cloud-hypervisor/docs/windows.md

3 Starting with the release version [0.10.0](https://github.com/cloud-hypervisor/cloud-hypervisor/rel…
7 - Host with KVM enabled
8 - [UEFI](uefi.md) capable Windows guest image with Virtio drivers integrated
22 - QEMU, version >=5.0.0 is recommended.
23 - Windows installation ISO. Obtained through MSDN, Visual Studio subscription, evaluation center, e…
24 - [VirtIO driver ISO](https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/stable-virti…
25 - Suitable firmware for Cloud Hypervisor (`CLOUDHV.fd`) and for QEMU (`OVMF.fd`)
26 - With the suggested image size of 30G, there should be enough free disk space to hold the installa…
33 IMG_FILE=windows-disk.raw
35 VIRTIO_ISO_FILE=virtio-win-0.1.185.iso
41 qemu-img create -f raw $IMG_FILE 30G
46 qemu-system-x86_64 \
47 	-machine q35,accel=kvm \
48 	-cpu host \
49 	-m 4G \
50 	-bios ./$OVMF_DIR/OVMF_CODE.fd \
51 	-cdrom ./$WIN_ISO_FILE \
52 	-drive file=./$VIRTIO_ISO_FILE,index=0,media=cdrom \
53 	-drive if=none,id=root,file=./$IMG_FILE \
54 	-device virtio-blk-pci,drive=root,disable-legacy=on \
55 	-device virtio-net-pci,netdev=mynet0,disable-legacy=on \
56 	-netdev user,id=mynet0 \
57 	-vga std
62 …able the Windows Special Administration Console (SAC) and to possibly install extra device drivers.
69 cloud-hypervisor \
70 	--kernel ./$OVMF_DIR/CLOUDHV.fd \
71 	--disk path=./$IMG_FILE \
72 	--cpus boot=1,kvm_hyperv=on \
73 	--memory size=4G \
74 	--serial tty \
75 	--console off \
76 	--net tap=
81 - Carry the OVMF firmware in the `--kernel` option
82 - Add `kvm_hyperv=on` to the `--cpus` option
84 …phys_bits=X` to the `--cpus` parameter, where `X` is the number of bits to be supported. Windows w…
90 ### Device Drivers
92 …or example, when a device was not used during the installation. In particular it is important to e…
94 …QEMU and use the [Device Manager](https://support.microsoft.com/en-in/help/4028443/windows-10-upda…
113 Use the "ch -?" command for information about using channels.
125 EVENT:   A new channel has been created.  Use "ch -?" for channel help.
127 SAC>ch -si 1
138 As the simplest option, using `--net tap=` in the Cloud Hypervisor command line will create a `vmta…
144 Where `10` is the device index as shown by the `i` command.
150 - On the guest, add the DNS server either by using `netsh` or by opening `Network and Connectivity …
151 - On the host, configure the traffic forwarding. Replace the `NET_DEV` with the name of your networ…
154 sysctl -w net.ipv4.ip_forward=1
155 iptables -t nat -A POSTROUTING -o $NET_DEV -j MASQUERADE
161   - Execute `SystemPropertiesRemote`
162   - In the properties window, choose "Allow remote connections to this computer"
163   - Click "Select Users" and add some user to the allow list
166 Set-ItemProperty "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\" -Name "fDenyTSConnection…
167 Enable-NetFirewallRule -DisplayGroup "Remote Desktop"
168 Add-LocalGroupMember -Group "Remote Desktop Users" -Member someuser
180 Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0
181 Start-Service sshd
182 Set-Service -Name sshd -StartupType ‘Automatic’
185 This allows for SSH login from a remote machine, for example through the `administrator` user: `ssh…
189 …aken into consideration. Note, that Windows doesn't support CPU hot-remove. When `ch-remote` is in…
191 …-remove, the RAM being unplugged has to be not in use and have no reserved pages. In most cases it…
193 Network device hotplug and hot-remove are supported.
195 …-remove are supported. After the device has been hotplugged, it will need to be onlined from withi…
199 The Windows guest debugging process relies heavily on QEMU and [socat](http://www.dest-unreach.org/…
201 - A debugger VM running under QEMU.
202 - A debuggee, a Windows VM that has been created in the previous steps, running under Cloud Hypervi…
206 In this exercise, [WinDbg](https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/) is …
217 qemu-system-x86_64 \
218 	-machine q35,accel=kvm \
219 	-cpu host \
220 	-smp 1 \
221 	-m 4G \
222 	-cdrom ./$WIN_ISO_FILE \
223 	-drive file=./$VIRTIO_ISO_FILE,index=0,media=cdrom
224 	-drive if=none,id=root,file=./windbg-disk.raw \
225 	-device virtio-blk-pci,drive=root,disable-legacy=on \
226 	-device virtio-net-pci,netdev=mynet0,disable-legacy=on \
227 …-netdev user,id=mynet0,net=192.168.178.0/24,host=192.168.178.1,dhcpstart=192.168.178.64,hostname=w…
228 	-vga std
235 …r example, there could be an issue in the Windows guest with an emulated device or an included dri…
278 qemu-system-x86_64 \
279 	-machine q35,accel=kvm \
280 	-cpu host \
281 	-smp 1 \
282 	-m 4G \
283 	-drive if=none,id=root,file=./windbg-disk.raw \
284 	-device virtio-blk-pci,drive=root,disable-legacy=on \
285 	-serial tcp::4445,server,nowait \
286 	-device virtio-net-pci,netdev=mynet0,disable-legacy=on \
287 …-netdev user,id=mynet0,net=192.168.178.0/24,host=192.168.178.1,dhcpstart=192.168.178.64,hostname=w…
288 	-vga std
293 …-serial` parameter - that's what does the magic on exposing the serial port to the guest while con…
301 windbg -v -d -k
312 qemu-system-x86_64 \
313 	-machine q35,accel=kvm \
314 	-cpu host \
315 	-m 4G \
316 	-bios ./$OVMF_DIR/OVMF_CODE.fd \
317 	-cdrom ./$WIN_ISO_FILE \
318 	-drive file=./$VIRTIO_ISO_FILE,index=0,media=cdrom
319 	-drive if=none,id=root,file=./$IMG_FILE \
320 	-device virtio-blk-pci,drive=root,disable-legacy=on \
321 	-device virtio-net-pci,netdev=mynet0,disable-legacy=on \
322 	-netdev user,id=mynet0 \
323 	-serial tcp:127.0.0.1:4445 \
324 	-vga std
327 It is to see, that `-serial` parameter is used here, to establish the connection with the debugger …
329 …attach `--no-hpet`. To enable hypervisor reference timer, use `-cpu host,hv-time`. These and other…
335 `socat SYSTEM:"./ch-script",openpty,raw,echo=0 TCP:localhost:4445`
341 - [Fedora VirtIO guide for Windows](https://docs.fedoraproject.org/en-US/quick-docs/creating-window…
342 - [VirtIO driver binaries](https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/stable-…
343 - [VirtIO driver sources](https://github.com/virtio-win/kvm-guest-drivers-windows)
344 - [Emergency Management Services](https://docs.microsoft.com/en-us/previous-versions/windows/it-pro…
345 - [OpenSSH server/client configuration](https://docs.microsoft.com/en-us/windows-server/administrat…
346 - [Windows guest debugging under KVM](https://www.linux-kvm.org/page/WindowsGuestDrivers/GuestDebug…
347 - ["ENLIGHTENING" KVM](https://archive.fosdem.org/2019/schedule/event/vai_enlightening_kvm/attachme…