RISC-V System emulator

QEMU can emulate both 32-bit and 64-bit RISC-V CPUs. Use the qemu-system-riscv64 executable to simulate a 64-bit RISC-V machine, qemu-system-riscv32 executable to simulate a 32-bit RISC-V machine.

QEMU has generally good support for RISC-V guests. It has support for several different machines. The reason we support so many is that RISC-V hardware is much more widely varying than x86 hardware. RISC-V CPUs are generally built into “system-on-chip” (SoC) designs created by many different companies with different devices, and these SoCs are then built into machines which can vary still further even if they use the same SoC.

For most boards the CPU type is fixed (matching what the hardware has), so typically you don’t need to specify the CPU type by hand, except for special cases like the virt board.

Choosing a board model

For QEMU’s RISC-V system emulation, you must specify which board model you want to use with the -M or --machine option; there is no default.

Because RISC-V systems differ so much and in fundamental ways, typically operating system or firmware images intended to run on one machine will not run at all on any other. This is often surprising for new users who are used to the x86 world where every system looks like a standard PC. (Once the kernel has booted, most user space software cares much less about the detail of the hardware.)

If you already have a system image or a kernel that works on hardware and you want to boot with QEMU, check whether QEMU lists that machine in its -machine help output. If it is listed, then you can probably use that board model. If it is not listed, then unfortunately your image will almost certainly not boot on QEMU. (You might be able to extract the file system and use that with a different kernel which boots on a system that QEMU does emulate.)

If you don’t care about reproducing the idiosyncrasies of a particular bit of hardware, such as small amount of RAM, no PCI or other hard disk, etc., and just want to run Linux, the best option is to use the virt board. This is a platform which doesn’t correspond to any real hardware and is designed for use in virtual machines. You’ll need to compile Linux with a suitable configuration for running on the virt board. virt supports PCI, virtio, recent CPUs and large amounts of RAM. It also supports 64-bit CPUs.

Board-specific documentation

Unfortunately many of the RISC-V boards QEMU supports are currently undocumented; you can get a complete list by running qemu-system-riscv64 --machine help, or qemu-system-riscv32 --machine help.

RISC-V CPU firmware

When using the sifive_u or virt machine there are three different firmware boot options:

  • -bios default

This is the default behaviour if no -bios option is included. This option will load the default OpenSBI firmware automatically. The firmware is included with the QEMU release and no user interaction is required. All a user needs to do is specify the kernel they want to boot with the -kernel option

  • -bios none

QEMU will not automatically load any firmware. It is up to the user to load all the images they need.

  • -bios <file>

Tells QEMU to load the specified file as the firmware.

RISC-V CPU endianness

The RISC-V ISA specifies that instruction fetches are always little-endian, while data accesses can be either little-endian or big-endian under control of the MSTATUS MBE/SBE/UBE bits (see section 3.1.6.5, “Memory Endianness”, in the RISC-V Privileged Specification).

QEMU implements the full data-endianness behaviour described by those bits. In addition, the RISC-V CPU object exposes a big-endian boolean property which models a big-endian-only hardware implementation, where the MBE/SBE/UBE bits are hardwired to 1. When the property is set, the CPU is reset with all three bits initialised to 1, so the guest starts executing in big-endian data mode from the reset vector. The property is a static, per-CPU hardware configuration option and is not meant to be toggled at runtime.

The property does not model a mixed-endian implementation where software can toggle MBE/SBE/UBE at runtime. QEMU’s RISC-V CPUs treat these fields as fixed by the CPU configuration: they are reset to 0 by default and to 1 when big-endian is enabled.

The property can be enabled from the command line, for example:

-cpu <cpu>,big-endian=on

No upstream CPU model currently defaults to big-endian; the property is provided so that big-endian-only RISC-V CPU variants can be modelled.