Re: [zones-discuss] Re: Non-global zone sending TCP SYN-ACK packet over

2006-05-11 Thread James Carlson
ng on the same interface (the rest of the TCP/IP stack, incidentally, does this by treating the group name as the interface) or somehow redesigning IPMP and IP Filter together so that IP Filter actually sees only one interface. > - having multiple interfaces on the same link requires IPMP Basica

Re: [zones-discuss] query re zones and trusted solaris

2006-05-12 Thread James Carlson
the user. This means that zones on a TX system are essentially an implementation detail, and can't be used to create independent Solaris environments. -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 44

Re: [zones-discuss] Re: Non-global zone sending TCP SYN-ACK packet over

2006-05-12 Thread James Carlson
n that case, you'll have the 'ipf' module plumbed atop the 'aggr0' driver, so you'll have a single stream. If you were to use the older Sun Trunking solution, it would work only if there were a single IP stream plumbed for the trunk. -- James Carlson, KISS Network

Re: [zones-discuss] query re zones and trusted solaris

2006-05-12 Thread James Carlson
ervices contained within a zone, but could be used for other things. For the shared IP address(es), packets are distinguished by the IP security label option. Each zone has a label, and the label on the packet maps it to a particular zone. -- James Carlson, KISS Network<[E

Re: [zones-discuss] SecurityFocus Article

2006-05-19 Thread James Carlson
have that in a non-global zone. -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677

Re: [zones-discuss] zlogin error ld.so.1

2006-05-26 Thread James Carlson
FCS (beta test) images? If not then this is confusing. Something about that file isn't right. -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N

[zones-discuss] review requested: minor changes for Zones upgrade ("Zulu")

2006-06-04 Thread James Carlson
ready use LD_PRELOAD and other tricks to fake the contents of this file, so having that user overwrite the file directly introduces no new vulnerabilities. The UUID is not (and cannot be made) "secure" within the zone, for the same reason that the hostid isn&#x

[zones-discuss] updated proposal: Zones features for upgrade (Zulu)

2006-06-09 Thread James Carlson
seable output format (a nit, I hope) to the end of the list. A variation of this document has been submitted for PSARC review. In it, I removed some of the references to the code itself, and added stability levels. Both variants are attached. -- James Carlson, KISS Network&

Re: [zones-discuss] Zones and Solaris upgrade

2006-06-12 Thread James Carlson
which includes Solaris Express). -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 ___ zone

[zones-discuss] Zones features for Zulu code review

2006-06-13 Thread James Carlson
ecting problems, but I just want to make it clear that I'm not running open-loop here.) -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N

[zones-discuss] Re: Zones features for Zulu code review

2006-06-24 Thread James Carlson
"zonecfg_root" is a substring of "zonepath". For example, > imagine the case of > > global# zonecfg -R /alt/roo set -F zonepath=/alt/root/zones/mypath Well, now that's twisted. ;-} Yes, that would allow a bad path through. I've changed it l

Re: [zones-discuss] Re: Zones features for Zulu code review

2006-06-26 Thread James Carlson
James Carlson writes: > > Upon further reflection, I realize now that the command "state" > > doesn't really work as a verb in this context. I wish that we > > had called the command "set-state" or "setstate" or even > > b

Re: [zones-discuss] zone stuck in 'mounted' state

2006-06-28 Thread James Carlson
# zoneadm -z vera1 $ANYTHING > zoneadm: zone 'vera1': $ANYTHING operation is invalid for zones in > state 'mounted' > zoneadm: zone 'vera1': call to zoneadmd failed Try "unmount". -- James Carlson, KISS Network<[EMAIL PROTECT

Re: [zones-discuss] Zones, clusters, and maintainability

2006-06-29 Thread James Carlson
tain that the necessary HBA drivers to mount the required file systems are in the miniroot you plan to use. If they're not, then you'll need to modify the miniroot to add them. -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive

Re: [zones-discuss] Addition of features in mainstream Solaris 10

2006-07-05 Thread James Carlson
of patches. There are no Major or Minor releases for Solaris 10 -- just patches, until the next Minor release comes out. -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212

Re: [zones-discuss] zoneadm install fails with legacy mounted ZFS filesystem

2006-07-15 Thread James Carlson
o set up how you want to mount it), or mount individual legacy file systems into the zone. Doing both means that the dataset is placed into the non-global zone, and then the system tries to access the dataset from the global zone, which (I think) causes the failure. -- James Carlson, KISS Network

Re: [zones-discuss] zoneadm install fails with legacy mounted ZFS filesystem

2006-07-15 Thread James Carlson
re mounting the filesystem: That seems quite likely. Can you file a bug on it? As a workaround, is it possible to install the zone first and then add the desired file system? -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W V

Re: [zones-discuss] The ability to lock non-global zones

2006-07-20 Thread James Carlson
t of a grey area. (You mention patches, but patches likely aren't the only issue here.) Are you looking for someone to file the RFE, or are you planning to visit bugs.opensolaris.org? -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Dr

Re: [zones-discuss] The ability to lock non-global zones

2006-07-20 Thread James Carlson
on accordingly. ;-} > We would still need to decide what should happen if this new option is used > and > SUNW_PKG_ALLZONES=true. Do we obey the pkg creator or the person running > pkgadd? > To be consistent with the way -G works, pkgadd should fail. Yes, certainly. I

Re: [zones-discuss] traffic/data between zones

2006-07-26 Thread James Carlson
obal zone) and can > just copy files back and forth between the zones without hitting the > NIC/wire. "huh?" Perhaps the right question in response is: "what problem are you seeing, and what are you trying to do?" It's quite unclear to me what would prompt a questio

Re: [zones-discuss] traffic/data between zones

2006-07-26 Thread James Carlson
r level (such as IP) sends and a copy of every packet received on the wire. It's not necessarily enforced that every packet you see via DLPI loopback is in fact transmitted -- some might not be -- but the ones that you don't see aren't sent. -- James Carlson, KISS Network

Re: [zones-discuss] traffic/data between zones

2006-07-26 Thread James Carlson
Lei Liu writes: > DTrace is the tool instrumenting the request. [...] > > I would check for calls to put(9F) and putnext(9F) from within the IP > > module (which includes TCP). ... then those are the calls you want. -- James Carlson, KISS Network<[EMA

Re: [zones-discuss] Question on user account config with zones

2006-07-31 Thread James Carlson
ed on something flimsy (and user-administrable) like the host name. Instead, I think we need a way to ask the system (perhaps a new ioctl?) whether a given known IP address represents a local address or a remote one. Or just fix the deadlock. ;-} > Seems like the kernel has to help out here.

Re: [zones-discuss] /usr read only

2006-08-03 Thread James Carlson
l set type=lofs end Then you can have separate directories (/export/home/my-zone-local, /export/home/your-zone-local) out in the global zone that hold the separate /usr/local bits for each non-global zone. -- James Carlson, KISS Network<[EMAIL PROTECTED]> S

Re: [zones-discuss] FYI: # of logical interfaces in a zone

2006-08-03 Thread James Carlson
Steffen Weiberle writes: > PS. I was impressed with the linearity of ifconfig going through 8K > interfaces. This is due to the work of the SolarMAX project, which converted the kernel ipif database from a linear list to AVL trees. -- James Carlson, KISS Network&

Re: [zones-discuss] /usr read only

2006-08-03 Thread James Carlson
h is read only and installation does fail on that... In that case, whole root zones are probably the way to go, along with making sure there isn't already a CR filed against the package in question. -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1

Re: [zones-discuss] Re: Re: Question: Zones/Mpxio + Disk Array (HDS 9970V

2006-08-04 Thread James Carlson
support for Zones is made available. We don't want anyone to get in an "un-upgradeable" situation, even if temporary. -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 4

Re: [zones-discuss] Re: Solaris 10 1/06 to 6/06 upgrade problems

2006-08-08 Thread James Carlson
mpxio is in the miniroot? ...and > if it is, it doesn't appear to be working. It sounds to me like you need to talk to the group that supports mpxio, rather than install or zones. -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 N

Re: [zones-discuss] Live Upgrade and Zones

2006-08-09 Thread James Carlson
Jesus Cea writes: > Is there any plan to support live upgrade on machines with Solaris > zones? Yes. The project code name is "Zulu." > If affirmative, any timetable?. I don't think we can share that at this time, but it's "soon." The plan is to have i

Re: [zones-discuss] Creating a zone with the -b option

2006-08-30 Thread James Carlson
Is it supported ? Everything documented in man pages (such as the -b option) is supported, unless somehow explicitly disclaimed. -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212

Re: [zones-discuss] minimal os/sw install in global zone and different in non-global

2006-08-30 Thread James Carlson
NW_PKG_ALLZONES set (see pkginfo(4)), then it must be installed in the global zone. If it delivers bits that are used in the kernel (drivers or kernel modules), then it also must be installed in the global zone. -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun

Re: [zones-discuss] zlogin -l for issuing commands into Zones

2006-09-04 Thread James Carlson
FS file, or if you have any file descriptors open on any NFS files, then you'll be denied entry to the non-global zone with that error code. What NFS mounts do you have? -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.2

Re: [zones-discuss] Re: zlogin -l for issuing commands into Zones

2006-09-05 Thread James Carlson
stdio, but that application directory could also be an issue.) -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 ___

Re: [zones-discuss] Re: Zone in a mounted state ?

2006-09-06 Thread James Carlson
lu' refers to?) Yes, originally. > but I saw this when > a package install crapped out. Possibly $ZONEPATH/lu is involved then. > > As Enda said, I got around it by running a 'zoneadm -z myzone unmount'. It is indeed internal. If you see it, then that's a bug. --

Re: [zones-discuss] /etc/zones/index and uuid

2006-09-14 Thread James Carlson
ss renames and to ensure that we don't accidentally "synchronize" (LU) zones that have been uninstalled and then reinstalled. I can't guarantee that this is the only thing that will break, as we may end up adding other things later that are dependent on UUID, but it's the f

Re: Re[2]: [zones-discuss] /etc/zones/index and uuid

2006-09-15 Thread James Carlson
er want to change this, except perhaps for some sort of internal zones-related testing. If that's the purpose here, then all bets are off, as our own testing gate uses all sorts of undocumented internal interface to do its work. If there's some other reason to do this, then please exp

Re: [zones-discuss] add an 'inherit-pkg' to an existing zone. Can this be done?

2006-09-21 Thread James Carlson
is? You can't do that. > I'm really looking for how to add an 'inherit-pkg' to an existing > zone. Can this be done? No. The packaging database is built around knowing the inherit package directories at the time the zone is installed. -- James Carlson, KISS Network

Re: [zones-discuss] Convert sparse root to full root zone without reinstall?

2006-09-21 Thread James Carlson
g-dir. > We want to convert /usr from inherit-pkg-dir to a copied filesystem like in a > full root zone. > How can we do this? Imagine: Without uninstalling and reinstalling the zone, there's no supported way to do that. -- James Carlson, KISS Network<[E

Re: [zones-discuss] Re: Convert sparse root to full root zone without reinstall?

2006-09-21 Thread James Carlson
ystem(5) -- non-OS software shouldn't be delivering to /usr/bin. If it delivers somewhere else, then I'd expect that the workaround above would solve the problem. > In these cases the only solution is reinstalling local zone or - if possible > - converting /usr from inherited to

Re: [zones-discuss] Re: Re: Convert sparse root to full root zone without reinstall?

2006-09-21 Thread James Carlson
is. > Most documents are about Linux' Filesystem Standard. > With this manpage originated by Sun we may get software vendor to fix their > software for beeing usable in local zones. In the meantime, using whole-root zones where such software is required is probably the least tro

Re: [zones-discuss] zones network documentation redux

2006-09-22 Thread James Carlson
etween_ zones using loopback. You need a network interface to do that. Fortunately, it doesn't need to be a real interface. Doing something like this should work: # ifconfig ip.tun0 plumb 192.168.0.1 192.168.0.2 up # ifconfig ip.tun0:1 plumb 192.168.0.2 192.168.0.1 zone test up -- Jam

Re: [zones-discuss] zones, network and routing

2006-09-25 Thread James Carlson
ot; for each could consist of a single default route.) > No dice, because these IPs are non routable? Can I setup ipf on the > GZ to do this? No ... IP Filter currently does not intercept traffic flowing locally between zones. -- James Carlson, KISS Network<[EMA

Re: [zones-discuss] /etc/zones/index content

2006-09-27 Thread James Carlson
ngerprint' you're referring to is the UUID, then this is a known problem. It's CR 6379341, which is fixed in Solaris 10 Update 06/06, and patches 122662-02 (SPARC) and 122663-05 (x86). It's nothing to be worried about; the updates correct the problem, and the software knows how

Re: [zones-discuss] Company offering Zones hosting

2006-10-05 Thread James Carlson
g? Unless they're actually using Open Solaris directly, and there's some sort of obvious tie-in, it sounds to me more like a www.sun.com sort of thing. -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1

Re: [zones-discuss] zone_enter problem

2006-10-06 Thread James Carlson
ll will fail with EFAULT. You also can't use any descriptor-passing mechanism to pass in an NFS-related file descriptor from one zone to another. See PSARC 2004/357 for details. -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive

Re: [zones-discuss] Company offering Zones hosting

2006-10-06 Thread James Carlson
Stephen Hahn writes: > * James Carlson <[EMAIL PROTECTED]> [2006-10-05 13:47]: > > Dan Price writes: > > > On Thu 05 Oct 2006 at 07:16PM, Alan Burlison wrote: > > > > Someone using Solaris 10 & Zones for hosting provision, cool to see

Re: [zones-discuss] Re: RFE?: Prevent installation of packages

2006-10-18 Thread James Carlson
line for adding features to that release passed ages ago. It's been in testing since then. In general, if you want new features quickly, you'll want to use Solaris Express. And the feature hasn't hit Solaris Express yet. -- James Carlson, KISS Network<[E

Re: [zones-discuss] Re: Re: RFE?: Prevent installation of packages

2006-10-18 Thread James Carlson
depends on an implementation detail and thus might stop working at any time and _may_ interfere with upgrade. -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757

Re: [zones-discuss] Zones and VLAN tagging.

2006-10-23 Thread James Carlson
ot the problem the user is seeing. The problem the user is experienced appears to be CR 6367840 -- fixed in Nevada, but not S10. -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR

Re: [zones-discuss] What is the proceess to change the physical net to an already working zone?

2006-11-02 Thread James Carlson
cfg:test:net> set physical=bge1 zonecfg:test:net> end zonecfg:test> verify zonecfg:test> commit zonecfg:test> exit # zoneadm -z test reboot The second case: # ifconfig bge0:1 unplumb # ifconfig bge1:1 10.12.13.14 netmask + broadcast + zone test up -- James Carlson, KISS Network

Re: [zones-discuss] zone creation

2006-11-07 Thread James Carlson
> the cmd file script. None -- just remove the "-b." -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 __

Re: [zones-discuss] zone UUID in older releases

2006-11-08 Thread James Carlson
cessible in userland. UUID is in the zoneent structure, which is entirely in user space. The kernel's zone_t structure (in ) doesn't have the UUID, and the kernel neither knows nor cares about Zone UUIDs. http://src.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/hea

Re: [zones-discuss] Re: [networking-discuss] Re: [crossbow-discuss]Design review of IP Instances part of Crossbow

2006-11-08 Thread James Carlson
nk it'd end up representing more confusion with Clearview, as there'd be no easy way to coordinate interface names across multiple zones, so ifta_lifr_name would be ambiguous.) -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystem

Re: [zones-discuss] zone UUID in older releases

2006-11-08 Thread James Carlson
copies. It is destroyed if the zone is uninstalled. This way, we can tell when a zone in two BEs is the same zone but just under a different name (thus still needing synchronization), and when someone destroys and re-creates a zone under the same name (thus not needing synchronization). -- James

Re: [zones-discuss] Re: [networking-discuss] Re: [crossbow-discuss]Design review of IP Instances part of Crossbow

2006-11-08 Thread James Carlson
Erik Nordmark writes: > James Carlson wrote: > > > I don't think that argument works on two counts. First, exclusive-IP > > behavior does not offer complete IP isolation, because you can't (for > > instance) install your own copy of Firewall-1 or Cisco VPN into

Re: [zones-discuss] Re: [networking-discuss] Re: [crossbow-discuss]Design review of IP Instances part of Crossbow

2006-11-08 Thread James Carlson
Erik Nordmark writes: > James Carlson wrote: > > Erik Nordmark writes: > > >> But the key thing to me is the consistency between where things can be > >> observed and where they can be modified. > > > > We already have RFEs filed against other utilit

Re: [zones-discuss] Re: [networking-discuss] Re: [crossbow-discuss]Design review of IP Instances part of Crossbow

2006-11-08 Thread James Carlson
l zone, the ability to kill a process in a non-global > zone is controlled by the "proc_zone" privilege. Normally, only a user > with all privileges will have this ability unless modified via RBAC. Thanks. ;-} I _knew_ it wasn't as simple as killing a process in the global zo

Re: [zones-discuss] Re: [networking-discuss] Re: [crossbow-discuss]Design review of IP Instances part of Crossbow

2006-11-08 Thread James Carlson
manipulate and observe the running state.) Right. The difference is that the zonecfg is just behaving as a repository for configuration that properly "belongs" to some other subsystem, rather than behaving as the configuration tool itself. (Yeah, there's a fuzzy line here as w

Re: [zones-discuss] Re: Zones and Solaris upgrade

2006-12-01 Thread James Carlson
Peter Baer Galvin writes: > Hi, any update on the status of the Zulu project!? thanks. It integrated into build 53. Work is continuing now on cleaning up some related bugs and backporting for S10. -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsy

RE: [zones-discuss] Re: Zones and Solaris upgrade

2006-12-01 Thread James Carlson
ufs:myzone -- and lufslist gets the ability to print them out. Other than that, it should be just as it was before, except that you can now live-upgrade a system with non-global zones. -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive

Re: [zones-discuss] zone delete/rename problems

2006-12-04 Thread James Carlson
; gets a usage error. I'm having him try using another shell (/bin/sh), > but I didn't know if there was anything I was missing. [...] > zonecfg:monitoring-inc> set zonename=monitoring > usage: > set = You need to have bits that have the zone renaming feature in order to

Re: [zones-discuss] Zone installation problem.

2006-12-05 Thread James Carlson
file system is mounted? -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 ___ zones

Re: [zones-discuss] change defaultrouter in a non-global zone

2006-12-09 Thread James Carlson
is no mechanism (yet) to do that. Non-global zones don't have their own kernel forwarding tables, and only the global zone can manipulate shared resources such as the kernel forwarding table. See CRs 4991139 and 6289221. -- James Carlson, KISS Network<[EMAIL PROTECTED]&

Re: [zones-discuss] How to get new ZFS Solaris 10 U3 features going from Solaris 10 U2

2006-12-15 Thread James Carlson
d for a future S10 Update) will extend this support to Live Upgrade, so that all the upgrade mechanisms are supported. -- James Carlson, KISS Network<[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803

Re: [zones-discuss] DHCP-/BOOTP-server in a local zone ?

2006-12-18 Thread James Carlson
> this today. in.dhcpd does SIOCSXARP to hotwire the ARP entry, which means at least sys_net_config is required. sys_net_config is on the list of privileges that cannot be added to a zone: % grep sys_net_config /usr/lib/brand/native/config.xml % It seems unlikely t

Re: [zones-discuss] Re: zone to zone networking slow!!

2007-01-04 Thread James Carlson
count for that.) There really ought to be no difference among those numbers, as it's the same stack being driven in the same code paths. Zones are not an emulation layer. It's puzzling that you're seeing a difference at all. -- James Carlson, KISS Network<[EMAI

Re: [zones-discuss] Re: zone to zone networking slow!!

2007-01-04 Thread James Carlson
Jeff Victor writes: > Yes, I did. As I said in that msg, "don't read too much into those numbers." > > You went and read too much into them, didn't you? :-) Yeah, ok, I'm like that. ;-} -- James Carlson, KISS Network<[EMAIL PROTECTED

Re: [zones-discuss] Patching the system

2007-01-05 Thread James Carlson
l (undocumented) "mounted" state, in which all file systems are mounted, but no processes are running in the zone. I can probably make the design document that describes "scratch zones" public if you need it. -- James Carlson, KISS Network<[EMAIL PROTECTE

Re: [zones-discuss] Re: Ashanti and Zulu Details Needed

2007-01-08 Thread James Carlson
olves shutting the system down, booting from the install media, and doing an off-line upgrade) and Live Upgrade (which makes a copy of the system, upgrades that while the system continues to run, then switches from one image to the other). > If possible, having access to the PSARC 2005/474 Spec wo

Re: [zones-discuss] How to update zone configuration

2007-01-09 Thread James Carlson
necfg:zy91> verify zonecfg:zy91> commit zonecfg:zy91> exit -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677

Re: [zones-discuss] Re: Re: Ashanti and Zulu Details Needed

2007-01-11 Thread James Carlson
th that we really want to go with Zones that I don't think it's something worth doing. But, if you do, then propose an "ACR for detached zones" project and have at it. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 1 Network

Re: [zones-discuss] Re: Re: Ashanti and Zulu Details Needed

2007-01-11 Thread James Carlson
James Carlson writes: > It might be possible to hack up a version of ACR to do some of that > instead, but that solution sounds far enough off the path that we > really want to go with Zones that I don't think it's something worth > doing. But, if you do, then propose an &

Re: [zones-discuss] Zones and Resource Pools

2007-01-17 Thread James Carlson
ts or other ancillary run-time information. I expect to use pool-resource-related tools (perhaps with Zones extensions) to do that, or zonecfg if I'm interested in the start-time configuration of the zone. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems

Re: [zones-discuss] putting local zone filesystem in global zone vfstab

2007-01-22 Thread James Carlson
ot at all if there's something mounted inside the zone. Use 'zonecfg' instead. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burli

Re: [zones-discuss] Re: Zones on NFS

2007-01-23 Thread James Carlson
o alternative on the horizon. I think you should also take this up with the NFS community. I believe that they have talked about the problem, though I don't (immediately) see a related project on opensolaris.org. It definitely needs their input. See also CR 4963321. -- James Carlson, S

RE: [zones-discuss] Re: Zones on NFS

2007-01-23 Thread James Carlson
lready (I thought > there was) please let me know and I'll have one opened. (others can then > attach to it in order to hopefully influence its priority) I cited the RFE in my previous message -- it's CR 4963321. -- James Carlson, Solaris Networking <[EMAIL PROTE

Re: [zones-discuss] Re: Zones on NFS

2007-01-23 Thread James Carlson
Jeremy Teo writes: > > I cited the RFE in my previous message -- it's CR 4963321. > James, would you mind sharing the rest of the info in CR 4963321? > b.o.o. says "see comments" :) Wretched, I know. I'll see what I can do with it. -- James Carlson, Solaris

Re: [zones-discuss] Netmask conversion fix

2007-01-25 Thread James Carlson
uot;C4",pack("N",~((1<<(32-$ARGV[0]))-1))); print "$c1.$c2.$c3.$c4\n";' $cidr There probably ought to be better ways of handling IP values in your shell of choice. -- James Carlson, Solaris Networking

Re: [zones-discuss] Zoneadm and lucreate

2007-01-31 Thread James Carlson
y help in this ? It's part of the Install consolidation and, unfortunately, is tied up as closed source because we don't own full rights to Live Upgrade. At the time this was implemented, there was no "Open Solaris," so the licensing issues around LU (and basing this part of Zo

Re: [zones-discuss] LU non-global zone timeline

2007-02-02 Thread James Carlson
unwise in the best of circumstances. ;-} -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 __

Re: [zones-discuss] hostnames and zones

2007-02-02 Thread James Carlson
re are other possible choices. The global zone's /etc/nsswitch.conf and associated configuration files are inaccessible from within a non-global zone, and thus have no effect there. I think things may be different in TX zones, though. -- James Carlson, Solaris Networking <[EMAIL

Re: [zones-discuss] NFS server in zones

2007-02-15 Thread James Carlson
is what's done for TX, but it's in a very narrow usage case. The general case hasn't been solved. I don't think it's a special problem that's particular to allowing non-global zones to be NFS servers. -- James Carlson, Solaris Networking <[EMAIL PROTEC

Re: [zones-discuss] Zone in mounted state

2007-03-07 Thread James Carlson
uch as SIGKILL). If it's the latter, I wouldn't trust the system too much after having interrupted a packaging change. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS

Re: [zones-discuss] Re: Zone start order

2007-03-08 Thread James Carlson
optimization rather than a fundamental way zones should interact. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 _

[zones-discuss] Re: SOA (was: Zone start order)

2007-03-08 Thread James Carlson
t seems much more appropriate to me. The mechanisms involved would have to be in the SMF infrastructure itself -- making the restarter and dependency tree aware of distributed applications -- and the usage of the new feature would be independent of (though perhaps useful for)

Re: [zones-discuss] Re: SOA (was: Zone start order)

2007-03-08 Thread James Carlson
system. with the features of Solaris Cluster this is a nobrainer. > We can even have dependencies between smf services across zones. I agree there's likely a real need for this. I'm just wary that it'll leak into places where it's _not_ the right answer. -- James Carl

Re: [zones-discuss] [Fwd: [install-discuss] virtual interfaces in non-global zone ?]

2007-03-16 Thread James Carlson
> end That's not quite what the original requestor wanted. He wanted multiple addresses on the same interface. Fortunately, I think that works just by using the same 'physical' for multiple 'add net' sections. -- James Carlson, Solaris Networking <[EMAI

Re: [zones-discuss] Re: [install-discuss] DHCP Server in zone, WAS: Install software from SXCE DVD?

2007-03-17 Thread James Carlson
tance of Firewall-1 there, that won't work), and the NFS server hasn't been virtualized (meaning that you can't yet have an NFS server in a non-global zone). -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W

Re: [zones-discuss] Preventing a Local zone hang from having to reboot the global zone

2007-04-12 Thread James Carlson
reference to the zone_t -- preventing it from finishing. That's a driver bug that has to be fixed, not something that can be worked around. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 M

Re: [zones-discuss] Re: Re: Re: zone hung in shutting_down status

2007-04-24 Thread James Carlson
ing this. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 ___ zones-discuss mail

Re: [zones-discuss] Local zone to global zone interaction

2007-04-25 Thread James Carlson
nter the zone and modify the file there. Something like this: # echo Global Zone: `hostname` since `date` | zlogin phd-corner-z \ 'cat > /etc/globalzone_info' Plus, it's easier. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 1 Ne

Re: [zones-discuss] pidentd

2007-05-04 Thread James Carlson
nal kernel code evolves. The right thing to do is to create a set of stable interfaces to get PID lists for sockets. We don't currently have such a thing in Solaris, but it looks like this is something that other programs (such as lsof) need. -- James Carlson, Solaris Networking

Re: [zones-discuss] pidentd

2007-05-04 Thread James Carlson
ev/kmem for these sorts of applications (pidentd isn't the only one; there's also lsof and probably ntop as well) would be a _very_ nice thing to have. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive 71.232W Vox +

Re: [zones-discuss] pidentd

2007-05-04 Thread James Carlson
ng something other than /dev/kmem for > >these sorts of applications (pidentd isn't the only one; there's also > >lsof and probably ntop as well) would be a _very_ nice thing to have. > > > Yep. But defining an interface is hairy, specially considering locking > and p

Re: [zones-discuss] pidentd

2007-05-04 Thread James Carlson
ou don't have that, then you have to go to higher layers (using address alone, assuming single-user systems, uRPF, and address assignment that relates to the user) or higher still (service providers). -- James Carlson, Solaris Networking <[EMAIL PROTECTED]&g

Re: [zones-discuss] zones network documentation

2007-05-25 Thread James Carlson
shows a rather complicated mechanism for causing it. A simple > "nslookup something " works as well. If it's that easy to encounter, then this needs to be looked at much more urgently. I've bumped up the priority of this bug to P2. -- James Carlson, Solaris Networkin

[zones-discuss] Re: [install-discuss] updating a zone when attaching

2007-06-04 Thread James Carlson
o modify pkgadd/pkgrm (or deliver new bits from Install) to expose the features you need. I assume that the reason you're not doing this is that delivery of Install updates on which this new feature depends would be more difficult. Is that right? -- James Carlson, Solaris Networking

[zones-discuss] Re: [install-discuss] updating a zone when attaching

2007-06-04 Thread James Carlson
g this is a relatively short-term > solution and that as the longer term caiman project evolves this > kind of feature will move back into the core install capability. I didn't see it on that roadmap, but ok ... -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> S

[zones-discuss] Re: [install-discuss] updating a zone when attaching

2007-06-04 Thread James Carlson
of ON. I'd suggest asking Enda O'Connor about these, so that (if it is a problem) you can at least detect it and fail out. > I will add some material > explaining this assumption to the proposal. OK. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]&

Re: [zones-discuss] zoneadm install

2007-06-04 Thread James Carlson
ll live, among other important zone-private things. Did you add this to the zone configuration on your own (if so, why?), or did some script do it for you (if so, what script?)? -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 1 Network Drive

  1   2   3   >