diff options
| author | Tobias Klauser <tklauser@distanz.ch> | 2020-07-09 11:29:37 +0200 |
|---|---|---|
| committer | Dmitry Vyukov <dvyukov@google.com> | 2020-07-09 11:43:36 +0200 |
| commit | a864f3d20c4372bbd155d4f4b74b6da7f4b568a2 (patch) | |
| tree | e2206db6b539d670475d2af4f145925d5442807a /docs/linux | |
| parent | 1bac9ec6ea3761286b0b46c7812973c6a65c2d1a (diff) | |
docs/linux: add not about default OpenSBI firmware in QEMU for linux/riscv64
Mention the possibility to use `-bios default` to use OpenSBI provided
with QEMU. However, this might not work on all distributions yet, so
make it optional.
Signed-off-by: Tobias Klauser <tklauser@distanz.ch>
Diffstat (limited to 'docs/linux')
| -rw-r--r-- | docs/linux/setup_linux-host_qemu-vm_riscv64-kernel.md | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/docs/linux/setup_linux-host_qemu-vm_riscv64-kernel.md b/docs/linux/setup_linux-host_qemu-vm_riscv64-kernel.md index afaf809e5..5ee484111 100644 --- a/docs/linux/setup_linux-host_qemu-vm_riscv64-kernel.md +++ b/docs/linux/setup_linux-host_qemu-vm_riscv64-kernel.md @@ -147,6 +147,35 @@ Create the manager config `riscv64.cfg` similar to the following one (adjusting } ``` +Alternatively, you may try to use the default OpenSBI firmware provided with QEMU 4.1 and newer by +specifying `-machine virt -bios default` in `qemu_args` and pass the kernel image in the `kernel` +config option: + +``` +{ + "name": "riscv64", + "target": "linux/riscv64", + "http": ":56700", + "workdir": "/workdir", + "kernel_obj": "/linux", + "syzkaller": "/gopath/src/github.com/google/syzkaller", + "image": "/buildroot/output/images/rootfs.ext2", + "procs": 8, + "type": "qemu", + "vm": { + "count": 1, + "qemu_args": "-machine virt -bios default", + "kernel": "/linux/arch/riscv/boot/Image", + "cpu": 2, + "mem": 2048 + } +} +``` + +This would allow to boot a different kernel without having to re-compile OpenSBI. However, on some +distributions the default OpenSBI firmware required by the `-bios default` option might not be +available yet. + Finally, run `bin/syz-manager -config riscv64.cfg`. After it successfully starts, you should be able to visit `localhost:56700` to view the fuzzing results. |