Re: [zones-discuss] Setting process.max-file-descriptor per zone?

2007-08-02 Thread Andrew J .Dibbins
Hi Zoram, I understand that you set these values in each zones /etc/project file like this: bash-3.00# cat /etc/project system:0 user.root:1: noproject:2 default:3process.max-file-descriptor=(basic,1024,deny) group.staff:10 Hope this helps. Andy Zoram Thanga wrote: Hi,

Re: [zones-discuss] Setting process.max-file-descriptor per zone?

2007-08-02 Thread Zoram Thanga
Hi Steve, Thanks for the suggestions. Steve Lawrence wrote: We currently don't have a mechanism for stating the default rctls for all processes on a per-zone basis. Are these apps still being started out of inittab in the zone? Yes. These are apps from the largest database software maker

Re: [zones-discuss] zonecfg question

2007-08-02 Thread Yanakiev, Vladimir
Here is the output: [EMAIL PROTECTED] zonecfg -z labv490-01z5 delete -F labv490-01z5: Zone state is invalid for the requested operation [EMAIL PROTECTED] -Original Message- From: Mike Gerdts [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 01, 2007 5:30 PM To: Yanakiev, Vladimir Cc:

Re: [zones-discuss] zonecfg question

2007-08-02 Thread Enda O'Connor ( Sun Micro Systems Ireland)
Hi What does zonadm -z labv490-01z5 have to say, ie is the zone in a state other than installed? so the complete steps for an installed zone are: zoneadm list -cv ( just to see zone state ) zoneadm -z labv490-01z5 halt ( if not in installed state ) zoneadm -z labv490-01z5 uninstall -F zonecfg

Re: [zones-discuss] zonecfg question

2007-08-02 Thread Yanakiev, Vladimir
That was my first question - I can not figure out how this did happened. We have the xml, but the entry in the index file is missing. Maybe, the zoneadm -z...delete command got interrupted in the middle?... Fixing the problem by deleting the file is obvious, but the second question is, isn't it

Re: [zones-discuss] zonecfg question

2007-08-02 Thread Enda O'Connor ( Sun Micro Systems Ireland)
Yanakiev, Vladimir wrote: Here it is: [EMAIL PROTECTED] zoneadm list -cv ID NAME STATUS PATH 0 global running/ 1 labv490-01z3 running/export/zones/labv490-01z3/main 2

Re: [zones-discuss] zonecfg question

2007-08-02 Thread Enda O'Connor ( Sun Micro Systems Ireland)
Yanakiev, Vladimir wrote: That was my first question - I can not figure out how this did happened. We have the xml, but the entry in the index file is missing. Maybe, the zoneadm -z...delete command got interrupted in the middle?... Fixing the problem by deleting the file is obvious, but the

Re: [zones-discuss] zonecfg question

2007-08-02 Thread John Chase
While I don't have a reason why the index entry is missing I'd just like to add that the index entry stays until a delete occurs. zonecfg -z xxx delete -John Yanakiev, Vladimir wrote: No, there are no Veritas products on this server: [EMAIL PROTECTED] pkginfo |grep VRTS [EMAIL PROTECTED]

Re: [zones-discuss] zonecfg question

2007-08-02 Thread Yanakiev, Vladimir
No, there are no Veritas products on this server: [EMAIL PROTECTED] pkginfo |grep VRTS [EMAIL PROTECTED] zfs list |grep z5 DG1/demo 24.5K 63.2G 24.5K /export/zones/labv490-01z5/fs/export/demo -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent:

Re: [zones-discuss] zonecfg question

2007-08-02 Thread Yanakiev, Vladimir
Yes, John, that's my understanding too - zonecfg is supposed delete both the entry in the index file, and the xml. But, somehow we ended with this awkward status. It makes sense to me if zonecfg detects such status, to send one extra Status missing - are you sure to delete?-type of message, and

[zones-discuss] CA etrust compatible with zones?

2007-08-02 Thread Joe Nyilas - RAS SSE
I have a customer interested in adopting zones as a core technology. They currently use CA's etrust 8.0 SP1 product to enforce security policies as well as compliance logging on all their Solaris systems. Would anyone know if this will work on either a sparse or full root zone? The OS used by

Re: [zones-discuss] CA etrust compatible with zones?

2007-08-02 Thread Joseph Balenzano
Joe, 8.0 SP1 supports Solaris Zones for x86 and SPARC. Joe Nyilas - RAS SSE wrote: I have a customer interested in adopting zones as a core technology. They currently use CA's etrust 8.0 SP1 product to enforce security policies as well as compliance logging on all their Solaris systems.

Re: [zones-discuss] CA etrust compatible with zones?

2007-08-02 Thread Jeff Victor
Also, note that the list in the FAQ is only a *very* small subset of the software packages which have been successfully tested in a zone. Joseph Balenzano wrote: Joe, 8.0 SP1 supports Solaris Zones for x86 and SPARC. Joe Nyilas - RAS SSE wrote: I have a customer interested in adopting

[zones-discuss] Can the network interface of a local zone get a dynamic ipv4 address?

2007-08-02 Thread Lu, Baolu
Hi, A simple question about the local zone. How to make the local zone network interface get a dynamic ipv4 address? For example, the global zone has one phisical network interface, e1000g0. It gets the dynamic ipv4 address from the DHCP server located on another server. Does the following

Re: [zones-discuss] zonecfg question

2007-08-02 Thread Dan Price
On Thu 02 Aug 2007 at 10:35AM, Yanakiev, Vladimir wrote: Yes, John, that's my understanding too - zonecfg is supposed delete both the entry in the index file, and the xml. But, somehow we ended with this awkward status. It makes sense to me if zonecfg detects such status, to send one extra

Re: [zones-discuss] Can the network interface of a local zone geta dynamic ipv4 address?

2007-08-02 Thread Lu, Baolu
Thanks for reply. I use snv_68 32 bits. The zonecfg doesn't support set ip-type command. Which build is this feature available since on? On Friday, August 03, 2007 12:21 PM, Dan Price wrote: On Fri 03 Aug 2007 at 11:24AM, Lu, Baolu wrote: This doesn't work for me on my system. The

Re: [zones-discuss] Can the network interface of a local zone geta dynamic ipv4 address?

2007-08-02 Thread Dan Price
On Fri 03 Aug 2007 at 12:39PM, Lu, Baolu wrote: Thanks for reply. I use snv_68 32 bits. The zonecfg doesn't support set ip-type command. Which build is this feature available since on? Since Build 57. Are you sure it isn't there? Try this: zonecfg help set|grep ip You should