David Powell wrote:
  Daniel,

On Mon, Oct 16, 2006 at 05:00:44PM -0400, Daniel Synnott wrote:

Just to clarify, I would be creating a project database and assigning my
zones to a particular project with resource controls like the following
partial list.

project.max-shm-ids
project.max-msg-ids
project.max-sem-ids
project.max-shm-memory
process.max-sem-nsems
process.max-sem-ops
process.max-msg-qbytes
project.max-device-locked-memory
project.max-port-ids
process.max-port-events

Do I understand this correctly?  Would I also be correct in assuming
that this must be configured in the global zone?


  Almost.  While entire zones can be assigned to pools, they aren't
  assigned to projects.  The processes within a zone run in projects
  which are defined by the zone.  If this is confusing, think of pools
  as being an abstraction representing a chunk of hardware (at this
  point just CPUs), and projects as being an administrative abstraction
  representing a collection of users.  Just like a zone isn't assigned
  to a particular user, a zone isn't assigned to a project.

  So you can set these resource controls on any project in the system,
  be it in a global zone or a non-global zone.  This will let you
  control how these resources are used by each project, but since a
  zone defines its own projects, this won't give you absolute control
  over how these resources are used by a zone.

Further, there are benefits to create network-wide projects, and using the network-wide projects database in each zone's /etc/nsswitch.conf . Maybe all production databases will use the same limits, and they can be defined and maintained in one central place.

Even if they won't use the same limits, for many sites it will be saner (simpler, less confusing) to store all of those limits in one place, rather than having each zone's project info stored in each zone.

--
--------------------------------------------------------------------------
Jeff VICTOR              Sun Microsystems            jeff.victor @ sun.com
OS Ambassador            Sr. Technical Specialist
Solaris 10 Zones FAQ:    http://www.opensolaris.org/os/community/zones/faq
--------------------------------------------------------------------------
_______________________________________________
opensolaris-help mailing list
[email protected]

Reply via email to