在Linux下使用Bochs参考：
http://wangcong.org/articles/bochs.html
http://kinglaw05.blog.163.com/blog/static/59683314200911205510345/
首先，安装libgtk2.0-dev，build-essential库
1: sudo apt-get install libgtk2.0-dev build-essential
然后下载最新的bochs源码，解压
1: sudo wget http://bochs.sourceforge.net/svn-snapshot/bochs-20140211.tar.gz
2: sudo gzip -d bochs-20140211.tar.gz
3: sudo tar -xvf bochs-20140211.tar
4: cd bobochs-20140211
配置
将.conf.linux修改成下面模样：
1: #!/bin/sh
2: #
3: # .conf.linux
4: #
5:
6: #which_config=normal
7: which_config=plugins
8:
9: CC="gcc"
10: CXX="c++"
11: CFLAGS="-Wall -O3 -fomit-frame-pointer -pipe" # for speed
12: #CFLAGS="-Wall -g -pipe" # for development
13: CXXFLAGS="$CFLAGS"
14:
15: export CC
16: export CXX
17: export CFLAGS
18: export CXXFLAGS
19:
20:
21: case $which_config in
22:
23: normal)
24:
25: #######################################################################
26: # configuration 1 for release binary RPMs
27: # Include a few standard options, speed optimizations, X11 only.
28: #######################################################################
29: ./configure --enable-sb16
30: --enable-ne2000
31: --enable-all-optimizations
32: --enable-cpu-level=6
33: --enable-x86-64
34: --enable-vmx=2
35: --enable-pci
36: --enable-clgd54xx
37: --enable-voodoo
38: --enable-usb
39: --enable-usb-ohci
40: --enable-es1370
41: --enable-e1000
42: --enable-show-ips
43: --enable-debugger
44: --enable-disasm
45: ${CONFIGURE_ARGS}
46: ;;
47:
48: plugins)
49: #######################################################################
50: # configuration 2 for release binary RPMs
51: # Include plugins, every possible gui.
52: #######################################################################
53: ./configure --enable-sb16
54: --enable-ne2000
55: --enable-all-optimizations
56: --enable-cpu-level=6
57: --enable-x86-64
58: --enable-vmx=2
59: --enable-pci
60: --enable-clgd54xx
61: --enable-voodoo
62: --enable-usb
63: --enable-usb-ohci
64: --enable-usb-xhci
65: --enable-es1370
66: --enable-e1000
67: --enable-plugins
68: --enable-show-ips
69: --with-all-libs
70: --enable-debugger
71: --enable-disasm
72: ${CONFIGURE_ARGS}
73: ;;
74:
75: esac
修改完后，执行sudo bash .conf.linux脚本进行配置
安装
1: sudo make
2: sudo make install
到http://bochs.sourceforge.net/diskimages.html，下载一个已经配置好的img.
1: sudo wget http://bochs.sourceforge.net/guestos/dlxlinux4.tar.gz
2: sudo gzip -d dlxlinux4.tar.gz
3: sudo tar -xvf dlxlinux4.tar
4: cd dlxlinux4
5: bochs -q -f bochsrc.txt
就进入了调试状态
1: daniel@ubuntu:~/linux-3.0/bochs/dlxlinux$ bochs -q -f dlxlinux.bxrc
2: ========================================================================
3: Bochs x86 Emulator 2.6.2.svn
4: Built from SVN snapshot after release 2.6.2
5: Compiled on Feb 14 2014 at 01:21:35
6: ========================================================================
7: 00000000000i[ ] LTDL_LIBRARY_PATH not set. using compile time default '/usr/local/lib/bochs/plugins'
8: 00000000000i[ ] BXSHARE not set. using compile time default '/usr/local/share/bochs'
9: 00000000000i[ ] lt_dlhandle is 0xa956340
10: 00000000000i[PLUGIN] loaded plugin libbx_unmapped.so
11: 00000000000i[ ] lt_dlhandle is 0xa9569d0
12: 00000000000i[PLUGIN] loaded plugin libbx_biosdev.so
13: 00000000000i[ ] lt_dlhandle is 0xa956fb0
14: 00000000000i[PLUGIN] loaded plugin libbx_speaker.so
15: 00000000000i[ ] lt_dlhandle is 0xa9577d8
16: 00000000000i[PLUGIN] loaded plugin libbx_extfpuirq.so
17: 00000000000i[ ] lt_dlhandle is 0xa957d28
18: 00000000000i[PLUGIN] loaded plugin libbx_parallel.so
19: 00000000000i[ ] lt_dlhandle is 0xa959160
20: 00000000000i[PLUGIN] loaded plugin libbx_serial.so
21: 00000000000i[ ] lt_dlhandle is 0xa95c400
22: 00000000000i[PLUGIN] loaded plugin libbx_gameport.so
23: 00000000000i[ ] lt_dlhandle is 0xa95c9b8
24: 00000000000i[PLUGIN] loaded plugin libbx_iodebug.so
25: 00000000000i[ ] reading configuration from dlxlinux.bxrc
26: 00000000000i[ ] lt_dlhandle is 0xa95cf28
27: 00000000000i[PLUGIN] loaded plugin libbx_x.so
28: 00000000000i[ ] installing x module as the Bochs GUI
29: 00000000000i[ ] using log file bochsout.txt
30: Next at t=0
31: (0) [0x0000fffffff0] f000:fff0 (unk. ctxt): jmpf 0xf000:e05b ; ea5be000f0
32: <bochs:1> ^C
按下Ctrl+Z可以退出调试程序
dlxlinux内核有一个缺点，就是内核太老了，是1.3版本。
在Bochs img列表中，还有一项
Linux kernel image for x86-64 from Andi Kleen at SuSE, which can be used as a boot floppy. Here is the System.map file for it, which can be useful for debugging.
这里只提供了一个linux内核映像，是bzImage格式，作为floppy挂载可以启动内核，但是提示找不到根文件系统。因此，我们需要自己搞定根文件系统。
不想从头做一个根文件系统，就可以将dlxlinux的拷贝过来用。
怎样将root.img挂载到当前的目录中？
因为root.img里面包含着MBR以及第一个分区，而且第一个分区并不是紧跟在MBR后面，怎么能够知道第一个分区的位置呢？
可以查看MBR中的分区表记录
1: dlxlinux $ hd root.img -s 446 | head
2: 000001be 00 01 01 00 83 03 51 31
11 00 00 00 37 51 00 00
|......Q1....7Q..|
3: 000001ce 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
4: *
5: 000001fe 55 aa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |U...............|
6: 0000020e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
7: *
8: 000025fe 00 00 30 0a 00 00 9b 28 00 00 07 02 00 00 a6 1c |..0....(........|
9: 0000260e 00 00 b1 07 00 00 01 00 00 00 00 00 00 00 00 00 |................|
10: 0000261e 00 00 00 20 00 00 00 20 00 00 18 05 00 00 b4 7a |... ... .......z|
11: 0000262e ff 52 79 17 ff 52 1e 00 14 00 53 ef 00 00 01 00 |.Ry..R....S.....|
红色部分分别代表第一个分区的起始扇区号为0x00000011，扇区个数为0x00005137。
因此， 我们可以用下面命令将root.img挂载起来。
1: sudo mkdir root
2: sudo mount -o loop,offset=8704 root.img ./root
其中，8704＝0x11 * 0x200
自己创建一个img，并且将一个文件系统塞进去，并且制作分区表。
http://archive09.linux.com/forums/topic/1519
http://thestarman.pcministry.com/asm/mbr/PartTables.htm
http://aneeska.com/2011/04/07/how-to-create-a-partition-in-an-image-file/
1: losetup /dev/loop0 root.img
2: mkfs.ext3 /dev/loop0
3: mount /dev/loop0 ./root
4: # copy files to ./root
5: umount ./root
6: losetup -d /dev/loop0
给img扩容
1: sudo dd if=/dev/zero of=bigroot.img bs=1024 seek=10404 count=5120
1: fdisk -u bigroot.img -c=dos
打造一个自己的根文件系统，使用指定的Linux内核文件，再加上Grub用于启动。
参考：http://blog.csdn.net/deansrk/article/details/6661293
http://blog.chinaunix.net/uid-26207112-id-3332621.html
但是无法进入
将linux.vdi文件作成linux.img文件，用Bochs进行调试，并且参考System.map中给出的线性地址进行断点设置，发现有执行到/sbin/init初始化任务
1: do_execve
2: do_execve_common
3: open_execve
4: do_filp_open
5: path_openat
返回了-1（#define EPERM 1 /* Operation not permitted */）
即操作不允许错误。
1: static struct file *path_openat(int dfd, const char *pathname,
2: struct nameidata *nd, const struct open_flags *op, int flags)
3: {
4:
5: current->total_link_count = 0;
6: error = link_path_walk(pathname, nd);
7: if (unlikely(error))
8: goto out_filp;
9:
10: }