ofNetdevHubPortOptions.When
typeisnetmap: The members ofNetdevNetmapOptions.When
typeisaf-xdp: The members ofNetdevAFXDPOptions.When
typeisvhost-user: The members ofNetdevVhostUserOptions.When
typeisvhost-vdpa: The members ofNetdevVhostVDPAOptions.When
typeisvmnet-host: The members ofNetdevVmnetHostOptions.When
typeisvmnet-shared: The members ofNetdevVmnetSharedOptions.When
typeisvmnet-bridged: The members ofNetdevVmnetBridgedOptions.
- Enum RxState (Since: 1.6)ïƒ
Packets receiving state
- Values:
normal – filter assigned packets according to the mac-table
none – don’t receive any assigned packet
all – receive all assigned packets
- Object RxFilterInfo (Since: 1.6)ïƒ
Rx-filter information for a NIC.
- Members:
name (
string) – net client namepromiscuous (
boolean) – whether promiscuous mode is enabledmulticast (
RxState) – multicast receive stateunicast (
RxState) – unicast receive statevlan (
RxState) – vlan receive state (Since 2.0)broadcast-allowed (
boolean) – whether to receive broadcastmulticast-overflow (
boolean) – multicast table is overflowed or notunicast-overflow (
boolean) – unicast table is overflowed or notmain-mac (
string) – the main macaddr stringvlan-table (
[int]) – a list of active vlan idunicast-table (
[string]) – a list of unicast macaddr stringmulticast-table (
[string]) – a list of multicast macaddr string
- Command query-rx-filter (Since: 1.6)ïƒ
Return rx-filter information for all NICs (or for the given NIC).
- Arguments:
name (
string, optional) – net client name
- Return:
[RxFilterInfo]– list ofRxFilterInfofor all NICs (or for the given NIC).- Errors:
if the given
namedoesn’t existif the given NIC doesn’t support rx-filter querying
if the given net client isn’t a NIC
Example:
-> { "execute": "query-rx-filter", "arguments": { "name": "vnet0" } } <- { "return": [ { "promiscuous": true, "name": "vnet0", "main-mac": "52:54:00:12:34:56", "unicast": "normal", "vlan": "normal", "vlan-table": [ 4, 0 ], "unicast-table": [ ], "multicast": "normal", "multicast-overflow": false, "unicast-overflow": false, "multicast-table": [ "01:00:5e:00:00:01", "33:33:00:00:00:01", "33:33:ff:12:34:56" ], "broadcast-allowed": false } ] }
- Event NIC_RX_FILTER_CHANGED (Since: 1.6)ïƒ
Emitted once until the ‘query-rx-filter’ command is executed, the first event will always be emitted
- Members:
name (
string, optional) – net client namepath (
string) – device path
Example:
<- { "event": "NIC_RX_FILTER_CHANGED", "data": { "name": "vnet0", "path": "/machine/peripheral/vnet0/virtio-backend" }, "timestamp": { "seconds": 1368697518, "microseconds": 326866 } }
- Object AnnounceParameters (Since: 4.0)ïƒ
Parameters for self-announce timers
- Members:
initial (
int) – Initial delay (in ms) before sending the first GARP/RARP announcementmax (
int) – Maximum delay (in ms) between GARP/RARP announcement packetsrounds (
int) – Number of self-announcement attemptsstep (
int) – Delay increase (in ms) after each self-announcement attemptinterfaces (
[string], optional) – An optional list of interface names, which restricts the announcement to the listed interfaces. (Since 4.1)id (
string, optional) – A name to be used to identify an instance of announce-timers and to allow it to modified later. Not for use as part of the migration parameters. (Since 4.1)
- Command announce-self (Since: 4.0)ïƒ
Trigger generation of broadcast RARP frames to update network switches. This can be useful when network bonds fail-over the active slave.
- Arguments:
The members of
AnnounceParameters.
Example:
-> { "execute": "announce-self", "arguments": { "initial": 50, "max": 550, "rounds": 10, "step": 50, "interfaces": ["vn2", "vn3"], "id": "bob" } } <- { "return": {} }
- Event FAILOVER_NEGOTIATED (Since: 4.2)ïƒ
Emitted when VIRTIO_NET_F_STANDBY was enabled during feature negotiation. Failover primary devices which were hidden (not hotplugged when requested) before will now be hotplugged by the virtio-net standby device.
- Members:
device-id (
string) – QEMU device id of the unplugged device
Example:
<- { "event": "FAILOVER_NEGOTIATED", "data": { "device-id": "net1" }, "timestamp": { "seconds": 1368697518, "microseconds": 326866 } }
- Event NETDEV_STREAM_CONNECTED (Since: 7.2)ïƒ
Emitted when the netdev stream backend is connected
- Members:
netdev-id (
string) – QEMU netdev id that is connectedaddr (
SocketAddress) – The destination address
Example:
<- { "event": "NETDEV_STREAM_CONNECTED", "data": { "netdev-id": "netdev0", "addr": { "port": "47666", "ipv6": true, "host": "::1", "type": "inet" } }, "timestamp": { "seconds": 1666269863, "microseconds": 311222 } }
Example:
<- { "event": "NETDEV_STREAM_CONNECTED", "data": { "netdev-id": "netdev0", "addr": { "path": "/tmp/qemu0", "type": "unix" } }, "timestamp": { "seconds": 1666269706, "microseconds": 413651 } }
- Event NETDEV_STREAM_DISCONNECTED (Since: 7.2)ïƒ
Emitted when the netdev stream backend is disconnected
- Members:
netdev-id (
string) – QEMU netdev id that is disconnected
Example:
<- { "event": "NETDEV_STREAM_DISCONNECTED", "data": {"netdev-id": "netdev0"}, "timestamp": {"seconds": 1663330937, "microseconds": 526695} }
- Event NETDEV_VHOST_USER_CONNECTED (Since: 10.0)ïƒ
Emitted when the vhost-user chardev is connected
- Members:
netdev-id (
string) – QEMU netdev id that is connectedchardev-id (
string) – The character device id used by the QEMU netdev
Example:
<- { "timestamp": {"seconds": 1739538638, "microseconds": 354181 }, "event": "NETDEV_VHOST_USER_CONNECTED", "data": { "netdev-id": "netdev0", "chardev-id": "chr0" } }
- Event NETDEV_VHOST_USER_DISCONNECTED (Since: 10.0)ïƒ
Emitted when the vhost-user chardev is disconnected
- Members:
netdev-id (
string) – QEMU netdev id that is disconnected
Example:
<- { "timestamp": { "seconds": 1739538634, "microseconds": 920450 }, "event": "NETDEV_VHOST_USER_DISCONNECTED", "data": { "netdev-id": "netdev0" } }
eBPF Objectsïƒ
eBPF object is an ELF binary that contains the eBPF program and eBPF map description(BTF). Overall, eBPF object should contain the program and enough metadata to create/load eBPF with libbpf. As the eBPF maps/program should correspond to QEMU, the eBPF can’t be used from different QEMU build.
Currently, there is a possible eBPF for receive-side scaling (RSS).
- Object EbpfObject (Since: 9.0)ïƒ
- Availability:
CONFIG_EBPFAn eBPF ELF object.
- Members:
object (
string) – the eBPF object encoded in base64
- Enum EbpfProgramID (Since: 9.0)ïƒ
- Availability:
CONFIG_EBPFThe eBPF programs that can be gotten with request-ebpf.
- Values:
rss – Receive side scaling, technology that allows steering traffic between queues by calculation hash. Users may set up indirection table and hash/packet types configurations. Used with virtio-net.
- Command request-ebpf (Since: 9.0)ïƒ
- Availability:
CONFIG_EBPFRetrieve an eBPF object that can be loaded with libbpf. Management applications (e.g. libvirt) may load it and pass file descriptors to QEMU, so they can run running QEMU without BPF capabilities.
- Arguments:
id (
EbpfProgramID) – The ID of the program to return.
- Return:
EbpfObject– eBPF object encoded in base64.
Rocker switch deviceïƒ
- Object RockerSwitch (Since: 2.4)ïƒ
Rocker switch information.
- Members:
name (
string) – switch nameid (
int) – switch IDports (
int) – number of front-panel ports
- Command query-rocker (Since: 2.4)ïƒ
Return rocker switch information.
- Arguments:
name (
string) – switch name
- Return:
RockerSwitch–Rockerinformation
Example:
-> { "execute": "query-rocker", "arguments": { "name": "sw1" } } <- { "return": {"name": "sw1", "ports": 2, "id": 1327446905938}}
- Enum RockerPortDuplex (Since: 2.4)ïƒ
An enumeration of port duplex states.
- Values:
half – half duplex
full – full duplex
- Enum RockerPortAutoneg (Since: 2.4)ïƒ
An enumeration of port autoneg states.
- Values:
off – autoneg is off
on – autoneg is on
- Object RockerPort (Since: 2.4)ïƒ
Rocker switch port information.
- Members:
name (
string) – port nameenabled (
boolean) – port is enabled for I/Olink-up (
boolean) – physical link is UP on portspeed (
int) – port link speed in Mbpsduplex (
RockerPortDuplex) – port link duplexautoneg (
RockerPortAutoneg) – port link autoneg
- Command query-rocker-ports (Since: 2.4)ïƒ
Return rocker switch port information.
- Arguments:
name (
string) – port name
- Return:
[RockerPort]– a list ofRockerPortinformation
Example:
-> { "execute": "query-rocker-ports", "arguments": { "name": "sw1" } } <- { "return": [ {"duplex": "full", "enabled": true, "name": "sw1.1", "autoneg": "off", "link-up": true, "speed": 10000}, {"duplex": "full", "enabled": true, "name": "sw1.2", "autoneg": "off", "link-up": true, "speed": 10000} ]}
- Object RockerOfDpaFlowKey (Since: 2.4)ïƒ
Rocker switch OF-DPA flow key
- Members:
priority (
int) – key priority, 0 being lowest prioritytbl-id (
int) – flow table IDin-pport (
int, optional) – physical input porttunnel-id (
int, optional) – tunnel IDvlan-id (
int, optional) – VLAN IDeth-type (
int, optional) – Ethernet header typeeth-src (
string, optional) – Ethernet header source MAC addresseth-dst (
string, optional) – Ethernet header destination MAC addressip-proto (
int, optional) – IP Header protocol fieldip-tos (
int, optional) – IP header TOS fieldip-dst (
string, optional) – IP header destination address
Note
Optional members may or may not appear in the flow key depending if they’re relevant to the flow key.
- Object RockerOfDpaFlowMask (Since: 2.4)ïƒ
Rocker switch OF-DPA flow mask
- Members:
in-pport (
int, optional) – physical input porttunnel-id (
int, optional) – tunnel IDvlan-id (
int, optional) – VLAN IDeth-src (
string, optional) – Ethernet header source MAC addresseth-dst (
string, optional) – Ethernet header destination MAC addressip-proto (
int, optional) – IP Header protocol fieldip-tos (
int, optional) – IP header TOS field
Note
Optional members may or may not appear in the flow mask depending if they’re relevant to the flow mask.
- Object RockerOfDpaFlowAction (Since: 2.4)ïƒ
Rocker switch OF-DPA flow action
- Members:
goto-tbl (
int, optional) – next table IDgroup-id (
int, optional) – group IDtunnel-lport (
int, optional) – tunnel logical port IDvlan-id (
int, optional) – VLAN IDnew-vlan-id (
int, optional) – new VLAN IDout-pport (
int, optional) – physical output port
Note
Optional members may or may not appear in the flow action depending if they’re relevant to the flow action.
- Object RockerOfDpaFlow (Since: 2.4)ïƒ
Rocker switch OF-DPA flow
- Members:
cookie (
int) – flow unique cookie IDhits (
int) – count of matches (hits) on flowkey (
RockerOfDpaFlowKey) – flow keymask (
RockerOfDpaFlowMask) – flow maskaction (
RockerOfDpaFlowAction) – flow action
- Command query-rocker-of-dpa-flows (Since: 2.4)ïƒ
Return rocker OF-DPA flow information.
- Arguments:
name (
string) – switch nametbl-id (
int, optional) – flow table ID. If tbl-id is not specified, returns flow information for all tables.
- Return:
[RockerOfDpaFlow]– rocker OF-DPA flow information
Example:
-> { "execute": "query-rocker-of-dpa-flows", "arguments": { "name": "sw1" } } <- { "return": [ {"key": {"in-pport": 0, "priority": 1, "tbl-id": 0}, "hits": 138, "cookie": 0, "action": {"goto-tbl": 10}, "mask": {"in-pport": 4294901760} }, ... ]}
- Object RockerOfDpaGroup (Since: 2.4)ïƒ
Rocker switch OF-DPA group
- Members:
id (
int) – group unique IDtype (
int) – group typevlan-id (
int, optional) – VLAN IDpport (
int, optional) – physical port numberindex (
int, optional) – group index, unique with group typeout-pport (
int, optional) – output physical port numbergroup-id (
int, optional) – next group IDset-vlan-id (
int, optional) – VLAN ID to setpop-vlan (
int, optional) – pop VLAN headr from packetgroup-ids (
[int], optional) – list of next group IDsset-eth-src (
string, optional) – set source MAC address in Ethernet headerset-eth-dst (
string, optional) – set destination MAC address in Ethernet headerttl-check (
int, optional) – perform TTL check
Note
Optional members may or may not appear in the group depending if they’re relevant to the group type.
- Command query-rocker-of-dpa-groups (Since: 2.4)ïƒ
Return rocker OF-DPA group information.
- Arguments:
name (
string) – switch nametype (
int, optional) – group type. If type is not specified, returns group information for all group types.
- Return:
[RockerOfDpaGroup]– rocker OF-DPA group information
Example:
-> { "execute": "query-rocker-of-dpa-groups", "arguments": { "name": "sw1" } } <- { "return": [ {"type": 0, "out-pport": 2, "pport": 2, "vlan-id": 3841, "pop-vlan": 1, "id": 251723778}, {"type": 0, "out-pport": 0, "pport": 0, "vlan-id": 3841, "pop-vlan": 1, "id": 251723776}, {"type": 0, "out-pport": 1, "pport": 1, "vlan-id": 3840, "pop-vlan": 1, "id": 251658241}, {"type": 0, "out-pport": 0, "pport": 0, "vlan-id": 3840, "pop-vlan": 1, "id": 251658240} ]}
TPM (trusted platform module) devicesïƒ
- Enum TpmModel (Since: 1.5)ïƒ
- Availability:
CONFIG_TPMAn enumeration of TPM models
- Values:
tpm-tis – TPM TIS model
tpm-crb – TPM CRB model (since 2.12)
tpm-spapr – TPM SPAPR model (since 5.0)
- Command query-tpm-models (Since: 1.5)ïƒ
- Availability:
CONFIG_TPMReturn a list of supported TPM models
- Return:
[TpmModel]– a list of TpmModel
Example:
-> { "execute": "query-tpm-models" } <- { "return": [ "tpm-tis", "tpm-crb", "tpm-spapr" ] }
- Enum TpmType (Since: 1.5)ïƒ
- Availability:
CONFIG_TPMAn enumeration of TPM types
- Values:
passthrough – TPM passthrough type
emulator – Software Emulator TPM type (since 2.11)
- Command query-tpm-types (Since: 1.5)ïƒ
- Availability:
CONFIG_TPMReturn a list of supported TPM types
- Return:
[TpmType]– a list of TpmType
Example:
-> { "execute": "query-tpm-types" } <- { "return": [ "passthrough", "emulator" ] }
- Object TPMPassthroughOptions (Since: 1.5)ïƒ
- Availability:
CONFIG_TPMInformation about the TPM passthrough type
- Members:
path (
string, optional) – string describing the path used for accessing the TPM devicecancel-path (
string, optional) – string showing the TPM’s sysfs cancel file for cancellation of TPM commands while they are executing
- Object TPMEmulatorOptions (Since: 2.11)ïƒ
- Availability:
CONFIG_TPMInformation about the TPM emulator type
- Members:
chardev (
string) – Name of a unix socket chardev
- Object TPMPassthroughOptionsWrapper (Since: 1.5)ïƒ
- Availability:
CONFIG_TPM- Members:
data (
TPMPassthroughOptions) – Information about the TPM passthrough type
- Object TPMEmulatorOptionsWrapper (Since: 2.11)ïƒ
- Availability:
CONFIG_TPM- Members:
data (
TPMEmulatorOptions) – Information about the TPM emulator type
- Object TpmTypeOptions (Since: 1.5)ïƒ
- Availability:
CONFIG_TPMA union referencing different TPM backend types’ configuration options
- Members:
type (
TpmType) –‘passthrough’ The configuration options for the TPM passthrough type
’emulator’ The configuration options for TPM emulator backend type
When
typeispassthrough: The members ofTPMPassthroughOptionsWrapper.When
typeisemulator: The members ofTPMEmulatorOptionsWrapper.
- Object TPMInfo (Since: 1.5)ïƒ
- Availability:
CONFIG_TPMInformation about the TPM
- Members:
id (
string) – The Id of the TPMmodel (
TpmModel) – The TPM frontend modeloptions (
TpmTypeOptions) – The TPM (backend) type configuration options
- Command query-tpm (Since: 1.5)ïƒ
- Availability:
CONFIG_TPMReturn information about the TPM device
Example:
-> { "execute": "query-tpm" } <- { "return": [ { "model": "tpm-tis", "options": { "type": "passthrough", "data": { "cancel-path": "/sys/class/misc/tpm0/device/cancel", "path": "/dev/tpm0" } }, "id": "tpm0" } ] }
Remote desktopïƒ
- Enum DisplayProtocol (Since: 7.0)ïƒ
Display protocols which support changing password options.
- Values:
vnc – Not documented
spice – Not documented
- Enum SetPasswordAction (Since: 7.0)ïƒ
An action to take on changing a password on a connection with active clients.
- Values:
keep – maintain existing clients
fail – fail the command if clients are connected
disconnect – disconnect existing clients
-
div class="qapi-infopips docutils container">
&q
Enum int, optional) – IP header TOS fiss="pre">NbdServerOptionsBase .-
Object NbdServerOpto optiopre">(Since: optiopre">(SincthroughOptl>
-
{"seconds" ( Tppm.TpmType >Tppm.TpmType >]}
-
-
Object NbdServerOpto optiopre">(Since: optiopre">(SincthroughOptl>