QEMU QMP Reference Manual
Introduction
This manual describes the commands and events supported by the QEMU Monitor Protocol (QMP).
For locating a particular item, please see the QMP Index.
The following notation is used in examples:
Example:
-> ... text sent by client (commands) ...
<- ... text sent by server (command responses and events) ...
Example text is formatted for readability. However, in real protocol usage, its commonly emitted as a single line.
Please refer to the QEMU Machine Protocol Specification for the general format of commands, responses, and events.
QMP errors
- Enum QapiErrorClass (Since: 1.2)
QEMU error classes
- Values:
GenericError – this is used for errors that don’t require a specific error class. This should be the default case for most errors
CommandNotFound – the requested command has not been found
DeviceNotActive – a device has failed to be become active
DeviceNotFound – the requested device has not been found
KVMMissingCap – the requested operation can’t be fulfilled because a required KVM capability is missing
Common data types
- Enum IoOperationType (Since: 2.1)
An enumeration of the I/O operation types
- Values:
read – read operation
write – write operation
- Enum OnOffAuto (Since: 2.2)
An enumeration of three options: on, off, and auto
- Values:
auto – QEMU selects the value between on and off
on – Enabled
off – Disabled
- Enum OnOffSplit (Since: 2.6)
An enumeration of three values: on, off, and split
- Values:
on – Enabled
off – Disabled
split – Mixed
- Alternate StrOrNull (Since: 2.10)
This is a string value or the explicit lack of a string (null pointer in C). Intended for cases when ‘optional absent’ already has a different meaning.
- Alternatives:
s (
string) – the string valuen (
null) – no string value
- Enum OffAutoPCIBAR (Since: 2.12)
An enumeration of options for specifying a PCI BAR
- Values:
off – The specified feature is disabled
auto – The PCI BAR for the feature is automatically selected
bar0 – PCI BAR0 is used for the feature
bar1 – PCI BAR1 is used for the feature
bar2 – PCI BAR2 is used for the feature
bar3 – PCI BAR3 is used for the feature
bar4 – PCI BAR4 is used for the feature
bar5 – PCI BAR5 is used for the feature
- Enum PCIELinkSpeed (Since: 4.0)
An enumeration of PCIe link speeds in units of GT/s
- Values:
2_5 – 2.5GT/s
5 – 5.0GT/s
8 – 8.0GT/s
16 – 16.0GT/s
32 – 32.0GT/s (since 9.0)
64 – 64.0GT/s (since 9.0)
- Enum PCIELinkWidth (Since: 4.0)
An enumeration of PCIe link width
- Values:
1 – x1
2 – x2
4 – x4
8 – x8
12 – x12
16 – x16
32 – x32
- Enum HostMemPolicy (Since: 2.1)
Host memory policy types
- Values:
default – restore default policy, remove any nondefault policy
preferred – set the preferred host nodes for allocation
bind – a strict policy that restricts memory allocation to the host nodes specified
interleave – memory allocations are interleaved across the set of host nodes specified
- Enum NetFilterDirection (Since: 2.5)
Indicates whether a netfilter is attached to a netdev’s transmit queue or receive queue or both.
- Values:
all – the filter is attached both to the receive and the transmit queue of the netdev (default).
rx – the filter is attached to the receive queue of the netdev, where it will receive packets sent to the netdev.
tx – the filter is attached to the transmit queue of the netdev, where it will receive packets sent by the netdev.
- Enum GrabToggleKeys (Since: 4.0)
Key combinations to toggle input-linux between host and guest.
- Values:
ctrl-ctrl – left and right control key
alt-alt – left and right alt key
shift-shift – left and right shift key
meta-meta – left and right meta key
scrolllock – scroll lock key
ctrl-scrolllock – either control key and scroll lock key
- Object HumanReadableText (Since: 6.2)
- Members:
human-readable-text (
string) – Formatted output intended for humans.
- Enum EndianMode (Since: 10.0)
- Values:
unspecified – Endianness not specified
little – Little endianness
big – Big endianness
Socket data types
- Enum NetworkAddressFamily (Since: 2.1)
The network address family
- Values:
ipv4 – IPV4 family
ipv6 – IPV6 family
unix – unix socket
vsock – vsock family (since 2.8)
unknown – otherwise
- Object InetSocketAddressBase
- Members:
host (
string) – host part of the addressport (
string) – port part of the address
- Object InetSocketAddress (Since: 1.3)
Captures a socket address or address range in the Internet namespace.
- Members:
numeric (
boolean, optional) – true if the host/port are guaranteed to be numeric, false if name resolution should be attempted. Defaults to false. (Since 2.9)to (
int, optional) – If present, this is range of possible addresses, with port betweenportandto.ipv4 (
boolean, optional) – whether to accept IPv4 addresses, default try both IPv4 and IPv6ipv6 (
boolean, optional) – whether to accept IPv6 addresses, default try both IPv4 and IPv6keep-alive (
boolean, optional) – enable keep-alive when connecting to/listening on this socket. (Since 4.2, not supported for listening sockets until 10.1)keep-alive-count (
int, optional) – number of keep-alive packets sent before the connection is closed. Only supported for TCP sockets on systems where TCP_KEEPCNT socket option is defined (this includes Linux, Windows, macOS, FreeBSD, but not OpenBSD). When set to 0, system setting is used. (Since 10.1)keep-alive-idle (
int, optional) – time in seconds the connection needs to be idle before sending a keepalive packet. Only supported for TCP sockets on systems where TCP_KEEPIDLE socket option is defined (this includes Linux, Windows, macOS, FreeBSD, but not OpenBSD). When set to 0, system setting is used. (Since 10.1)keep-alive-interval (
int, optional) – time in seconds between keep-alive packets. Only supported for TCP sockets on systems where TCP_KEEPINTVL is defined (this includes Linux, Windows, macOS, FreeBSD, but not OpenBSD). When set to 0, system setting is used. (Since 10.1)mptcp (
boolean, optional) – enable multi-path TCP. (Since 6.1)The members of
InetSocketAddressBase.
- Object UnixSocketAddress (Since: 1.3)
Captures a socket address in the local (“Unix socket”) namespace.
- Members:
path (
string) – filesystem path to useabstract (
boolean, optional) – if true, this is a Linux abstract socket address.pathwill be prefixed by a null byte, and optionally padded with null bytes. Defaults to false. (Since 5.1)tight (
boolean, optional) – if false, pad an abstract socket address with enough null bytes to make it fill struct sockaddr_un member sun_path. Defaults to true. (Since 5.1)
- Object VsockSocketAddress (Since: 2.8)
Captures a socket address in the vsock namespace.
- Members:
cid (
string) – unique host identifierport (
string) – port
Note
String types are used to allow for possible future hostname or service resolution support.
- Object FdSocketAddress (Since: 1.2)
A file descriptor name or number.
- Members:
str (
string) – decimal is for file descriptor number, otherwise it’s a file descriptor name. Named file descriptors are permitted in monitor commands, in combination with thegetfdcommand. Decimal file descriptors are permitted at startup or other contexts where no monitor context is active.
- Object InetSocketAddressWrapper (Since: 1.3)
- Members:
data (
InetSocketAddress) – internet domain socket address
- Object UnixSocketAddressWrapper (Since: 1.3)
- Members:
data (
UnixSocketAddress) – UNIX domain socket address
- Object VsockSocketAddressWrapper (Since: 2.8)
- Members:
data (
VsockSocketAddress) – VSOCK domain socket address
- Object FdSocketAddressWrapper (Since: 1.3)
- Members:
data (
FdSocketAddress) – file descriptor name or number
- Object SocketAddressLegacy (Since: 1.3)
Captures the address of a socket, which could also be a named file descriptor
- Members:
type (
SocketAddressType) – Transport typeWhen
typeisinet: The members ofInetSocketAddressWrapper.When
typeisunix: The members ofUnixSocketAddressWrapper.When
typeisvsock: The members ofVsockSocketAddressWrapper.When
typeisfd: The members ofFdSocketAddressWrapper.
- Enum SocketAddressType (Since: 2.9)
Available
SocketAddresstypes- Values:
inet – Internet address
unix – Unix domain socket
vsock – VMCI address
fd – Socket file descriptor
- Object SocketAddress (Since: 2.9)
Captures the address of a socket, which could also be a socket file descriptor
- Members:
type (
SocketAddressType) – Transport typeWhen
typeisinet: The members ofInetSocketAddress.When
typeisunix: The members ofUnixSocketAddress.When
typeisvsock: The members ofVsockSocketAddress.When
typeisfd: The members ofFdSocketAddress.
VM run state
- Enum RunState
An enumeration of VM run states.
- Values:
debug – QEMU is running on a debugger
finish-migrate – guest is paused to finish the migration process
inmigrate – guest is paused waiting for an incoming migration. Note that this state does not tell whether the machine will start at the end of the migration. This depends on the command-line -S option and any invocation of
stoporcontthat has happened since QEMU was started.internal-error – An internal error that prevents further guest execution has occurred
io-error – the last IOP has failed and the device is configured to pause on I/O errors
paused – guest has been paused via the ‘stop’ command
postmigrate – guest is paused following a successful ‘migrate’
prelaunch – QEMU was started with -S and guest has not started
restore-vm – guest is paused to restore VM state
running – guest is actively running
save-vm – guest is paused to save the VM state
shutdown – guest is shut down (and -no-shutdown is in use)
suspended – guest is suspended (ACPI S3)
watchdog – the watchdog action is configured to pause and has been triggered
guest-panicked – guest has been panicked as a result of guest OS panic
colo – guest is paused to save/restore VM state under colo checkpoint, VM can not get into this state unless colo capability is enabled for migration. (since 2.8)
- Enum ShutdownCause
An enumeration of reasons for a shutdown.
- Values:
none – No shutdown request pending
host-error – An error prevents further use of guest
host-qmp-quit – Reaction to the QMP command
quithost-qmp-system-reset – Reaction to the QMP command
system_resethost-signal – Reaction to a signal, such as SIGINT
host-ui – Reaction to a UI event, like window close
guest-shutdown – Guest shutdown/suspend request, via ACPI or other hardware-specific means
guest-reset – Guest reset request, and command line turns that into a shutdown
guest-panic – Guest panicked, and command line turns that into a shutdown
subsystem-reset – Partial guest reset that does not trigger QMP events and ignores –no-reboot. This is useful for sanitizing hypercalls on s390 that are used during kexec/kdump/boot
snapshot-load – A snapshot is being loaded by the record & replay subsystem. This value is used only within QEMU. It doesn’t occur in QMP. (since 7.2)
- Object StatusInfo (Since: 0.14)
Information about VM run state
- Command query-status (Since: 0.14)
Query the run status of the VM
- Return:
Example:
-> { "execute": "query-status" } <- { "return": { "running": true, "status": "running" } }
- Event SHUTDOWN (Since: 0.12)
Emitted when the virtual machine has shut down, indicating that QEMU is about to exit.
- Members:
guest (
boolean) – If true, the shutdown was triggered by a guest request (such as a guest-initiated ACPI shutdown request or other hardware-specific action) rather than a host request (such as sending QEMU a SIGINT). (since 2.10)reason (
ShutdownCause) – TheShutdownCausewhich resulted in theSHUTDOWN. (since 4.0)
Note
If the command-line option
-no-shutdownhas been specified, QEMU will not exit, and aSTOPevent will eventually follow theSHUTDOWNevent.Example:
<- { "event": "SHUTDOWN", "data": { "guest": true, "reason": "guest-shutdown" }, "timestamp": { "seconds": 1267040730, "microseconds": 682951 } }
- Event POWERDOWN (Since: 0.12)
Emitted when the virtual machine is powered down through the power control system, such as via ACPI.
Example:
<- { "event": "POWERDOWN", "timestamp": { "seconds": 1267040730, "microseconds": 682951 } }
- Event RESET (Since: 0.12)
Emitted when the virtual machine is reset
- Members:
guest (
boolean) – If true, the reset was triggered by a guest request (such as a guest-initiated ACPI reboot request or other hardware-specific action) rather than a host request (such as the QMP commandsystem_reset). (since 2.10)reason (
ShutdownCause) – TheShutdownCauseof theRESET. (since 4.0)
Example:
<- { "event": "RESET", "data": { "guest": false, "reason": "guest-reset" }, "timestamp": { "seconds": 1267041653, "microseconds": 9518 } }
- Event STOP (Since: 0.12)
Emitted when the virtual machine is stopped
Example:
<- { "event": "STOP", "timestamp": { "seconds": 1267041730, "microseconds": 281295 } }
- Event RESUME (Since: 0.12)
Emitted when the virtual machine resumes execution
Example:
<- { "event": "RESUME", "timestamp": { "seconds": 1271770767, "microseconds": 582542 } }
- Event SUSPEND (Since: 1.1)
Emitted when guest enters a hardware suspension state, for example, S3 state, which is sometimes called standby state
Example:
<- { "event": "SUSPEND", "timestamp": { "seconds": 1344456160, "microseconds": 309119 } }
- Event SUSPEND_DISK (Since: 1.2)
Emitted when guest enters a hardware suspension state with data saved on disk, for example, S4 state, which is sometimes called hibernate state
Note
QEMU shuts down (similar to event
SHUTDOWN) when entering this state.Example:
<- { "event": "SUSPEND_DISK", "timestamp": { "seconds": 1344456160, "microseconds": 309119 } }
- Event WAKEUP (Since: 1.1)
Emitted when the guest has woken up from suspend state and is running
Example:
<- { "event": "WAKEUP", "timestamp": { "seconds": 1344522075, "microseconds": 745528 } }
- Event WATCHDOG (Since: 0.13)
Emitted when the watchdog device’s timer is expired
- Members:
action (
WatchdogAction) – action that has been taken
Note
If action is “reset”, “shutdown”, or “pause” the
WATCHDOGevent is followed respectively by theRESET,SHUTDOWN, orSTOPevents.Note
This event is rate-limited.
Example:
<- { "event": "WATCHDOG", "data": { "action": "reset" }, "timestamp": { "seconds": 1267061043, "microseconds": 959568 } }
- Enum WatchdogAction (Since: 2.1)
An enumeration of the actions taken when the watchdog device’s timer is expired
- Values:
reset – system resets
shutdown – system shutdown, note that it is similar to
powerdown, which tries to set to system status and notify guestpoweroff – system poweroff, the emulator program exits
pause – system pauses, similar to
stopdebug – system enters debug state
none – nothing is done
inject-nmi – a non-maskable interrupt is injected into the first VCPU (all VCPUS on x86) (since 2.4)
- Enum RebootAction (Since: 6.0)
Possible QEMU actions upon guest reboot
- Values:
reset – Reset the VM
shutdown – Shutdown the VM and exit, according to the shutdown action
- Enum ShutdownAction (Since: 6.0)
Possible QEMU actions upon guest shutdown
- Values:
poweroff – Shutdown the VM and exit
pause – pause the VM
- Enum PanicAction (Since: 6.0)
- Values:
none – Continue VM execution
pause – Pause the VM
shutdown – Shutdown the VM and exit, according to the shutdown action
exit-failure – Shutdown the VM and exit with nonzero status (since 7.1)
- Command watchdog-set-action (Since: 2.11)
Set watchdog action.
- Arguments:
action (
WatchdogAction) –WatchdogActionaction taken when watchdog timer expires.
Example:
-> { "execute": "watchdog-set-action", "arguments": { "action": "inject-nmi" } } <- { "return": {} }
- Command set-action (Since: 6.0)
Set the actions that will be taken by the emulator in response to guest events.
- Arguments:
reboot (
RebootAction, optional) –RebootActionaction taken on guest reboot.shutdown (
ShutdownAction, optional) –ShutdownActionaction taken on guest shutdown.panic (
PanicAction, optional) –PanicActionaction taken on guest panic.watchdog (
WatchdogAction, optional) –WatchdogActionaction taken when watchdog timer expires.
Example:
-> { "execute": "set-action", "arguments": { "reboot": "shutdown", "shutdown" : "pause", "panic": "pause", "watchdog": "inject-nmi" } } <- { "return": {} }
- Event GUEST_PANICKED (Since: 1.5)
Emitted when guest OS panic is detected
- Members:
action (
GuestPanicAction) – action that has been taken, currently always “pause”info (
GuestPanicInformation, optional) – information about a panic (since 2.9)
Example:
<- { "event": "GUEST_PANICKED", "data": { "action": "pause" }, "timestamp": { "seconds": 1648245231, "microseconds": 900001 } }
- Event GUEST_CRASHLOADED (Since: 5.0)
Emitted when guest OS crash loaded is detected
- Members:
action (
GuestPanicAction) – action that has been taken, currently always “run”info (
GuestPanicInformation, optional) – information about a panic
Example:
<- { "event": "GUEST_CRASHLOADED", "data": { "action": "run" }, "timestamp": { "seconds": 1648245259, "microseconds": 893771 } }
- Event GUEST_PVSHUTDOWN (Since: 9.1)
Emitted when guest submits a shutdown request via pvpanic interface
Example:
<- { "event": "GUEST_PVSHUTDOWN", "timestamp": { "seconds": 1648245259, "microseconds": 893771 } }
- Enum GuestPanicAction (Since: 2.1)
An enumeration of the actions taken when guest OS panic is detected
- Values:
pause – system pauses
poweroff – system powers off (since 2.8)
run – system continues to run (since 5.0)
- Enum GuestPanicInformationType (Since: 2.9)
An enumeration of the guest panic information types
- Values:
hyper-v – hyper-v guest panic information type
s390 – s390 guest panic information type (Since: 2.12)
tdx – tdx guest panic information type (Since: 10.1)
sev – AMD SEV-ES guest termination information type (Since: 11.0)
- Object GuestPanicInformation (Since: 2.9)
Information about a guest panic
- Members:
type (
GuestPanicInformationType) – Crash type that defines the hypervisor specific informationWhen
typeishyper-v: The members ofGuestPanicInformationHyperV.When
typeiss390: The members ofGuestPanicInformationS390.When
typeistdx: The members ofGuestPanicInformationTdx.When
typeissev: The members ofGuestPanicInformationSev.
- Object GuestPanicInformationHyperV (Since: 2.9)
Hyper-V specific guest panic information (HV crash MSRs)
- Members:
arg1 (
int) – for Windows,STOPcode for the guest crash. For Linux, an error code.arg2 (
int) – for Windows, first argument of theSTOP. For Linux, the guest OS ID, which has the kernel version in bits 16-47 and 0x8100 in bits 48-63.arg3 (
int) – for Windows, second argument of theSTOP. For Linux, the program counter of the guest.arg4 (
int) – for Windows, third argument of theSTOP. For Linux, the RAX register (x86) or the stack pointer (aarch64) of the guest.arg5 (
int) – for Windows, fourth argument of theSTOP. For x86 Linux, the stack pointer of the guest.
- Enum S390CrashReason (Since: 2.12)
Reason why the CPU is in a crashed state.
- Values:
unknown – no crash reason was set
disabled-wait – the CPU has entered a disabled wait state
extint-loop – clock comparator or cpu timer interrupt with new PSW enabled for external interrupts
pgmint-loop – program interrupt with BAD new PSW
opint-loop – operation exception interrupt with invalid code at the program interrupt new PSW
- Object GuestPanicInformationS390 (Since: 2.12)
S390 specific guest panic information (PSW)
- Members:
core (
int) – core id of the CPU that crashedpsw-mask (
int) – control fields of guest PSWpsw-addr (
int) – guest instruction addressreason (
S390CrashReason) – guest crash reason
- Object GuestPanicInformationTdx (Since: 10.1)
TDX Guest panic information specific to TDX, as specified in the “Guest-Hypervisor Communication Interface (GHCI) Specification”, section TDG.VP.VMCALL<ReportFatalError>.
- Members:
error-code (
int) – TD-specific error codemessage (
string) – Human-readable error message provided by the guest. Not to be trusted.gpa (
int, optional) – guest-physical address of a page that contains more verbose error information, as zero-terminated string. Present when the “GPA valid” bit (bit 63) is set inerror-code.
- Object GuestPanicInformationSev (Since: 11.0)
Information for AMD SEV-specific termination request (GHCB MSR contents)
- Members:
set (
int) – The reason code set provided by the guestcode (
int) – The reason code provided by the guest
- Event MEMORY_FAILURE (Since: 5.2)
Emitted when a memory failure occurs on host side.
- Members:
recipient (
MemoryFailureRecipient) – recipient is defined asMemoryFailureRecipient.action (
MemoryFailureAction) – action that has been taken.flags (
MemoryFailureFlags) – flags forMemoryFailureAction.
Example:
<- { "event": "MEMORY_FAILURE", "data": { "recipient": "hypervisor", "action": "fatal", "flags": { "action-required": false, "recursive": false } }, "timestamp": { "seconds": 1267061043, "microseconds": 959568 } }
- Enum MemoryFailureRecipient (Since: 5.2)
Hardware memory failure occurs, handled by recipient.
- Values:
hypervisor – memory failure at QEMU process address space. (none guest memory, but used by QEMU itself).
guest – memory failure at guest memory,
- Enum MemoryFailureAction (Since: 5.2)
Actions taken by QEMU in response to a hardware memory failure.
- Values:
ignore – the memory failure could be ignored. This will only be the case for action-optional failures.
inject – memory failure occurred in guest memory, the guest enabled MCE handling mechanism, and QEMU could inject the MCE into the guest successfully.
fatal – the failure is unrecoverable. This occurs for action-required failures if the recipient is the hypervisor; QEMU will exit.
reset – the failure is unrecoverable but confined to the guest. This occurs if the recipient is a guest guest which is not ready to handle memory failures.
- Object MemoryFailureFlags (Since: 5.2)
Additional information on memory failures.
- Members:
action-required (
boolean) – whether a memory failure event is action-required or action-optional (e.g. a failure during memory scrub).recursive (
boolean) – whether the failure occurred while the previous failure was still in progress.
- Enum NotifyVmexitOption (Since: 7.2)
An enumeration of the options specified when enabling notify VM exit
- Values:
run – enable the feature, do nothing and continue if the notify VM exit happens.
internal-error – enable the feature, raise a internal error if the notify VM exit happens.
disable – disable the feature.
Cryptography
- Enum QCryptoTLSCredsEndpoint (Since: 2.5)
The type of network endpoint that will be using the credentials. Most types of credential require different setup / structures depending on whether they will be used in a server versus a client.
- Values:
client – the network endpoint is acting as the client
server – the network endpoint is acting as the server
- Enum QCryptoSecretFormat (Since: 2.6)
The data format that the secret is provided in
- Values:
raw – raw bytes. When encoded in JSON only valid UTF-8 sequences can be used
base64 – arbitrary base64 encoded binary data
- Enum QCryptoHashAlgo (Since: 2.6)
The supported algorithms for computing content digests
- Values:
md5 – MD5. Should not be used in any new code, legacy compat only
sha1 – SHA-1. Should not be used in any new code, legacy compat only
sha224 – SHA-224. (since 2.7)
sha256 – SHA-256. Current recommended strong hash.
sha384 – SHA-384. (since 2.7)
sha512 – SHA-512. (since 2.7)
ripemd160 – RIPEMD-160. (since 2.7)
sm3 – SM3. (since 9.2.0)
- Enum QCryptoCipherAlgo (Since: 2.6)
The supported algorithms for content encryption ciphers
- Values:
aes-128 – AES with 128 bit / 16 byte keys
aes-192 – AES with 192 bit / 24 byte keys
aes-256 – AES with 256 bit / 32 byte keys
des – DES with 56 bit / 8 byte keys. Do not use except in VNC. (since 6.1)
3des – 3DES(EDE) with 192 bit / 24 byte keys (since 2.9)
cast5-128 – Cast5 with 128 bit / 16 byte keys
serpent-128 – Serpent with 128 bit / 16 byte keys
serpent-192 – Serpent with 192 bit / 24 byte keys
serpent-256 – Serpent with 256 bit / 32 byte keys
twofish-128 – Twofish with 128 bit / 16 byte keys
twofish-192 – Twofish with 192 bit / 24 byte keys
twofish-256 – Twofish with 256 bit / 32 byte keys
sm4 – SM4 with 128 bit / 16 byte keys (since 9.0)
- Enum QCryptoCipherMode (Since: 2.6)
The supported modes for content encryption ciphers
- Values:
ecb – Electronic Code Book
cbc – Cipher Block Chaining
xts – XEX with tweaked code book and ciphertext stealing
ctr – Counter (Since 2.8)
- Enum QCryptoIVGenAlgo (Since: 2.6)
The supported algorithms for generating initialization vectors for full disk encryption. The ‘plain’ generator should not be used for disks with sector numbers larger than 2^32, except where compatibility with pre-existing Linux dm-crypt volumes is required.
- Values:
plain – 64-bit sector number truncated to 32-bits
plain64 – 64-bit sector number
essiv – 64-bit sector number encrypted with a hash of the encryption key
- Enum QCryptoBlockFormat (Since: 2.6)
The supported full disk encryption formats
- Values:
qcow – QCow/QCow2 built-in AES-CBC encryption. Use only for liberating data from old images.
luks – LUKS encryption format. Recommended for new images
- Object QCryptoBlockOptionsBase (Since: 2.6)
The common options that apply to all full disk encryption formats
- Members:
format (
QCryptoBlockFormat) – the encryption format
- Object QCryptoBlockOptionsQCow (Since: 2.6)
The options that apply to QCow/QCow2 AES-CBC encryption format
- Members:
key-secret (
string, optional) – the ID of a QCryptoSecret object providing the decryption key. Mandatory except when probing image for metadata only.
- Object QCryptoBlockOptionsLUKS (Since: 2.6)
The options that apply to LUKS encryption format
- Members:
key-secret (
string, optional) – the ID of a QCryptoSecret object providing the decryption key. Mandatory except when probing image for metadata only.
- Object QCryptoBlockCreateOptionsLUKS (Since: 2.6)
The options that apply to LUKS encryption format initialization
- Members:
cipher-alg (
QCryptoCipherAlgo, optional) – the cipher algorithm for data encryption. Currently defaults to ‘aes-256’.cipher-mode (
QCryptoCipherMode, optional) – the cipher mode for data encryption. Currently defaults to ‘xts’ivgen-alg (
QCryptoIVGenAlgo, optional) – the initialization vector generator. Currently defaults to ‘plain64’ivgen-hash-alg (
QCryptoHashAlgo, optional) – the initialization vector generator hash. Currently defaults to ‘sha256’hash-alg (
QCryptoHashAlgo, optional) – the master key hash algorithm. Currently defaults to ‘sha256’iter-time (
int, optional) – number of milliseconds to spend in PBKDF passphrase processing. Currently defaults to 2000. (since 2.8)The members of
QCryptoBlockOptionsLUKS.
- Object QCryptoBlockOpenOptions (Since: 2.6)
The options that are available for all encryption formats when opening an existing volume
- Members:
The members of
QCryptoBlockOptionsBase.When
formatisqcow: The members ofQCryptoBlockOptionsQCow.When
formatisluks: The members ofQCryptoBlockOptionsLUKS.
- Object QCryptoBlockCreateOptions (Since: 2.6)
The options that are available for all encryption formats when initializing a new volume
- Members:
The members of
QCryptoBlockOptionsBase.When
formatisqcow: The members ofQCryptoBlockOptionsQCow.When
formatisluks: The members ofQCryptoBlockCreateOptionsLUKS.
- Object QCryptoBlockInfoBase (Since: 2.7)
The common information that applies to all full disk encryption formats
- Members:
format (
QCryptoBlockFormat) – the encryption format
- Object QCryptoBlockInfoLUKSSlot (Since: 2.7)
Information about the LUKS block encryption key slot options
- Members:
active (
boolean) – whether the key slot is currently in usekey-offset (
int) – offset to the key material in bytesiters (
int, optional) – number of PBKDF2 iterations for key materialstripes (
int, optional) – number of stripes for splitting key material
- Object QCryptoBlockInfoLUKS (Since: 2.7)
Information about the LUKS block encryption options
- Members:
cipher-alg (
QCryptoCipherAlgo) – the cipher algorithm for data encryptioncipher-mode (
QCryptoCipherMode) – the cipher mode for data encryptionivgen-alg (
QCryptoIVGenAlgo) – the initialization vector generatorivgen-hash-alg (
QCryptoHashAlgo, optional) – the initialization vector generator hashhash-alg (
QCryptoHashAlgo) – the master key hash algorithmdetached-header (
boolean) – whether the LUKS header is detached (Since 9.0)payload-offset (
int) – offset to the payload data in bytesmaster-key-iters (
int) – number of PBKDF2 iterations for key materialuuid (
string) – unique identifier for the volumeslots (
[QCryptoBlockInfoLUKSSlot]) – information about each key slot
- Object QCryptoBlockInfo (Since: 2.7)
Information about the block encryption options
- Members:
The members of
QCryptoBlockInfoBase.When
formatisluks: The members ofQCryptoBlockInfoLUKS.
- Enum QCryptoBlockLUKSKeyslotState (Since: 5.1)
Defines state of keyslots that are affected by the update
- Values:
active – The slots contain the given password and marked as active
inactive – The slots are erased (contain garbage) and marked as inactive
- Object QCryptoBlockAmendOptionsLUKS (Since: 5.1)
This struct defines the update parameters that activate/de-activate set of keyslots
- Members:
state (
QCryptoBlockLUKSKeyslotState) – the desired state of the keyslotsnew-secret (
string, optional) – The ID of a QCryptoSecret object providing the password to be written into added active keyslotsold-secret (
string, optional) – Optional (for deactivation only). If given will deactivate all keyslots that match password located in QCryptoSecret with this IDiter-time (
int, optional) – Optional (for activation only). Number of milliseconds to spend in PBKDF passphrase processing for the newly activated keyslot. Currently defaults to 2000.keyslot (
int, optional) –Optional. ID of the keyslot to activate/deactivate. For keyslot activation, keyslot should not be active already (this is unsafe to update an active keyslot), but possible if ‘force’ parameter is given. If keyslot is not given, first free keyslot will be written.
For keyslot deactivation, this parameter specifies the exact keyslot to deactivate
secret (
string, optional) – Optional. The ID of a QCryptoSecret object providing the password to use to retrieve current master key. Defaults to the same secret that was used to open the image
- Object QCryptoBlockAmendOptions (Since: 5.1)
The options that are available for all encryption formats when amending encryption settings
- Members:
The members of
QCryptoBlockOptionsBase.When
formatisluks: The members ofQCryptoBlockAmendOptionsLUKS.
- Object SecretCommonProperties (Since: 2.6)
Properties for objects of classes derived from secret-common.
- Members:
format (
QCryptoSecretFormat, optional) – the data format that the secret is provided in (default: raw)keyid (
string, optional) – the name of another secret that should be used to decrypt the provided data. If not present, the data is assumed to be unencrypted.iv (
string, optional) – the random initialization vector used for encryption of this particular secret. Should be a base64 encrypted string of the 16-byte IV. Mandatory ifkeyidis given. Ignored ifkeyidis absent.
- Object SecretProperties (Since: 2.6)
Properties for secret objects.
Either
dataorfilemust be provided, but not both.- Members:
data (
string, optional) – the associated with the secret fromfile (
string, optional) – the filename to load the data associated with the secret fromThe members of
SecretCommonProperties.
- Object SecretKeyringProperties (Since: 5.1)
- Availability:
CONFIG_SECRET_KEYRINGProperties for secret_keyring objects.
- Members:
serial (
int) – serial number that identifies a key to get from the kernelThe members of
SecretCommonProperties.
- Object TlsCredsProperties (Since: 2.5)
Properties for objects of classes derived from tls-creds.
- Members:
verify-peer (
boolean, optional) – if true the peer credentials will be verified once the handshake is completed. This is a no-op for anonymous credentials. (default: true)dir (
string, optional) – the path of the directory that contains the credential filesendpoint (
QCryptoTLSCredsEndpoint, optional) – whether the QEMU network backend that uses the credentials will be acting as a client or as a server (default: client)priority (
string, optional) – a gnutls priority string as described at https://gnutls.org/manual/html_node/Priority-Strings.html
- Object TlsCredsAnonProperties (Since: 2.5)
Properties for tls-creds-anon objects.
- Members:
The members of
TlsCredsProperties.
- Object TlsCredsPskProperties (Since: 3.0)
Properties for tls-creds-psk objects.
- Members:
username (
string, optional) – the username which will be sent to the server. For clients only. If absent, “qemu” is sent and the property will read back as an empty string.The members of
TlsCredsProperties.
- Object TlsCredsX509Properties (Since: 2.5)
Properties for tls-creds-x509 objects.
- Members:
sanity-check (
boolean, optional) – if true, perform some sanity checks before using the credentials (default: true)passwordid (
string, optional) – For the server-key.pem and client-key.pem files which contain sensitive private keys, it is possible to use an encrypted version by providing thepasswordidparameter. This provides the ID of a previously created secret object containing the password for decryption.The members of
TlsCredsProperties.
- Enum QCryptoAkCipherAlgo (Since: 7.1)
The supported algorithms for asymmetric encryption ciphers
- Values:
rsa – RSA algorithm
- Enum QCryptoAkCipherKeyType (Since: 7.1)
The type of asymmetric keys.
- Values:
public – public key
private – private key
- Enum QCryptoRSAPaddingAlgo (Since: 7.1)
The padding algorithm for RSA.
- Values:
raw – no padding used
pkcs1 – pkcs1#v1.5
- Object QCryptoAkCipherOptionsRSA (Since: 7.1)
Specific parameters for RSA algorithm.
- Members:
hash-alg (
QCryptoHashAlgo) –QCryptoHashAlgopadding-alg (
QCryptoRSAPaddingAlgo) –QCryptoRSAPaddingAlgo
- Object QCryptoAkCipherOptions (Since: 7.1)
The options that are available for all asymmetric key algorithms when creating a new QCryptoAkCipher.
- Members:
alg (
QCryptoAkCipherAlgo) – encryption cipher algorithmWhen
algisrsa: The members ofQCryptoAkCipherOptionsRSA.
Background jobs
- Enum JobType (Since: 1.7)
Type of a background job.
- Values:
commit – block commit job type, see
block-commitstream – block stream job type, see
block-streammirror – drive mirror job type, see
drive-mirrorbackup – drive backup job type, see
drive-backupcreate – image creation job type, see
blockdev-create(since 3.0)amend – image options amend job type, see
x-blockdev-amend(since 5.1)snapshot-load – snapshot load job type, see
snapshot-load(since 6.0)snapshot-save – snapshot save job type, see
snapshot-save(since 6.0)snapshot-delete – snapshot delete job type, see
snapshot-delete(since 6.0)
- Enum JobStatus (Since: 2.12)
Indicates the present state of a given job in its lifetime.
- Values:
undefined – Erroneous, default state. Should not ever be visible.
created – The job has been created, but not yet started.
running – The job is currently running.
paused – The job is running, but paused. The pause may be requested by either the QMP user or by internal processes.
ready – The job is running, but is ready for the user to signal completion. This is used for long-running jobs like mirror that are designed to run indefinitely.
standby – The job is ready, but paused. This is nearly identical to
paused. The job may return toreadyor otherwise be canceled.waiting – The job is waiting for other jobs in the transaction to converge to the waiting state. This status will likely not be visible for the last job in a transaction.
pending – The job has finished its work, but has finalization steps that it needs to make prior to completing. These changes will require manual intervention via
job-finalizeif auto-finalize was set to false. These pending changes may still fail.aborting – The job is in the process of being aborted, and will finish with an error. The job will afterwards report that it is
concluded. This status may not be visible to the management process.concluded – The job has finished all work. If auto-dismiss was set to false, the job will remain in this state until it is dismissed via
job-dismiss.null – The job is in the process of being dismantled. This state should not ever be visible externally.
- Enum JobVerb (Since: 2.12)
Represents command verbs that can be applied to a job.
- Values:
cancel – see
job-cancelpause – see
job-pauseresume – see
job-resumeset-speed – see
block-job-set-speedcomplete – see
job-completedismiss – see
job-dismissfinalize – see
job-finalizechange – see
block-job-change(since 8.2)
- Event JOB_STATUS_CHANGE (Since: 3.0)
Emitted when a job transitions to a different status.
- Members:
id (
string) – The job identifierstatus (
JobStatus) – The new job status
- Command job-pause (Since: 3.0)
Pause an active job.
This command returns immediately after marking the active job for pausing. Pausing an already paused job is an error.
The job will pause as soon as possible, which means transitioning into the PAUSED state if it was RUNNING, or into STANDBY if it was READY. The corresponding
JOB_STATUS_CHANGEevent will be emitted.Cancelling a paused job automatically resumes it.
- Arguments:
id (
string) – The job identifier.
- Command job-resume (Since: 3.0)
Resume a paused job.
This command returns immediately after resuming a paused job. Resuming an already running job is an error.
This command also clears the error status for block-jobs (stream, commit, mirror, backup).
- Arguments:
id (
string) – The job identifier.
- Command job-cancel (Since: 3.0)
Instruct an active background job to cancel at the next opportunity. This command returns immediately after marking the active job for cancellation.
The job will cancel as soon as possible and then emit a
JOB_STATUS_CHANGEevent. Usually, the status will change to ABORTING, but it is possible that a job successfully completes (e.g. because it was almost done and there was no opportunity to cancel earlier than completing the job) and transitions to PENDING instead.- Arguments:
id (
string) – The job identifier.
- Command job-complete (Since: 3.0)
Manually trigger completion of an active job in the READY or STANDBY state. Completing the job in any other state is an error.
This is supported only for drive mirroring, where it also switches the device to write to the target path only. Note that drive mirroring includes
drive-mirror,blockdev-mirrorandblock-commitjob (only in case of “active commit”, when the node being committed is used by the guest). The ability to complete is signaled with aBLOCK_JOB_READYevent.This command completes an active background block operation synchronously. The ordering of this command’s return with the
BLOCK_JOB_COMPLETEDevent is not defined. Note that if an I/O error occurs during the processing of this command: 1) the command itself will fail; 2) the error will be processed according to the rerror/werror arguments that were specified when starting the operation.- Arguments:
id (
string) – The job identifier.
- Command job-dismiss (Since: 3.0)
Deletes a job that is in the CONCLUDED state. This command only needs to be run explicitly for jobs that don’t have automatic dismiss enabled. In turn, automatic dismiss may be enabled only for jobs that have
auto-dismissoption, which aredrive-backup,blockdev-backup,drive-mirror,blockdev-mirror,block-commitandblock-stream.auto-dismissis enabled by default for these jobs.This command will refuse to operate on any job that has not yet reached its terminal state, CONCLUDED. For jobs that make use of the JOB_READY event,
job-cancelorjob-completewill still need to be used as appropriate.- Arguments:
id (
string) – The job identifier.
- Command job-finalize (Since: 3.0)
Instructs all jobs in a transaction (or a single job if it is not part of any transaction) to finalize any graph changes and do any necessary cleanup. This command requires that all involved jobs are in the PENDING state.
For jobs in a transaction, instructing one job to finalize will force ALL jobs in the transaction to finalize, so it is only necessary to instruct a single member job to finalize.
The command is applicable only to jobs which have
auto-finalizeoption and only when this option is set to false.- Arguments:
id (
string) – The identifier of any job in the transaction, or of a job that is not part of any transaction.
- Object JobInfo (Since: 3.0)
Information about a job.
- Members:
id (
string) – The job identifiertype (
JobType) – The kind of job that is being performedstatus (
JobStatus) – Current job state/statuscurrent-progress (
int) – Progress made until now. The unit is arbitrary and the value can only meaningfully be used for the ratio ofcurrent-progresstototal-progress. The value is monotonically increasing.total-progress (
int) – Estimatedcurrent-progressvalue at the completion of the job. This value can arbitrarily change while the job is running, in both directions.error (
string, optional) –If this field is present, the job failed; if it is still missing in the CONCLUDED state, this indicates successful completion.
The value is a human-readable error message to describe the reason for the job failure. It should not be parsed by applications.
Accelerators
- Object KvmInfo (Since: 0.14)
Information about support for KVM acceleration
- Members:
enabled (
boolean) – true if KVM acceleration is activepresent (
boolean) – true if KVM acceleration is built into this executable
- Command query-kvm (Since: 0.14)
Return information about KVM acceleration
- Return:
Example:
-> { "execute": "query-kvm" } <- { "return": { "enabled": true, "present": true } }
- Command x-accel-stats (Since: 10.1)
- This command is unstable/experimental.
Query accelerator statistics
- Features:
unstable – This command is meant for debugging.
- Return:
HumanReadableText– accelerator statistics
- Enum Accelerator (Since: 10.2.0)
Information about support for MSHV acceleration
- Values:
hvf – Apple Hypervisor.framework
kvm – KVM
mshv – Hyper-V
nvmm – NetBSD NVMM
qtest – QTest (dummy accelerator)
tcg – TCG (dynamic translation)
whpx – Windows Hypervisor Platform
xen – Xen
- Object AcceleratorInfo (Since: 10.2.0)
Information about support for various accelerators
- Members:
enabled (
Accelerator) – the accelerator that is in usepresent (
[Accelerator]) – the list of accelerators that are built into this executable
- Command query-accelerators (Since: 10.2.0)
Return information about accelerators
- Return:
AcceleratorInfo–AcceleratorInfo
Example:
-> { "execute": "query-accelerators" } <- { "return": { "enabled": "mshv", "present": ["kvm", "mshv", "qtest", "tcg"] } }
Block devices
Block device exports
- Object NbdServerOptionsBase
- Members:
handshake-max-seconds (
int, optional) – Time limit, in seconds, at which a client that has not completed the negotiation handshake will be disconnected, or 0 for no limit (since 10.0; default: 10).tls-creds (
string, optional) – ID of the TLS credentials object (since 2.6).tls-authz (
string, optional) – ID of the QAuthZ authorization object used to validate the client’s x509 distinguished name. This object is is only resolved at time of use, so can be deleted and recreated on the fly while the NBD server is active. If missing, it will default to denying access (since 4.0).max-connections (
int, optional) – The maximum number of connections to allow at the same time, 0 for unlimited. Setting this to 1 also stops the server from advertising multiple client support (since 5.2; default: 100).
- Object NbdServerOptions
Keep this type consistent with the
NbdServerOptionsLegacytype. The only intended difference is usingSocketAddressinstead ofSocketAddressLegacy.- Members:
addr (
SocketAddress) – Address on which to listen (since 4.2).The members of
NbdServerOptionsBase.
- Object NbdServerOptionsLegacy
Keep this type consistent with the
NbdServerOptionstype. The only intended difference is usingSocketAddressLegacyinstead ofSocketAddress.- Members:
addr (
SocketAddressLegacy) – Address on which to listen (since 1.3).The members of
NbdServerOptionsBase.
- Command nbd-server-start (Since: 1.3)
Start an NBD server listening on the given host and port. Block devices can then be exported using
nbd-server-add. The NBD server will present them as named exports; for example, another QEMU instance could refer to them as “nbd:HOST:PORT:exportname=NAME”.- Arguments:
The members of
NbdServerOptionsLegacy.
- Errors:
if the server is already running
- Object BlockExportOptionsNbdBase (Since: 5.0)
An NBD block export (common options shared between
nbd-server-addand the NBD branch ofblock-export-add).- Members:
name (
string, optional) – Export name. If unspecified, thedeviceparameter is used as the export name. (Since 2.12)description (
string, optional) – Free-form description of the export, up to 4096 bytes. (Since 5.0)
- Object BlockExportOptionsNbd (Since: 5.2)
An NBD block export (distinct options used in the NBD branch of
block-export-add).- Members:
bitmaps (
[BlockDirtyBitmapOrStr], optional) – Also export each of the named dirty bitmaps reachable fromdevice, so the NBD client can use NBD_OPT_SET_META_CONTEXT with the metadata context name “qemu:dirty-bitmap:BITMAP” to inspect each bitmap. Since 7.1 bitmap may be specified by node/name pair.allocation-depth (
boolean, optional) – Also export the allocation depth map fordevice, so the NBD client can use NBD_OPT_SET_META_CONTEXT with the metadata context name “qemu:allocation-depth” to inspect allocation details. (since 5.2)The members of
BlockExportOptionsNbdBase.
- Object BlockExportOptionsVhostUserBlk (Since: 5.2)
A vhost-user-blk block export.
- Members:
addr (
SocketAddress) – The vhost-user socket on which to listen. Both ‘unix’ and ‘fd’SocketAddresstypes are supported. Passed fds must be UNIX domain sockets.logical-block-size (
int, optional) – Logical block size in bytes. Defaults to 512 bytes.num-queues (
int, optional) – Number of request virtqueues. Must be greater than 0. Defaults to 1.
- Enum FuseExportAllowOther (Since: 6.1)
Possible allow_other modes for FUSE exports.
- Values:
off – Do not pass allow_other as a mount option.
on – Pass allow_other as a mount option.
auto – Try mounting with allow_other first, and if that fails, retry without allow_other.
- Object BlockExportOptionsFuse (Since: 6.0)
- Availability:
CONFIG_FUSEOptions for exporting a block graph node on some (file) mountpoint as a raw image.
Multi-threading note: The FUSE export supports multi-threading. Currently, requests are distributed across these threads in a round-robin fashion, i.e. independently of the CPU core from which a request originates.
- Members:
mountpoint (
string) – Path on which to export the block device via FUSE. This must point to an existing regular file.growable (
boolean, optional) – Whether writes beyond the EOF should grow the block node accordingly. (default: false)allow-other (
FuseExportAllowOther, optional) – If this is off, only QEMU’s user is allowed access to this export. That cannot be changed even with chmod or chown. Enabling this option will allow other users access to the export with the FUSE mount option “allow_other”. Note that using allow_other as a non-root user requires user_allow_other to be enabled in the global fuse.conf configuration file. In auto mode (the default), the FUSE export driver will first attempt to mount the export with allow_other, and if that fails, try again without. (since 6.1; default: auto)
- Object BlockExportOptionsVduseBlk (Since: 7.1)
A vduse-blk block export.
- Members:
name (
string) – the name of VDUSE device (must be unique across the host).num-queues (
int, optional) – the number of virtqueues. Defaults to 1.queue-size (
int, optional) – the size of virtqueue. Defaults to 256.logical-block-size (
int, optional) – Logical block size in bytes. Range [512, PAGE_SIZE] and must be power of 2. Defaults to 512 bytes.serial (
string, optional) – the serial number of virtio block device. Defaults to empty string.
- Object NbdServerAddOptions (Since: 5.0)
An NBD block export, per legacy
nbd-server-addcommand.- Members:
device (
string) – The device name or node name of the node to be exportedwritable (
boolean, optional) – Whether clients should be able to write to the device via the NBD connection (default false).bitmap (
string, optional) – Also export a single dirty bitmap reachable fromdevice, so the NBD client can use NBD_OPT_SET_META_CONTEXT with the metadata context name “qemu:dirty-bitmap:BITMAP” to inspect the bitmap (since 4.0).The members of
BlockExportOptionsNbdBase.
- Command nbd-server-add (Since: 1.3)
- This command is deprecated.
Export a block node to QEMU’s embedded NBD server.
The export name will be used as the id for the resulting block export.
- Arguments:
The members of
NbdServerAddOptions.
- Features:
deprecated – This command is deprecated. Use
block-export-addinstead.
- Errors:
if the server is not running
if an export with the same name already exists
- Enum BlockExportRemoveMode (Since: 2.12)
Mode for removing a block export.
- Values:
safe – Remove export if there are no existing connections, fail otherwise.
hard – Drop all connections immediately and remove export.
- Command nbd-server-remove (Since: 2.12)
- This command is deprecated.
Remove NBD export by name.
- Arguments:
name (
string) – Block export id.mode (
BlockExportRemoveMode, optional) – Mode of command operation. SeeBlockExportRemoveModedescription. Default is ‘safe’.
- Features:
deprecated – This command is deprecated. Use
block-export-delinstead.
- Errors:
if the server is not running
if export is not found
if mode is ‘safe’ and there are existing connections
- Command nbd-server-stop (Since: 1.3)
Stop QEMU’s embedded NBD server, and unregister all devices previously added via
nbd-server-add.
- Enum BlockExportType (Since: 4.2)
An enumeration of block export types
- Values:
nbd – NBD export
vhost-user-blk – vhost-user-blk export (since 5.2)
fuse – FUSE export (since: 6.0)
vduse-blk – vduse-blk export (since 7.1)
- Object BlockExportOptions (Since: 4.2)
Describes a block export, i.e. how single node should be exported on an external interface.
- Members:
type (
BlockExportType) – Block export typeid (
string) – A unique identifier for the block export (across all export types)node-name (
string) – The node name of the block node to be exported (since: 5.2)writable (
boolean, optional) – True if clients should be able to write to the export (default false)writethrough (
boolean, optional) – If true, caches are flushed after every write request to the export before completion is signalled. (since: 5.2; default: false)iothread (
BlockExportIothreads, optional) – The name(s) of one or more iothread object(s) where the export will run. The default is to use the thread currently associated with the block node. (since: 5.2; multi-threading since 10.1)fixed-iothread (
boolean, optional) – True prevents the block node from being moved to another thread while the export is active. If true andiothreadis given, export creation fails if the block node cannot be moved to the iothread. Must not be true when giving multiple iothreads foriothread. The default is false. (since: 5.2)allow-inactive (
boolean, optional) – If true, the export allows the exported node to be inactive. If it is created for an inactive block node, the node remains inactive. If the export type doesn’t support running on an inactive node, an error is returned. If false, inactive block nodes are automatically activated before creating the export and trying to inactivate them later fails. (since: 10.0; default: false)When
typeisnbd: The members ofBlockExportOptionsNbd.When
typeisvhost-user-blk: The members ofBlockExportOptionsVhostUserBlk.When
typeisfuse: The members ofBlockExportOptionsFuse.When
typeisvduse-blk: The members ofBlockExportOptionsVduseBlk.
- Alternate BlockExportIothreads (Since: 10.1)
Specify a single or multiple I/O threads in which to run a block export’s I/O.
- Alternatives:
single (
string) – Run the export’s I/O in the given single I/O thread.multi (
[string]) – Use multi-threading across the given set of I/O threads, which must not be empty. Note: Passing a single I/O thread via this variant is still treated as multi-threading, which is different from using thesinglevariant. In particular, even if there only is a single I/O thread in the set, export types that do not support multi-threading will generally reject this variant, and BlockExportOptions.fixed-iothread is always incompatible with it.
- Command block-export-add (Since: 5.2)
Creates a new block export.
- Arguments:
The members of
BlockExportOptions.
- Command block-export-del (Since: 5.2)
Request to remove a block export. This drops the user’s reference to the export, but the export may still stay around after this command returns until the shutdown of the export has completed.
- Arguments:
id (
string) – Block export id.mode (
BlockExportRemoveMode, optional) – Mode of command operation. SeeBlockExportRemoveModedescription. Default is ‘safe’.
- Errors:
if the export is not found
if
modeis ‘safe’ and the export is still in use (e.g. by existing client connections)
- Event BLOCK_EXPORT_DELETED (Since: 5.2)
Emitted when a block export is removed and its id can be reused.
- Members:
id (
string) – Block export id.
- Object BlockExportInfo (Since: 5.2)
Information about a single block export.
- Members:
id (
string) – The unique identifier for the block exporttype (
BlockExportType) – The block export typenode-name (
string) – The node name of the block node that is exportedshutting-down (
boolean) – True if the export is shutting down (e.g. after ablock-export-delcommand, but before the shutdown has completed)
- Command query-block-exports (Since: 5.2)
- Return:
[BlockExportInfo]– A list describing all block exports
Character devices
- Object ChardevInfo (Since: 0.14)
Information about a character device.
- Members:
label (
string) – the label of the character devicefilename (
string) – the filename of the character devicefrontend-open (
boolean) – shows whether the frontend device attached to this backend (e.g. with the chardev=… option) is in open or closed state (since 2.1)
Note
filenameis encoded using the QEMU command line character device encoding. See the QEMU man page for details.
- Command query-chardev (Since: 0.14)
Return information about current character devices.
- Return:
Example:
-> { "execute": "query-chardev" } <- { "return": [ { "label": "charchannel0", "filename": "unix:/var/lib/libvirt/qemu/seabios.rhel6.agent,server=on", "frontend-open": false }, { "label": "charmonitor", "filename": "unix:/var/lib/libvirt/qemu/seabios.rhel6.monitor,server=on", "frontend-open": true }, { "label": "charserial0", "filename": "pty:/dev/pts/2", "frontend-open": true } ] }
- Object ChardevBackendInfo (Since: 2.0)
Information about a character device backend
- Members:
name (
string) – The backend name
- Command query-chardev-backends (Since: 2.0)
Return information about character device backends.
- Return:
Example:
-> { "execute": "query-chardev-backends" } <- { "return":[ { "name":"udp" }, { "name":"tcp" }, { "name":"unix" }, { "name":"spiceport" } ] }
- Enum DataFormat (Since: 1.4)
An enumeration of data format.
- Values:
utf8 – Data is a UTF-8 string (RFC 3629)
base64 – Data is Base64 encoded binary (RFC 3548)
- Command ringbuf-write (Since: 1.4)
Write to a ring buffer character device.
- Arguments:
device (
string) – the ring buffer character device namedata (
string) – data to writeformat (
DataFormat, optional) –data encoding (default ‘utf8’).
base64: data must be base64 encoded text. Its binary decoding gets written.
utf8: data’s UTF-8 encoding is written
data itself is always Unicode regardless of format, like any other string.
Example:
-> { "execute": "ringbuf-write", "arguments": { "device": "foo", "data": "abcdefgh", "format": "utf8" } } <- { "return": {} }
- Command ringbuf-read (Since: 1.4)
Read from a ring buffer character device.
- Arguments:
device (
string) – the ring buffer character device namesize (
int) – how many bytes to read at mostformat (
DataFormat, optional) –data encoding (default ‘utf8’).
base64: the data read is returned in base64 encoding.
utf8: the data read is interpreted as UTF-8. Bug: can screw up when the buffer contains invalid UTF-8 sequences, NUL characters, after the ring buffer lost data, and when reading stops because the size limit is reached.
The return value is always Unicode regardless of format, like any other string.
- Return:
string– data read from the device
Example:
-> { "execute": "ringbuf-read", "arguments": { "device": "foo", "size": 1000, "format": "utf8" } } <- { "return": "abcdefgh" }
- Object ChardevCommon (Since: 2.6)
Configuration shared across all chardev backends
- Members:
logfile (
string, optional) – The name of a logfile to save outputlogappend (
boolean, optional) – true to append instead of truncate (default to false to truncate)logtimestamp (
boolean, optional) – true to insert timestamps into logfile (default false) (since 11.0)
- Object ChardevFile (Since: 1.4)
Configuration info for file chardevs.
- Members:
in (
string, optional) – The name of the input fileout (
string) – The name of the output fileappend (
boolean, optional) – Open the file in append mode (default false to truncate) (Since 2.6)The members of
ChardevCommon.
- Object ChardevHostdev (Since: 1.4)
Configuration info for device and pipe chardevs.
- Members:
device (
string) – The name of the special file for the device, i.e. /dev/ttyS0 on Unix or COM1: on WindowsThe members of
ChardevCommon.
- Object ChardevSocket (Since: 1.4)
Configuration info for (stream) socket chardevs.
- Members:
addr (
SocketAddressLegacy) – socket address to listen on (server=true) or connect to (server=false)tls-creds (
string, optional) – the ID of the TLS credentials object (since 2.6)tls-authz (
string, optional) – the ID of the QAuthZ authorization object against which the client’s x509 distinguished name will be validated. This object is only resolved at time of use, so can be deleted and recreated on the fly while the chardev server is active. If missing, it will default to denying access (since 4.0)server (
boolean, optional) – create server socket (default: true)wait (
boolean, optional) – wait for incoming connection on server sockets (default: false). Silently ignored with server: false. This use is deprecated.nodelay (
boolean, optional) – set TCP_NODELAY socket option (default: false)telnet (
boolean, optional) – enable telnet protocol on server sockets (default: false)tn3270 (
boolean, optional) – enable tn3270 protocol on server sockets (default: false) (Since: 2.10)websocket (
boolean, optional) – enable websocket protocol on server sockets (default: false) (Since: 3.1)reconnect-ms (
int, optional) – For a client socket, if a socket is disconnected, then attempt a reconnect after the given number of milliseconds. Setting this to zero disables this function. (default: 0) (Since: 9.2)The members of
ChardevCommon.
- Object ChardevUdp (Since: 1.5)
Configuration info for datagram socket chardevs.
- Members:
remote (
SocketAddressLegacy) – remote addresslocal (
SocketAddressLegacy, optional) – local addressThe members of
ChardevCommon.
- Object ChardevMux (Since: 1.5)
Configuration info for mux chardevs.
- Members:
chardev (
string) – name of the base chardev.The members of
ChardevCommon.
- Object ChardevHub (Since: 10.0)
Configuration info for hub chardevs.
- Members:
chardevs (
[string]) – IDs to be added to this hub (maximum 4 devices).The members of
ChardevCommon.
- Object ChardevStdio (Since: 1.5)
Configuration info for stdio chardevs.
- Members:
signal (
boolean, optional) – Allow signals (such as SIGINT triggered by ^C) be delivered to QEMU. Default: true.The members of
ChardevCommon.
- Object ChardevSpiceChannel (Since: 1.5)
- Availability:
CONFIG_SPICEConfiguration info for spice vm channel chardevs.
- Members:
type (
string) – kind of channel (for example vdagent).The members of
ChardevCommon.
- Object ChardevSpicePort (Since: 1.5)
- Availability:
CONFIG_SPICEConfiguration info for spice port chardevs.
- Members:
fqdn (
string) – name of the channel (see docs/spice-port-fqdn.txt)The members of
ChardevCommon.
- Object ChardevDBus (Since: 7.0)
- Availability:
CONFIG_DBUS_DISPLAYConfiguration info for DBus chardevs.
- Members:
name (
string) – name of the channel (following docs/spice-port-fqdn.txt)The members of
ChardevCommon.
- Object ChardevVC (Since: 1.5)
Configuration info for virtual console chardevs.
- Members:
width (
int, optional) – console width, in pixelsheight (
int, optional) – console height, in pixelscols (
int, optional) – console width, in charsrows (
int, optional) – console height, in charsThe members of
ChardevCommon.
Note
The options are only effective when the VNC or SDL graphical display backend is active. They are ignored with the GTK, Spice, VNC and D-Bus display backends.
- Object ChardevRingbuf (Since: 1.5)
Configuration info for ring buffer chardevs.
- Members:
size (
int, optional) – ring buffer size, must be power of two, default is 65536The members of
ChardevCommon.
- Object ChardevQemuVDAgent (Since: 6.1)
- Availability:
CONFIG_SPICE_PROTOCOLConfiguration info for QEMU vdagent implementation.
- Members:
mouse (
boolean, optional) – enable/disable mouse, default is enabled.clipboard (
boolean, optional) – enable/disable clipboard, default is disabled.The members of
ChardevCommon.
- Object ChardevPty (Since: 9.2)
Configuration info for pty implementation.
- Members:
path (
string, optional) – optional path to create a symbolic link that points to the allocated PTYThe members of
ChardevCommon.
- Enum ChardevBackendKind (Since: 1.4)
- Values:
file – regular files
serial – serial host device
parallel – parallel host device
pipe – pipes (since 1.5)
socket – stream socket
udp – datagram socket (since 1.5)
pty – pseudo-terminal
null – provides no input, throws away output
mux – (since 1.5)
hub – (since 10.0)
msmouse – emulated Microsoft serial mouse (since 1.5)
wctablet – emulated Wacom Penpartner serial tablet (since 2.9)
braille – Baum Braille device (since 1.5)
testdev – device for test-suite control (since 2.2)
stdio – standard I/O (since 1.5)
console – Windows console (since 1.5)
spicevmc – spice vm channel (since 1.5)
spiceport – Spice port channel (since 1.5)
qemu-vdagent – Spice vdagent (since 6.1)
dbus – D-Bus channel (since 7.0)
vc – virtual console (since 1.5)
ringbuf – memory ring buffer (since 1.6)
memory – synonym for
ringbuf(since 1.5)
- Features:
deprecated – Member
memoryis deprecated. Useringbufinstead.
- Object ChardevFileWrapper (Since: 1.4)
- Members:
data (
ChardevFile) – Configuration info for file chardevs
- Object ChardevHostdevWrapper (Since: 1.4)
- Members:
data (
ChardevHostdev) – Configuration info for device and pipe chardevs
- Object ChardevSocketWrapper (Since: 1.4)
- Members:
data (
ChardevSocket) – Configuration info for (stream) socket chardevs
- Object ChardevUdpWrapper (Since: 1.5)
- Members:
data (
ChardevUdp) – Configuration info for datagram socket chardevs
- Object ChardevCommonWrapper (Since: 2.6)
- Members:
data (
ChardevCommon) – Configuration shared across all chardev backends
- Object ChardevMuxWrapper (Since: 1.5)
- Members:
data (
ChardevMux) – Configuration info for mux chardevs
- Object ChardevHubWrapper (Since: 10.0)
- Members:
data (
ChardevHub) – Configuration info for hub chardevs
- Object ChardevStdioWrapper (Since: 1.5)
- Members:
data (
ChardevStdio) – Configuration info for stdio chardevs
- Object ChardevSpiceChannelWrapper (Since: 1.5)
- Availability:
CONFIG_SPICE- Members:
data (
ChardevSpiceChannel) – Configuration info for spice vm channel chardevs
- Object ChardevSpicePortWrapper (Since: 1.5)
- Availability:
CONFIG_SPICE- Members:
data (
ChardevSpicePort) – Configuration info for spice port chardevs
- Object ChardevQemuVDAgentWrapper (Since: 6.1)
- Availability:
CONFIG_SPICE_PROTOCOL- Members:
data (
ChardevQemuVDAgent) – Configuration info for QEMU vdagent implementation
- Object ChardevDBusWrapper (Since: 7.0)
- Availability:
CONFIG_DBUS_DISPLAY- Members:
data (
ChardevDBus) – Configuration info for DBus chardevs
- Object ChardevVCWrapper (Since: 1.5)
- Members:
data (
ChardevVC) – Configuration info for virtual console chardevs
- Object ChardevRingbufWrapper (Since: 1.5)
- Members:
data (
ChardevRingbuf) – Configuration info for ring buffer chardevs
- Object ChardevPtyWrapper (Since: 9.2)
- Members:
data (
ChardevPty) – Configuration info for pty chardevs
- Object ChardevBackend (Since: 1.4)
Configuration info for the new chardev backend.
- Members:
type (
ChardevBackendKind) – backend typeWhen
typeisfile: The members ofChardevFileWrapper.When
typeisserial: The members ofChardevHostdevWrapper.When
typeisparallel: The members ofChardevHostdevWrapper.When
typeispipe: The members ofChardevHostdevWrapper.When
typeissocket: The members ofChardevSocketWrapper.When
typeisudp: The members ofChardevUdpWrapper.When
typeispty: The members ofChardevPtyWrapper.When
typeisnull: The members ofChardevCommonWrapper.When
typeismux: The members ofChardevMuxWrapper.When
typeishub: The members ofChardevHubWrapper.When
typeismsmouse: The members ofChardevCommonWrapper.When
typeiswctablet: The members ofChardevCommonWrapper.When
typeisbraille: The members ofChardevCommonWrapper.When
typeistestdev: The members ofChardevCommonWrapper.When
typeisstdio: The members ofChardevStdioWrapper.When
typeisconsole: The members ofChardevCommonWrapper.When
typeisspicevmc: The members ofChardevSpiceChannelWrapper.When
typeisspiceport: The members ofChardevSpicePortWrapper.When
typeisqemu-vdagent: The members ofChardevQemuVDAgentWrapper.When
typeisdbus: The members ofChardevDBusWrapper.When
typeisvc: The members ofChardevVCWrapper.When
typeisringbuf: The members ofChardevRingbufWrapper.When
typeismemory: The members ofChardevRingbufWrapper.
- Object ChardevReturn (Since: 1.4)
Return info about the chardev backend just created.
- Members:
pty (
string, optional) – name of the slave pseudoterminal device, present if and only if a chardev of type ‘pty’ was created
- Command chardev-add (Since: 1.4)
Add a character device backend
- Arguments:
id (
string) – the chardev’s ID, must be uniquebackend (
ChardevBackend) – backend type and parameters
- Return:
Example:
-> { "execute" : "chardev-add", "arguments" : { "id" : "foo", "backend" : { "type" : "null", "data" : {} } } } <- { "return": {} }
Example:
-> { "execute" : "chardev-add", "arguments" : { "id" : "bar", "backend" : { "type" : "file", "data" : { "out" : "/tmp/bar.log" } } } } <- { "return": {} }
Example:
-> { "execute" : "chardev-add", "arguments" : { "id" : "baz", "backend" : { "type" : "pty", "data" : {} } } } <- { "return": { "pty" : "/dev/pty/42" } }
- Command chardev-change (Since: 2.10)
Change a character device backend
- Arguments:
id (
string) – the chardev’s ID, must existbackend (
ChardevBackend) – new backend type and parameters
- Return:
Example:
-> { "execute" : "chardev-change", "arguments" : { "id" : "baz", "backend" : { "type" : "pty", "data" : {} } } } <- { "return": { "pty" : "/dev/pty/42" } }
Example:
-> {"execute" : "chardev-change", "arguments" : { "id" : "charchannel2", "backend" : { "type" : "socket", "data" : { "addr" : { "type" : "unix" , "data" : { "path" : "/tmp/charchannel2.socket" } }, "server" : true, "wait" : false }}}} <- {"return": {}}
- Command chardev-remove (Since: 1.4)
Remove a character device backend
- Arguments:
id (
string) – the chardev’s ID, must exist and not be in use
Example:
-> { "execute": "chardev-remove", "arguments": { "id" : "foo" } } <- { "return": {} }
- Command chardev-send-break (Since: 2.10)
Send a break to a character device
- Arguments:
id (
string) – the chardev’s ID, must exist
Example:
-> { "execute": "chardev-send-break", "arguments": { "id" : "foo" } } <- { "return": {} }
- Event VSERPORT_CHANGE (Since: 2.1)
Emitted when the guest opens or closes a virtio-serial port.
- Members:
id (
string) – device identifier of the virtio-serial portopen (
boolean) – true if the guest has opened the virtio-serial port
Note
This event is rate-limited.
Example:
<- { "event": "VSERPORT_CHANGE", "data": { "id": "channel0", "open": true }, "timestamp": { "seconds": 1401385907, "microseconds": 422329 } }
Dump guest memory
- Enum DumpGuestMemoryFormat (Since: 2.0)
An enumeration of guest-memory-dump’s format.
- Values:
elf – elf format
kdump-zlib – makedumpfile flattened, kdump-compressed format with zlib compression
kdump-lzo – makedumpfile flattened, kdump-compressed format with lzo compression
kdump-snappy – makedumpfile flattened, kdump-compressed format with snappy compression
kdump-raw-zlib – raw assembled kdump-compressed format with zlib compression (since 8.2)
kdump-raw-lzo – raw assembled kdump-compressed format with lzo compression (since 8.2)
kdump-raw-snappy – raw assembled kdump-compressed format with snappy compression (since 8.2)
win-dmp – Windows full crashdump format, can be used instead of ELF converting (since 2.13)
- Command dump-guest-memory (Since: 1.2)
Dump guest’s memory to vmcore. It is a synchronous operation that can take very long depending on the amount of guest memory.
- Arguments:
paging (
boolean) –if true, do paging to get guest’s memory mapping. This allows using gdb to process the core file.
Important: this option can make QEMU allocate several gigabytes of RAM. This can happen for a large guest, or a malicious guest pretending to be large.
Also, paging=true has the following limitations:
The guest may be in a catastrophic state or can have corrupted memory, which cannot be trusted
The guest can be in real-mode even if paging is enabled. For example, the guest uses ACPI to sleep, and ACPI sleep state goes in real-mode
Currently only supported on i386 and x86_64.
protocol (
string) –the filename or file descriptor of the vmcore. The supported protocols are:
file: the protocol starts with “file:”, and the following string is the file’s path.
fd: the protocol starts with “fd:”, and the following string is the fd’s name.
detach (
boolean, optional) – if true, QMP will return immediately rather than waiting for the dump to finish. The user can track progress usingquery-dump. (since 2.6).begin (
int, optional) – if specified, the starting physical address.length (
int, optional) – if specified, the memory size, in bytes. If you don’t want to dump all guest’s memory, please specify the startbeginandlengthformat (
DumpGuestMemoryFormat, optional) – if specified, the format of guest memory dump. But non-elf format is conflict with paging and filter, ie.paging,beginandlengthis not allowed to be specified with non-elfformatat the same time (since 2.0)
Note
All boolean arguments default to false.
Example:
-> { "execute": "dump-guest-memory", "arguments": { "paging": false, "protocol": "fd:dump" } } <- { "return": {} }
- Enum DumpStatus (Since: 2.6)
Describe the status of a long-running background guest memory dump.
- Values:
none – no
dump-guest-memoryhas started yet.active – there is one dump running in background.
completed – the last dump has finished successfully.
failed – the last dump has failed.
- Object DumpQueryResult (Since: 2.6)
The result format for
query-dump.- Members:
status (
DumpStatus) – enum ofDumpStatus, which shows current dump statuscompleted (
int) – bytes written in latest dump (uncompressed)total (
int) – total bytes to be written in latest dump (uncompressed)
- Command query-dump (Since: 2.6)
Query latest dump status.
- Return:
DumpQueryResult– An object showing the dump status.
Example:
-> { "execute": "query-dump" } <- { "return": { "status": "active", "completed": 1024000, "total": 2048000 } }
- Event DUMP_COMPLETED (Since: 2.6)
Emitted when background dump has completed
- Members:
result (
DumpQueryResult) – final dump statuserror (
string, optional) – human-readable error string that provides hint on why dump failed. Only presents on failure. The user should not try to interpret the error string.
Example:
<- { "event": "DUMP_COMPLETED", "data": { "result": { "total": 1090650112, "status": "completed", "completed": 1090650112 } }, "timestamp": { "seconds": 1648244171, "microseconds": 950316 } }
- Object DumpGuestMemoryCapability (Since: 2.0)
- Members:
formats (
[DumpGuestMemoryFormat]) – the available formats fordump-guest-memory
- Command query-dump-guest-memory-capability (Since: 2.0)
Return the available formats for
dump-guest-memory- Return:
DumpGuestMemoryCapability– An object listing available formats fordump-guest-memory
Example:
-> { "execute": "query-dump-guest-memory-capability" } <- { "return": { "formats": ["elf", "kdump-zlib", "kdump-lzo", "kdump-snappy"] } }
Net devices
- Command set_link (Since: 0.14)
Sets the link status of a virtual network adapter.
- Arguments:
name (
string) – the device name of the virtual network adapterup (
boolean) – true to set the link status to be up
- Errors:
If
nameis not a valid network device, DeviceNotFound
Note
Not all network adapters support setting link status. This command will succeed even if the network adapter does not support link status notification.
Example:
-> { "execute": "set_link", "arguments": { "name": "e1000.0", "up": false } } <- { "return": {} }
- Command netdev_add (Since: 0.14)
Add a network backend.
Additional arguments depend on the type.
- Arguments:
The members of
Netdev.
- Errors:
If
typeis not a valid network backend, DeviceNotFound
Example:
-> { "execute": "netdev_add", "arguments": { "type": "user", "id": "netdev1", "dnssearch": [ { "str": "example.org" } ] } } <- { "return": {} }
- Command netdev_del (Since: 0.14)
Remove a network backend.
- Arguments:
id (
string) – the name of the network backend to remove
- Errors:
If
idis not a valid network backend, DeviceNotFound
Example:
-> { "execute": "netdev_del", "arguments": { "id": "netdev1" } } <- { "return": {} }
- Object NetLegacyNicOptions (Since: 1.2)
Create a new Network Interface Card.
- Members:
netdev (
string, optional) – id of -netdev to connect tomacaddr (
string, optional) – MAC addressmodel (
string, optional) – device model (e1000, rtl8139, virtio etc.)addr (
string, optional) – PCI device addressvectors (
int, optional) – number of MSI-x vectors, 0 to disable MSI-X
- Object String (Since: 1.2)
A fat type wrapping ‘str’, to be embedded in lists.
- Members:
str (
string) – Not documented
- Object NetDevPasstOptions (Since: 10.1)
- Availability:
CONFIG_PASSTUnprivileged user-mode network connectivity using passt
- Members:
path (
string, optional) – Filename of the passt program to run (by default ‘passt’, and use PATH)quiet (
boolean, optional) – don’t print informational messages (default, passed as ‘–quiet’)vhost-user (
boolean, optional) – enable vhost-usermtu (
int, optional) – assign MTU via DHCP/NDPaddress (
string, optional) – IPv4 or IPv6 addressnetmask (
string, optional) – IPv4 maskmac (
string, optional) – source MAC addressgateway (
string, optional) – IPv4 or IPv6 address as gatewayinterface (
string, optional) – interface for addresses and routesoutbound (
string, optional) – bind to address as outbound sourceoutbound-if4 (
string, optional) – bind to outbound interface for IPv4outbound-if6 (
string, optional) – bind to outbound interface for IPv6dns (
string, optional) – IPv4 or IPv6 address as DNSsearch (
[String], optional) – search domainsfqdn (
string, optional) – FQDN to configure client withdhcp-dns (
boolean, optional) – enable/disable DNS list in DHCP/DHCPv6/NDPdhcp-search (
boolean, optional) – enable/disable list in DHCP/DHCPv6/NDPmap-host-loopback (
string, optional) – addresse to refer to hostmap-guest-addr (
string, optional) – addr to translate to guest’s addressdns-forward (
string, optional) – forward DNS queries sent todns-host (
string, optional) – host nameserver to direct queries totcp (
boolean, optional) – enable/disable TCPudp (
boolean, optional) – enable/disable UDPicmp (
boolean, optional) – enable/disable ICMPdhcp (
boolean, optional) – enable/disable DHCPndp (
boolean, optional) – enable/disable NDPdhcpv6 (
boolean, optional) – enable/disable DHCPv6ra (
boolean, optional) – enable/disable route advertisementsfreebind (
boolean, optional) – bind to any address for forwardingipv4 (
boolean, optional) – enable/disable IPv4ipv6 (
boolean, optional) – enable/disable IPv6tcp-ports (
[String], optional) – TCP ports to forwardudp-ports (
[String], optional) – UDP ports to forwardparam (
[String], optional) – parameter to pass to passt command
- Object NetdevUserOptions (Since: 1.2)
Use the user mode network stack which requires no administrator privilege to run.
- Members:
hostname (
string, optional) – client hostname reported by the builtin DHCP serverrestrict (
boolean, optional) – isolate the guest from the hostipv4 (
boolean, optional) – whether to support IPv4, default true for enabled (since 2.6)ipv6 (
boolean, optional) – whether to support IPv6, default true for enabled (since 2.6)ip (
string, optional) – legacy parameter, use net= insteadnet (
string, optional) – IP network address that the guest will see, in the form addr[/netmask] The netmask is optional, and can be either in the form a.b.c.d or as a number of valid top-most bits. Default is 10.0.2.0/24.host (
string, optional) – guest-visible address of the hosttftp (
string, optional) – root directory of the built-in TFTP serverbootfile (
string, optional) – BOOTP filename, for use with tftp=dhcpstart (
string, optional) – the first of the 16 IPs the built-in DHCP server can assigndns (
string, optional) – guest-visible address of the virtual nameserverdnssearch (
[String], optional) – list of DNS suffixes to search, passed as DHCP option to the guestdomainname (
string, optional) – guest-visible domain name of the virtual nameserver (since 3.0)ipv6-prefix (
string, optional) – IPv6 network prefix (default is fec0::). The network prefix is given in the usual hexadecimal IPv6 address notation. (since 2.6)ipv6-prefixlen (
int, optional) – IPv6 network prefix length (default is 64) (since 2.6)ipv6-host (
string, optional) – guest-visible IPv6 address of the host (since 2.6)ipv6-dns (
string, optional) – guest-visible IPv6 address of the virtual nameserver (since 2.6)smb (
string, optional) – root directory of the built-in SMB serversmbserver (
string, optional) – IP address of the built-in SMB serverhostfwd (
[String], optional) – redirect incoming TCP, UDP or UNIX host connections to guest endpointsguestfwd (
[String], optional) – forward guest TCP connectionstftp-server-name (
string, optional) – RFC2132 “TFTP server name” string (Since 3.1)
- Object NetdevTapOptions (Since: 1.2)
Used to configure a host TAP network interface backend.
- Members:
ifname (
string, optional) – interface namefd (
string, optional) – file descriptor of an already opened tapfds (
string, optional) – multiple file descriptors of already opened multiqueue capable tapscript (
string, optional) – script to initialize the interfacedownscript (
string, optional) – script to shut down the interfacebr (
string, optional) – bridge name (since 2.8)helper (
string, optional) – command to execute to configure bridgesndbuf (
int, optional) – send buffer limit. Understands [TGMKkb] suffixes.vnet_hdr (
boolean, optional) – enable the IFF_VNET_HDR flag on the tap interfacevhost (
boolean, optional) – enable vhost-net network acceleratorvhostfd (
string, optional) – file descriptor of an already opened vhost net devicevhostfds (
string, optional) – file descriptors of multiple already opened vhost net devicesvhostforce (
boolean, optional) – vhost on for non-MSIX virtio guestsqueues (
int, optional) – number of queues to be created for multiqueue capable tappoll-us (
int, optional) – maximum number of microseconds that could be spent on busy polling for tap (since 2.7)
- Object NetdevSocketOptions (Since: 1.2)
Socket netdevs are used to establish a network connection to another QEMU virtual machine via a TCP socket.
- Members:
fd (
string, optional) – file descriptor of an already opened socketlisten (
string, optional) – port number, and optional hostname, to listen onconnect (
string, optional) – port number, and optional hostname, to connect tomcast (
string, optional) – UDP multicast address and port numberlocaladdr (
string, optional) – source address and port for multicast and udp packetsudp (
string, optional) – UDP unicast address and port number
- Object NetdevL2TPv3Options (Since: 2.1)
Configure an Ethernet over L2TPv3 tunnel.
- Members:
src (
string) – source addressdst (
string) – destination addresssrcport (
string, optional) – source port - mandatory for udp, optional for ipdstport (
string, optional) – destination port - mandatory for udp, optional for ipipv6 (
boolean, optional) – force the use of ipv6udp (
boolean, optional) – use the udp version of l2tpv3 encapsulationcookie64 (
boolean, optional) – use 64 bit cookiescounter (
boolean, optional) – have sequence counterpincounter (
boolean, optional) – pin sequence counter to zero - workaround for buggy implementations or networks with packet reordertxcookie (
int, optional) – 32 or 64 bit transmit cookierxcookie (
int, optional) – 32 or 64 bit receive cookietxsession (
int) – 32 bit transmit sessionrxsession (
int, optional) – 32 bit receive session - if not specified set to the same value as transmitoffset (
int, optional) – additional offset - allows the insertion of additional application-specific data before the packet payload
- Object NetdevVdeOptions (Since: 1.2)
Connect to a vde switch running on the host.
- Members:
sock (
string, optional) – socket pathport (
int, optional) – port numbergroup (
string, optional) – group owner of socketmode (
int, optional) – permissions for socket
- Object NetdevBridgeOptions (Since: 1.2)
Connect a host TAP network interface to a host bridge device.
- Members:
br (
string, optional) – bridge namehelper (
string, optional) – command to execute to configure bridge
- Object NetdevHubPortOptions (Since: 1.2)
Connect two or more net clients through a software hub.
- Members:
hubid (
int) – hub identifier numbernetdev (
string, optional) – used to connect hub to a netdev instead of a device (since 2.12)
- Object NetdevNetmapOptions (Since: 2.0)
Connect a client to a netmap-enabled NIC or to a VALE switch port
- Members:
ifname (
string) – Either the name of an existing network interface supported by netmap, or the name of a VALE port (created on the fly). A VALE port name is in the form ‘valeXXX:YYY’, where XXX and YYY are non-negative integers. XXX identifies a switch and YYY identifies a port of the switch. VALE ports having the same XXX are therefore connected to the same switch.devname (
string, optional) – path of the netmap device (default: ‘/dev/netmap’).
- Enum AFXDPMode (Since: 8.2)
- Availability:
CONFIG_AF_XDPAttach mode for a default XDP program
- Values:
skb – generic mode, no driver support necessary
native – DRV mode, program is attached to a driver, packets are passed to the socket without allocation of skb.
- Object NetdevAFXDPOptions (Since: 8.2)
- Availability:
CONFIG_AF_XDPAF_XDP network backend
- Members:
ifname (
string) – The name of an existing network interface.mode (
AFXDPMode, optional) – Attach mode for a default XDP program. If not specified, then ‘native’ will be tried first, then ‘skb’.force-copy (
boolean, optional) – Force XDP copy mode even if device supports zero-copy. (default: false)queues (
int, optional) – number of queues to be used for multiqueue interfaces (default: 1).start-queue (
int, optional) – Usequeuesstarting from this queue number (default: 0).inhibit (
boolean, optional) – Don’t load a default XDP program, use one already loaded to the interface (default: false). Requiressock-fdsormap-path.sock-fds (
string, optional) – A colon (:) separated list of file descriptors for already open but not bound AF_XDP sockets in the queue order. One fd per queue. These descriptors should already be added into XDP socket map for corresponding queues.sock-fdsandmap-pathare mutually exclusive. Requiresinhibit.map-path (
string, optional) – The path to a pinned xsk map to push file descriptors for bound AF_XDP sockets into.map-pathandsock-fdsare mutually exclusive. Requiresinhibit. (Since 10.1)map-start-index (
int, optional) – Usemap-pathto insert xsk sockets starting from this index number (default: 0). Requiresmap-path. (Since 10.1)
- Object NetdevVhostUserOptions (Since: 2.1)
Vhost-user network backend
- Members:
chardev (
string) – name of a unix socket chardevvhostforce (
boolean, optional) – vhost on for non-MSIX virtio guests (default: false).queues (
int, optional) – number of queues to be created for multiqueue vhost-user (default: 1) (Since 2.5)
- Object NetdevVhostVDPAOptions (Since: 5.1)
Vhost-vdpa network backend
vDPA device is a device that uses a datapath which complies with the virtio specifications with a vendor specific control path.
- Members:
vhostdev (
string, optional) – path of vhost-vdpa device (default:’/dev/vhost-vdpa-0’)vhostfd (
string, optional) – file descriptor of an already opened vhost vdpa devicequeues (
int, optional) – number of queues to be created for multiqueue vhost-vdpa (default: 1)x-svq (
boolean, optional) – Start device with (experimental) shadow virtqueue. (Since 7.1) (default: false)
- Features:
unstable – Member
x-svqis experimental.
- Object NetdevVmnetHostOptions (Since: 7.1)
- Availability:
CONFIG_VMNETvmnet (host mode) network backend.
Allows the vmnet interface to communicate with other vmnet interfaces that are in host mode and also with the host.
- Members:
start-address (
string, optional) – The starting IPv4 address to use for the interface. Must be in the private IP range (RFC 1918). Must be specified along withend-addressandsubnet-mask. This address is used as the gateway address. The subsequent address up to and including end-address are placed in the DHCP pool.end-address (
string, optional) – The DHCP IPv4 range end address to use for the interface. Must be in the private IP range (RFC 1918). Must be specified along withstart-addressandsubnet-mask.subnet-mask (
string, optional) – The IPv4 subnet mask to use on the interface. Must be specified along withstart-addressandsubnet-mask.isolated (
boolean, optional) – Enable isolation for this interface. Interface isolation ensures that vmnet interface is not able to communicate with any other vmnet interfaces. Only communication with host is allowed. Requires at least macOS Big Sur 11.0.net-uuid (
string, optional) – The identifier (UUID) to uniquely identify the isolated network vmnet interface should be added to. If set, no DHCP service is provided for this interface and network communication is allowed only with other interfaces added to this network identified by the UUID. Requires at least macOS Big Sur 11.0.
- Availability:
CONFIG_VMNETvmnet (shared mode) network backend.
Allows traffic originating from the vmnet interface to reach the Internet through a network address translator (NAT). The vmnet interface can communicate with the host and with other shared mode interfaces on the same subnet. If no DHCP settings, subnet mask and IPv6 prefix specified, the interface can communicate with any of other interfaces in shared mode.
- Members:
start-address (
string, optional) – The starting IPv4 address to use for the interface. Must be in the private IP range (RFC 1918). Must be specified along withend-addressandsubnet-mask. This address is used as the gateway address. The subsequent address up to and including end-address are placed in the DHCP pool.end-address (
string, optional) – The DHCP IPv4 range end address to use for the interface. Must be in the private IP range (RFC 1918). Must be specified along withstart-addressandsubnet-mask.subnet-mask (
string, optional) – The IPv4 subnet mask to use on the interface. Must be specified along withstart-addressandsubnet-mask.isolated (
boolean, optional) – Enable isolation for this interface. Interface isolation ensures that vmnet interface is not able to communicate with any other vmnet interfaces. Only communication with host is allowed. Requires at least macOS Big Sur 11.0.nat66-prefix (
string, optional) – The IPv6 prefix to use into guest network. Must be a unique local address i.e. start with fd00::/8 and have length of 64.
- Object NetdevVmnetBridgedOptions (Since: 7.1)
- Availability:
CONFIG_VMNETvmnet (bridged mode) network backend.
Bridges the vmnet interface with a physical network interface.
- Members:
ifname (
string) – The name of the physical interface to be bridged.isolated (
boolean, optional) – Enable isolation for this interface. Interface isolation ensures that vmnet interface is not able to communicate with any other vmnet interfaces. Only communication with host is allowed. Requires at least macOS Big Sur 11.0.
- Object NetdevStreamOptions (Since: 7.2)
Configuration info for stream socket netdev
- Members:
addr (
SocketAddress) – socket address to listen on (server=true) or connect to (server=false)server (
boolean, optional) – create server socket (default: false)reconnect-ms (
int, optional) – For a client socket, if a socket is disconnected, then attempt a reconnect after the given number of milliseconds. Setting this to zero disables this function. (default: 0) (Since: 9.2)
Only
SocketAddresstypes ‘unix’, ‘inet’ and ‘fd’ are supported.
- Object NetdevDgramOptions (Since: 7.2)
Configuration info for datagram socket netdev.
- Members:
remote (
SocketAddress, optional) – remote addresslocal (
SocketAddress, optional) – local address
Only
SocketAddresstypes ‘unix’, ‘inet’ and ‘fd’ are supported.If remote address is present and it’s a multicast address, local address is optional. Otherwise local address is required and remote address is optional.
Valid parameters combination table remote
local
okay?
absent
absent
no
absent
not fd
no
absent
fd
yes
multicast
absent
yes
multicast
present
yes
not multicast
absent
no
not multicast
present
yes
- Enum NetClientDriver (Since: 2.7)
Available netdev drivers.
- Values:
l2tpv3 – since 2.1
vhost-vdpa – since 5.1
vmnet-host – since 7.1
vmnet-shared – since 7.1
vmnet-bridged – since 7.1
stream – since 7.2
dgram – since 7.2
af-xdp – since 8.2
passt – since 10.1
none – Not documented
nic – Not documented
user – Not documented
tap – Not documented
socket – Not documented
vde – Not documented
bridge – Not documented
hubport – Not documented
netmap – Not documented
vhost-user – Not documented
- Object Netdev (Since: 1.2)
Captures the configuration of a network device.
- Members:
id (
string) – identifier for monitor commands.type (
NetClientDriver) – Specify the driver used for interpreting remaining arguments.When
typeisnic: The members ofNetLegacyNicOptions.When
typeispasst: The members ofNetDevPasstOptions.When
typeisuser: The members ofNetdevUserOptions.When
typeistap: The members ofNetdevTapOptions.When
typeisl2tpv3: The members ofNetdevL2TPv3Options.When
typeissocket: The members ofNetdevSocketOptions.When
typeisstream: The members ofNetdevStreamOptions.When
typeisdgram: The members ofNetdevDgramOptions.When
typeisvde: The members ofNetdevVdeOptions.When
typeisbridge: The members ofNetdevBridgeOptions.When
typeishubport: The members ofNetdevHubPortOptions.When
typeisnetmap: The members ofNetdevNetmapOptions.When
typeisaf-xdp: The members ofNetdevAFXDPOptions.When
typeisvhost-user: The members ofNetdevVhostUserOptions.When
typeisvhost-vdpa: The members ofNetdevVhostVDPAOptions.When
typeisvmnet-host: The members ofNetdevVmnetHostOptions.When
typeisvmnet-shared: The members ofNetdevVmnetSharedOptions.When
typeisvmnet-bridged: The members ofNetdevVmnetBridgedOptions.
- Enum RxState (Since: 1.6)
Packets receiving state
- Values:
normal – filter assigned packets according to the mac-table
none – don’t receive any assigned packet
all – receive all assigned packets
- Object RxFilterInfo (Since: 1.6)
Rx-filter information for a NIC.
- Members:
name (
string) – net client namepromiscuous (
boolean) – whether promiscuous mode is enabledmulticast (
RxState) – multicast receive stateunicast (
RxState) – unicast receive statevlan (
RxState) – vlan receive state (Since 2.0)broadcast-allowed (
boolean) – whether to receive broadcastmulticast-overflow (
boolean) – multicast table is overflowed or notunicast-overflow (
boolean) – unicast table is overflowed or notmain-mac (
string) – the main macaddr stringvlan-table (
[int]) – a list of active vlan idunicast-table (
[string]) – a list of unicast macaddr stringmulticast-table (
[string]) – a list of multicast macaddr string
- Command query-rx-filter (Since: 1.6)
Return rx-filter information for all NICs (or for the given NIC).
- Arguments:
name (
string, optional) – net client name
- Return:
[RxFilterInfo]– list of info for all NICs (or for the given NIC).- Errors:
if the given
namedoesn’t existif the given NIC doesn’t support rx-filter querying
if the given net client isn’t a NIC
Example:
-> { "execute": "query-rx-filter", "arguments": { "name": "vnet0" } } <- { "return": [ { "promiscuous": true, "name": "vnet0", "main-mac": "52:54:00:12:34:56", "unicast": "normal", "vlan": "normal", "vlan-table": [ 4, 0 ], "unicast-table": [ ], "multicast": "normal", "multicast-overflow": false, "unicast-overflow": false, "multicast-table": [ "01:00:5e:00:00:01", "33:33:00:00:00:01", "33:33:ff:12:34:56" ], "broadcast-allowed": false } ] }
- Event NIC_RX_FILTER_CHANGED (Since: 1.6)
Emitted once until the
query-rx-filtercommand is executed, the first event will always be emitted- Members:
name (
string, optional) – net client namepath (
string) – device path
Example:
<- { "event": "NIC_RX_FILTER_CHANGED", "data": { "name": "vnet0", "path": "/machine/peripheral/vnet0/virtio-backend" }, "timestamp": { "seconds": 1368697518, "microseconds": 326866 } }
- Object AnnounceParameters (Since: 4.0)
Parameters for self-announce timers
- Members:
initial (
int) – Initial delay (in ms) before sending the first GARP/RARP announcementmax (
int) – Maximum delay (in ms) between GARP/RARP announcement packetsrounds (
int) – Number of self-announcement attemptsstep (
int) – Delay increase (in ms) after each self-announcement attemptinterfaces (
[string], optional) – An optional list of interface names, which restricts the announcement to the listed interfaces. (Since 4.1)id (
string, optional) – A name to be used to identify an instance of announce-timers and to allow it to modified later. Not for use as part of the migration parameters. (Since 4.1)
- Command announce-self (Since: 4.0)
Trigger generation of broadcast RARP frames to update network switches. This can be useful when network bonds fail-over the active slave.
- Arguments:
The members of
AnnounceParameters.
Example:
-> { "execute": "announce-self", "arguments": { "initial": 50, "max": 550, "rounds": 10, "step": 50, "interfaces": ["vn2", "vn3"], "id": "bob" } } <- { "return": {} }
- Event FAILOVER_NEGOTIATED (Since: 4.2)
Emitted when VIRTIO_NET_F_STANDBY was enabled during feature negotiation. Failover primary devices which were hidden (not hotplugged when requested) before will now be hotplugged by the virtio-net standby device.
- Members:
device-id (
string) – QEMU device id of the unplugged device
Example:
<- { "event": "FAILOVER_NEGOTIATED", "data": { "device-id": "net1" }, "timestamp": { "seconds": 1368697518, "microseconds": 326866 } }
- Event NETDEV_STREAM_CONNECTED (Since: 7.2)
Emitted when the netdev stream backend is connected
- Members:
netdev-id (
string) – QEMU netdev id that is connectedaddr (
SocketAddress) – The destination address
Example:
<- { "event": "NETDEV_STREAM_CONNECTED", "data": { "netdev-id": "netdev0", "addr": { "port": "47666", "ipv6": true, "host": "::1", "type": "inet" } }, "timestamp": { "seconds": 1666269863, "microseconds": 311222 } }
Example:
<- { "event": "NETDEV_STREAM_CONNECTED", "data": { "netdev-id": "netdev0", "addr": { "path": "/tmp/qemu0", "type": "unix" } }, "timestamp": { "seconds": 1666269706, "microseconds": 413651 } }
- Event NETDEV_STREAM_DISCONNECTED (Since: 7.2)
Emitted when the netdev stream backend is disconnected
- Members:
netdev-id (
string) – QEMU netdev id that is disconnected
Example:
<- { "event": "NETDEV_STREAM_DISCONNECTED", "data": {"netdev-id": "netdev0"}, "timestamp": {"seconds": 1663330937, "microseconds": 526695} }
- Event NETDEV_VHOST_USER_CONNECTED (Since: 10.0)
Emitted when the vhost-user chardev is connected
- Members:
netdev-id (
string) – QEMU netdev id that is connectedchardev-id (
string) – The character device id used by the QEMU netdev
Example:
<- { "timestamp": {"seconds": 1739538638, "microseconds": 354181 }, "event": "NETDEV_VHOST_USER_CONNECTED", "data": { "netdev-id": "netdev0", "chardev-id": "chr0" } }
- Event NETDEV_VHOST_USER_DISCONNECTED (Since: 10.0)
Emitted when the vhost-user chardev is disconnected
- Members:
netdev-id (
string) – QEMU netdev id that is disconnected
Example:
<- { "timestamp": { "seconds": 1739538634, "microseconds": 920450 }, "event": "NETDEV_VHOST_USER_DISCONNECTED", "data": { "netdev-id": "netdev0" } }
eBPF Objects
eBPF object is an ELF binary that contains the eBPF program and eBPF map description(BTF). Overall, eBPF object should contain the program and enough metadata to create/load eBPF with libbpf. As the eBPF maps/program should correspond to QEMU, the eBPF can’t be used from different QEMU build.
Currently, there is a possible eBPF for receive-side scaling (RSS).
- Object EbpfObject (Since: 9.0)
- Availability:
CONFIG_EBPFAn eBPF ELF object.
- Members:
object (
string) – the eBPF object encoded in base64
- Enum EbpfProgramID (Since: 9.0)
- Availability:
CONFIG_EBPFThe eBPF programs that can be gotten with
request-ebpf.- Values:
rss – Receive side scaling, technology that allows steering traffic between queues by calculation hash. Users may set up indirection table and hash/packet types configurations. Used with virtio-net.
- Command request-ebpf (Since: 9.0)
- Availability:
CONFIG_EBPFRetrieve an eBPF object that can be loaded with libbpf. Management applications (e.g. libvirt) may load it and pass file descriptors to QEMU, so they can run running QEMU without BPF capabilities.
- Arguments:
id (
EbpfProgramID) – The ID of the program to return.
- Return:
EbpfObject– eBPF object encoded in base64.
Rocker switch device
- Object RockerSwitch (Since: 2.4)
Rocker switch information.
- Members:
name (
string) – switch nameid (
int) – switch IDports (
int) – number of front-panel ports
- Command query-rocker (Since: 2.4)
Return rocker switch information.
- Arguments:
name (
string) – switch name
- Return:
Example:
-> { "execute": "query-rocker", "arguments": { "name": "sw1" } } <- { "return": {"name": "sw1", "ports": 2, "id": 1327446905938}}
- Enum RockerPortDuplex (Since: 2.4)
An enumeration of port duplex states.
- Values:
half – half duplex
full – full duplex
- Enum RockerPortAutoneg (Since: 2.4)
An enumeration of port autoneg states.
- Values:
off – autoneg is off
on – autoneg is on
- Object RockerPort (Since: 2.4)
Rocker switch port information.
- Members:
name (
string) – port nameenabled (
boolean) – port is enabled for I/Olink-up (
boolean) – physical link is UP on portspeed (
int) – port link speed in Mbpsduplex (
RockerPortDuplex) – port link duplexautoneg (
RockerPortAutoneg) – port link autoneg
- Command query-rocker-ports (Since: 2.4)
Return rocker switch port information.
- Arguments:
name (
string) – port name
- Return:
Example:
-> { "execute": "query-rocker-ports", "arguments": { "name": "sw1" } } <- { "return": [ {"duplex": "full", "enabled": true, "name": "sw1.1", "autoneg": "off", "link-up": true, "speed": 10000}, {"duplex": "full", "enabled": true, "name": "sw1.2", "autoneg": "off", "link-up": true, "speed": 10000} ]}
- Object RockerOfDpaFlowKey (Since: 2.4)
Rocker switch OF-DPA flow key
- Members:
priority (
int) – key priority, 0 being lowest prioritytbl-id (
int) – flow table IDin-pport (
int, optional) – physical input porttunnel-id (
int, optional) – tunnel IDvlan-id (
int, optional) – VLAN IDeth-type (
int, optional) – Ethernet header typeeth-src (
string, optional) – Ethernet header source MAC addresseth-dst (
string, optional) – Ethernet header destination MAC addressip-proto (
int, optional) – IP Header protocol fieldip-tos (
int, optional) – IP header TOS fieldip-dst (
string, optional) – IP header destination address
Note
Optional members may or may not appear in the flow key depending if they’re relevant to the flow key.
- Object RockerOfDpaFlowMask (Since: 2.4)
Rocker switch OF-DPA flow mask
- Members:
in-pport (
int, optional) – physical input porttunnel-id (
int, optional) – tunnel IDvlan-id (
int, optional) – VLAN IDeth-src (
string, optional) – Ethernet header source MAC addresseth-dst (
string, optional) – Ethernet header destination MAC addressip-proto (
int, optional) – IP Header protocol fieldip-tos (
int, optional) – IP header TOS field
Note
Optional members may or may not appear in the flow mask depending if they’re relevant to the flow mask.
- Object RockerOfDpaFlowAction (Since: 2.4)
Rocker switch OF-DPA flow action
- Members:
goto-tbl (
int, optional) – next table IDgroup-id (
int, optional) – group IDtunnel-lport (
int, optional) – tunnel logical port IDvlan-id (
int, optional) – VLAN IDnew-vlan-id (
int, optional) – new VLAN IDout-pport (
int, optional) – physical output port
Note
Optional members may or may not appear in the flow action depending if they’re relevant to the flow action.
- Object RockerOfDpaFlow (Since: 2.4)
Rocker switch OF-DPA flow
- Members:
cookie (
int) – flow unique cookie IDhits (
int) – count of matches (hits) on flowkey (
RockerOfDpaFlowKey) – flow keymask (
RockerOfDpaFlowMask) – flow maskaction (
RockerOfDpaFlowAction) – flow action
- Command query-rocker-of-dpa-flows (Since: 2.4)
Return rocker OF-DPA flow information.
- Arguments:
name (
string) – switch nametbl-id (
int, optional) – flow table ID. If tbl-id is not specified, returns flow information for all tables.
- Return:
[RockerOfDpaFlow]– rocker OF-DPA flow information
Example:
-> { "execute": "query-rocker-of-dpa-flows", "arguments": { "name": "sw1" } } <- { "return": [ {"key": {"in-pport": 0, "priority": 1, "tbl-id": 0}, "hits": 138, "cookie": 0, "action": {"goto-tbl": 10}, "mask": {"in-pport": 4294901760} }, ... ]}
- Object RockerOfDpaGroup (Since: 2.4)
Rocker switch OF-DPA group
- Members:
id (
int) – group unique IDtype (
int) – group typevlan-id (
int, optional) – VLAN IDpport (
int, optional) – physical port numberindex (
int, optional) – group index, unique with group typeout-pport (
int, optional) – output physical port numbergroup-id (
int, optional) – next group IDset-vlan-id (
int, optional) – VLAN ID to setpop-vlan (
int, optional) – pop VLAN headr from packetgroup-ids (
[int], optional) – list of next group IDsset-eth-src (
string, optional) – set source MAC address in Ethernet headerset-eth-dst (
string, optional) – set destination MAC address in Ethernet headerttl-check (
int, optional) – perform TTL check
Note
Optional members may or may not appear in the group depending if they’re relevant to the group type.
- Command query-rocker-of-dpa-groups (Since: 2.4)
Return rocker OF-DPA group information.
- Arguments:
name (
string) – switch nametype (
int, optional) – group type. If type is not specified, returns group information for all group types.
- Return:
[RockerOfDpaGroup]– rocker OF-DPA group information
Example:
-> { "execute": "query-rocker-of-dpa-groups", "arguments": { "name": "sw1" } } <- { "return": [ {"type": 0, "out-pport": 2, "pport": 2, "vlan-id": 3841, "pop-vlan": 1, "id": 251723778}, {"type": 0, "out-pport": 0, "pport": 0, "vlan-id": 3841, "pop-vlan": 1, "id": 251723776}, {"type": 0, "out-pport": 1, "pport": 1, "vlan-id": 3840, "pop-vlan": 1, "id": 251658241}, {"type": 0, "out-pport": 0, "pport": 0, "vlan-id": 3840, "pop-vlan": 1, "id": 251658240} ]}
TPM (trusted platform module) devices
- Enum TpmModel (Since: 1.5)
- Availability:
CONFIG_TPMAn enumeration of TPM models
- Values:
tpm-tis – TPM TIS model
tpm-crb – TPM CRB model (since 2.12)
tpm-spapr – TPM SPAPR model (since 5.0)
- Command query-tpm-models (Since: 1.5)
- Availability:
CONFIG_TPMReturn a list of supported TPM models
- Return:
[TpmModel]
Example:
-> { "execute": "query-tpm-models" } <- { "return": [ "tpm-tis", "tpm-crb", "tpm-spapr" ] }
- Enum TpmType (Since: 1.5)
- Availability:
CONFIG_TPMAn enumeration of TPM types
- Values:
passthrough – TPM passthrough type
emulator – Software Emulator TPM type (since 2.11)
- Command query-tpm-types (Since: 1.5)
- Availability:
CONFIG_TPMReturn a list of supported TPM types
- Return:
[TpmType]
Example:
-> { "execute": "query-tpm-types" } <- { "return": [ "passthrough", "emulator" ] }
- Object TPMPassthroughOptions (Since: 1.5)
- Availability:
CONFIG_TPMInformation about the TPM passthrough type
- Members:
path (
string, optional) – string describing the path used for accessing the TPM devicecancel-path (
string, optional) – string showing the TPM’s sysfs cancel file for cancellation of TPM commands while they are executing
- Object TPMEmulatorOptions (Since: 2.11)
- Availability:
CONFIG_TPMInformation about the TPM emulator type
- Members:
chardev (
string) – Name of a unix socket chardev
- Object TPMPassthroughOptionsWrapper (Since: 1.5)
- Availability:
CONFIG_TPM- Members:
data (
TPMPassthroughOptions) – Information about the TPM passthrough type
- Object TPMEmulatorOptionsWrapper (Since: 2.11)
- Availability:
CONFIG_TPM- Members:
data (
TPMEmulatorOptions) – Information about the TPM emulator type
- Object TpmTypeOptions (Since: 1.5)
- Availability:
CONFIG_TPMA union referencing different TPM backend types’ configuration options
- Members:
type (
TpmType) –‘passthrough’ The configuration options for the TPM passthrough type
’emulator’ The configuration options for TPM emulator backend type
When
typeispassthrough: The members ofTPMPassthroughOptionsWrapper.When
typeisemulator: The members ofTPMEmulatorOptionsWrapper.
- Object TPMInfo (Since: 1.5)
- Availability:
CONFIG_TPMInformation about the TPM
- Members:
id (
string) – The Id of the TPMmodel (
TpmModel) – The TPM frontend modeloptions (
TpmTypeOptions) – The TPM (backend) type configuration options
- Command query-tpm (Since: 1.5)
- Availability:
CONFIG_TPMReturn information about the TPM device
- Return:
[TPMInfo]
Example:
-> { "execute": "query-tpm" } <- { "return": [ { "model": "tpm-tis", "options": { "type": "passthrough", "data": { "cancel-path": "/sys/class/misc/tpm0/device/cancel", "path": "/dev/tpm0" } }, "id": "tpm0" } ] }
Remote desktop
- Enum DisplayProtocol (Since: 7.0)
Display protocols which support changing password options.
- Values:
vnc – Not documented
spice – Not documented
- Enum SetPasswordAction (Since: 7.0)
An action to take on changing a password on a connection with active clients.
- Values:
keep – maintain existing clients
fail – fail the command if clients are connected
disconnect – disconnect existing clients
- Object SetPasswordOptions (Since: 7.0)
Options for
set_password.- Members:
protocol (
DisplayProtocol) –‘vnc’ to modify the VNC server password
’spice’ to modify the Spice server password
password (
string) – the new passwordconnected (
SetPasswordAction, optional) – How to handle existing clients when changing the password. If nothing is specified, defaults to ‘keep’. For VNC, only ‘keep’ is currently implemented.When
protocolisvnc: The members ofSetPasswordOptionsVnc.
- Object SetPasswordOptionsVnc (Since: 7.0)
Options for
set_passwordspecific to the VNC protocol.- Members:
display (
string, optional) – The id of the display where the password should be changed. Defaults to the first.
- Command set_password (Since: 0.14)
Set the password of a remote display server.
- Arguments:
The members of
SetPasswordOptions.
- Errors:
If Spice is not enabled, DeviceNotFound
Example:
-> { "execute": "set_password", "arguments": { "protocol": "vnc", "password": "secret" } } <- { "return": {} }
- Object ExpirePasswordOptions (Since: 7.0)
General options for
expire_password.- Members:
protocol (
DisplayProtocol) –‘vnc’ to modify the VNC server expiration
’spice’ to modify the Spice server expiration
time (
string) –when to expire the password.
’now’ to expire the password immediately
’never’ to cancel password expiration
’+INT’ where INT is the number of seconds from now (integer)
’INT’ where INT is the absolute time in seconds
When
protocolisvnc: The members ofExpirePasswordOptionsVnc.
Note
Time is relative to the server and currently there is no way to coordinate server time with client time. It is not recommended to use the absolute time version of the
timeparameter unless you’re sure you are on the same machine as the QEMU instance.
- Object ExpirePasswordOptionsVnc (Since: 7.0)
Options for
expire_passwordspecific to the VNC protocol.- Members:
display (
string, optional) – The id of the display where the expiration should be changed. Defaults to the first.
- Command expire_password (Since: 0.14)
Expire the password of a remote display server.
- Arguments:
The members of
ExpirePasswordOptions.
- Errors:
If
protocolis ‘spice’ and Spice is not active, DeviceNotFound
Example:
-> { "execute": "expire_password", "arguments": { "protocol": "vnc", "time": "+60" } } <- { "return": {} }
- Enum ImageFormat (Since: 7.1)
Supported image format types.
- Values:
png – PNG format
ppm – PPM format
- Command screendump (Since: 0.14)
- Availability:
CONFIG_PIXMANCapture the contents of a screen and write it to a file.
- Arguments:
filename (
string) – the path of a new file to store the imagedevice (
string, optional) – ID of the display device that should be dumped. If this parameter is missing, the primary display will be used. (Since 2.12)head (
int, optional) – head to use in case the device supports multiple heads. If this parameter is missing, head #0 will be used. Also note that the head can only be specified in conjunction with the device ID. (Since 2.12)format (
ImageFormat, optional) – image format forscreendump. (default: ppm) (Since 7.1)
Example:
-> { "execute": "screendump", "arguments": { "filename": "/tmp/image" } } <- { "return": {} }
Spice
- Object SpiceBasicInfo (Since: 2.1)
- Availability:
CONFIG_SPICEThe basic information for SPICE network connection
- Members:
host (
string) – IP addressport (
string) – port numberfamily (
NetworkAddressFamily) – address family
- Object SpiceServerInfo (Since: 2.1)
- Availability:
CONFIG_SPICEInformation about a SPICE server
- Members:
auth (
string, optional) – authentication methodThe members of
SpiceBasicInfo.
- Object SpiceChannel (Since: 0.14)
- Availability:
CONFIG_SPICEInformation about a SPICE client channel.
- Members:
connection-id (
int) – SPICE connection id number. All channels with the same id belong to the same SPICE session.channel-type (
int) – SPICE channel type number. “1” is the main control channel, filter for this one if you want to track spice sessions onlychannel-id (
int) – SPICE channel ID number. Usually “0”, might be different when multiple channels of the same type exist, such as multiple display channels in a multihead setuptls (
boolean) – true if the channel is encrypted, false otherwise.The members of
SpiceBasicInfo.
- Enum SpiceQueryMouseMode (Since: 1.1)
- Availability:
CONFIG_SPICEAn enumeration of Spice mouse states.
- Values:
client – Mouse cursor position is determined by the client.
server – Mouse cursor position is determined by the server.
unknown – No information is available about mouse mode used by the spice server.
- Object SpiceInfo (Since: 0.14)
- Availability:
CONFIG_SPICEInformation about the SPICE session.
- Members:
enabled (
boolean) – true if the SPICE server is enabled, false otherwisemigrated (
boolean) – true if the last guest migration completed and spice migration had completed as well, false otherwise (since 1.4)host (
string, optional) – The hostname the SPICE server is bound to. This depends on the name resolution on the host and may be an IP address.port (
int, optional) – The SPICE server’s port number.compiled-version (
string, optional) – SPICE server version.tls-port (
int, optional) – The SPICE server’s TLS port number.auth (
string, optional) –the current authentication type used by the server
’none’ if no authentication is being used
’spice’ uses SASL or direct TLS authentication, depending on command line options
mouse-mode (
SpiceQueryMouseMode) – The mode in which the mouse cursor is displayed currently. Can be determined by the client or the server, or unknown if spice server doesn’t provide this information. (since: 1.1)channels (
[SpiceChannel], optional) – a list ofSpiceChannelfor each active spice channel
- Command query-spice (Since: 0.14)
- Availability:
CONFIG_SPICEReturn information about the current SPICE server
- Return:
Example:
-> { "execute": "query-spice" } <- { "return": { "enabled": true, "auth": "spice", "port": 5920, "migrated":false, "tls-port": 5921, "host": "0.0.0.0", "mouse-mode":"client", "channels": [ { "port": "54924", "family": "ipv4", "channel-type": 1, "connection-id": 1804289383, "host": "127.0.0.1", "channel-id": 0, "tls": true }, { "port": "36710", "family": "ipv4", "channel-type": 4, "connection-id": 1804289383, "host": "127.0.0.1", "channel-id": 0, "tls": false }, ... ] } }
- Event SPICE_CONNECTED (Since: 0.14)
- Availability:
CONFIG_SPICEEmitted when a SPICE client establishes a connection
- Members:
server (
SpiceBasicInfo) – server informationclient (
SpiceBasicInfo) – client information
Example:
<- { "timestamp": {"seconds": 1290688046, "microseconds": 388707}, "event": "SPICE_CONNECTED", "data": { "server": { "port": "5920", "family": "ipv4", "host": "127.0.0.1"}, "client": {"port": "52873", "family": "ipv4", "host": "127.0.0.1"} }}
- Event SPICE_INITIALIZED (Since: 0.14)
- Availability:
CONFIG_SPICEEmitted after initial handshake and authentication takes place (if any) and the SPICE channel is up and running
- Members:
server (
SpiceServerInfo) – server informationclient (
SpiceChannel) – client information
Example:
<- { "timestamp": {"seconds": 1290688046, "microseconds": 417172}, "event": "SPICE_INITIALIZED", "data": {"server": {"auth": "spice", "port": "5921", "family": "ipv4", "host": "127.0.0.1"}, "client": {"port": "49004", "family": "ipv4", "channel-type": 3, "connection-id": 1804289383, "host": "127.0.0.1", "channel-id": 0, "tls": true} }}
- Event SPICE_DISCONNECTED (Since: 0.14)
- Availability:
CONFIG_SPICEEmitted when the SPICE connection is closed
- Members:
server (
SpiceBasicInfo) – server informationclient (
SpiceBasicInfo) – client information
Example:
<- { "timestamp": {"seconds": 1290688046, "microseconds": 388707}, "event": "SPICE_DISCONNECTED", "data": { "server": { "port": "5920", "family": "ipv4", "host": "127.0.0.1"}, "client": {"port": "52873", "family": "ipv4", "host": "127.0.0.1"} }}
- Event SPICE_MIGRATE_COMPLETED (Since: 1.3)
- Availability:
CONFIG_SPICEEmitted when SPICE migration has completed
Example:
<- { "timestamp": {"seconds": 1290688046, "microseconds": 417172}, "event": "SPICE_MIGRATE_COMPLETED" }
VNC
- Object VncBasicInfo (Since: 2.1)
- Availability:
CONFIG_VNCThe basic information for vnc network connection
- Members:
host (
string) – IP addressservice (
string) – The service name of the vnc port. This may depend on the host system’s service database so symbolic names should not be relied on.family (
NetworkAddressFamily) – address familywebsocket (
boolean) – true in case the socket is a websocket (since 2.3).
- Object VncServerInfo (Since: 2.1)
- Availability:
CONFIG_VNCThe network connection information for server
- Members:
auth (
string, optional) – authentication method used for the plain (non-websocket) VNC serverThe members of
VncBasicInfo.
- Object VncClientInfo (Since: 0.14)
- Availability:
CONFIG_VNCInformation about a connected VNC client.
- Members:
x509_dname (
string, optional) – If x509 authentication is in use, the Distinguished Name of the client.sasl_username (
string, optional) – If SASL authentication is in use, the SASL username used for authentication.The members of
VncBasicInfo.
- Object VncInfo (Since: 0.14)
- Availability:
CONFIG_VNCInformation about the VNC session.
- Members:
enabled (
boolean) – true if the VNC server is enabled, false otherwisehost (
string, optional) – The hostname the VNC server is bound to. This depends on the name resolution on the host and may be an IP address.family (
NetworkAddressFamily, optional) –‘ipv6’ if the host is listening for IPv6 connections
’ipv4’ if the host is listening for IPv4 connections
’unix’ if the host is listening on a unix domain socket
’unknown’ otherwise
service (
string, optional) – The service name of the server’s port. This may depends on the host system’s service database so symbolic names should not be relied on.auth (
string, optional) –the current authentication type used by the server
’none’ if no authentication is being used
’vnc’ if VNC authentication is being used
’vencrypt+plain’ if VEncrypt is used with plain text authentication
’vencrypt+tls+none’ if VEncrypt is used with TLS and no authentication
’vencrypt+tls+vnc’ if VEncrypt is used with TLS and VNC authentication
’vencrypt+tls+plain’ if VEncrypt is used with TLS and plain text auth
’vencrypt+x509+none’ if VEncrypt is used with x509 and no auth
’vencrypt+x509+vnc’ if VEncrypt is used with x509 and VNC auth
’vencrypt+x509+plain’ if VEncrypt is used with x509 and plain text auth
’vencrypt+tls+sasl’ if VEncrypt is used with TLS and SASL auth
’vencrypt+x509+sasl’ if VEncrypt is used with x509 and SASL auth
clients (
[VncClientInfo], optional) – a list ofVncClientInfoof all currently connected clients
- Enum VncPrimaryAuth (Since: 2.3)
- Availability:
CONFIG_VNCvnc primary authentication method.
- Values:
none – Not documented
vnc – Not documented
ra2 – Not documented
ra2ne – Not documented
tight – Not documented
ultra – Not documented
tls – Not documented
vencrypt – Not documented
sasl – Not documented
- Enum VncVencryptSubAuth (Since: 2.3)
- Availability:
CONFIG_VNCvnc sub authentication method with vencrypt.
- Values:
plain – Not documented
tls-none – Not documented
x509-none – Not documented
tls-vnc – Not documented
x509-vnc – Not documented
tls-plain – Not documented
x509-plain – Not documented
tls-sasl – Not documented
x509-sasl – Not documented
- Object VncServerInfo2 (Since: 2.9)
- Availability:
CONFIG_VNCThe network connection information for server
- Members:
auth (
VncPrimaryAuth) – The current authentication type used by the serversvencrypt (
VncVencryptSubAuth, optional) – The vencrypt sub authentication type used by the servers, only specified in case auth == vencrypt.The members of
VncBasicInfo.
- Object VncInfo2 (Since: 2.3)
- Availability:
CONFIG_VNCInformation about a vnc server
- Members:
id (
string) – vnc server name.server (
[VncServerInfo2]) – A list ofVncBasicInfodescribing all listening sockets. The list can be empty (in case the vnc server is disabled). It also may have multiple entries: normal + websocket, possibly also ipv4 + ipv6 in the future.clients (
[VncClientInfo]) – A list ofVncClientInfoof all currently connected clients. The list can be empty, for obvious reasons.auth (
VncPrimaryAuth) – The current authentication type used by the non-websockets serversvencrypt (
VncVencryptSubAuth, optional) – The vencrypt authentication type used by the servers, only specified in case auth == vencrypt.display (
string, optional) – The display device the vnc server is linked to.
- Command query-vnc (Since: 0.14)
- Availability:
CONFIG_VNCReturn information about the current VNC server
- Return:
Example:
-> { "execute": "query-vnc" } <- { "return": { "enabled":true, "host":"0.0.0.0", "service":"50402", "auth":"vnc", "family":"ipv4", "clients":[ { "host":"127.0.0.1", "service":"50401", "family":"ipv4", "websocket":false } ] } }
- Command query-vnc-servers (Since: 2.3)
- Availability:
CONFIG_VNCReturn a list of vnc servers. The list can be empty.
- Return:
[VncInfo2]
- Command change-vnc-password (Since: 1.1)
- Availability:
CONFIG_VNCChange the VNC server password.
- Arguments:
password (
string) – the new password to use with VNC authentication
Note
An empty password in this command will set the password to the empty string. Existing clients are unaffected by executing this command.
- Event VNC_CONNECTED (Since: 0.13)
- Availability:
CONFIG_VNCEmitted when a VNC client establishes a connection
- Members:
server (
VncServerInfo) – server informationclient (
VncBasicInfo) – client information
Note
This event is emitted before any authentication takes place, thus the authentication ID is not provided.
Example:
<- { "event": "VNC_CONNECTED", "data": { "server": { "auth": "sasl", "family": "ipv4", "websocket": false, "service": "5901", "host": "0.0.0.0" }, "client": { "family": "ipv4", "service": "58425", "host": "127.0.0.1", "websocket": false } }, "timestamp": { "seconds": 1262976601, "microseconds": 975795 } }
- Event VNC_INITIALIZED (Since: 0.13)
- Availability:
CONFIG_VNCEmitted after authentication takes place (if any) and the VNC session is made active
- Members:
server (
VncServerInfo) – server informationclient (
VncClientInfo) – client information
Example:
<- { "event": "VNC_INITIALIZED", "data": { "server": { "auth": "sasl", "family": "ipv4", "websocket": false, "service": "5901", "host": "0.0.0.0"}, "client": { "family": "ipv4", "service": "46089", "websocket": false, "host": "127.0.0.1", "sasl_username": "luiz" } }, "timestamp": { "seconds": 1263475302, "microseconds": 150772 } }
- Event VNC_DISCONNECTED (Since: 0.13)
- Availability:
CONFIG_VNCEmitted when the connection is closed
- Members:
server (
VncServerInfo) – server informationclient (
VncClientInfo) – client information
Example:
<- { "event": "VNC_DISCONNECTED", "data": { "server": { "auth": "sasl", "family": "ipv4", "websocket": false, "service": "5901", "host": "0.0.0.0" }, "client": { "family": "ipv4", "service": "58425", "websocket": false, "host": "127.0.0.1", "sasl_username": "luiz" } }, "timestamp": { "seconds": 1262976601, "microseconds": 975795 } }
Input
- Object MouseInfo (Since: 0.14)
Information about a mouse device.
- Members:
name (
string) – the name of the mouse deviceindex (
int) – the index of the mouse devicecurrent (
boolean) – true if this device is currently receiving mouse eventsabsolute (
boolean) – true if this device supports absolute coordinates as input
- Command query-mice (Since: 0.14)
Return information about each active mouse device
- Return:
[MouseInfo]– a list of info for each device
Example:
-> { "execute": "query-mice" } <- { "return": [ { "name":"QEMU Microsoft Mouse", "index":0, "current":false, "absolute":false }, { "name":"QEMU PS/2 Mouse", "index":1, "current":true, "absolute":true } ] }
- Enum QKeyCode (Since: 1.3)
An enumeration of key name.
This is used by the
send-keycommand.- Values:
unmapped – since 2.0
pause – since 2.0
ro – since 2.4
kp_comma – since 2.4
kp_equals – since 2.6
power – since 2.6
hiragana – since 2.9
henkan – since 2.9
yen – since 2.9
sleep – since 2.10
wake – since 2.10
audionext – since 2.10
audioprev – since 2.10
audiostop – since 2.10
audioplay – since 2.10
audiomute – since 2.10
volumeup – since 2.10
volumedown – since 2.10
mediaselect – since 2.10
mail – since 2.10
calculator – since 2.10
computer – since 2.10
ac_home – since 2.10
ac_back – since 2.10
ac_forward – since 2.10
ac_refresh – since 2.10
ac_bookmarks – since 2.10
muhenkan – since 2.12
katakanahiragana – since 2.12
lang1 – since 6.1
lang2 – since 6.1
f13 – since 8.0
f14 – since 8.0
f15 – since 8.0
f16 – since 8.0
f17 – since 8.0
f18 – since 8.0
f19 – since 8.0
f20 – since 8.0
f21 – since 8.0
f22 – since 8.0
f23 – since 8.0
f24 – since 8.0
shift – Not documented
shift_r – Not documented
alt – Not documented
alt_r – Not documented
ctrl – Not documented
ctrl_r – Not documented
menu – Not documented
esc – Not documented
1 – Not documented
2 – Not documented
3 – Not documented
4 – Not documented
5 – Not documented
6 – Not documented
7 – Not documented
8 – Not documented
9 – Not documented
0 – Not documented
minus – Not documented
equal – Not documented
backspace – Not documented
tab – Not documented
q – Not documented
w – Not documented
e – Not documented
r – Not documented
t – Not documented
y – Not documented
u – Not documented
i – Not documented
o – Not documented
p – Not documented
bracket_left – Not documented
bracket_right – Not documented
ret – Not documented
a – Not documented
s – Not documented
d – Not documented
f – Not documented
g – Not documented
h – Not documented
j – Not documented
k – Not documented
l – Not documented
semicolon – Not documented
apostrophe – Not documented
grave_accent – Not documented
backslash – Not documented
z – Not documented
x – Not documented
c – Not documented
v – Not documented
b – Not documented
n – Not documented
m – Not documented
comma – Not documented
dot – Not documented
slash – Not documented
asterisk – Not documented
spc – Not documented
caps_lock – Not documented
f1 – Not documented
f2 – Not documented
f3 – Not documented
f4 – Not documented
f5 – Not documented
f6 – Not documented
f7 – Not documented
f8 – Not documented
f9 – Not documented
f10 – Not documented
num_lock – Not documented
scroll_lock – Not documented
kp_divide – Not documented
kp_multiply – Not documented
kp_subtract – Not documented
kp_add – Not documented
kp_enter – Not documented
kp_decimal – Not documented
sysrq – Not documented
kp_0 – Not documented
kp_1 – Not documented
kp_2 – Not documented
kp_3 – Not documented
kp_4 – Not documented
kp_5 – Not documented
kp_6 – Not documented
kp_7 – Not documented
kp_8 – Not documented
kp_9 – Not documented
less – Not documented
f11 – Not documented
f12 – Not documented
print – Not documented
home – Not documented
pgup – Not documented
pgdn – Not documented
end – Not documented
left – Not documented
up – Not documented
down – Not documented
right – Not documented
insert – Not documented
delete – Not documented
stop – Not documented
again – Not documented
props – Not documented
undo – Not documented
front – Not documented
copy – Not documented
open – Not documented
paste – Not documented
find – Not documented
cut – Not documented
lf – Not documented
help – Not documented
meta_l – Not documented
meta_r – Not documented
compose – Not documented
‘sysrq’ was mistakenly added to hack around the fact that the ps2 driver was not generating correct scancodes sequences when ‘alt+print’ was pressed. This flaw is now fixed and the ‘sysrq’ key serves no further purpose. Any further use of ‘sysrq’ will be transparently changed to ‘print’, so they are effectively synonyms.
- Enum KeyValueKind (Since: 1.3)
- Values:
number – Not documented
qcode – Not documented
- Object IntWrapper (Since: 1.3)
- Members:
data (
int) – a numeric key code
- Object KeyValue (Since: 1.3)
Represents a keyboard key.
- Members:
type (
KeyValueKind) – key encodingWhen
typeisnumber: The members ofIntWrapper.When
typeisqcode: The members ofQKeyCodeWrapper.
- Command send-key (Since: 1.3)
Send keys to guest.
- Arguments:
keys (
[KeyValue]) – An array ofKeyValueelements. AllKeyValuesin this array are simultaneously sent to the guest. AKeyValue.number value is sent directly to the guest, whileKeyValue.qcode must be a validQKeyCodevaluehold-time (
int, optional) – time to delay key up events, milliseconds. Defaults to 100
- Errors:
If key is unknown or redundant, GenericError
Example:
-> { "execute": "send-key", "arguments": { "keys": [ { "type": "qcode", "data": "ctrl" }, { "type": "qcode", "data": "alt" }, { "type": "qcode", "data": "delete" } ] } } <- { "return": {} }
- Enum InputButton (Since: 2.0)
Button of a pointer input device (mouse, tablet).
- Values:
side – front side button of a 5-button mouse (since 2.9)
extra – rear side button of a 5-button mouse (since 2.9)
touch – screen contact on a multi-touch device (since 8.1)
left – Not documented
middle – Not documented
right – Not documented
wheel-up – Not documented
wheel-down – Not documented
wheel-left – Not documented
wheel-right – Not documented
- Enum InputAxis (Since: 2.0)
Position axis of a pointer input device (mouse, tablet).
- Values:
x – Not documented
y – Not documented
- Enum InputMultiTouchType (Since: 8.1)
Type of a multi-touch event.
- Values:
begin – A new touch event sequence has just started.
update – A touch event sequence has been updated.
end – A touch event sequence has finished.
cancel – A touch event sequence has been canceled.
data – Absolute position data.
- Object InputKeyEvent (Since: 2.0)
Keyboard input event.
- Members:
key (
KeyValue) – Which key this event is for.down (
boolean) – True for key-down and false for key-up events.
- Object InputBtnEvent (Since: 2.0)
Pointer button input event.
- Members:
button (
InputButton) – Which button this event is for.down (
boolean) – True for key-down and false for key-up events.
- Object InputMoveEvent (Since: 2.0)
Pointer motion input event.
- Members:
axis (
InputAxis) – Which axis is referenced byvalue.value (
int) – Pointer position. For absolute coordinates the valid range is 0 to 0x7fff.
- Object InputMultiTouchEvent (Since: 8.1)
MultiTouch input event.
- Members:
type (
InputMultiTouchType) – The type of multi-touch event.slot (
int) – Which slot has generated the event.tracking-id (
int) – ID to correlate this event with previously generated events.axis (
InputAxis) – Which axis is referenced byvalue.value (
int) – Contact position.
- Enum InputEventKind (Since: 2.0)
- Values:
key – a keyboard input event
btn – a pointer button input event
rel – a relative pointer motion input event
abs – an absolute pointer motion input event
mtt – a multi-touch input event
- Object InputKeyEventWrapper (Since: 2.0)
- Members:
data (
InputKeyEvent) – Keyboard input event
- Object InputBtnEventWrapper (Since: 2.0)
- Members:
data (
InputBtnEvent) – Pointer button input event
- Object InputMoveEventWrapper (Since: 2.0)
- Members:
data (
InputMoveEvent) – Pointer motion input event
- Object InputMultiTouchEventWrapper (Since: 8.1)
- Members:
data (
InputMultiTouchEvent) – MultiTouch input event
- Object InputEvent (Since: 2.0)
Input event union.
- Members:
type (
InputEventKind) – the type of input eventWhen
typeiskey: The members ofInputKeyEventWrapper.When
typeisbtn: The members ofInputBtnEventWrapper.When
typeisrel: The members ofInputMoveEventWrapper.When
typeisabs: The members ofInputMoveEventWrapper.When
typeismtt: The members ofInputMultiTouchEventWrapper.
- Command input-send-event (Since: 2.6)
Send input event(s) to guest.
The
deviceandheadparameters can be used to send the input event to specific input devices in case (a) multiple input devices of the same kind are added to the virtual machine and (b) you have configured input routing (see docs/multiseat.txt) for those input devices. The parameters work exactly like the device and head properties of input devices. Ifdeviceis missing, only devices that have no input routing config are admissible. Ifdeviceis specified, both input devices with and without input routing config are admissible, but devices with input routing config take precedence.- Arguments:
device (
string, optional) – display device to send event(s) to.head (
int, optional) – head to send event(s) to, in case the display device supports multiple scanouts.events (
[InputEvent]) – List ofInputEventunion.
Note
The consoles are visible in the qom tree, under
/backend/console[$index]. They have a device link and head property, so it is possible to map which console belongs to which device and display.Example: Press left mouse button
-> { "execute": "input-send-event", "arguments": { "device": "video0", "events": [ { "type": "btn", "data" : { "down": true, "button": "left" } } ] } } <- { "return": {} } -> { "execute": "input-send-event", "arguments": { "device": "video0", "events": [ { "type": "btn", "data" : { "down": false, "button": "left" } } ] } } <- { "return": {} }
Example: Press ctrl-alt-del
-> { "execute": "input-send-event", "arguments": { "events": [ { "type": "key", "data" : { "down": true, "key": {"type": "qcode", "data": "ctrl" } } }, { "type": "key", "data" : { "down": true, "key": {"type": "qcode", "data": "alt" } } }, { "type": "key", "data" : { "down": true, "key": {"type": "qcode", "data": "delete" } } } ] } } <- { "return": {} }
Example: Move mouse pointer to absolute coordinates
-> { "execute": "input-send-event" , "arguments": { "events": [ { "type": "abs", "data" : { "axis": "x", "value" : 20000 } }, { "type": "abs", "data" : { "axis": "y", "value" : 400 } } ] } } <- { "return": {} }
- Object DisplayGTK (Since: 2.12)
GTK display options.
- Members:
grab-on-hover (
boolean, optional) – Grab keyboard input on mouse hover.zoom-to-fit (
boolean, optional) – Zoom guest display to fit into the host window. When turned off the host window will be resized instead. In case the display device can notify the guest on window resizes (virtio-gpu) this will default to “on”, assuming the guest will resize the display to match the window size then. Otherwise it defaults to “off”. (Since 3.1)show-tabs (
boolean, optional) – Display the tab bar for switching between the various graphical interfaces (e.g. VGA and virtual console character devices) by default. (Since 7.1)show-menubar (
boolean, optional) – Display the main window menubar. Defaults to “on”. (Since 8.0)keep-aspect-ratio (
boolean, optional) – Keep width/height aspect ratio of guest content when resizing host window. Defaults to “on”. (Since 10.1)scale (
number, optional) – Set preferred scale of the display. Defaults to 1.0. (Since 10.1)
- Object DisplayEGLHeadless (Since: 3.1)
EGL headless display options.
- Members:
rendernode (
string, optional) – Which DRM render node should be used. Default is the first available node on the host.
- Object DisplayDBus (Since: 7.0)
DBus display options.
- Members:
addr (
string, optional) – The D-Bus bus address (default to the session bus).rendernode (
string, optional) – Which DRM render node should be used. Default is the first available node on the host.p2p (
boolean, optional) – Whether to use peer-to-peer connections (accepted throughadd_client).audiodev (
string, optional) – Use the specified DBus audiodev to export audio.
- Enum DisplayGLMode (Since: 3.0)
Display OpenGL mode.
- Values:
off – Disable OpenGL (default).
on – Use OpenGL, pick context type automatically. Would better be named ‘auto’ but is called ‘on’ for backward compatibility with bool type.
core – Use OpenGL with Core (desktop) Context.
es – Use OpenGL with ES (embedded systems) Context.
- Object DisplayCurses (Since: 4.0)
Curses display options.
- Members:
charset (
string, optional) – Font charset used by guest (default: CP437).
- Object DisplayCocoa (Since: 7.0)
Cocoa display options.
- Members:
left-command-key (
boolean, optional) – Enable/disable forwarding of left command key to guest. Allows command-tab window switching on the host without sending this key to the guest when “off”. Defaults to “on”full-grab (
boolean, optional) – Capture all key presses, including system combos. This requires accessibility permissions, since it performs a global grab on key events. (default: off) See https://support.apple.com/en-in/guide/mac-help/mh32356/macswap-opt-cmd (
boolean, optional) – Swap the Option and Command keys so that their key codes match their position on non-Mac keyboards and you can use Meta/Super and Alt where you expect them. (default: off)zoom-to-fit (
boolean, optional) – Zoom guest display to fit into the host window. When turned off the host window will be resized instead. Defaults to “off”. (Since 8.2)zoom-interpolation (
boolean, optional) – Apply interpolation to smooth output when zoom-to-fit is enabled. Defaults to “off”. (Since 9.0)
- Enum HotKeyMod (Since: 7.1)
Set of modifier keys that need to be held for shortcut key actions.
- Values:
lctrl-lalt – Not documented
lshift-lctrl-lalt – Not documented
rctrl – Not documented
- Object DisplaySDL (Since: 7.1)
SDL2 display options.
- Members:
grab-mod (
HotKeyMod, optional) – Modifier keys that should be pressed together with the “G” key to release the mouse grab.
- Enum DisplayType (Since: 2.12)
Display (user interface) type.
- Values:
default – The default user interface, selecting from the first available of gtk, sdl, cocoa, and vnc.
none – No user interface or video output display. The guest will still see an emulated graphics card, but its output will not be displayed to the QEMU user.
gtk – The GTK user interface.
sdl – The SDL user interface.
egl-headless – No user interface, offload GL operations to a local DRI device. Graphical display need to be paired with VNC or Spice. (Since 3.1)
curses – Display video output via curses. For graphics device models which support a text mode, QEMU can display this output using a curses/ncurses interface. Nothing is displayed when the graphics device is in graphical mode or if the graphics device does not support a text mode. Generally only the VGA device models support text mode.
cocoa – The Cocoa user interface.
spice-app – Set up a Spice server and run the default associated application to connect to it. The server will redirect the serial console and QEMU monitors. (Since 4.0)
dbus – Start a D-Bus service for the display. (Since 7.0)
- Object DisplayOptions (Since: 2.12)
Display (user interface) options.
- Members:
type (
DisplayType) – WhichDisplayTypeQEMU should use.full-screen (
boolean, optional) – Start user interface in fullscreen mode (default: off).window-close (
boolean, optional) – Allow to quit QEMU with window close button (default: on).show-cursor (
boolean, optional) – Force showing the mouse cursor (default: off). (since: 5.0)gl (
DisplayGLMode, optional) – Enable OpenGL support (default: off).When
typeisgtk: The members ofDisplayGTK.When
typeiscocoa: The members ofDisplayCocoa.When
typeiscurses: The members ofDisplayCurses.When
typeisegl-headless: The members ofDisplayEGLHeadless.When
typeisdbus: The members ofDisplayDBus.When
typeissdl: The members ofDisplaySDL.
- Command query-display-options (Since: 3.1)
Return information about display configuration
- Return:
- Enum DisplayReloadType (Since: 6.0)
Available DisplayReload types.
- Values:
vnc – VNC display
- Object DisplayReloadOptionsVNC (Since: 6.0)
Specify the VNC reload options.
- Members:
tls-certs (
boolean, optional) – reload tls certs or not.
- Object DisplayReloadOptions (Since: 6.0)
Options of the display configuration reload.
- Members:
type (
DisplayReloadType) – Specify the display type.When
typeisvnc: The members ofDisplayReloadOptionsVNC.
- Command display-reload (Since: 6.0)
Reload display configuration.
- Arguments:
The members of
DisplayReloadOptions.
Example:
-> { "execute": "display-reload", "arguments": { "type": "vnc", "tls-certs": true } } <- { "return": {} }
- Enum DisplayUpdateType (Since: 7.1)
Available DisplayUpdate types.
- Values:
vnc – VNC display
- Object DisplayUpdateOptionsVNC (Since: 7.1)
Specify the VNC reload options.
- Members:
addresses (
[SocketAddress], optional) – If specified, change set of addresses to listen for connections. Addresses configured for websockets are not touched.
- Object DisplayUpdateOptions (Since: 7.1)
Options of the display configuration reload.
- Members:
type (
DisplayUpdateType) – Specify the display type.When
typeisvnc: The members ofDisplayUpdateOptionsVNC.
- Command display-update (Since: 7.1)
Update display configuration.
- Arguments:
The members of
DisplayUpdateOptions.
Example:
-> { "execute": "display-update", "arguments": { "type": "vnc", "addresses": [ { "type": "inet", "host": "0.0.0.0", "port": "5901" } ] } } <- { "return": {} }
- Command client_migrate_info (Since: 0.14)
Set migration information for remote display. This makes the server ask the client to automatically reconnect using the new parameters once migration finished successfully. Only implemented for SPICE.
- Arguments:
protocol (
string) – must be “spice”hostname (
string) – migration target hostnameport (
int, optional) – spice tcp port for plaintext channelstls-port (
int, optional) – spice tcp port for tls-secured channelscert-subject (
string, optional) – server certificate subject
Example:
-> { "execute": "client_migrate_info", "arguments": { "protocol": "spice", "hostname": "virt42.lab.kraxel.org", "port": 1234 } } <- { "return": {} }
Migration
- Object MigrationStats (Since: 0.14)
Detailed migration status.
- Members:
transferred (
int) – amount of bytes already transferred to the target VMremaining (
int) – amount of bytes remaining to be transferred to the target VMtotal (
int) – total amount of bytes involved in the migration processduplicate (
int) – number of duplicate (zero) pages (since 1.2)normal (
int) – number of normal pages (since 1.2)normal-bytes (
int) – number of normal bytes sent (since 1.2)dirty-pages-rate (
int) – number of pages dirtied by second by the guest (since 1.3)mbps (
number) – throughput in megabits/sec. (since 1.6)dirty-sync-count (
int) – number of times that dirty ram was synchronized (since 2.1)postcopy-requests (
int) – The number of page requests received from the destination (since 2.7)page-size (
int) – The number of bytes per page for the various page-based statistics (since 2.10)multifd-bytes (
int) – The number of bytes sent through multifd (since 3.0)pages-per-second (
int) – the number of memory pages transferred per second (Since 4.0)precopy-bytes (
int) – The number of bytes sent in the pre-copy phase (since 7.0).downtime-bytes (
int) – The number of bytes sent while the guest is paused (since 7.0).postcopy-bytes (
int) – The number of bytes sent during the post-copy phase (since 7.0).dirty-sync-missed-zero-copy (
int) – Number of times dirty RAM synchronization could not avoid copying dirty pages. This is between 0 anddirty-sync-count*multifd-channels. (since 7.1)
- Object XBZRLECacheStats (Since: 1.2)
Detailed XBZRLE migration cache statistics
- Members:
cache-size (
int) – XBZRLE cache sizebytes (
int) – amount of bytes already transferred to the target VMpages (
int) – amount of pages transferred to the target VMcache-miss (
int) – number of cache misscache-miss-rate (
number) – rate of cache miss (since 2.1)encoding-rate (
number) – rate of encoded bytes (since 5.1)overflow (
int) – number of overflows
- Object CompressionStats (Since: 3.1)
Detailed migration compression statistics
- Members:
pages (
int) – amount of pages compressed and transferred to the target VMbusy (
int) – count of times that no free thread was available to compress databusy-rate (
number) – rate of thread busycompressed-size (
int) – amount of bytes after compressioncompression-rate (
number) – rate of compressed size
- Enum MigrationStatus (Since: 2.3)
An enumeration of migration status.
- Values:
none – no migration has ever happened.
setup – migration process has been initiated.
cancelling – in the process of cancelling migration.
cancelled – cancelling migration is finished.
active – in the process of doing migration.
postcopy-active – like active, but now in postcopy mode. (since 2.5)
postcopy-device – like postcopy-active, but the destination is still loading device state and is not running yet. If migration fails during this state, the source side will resume. If there is no return-path from destination to source, this state is skipped. (since 10.2)
postcopy-paused – during postcopy but paused. (since 3.0)
postcopy-recover-setup – setup phase for a postcopy recovery process, preparing for a recovery phase to start. (since 9.1)
postcopy-recover – trying to recover from a paused postcopy. (since 3.0)
completed – migration is finished.
failing – error occurred during migration, clean-up underway. (since 11.0)
failed – error occurred during migration, clean-up done.
colo – VM is in the process of fault tolerance, VM can not get into this state unless colo capability is enabled for migration. (since 2.8)
pre-switchover – Paused before device serialisation. (since 2.11)
device – During device serialisation (also known as switchover phase). Before 9.2, this is only used when (1) in precopy, and (2) when pre-switchover capability is enabled. After 10.0, this state will always be present for every migration procedure as the switchover phase. (since 2.11)
wait-unplug – wait for device unplug request by guest OS to be completed. (since 4.2)
- Object VfioStats (Since: 5.2)
Detailed VFIO devices migration statistics
- Members:
transferred (
int) – amount of bytes transferred to the target VM by VFIO devices
- Object MigrationInfo (Since: 0.14)
Information about current migration process.
- Members:
status (
MigrationStatus, optional) –MigrationStatusdescribing the current migration status. If this field is not returned, no migration process has been initiatedram (
MigrationStats, optional) –MigrationStatscontaining detailed migration status, only returned if status is ‘active’ or ‘completed’(since 1.2)xbzrle-cache (
XBZRLECacheStats, optional) –XBZRLECacheStatscontaining detailed XBZRLE migration statistics, only returned if XBZRLE feature is on and status is ‘active’ or ‘completed’ (since 1.2)total-time (
int, optional) – total amount of milliseconds since migration started. If migration has ended, it returns the total migration time. (since 1.2)downtime (
int, optional) – only present when migration finishes correctly total downtime in milliseconds for the guest. (since 1.3)expected-downtime (
int, optional) – only present while migration is active expected downtime in milliseconds for the guest in last walk of the dirty bitmap. (since 1.3)setup-time (
int, optional) – amount of setup time in milliseconds before the iterations begin but after the QMP command is issued. This is designed to provide an accounting of any activities (such as RDMA pinning) which may be expensive, but do not actually occur during the iterative migration rounds themselves. (since 1.6)cpu-throttle-percentage (
int, optional) – percentage of time guest cpus are being throttled during auto-converge. This is only present when auto-converge has started throttling guest cpus. (Since 2.7)error-desc (
string, optional) – the human readable error description string. Clients should not attempt to parse the error strings. (Since 2.7)postcopy-blocktime (
int, optional) – total time when all vCPU were blocked during postcopy live migration. This is only present when the postcopy-blocktime migration capability is enabled. (Since 3.0)postcopy-vcpu-blocktime (
[int], optional) – list of the postcopy blocktime per vCPU. This is only present when the postcopy-blocktime migration capability is enabled. (Since 3.0)postcopy-latency (
int, optional) – average remote page fault latency (in ns). Note that this doesn’t include all faults, but only the ones that require a remote page request. So it should be always bigger than the real average page fault latency. This is only present when the postcopy-blocktime migration capability is enabled. (Since 10.1)postcopy-latency-dist (
[int], optional) – remote page fault latency distributions. Each element of the array is the number of faults that fall into the bucket period. For the N-th bucket (N>=0), the latency window is [2^Nus, 2^(N+1)us). For example, the 8th element stores how many remote faults got resolved within [256us, 512us) window. This is only present when the postcopy-blocktime migration capability is enabled. (Since 10.1)postcopy-vcpu-latency (
[int], optional) – average remote page fault latency per vCPU (in ns). It has the same definition ofpostcopy-latency, but instead this is the per-vCPU statistics. This is only present when the postcopy-blocktime migration capability is enabled. (Since 10.1)postcopy-non-vcpu-latency (
int, optional) – average remote page fault latency for all faults happend in non-vCPU threads (in ns). It has the same definition ofpostcopy-latencybut this only provides statistics to non-vCPU faults. This is only present when the postcopy-blocktime migration capability is enabled. (Since 10.1)socket-address (
[SocketAddress], optional) – Only used for tcp, to know what the real port is (Since 4.0)vfio (
VfioStats, optional) –VfioStatscontaining detailed VFIO devices migration statistics, only returned if VFIO device is present, migration is supported by all VFIO devices and status is ‘active’ or ‘completed’ (since 5.2)blocked-reasons (
[string], optional) – A list of reasons an outgoing migration is blocked. Present and non-empty when migration is blocked. (since 6.0)dirty-limit-throttle-time-per-round (
int, optional) – Maximum throttle time (in microseconds) of virtual CPUs each dirty ring full round, which shows howMigrationCapabilitydirty-limit affects the guest during live migration. (Since 8.1)dirty-limit-ring-full-time (
int, optional) – Estimated average dirty ring full time (in microseconds) for each dirty ring full round. The value equals the dirty ring memory size divided by the average dirty page rate of the virtual CPU, which can be used to observe the average memory load of the virtual CPU indirectly. Note that zero means guest doesn’t dirty memory. (Since 8.1)
- Features:
unstable – Members
postcopy-latency,postcopy-vcpu-latency,postcopy-latency-dist,postcopy-non-vcpu-latencyare experimental.
- Command query-migrate (Since: 0.14)
Return information about current migration process. If migration is active there will be another json-object with RAM migration status.
- Return:
Example: Before the first migration
-> { "execute": "query-migrate" } <- { "return": {} }
Example: Migration is done and has succeeded
-> { "execute": "query-migrate" } <- { "return": { "status": "completed", "total-time":12345, "setup-time":12345, "downtime":12345, "ram":{ "transferred":123, "remaining":123, "total":246, "duplicate":123, "normal":123, "normal-bytes":123456, "dirty-sync-count":15 } } }
Example: Migration is done and has failed
-> { "execute": "query-migrate" } <- { "return": { "status": "failed" } }
Example: Migration is being performed
-> { "execute": "query-migrate" } <- { "return":{ "status":"active", "total-time":12345, "setup-time":12345, "expected-downtime":12345, "ram":{ "transferred":123, "remaining":123, "total":246, "duplicate":123, "normal":123, "normal-bytes":123456, "dirty-sync-count":15 } } }
Example: Migration is being performed and XBZRLE is active
-> { "execute": "query-migrate" } <- { "return":{ "status":"active", "total-time":12345, "setup-time":12345, "expected-downtime":12345, "ram":{ "total":1057024, "remaining":1053304, "transferred":3720, "duplicate":10, "normal":3333, "normal-bytes":3412992, "dirty-sync-count":15 }, "xbzrle-cache":{ "cache-size":67108864, "bytes":20971520, "pages":2444343, "cache-miss":2244, "cache-miss-rate":0.123, "encoding-rate":80.1, "overflow":34434 } } }
- Enum MigrationCapability (Since: 1.2)
Migration capabilities enumeration
- Values:
xbzrle – Migration supports xbzrle (Xor Based Zero Run Length Encoding). This feature allows us to minimize migration traffic for certain work loads, by sending compressed difference of the pages
rdma-pin-all – Controls whether or not the entire VM memory footprint is mlock()’d on demand or all at once. Refer to docs/rdma.txt for usage. Disabled by default. (since 2.0)
events – generate events for each migration state change (since 2.4)
auto-converge – If enabled, QEMU will automatically throttle down the guest to speed up convergence of RAM migration. (since 1.6)
postcopy-ram – Start executing on the migration target before all of RAM has been migrated, pulling the remaining pages along as needed. The capacity must have the same setting on both source and target or migration will not even start. Note: if the migration fails during postcopy the VM will fail. (since 2.6)
x-colo – If enabled, migration will never end, and the state of the VM on the primary side will be migrated continuously to the VM on secondary side, this process is called COarse-Grain LOck Stepping (COLO) for Non-stop Service. (since 2.8)
release-ram – if enabled, QEMU will free the migrated ram pages on the source during postcopy-ram migration. (since 2.9)
return-path – If enabled, migration will use the return path even for precopy. (since 2.10)
pause-before-switchover – Pause outgoing migration before serialising device state and before disabling block IO (since 2.11)
multifd – Use more than one fd for migration (since 4.0)
dirty-bitmaps – If enabled, QEMU will migrate named dirty bitmaps. (since 2.12)
postcopy-blocktime – Calculate downtime for postcopy live migration (since 3.0)
late-block-activate – If enabled, the destination will not activate block devices (and thus take locks) immediately at the end of migration. (since 3.0)
x-ignore-shared – If enabled, QEMU will not migrate shared memory that is accessible on the destination machine. (since 4.0)
validate-uuid – Send the UUID of the source to allow the destination to ensure it is the same. (since 4.2)
background-snapshot – If enabled, the migration stream will be a snapshot of the VM exactly at the point when the migration procedure starts. The VM RAM is saved with running VM. (since 6.0)
zero-copy-send – Controls behavior on sending memory pages on migration. When true, enables a zero-copy mechanism for sending memory pages, if host supports it. Requires that QEMU be permitted to use locked memory for guest RAM pages. (since 7.1)
postcopy-preempt – If enabled, the migration process will allow postcopy requests to preempt precopy stream, so postcopy requests will be handled faster. This is a performance feature and should not affect the correctness of postcopy migration. (since 7.1)
switchover-ack – If enabled, migration will not stop the source VM and complete the migration until an ACK is received from the destination that it’s OK to do so. Exactly when this ACK is sent depends on the migrated devices that use this feature. For example, a device can use it to make sure some of its data is sent and loaded in the destination before doing switchover. This can reduce downtime if devices that support this capability are present. ‘return-path’ capability must be enabled to use it. (since 8.1)
dirty-limit – If enabled, migration will throttle vCPUs as needed to keep their dirty page rate within
vcpu-dirty-limit. This can improve responsiveness of large guests during live migration, and can result in more stable read performance. Requires KVM with accelerator property “dirty-ring-size” set. (Since 8.1)mapped-ram – Migrate using fixed offsets in the migration file for each RAM page. Requires a migration URI that supports seeking, such as a file. (since 9.0)
- Features:
unstable – Members
x-coloandx-ignore-sharedare experimental.
- Object MigrationCapabilityStatus (Since: 1.2)
Migration capability information
- Members:
capability (
MigrationCapability) – capability enumstate (
boolean) – capability state bool
- Command migrate-set-capabilities (Since: 1.2)
Enable/Disable the following migration capabilities (like xbzrle)
- Arguments:
capabilities (
[MigrationCapabilityStatus]) – json array of capability modifications to make
Example:
-> { "execute": "migrate-set-capabilities" , "arguments": { "capabilities": [ { "capability": "xbzrle", "state": true } ] } } <- { "return": {} }
- Command query-migrate-capabilities (Since: 1.2)
Return information about the current migration capabilities status
- Return:
Example:
-> { "execute": "query-migrate-capabilities" } <- { "return": [ {"state": false, "capability": "xbzrle"}, {"state": false, "capability": "rdma-pin-all"}, {"state": false, "capability": "auto-converge"}, {"state": true, "capability": "events"}, {"state": false, "capability": "postcopy-ram"}, {"state": false, "capability": "x-colo"} ]}
- Enum MultiFDCompression (Since: 5.0)
An enumeration of multifd compression methods.
- Values:
none – no compression.
zlib – use zlib compression method.
zstd – use zstd compression method.
qatzip – use qatzip compression method. (Since 9.2)
qpl – use qpl compression method. Query Processing Library(qpl) is based on the deflate compression algorithm and use the Intel In-Memory Analytics Accelerator(IAA) accelerated compression and decompression. (Since 9.1)
uadk – use UADK library compression method. (Since 9.1)
- Enum MigMode
- Values:
normal – the original form of migration. (since 8.2)
cpr-reboot –
The
migratecommand stops the VM and saves state to the URI. After quitting QEMU, the user resumes by running QEMU -incoming.This mode allows the user to quit QEMU, optionally update and reboot the OS, and restart QEMU. If the user reboots, the URI must persist across the reboot, such as by using a file.
Unlike normal mode, the use of certain local storage options does not block the migration, but the user must not modify the contents of guest block devices between the quit and restart.
This mode supports VFIO devices provided the user first puts the guest in the suspended runstate, such as by issuing
guest-suspend-ramto the QEMU guest agent.Best performance is achieved when the memory backend is shared and the
x-ignore-sharedmigration capability is set, but this is not required. Further, if the user reboots before restarting such a configuration, the shared memory must persist across the reboot, such as by backing it with a dax device.cpr-rebootmay not be used with postcopy, background-snapshot, or COLO.(since 8.2)
cpr-transfer –
This mode allows the user to transfer a guest to a new QEMU instance on the same host with minimal guest pause time by preserving guest RAM in place.
Devices and their pinned pages are also preserved for VFIO and IOMMUFD. (since 10.1)
The user starts new QEMU on the same host as old QEMU, with command-line arguments to create the same machine, plus the -incoming option for the main migration channel, like normal live migration. In addition, the user adds a second -incoming option with channel type “cpr”. This CPR channel must support file descriptor transfer with SCM_RIGHTS, i.e. it must be a UNIX domain socket.
To initiate CPR, the user issues a migrate command to old QEMU, adding a second migration channel of type “cpr” in the channels argument. Old QEMU stops the VM, saves state to the migration channels, and enters the postmigrate state. Execution resumes in new QEMU.
New QEMU reads the CPR channel before opening a monitor, hence the CPR channel cannot be specified in the list of channels for a
migrate-incomingcommand. It may only be specified on the command line.The main channel address cannot be a file type, and for an inet socket, the port cannot be 0 (meaning dynamically choose a port).
Memory-backend objects must have the share=on attribute, but memory-backend-epc is not supported. The VM must be started with the ‘-machine aux-ram-share=on’ option.
When using -incoming defer, you must issue the
migratecommand to old QEMU before issuing any monitor commands to new QEMU. However, new QEMU does not open and read the migration stream until you issue themigrate-incomingcommand.(since 10.0)
cpr-exec –
The migrate command stops the VM, saves state to the migration channel, directly exec’s a new version of QEMU on the same host, replacing the original process while retaining its PID, and loads state from the channel. Guest RAM is preserved in place. Devices and their pinned pages are also preserved for VFIO and IOMMUFD.
Old QEMU starts new QEMU by exec’ing the command specified by the
cpr-exec-commandparameter. The command may be a direct invocation of new QEMU, or may be a wrapper that exec’s the new QEMU binary.Because old QEMU terminates when new QEMU starts, one cannot stream data between the two, so the channel must be a type, such as a file, that accepts all data before old QEMU exits. Otherwise, old QEMU may quietly block writing to the channel.
Memory-backend objects must have the share=on attribute, but memory-backend-epc is not supported. The VM must be started with the ‘-machine aux-ram-share=on’ option.
(since 10.2)
- Enum ZeroPageDetection (Since: 9.0)
- Values:
none – Do not perform zero page checking.
legacy – Perform zero page checking in main migration thread.
multifd – Perform zero page checking in multifd sender thread if multifd migration is enabled, else in the main migration thread as for
legacy.
- Object BitmapMigrationBitmapAliasTransform (Since: 6.0)
- Members:
persistent (
boolean, optional) – If present, the bitmap will be made persistent or transient depending on this parameter.
- Object BitmapMigrationBitmapAlias (Since: 5.2)
- Members:
name (
string) – The name of the bitmap.alias (
string) – An alias name for migration (for example the bitmap name on the opposite site).transform (
BitmapMigrationBitmapAliasTransform, optional) – Allows the modification of the migrated bitmap. (since 6.0)
- Object BitmapMigrationNodeAlias (Since: 5.2)
Maps a block node name and the bitmaps it has to aliases for dirty bitmap migration.
- Members:
node-name (
string) – A block node name.alias (
string) – An alias block node name for migration (for example the node name on the opposite site).bitmaps (
[BitmapMigrationBitmapAlias]) – Mappings for the bitmaps on this node.
- Enum MigrationParameter (Since: 2.4)
Migration parameters enumeration. The enumeration values mirror the members of
MigrationParameters.- Values:
cpr-exec-command – Command to start the new QEMU process when
modeiscpr-exec. The first list element is the program’s filename, the remainder its arguments. (Since 10.2)announce-initial – Not documented
announce-max – Not documented
announce-rounds – Not documented
announce-step – Not documented
throttle-trigger-threshold – Not documented
cpu-throttle-initial – Not documented
cpu-throttle-increment – Not documented
cpu-throttle-tailslow – Not documented
tls-creds – Not documented
tls-hostname – Not documented
tls-authz – Not documented
max-bandwidth – Not documented
avail-switchover-bandwidth – Not documented
downtime-limit – Not documented
x-checkpoint-delay – Not documented
multifd-channels – Not documented
xbzrle-cache-size – Not documented
max-postcopy-bandwidth – Not documented
max-cpu-throttle – Not documented
multifd-compression – Not documented
multifd-zlib-level – Not documented
multifd-zstd-level – Not documented
multifd-qatzip-level – Not documented
block-bitmap-mapping – Not documented
x-vcpu-dirty-limit-period – Not documented
vcpu-dirty-limit – Not documented
mode – Not documented
zero-page-detection – Not documented
direct-io – Not documented
- Features:
unstable – Members
x-checkpoint-delayandx-vcpu-dirty-limit-periodare experimental.
- Command migrate-set-parameters (Since: 2.4)
Set migration parameters. All arguments are optional.
- Arguments:
The members of
MigrationParameters.
Example:
-> { "execute": "migrate-set-parameters" , "arguments": { "multifd-channels": 5 } } <- { "return": {} }
- Object MigrationParameters (Since: 2.4)
- Members:
announce-initial (
int, optional) – Initial delay (in milliseconds) before sending the first announce (Since 4.0)announce-max (
int, optional) – Maximum delay (in milliseconds) between packets in the announcement (Since 4.0)announce-rounds (
int, optional) – Number of self-announce packets sent after migration (Since 4.0)announce-step (
int, optional) – Increase in delay (in milliseconds) between subsequent packets in the announcement (Since 4.0)throttle-trigger-threshold (
int, optional) – The ratio of bytes_dirty_period and bytes_xfer_period to trigger throttling. It is expressed as percentage. The default value is 50. (Since 5.0)cpu-throttle-initial (
int, optional) – Initial percentage of time guest cpus are throttled when migration auto-converge is activated. The default value is 20. (Since 2.7)cpu-throttle-increment (
int, optional) – throttle percentage increase each time auto-converge detects that migration is not making progress. The default value is 10. (Since 2.7)cpu-throttle-tailslow (
boolean, optional) – Make CPU throttling slower at tail stage. At the tail stage of throttling, the Guest is very sensitive to CPU percentage while thecpu-throttle-increment is excessive usually at tail stage. If this parameter is true, we will compute the ideal CPU percentage used by the Guest, which may exactly make the dirty rate match the dirty rate threshold. Then we will choose a smaller throttle increment between the one specified bycpu-throttle-incrementand the one generated by ideal CPU percentage. Therefore, it is compatible to traditional throttling, meanwhile the throttle increment won’t be excessive at tail stage. The default value is false. (Since 5.1)tls-creds (
StrOrNull, optional) – ID of the ‘tls-creds’ object that provides credentials for establishing a TLS connection over the migration data channel. On the outgoing side of the migration, the credentials must be for a ‘client’ endpoint, while for the incoming side the credentials must be for a ‘server’ endpoint. Setting this to a non-empty string enables TLS for all migrations. An empty string means that QEMU will use plain text mode for migration, rather than TLS. This is the default. (Since 2.7)tls-hostname (
StrOrNull, optional) –migration target’s hostname for validating the server’s x509 certificate identity. If empty, QEMU will use the hostname from the migration URI, if any. A non-empty value is required when using x509 based TLS credentials and the migration URI does not include a hostname, such as fd: or exec: based migration. (Since 2.7)
Note: empty value works only since 2.9.
tls-authz (
StrOrNull, optional) – ID of the ‘authz’ object subclass that provides access control checking of the TLS x509 certificate distinguished name. This object is only resolved at time of use, so can be deleted and recreated on the fly while the migration server is active. If missing, it will default to denying access (Since 4.0)max-bandwidth (
int, optional) – maximum speed for migration, in bytes per second. (Since 2.8)avail-switchover-bandwidth (
int, optional) – to set the available bandwidth that migration can use during switchover phase. Note: this does not limit the bandwidth during switchover, but only for calculations when making decisions to switchover. By default, this value is zero, which means QEMU will estimate the bandwidth automatically. This can be set when the estimated value is not accurate, while the user is able to guarantee such bandwidth is available when switching over. When specified correctly, this can make the switchover decision much more accurate. (Since 8.2)downtime-limit (
int, optional) – set maximum tolerated downtime for migration. maximum downtime in milliseconds (Since 2.8)x-checkpoint-delay (
int, optional) – The delay time (in ms) between two COLO checkpoints in periodic mode. (Since 2.8)multifd-channels (
int, optional) – Number of channels used to migrate data in parallel. This is the same number that the number of sockets used for migration. The default value is 2 (since 4.0)xbzrle-cache-size (
int, optional) – cache size to be used by XBZRLE migration. It needs to be a multiple of the target page size and a power of 2 (Since 2.11)max-postcopy-bandwidth (
int, optional) – Background transfer bandwidth during postcopy. Defaults to 0 (unlimited). In bytes per second. (Since 3.0)max-cpu-throttle (
int, optional) – maximum cpu throttle percentage. Defaults to 99. (Since 3.1)multifd-compression (
MultiFDCompression, optional) – Which compression method to use. Defaults to none. (Since 5.0)multifd-zlib-level (
int, optional) – Set the compression level to be used in live migration, the compression level is an integer between 0 and 9, where 0 means no compression, 1 means the best compression speed, and 9 means best compression ratio which will consume more CPU. Defaults to 1. (Since 5.0)multifd-qatzip-level (
int, optional) – Set the compression level to be used in live migration. The level is an integer between 1 and 9, where 1 means the best compression speed, and 9 means the best compression ratio which will consume more CPU. Defaults to 1. (Since 9.2)multifd-zstd-level (
int, optional) – Set the compression level to be used in live migration, the compression level is an integer between 0 and 20, where 0 means no compression, 1 means the best compression speed, and 20 means best compression ratio which will consume more CPU. Defaults to 1. (Since 5.0)block-bitmap-mapping (
[BitmapMigrationNodeAlias], optional) – Maps block nodes and bitmaps on them to aliases for the purpose of dirty bitmap migration. Such aliases may for example be the corresponding names on the opposite site. The mapping must be one-to-one, but not necessarily complete: On the source, unmapped bitmaps and all bitmaps on unmapped nodes will be ignored. On the destination, encountering an unmapped alias in the incoming migration stream will result in a report, and all further bitmap migration data will then be discarded. Note that the destination does not know about bitmaps it does not receive, so there is no limitation or requirement regarding the number of bitmaps received, or how they are named, or on which nodes they are placed. By default (when this parameter has never been set), bitmap names are mapped to themselves. Nodes are mapped to their block device name if there is one, and to their node name otherwise. (Since 5.2)x-vcpu-dirty-limit-period (
int, optional) – Periodic time (in milliseconds) of dirty limit during live migration. Should be in the range 1 to 1000ms. Defaults to 1000ms. (Since 8.1)vcpu-dirty-limit (
int, optional) – Dirtyrate limit (MB/s) during live migration. Defaults to 1. (Since 8.1)mode (
MigMode, optional) – Migration mode. See description inMigMode. Default is ‘normal’. (Since 8.2)zero-page-detection (
ZeroPageDetection, optional) – Whether and how to detect zero pages. See description inZeroPageDetection. Default is ‘multifd’. (since 9.0)direct-io (
boolean, optional) – Open migration files with O_DIRECT when possible. This only has effect if themapped-ramcapability is enabled. (Since 9.1)cpr-exec-command (
[string], optional) – Command to start the new QEMU process whenmodeiscpr-exec. The first list element is the program’s filename, the remainder its arguments. (Since 10.2)
- Features:
unstable – Members
x-checkpoint-delayandx-vcpu-dirty-limit-periodare experimental.
- Command query-migrate-parameters (Since: 2.4)
Return information about the current migration parameters. Optional members of the return value are always present, except
block-bitmap-mapping, which is only present if it has been previously set.- Return:
Example:
-> { "execute": "query-migrate-parameters" } <- { "return": { "multifd-channels": 2, "cpu-throttle-increment": 10, "cpu-throttle-initial": 20, "max-bandwidth": 33554432, "downtime-limit": 300 } }
- Command migrate-start-postcopy (Since: 2.5)
Followup to a migration command to switch the migration to postcopy mode. The postcopy-ram capability must be set on both source and destination before the original migration command.
Example:
-> { "execute": "migrate-start-postcopy" } <- { "return": {} }
- Event MIGRATION (Since: 2.4)
Emitted when a migration event happens
- Members:
status (
MigrationStatus) –MigrationStatusdescribing the current migration status.
Example:
<- {"timestamp": {"seconds": 1432121972, "microseconds": 744001}, "event": "MIGRATION", "data": {"status": "completed"} }
- Event MIGRATION_PASS (Since: 2.6)
Emitted from the source side of a migration at the start of each pass (when it syncs the dirty bitmap)
- Members:
pass (
int) – An incrementing count (starting at 1 on the first pass)
Example:
<- { "timestamp": {"seconds": 1449669631, "microseconds": 239225}, "event": "MIGRATION_PASS", "data": {"pass": 2} }
- Enum COLOMessage (Since: 2.8)
The message transmission between Primary side and Secondary side.
- Values:
checkpoint-ready – Secondary VM (SVM) is ready for checkpointing
checkpoint-request – Primary VM (PVM) tells SVM to prepare for checkpointing
checkpoint-reply – SVM gets PVM’s checkpoint request
vmstate-send – VM’s state will be sent by PVM.
vmstate-size – The total size of VMstate.
vmstate-received – VM’s state has been received by SVM.
vmstate-loaded – VM’s state has been loaded by SVM.
- Enum COLOMode (Since: 2.8)
The COLO current mode.
- Values:
none – COLO is disabled.
primary – COLO node in primary side.
secondary – COLO node in slave side.
- Enum FailoverStatus (Since: 2.8)
An enumeration of COLO failover status
- Values:
none – no failover has ever happened
require – got failover requirement but not handled
active – in the process of doing failover
completed – finish the process of failover
relaunch – restart the failover process, from ‘none’ -> ‘completed’ (Since 2.9)
- Event COLO_EXIT (Since: 3.1)
Emitted when VM finishes COLO mode due to some errors happening or at the request of users.
- Members:
mode (
COLOMode) – report COLO mode when COLO exited.reason (
COLOExitReason) – describes the reason for the COLO exit.
Example:
<- { "timestamp": {"seconds": 2032141960, "microseconds": 417172}, "event": "COLO_EXIT", "data": {"mode": "primary", "reason": "request" } }
- Enum COLOExitReason (Since: 3.1)
The reason for a COLO exit.
- Values:
none – failover has never happened. This state does not occur in the
COLO_EXITevent, and is only visible in the result ofquery-colo-status.request – COLO exit is due to an external request.
error – COLO exit is due to an internal error.
processing – COLO is currently handling a failover (since 4.0).
- Command x-colo-lost-heartbeat (Since: 2.8)
- This command is unstable/experimental.Availability:
CONFIG_REPLICATIONTell QEMU that heartbeat is lost, request it to do takeover procedures. If this command is sent to the PVM, the Primary side will exit COLO mode. If sent to the Secondary, the Secondary side will run failover work, then takes over server operation to become the service VM.
- Features:
unstable – This command is experimental.
Example:
-> { "execute": "x-colo-lost-heartbeat" } <- { "return": {} }
- Command migrate_cancel (Since: 0.14)
Cancel the currently executing migration process. Allows a new migration to be started right after. When postcopy-ram is in use, cancelling is not allowed after the postcopy phase has started.
Note
This command succeeds even if there is no migration process running.
Example:
-> { "execute": "migrate_cancel" } <- { "return": {} }
- Command migrate-continue (Since: 2.11)
Continue migration when it’s in a paused state.
- Arguments:
state (
MigrationStatus) – The state the migration is currently expected to be in
Example:
-> { "execute": "migrate-continue" , "arguments": { "state": "pre-switchover" } } <- { "return": {} }
- Enum MigrationAddressType (Since: 8.2)
The migration stream transport mechanisms.
- Values:
socket – Migrate via socket.
exec – Direct the migration stream to another process.
rdma – Migrate via RDMA.
file – Direct the migration stream to a file.
- Object FileMigrationArgs (Since: 8.2)
- Members:
filename (
string) – The file to receive the migration streamoffset (
int) – The file offset where the migration stream will start
- Object MigrationExecCommand (Since: 8.2)
- Members:
args (
[string]) – command (list head) and arguments to execute.
- Object MigrationAddress (Since: 8.2)
Migration endpoint configuration.
- Members:
transport (
MigrationAddressType) – The migration stream transport mechanismWhen
transportissocket: The members ofSocketAddress.When
transportisexec: The members ofMigrationExecCommand.When
transportisrdma: The members ofInetSocketAddress.When
transportisfile: The members ofFileMigrationArgs.
- Enum MigrationChannelType (Since: 8.1)
The migration channel-type request options.
- Values:
main – Main outbound migration channel.
cpr – Checkpoint and restart state channel.
- Object MigrationChannel (Since: 8.1)
Migration stream channel parameters.
- Members:
channel-type (
MigrationChannelType) – Channel type for transferring packet information.addr (
MigrationAddress) – Migration endpoint configuration on destination interface.
- Command migrate (Since: 0.14)
Migrates the current running guest to another Virtual Machine.
- Arguments:
uri (
string, optional) – the Uniform Resource Identifier of the destination VMchannels (
[MigrationChannel], optional) – list of migration stream channels with each stream in the list connected to a destination interface endpoint.resume (
boolean, optional) – when set, use the new uri/channels specified to resume paused postcopy migration. This flag should only be used if the previous postcopy migration was interrupted. The command will fail unless migration is in “postcopy-paused” state. (default: false, since 3.0)
Notes
The
query-migratecommand should be used to check migration’s progress and final result (this information is provided by the ‘status’ member).The uri argument should have the Uniform Resource Identifier of default destination VM. This connection will be bound to default network.
For now, number of migration streams is restricted to one, i.e. number of items in ‘channels’ list is just 1.
The ‘uri’ and ‘channels’ arguments are mutually exclusive; exactly one of the two should be present.
Example:
-> { "execute": "migrate", "arguments": { "uri": "tcp:0:4446" } } <- { "return": {} } -> { "execute": "migrate", "arguments": { "channels": [ { "channel-type": "main", "addr": { "transport": "socket", "type": "inet", "host": "10.12.34.9", "port": "1050" } } ] } } <- { "return": {} } -> { "execute": "migrate", "arguments": { "channels": [ { "channel-type": "main", "addr": { "transport": "exec", "args": [ "/bin/nc", "-p", "6000", "/some/sock" ] } } ] } } <- { "return": {} } -> { "execute": "migrate", "arguments": { "channels": [ { "channel-type": "main", "addr": { "transport": "rdma", "host": "10.12.34.9", "port": "1050" } } ] } } <- { "return": {} } -> { "execute": "migrate", "arguments": { "channels": [ { "channel-type": "main", "addr": { "transport": "file", "filename": "/tmp/migfile", "offset": "0x1000" } } ] } } <- { "return": {} }
- Command migrate-incoming (Since: 2.3)
Start an incoming migration. QEMU must have been started with -incoming defer.
- Arguments:
uri (
string, optional) – The Uniform Resource Identifier identifying the source or address to listen onchannels (
[MigrationChannel], optional) – list of migration stream channels with each stream in the list connected to a destination interface endpoint.exit-on-error (
boolean, optional) – Exit on incoming migration failure. Default true. When set to false, the failure triggers aMIGRATIONevent, and error details could be retrieved withquery-migrate. (since 9.1)
Notes
It’s a bad idea to use a string for the uri, but it needs to stay compatible with -incoming and the format of the uri is already exposed above libvirt.
QEMU must be started with -incoming defer to allow
migrate-incomingto be used.The uri format is the same as for -incoming
For now, number of migration streams is restricted to one, i.e. number of items in ‘channels’ list is just 1.
The ‘uri’ and ‘channels’ arguments are mutually exclusive; exactly one of the two should be present.
Example:
-> { "execute": "migrate-incoming", "arguments": { "uri": "tcp:0:4446" } } <- { "return": {} } -> { "execute": "migrate-incoming", "arguments": { "channels": [ { "channel-type": "main", "addr": { "transport": "socket", "type": "inet", "host": "10.12.34.9", "port": "1050" } } ] } } <- { "return": {} } -> { "execute": "migrate-incoming", "arguments": { "channels": [ { "channel-type": "main", "addr": { "transport": "exec", "args": [ "/bin/nc", "-p", "6000", "/some/sock" ] } } ] } } <- { "return": {} } -> { "execute": "migrate-incoming", "arguments": { "channels": [ { "channel-type": "main", "addr": { "transport": "rdma", "host": "10.12.34.9", "port": "1050" } } ] } } <- { "return": {} }
- Command xen-save-devices-state (Since: 1.1)
Save the state of all devices to file. The RAM and the block devices of the VM are not saved by this command.
- Arguments:
filename (
string) – the file to save the state of the devices to as binary data. Seexen-save-devices-state.txt for a description of the binary format.live (
boolean, optional) – Optional argument to ask QEMU to treat this command as part of a live migration. Default to true. (since 2.11)
Example:
-> { "execute": "xen-save-devices-state", "arguments": { "filename": "/tmp/save" } } <- { "return": {} }
- Command xen-set-global-dirty-log (Since: 1.3)
Enable or disable the global dirty log mode.
- Arguments:
enable (
boolean) – true to enable, false to disable.
Example:
-> { "execute": "xen-set-global-dirty-log", "arguments": { "enable": true } } <- { "return": {} }
- Command xen-load-devices-state (Since: 2.7)
Load the state of all devices from file. The RAM and the block devices of the VM are not loaded by this command.
- Arguments:
filename (
string) – the file to load the state of the devices from as binary data. Seexen-save-devices-state.txt for a description of the binary format.
Example:
-> { "execute": "xen-load-devices-state", "arguments": { "filename": "/tmp/resume" } } <- { "return": {} }
- Command xen-set-replication (Since: 2.9)
- Availability:
CONFIG_REPLICATIONEnable or disable replication.
- Arguments:
enable (
boolean) – true to enable, false to disable.primary (
boolean) – true for primary or false for secondary.failover (
boolean, optional) – true to do failover, false to stop. Cannot be specified if ‘enable’ is true. Default value is false.
Example:
-> { "execute": "xen-set-replication", "arguments": {"enable": true, "primary": false} } <- { "return": {} }
- Object ReplicationStatus (Since: 2.9)
- Availability:
CONFIG_REPLICATIONThe result format for
query-xen-replication-status.- Members:
error (
boolean) – true if an error happened, false if replication is normal.desc (
string, optional) – the human readable error description string, whenerroris ‘true’.
- Command query-xen-replication-status (Since: 2.9)
- Availability:
CONFIG_REPLICATIONQuery replication status while the vm is running.
- Return:
Example:
-> { "execute": "query-xen-replication-status" } <- { "return": { "error": false } }
- Command xen-colo-do-checkpoint (Since: 2.9)
- Availability:
CONFIG_REPLICATIONXen uses this command to notify replication to trigger a checkpoint.
Example:
-> { "execute": "xen-colo-do-checkpoint" } <- { "return": {} }
- Object COLOStatus (Since: 3.1)
- Availability:
CONFIG_REPLICATIONThe result format for
query-colo-status.- Members:
mode (
COLOMode) – COLO running mode. If COLO is running, this field will return ‘primary’ or ‘secondary’.last-mode (
COLOMode) – COLO last running mode. If COLO is running, this field will return same like mode field, after failover we can use this field to get last colo mode. (since 4.0)reason (
COLOExitReason) – describes the reason for the COLO exit.
- Command query-colo-status (Since: 3.1)
- Availability:
CONFIG_REPLICATIONQuery COLO status while the vm is running.
- Return:
Example:
-> { "execute": "query-colo-status" } <- { "return": { "mode": "primary", "last-mode": "none", "reason": "request" } }
- Command migrate-recover (Since: 3.0)
Provide a recovery migration stream URI.
- Arguments:
uri (
string) – the URI to be used for the recovery of migration stream.
Example:
-> { "execute": "migrate-recover", "arguments": { "uri": "tcp:192.168.1.200:12345" } } <- { "return": {} }
- Command migrate-pause (Since: 3.0)
Pause a migration. Currently it only supports postcopy.
Example:
-> { "execute": "migrate-pause" } <- { "return": {} }
- Event UNPLUG_PRIMARY (Since: 4.2)
Emitted from source side of a migration when migration state is WAIT_UNPLUG. Device was unplugged by guest operating system. Device resources in QEMU are kept on standby to be able to re-plug it in case of migration failure.
- Members:
device-id (
string) – QEMU device id of the unplugged device
Example:
<- { "event": "UNPLUG_PRIMARY", "data": { "device-id": "hostdev0" }, "timestamp": { "seconds": 1265044230, "microseconds": 450486 } }
- Object DirtyRateVcpu (Since: 6.2)
Dirty rate of vcpu.
- Members:
id (
int) – vcpu index.dirty-rate (
int) – dirty rate.
- Enum DirtyRateStatus (Since: 5.2)
Dirty page rate measurement status.
- Values:
unstarted – measuring thread has not been started yet
measuring – measuring thread is running
measured – dirty page rate is measured and the results are available
- Enum DirtyRateMeasureMode (Since: 6.2)
Method used to measure dirty page rate. Differences between available methods are explained in
calc-dirty-rate.- Values:
page-sampling – use page sampling
dirty-ring – use dirty ring
dirty-bitmap – use dirty bitmap
- Enum TimeUnit (Since: 8.2)
Specifies unit in which time-related value is specified.
- Values:
second – value is in seconds
millisecond – value is in milliseconds
- Object DirtyRateInfo (Since: 5.2)
Information about measured dirty page rate.
- Members:
dirty-rate (
int, optional) – an estimate of the dirty page rate of the VM in units of MiB/s. Value is present only whenstatusis ‘measured’.status (
DirtyRateStatus) – current status of dirty page rate measurementsstart-time (
int) – start time in units of second for calculationcalc-time (
int) – time period for which dirty page rate was measured, expressed and rounded down tocalc-time-unit.calc-time-unit (
TimeUnit) – time unit ofcalc-time(Since 8.2)sample-pages (
int) – number of sampled pages per GiB of guest memory. Valid only in page-sampling mode (Since 6.1)mode (
DirtyRateMeasureMode) – mode that was used to measure dirty page rate (Since 6.2)vcpu-dirty-rate (
[DirtyRateVcpu], optional) – dirty rate for each vCPU if dirty-ring mode was specified (Since 6.2)
- Command calc-dirty-rate (Since: 5.2)
Start measuring dirty page rate of the VM. Results can be retrieved with
query-dirty-rateafter measurements are completed.Dirty page rate is the number of pages changed in a given time period expressed in MiB/s. The following methods of calculation are available:
In page sampling mode, a random subset of pages are selected and hashed twice: once at the beginning of measurement time period, and once again at the end. If two hashes for some page are different, the page is counted as changed. Since this method relies on sampling and hashing, calculated dirty page rate is only an estimate of its true value. Increasing
sample-pagesimproves estimation quality at the cost of higher computational overhead.Dirty bitmap mode captures writes to memory (for example by temporarily revoking write access to all pages) and counting page faults. Information about modified pages is collected into a bitmap, where each bit corresponds to one guest page. This mode requires that KVM accelerator property “dirty-ring-size” is not set.
Dirty ring mode is similar to dirty bitmap mode, but the information about modified pages is collected into ring buffer. This mode tracks page modification per each vCPU separately. It requires that KVM accelerator property “dirty-ring-size” is set.
- Arguments:
calc-time (
int) – time period for which dirty page rate is calculated. By default it is specified in seconds, but the unit can be set explicitly withcalc-time-unit. Note that largercalc-timevalues will typically result in smaller dirty page rates because page dirtying is a one-time event. Once some page is counted as dirty duringcalc-timeperiod, further writes to this page will not increase dirty page rate anymore.calc-time-unit (
TimeUnit, optional) – time unit in whichcalc-timeis specified. By default it is seconds. (Since 8.2)sample-pages (
int, optional) – number of sampled pages per each GiB of guest memory. Default value is 512. For 4KiB guest pages this corresponds to sampling ratio of 0.2%. This argument is used only in page sampling mode. (Since 6.1)mode (
DirtyRateMeasureMode, optional) – mechanism for tracking dirty pages. Default value is ‘page-sampling’. Others are ‘dirty-bitmap’ and ‘dirty-ring’. (Since 6.1)
Example:
-> {"execute": "calc-dirty-rate", "arguments": {"calc-time": 1, "sample-pages": 512} } <- { "return": {} }
Example:
Measure dirty rate using dirty bitmap for 500 milliseconds:
-> {"execute": "calc-dirty-rate", "arguments": {"calc-time": 500, "calc-time-unit": "millisecond", "mode": "dirty-bitmap"} } <- { "return": {} }
- Command query-dirty-rate (Since: 5.2)
Query results of the most recent invocation of
calc-dirty-rate.- Arguments:
calc-time-unit (
TimeUnit, optional) – time unit in which to report calculation time. By default it is reported in seconds. (Since 8.2)
- Return:
Example: Measurement is in progress
<- {"status": "measuring", "sample-pages": 512, "mode": "page-sampling", "start-time": 1693900454, "calc-time": 10, "calc-time-unit": "second"}
Example: Measurement has been completed
<- {"status": "measured", "sample-pages": 512, "dirty-rate": 108, "mode": "page-sampling", "start-time": 1693900454, "calc-time": 10, "calc-time-unit": "second"}
- Object DirtyLimitInfo (Since: 7.1)
Dirty page rate limit information of a virtual CPU.
- Members:
cpu-index (
int) – index of a virtual CPU.limit-rate (
int) – upper limit of dirty page rate (MB/s) for a virtual CPU, 0 means unlimited.current-rate (
int) – current dirty page rate (MB/s) for a virtual CPU.
- Command set-vcpu-dirty-limit (Since: 7.1)
Set the upper limit of dirty page rate for virtual CPUs.
Requires KVM with accelerator property “dirty-ring-size” set. A virtual CPU’s dirty page rate is a measure of its memory load. To observe dirty page rates, use
calc-dirty-rate.- Arguments:
cpu-index (
int, optional) – index of a virtual CPU, default is all.dirty-rate (
int) – upper limit of dirty page rate (MB/s) for virtual CPUs.
Example:
-> {"execute": "set-vcpu-dirty-limit"} "arguments": { "dirty-rate": 200, "cpu-index": 1 } } <- { "return": {} }
- Command cancel-vcpu-dirty-limit (Since: 7.1)
Cancel the upper limit of dirty page rate for virtual CPUs.
Cancel the dirty page limit for the vCPU which has been set with
set-vcpu-dirty-limitcommand. Note that this command requires support from dirty ring, same as theset-vcpu-dirty-limit.- Arguments:
cpu-index (
int, optional) – index of a virtual CPU, default is all.
Example:
-> {"execute": "cancel-vcpu-dirty-limit"}, "arguments": { "cpu-index": 1 } } <- { "return": {} }
- Command query-vcpu-dirty-limit (Since: 7.1)
Return information about virtual CPU dirty page rate limits, if any.
- Return:
Example:
-> {"execute": "query-vcpu-dirty-limit"} <- {"return": [ { "limit-rate": 60, "current-rate": 3, "cpu-index": 0}, { "limit-rate": 60, "current-rate": 3, "cpu-index": 1}]}
- Command snapshot-save (Since: 6.0)
Save a VM snapshot
- Arguments:
job-id (
string) – identifier for the newly created jobtag (
string) – name of the snapshot to createvmstate (
string) – block device node name to save vmstate todevices (
[string]) – list of block device node names to save a snapshot to
Applications should not assume that the snapshot save is complete when this command returns. The job commands / events must be used to determine completion and to fetch details of any errors that arise.
Note that execution of the guest CPUs may be stopped during the time it takes to save the snapshot. A future version of QEMU may ensure CPUs are executing continuously.
It is strongly recommended that
devicescontain all writable block device nodes if a consistent snapshot is required.If
tagalready exists, an error will be reportedExample:
-> { "execute": "snapshot-save", "arguments": { "job-id": "snapsave0", "tag": "my-snap", "vmstate": "disk0", "devices": ["disk0", "disk1"] } } <- { "return": { } } <- {"event": "JOB_STATUS_CHANGE", "timestamp": {"seconds": 1432121972, "microseconds": 744001}, "data": {"status": "created", "id": "snapsave0"}} <- {"event": "JOB_STATUS_CHANGE", "timestamp": {"seconds": 1432122172, "microseconds": 744001}, "data": {"status": "running", "id": "snapsave0"}} <- {"event": "STOP", "timestamp": {"seconds": 1432122372, "microseconds": 744001} } <- {"event": "RESUME", "timestamp": {"seconds": 1432122572, "microseconds": 744001} } <- {"event": "JOB_STATUS_CHANGE", "timestamp": {"seconds": 1432122772, "microseconds": 744001}, "data": {"status": "waiting", "id": "snapsave0"}} <- {"event": "JOB_STATUS_CHANGE", "timestamp": {"seconds": 1432122972, "microseconds": 744001}, "data": {"status": "pending", "id": "snapsave0"}} <- {"event": "JOB_STATUS_CHANGE", "timestamp": {"seconds": 1432123172, "microseconds": 744001}, "data": {"status": "concluded", "id": "snapsave0"}} -> {"execute": "query-jobs"} <- {"return": [{"current-progress": 1, "status": "concluded", "total-progress": 1, "type": "snapshot-save", "id": "snapsave0"}]}
- Command snapshot-load (Since: 6.0)
Load a VM snapshot
- Arguments:
job-id (
string) – identifier for the newly created jobtag (
string) – name of the snapshot to load.vmstate (
string) – block device node name to load vmstate fromdevices (
[string]) – list of block device node names to load a snapshot from
Applications should not assume that the snapshot load is complete when this command returns. The job commands / events must be used to determine completion and to fetch details of any errors that arise.
Note that execution of the guest CPUs will be stopped during the time it takes to load the snapshot.
It is strongly recommended that
devicescontain all writable block device nodes that can have changed since the originalsnapshot-savecommand execution.Example:
-> { "execute": "snapshot-load", "arguments": { "job-id": "snapload0", "tag": "my-snap", "vmstate": "disk0", "devices": ["disk0", "disk1"] } } <- { "return": { } } <- {"event": "JOB_STATUS_CHANGE", "timestamp": {"seconds": 1472124172, "microseconds": 744001}, "data": {"status": "created", "id": "snapload0"}} <- {"event": "JOB_STATUS_CHANGE", "timestamp": {"seconds": 1472125172, "microseconds": 744001}, "data": {"status": "running", "id": "snapload0"}} <- {"event": "STOP", "timestamp": {"seconds": 1472125472, "microseconds": 744001} } <- {"event": "RESUME", "timestamp": {"seconds": 1472125872, "microseconds": 744001} } <- {"event": "JOB_STATUS_CHANGE", "timestamp": {"seconds": 1472126172, "microseconds": 744001}, "data": {"status": "waiting", "id": "snapload0"}} <- {"event": "JOB_STATUS_CHANGE", "timestamp": {"seconds": 1472127172, "microseconds": 744001}, "data": {"status": "pending", "id": "snapload0"}} <- {"event": "JOB_STATUS_CHANGE", "timestamp": {"seconds": 1472128172, "microseconds": 744001}, "data": {"status": "concluded", "id": "snapload0"}} -> {"execute": "query-jobs"} <- {"return": [{"current-progress": 1, "status": "concluded", "total-progress": 1, "type": "snapshot-load", "id": "snapload0"}]}
- Command snapshot-delete (Since: 6.0)
Delete a VM snapshot
- Arguments:
job-id (
string) – identifier for the newly created jobtag (
string) – name of the snapshot to delete.devices (
[string]) – list of block device node names to delete a snapshot from
Applications should not assume that the snapshot delete is complete when this command returns. The job commands / events must be used to determine completion and to fetch details of any errors that arise.
Example:
-> { "execute": "snapshot-delete", "arguments": { "job-id": "snapdelete0", "tag": "my-snap", "devices": ["disk0", "disk1"] } } <- { "return": { } } <- {"event": "JOB_STATUS_CHANGE", "timestamp": {"seconds": 1442124172, "microseconds": 744001}, "data": {"status": "created", "id": "snapdelete0"}} <- {"event": "JOB_STATUS_CHANGE", "timestamp": {"seconds": 1442125172, "microseconds": 744001}, "data": {"status": "running", "id": "snapdelete0"}} <- {"event": "JOB_STATUS_CHANGE", "timestamp": {"seconds": 1442126172, "microseconds": 744001}, "data": {"status": "waiting", "id": "snapdelete0"}} <- {"event": "JOB_STATUS_CHANGE", "timestamp": {"seconds": 1442127172, "microseconds": 744001}, "data": {"status": "pending", "id": "snapdelete0"}} <- {"event": "JOB_STATUS_CHANGE", "timestamp": {"seconds": 1442128172, "microseconds": 744001}, "data": {"status": "concluded", "id": "snapdelete0"}} -> {"execute": "query-jobs"} <- {"return": [{"current-progress": 1, "status": "concluded", "total-progress": 1, "type": "snapshot-delete", "id": "snapdelete0"}]}
Transactions
- Object Abort (Since: 1.6)
This action can be used to test transaction failure.
- Enum ActionCompletionMode (Since: 2.5)
An enumeration of transactional completion modes.
- Values:
individual – Do not attempt to cancel any other Actions if any Actions fail after the Transaction request succeeds. All Actions that can complete successfully will do so without waiting on others. This is the default.
grouped – If any Action fails after the Transaction succeeds, cancel all Actions. Actions do not complete until all Actions are ready to complete. May be rejected by Actions that do not support this completion mode.
- Enum TransactionActionKind (Since: 1.1)
- Values:
abort – Since 1.6
block-dirty-bitmap-add – Since 2.5
block-dirty-bitmap-remove – Since 4.2
block-dirty-bitmap-clear – Since 2.5
block-dirty-bitmap-enable – Since 4.0
block-dirty-bitmap-disable – Since 4.0
block-dirty-bitmap-merge – Since 4.0
blockdev-backup – Since 2.3
blockdev-snapshot – Since 2.5
blockdev-snapshot-internal-sync – Since 1.7
blockdev-snapshot-sync – since 1.1
drive-backup – Since 1.6
- Features:
deprecated – Member
drive-backupis deprecated. Use memberblockdev-backupinstead.
- Object BlockDirtyBitmapAddWrapper (Since: 2.5)
- Members:
data (
BlockDirtyBitmapAdd) – Not documented
- Object BlockDirtyBitmapWrapper (Since: 2.5)
- Members:
data (
BlockDirtyBitmap) – Not documented
- Object BlockDirtyBitmapMergeWrapper (Since: 4.0)
- Members:
data (
BlockDirtyBitmapMerge) – Not documented
- Object BlockdevBackupWrapper (Since: 2.3)
- Members:
data (
BlockdevBackup) – Not documented
- Object BlockdevSnapshotWrapper (Since: 2.5)
- Members:
data (
BlockdevSnapshot) – Not documented
- Object BlockdevSnapshotInternalWrapper (Since: 1.7)
- Members:
data (
BlockdevSnapshotInternal) – Not documented
- Object BlockdevSnapshotSyncWrapper (Since: 1.1)
- Members:
data (
BlockdevSnapshotSync) – Not documented
- Object DriveBackupWrapper (Since: 1.6)
- Members:
data (
DriveBackup) – Not documented
- Object TransactionAction (Since: 1.1)
A discriminated record of operations that can be performed with
transaction.- Members:
type (
TransactionActionKind) – the operation to be performedWhen
typeisabort: The members ofAbortWrapper.When
typeisblock-dirty-bitmap-add: The members ofBlockDirtyBitmapAddWrapper.When
typeisblock-dirty-bitmap-remove: The members ofBlockDirtyBitmapWrapper.When
typeisblock-dirty-bitmap-clear: The members ofBlockDirtyBitmapWrapper.When
typeisblock-dirty-bitmap-enable: The members ofBlockDirtyBitmapWrapper.When
typeisblock-dirty-bitmap-disable: The members ofBlockDirtyBitmapWrapper.When
typeisblock-dirty-bitmap-merge: The members ofBlockDirtyBitmapMergeWrapper.When
typeisblockdev-backup: The members ofBlockdevBackupWrapper.When
typeisblockdev-snapshot: The members ofBlockdevSnapshotWrapper.When
typeisblockdev-snapshot-internal-sync: The members ofBlockdevSnapshotInternalWrapper.When
typeisblockdev-snapshot-sync: The members ofBlockdevSnapshotSyncWrapper.When
typeisdrive-backup: The members ofDriveBackupWrapper.
- Object TransactionProperties (Since: 2.5)
Optional arguments to modify the behavior of a Transaction.
- Members:
completion-mode (
ActionCompletionMode, optional) – Controls how jobs launched asynchronously by Actions will complete or fail as a group. SeeActionCompletionModefor details.
- Command transaction (Since: 1.1)
Executes a number of transactionable QMP commands atomically. If any operation fails, then the entire set of actions will be abandoned and the appropriate error returned.
For external snapshots, the dictionary contains the device, the file to use for the new snapshot, and the format. The default format, if not specified, is qcow2.
Each new snapshot defaults to being created by QEMU (wiping any contents if the file already exists), but it is also possible to reuse an externally-created file. In the latter case, you should ensure that the new image file has the same contents as the current one; QEMU cannot perform any meaningful check. Typically this is achieved by using the current image file as the backing file for the new image.
On failure, the original disks pre-snapshot attempt will be used.
For internal snapshots, the dictionary contains the device and the snapshot’s name. If an internal snapshot matching name already exists, the request will be rejected. Only some image formats support it, for example, qcow2, and rbd,
On failure, QEMU will try delete the newly created internal snapshot in the transaction. When an I/O error occurs during deletion, the user needs to fix it later with qemu-img or other command.
- Arguments:
actions (
[TransactionAction]) – List ofTransactionAction; information needed for the respective operations.properties (
TransactionProperties, optional) – structure of additional options to control the execution of the transaction. SeeTransactionPropertiesfor additional detail.
- Errors:
Any errors from commands in the transaction
Note
The transaction aborts on the first failure. Therefore, there will be information on only one failed operation returned in an error condition, and subsequent actions will not have been attempted.
Example:
-> { "execute": "transaction", "arguments": { "actions": [ { "type": "blockdev-snapshot-sync", "data" : { "device": "ide-hd0", "snapshot-file": "/some/place/my-image", "format": "qcow2" } }, { "type": "blockdev-snapshot-sync", "data" : { "node-name": "myfile", "snapshot-file": "/some/place/my-image2", "snapshot-node-name": "node3432", "mode": "existing", "format": "qcow2" } }, { "type": "blockdev-snapshot-sync", "data" : { "device": "ide-hd1", "snapshot-file": "/some/place/my-image2", "mode": "existing", "format": "qcow2" } }, { "type": "blockdev-snapshot-internal-sync", "data" : { "device": "ide-hd2", "name": "snapshot0" } } ] } } <- { "return": {} }
Tracing
- Enum TraceEventState (Since: 2.2)
State of a tracing event.
- Values:
unavailable – The event is statically disabled.
disabled – The event is dynamically disabled.
enabled – The event is dynamically enabled.
- Object TraceEventInfo (Since: 2.2)
Information of a tracing event.
- Members:
name (
string) – Event name.state (
TraceEventState) – Tracing state.
- Command trace-event-get-state (Since: 2.2)
Query the state of events.
- Arguments:
name (
string) – Event name pattern (case-sensitive glob).
- Return:
[TraceEventInfo]– a list of info for the matching events
Example:
-> { "execute": "trace-event-get-state", "arguments": { "name": "qemu_memalign" } } <- { "return": [ { "name": "qemu_memalign", "state": "disabled", "vcpu": false } ] }
- Command trace-event-set-state (Since: 2.2)
Set the dynamic tracing state of events.
- Arguments:
name (
string) – Event name pattern (case-sensitive glob).enable (
boolean) – Whether to enable tracing.ignore-unavailable (
boolean, optional) – Do not match unavailable events withname.
Example:
-> { "execute": "trace-event-set-state", "arguments": { "name": "qemu_memalign", "enable": true } } <- { "return": {} }
Compatibility policy
- Enum CompatPolicyInput (Since: 6.0)
Policy for handling “funny” input.
- Values:
accept – Accept silently
reject – Reject with an error
crash – abort() the process
- Enum CompatPolicyOutput (Since: 6.0)
Policy for handling “funny” output.
- Values:
accept – Pass on unchanged
hide – Filter out
- Object CompatPolicy (Since: 6.0)
Policy for handling deprecated management interfaces.
This is intended for testing users of the management interfaces.
Limitation: covers only syntactic aspects of QMP, i.e. stuff tagged with feature ‘deprecated’ or ‘unstable’. We may want to extend it to cover semantic aspects and CLI.
Limitation: deprecated-output policy
hideis not implemented for enumeration values. They behave the same as with policyaccept.- Members:
deprecated-input (
CompatPolicyInput, optional) – how to handle deprecated input (default ‘accept’)deprecated-output (
CompatPolicyOutput, optional) – how to handle deprecated output (default ‘accept’)unstable-input (
CompatPolicyInput, optional) – how to handle unstable input (default ‘accept’) (since 6.2)unstable-output (
CompatPolicyOutput, optional) – how to handle unstable output (default ‘accept’) (since 6.2)
QMP monitor control
- Command qmp_capabilities (Since: 0.13)
Enable QMP capabilities.
- Arguments:
enable (
[QMPCapability], optional) – An optional list ofQMPCapabilityvalues to enable. The client must not enable any capability that is not mentioned in the QMP greeting message. If the field is not provided, it means no QMP capabilities will be enabled. (since 2.12)
Example:
-> { "execute": "qmp_capabilities", "arguments": { "enable": [ "oob" ] } } <- { "return": {} }
Note
This command is valid exactly when first connecting: it must be issued before any other command will be accepted, and will fail once the monitor is accepting other commands. (see QEMU Machine Protocol Specification)
Note
The QMP client needs to explicitly enable QMP capabilities, otherwise all the QMP capabilities will be turned off by default.
- Enum QMPCapability (Since: 2.12)
Enumeration of capabilities to be advertised during initial client connection, used for agreeing on particular QMP extension behaviors.
- Values:
oob – QMP ability to support out-of-band requests. (Please refer to qmp-spec.rst for more information on OOB)
- Object VersionTriple (Since: 2.4)
A three-part version number.
- Members:
major (
int) – The major version number.minor (
int) – The minor version number.micro (
int) – The micro version number.
- Object VersionInfo (Since: 0.14)
A description of QEMU’s version.
- Members:
qemu (
VersionTriple) – The version of QEMU. By current convention, a micro version of 50 signifies a development branch. A micro version greater than or equal to 90 signifies a release candidate for the next minor version. A micro version of less than 50 signifies a stable release.package (
string) – QEMU will always set this field to an empty string. Downstream versions of QEMU should set this to a non-empty string. The exact format depends on the downstream however it highly recommended that a unique name is used.
- Command query-version (Since: 0.14)
Return the current version of QEMU.
- Return:
VersionInfo– An object describing the current version of QEMU.
Example:
-> { "execute": "query-version" } <- { "return":{ "qemu":{ "major":0, "minor":11, "micro":5 }, "package":"" } }
- Object CommandInfo (Since: 0.14)
Information about a QMP command
- Members:
name (
string) – The command name
- Command query-commands (Since: 0.14)
Return a list of supported QMP commands by this server
- Return:
[CommandInfo]– A list of all supported commands
Example:
-> { "execute": "query-commands" } <- { "return":[ { "name":"query-balloon" }, { "name":"system_powerdown" }, ... ] }
This example has been shortened as the real response is too long.
- Command quit (Since: 0.14)
Request graceful QEMU process termination.
While every attempt is made to send the QMP response before terminating, this is not guaranteed. When using this interface, a premature EOF would not be unexpected.
Example:
-> { "execute": "quit" } <- { "return": {} }
- Enum MonitorMode (Since: 5.0)
An enumeration of monitor modes.
- Values:
readline – HMP monitor (human-oriented command line interface)
control – QMP monitor (JSON-based machine interface)
- Object MonitorOptions (Since: 5.0)
Options to be used for adding a new monitor.
- Members:
id (
string, optional) – Name of the monitormode (
MonitorMode, optional) – Selects the monitor mode (default: readline in the system emulator, control in qemu-storage-daemon)pretty (
boolean, optional) – Enables pretty printing (QMP only)chardev (
string) – Name of a character device to expose the monitor on
QMP introspection
- Command query-qmp-schema (Since: 2.5)
Command
query-qmp-schemaexposes the QMP wire ABI as an array ofSchemaInfo. This lets QMP clients figure out what commands and events are available in this QEMU, and their parameters and results.However, the
SchemaInfocan’t reflect all the rules and restrictions that apply to QMP. It’s interface introspection (figuring out what’s there), not interface specification. The specification is in the QAPI schema.Furthermore, while we strive to keep the QMP wire format backwards-compatible across QEMU versions, the introspection output is not guaranteed to have the same stability. For example, one version of QEMU may list an object member as an optional non-variant, while another lists the same member only through the object’s variants; or the type of a member may change from a generic string into a specific enum or from one specific type into an alternate that includes the original type alongside something else.
- Return:
[SchemaInfo]–an array where each element describes an entity in the ABI: command, event, type, …
The order of the various elements is unspecified; however, all names are guaranteed to be unique (no name will be duplicated with different meta-types).
Note
The QAPI schema is also used to help define internal interfaces, by defining QAPI types. These are not part of the QMP wire ABI, and therefore not returned by this command.
- Enum SchemaMetaType (Since: 2.5)
This is a
SchemaInfo’s meta type, i.e. the kind of entity it describes.- Values:
builtin – a predefined type such as ‘int’ or ‘bool’.
enum – an enumeration type
array – an array type
object – an object type (struct or union)
alternate – an alternate type
command – a QMP command
event – a QMP event
- Object SchemaInfo (Since: 2.5)
- Members:
name (
string) – the entity’s name, inherited frombase. TheSchemaInfois always referenced by this name. Commands and events have the name defined in the QAPI schema. Unlike command and event names, type names are not part of the wire ABI. Consequently, type names are meaningless strings here, although they are still guaranteed unique regardless ofmeta-type.meta-type (
SchemaMetaType) – the entity’s meta type, inherited frombase.features (
[string], optional) – names of features associated with the entity, in no particular order. (since 4.1 for object types, 4.2 for commands, 5.0 for the rest)When
meta-typeisbuiltin: The members ofSchemaInfoBuiltin.When
meta-typeisenum: The members ofSchemaInfoEnum.When
meta-typeisarray: The members ofSchemaInfoArray.When
meta-typeisobject: The members ofSchemaInfoObject.When
meta-typeisalternate: The members ofSchemaInfoAlternate.When
meta-typeiscommand: The members ofSchemaInfoCommand.When
meta-typeisevent: The members ofSchemaInfoEvent.
- Object SchemaInfoBuiltin (Since: 2.5)
Additional
SchemaInfomembers for meta-type ‘builtin’.- Members:
json-type (
JSONType) – the JSON type used for this type on the wire.
- Enum JSONType (Since: 2.5)
The four primitive and two structured types according to RFC 8259 section 1, plus ‘int’ (split off ‘number’), plus the obvious top type ‘value’.
- Values:
string – JSON string
number – JSON number
int – JSON number that is an integer
boolean – literal
falseortruenull – literal
nullobject – JSON object
array – JSON array
value – any JSON value
- Object SchemaInfoEnum (Since: 2.5)
Additional
SchemaInfomembers for meta-type ‘enum’.- Members:
members (
[SchemaInfoEnumMember]) – the enum type’s members, in no particular order. (since 6.2)values (
[string]) – the enumeration type’s member names, in no particular order. Redundant withmembers. Just for backward compatibility.
- Features:
deprecated – Member
valuesis deprecated. Usemembersinstead.
Values of this type are JSON string on the wire.
- Object SchemaInfoEnumMember (Since: 6.2)
An object member.
- Members:
name (
string) – the member’s name, as defined in the QAPI schema.features (
[string], optional) – names of features associated with the member, in no particular order.
- Object SchemaInfoArray (Since: 2.5)
Additional
SchemaInfomembers for meta-type ‘array’.- Members:
element-type (
string) – the array type’s element type.
Values of this type are JSON array on the wire.
- Object SchemaInfoObject (Since: 2.5)
Additional
SchemaInfomembers for meta-type ‘object’.- Members:
members (
[SchemaInfoObjectMember]) – the object type’s (non-variant) members, in no particular order.tag (
string, optional) – the name of the member serving as type tag. An element ofmemberswith this name must exist.variants (
[SchemaInfoObjectVariant], optional) – variant members, i.e. additional members that depend on the type tag’s value. Present exactly whentagis present. The variants are in no particular order, and may even differ from the order of the values of the enum type of thetag.
Values of this type are JSON object on the wire.
- Object SchemaInfoObjectMember (Since: 2.5)
An object member.
- Members:
name (
string) – the member’s name, as defined in the QAPI schema.type (
string) – the name of the member’s type.default (
value, optional) – default when used as command parameter. If absent, the parameter is mandatory. If present, the value must be null. The parameter is optional, and behavior when it’s missing is not specified here. Future extension: if present and non-null, the parameter is optional, and defaults to this value.features (
[string], optional) – names of features associated with the member, in no particular order. (since 5.0)
- Object SchemaInfoObjectVariant (Since: 2.5)
The variant members for a value of the type tag.
- Members:
case (
string) – a value of the type tag.type (
string) – the name of the object type that provides the variant members when the type tag has valuecase.
- Object SchemaInfoAlternate (Since: 2.5)
Additional
SchemaInfomembers for meta-type ‘alternate’.- Members:
members (
[SchemaInfoAlternateMember]) – the alternate type’s members, in no particular order. The members’ wire encoding is distinct, see How to use the QAPI code generator section Alternate types.
On the wire, this can be any of the members.
- Object SchemaInfoAlternateMember (Since: 2.5)
An alternate member.
- Members:
type (
string) – the name of the member’s type.
- Object SchemaInfoCommand (Since: 2.5)
Additional
SchemaInfomembers for meta-type ‘command’.- Members:
arg-type (
string) – the name of the object type that provides the command’s parameters.ret-type (
string) – the name of the command’s result type.allow-oob (
boolean, optional) – whether the command allows out-of-band execution, defaults to false (Since: 2.12)
- Object SchemaInfoEvent (Since: 2.5)
Additional
SchemaInfomembers for meta-type ‘event’.- Members:
arg-type (
string) – the name of the object type that provides the event’s parameters.
QEMU Object Model (QOM)
- Object ObjectPropertyInfo (Since: 1.2)
- Members:
name (
string) – the name of the propertytype (
string) –the type of the property. This will typically come in one of four forms:
A primitive type such as ‘u8’, ‘u16’, ‘bool’, ‘str’, or ‘double’. These types are mapped to the appropriate JSON type.
A child type in the form ‘child<subtype>’ where subtype is a qdev device type name. Child properties create the composition tree.
A link type in the form ‘link<subtype>’ where subtype is a qdev device type name. Link properties form the device model graph.
description (
string, optional) – if specified, the description of the property.default-value (
value, optional) – the default value, if any (since 5.0)
- Object ObjectPropertyValue
- Members:
name (
string) – the name of the property.type (
string) – the type of the property, as described inObjectPropertyInfo.value (
value, optional) – the value of the property. Absent when the property cannot be read.
Since 10.1
- Object ObjectPropertiesValues
- Members:
properties (
[ObjectPropertyValue]) – a list of properties.
Since 10.1
- Command qom-list (Since: 1.2)
List properties of a object given a path in the object model.
- Arguments:
path (
string) – the path within the object model. Seeqom-getfor a description of this parameter.
- Return:
[ObjectPropertyInfo]– a list that describe the properties of the object.
Example:
-> { "execute": "qom-list", "arguments": { "path": "/chardevs" } } <- { "return": [ { "name": "type", "type": "string" }, { "name": "parallel0", "type": "child<chardev-vc>" }, { "name": "serial0", "type": "child<chardev-vc>" }, { "name": "mon0", "type": "child<chardev-stdio>" } ] }
- Command qom-get (Since: 1.2)
Get a property value.
- Arguments:
path (
string) –The path within the object model. There are two forms of supported paths–absolute and partial paths.
Absolute paths are derived from the root object and can follow child<> or link<> properties. Since they can follow link<> properties, they can be arbitrarily long. Absolute paths look like absolute filenames and are prefixed with a leading slash.
Partial paths look like relative filenames. They do not begin with a prefix. The matching rules for partial paths are subtle but designed to make specifying objects easy. At each level of the composition tree, the partial path is matched as an absolute path. The first match is not returned. At least two matches are searched for. A successful result is only returned if only one match is found. If more than one match is found, a flag is return to indicate that the match was ambiguous.
property (
string) – The property name to read
- Return:
value– The property value. The type depends on the property type. child<> and link<> properties are returned as #str pathnames. All integer property types (u8, u16, etc) are returned as #int.
Example: Use absolute path
-> { "execute": "qom-get", "arguments": { "path": "/machine/unattached/device[0]", "property": "hotplugged" } } <- { "return": false }
Example: Use partial path
-> { "execute": "qom-get", "arguments": { "path": "unattached/sysbus", "property": "type" } } <- { "return": "System" }
- Command qom-list-get
List properties and their values for each object path in the input list.
- Arguments:
paths (
[string]) – The absolute or partial path for each object, as described inqom-get.
- Errors:
If any path is not valid or is ambiguous
- Return:
[ObjectPropertiesValues]– A list where each element is the result for the corresponding element ofpaths.
Since 10.1
- Command qom-set (Since: 1.2)
Set a property value.
- Arguments:
Example:
-> { "execute": "qom-set", "arguments": { "path": "/machine", "property": "graphics", "value": false } } <- { "return": {} }
- Object ObjectTypeInfo (Since: 1.1)
This structure describes a search result from
qom-list-types- Members:
name (
string) – the type name found in the searchabstract (
boolean, optional) – the type is abstract and can’t be directly instantiated. Omitted if false. (since 2.10)parent (
string, optional) – Name of parent type, if any (since 2.10)
- Command qom-list-types (Since: 1.1)
Return a list of types given search parameters.
- Arguments:
implements (
string, optional) – if specified, only return types that implement this type nameabstract (
boolean, optional) – if true, include abstract types in the results
- Return:
[ObjectTypeInfo]– a list of types, or an empty list if no results are found
- Command qom-list-properties (Since: 2.12)
List properties associated with a QOM object.
- Arguments:
typename (
string) – the type name of an object
Note
Objects can create properties at runtime, for example to describe links between different devices and/or objects. These properties are not included in the output of this command.
- Return:
[ObjectPropertyInfo]– a list describing object properties
- Object CanHostSocketcanProperties (Since: 2.12)
- Availability:
CONFIG_LINUXProperties for can-host-socketcan objects.
- Members:
if (
string) – interface name of the host system CAN bus to connect tocanbus (
string) – object ID of the can-bus object to connect to the host interface
- Object ColoCompareProperties (Since: 2.8)
Properties for colo-compare objects.
- Members:
primary_in (
string) – name of the character device backend to use for the primary input (incoming packets are redirected tooutdev)secondary_in (
string) – name of the character device backend to use for secondary input (incoming packets are only compared to the input onprimary_inand then dropped)outdev (
string) – name of the character device backend to use for outputiothread (
string) – name of the iothread to run innotify_dev (
string, optional) – name of the character device backend to be used to communicate with the remote colo-frame (only for Xen COLO)compare_timeout (
int, optional) – the maximum time to hold a packet fromprimary_infor comparison with an incoming packet onsecondary_inin milliseconds (default: 3000)expired_scan_cycle (
int, optional) – the interval at which colo-compare checks whether packets fromprimaryhave timed out, in milliseconds (default: 3000)max_queue_size (
int, optional) – the maximum number of packets to keep in the queue for comparing with incoming packets fromsecondary_in. If the queue is full and additional packets are received, the additional packets are dropped. (default: 1024)vnet_hdr_support (
boolean, optional) – if true, vnet header support is enabled (default: false)
- Object CryptodevBackendProperties (Since: 2.8)
Properties for cryptodev-backend and cryptodev-backend-builtin objects.
- Members:
queues (
int, optional) – the number of queues for the cryptodev backend. Ignored for cryptodev-backend and must be 1 for cryptodev-backend-builtin. (default: 1)throttle-bps (
int, optional) – limit total bytes per second (Since 8.0)throttle-ops (
int, optional) – limit total operations per second (Since 8.0)
- Object CryptodevVhostUserProperties (Since: 2.12)
- Availability:
CONFIG_VHOST_CRYPTOProperties for cryptodev-vhost-user objects.
- Members:
chardev (
string) – the name of a Unix domain socket character device that connects to the vhost-user serverThe members of
CryptodevBackendProperties.
- Object DBusVMStateProperties (Since: 5.0)
Properties for dbus-vmstate objects.
- Members:
addr (
string) – the name of the DBus bus to connect toid-list (
string, optional) – a comma separated list of DBus IDs of helpers whose data should be included in the VM state on migration
- Enum NetfilterInsert (Since: 5.0)
Indicates where to insert a netfilter relative to a given other filter.
- Values:
before – insert before the specified filter
behind – insert behind the specified filter
- Object NetfilterProperties (Since: 2.5)
Properties for objects of classes derived from netfilter.
- Members:
netdev (
string) – id of the network device backend to filterqueue (
NetFilterDirection, optional) – indicates which queue(s) to filter (default: all)status (
string, optional) – indicates whether the filter is enabled (“on”) or disabled (“off”) (default: “on”)position (
string, optional) – specifies where the filter should be inserted in the filter list. “head” means the filter is inserted at the head of the filter list, before any existing filters. “tail” means the filter is inserted at the tail of the filter list, behind any existing filters (default). “id=<id>” means the filter is inserted before or behind the filter specified by <id>, depending on theinsertproperty. (default: “tail”)insert (
NetfilterInsert, optional) – where to insert the filter relative to the filter given inposition. Ignored ifpositionis “head” or “tail”. (default: behind)
- Object FilterBufferProperties (Since: 2.5)
Properties for filter-buffer objects.
- Members:
interval (
int) – a non-zero interval in microseconds. All packets arriving in the given interval are delayed until the end of the interval.The members of
NetfilterProperties.
- Object FilterDumpProperties (Since: 2.5)
Properties for filter-dump objects.
- Members:
file (
string) – the filename where the dumped packets should be storedmaxlen (
int, optional) – maximum number of bytes in a packet that are stored (default: 65536)The members of
NetfilterProperties.
- Object FilterMirrorProperties (Since: 2.6)
Properties for filter-mirror objects.
- Members:
outdev (
string) – the name of a character device backend to which all incoming packets are mirroredvnet_hdr_support (
boolean, optional) – if true, vnet header support is enabled (default: false)The members of
NetfilterProperties.
- Object FilterRedirectorProperties (Since: 2.6)
Properties for filter-redirector objects.
At least one of
indevoroutdevmust be present. If both are present, they must not refer to the same character device backend.- Members:
indev (
string, optional) – the name of a character device backend from which packets are received and redirected to the filtered network deviceoutdev (
string, optional) – the name of a character device backend to which all incoming packets are redirectedvnet_hdr_support (
boolean, optional) – if true, vnet header support is enabled (default: false)The members of
NetfilterProperties.
- Object FilterRewriterProperties (Since: 2.8)
Properties for filter-rewriter objects.
- Members:
vnet_hdr_support (
boolean, optional) – if true, vnet header support is enabled (default: false)The members of
NetfilterProperties.
- Object InputBarrierProperties (Since: 4.2)
Properties for input-barrier objects.
- Members:
name (
string) – the screen name as declared in the screens section of barrier.confserver (
string, optional) – hostname of the Barrier server (default: “localhost”)port (
string, optional) – TCP port of the Barrier server (default: “24800”)x-origin (
string, optional) – x coordinate of the leftmost pixel on the guest screen (default: “0”)y-origin (
string, optional) – y coordinate of the topmost pixel on the guest screen (default: “0”)width (
string, optional) – the width of secondary screen in pixels (default: “1920”)height (
string, optional) – the height of secondary screen in pixels (default: “1080”)
- Object InputLinuxProperties (Since: 2.6)
- Availability:
CONFIG_LINUXProperties for input-linux objects.
- Members:
evdev (
string) – the path of the host evdev device to usegrab_all (
boolean, optional) – if true, grab is toggled for all devices (e.g. both keyboard and mouse) instead of just one device (default: false)repeat (
boolean, optional) – enables auto-repeat events (default: false)grab-toggle (
GrabToggleKeys, optional) – the key or key combination that toggles device grab (default: ctrl-ctrl)
- Object EventLoopBaseProperties (Since: 7.1)
Common properties for event loops
- Members:
aio-max-batch (
int, optional) – maximum number of requests in a batch for the AIO engine, 0 means that the engine will use its default. (default: 0)thread-pool-min (
int, optional) – minimum number of threads reserved in the thread pool (default:0)thread-pool-max (
int, optional) – maximum number of threads the thread pool can contain (default:64)
- Object IothreadProperties (Since: 2.0)
Properties for iothread objects.
- Members:
poll-max-ns (
int, optional) – the maximum number of nanoseconds to busy wait for events. 0 means polling is disabled (default: 32768 on POSIX hosts, 0 otherwise)poll-grow (
int, optional) – the multiplier used to increase the polling time when the algorithm detects it is missing events due to not polling long enough. 0 selects a default behaviour (default: 0)poll-shrink (
int, optional) – the divisor used to decrease the polling time when the algorithm detects it is spending too long polling without encountering events. 0 selects a default behaviour (default: 0)The members of
EventLoopBaseProperties.
The
aio-max-batchoption is available since 6.1.
- Object MainLoopProperties (Since: 7.1)
Properties for the main-loop object.
- Members:
The members of
EventLoopBaseProperties.
- Object MemoryBackendProperties (Since: 2.1)
Properties for objects of classes derived from memory-backend.
- Members:
merge (
boolean, optional) – if true, mark the memory as mergeable (default depends on the machine type)dump (
boolean, optional) – if true, include the memory in core dumps (default depends on the machine type)host-nodes (
[int], optional) – the list of NUMA host nodes to bind the memory topolicy (
HostMemPolicy, optional) – the NUMA policy (default: ‘default’)prealloc (
boolean, optional) – if true, preallocate memory (default: false)prealloc-threads (
int, optional) – number of CPU threads to use for prealloc (default: 1)prealloc-context (
string, optional) – thread context to use for creation of preallocation threads (default: none) (since 7.2)share (
boolean, optional) – if false, the memory is private to QEMU; if true, it is shared (default false for backends memory-backend-file and memory-backend-ram, true for backends memory-backend-epc, memory-backend-memfd, and memory-backend-shm)reserve (
boolean, optional) – if true, reserve swap space (or huge pages) if applicable (default: true) (since 6.1)size (
int) – size of the memory region in bytesx-use-canonical-path-for-ramblock-id (
boolean, optional) – if true, the canonical path is used for ramblock-id. Disable this for 4.0 machine types or older to allow migration with newer QEMU versions. (default: false generally, but true for machine types <= 4.0)
Note
prealloc=true and reserve=false cannot be set at the same time. With reserve=true, the behavior depends on the operating system: for example, Linux will not reserve swap space for shared file mappings – “not applicable”. In contrast, reserve=false will bail out if it cannot be configured accordingly.
- Object MemoryBackendFileProperties (Since: 2.1)
Properties for memory-backend-file objects.
- Members:
align (
int, optional) – the base address alignment when QEMU mmap(2)smem-path. Some backend stores specified bymem-pathrequire an alignment different than the default one used by QEMU, e.g. the device DAX /dev/dax0.0 requires 2M alignment rather than 4K. In such cases, users can specify the required alignment via this option. 0 selects a default alignment (currently the page size). (default: 0)offset (
int, optional) – the offset into the target file that the region starts at. You can use this option to back multiple regions with a single file. Must be a multiple of the page size. (default: 0) (since 8.1)discard-data (
boolean, optional) – if true, the file contents can be destroyed when QEMU exits, to avoid unnecessarily flushing data to the backing file. Note thatdiscard-datais only an optimization, and QEMU might not discard file contents if it aborts unexpectedly or is terminated using SIGKILL. (default: false)mem-path (
string) – the path to either a shared memory or huge page filesystem mountpmem (
boolean, optional) – specifies whether the backing file specified bymem-pathis in host persistent memory that can be accessed using the SNIA NVM programming model (e.g. Intel NVDIMM).readonly (
boolean, optional) – if true, the backing file is opened read-only; if false, it is opened read-write. (default: false)rom (
OnOffAuto, optional) – whether to create Read Only Memory (ROM) that cannot be modified by the VM. Any write attempts to such ROM will be denied. Most use cases want writable RAM instead of ROM. However, selected use cases, like R/O NVDIMMs, can benefit from ROM. If set to ‘on’, create ROM; if set to ‘off’, create writable RAM; if set to ‘auto’, the value of thereadonlyproperty is used. This property is primarily helpful when we want to have proper RAM in configurations that would traditionally create ROM before this property was introduced: VM templating, where we want to open a file readonly (readonlyset to true) and mark the memory to be private for QEMU (shareset to false). For this use case, we need writable RAM instead of ROM, and want to set this property to ‘off’. (default: auto, since 8.2)The members of
MemoryBackendProperties.
- Object MemoryBackendMemfdProperties (Since: 2.12)
- Availability:
CONFIG_LINUXProperties for memory-backend-memfd objects.
- Members:
hugetlb (
boolean, optional) – if true, the file to be created resides in the hugetlbfs filesystem (default: false)hugetlbsize (
int, optional) – the hugetlb page size on systems that support multiple hugetlb page sizes (it must be a power of 2 value supported by the system). 0 selects a default page size. This option is ignored ifhugetlbis false. (default: 0)seal (
boolean, optional) – if true, create a sealed-file, which will block further resizing of the memory (default: true)The members of
MemoryBackendProperties.
- Object MemoryBackendShmProperties (Since: 9.1)
- Availability:
CONFIG_POSIXProperties for memory-backend-shm objects.
This memory backend supports only shared memory, which is the default.
- Members:
The members of
MemoryBackendProperties.
- Object MemoryBackendEpcProperties (Since: 6.2)
- Availability:
CONFIG_LINUXProperties for memory-backend-epc objects.
The
mergeboolean option is false by default with epcThe
dumpboolean option is false by default with epc- Members:
The members of
MemoryBackendProperties.
- Object PrManagerHelperProperties (Since: 2.11)
- Availability:
CONFIG_LINUXProperties for pr-manager-helper objects.
- Members:
path (
string) – the path to a Unix domain socket for connecting to the external helper
- Object QtestProperties (Since: 6.0)
Properties for qtest objects.
- Members:
chardev (
string) – the chardev to be used to receive qtest commands on.log (
string, optional) – the path to a log file
- Object RemoteObjectProperties (Since: 6.0)
Properties for x-remote-object objects.
- Members:
fd (
string) – file descriptor name previously passed viagetfdcommanddevid (
string) – the id of the device to be associated with the file descriptor
- Object VfioUserServerProperties (Since: 7.1)
Properties for x-vfio-user-server objects.
- Members:
socket (
SocketAddress) – socket to be used by the libvfio-user librarydevice (
string) – the ID of the device to be emulated at the server
- Object IOMMUFDProperties (Since: 9.0)
Properties for iommufd objects.
- Members:
fd (
string, optional) – file descriptor name previously passed viagetfdcommand, which represents a pre-opened /dev/iommu. This allows the iommufd object to be shared across several subsystems (VFIO, VDPA, …), and the file descriptor to be shared with other process, e.g. DPDK. (default: QEMU opens /dev/iommu by itself)
- Object AcpiGenericInitiatorProperties (Since: 9.0)
Properties for acpi-generic-initiator objects.
- Members:
pci-dev (
string) – PCI device ID to be associated with the nodenode (
int) – NUMA node associated with the PCI device
- Object AcpiGenericPortProperties (Since: 9.2)
Properties for acpi-generic-port objects.
- Members:
pci-bus (
string) – QOM path of the PCI bus of the hostbridge associated with this SRAT Generic Port Affinity Structure. This is the same as the bus parameter for the root ports attached to this host bridge. The resulting SRAT Generic Port Affinity Structure will refer to the ACPI object in DSDT that represents the host bridge (e.g. ACPI0016 for CXL host bridges). See ACPI 6.5 Section 5.2.16.7 for more information.node (
int) – Similar to a NUMA node ID, but instead of providing a reference point used for defining NUMA distances and access characteristics to memory or from an initiator (e.g. CPU), this node defines the boundary point between non-discoverable system buses which must be described by firmware, and a discoverable bus. NUMA distances and access characteristics are defined to and from that point. For system software to establish full initiator to target characteristics this information must be combined with information retrieved from the discoverable part of the path. An example would use CDAT (see UEFI.org) information read from devices and switches in conjunction with link characteristics read from PCIe Configuration space. To get the full path latency from CPU to CXL attached DRAM CXL device: Add the latency from CPU to Generic Port (from HMAT indexed via the node ID in this SRAT structure) to that for CXL bus links, the latency across intermediate switches and from the EP port to the actual memory. Bandwidth is more complex as there may be interleaving across multiple devices and shared links in the path.
- Object RngProperties (Since: 1.3)
Properties for objects of classes derived from rng.
- Members:
opened (
boolean, optional) – if true, the device is opened immediately when applying this option and will probably fail when processing the next option. Don’t use; only provided for compatibility. (default: false)
- Features:
deprecated – Member
openedis deprecated. Setting true doesn’t make sense, and false is already the default.
- Object RngEgdProperties (Since: 1.3)
Properties for rng-egd objects.
- Members:
chardev (
string) – the name of a character device backend that provides the connection to the RNG daemonThe members of
RngProperties.
- Object RngRandomProperties (Since: 1.3)
- Availability:
CONFIG_POSIXProperties for rng-random objects.
- Members:
filename (
string, optional) – the filename of the device on the host to obtain entropy from (default: “/dev/urandom”)The members of
RngProperties.
- Object IgvmCfgProperties (Since: 10.1)
- Availability:
CONFIG_IGVMProperties common to objects that handle IGVM files.
- Members:
file (
string) – IGVM file to use to configure guest
- Object SevCommonProperties (Since: 9.1)
Properties common to objects that are derivatives of sev-common.
- Members:
sev-device (
string, optional) – SEV device to use (default: “/dev/sev”)cbitpos (
int, optional) – C-bit location in page table entry (default: 0)reduced-phys-bits (
int) – number of bits in physical addresses that become unavailable when SEV is enabledkernel-hashes (
boolean, optional) – if true, add hashes of kernel/initrd/cmdline to a designated guest firmware page for measured boot with -kernel (default: false) (since 6.2)
- Features:
confidential-guest-reset – If present, the hypervisor supports confidential guest resets (since 11.0).
- Object SevGuestProperties (Since: 2.12)
Properties for sev-guest objects.
- Members:
dh-cert-file (
string, optional) – guest owners DH certificate (encoded with base64)session-file (
string, optional) – guest owners session parameters (encoded with base64)policy (
int, optional) – SEV policy value (default: 0x1)handle (
int, optional) – SEV firmware handle (default: 0)legacy-vm-type (
OnOffAuto, optional) – Use legacy KVM_SEV_INIT KVM interface for creating the VM. The newer KVM_SEV_INIT2 interface, from Linux >= 6.10, syncs additional vCPU state when initializing the VMSA structures, which will result in a different guest measurement. Set this to ‘on’ to force compatibility with older QEMU or kernel versions that rely on legacy KVM_SEV_INIT behavior. ‘auto’ will behave identically to ‘on’, but will automatically switch to using KVM_SEV_INIT2 if the user specifies any additional options that require it. If set to ‘off’, QEMU will require KVM_SEV_INIT2 unconditionally. (default: off) (since 9.1)The members of
SevCommonProperties.
- Object SevSnpGuestProperties (Since: 9.1)
Properties for sev-snp-guest objects. Most of these are direct arguments for the KVM_SNP_* interfaces documented in the Linux kernel source under Documentation/arch/x86/amd-memory-encryption.rst, which are in turn closely coupled with the SNP_INIT/SNP_LAUNCH_* firmware commands documented in the SEV-SNP Firmware ABI Specification (Rev 0.9).
More usage information is also available in the QEMU source tree under docs/amd-memory-encryption.
- Members:
policy (
int, optional) – the ‘POLICY’ parameter to the SNP_LAUNCH_START command, as defined in the SEV-SNP firmware ABI (default: 0x30000)guest-visible-workarounds (
string, optional) – 16-byte, base64-encoded blob to report hypervisor-defined workarounds, corresponding to the ‘GOSVW’ parameter of the SNP_LAUNCH_START command defined in the SEV-SNP firmware ABI (default: all-zero)id-block (
string, optional) – 96-byte, base64-encoded blob to provide the ‘ID Block’ structure for the SNP_LAUNCH_FINISH command defined in the SEV-SNP firmware ABI (default: all-zero)id-auth (
string, optional) – 4096-byte, base64-encoded blob to provide the ‘ID Authentication Information Structure’ for the SNP_LAUNCH_FINISH command defined in the SEV-SNP firmware ABI (default: all-zero)author-key-enabled (
boolean, optional) – true if ‘id-auth’ blob contains the ‘AUTHOR_KEY’ field defined SEV-SNP firmware ABI (default: false)host-data (
string, optional) – 32-byte, base64-encoded, user-defined blob to provide to the guest, as documented for the ‘HOST_DATA’ parameter of the SNP_LAUNCH_FINISH command in the SEV-SNP firmware ABI (default: all-zero)vcek-disabled (
boolean, optional) – Guests are by default allowed to choose between VLEK (Versioned Loaded Endorsement Key) or VCEK (Versioned Chip Endorsement Key) when requesting attestation reports from firmware. Set this to true to disable the use of VCEK. (default: false) (since: 9.1)The members of
SevCommonProperties.
- Object TdxGuestProperties (Since: 10.1)
Properties for tdx-guest objects.
- Members:
attributes (
int, optional) – The ‘attributes’ of a TD guest that is passed to KVM_TDX_INIT_VMsept-ve-disable (
boolean, optional) – toggle bit 28 of TD attributes to control disabling of EPT violation conversion to #VE on guest TD access of PENDING pages. Some guest OS (e.g., Linux TD guest) may require this to be set, otherwise they refuse to boot.mrconfigid (
string, optional) – ID for non-owner-defined configuration of the guest TD, e.g., run-time or OS configuration (base64 encoded SHA384 digest). Defaults to all zeros.mrowner (
string, optional) – ID for the guest TD’s owner (base64 encoded SHA384 digest). Defaults to all zeros.mrownerconfig (
string, optional) – ID for owner-defined configuration of the guest TD, e.g., specific to the workload rather than the run-time or OS (base64 encoded SHA384 digest). Defaults to all zeros.quote-generation-socket (
SocketAddress, optional) – socket address for Quote Generation Service (QGS). QGS is a daemon running on the host. Without it, the guest will not be able to get a TD quote for attestation.
- Features:
confidential-guest-reset – If present, the hypervisor supports confidential guest resets (since 11.0).
- Object ThreadContextProperties (Since: 7.2)
Properties for thread context objects.
- Members:
cpu-affinity (
[int], optional) – the list of host CPU numbers used as CPU affinity for all threads created in the thread context (default: QEMU main thread CPU affinity)node-affinity (
[int], optional) – the list of host node numbers that will be resolved to a list of host CPU numbers used as CPU affinity. This is a shortcut for specifying the list of host CPU numbers belonging to the host nodes manually by settingcpu-affinity. (default: QEMU main thread affinity)
- Enum ObjectType (Since: 6.0)
- Values:
acpi-generic-initiator – Not documented
acpi-generic-port – Not documented
authz-list – Not documented
authz-listfile – Not documented
authz-pam – Not documented
authz-simple – Not documented
can-bus – Not documented
can-host-socketcan – Not documented
colo-compare – Not documented
cryptodev-backend – Not documented
cryptodev-backend-builtin – Not documented
cryptodev-backend-lkcf – Not documented
cryptodev-vhost-user – Not documented
dbus-vmstate – Not documented
filter-buffer – Not documented
filter-dump – Not documented
filter-mirror – Not documented
filter-redirector – Not documented
filter-replay – Not documented
filter-rewriter – Not documented
igvm-cfg – Not documented
input-barrier – Not documented
input-linux – Not documented
iommufd – Not documented
iothread – Not documented
main-loop – Not documented
memory-backend-epc – Not documented
memory-backend-file – Not documented
memory-backend-memfd – Not documented
memory-backend-ram – Not documented
memory-backend-shm – Not documented
pef-guest – Not documented
pr-manager-helper – Not documented
qtest – Not documented
rng-builtin – Not documented
rng-egd – Not documented
rng-random – Not documented
secret – Not documented
secret_keyring – Not documented
sev-guest – Not documented
sev-snp-guest – Not documented
thread-context – Not documented
s390-pv-guest – Not documented
tdx-guest – Not documented
throttle-group – Not documented
tls-creds-anon – Not documented
tls-creds-psk – Not documented
tls-creds-x509 – Not documented
tls-cipher-suites – Not documented
x-remote-object – Not documented
x-vfio-user-server – Not documented
- Features:
unstable – Members
x-remote-objectandx-vfio-user-serverare experimental.
- Object ObjectOptions (Since: 6.0)
Describes the options of a user creatable QOM object.
- Members:
qom-type (
ObjectType) – the class name for the object to be createdid (
string) – the name of the new objectWhen
qom-typeisacpi-generic-initiator: The members ofAcpiGenericInitiatorProperties.When
qom-typeisacpi-generic-port: The members ofAcpiGenericPortProperties.When
qom-typeisauthz-list: The members ofAuthZListProperties.When
qom-typeisauthz-listfile: The members ofAuthZListFileProperties.When
qom-typeisauthz-pam: The members ofAuthZPAMProperties.When
qom-typeisauthz-simple: The members ofAuthZSimpleProperties.When
qom-typeiscan-host-socketcan: The members ofCanHostSocketcanProperties.When
qom-typeiscolo-compare: The members ofColoCompareProperties.When
qom-typeiscryptodev-backend: The members ofCryptodevBackendProperties.When
qom-typeiscryptodev-backend-builtin: The members ofCryptodevBackendProperties.When
qom-typeiscryptodev-backend-lkcf: The members ofCryptodevBackendProperties.When
qom-typeiscryptodev-vhost-user: The members ofCryptodevVhostUserProperties.When
qom-typeisdbus-vmstate: The members ofDBusVMStateProperties.When
qom-typeisfilter-buffer: The members ofFilterBufferProperties.When
qom-typeisfilter-dump: The members ofFilterDumpProperties.When
qom-typeisfilter-mirror: The members ofFilterMirrorProperties.When
qom-typeisfilter-redirector: The members ofFilterRedirectorProperties.When
qom-typeisfilter-replay: The members ofNetfilterProperties.When
qom-typeisfilter-rewriter: The members ofFilterRewriterProperties.When
qom-typeisigvm-cfg: The members ofIgvmCfgProperties.When
qom-typeisinput-barrier: The members ofInputBarrierProperties.When
qom-typeisinput-linux: The members ofInputLinuxProperties.When
qom-typeisiommufd: The members ofIOMMUFDProperties.When
qom-typeisiothread: The members ofIothreadProperties.When
qom-typeismain-loop: The members ofMainLoopProperties.When
qom-typeismemory-backend-epc: The members ofMemoryBackendEpcProperties.When
qom-typeismemory-backend-file: The members ofMemoryBackendFileProperties.When
qom-typeismemory-backend-memfd: The members ofMemoryBackendMemfdProperties.When
qom-typeismemory-backend-ram: The members ofMemoryBackendProperties.When
qom-typeismemory-backend-shm: The members ofMemoryBackendShmProperties.When
qom-typeispr-manager-helper: The members ofPrManagerHelperProperties.When
qom-typeisqtest: The members ofQtestProperties.When
qom-typeisrng-builtin: The members ofRngProperties.When
qom-typeisrng-egd: The members ofRngEgdProperties.When
qom-typeisrng-random: The members ofRngRandomProperties.When
qom-typeissecret: The members ofSecretProperties.When
qom-typeissecret_keyring: The members ofSecretKeyringProperties.When
qom-typeissev-guest: The members ofSevGuestProperties.When
qom-typeissev-snp-guest: The members ofSevSnpGuestProperties.When
qom-typeistdx-guest: The members ofTdxGuestProperties.When
qom-typeisthread-context: The members ofThreadContextProperties.When
qom-typeisthrottle-group: The members ofThrottleGroupProperties.When
qom-typeistls-creds-anon: The members ofTlsCredsAnonProperties.When
qom-typeistls-creds-psk: The members ofTlsCredsPskProperties.When
qom-typeistls-creds-x509: The members ofTlsCredsX509Properties.When
qom-typeistls-cipher-suites: The members ofTlsCredsProperties.When
qom-typeisx-remote-object: The members ofRemoteObjectProperties.When
qom-typeisx-vfio-user-server: The members ofVfioUserServerProperties.
- Command object-add (Since: 2.0)
Create a QOM object.
- Arguments:
The members of
ObjectOptions.
- Errors:
If
qom-typeis not a valid class name
Example:
-> { "execute": "object-add", "arguments": { "qom-type": "rng-random", "id": "rng1", "filename": "/dev/hwrng" } } <- { "return": {} }
- Command object-del (Since: 2.0)
Remove a QOM object.
- Arguments:
id (
string) – the name of the QOM object to remove
- Errors:
If
idis not a valid id for a QOM object
Example:
-> { "execute": "object-del", "arguments": { "id": "rng1" } } <- { "return": {} }
Device infrastructure (qdev)
- Command device-list-properties (Since: 1.2)
List properties associated with a device.
- Arguments:
typename (
string) – the type name of a device
- Return:
[ObjectPropertyInfo]– a list describing a devices properties
Note
Objects can create properties at runtime, for example to describe links between different devices and/or objects. These properties are not included in the output of this command.
- Command device_add (Since: 0.13)
Add a device.
- Arguments:
driver (
string) – the name of the new device’s driverbus (
string, optional) – the device’s parent bus (device tree path)id (
string, optional) – the device’s ID, must be unique
- Features:
json-cli – If present, the “-device” command line option supports JSON syntax with a structure identical to the arguments of this command.
json-cli-hotplug – If present, the “-device” command line option supports JSON syntax without the reference counting leak that broke hot-unplug
Notes
Additional arguments depend on the type.
For detailed information about this command, please refer to the ‘docs/qdev-device-use.txt’ file.
It’s possible to list device properties by running QEMU with the
-device DEVICE,helpcommand-line argument, where DEVICE is the device’s name.
Example:
-> { "execute": "device_add", "arguments": { "driver": "e1000", "id": "net1", "bus": "pci.0", "mac": "52:54:00:12:34:56" } } <- { "return": {} }
- Command device_del (Since: 0.14)
Remove a device from a guest
- Arguments:
id (
string) – the device’s ID or QOM path
- Errors:
If
idis not a valid device, DeviceNotFound
Note
When this command completes, the device may not be removed from the guest. Hot removal is an operation that requires guest cooperation. This command merely requests that the guest begin the hot removal process. Completion of the device removal process is signaled with a
DEVICE_DELETEDevent. Guest reset will automatically complete removal for all devices. If a guest-side error in the hot removal process is detected, the device will not be removed and aDEVICE_UNPLUG_GUEST_ERRORevent is sent. Some errors cannot be detected.Example:
-> { "execute": "device_del", "arguments": { "id": "net1" } } <- { "return": {} }
Example:
-> { "execute": "device_del", "arguments": { "id": "/machine/peripheral-anon/device[0]" } } <- { "return": {} }
- Event DEVICE_DELETED (Since: 1.5)
Emitted whenever the device removal completion is acknowledged by the guest. At this point, it’s safe to reuse the specified device ID. Device removal can be initiated by the guest or by HMP/QMP commands.
- Members:
device (
string, optional) – the device’s ID if it has onepath (
string) – the device’s QOM path
Example:
<- { "event": "DEVICE_DELETED", "data": { "device": "virtio-net-pci-0", "path": "/machine/peripheral/virtio-net-pci-0" }, "timestamp": { "seconds": 1265044230, "microseconds": 450486 } }
- Event DEVICE_UNPLUG_GUEST_ERROR (Since: 6.2)
Emitted when a device hot unplug fails due to a guest reported error.
- Members:
device (
string, optional) – the device’s ID if it has onepath (
string) – the device’s QOM path
Example:
<- { "event": "DEVICE_UNPLUG_GUEST_ERROR", "data": { "device": "core1", "path": "/machine/peripheral/core1" }, "timestamp": { "seconds": 1615570772, "microseconds": 202844 } }
- Command device-sync-config (Since: 9.2)
- This command is unstable/experimental.
Synchronize device configuration from host to guest part. First, copy the configuration from the host part (backend) to the guest part (frontend). Then notify guest software that device configuration changed.
The command may be used to notify the guest about block device capacity change. Currently only vhost-user-blk device supports this.
- Arguments:
id (
string) – the device’s ID or QOM path
- Features:
unstable – The command is experimental.
Common machine types
- Enum S390CpuEntitlement (Since: 8.2)
An enumeration of CPU entitlements that can be assumed by a virtual S390 CPU
- Values:
auto – Not documented
low – Not documented
medium – Not documented
high – Not documented
- Enum CpuTopologyLevel (Since: 9.2)
An enumeration of CPU topology levels.
- Values:
thread – thread level, which would also be called SMT level or logical processor level. The
threadsoption inSMPConfigurationis used to configure the topology of this level.core – core level. The
coresoption inSMPConfigurationis used to configure the topology of this level.module – module level. The
modulesoption inSMPConfigurationis used to configure the topology of this level.cluster – cluster level. The
clustersoption inSMPConfigurationis used to configure the topology of this level.die – die level. The
diesoption inSMPConfigurationis used to configure the topology of this level.socket – socket level, which would also be called package level. The
socketsoption inSMPConfigurationis used to configure the topology of this level.book – book level. The
booksoption inSMPConfigurationis used to configure the topology of this level.drawer – drawer level. The
drawersoption inSMPConfigurationis used to configure the topology of this level.default – default level. Some architectures will have default topology settings (e.g., cache topology), and this special level means following the architecture-specific settings.
- Enum CacheLevelAndType (Since: 9.2)
Caches a system may have. The enumeration value here is the combination of cache level and cache type.
- Values:
l1d – L1 data cache.
l1i – L1 instruction cache.
l2 – L2 (unified) cache.
l3 – L3 (unified) cache
- Object SmpCacheProperties (Since: 9.2)
Cache information for SMP system.
- Members:
cache (
CacheLevelAndType) – Cache name, which is the combination of cache level and cache type.topology (
CpuTopologyLevel) – Cache topology level. It accepts the CPU topology enumeration as the parameter, i.e., CPUs in the same topology container share the same cache.
- Object SmpCachePropertiesWrapper
List wrapper of
SmpCacheProperties.- Members:
caches (
[SmpCacheProperties]) – the list ofSmpCacheProperties.
Since 9.2
Machines
- Enum SysEmuTarget (Since: 3.0)
The comprehensive enumeration of QEMU system emulation (“softmmu”) targets. Run “./configure –help” in the project root directory, and look for the *-softmmu targets near the “–target-list” option. The individual target constants are not documented here, for the time being.
- Values:
rx – since 5.0
avr – since 5.1
loongarch64 – since 7.1
hexagon – since 11.0
aarch64 – Not documented
alpha – Not documented
arm – Not documented
hppa – Not documented
i386 – Not documented
m68k – Not documented
microblaze – Not documented
mips – Not documented
mips64 – Not documented
mips64el – Not documented
mipsel – Not documented
or1k – Not documented
ppc – Not documented
ppc64 – Not documented
riscv32 – Not documented
riscv64 – Not documented
s390x – Not documented
sh4 – Not documented
sh4eb – Not documented
sparc – Not documented
sparc64 – Not documented
tricore – Not documented
x86_64 – Not documented
xtensa – Not documented
xtensaeb – Not documented
Note
The resulting QMP strings can be appended to the “qemu-system-” prefix to produce the corresponding QEMU executable name. This is true even for “qemu-system-x86_64”.
- Enum S390CpuState (Since: 2.12)
An enumeration of cpu states that can be assumed by a virtual S390 CPU
- Values:
uninitialized – Not documented
stopped – Not documented
check-stop – Not documented
operating – Not documented
load – Not documented
- Object CpuInfoS390 (Since: 2.12)
Additional information about a virtual S390 CPU
- Members:
cpu-state (
S390CpuState) – the virtual CPU’s statededicated (
boolean, optional) – the virtual CPU’s dedication (since 8.2)entitlement (
S390CpuEntitlement, optional) – the virtual CPU’s entitlement (since 8.2)
- Object CpuInfoFast (Since: 2.12)
Information about a virtual CPU
- Members:
cpu-index (
int) – index of the virtual CPUqom-type (
string) – QOM type name of the CPU (since 10.1)qom-path (
string) – path to the CPU object in the QOM treethread-id (
int) – ID of the underlying host threadprops (
CpuInstanceProperties, optional) – properties associated with a virtual CPU, e.g. the socket idtarget (
SysEmuTarget) – the QEMU system emulation target, which determines which additional fields will be listed (since 3.0)When
targetiss390x: The members ofCpuInfoS390.
- Command query-cpus-fast (Since: 2.12)
Return information about all virtual CPUs.
- Return:
Example:
-> { "execute": "query-cpus-fast" } <- { "return": [ { "thread-id": 25627, "props": { "core-id": 0, "thread-id": 0, "socket-id": 0 }, "qom-path": "/machine/unattached/device[0]", "target":"x86_64", "cpu-index": 0 }, { "thread-id": 25628, "props": { "core-id": 0, "thread-id": 0, "socket-id": 1 }, "qom-path": "/machine/unattached/device[2]", "target":"x86_64", "cpu-index": 1 } ] }
- Object CompatProperty (Since: 9.1)
Property default values specific to a machine type, for use by scripts/compare-machine-types.
- Members:
qom-type (
string) – name of the QOM type to which the default appliesproperty (
string) – name of its property to which the default appliesvalue (
string) – the default value (machine-specific default can overwrite the “default” default, to avoid this use -machine none)
- Object MachineInfo (Since: 1.2)
Information describing a machine.
- Members:
name (
string) – the name of the machinealias (
string, optional) – an alias for the machine nameis-default (
boolean, optional) – whether the machine is defaultcpu-max (
int) – maximum number of CPUs supported by the machine type (since 1.5)hotpluggable-cpus (
boolean) – cpu hotplug via -device is supported (since 2.7)numa-mem-supported (
boolean) – true if ‘-numa node,mem’ option is supported by the machine type and false otherwise (since 4.1)deprecated (
boolean) – if true, the machine type is deprecated and may be removed in future versions of QEMU according to the QEMU deprecation policy (since 4.1)default-cpu-type (
string, optional) – default CPU model typename if none is requested via the -cpu argument. (since 4.2)default-ram-id (
string, optional) – the default ID of initial RAM memory backend (since 5.2)acpi (
boolean) – machine type supports ACPI (since 8.0)compat-props (
[CompatProperty], optional) – The machine type’s compatibility properties. Only present whenquery-machinesargumentcompat-propsis true. (since 9.1)
- Features:
unstable – Member
compat-propsis experimental.
- Command query-machines (Since: 1.2)
Return a list of supported machines
- Arguments:
compat-props (
boolean, optional) – if true, also return compatibility properties. (default: false) (since 9.1)
- Return:
- Features:
unstable – Argument
compat-propsis experimental.
Example:
-> { "execute": "query-machines", "arguments": { "compat-props": true } } <- { "return": [ { "hotpluggable-cpus": true, "name": "pc-q35-6.2", "compat-props": [ { "qom-type": "virtio-mem", "property": "unplugged-inaccessible", "value": "off" } ], "numa-mem-supported": false, "default-cpu-type": "qemu64-x86_64-cpu", "cpu-max": 288, "deprecated": false, "default-ram-id": "pc.ram" }, ... }
- Object CurrentMachineParams (Since: 4.0)
Information describing the running machine parameters.
- Members:
wakeup-suspend-support (
boolean) – true if the machine supports wake up from suspend
- Command query-current-machine (Since: 4.0)
Return information on the current virtual machine.
- Return:
- Object QemuTargetInfo (Since: 1.2)
Information on the target configuration built into the QEMU binary.
- Members:
arch (
SysEmuTarget) – the target architecture
- Command query-target (Since: 1.2)
Return information about the target for this QEMU
- Return:
- Object UuidInfo (Since: 0.14)
Guest UUID information (Universally Unique Identifier).
- Members:
UUID (
string) – the UUID of the guest
Note
If no UUID was specified for the guest, the nil UUID (all zeroes) is returned.
- Command query-uuid (Since: 0.14)
Query the guest UUID information.
- Return:
Example:
-> { "execute": "query-uuid" } <- { "return": { "UUID": "550e8400-e29b-41d4-a716-446655440000" } }
- Object GuidInfo (Since: 2.9)
GUID information.
- Members:
guid (
string) – the globally unique identifier
- Command system_reset (Since: 0.14)
Performs a hard reset of a guest.
Example:
-> { "execute": "system_reset" } <- { "return": {} }
- Command system_powerdown (Since: 0.14)
Requests that a guest perform a powerdown operation.
Note
A guest may or may not respond to this command. This command returning does not indicate that a guest has accepted the request or that it has shut down. Many guests will respond to this command by prompting the user in some way.
Example:
-> { "execute": "system_powerdown" } <- { "return": {} }
- Command system_wakeup (Since: 1.1)
Wake up guest from suspend. If the guest has wake-up from suspend support enabled (wakeup-suspend-support flag from
query-current-machine), wake-up guest from suspend if the guest is in SUSPENDED state. Return an error otherwise.Note
Prior to 4.0, this command does nothing in case the guest isn’t suspended.
Example:
-> { "execute": "system_wakeup" } <- { "return": {} }
- Enum LostTickPolicy (Since: 2.0)
Policy for handling lost ticks in timer devices. Ticks end up getting lost when, for example, the guest is paused.
- Values:
discard – throw away the missed ticks and continue with future injection normally. The guest OS will see the timer jump ahead by a potentially quite significant amount all at once, as if the intervening chunk of time had simply not existed; needless to say, such a sudden jump can easily confuse a guest OS which is not specifically prepared to deal with it. Assuming the guest OS can deal correctly with the time jump, the time in the guest and in the host should now match.
delay – continue to deliver ticks at the normal rate. The guest OS will not notice anything is amiss, as from its point of view time will have continued to flow normally. The time in the guest should now be behind the time in the host by exactly the amount of time during which ticks have been missed.
slew – deliver ticks at a higher rate to catch up with the missed ticks. The guest OS will not notice anything is amiss, as from its point of view time will have continued to flow normally. Once the timer has managed to catch up with all the missing ticks, the time in the guest and in the host should match.
- Command inject-nmi (Since: 0.14)
Injects a Non-Maskable Interrupt into the default CPU (x86/s390) or all CPUs (ppc64). The command fails when the guest doesn’t support injecting.
Note
Prior to 2.1, this command was only supported for x86 and s390 VMs.
Example:
-> { "execute": "inject-nmi" } <- { "return": {} }
- Enum NumaOptionsType (Since: 2.1)
- Values:
node – NUMA nodes configuration
dist – NUMA distance configuration (since 2.10)
cpu – property based CPU(s) to node mapping (Since: 2.10)
hmat-lb – memory latency and bandwidth information (Since: 5.0)
hmat-cache – memory side cache information (Since: 5.0)
- Object NumaOptions (Since: 2.1)
A discriminated record of NUMA options. (for OptsVisitor)
- Members:
type (
NumaOptionsType) – NUMA option typeWhen
typeisnode: The members ofNumaNodeOptions.When
typeisdist: The members ofNumaDistOptions.When
typeiscpu: The members ofNumaCpuOptions.When
typeishmat-lb: The members ofNumaHmatLBOptions.When
typeishmat-cache: The members ofNumaHmatCacheOptions.
- Object NumaNodeOptions (Since: 2.1)
Create a guest NUMA node. (for OptsVisitor)
- Members:
nodeid (
int, optional) – NUMA node ID (increase by 1 from 0 if omitted)cpus (
[int], optional) – VCPUs belonging to this node (assign VCPUS round-robin if omitted)mem (
int, optional) – memory size of this node; mutually exclusive withmemdev. Equally divide total memory among nodes if bothmemandmemdevare omitted.memdev (
string, optional) – memory backend object. If specified for one node, it must be specified for all nodes.initiator (
int, optional) – defined in ACPI 6.3 Chapter 5.2.27.3 Table 5-145, points to the nodeid which has the memory controller responsible for this NUMA node. This field provides additional information as to the initiator node that is closest (as in directly attached) to this node, and therefore has the best performance (since 5.0)
- Object NumaDistOptions (Since: 2.10)
Set the distance between 2 NUMA nodes.
- Members:
src (
int) – source NUMA node.dst (
int) – destination NUMA node.val (
int) – NUMA distance from source node to destination node. When a node is unreachable from another node, set the distance between them to 255.
- Object CXLFixedMemoryWindowOptions (Since: 7.1)
Create a CXL Fixed Memory Window
- Members:
size (
int) – Size of the Fixed Memory Window in bytes. Must be a multiple of 256MiB.interleave-granularity (
int, optional) – Number of contiguous bytes for which accesses will go to a given interleave target. Accepted values [256, 512, 1k, 2k, 4k, 8k, 16k]targets (
[string]) – Target root bridge IDs from -device …,id=<ID> for each root bridge.
- Object CXLFMWProperties (Since: 7.1)
List of CXL Fixed Memory Windows.
- Members:
cxl-fmw (
[CXLFixedMemoryWindowOptions]) – List ofCXLFixedMemoryWindowOptions
- Enum X86CPURegister32 (Since: 1.5)
A X86 32-bit register
- Values:
EAX – Not documented
EBX – Not documented
ECX – Not documented
EDX – Not documented
ESP – Not documented
EBP – Not documented
ESI – Not documented
EDI – Not documented
- Object X86CPUFeatureWordInfo (Since: 1.5)
Information about a X86 CPU feature word
- Members:
cpuid-input-eax (
int) – Input EAX value for CPUID instruction for that feature wordcpuid-input-ecx (
int, optional) – Input ECX value for CPUID instruction for that feature wordcpuid-register (
X86CPURegister32) – Output register containing the feature bitsfeatures (
int) – value of output register, containing the feature bits
- Object DummyForceArrays (Since: 2.5)
Not used by QMP; hack to let us use X86CPUFeatureWordInfoList internally
- Members:
unused (
[X86CPUFeatureWordInfo]) – Not documented
- Object NumaCpuOptions (Since: 2.10)
Option “-numa cpu” overrides default cpu to node mapping. It accepts the same set of cpu properties as returned by
query-hotpluggable-cpus[].props, where node-id could be used to override default node mapping.- Members:
The members of
CpuInstanceProperties.
- Enum HmatLBMemoryHierarchy (Since: 5.0)
The memory hierarchy in the System Locality Latency and Bandwidth Information Structure of HMAT (Heterogeneous Memory Attribute Table)
For more information about
HmatLBMemoryHierarchy, see chapter 5.2.27.4: Table 5-146: Field “Flags” of ACPI 6.3 spec.- Values:
memory – the structure represents the memory performance
first-level – first level of memory side cache
second-level – second level of memory side cache
third-level – third level of memory side cache
- Enum HmatLBDataType (Since: 5.0)
Data type in the System Locality Latency and Bandwidth Information Structure of HMAT (Heterogeneous Memory Attribute Table)
For more information about
HmatLBDataType, see chapter 5.2.27.4: Table 5-146: Field “Data Type” of ACPI 6.3 spec.- Values:
access-latency – access latency (nanoseconds)
read-latency – read latency (nanoseconds)
write-latency – write latency (nanoseconds)
access-bandwidth – access bandwidth (Bytes per second)
read-bandwidth – read bandwidth (Bytes per second)
write-bandwidth – write bandwidth (Bytes per second)
- Object NumaHmatLBOptions (Since: 5.0)
Set the system locality latency and bandwidth information between Initiator and Target proximity Domains.
For more information about
NumaHmatLBOptions, see chapter 5.2.27.4: Table 5-146 of ACPI 6.3 spec.- Members:
initiator (
int) – the Initiator Proximity Domain.target (
int) – the Target Proximity Domain.hierarchy (
HmatLBMemoryHierarchy) – the Memory Hierarchy. Indicates the performance of memory or side cache.data-type (
HmatLBDataType) – presents the type of data, access/read/write latency or hit latency.latency (
int, optional) – the value of latency frominitiatortotargetproximity domain, the latency unit is “ns(nanosecond)”.bandwidth (
int, optional) – the value of bandwidth betweeninitiatorandtargetproximity domain, the bandwidth unit is “Bytes per second”.
- Enum HmatCacheAssociativity (Since: 5.0)
Cache associativity in the Memory Side Cache Information Structure of HMAT
For more information of
HmatCacheAssociativity, see chapter 5.2.27.5: Table 5-147 of ACPI 6.3 spec.- Values:
none – None (no memory side cache in this proximity domain, or cache associativity unknown)
direct – Direct Mapped
complex – Complex Cache Indexing (implementation specific)
- Enum HmatCacheWritePolicy (Since: 5.0)
Cache write policy in the Memory Side Cache Information Structure of HMAT
For more information of
HmatCacheWritePolicy, see chapter 5.2.27.5: Table 5-147: Field “Cache Attributes” of ACPI 6.3 spec.- Values:
none – None (no memory side cache in this proximity domain, or cache write policy unknown)
write-back – Write Back (WB)
write-through – Write Through (WT)
- Object NumaHmatCacheOptions (Since: 5.0)
Set the memory side cache information for a given memory domain.
For more information of
NumaHmatCacheOptions, see chapter 5.2.27.5: Table 5-147: Field “Cache Attributes” of ACPI 6.3 spec.- Members:
node-id (
int) – the memory proximity domain to which the memory belongs.size (
int) – the size of memory side cache in bytes.level (
int) – the cache level described in this structure.associativity (
HmatCacheAssociativity) – the cache associativity, none/direct-mapped/complex(complex cache indexing).policy (
HmatCacheWritePolicy) – the write policy, none/write-back/write-through.line (
int) – the cache line size in bytes.
- Command memsave (Since: 0.14)
Save a portion of guest memory to a file.
- Arguments:
val (
int) – the virtual address of the guest to start fromsize (
int) – the size of memory region to savefilename (
string) – the file to save the memory to as binary datacpu-index (
int, optional) – the index of the virtual CPU to use for translating the virtual address (defaults to CPU 0)
Caution
Errors were not reliably returned until 1.1.
Example:
-> { "execute": "memsave", "arguments": { "val": 10, "size": 100, "filename": "/tmp/virtual-mem-dump" } } <- { "return": {} }
- Command pmemsave (Since: 0.14)
Save a portion of guest physical memory to a file.
- Arguments:
val (
int) – the physical address of the guest to start fromsize (
int) – the size of memory region to savefilename (
string) – the file to save the memory to as binary data
Caution
Errors were not reliably returned until 1.1.
Example:
-> { "execute": "pmemsave", "arguments": { "val": 10, "size": 100, "filename": "/tmp/physical-mem-dump" } } <- { "return": {} }
- Object Memdev (Since: 2.1)
Information about memory backend
- Members:
id (
string, optional) – backend’s ID if backend has ‘id’ property (since 2.9)size (
int) – memory backend sizemerge (
boolean) – whether memory merge support is enableddump (
boolean) – whether memory backend’s memory is included in a core dumpprealloc (
boolean) – whether memory was preallocatedshare (
boolean) – whether memory is private to QEMU or shared (since 6.1)reserve (
boolean, optional) – whether swap space (or huge pages) was reserved if applicable. This corresponds to the user configuration and not the actual behavior implemented in the OS to perform the reservation. For example, Linux will never reserve swap space for shared file mappings. (since 6.1)host-nodes (
[int]) – host nodes for its memory policypolicy (
HostMemPolicy) – memory policy of memory backend
- Command query-memdev (Since: 2.1)
Return information for all memory backends.
- Return:
[Memdev]
Example:
-> { "execute": "query-memdev" } <- { "return": [ { "id": "mem1", "size": 536870912, "merge": false, "dump": true, "prealloc": false, "share": false, "host-nodes": [0, 1], "policy": "bind" }, { "size": 536870912, "merge": false, "dump": true, "prealloc": true, "share": false, "host-nodes": [2, 3], "policy": "preferred" } ] }