qemu模拟armlinux执行目标文件系统的可执行文件

--------------------以下是2020年更新的内容

不需要自己编译qemu，直接apt安装一个静态编译版本的qemu
apt install qemu-user-static

进入解包的arm固件root，并复制一个qemu副本
cd ~/squashfs-root
cp /usr/bin/qemu-arm-static ./

chroot切换root模式运行qemu-arm-static，并模拟运行rootfs的/usr/bin/lua
chroot . ./qemu-arm-static /usr/bin/lua
Lua 5.1.5  Copyright (C) 1994-2012 Lua.org, PUC-Rio (double int32) security
>

成功了

--------------------以下是第一次写的内容

squashfs
yum install -y xz-devel
wget https://jaist.dl.sourceforge.net/project/squashfs/squashfs/squashfs4.3/squashfs4.3.tar.gz
tar xzvf squashfs4.3.tar.gz
cd squashfs4.3/squashfs-tools
vi Makefile
有一些support是可以打开的例如 LZMA1 LZMA2之类的
make
make install


cd ~/
unsquash rootfs.bin
cd squash-root
cp /usr/local/bin/qemu-arm* ./


[root@centos squashfs-root]# ./bin/aescrypt2 
-bash: ./bin/aescrypt2: cannot execute binary file
[root@centos squashfs-root]# chroot . ./qemu-arm ./bin/aescrypt2 


  aescrypt2 <mode> <input filename> <output filename>


  <mode>: 0 = encrypt, 1 = decrypt


  example: aescrypt2 0 file file.aes

很屌。。qemu模拟了armlinux环境执行了这个嵌入式文件系统的elf可执行文件

 

 

下面是mount jffs2文件系统的脚本 mountjffs2.sh
#!/bin/bash


## Script to mount jffs2 filesystem using mtd kernel modules.
## EMAC, Inc. 2009


if [[ $# -lt 2 ]]
then
    echo "Usage: $0 FSNAME.JFFS2 MOUNTPOINT [ERASEBLOCK_SIZE]"
    exit 1
fi


if [ "$(whoami)" != "root" ]
then
    echo "$0 must be run as root!"
    exit 1
fi


if [[ ! -e $1 ]]
then
    echo "$1 does not exist"
    exit 1
fi


if [[ ! -d $2 ]]
then
    echo "$2 is not a valid mount point"
    exit 1
fi


if [[ "$3" == "" ]]
then
        esize="128"
else
        esize="$3"
fi


# cleanup if necessary
umount /dev/mtdblock0 &>/dev/null
modprobe -r mtdram &>/dev/null
modprobe -r mtdblock &>/dev/null


modprobe mtdram total_size=32768 erase_size=$esize || exit 1
modprobe mtdblock || exit 1
dd if="$1" of=/dev/mtdblock0 || exit 1
mount -t jffs2 /dev/mtdblock0 $2 || exit 1


echo "Successfully mounted $1 on $2"
exit 0




[root@centos ~]# ./mountjffs2.sh 
Usage: ./mountjffs2.sh FSNAME.JFFS2 MOUNTPOINT [ERASEBLOCK_SIZE]
[root@centos ~]# mkdir /mnt/jffs2
[root@centos ~]# ./mountjffs2.sh  file_system.img  /mnt/jffs2 128
3072+0 records in
3072+0 records out
1572864 bytes (1.6 MB) copied, 0.0215566 s, 73.0 MB/s
Successfully mounted file_system.img on /mnt/jffs2


[root@centos squashfs-root]# cp /mnt/jffs2/hw_ctree.xml ./hw_ctree.xml.gz
[root@centos squashfs-root]# chroot . ./qemu-arm ./bin/aescrypt2 1 ./hw_ctree.xml.gz ./tmpfile
[root@centos squashfs-root]# gunzip hw_ctree.xml.gz 
[root@centos squashfs-root]# cat hw_ctree.xml