Re: [zones-discuss] zone stuck in shutting_down state

2007-07-20 Thread Jeff Victor
-- > > ___ > zones-discuss mailing list > zones-discuss@opensolaris.org -- -- Jeff VICTOR Sun Microsystems

Re: [zones-discuss] One zpool and multiple zones

2007-07-25 Thread Jeff Victor
is being added to the zones framework. This will allow you to give a zone exclusive access to a NIC and allow the zone to control its own network connection. ------ Jeff VICTOR Sun Microsystems

Re: [zones-discuss] memory limits in zones

2007-07-26 Thread Jeff Victor
ate bytes (,) > > > Does anyone have some insight on this? > > thanks > -- -- Jeff VICTOR Sun Microsystemsjeff.victor @ sun.com OS AmbassadorSr. Tech

Re: [zones-discuss] zonename

2007-07-27 Thread Jeff Victor
>> *Michael Barto* >> Software Architect >> >> LogiQwest Circle >> LogiQwest Inc. >> 16458 Bolsa Chica Street, # 15 >> Huntington Beach, CA 92649 >> http://www.logiqwest.com/ >> >> [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> >> Tel: 714 377 3705 >> Fax: 714 840 3937 >> Cell:

Re: [zones-discuss] Creating a sparse root zone via a package's postinstall script

2007-08-01 Thread Jeff Victor
ckage install > for the particular package being installed, not for doing other sysadmin > work such as creating zones. > > Basically even if this worked, and assuming we waited till the zone got > created before exiting postinstall, pkgadd would run for perhaps half > hour

Re: [zones-discuss] Zones and Routing

2007-08-01 Thread Jeff Victor
nformation, including IP address, routing, naming, etc. This will allow you to do what you are trying to do. -- Jeff VICTOR Sun Microsystemsjeff.victor @ sun.com OS Ambassador

Re: [zones-discuss] CA etrust compatible with zones?

2007-08-02 Thread Jeff Victor
ity >> matrix: >> http://supportconnectw.ca.com/public/etrust/etrust_ac/infodocs/etrustac-matrix.asp >> >> which references zones, but for a different version of the product. >> >> Any and all RTFM pointers appreciated. >> >> /jn >> > > --

Re: [zones-discuss] Can the network interface of a local zone getadynamic ipv4 address?

2007-08-03 Thread Jeff Victor
at answer overall-- that it >> would be nice if this "just worked." We'll keep trying to improve >> things in this space. >> >>-dp >> >> -- >> Daniel Price - Solaris Kernel Engineering - [EMAIL PROTECTED] - >> blogs.sun.com/dp > __

Re: [zones-discuss] Can the network interface of a local zone get a dynamic ipv4 address?

2007-08-03 Thread Jeff Victor
get a address of 192.168.74.200, > while the global address is in the segment of 10.239.*.* > > How to get this work? -- -- Jeff VICTOR Sun Microsystemsjeff.victor @ sun.com OS

[zones-discuss] Detect pkgs installed with -G?

2007-09-05 Thread Jeff Victor
How can someone learn whether a package was installed in the global zone *with* -G - or without it? ___ zones-discuss mailing list zones-discuss@opensolaris.org

[zones-discuss] Default and max values for new rctls

2007-10-06 Thread Jeff Victor
What are the default and maximum values for the new zone-specific resource controls: zone.max-shm-memory zone.max-shm-ids zone.max-msg-ids zone.max-sem-ids ___ zones-discuss mailing list zones-discuss@opensolaris.org

Re: [zones-discuss] Orcale support

2008-06-30 Thread Jeff Victor
If you mean "does Oracle support Oracle products in Solaris 8/9 Containers" the answer would depend on which Oracle product, and which version of that product. Many of the Oracle products that are currently running on Solaris 8 systems are very old versions, and Oracle no longer supports them o

Re: [zones-discuss] Solaris 8 (brandz) container license information

2008-07-28 Thread Jeff Victor
> I am planning to migrate a server running Solaris 8 > to a Solaris 8 container. .. On the new server I want to install > Solaris 10 (global zone) and install 2 Solaris 8 > containers (brandz) under that global zone. I was > told that there is no need to purchase solaris 8 or 9 > (brandZ) license.

Re: [zones-discuss] setting up Multipath for local zones in Solaris 10

2008-08-15 Thread Jeff Victor
Yes, a zone can be configured as an "exclusive-IP" zone which gives it the ability to configure IPMP within the zone - and other networking abilities. See http://blogs.sun.com/JeffV/entry/high_availability_networking_for_solaris and http://docs.sun.com/app/docs/doc/817-1592/gepxo?l=en&a=view&q=ex

Re: [zones-discuss] df Reporting 0K Size in Non-Global Zone

2008-08-15 Thread Jeff Victor
On S10 8/07 I just created a zone with a zonepath on a ZFS fs, and it seems to work correctly: global# zlogin ozone # df -k Filesystemkbytesused avail capacity Mounted on /1007529 81998 925531 9%/ /dev 1007529 81998 925531 9%

Re: [zones-discuss] cmn_err / zcmn_err

2008-08-15 Thread Jeff Victor
IMO the behavior of errors in zones should mimic that of errors in non-zoned systems, with the addition of the concept of the global zone as platform administrative area, as you stated. So the message in this case should go to the global zone and to the zone in which the error occurred. On Mon, A

Re: [zones-discuss] non global zone memory allocation enquiry

2008-08-21 Thread Jeff Victor
rcapstat(1M). On Thu, Aug 21, 2008 at 1:29 AM, Gauss Tang - Sun Microsystems <[EMAIL PROTECTED]> wrote: > Dear Expert, > > We can check the zone memory allocation via command > > zonecfg -z zonename info > > capped-memory: > physical: 256M > > But how to check this info after longin the zone? >

Re: [zones-discuss] going beyond 255 zones

2008-08-26 Thread Jeff Victor
This doesn't answer your question, but it may help resolve issues you haven't experience yet: I created 1,000 zones on a system. I wrote about the experience here: http://blogs.sun.com/JeffV/entry/spawning_0_5kz_hr_part http://blogs.sun.com/JeffV/entry/spawning_0_5kz_hr_part1 http://blogs.sun.com/J

Re: [zones-discuss] Memory allocation for non-global zones

2008-08-27 Thread Jeff Victor
On Wed, Aug 27, 2008 at 1:20 PM, Patrick Ho <[EMAIL PROTECTED]> wrote: > Can a non-global zone utilize all the available memory on the system if > resource management is not used and rcap is not used? A non-global zone could use up most of the free physical memory on the system. If that happened,

Re: [zones-discuss] rcapd

2008-09-01 Thread Jeff Victor
Hi Syed, I would not be surprised to find that rcapd is behaving correctly on your system. All of the containers in one Solaris instance share one Solaris paging system and one set of swap devices. When rcapd is paging the memory pages of one container out to the swap device, other workloads shari

Re: [zones-discuss] Zones CPU resource management

2008-09-02 Thread Jeff Victor
Hello Vincent, >From your message, it appears that you do not need to use capped-cpu. However, if you find that you have a need to use both, it will work, although there is potential to confuse Solaris and/or yourself. For example, what happens if you set cpu-shares so that a zone must get at leas

Re: [zones-discuss] Zones CPU resource management

2008-09-02 Thread Jeff Victor
On Tue, Sep 2, 2008 at 8:01 PM, Vincent Boisard <[EMAIL PROTECTED]> wrote: > Thanks for your help, > > Comments below ... > > On 9/2/08, Jeff Victor <[EMAIL PROTECTED]> wrote: >> >> Hello Vincent, >> >> From your message, it appears that you do

Re: [zones-discuss] vxfs "setting=value" style mount options

2008-09-09 Thread Jeff Victor
Hi Lewis, On Tue, Sep 9, 2008 at 6:03 AM, Lewis Thompson <[EMAIL PROTECTED]> wrote: > Hi, > > I have a simple zone configured to test the VxFS 'convosync=direct' > option. It's an s10u5 machine with no additional patches: > >zonecfg:lt203398:fs> info >fs: >dir: /fo

Re: [zones-discuss] vxfs "setting=value" style mount options

2008-09-10 Thread Jeff Victor
On Wed, Sep 10, 2008 at 8:58 AM, Jerry Jelinek <[EMAIL PROTECTED]> wrote: > [EMAIL PROTECTED] wrote: >> On Wed, Sep 10, 2008 at 12:55:53PM +0100, Lewis Thompson wrote: >>> On Tue, 2008-09-09 at 09:04 -0400, Jeff Victor wrote: >>>> The zonecfg man page has

[zones-discuss] Sybase 12.5.1 in Solaris 8 Container, raw?

2008-09-10 Thread Jeff Victor
I have heard that Sybase runs in a Solaris 8 Container. Can anyone provide details on versions of Sybase that have been run in a Solaris 8 Container, and whether Sybase can run in an S8C and use raw devices ? Thanks, --JeffV ___ zones-discuss mailing lis

Re: [zones-discuss] [sysadmin-discuss] [Fwd: [Fwd: Patch Strategy]]

2008-09-22 Thread Jeff Victor
Adding zones-discuss. Mike Gerdts wrote: > On Mon, Sep 22, 2008 at 4:57 AM, <[EMAIL PROTECTED]> wrote: > >> While U6 has many significant enhancements, most notably ZFS Root/Boot, it >> is likely that Zones on ZFS will only be fully supported in U7. >> > > This is really quite surprising

Re: [zones-discuss] [sysadmin-discuss] Patch Strategy

2008-09-23 Thread Jeff Victor
Nicolas Dorfsman wrote: > Hi all, > > > My english should not good enough to make you understand. > > STOP please to write zonepath on ZFS is supported. Everytime you say > that, the next sentence is to say "but with limitations, blabla". > We try to provide all of the releva

Re: [zones-discuss] Confirming Zone running Container

2008-10-02 Thread Jeff Victor
Although it's a feature, if you need this functionality, the global zone can store its name in a file which the Container can read. On Thu, Oct 2, 2008 at 3:05 PM, Nicolas Dorfsman <[EMAIL PROTECTED]> wrote: > Le 2 oct. 08 à 21:00, Bruce, Phillip a écrit : > > If your logged into a container, how

Re: [zones-discuss] Questions regarding Solaris containers

2008-10-21 Thread Jeff Victor
On Mon, Oct 20, 2008 at 9:29 PM, Challa, Narsimha Reddy (STSD-HYD) <[EMAIL PROTECTED]> wrote: > 7. Can we get CPU and Memory utilization statistics used by a specific > container (either from with in the container or from global zone)? "prstat -Z" may provide the data you want to see. -- --

Re: [zones-discuss] Running Oracle Database inside Solaris 8/9 Container Using Sun Cluster

2008-10-21 Thread Jeff Victor
On Mon, Oct 20, 2008 at 1:19 PM, Eric Li <[EMAIL PROTECTED]> wrote: > Dear All, > > Our customers like to run existing Oracle database inside Solaris 8/9 > container using Sun Cluster. Please kindly advise if > - Is this configuration certified by Oracle? You should ask Oracle. They will want to k

Re: [zones-discuss] zoneroot on nfs?

2008-10-22 Thread Jeff Victor
On Tue, Oct 21, 2008 at 4:17 PM, Ben Rockwood <[EMAIL PROTECTED]> wrote: > Jason King wrote: >> I haven't found any documentation (yet, still looking), that says >> anything either way, but I'm wondering to facilitate zone migration if >> you can place a zone root on an NFS filesystem? Obviously w

Re: [zones-discuss] Questions regarding Solaris containers

2008-10-23 Thread Jeff Victor
On Wed, Oct 22, 2008 at 8:04 PM, Tamer Embaby <[EMAIL PROTECTED]> wrote: > Steffen Weiberle wrote: >>> 5. Can somebody clarify me whether ZFS is supported for containers? >>> Since ZFS has the concept of creating pool of devices first and on top >>> of that file systems can be created. I would

Re: [zones-discuss] ipfilter (ipf.conf) entries in zonecfg?

2008-11-09 Thread Jeff Victor
On Fri, Nov 7, 2008 at 12:13 PM, Tommy McNeely <[EMAIL PROTECTED]> wrote: > Hello Zones experts, > > We are attempting to create a new data center architecture that favors > virtualization with zones. Previously, if we wanted to have zones from > different security contexts (front-end, back-end, in

Re: [zones-discuss] Zone Statistics: monitoring resource use of zones

2008-11-10 Thread Jeff Victor
On Mon, Nov 10, 2008 at 12:30 AM, Mike Gerdts <[EMAIL PROTECTED]> wrote: > On Sun, Nov 9, 2008 at 7:54 PM, Jeff Victor <[EMAIL PROTECTED]> wrote: >> >> >> If you have any comments, or suggestions for improvement, please let >> me know on this e-mail list o

Re: [zones-discuss] Zone Statistics: monitoring resource use of zones

2008-11-10 Thread Jeff Victor
0 updates. > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Victor > Sent: Sunday, November 09, 2008 5:54 PM > To: zones-discuss@opensolaris.org > Subject: [zones-discuss] Zone Statistics: monitoring resource use of zones > > It ha

[zones-discuss] Zone Statistics: monitoring resource use of zones

2008-11-09 Thread Jeff Victor
It has become clear that there is a need to monitor resource consumption of workloads in zones, and an easy method to compare consumption to resource controls. In order to understand how a software tool could fulfill this need, I created an OpenSolaris project and a prototype to get started. If thi

Re: [zones-discuss] Zone Statistics: monitoring resource use of zones

2008-11-16 Thread Jeff Victor
ble <[EMAIL PROTECTED]> wrote: > On Mon, Nov 10, 2008 at 1:54 AM, Jeff Victor <[EMAIL PROTECTED]> wrote: >> It has become clear that there is a need to monitor resource consumption of >> workloads in zones, and an easy method to compare >> consumption to resource co

Re: [zones-discuss] Zone Statistics: monitoring resource use of zones

2008-11-17 Thread Jeff Victor
On Sun, Nov 16, 2008 at 10:58 PM, Mike Gerdts <[EMAIL PROTECTED]> wrote: > On Sun, Nov 16, 2008 at 7:40 PM, Jeff Victor <[EMAIL PROTECTED]> wrote: >> To me, the clearest example would be a kstat, per zone, which provides >> the total amount of CPU time for all of

Re: [zones-discuss] Zone Statistics: monitoring resource use of zones

2008-11-17 Thread Jeff Victor
come from the kernel > version, would that be a better way to identify release version in your > script; Just a thought. > > In the meantime I tricked the script to think I am on update 5 and I am > getting better results. > > > -= Kevin =- > > > -Original Me

Re: [zones-discuss] Moving the zonepath (directory) to another file system

2008-11-19 Thread Jeff Victor
It should be possible to: zoneadm -z move /zones/tmp/ zoneadm -z move / That prevents a need to use zonecfg or doing unsupported things. Yes? On Wed, Nov 19, 2008 at 3:03 PM, Christine Tran <[EMAIL PROTECTED]> wrote: > On Wed, Nov 19, 2008 at 2:16 PM, Amol Chiplunkar > <[EMAIL PROTECTED]> wr

Re: [zones-discuss] Zone Statistics: monitoring resource use of zones

2008-11-21 Thread Jeff Victor
On Mon, Nov 17, 2008 at 10:33 PM, Mike Gerdts <[EMAIL PROTECTED]> wrote: > On Mon, Nov 17, 2008 at 7:44 PM, Jeff Victor <[EMAIL PROTECTED]> wrote: >> Hi Kevin, >> >> I believe that you cannot patch your way from U1 to U5 - i.e. that the >> system is missing

Re: [zones-discuss] Dynamically chaninging zone.cpu-shares has no effect

2008-11-25 Thread Jeff Victor
Hi Rainer, (see below) On Tue, Nov 25, 2008 at 9:18 AM, Rainer Orth <[EMAIL PROTECTED]> wrote: > I've recently tried to temporarily change zone.cpu-shares of the global > zone on a Sun Fire X4200 M2 running Solaris 10 Update 5. Per default, both > the global and the imap zone have 10 shares: > >

Re: [zones-discuss] Zones and network

2008-12-03 Thread Jeff Victor
Hi Elkhaoul, Unless you have used a non-default configuration, zones can communicate with each other and with the global zone using IP addresses even if the network cable has been removed. On Wed, Dec 3, 2008 at 11:27 AM, elkhaoul elkhaoul <[EMAIL PROTECTED]> wrote: > Hi, > > I have multiple Zone

Re: [zones-discuss] Java out of memory error in a zone

2008-12-07 Thread Jeff Victor
On Sun, Dec 7, 2008 at 11:15 AM, Ian Matchett <[EMAIL PROTECTED]> wrote: > On Solaris 8/07 a customer is running in a zone but java 1.5 is getting out > of memory error. The fact that it's running in a zone is irrelevant unless the software is trying to modify the kernel, drivers, etc. This can b

Re: [zones-discuss] Can't initialize ldapclient in non-global zones on snv_81

2008-12-07 Thread Jeff Victor
Hi Josh, Given that no one has responded to this in 2 weeks, I think you'll need to place a call to Sun Support to get this resolved, if you haven't already. On Tue, Nov 25, 2008 at 1:02 PM, Josh Rivel <[EMAIL PROTECTED]> wrote: > Hello, > > I have roughly 700 devices running OpenSolaris snv_81 w

Re: [zones-discuss] Zone Bandwidth

2008-12-09 Thread Jeff Victor
Hi Jon, With shared-IP zones the network statistics are not broken out per-zone. If you configure the zone as an exclusive-IP zone, it gets its own NICs, and the per-NIC counters will display what you want. You didn't mention if your interest was in Solaris, OpenSolaris, or both. In the future,

[zones-discuss] New Sun BluePrint on Solaris Zones

2008-12-22 Thread Jeff Victor
Hot off the press! Glenn Brunette and I wrote a Sun BluePrint that explains the security features of Solaris Zones/Containers: http://wikis.sun.com/display/BluePrints/Understanding+the+Security+Capabilities+of+Solaris+Zones+Software Contents * Zone Root File System * Process Containment

[zones-discuss] Privilege for sticky bit?

2008-12-22 Thread Jeff Victor
Why is the sys_config priv needed to set the sticky bit on a file or directory? This priv is not allowed in a zone, so a process in a zone can't set the sticky bit. Thanks for pointers... --JeffV ___ zones-discuss mailing list zones-discuss@opensolaris.

Re: [zones-discuss] Creating ZFS filesystems prior to zoneadm install

2009-01-25 Thread Jeff Victor
Hi Jason, I frequently recommend creating a writable /usr/local under the read-only /usr to solve this problem. One simple method to do this is: zonecfg -z myzone add fs set special=/mypool/zones/usr-local set dir=/usr/local set type=lofs end exit Will that work for you? --JeffV On Thu, Jan 2

[zones-discuss] Adding a NIC to running zones

2009-01-28 Thread Jeff Victor
A NIC can be added to a running shared-IP zone by using the ifconfig command its zone parameter. Can an unplumbed NIC be added to a running exclusive-IP zone usnig the same method? (I don't have a system with enough NICs to test this.) Thanks, --JeffV

Re: [zones-discuss] Moving zones between different sparc architecture

2009-02-06 Thread Jeff Victor
On Thu, Feb 5, 2009 at 3:36 PM, pol.barthel...@sun.com wrote: > Hello, > It is supported to move zones from a sun4u to a sun4v or vice-versa ? Full support is available for that, starting with S10 10/08 (aka U6). -- --JeffV ___ zones-discuss mailing

Re: [zones-discuss] Making directories in /usr visible (from global zone) in non-global zone

2009-02-09 Thread Jeff Victor
Is it a sparse-root zone or a whole-root zone? It should be visible in a sparse-root, but a whole-root zone has its own separate copy of /usr. On Mon, Feb 9, 2009 at 6:50 PM, Arun Gupta wrote: > I installed GlassFish in global zone in /usr directory. However this > directory does not seem to be

Re: [zones-discuss] ip-type private won't work for me

2009-02-10 Thread Jeff Victor
Please provide the output of "ifconfig -a" and "netstat -rn" for each non-global zone. On Mon, Feb 9, 2009 at 6:08 PM, Charles Meo wrote: > Greetings all, > > I have been trying to set up a X2200 with a global zone on an internal LAN > with bge0, and two zones for web servers each having a privat

Re: [zones-discuss] Making directories in /usr visible (from global zone) in non-global zone

2009-02-11 Thread Jeff Victor
e information, such as: Output of "zonecfg ... info" Output of "mount" in both the GZ and the zone. > -Arun > > Jeff Victor wrote: >> >> Is it a sparse-root zone or a whole-root zone? It should be visible in >> a sparse-root, but a whole-root zo

Re: [zones-discuss] Add a zpool to a Zone w/o reboot

2009-02-16 Thread Jeff Victor
Sorry Alex, I didn't include enough information to properly convey my idea. >From the *global* zone, you would use # mount -F lofs /root/ For example: # mount -F lofs /mypool/zones/myzone-usr-local /zones/myzone/root/usr/local On Mon, Feb 16, 2009 at 5:50 PM, Maidak Alexander J wrote: > T

Re: [zones-discuss] zonestat.pl without Resource Pools

2009-02-17 Thread Jeff Victor
On Tue, Feb 17, 2009 at 4:09 PM, Derek McEachern wrote: > We are in the process of deploying applications into zones and I've been > looking at how to monitor what each zone is up to regarding resource usage. > I downloaded the zonestat.pl script to play around with and out of the box it > didn'

Re: [zones-discuss] NTP client in non-global zone

2009-02-19 Thread Jeff Victor
On Thu, Feb 19, 2009 at 9:54 AM, Timothy Kennedy wrote: > > > Nicolas Dorfsman wrote: >> >> It would be a great idea to have a easy solution to give these privileges >> to a zone. > > in zonecfg for a given zone, > set limitpriv=default,proc_lock_memory,proc_priocntl,sys_time > > David Comay has a

Re: [zones-discuss] Share a non-global zone folder

2009-02-19 Thread Jeff Victor
On Thu, Feb 19, 2009 at 11:28 AM, Asif Iqbal wrote: > Hi > > I am running solaris 10 update 6. I know I cannot nfs share a non-global zone > folder. > > I want to have a central syslog server on non global zone and have the > log file shared with remote hosts > > Is there a workaround? A zone ca

Re: [zones-discuss] zonestat.pl without Resource Pools

2009-02-21 Thread Jeff Victor
doesn't hurt performance - or anything else. > Has any work started on a 'real' zonestat yet? I believe that design work has begun, but these things take time... > On Tue, Feb 17, 2009 at 9:44 PM, Jeff Victor > wrote: >> >> On Tue, Feb 17, 2009 at 4:09 PM, Derek Mc

Re: [zones-discuss] Zone in a pset with high load generating high packet loss at the frame level

2009-03-03 Thread Jeff Victor
Hello Gael, On Mon, Mar 2, 2009 at 10:08 PM, Gael wrote: > Hello > > Got a zone running SAS with cpu capping enabled using a processor set as we > see a few processes using quite a bit of cpu there too often. Is that zone assigned to a resource pool, or is it using the dedicated-cpus feature? >

Re: [zones-discuss] Zone in a pset with high load generating high packet loss at the frame level

2009-03-03 Thread Jeff Victor
read > Again, thanks ! > Regards > > On Tue, Mar 3, 2009 at 2:19 PM, Jeff Victor wrote: > - Show quoted text - >> >> Hello Gael, >> >> On Mon, Mar 2, 2009 at 10:08 PM, Gael wrote: >> > Hello >> > >> > Got a zone running SAS with c

Re: [zones-discuss] Zone in a pset with high load generating high packet loss at the frame level

2009-03-04 Thread Jeff Victor
(Either way, I wouldn't expect Sun to do this during CY2009. However, if you have sufficient interest and ability... :-) ). --JeffV On Tue, Mar 3, 2009 at 11:26 PM, Jeff Victor wrote: > On Tue, Mar 3, 2009 at 8:39 PM, Gael wrote: >> >> Many thanks to Bob Netherton an

Re: [zones-discuss] Zone in a pset with high load generating high packet loss at the frame level

2009-03-05 Thread Jeff Victor
On Thu, Mar 5, 2009 at 9:15 AM, Bob Netherton wrote: > >> 1. Do you use "set pool=" anymore, now that the dedicated-cpu feature exists? > > Until Oracle develops a more rational licensing scheme you should > expect this feature to be in use. I may have many Oracle instances, > each in a separate

Re: [zones-discuss] Zone in a pset with high load generating high packet loss at the frame level

2009-03-05 Thread Jeff Victor
Thanks for the great feedback Gael. Comments below. On Thu, Mar 5, 2009 at 11:00 AM, Gael wrote: > > On Wed, Mar 4, 2009 at 9:06 AM, Jeff Victor wrote: >> >> Some questions: >> 1. Do you use "set pool=" anymore, now that the dedicated-cpu feature exists? &g

Re: [zones-discuss] Zone in a pset with high load generating high packet loss at the frame level

2009-03-05 Thread Jeff Victor
On Thu, Mar 5, 2009 at 1:48 PM, Steve Lawrence wrote: > On Thu, Mar 05, 2009 at 01:22:25PM -0500, Jeff Victor wrote: >> On Thu, Mar 5, 2009 at 11:00 AM, Gael wrote: >> > On Wed, Mar 4, 2009 at 9:06 AM, Jeff Victor >> > wrote: >> >> >> >> Some

Re: [zones-discuss] resource pool for Zone

2009-03-07 Thread Jeff Victor
On Sat, Mar 7, 2009 at 4:35 AM, Anthony Yeung wrote: > Can we setup resource pool inside a Zone? HI Anthony, If you are logged into a zone, you cannot set up a resource pool. If you want to create a resource pool and assign a zone to it, you can do that from the global zone. You can either crea

Re: [zones-discuss] Container support

2009-03-16 Thread Jeff Victor
On Fri, Mar 13, 2009 at 5:36 AM, Stewart Mathieson wrote: > IHAC who is using the Solaris Migration Tools/Solaris 8 Container and the > licence agreement in the download talks about only being a 90 day evaluation > RTU licence > > https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/

[zones-discuss] Zones Parallel Patching

2009-04-02 Thread Jeff Victor
Just FYI: I measured patching throughput improvement with the not-yet-released Zones Parallel Patching patch. You can read about my findings at http://blogs.sun.com/JeffV/entry/patching_zones_goes_zoom . --JeffV ___ zones-discuss mailing list zones-disc

Re: [zones-discuss] Zones, Solaris 10 and ZFS...do zones need to sit on rpool ?

2009-04-06 Thread Jeff Victor
On Mon, Apr 6, 2009 at 3:12 PM, Paul Davis wrote: > > 121430-33 (or higher) supports ZFS root with ZFS zonepaths (each in their > own zpools). Been testing this extensively as a POC and it works, lucreate > plus patching. We did file bug 6819838 on preservation of mountpoint > settings after lucre

[zones-discuss] Zonestat v1.4 Available

2009-04-08 Thread Jeff Victor
I posted Zonestat v1.4 at the Zone Statistics project page http://opensolaris.org/os/project/zonestat (click on "Files" in the left navbar). My blog http://blogs.sun.com/jeffv lists the new features and bug fixes. Please send questions and requests to zones-discuss@opensolaris.org . --JeffV ___

Re: [zones-discuss] Zonestat v1.4 Available

2009-04-09 Thread Jeff Victor
On Thu, Apr 9, 2009 at 4:44 AM, Henrik Johansson wrote: > Nice work Jeff! Thanks Henrik! > Some thoughts: > > Would not 1024 be bettet suited than 1000 for shorten? Currently if I set a > swap capping with zonecfg to 256G it is displayed as 275G in zonestat. > > It would be nice to check for pat

Re: [zones-discuss] solaris10 brand project proposal

2009-04-27 Thread Jeff Victor
Just in case you need it: another +1. On Mon, Apr 27, 2009 at 9:18 PM, Jerry Jelinek wrote: > Dan Price wrote: >> >> Belatedly, a big +1. Jerry, if you have not already, I can take this to the >> OGB for creation. > > Thanks Dan. I think we have enough votes now. I will see about getting this

Re: [zones-discuss] Shared IP or Exclusive IP with vnics

2009-04-28 Thread Jeff Victor
On Tue, Apr 28, 2009 at 6:09 AM, Vincent Boisard wrote: > Thanks for your help, > > Let me summarize this: > > - Shared IP has the advantage that the global zone fully administers the > network: zone don't have to (and even CAN'T) bother with it. There may be a > slight advantage performance wise.

Re: [zones-discuss] FSS and processor sets

2009-06-11 Thread Jeff Victor
Ketan, Adding to Steffen's comments: if you are not using zones, or if you are configuring multiple zones to share a processor set, you would use the poolcfg(1M) command to set pool.scheduler to FSS. See also libpool(3LIB) and resource_controls(5). On Thu, Jun 11, 2009 at 9:02 AM, Steffen Weiber

Re: [zones-discuss] Zone Isolation & Host Protection (vbox in a zone panics system)

2009-06-11 Thread Jeff Victor
On Thu, Jun 11, 2009 at 2:06 AM, Michael McKnight wrote: > Hello everyone, > > I recently took on a project to run a VirtualBox guest within a whole Solaris > zone.  The idea was to protect the Solaris system from any crashes vbox might > have.  I need to run vbox on a production system, but I di

Re: [zones-discuss] zonestat 1.4.1 problem

2009-06-11 Thread Jeff Victor
On Wed, Jun 10, 2009 at 4:03 PM, Phil Freund wrote: > I have a couple of servers that are still running U1 but I'd still like to > use zonestat to get as much info as I can. > > I get the following output when I run zonestat 1.4.1 with debug turned on: > > root> zonestat -l -N > /usr/sbin/prtconf

Re: [zones-discuss] zonestat 1.4.1 problem

2009-06-12 Thread Jeff Victor
Sorry, it's either line 513/514 - the one that gets the kstat "swapresv_zone" or 504/504, the one that gets the kstat "lockedmem_zone". I need to clean out the "deadwood" in v1.5, too. On Thu, Jun 11, 2009 at 5:41 PM, Phil Freund wrote: > Jeff, > > Those lines were already commented out. It looks

Re: [zones-discuss] /export/home missing on non global zone

2009-06-21 Thread Jeff Victor
Is this Solaris 10 or OpenSolaris? Which update or release? On Sun, Jun 21, 2009 at 1:29 PM, John Larsen wrote: > Hello, > > im new to solaris and zones. > > I am exploring non-global zones for environment setup for testing. I have > installed non-global zone and able to login etc and su to root

Re: [zones-discuss] Using zones for simple usage

2009-07-18 Thread Jeff Victor
On Thu, Jul 16, 2009 at 5:30 PM, Peter Tribble wrote: > On Tue, Jul 14, 2009 at 1:15 PM, Harry Putnam wrote: >> Alexander Skwar writes: >> >>> What he plans can be done easily using NGZ (non-global zones). >>> An NGZ also adds just a little bit of overhead (if any at all) to the >>> system - unlik

Re: [zones-discuss] Using zones for simple usage

2009-07-18 Thread Jeff Victor
On Fri, Jul 17, 2009 at 11:07 PM, Anon Y Mous wrote: >> One thing I've found to be true though: either a machine is all zoned, or >> not. >> It gets horribly confusing to have real activity in the global zone, >> where you can half see the non-global zones, so if you have zones >> on a machine the

Re: [zones-discuss] Using zones for simple usage

2009-07-19 Thread Jeff Victor
#x27;t have to worry > about >    as yet undiscovered security holes. > >    This is a serious concern for many customers. > > C) Less time to install and less time to patch. > > JIm > > > > Jeff Victor wrote: >> >> On Fri, Jul 17, 2009 at 11:07 PM, Anon

Re: [zones-discuss] NFS server in zones

2009-08-05 Thread Jeff Victor
On Sun, Aug 2, 2009 at 8:02 PM, Anon Y Mous wrote: > I found this thread at forums.sun.com : > >  http://forums.sun.com/thread.jspa?threadID=5333685 > > Looks like some ambitious Solaris sysadmins have already been running UNFS3 > in Solaris Zones! Yes, I mentioned this concept over a year ago du

[zones-discuss] Per-zone CPU Usage Reporting?

2009-09-18 Thread Jeff Victor
Has anyone written a tool to provide per-zone reporting of CPU usage - that can be shared? I know someone who wants to do this. Thanks in advance, --JeffV ___ zones-discuss mailing list zones-discuss@opensolaris.org

Re: [zones-discuss] Per-zone CPU Usage Reporting?

2009-09-18 Thread Jeff Victor
> Best regards, > > HeCSa. > http://www.aosug.com.ar > > On Fri, Sep 18, 2009 at 10:27 AM, Jeff Victor > wrote: >> >> Has anyone written a tool to provide per-zone reporting of CPU usage - >> that can be shared? I know

Re: [zones-discuss] Solaris 8/9 branded zones on Nevada and/or x86

2009-10-02 Thread Jeff Victor
On Fri, Oct 2, 2009 at 5:59 AM, Rainer Orth wrote: > As far as I've been able to find out so far, Solaris 8 and 9 branded > zones are available and supported on Solaris 10 only right now, and only > for SPARC.  Are there any plans to provide them for x86 and Nevada, too? There wasn't much Solari

Re: [zones-discuss] unable to move processors in pset

2009-10-08 Thread Jeff Victor
On Thu, Oct 8, 2009 at 1:08 PM, Ketan wrote: > bash-3.00# poolcfg -d -c 'transfer 8 from pset pset_default to pset-app' > poolcfg: cannot transfer 8 from pset_default to pset-app: Invalid > configuration > bash-3.00# >  why i 'm getting this error ? Probably pset-app is already at its maximum.

Re: [zones-discuss] Resource Management Question

2009-10-09 Thread Jeff Victor
On Fri, Oct 9, 2009 at 8:36 AM, Ketan wrote: > I 've 2 questions regarding resource pools and projects, > > 1. My system has 5 zones and 2 pools configured. >   Now, how can i check which zone is running with with pool with the ps       >      command , not with zonecfg command. See poolstat(1M)

Re: [zones-discuss] Processor Pool for zone: core & threads question

2009-10-09 Thread Jeff Victor
On Fri, Oct 9, 2009 at 11:04 AM, Joseph Balenzano wrote: > Paolo Merisio wrote: > > Hi all, > > actually we can add to zone configuration an object called "dedicated-cpu" > with properties "ncpus" and "importance". > This object create a dedicated cpu Pool when zone starts and puts from 1 to > "nc

Re: [zones-discuss] Difference between resource management attribbutes

2009-10-20 Thread Jeff Victor
On Tue, Oct 20, 2009 at 1:20 PM, Ketan wrote: > Can anyone answer my questions > > 1. Whats the difference between project.max-locked-memory  and max-rss. > And out these 2 which is the preferred way of limiting the physical memory in > a project or zone. RSS means "Resident Set Size" and can be

Re: [zones-discuss] Application leaking on local zone

2009-12-17 Thread Jeff Victor
It would be useful to know if the memory leak is in locked memory or not. What isthe output of the following command, in both cases (app in GZ, app in a zone): GZ# pmap -x --JeffV On Thu, Dec 17, 2009 at 5:09 AM, AdinaKalin wrote: > Hello, > > I'm struggling with the following problem and I ha

Re: [zones-discuss] Any way to limit I/O?

2009-12-23 Thread Jeff Victor
On Tue, Dec 22, 2009 at 6:12 PM, andrew wrote: > Is there any way to limit the amount of I/O that a zone can do? I'm thinking > particularly of disk IOPS, but a general way of limiting I/O would be fine > too. You can limit network I/O using features of Project Crossbow. It's fully described a

Re: [zones-discuss] Use Zones/Containers or VirtualBox for application?

2010-01-06 Thread Jeff Victor
On Wed, Jan 6, 2010 at 8:51 AM, David Browning wrote: > I built an Opensolaris media server and backup machine for my local network. > > At some point I would like to add ampache to my setup. If you are not > familiar, it is a media server that will stream audio/video to client devices > over th

Re: [zones-discuss] Possible bug in zonemgr.2.0.6

2010-04-29 Thread Jeff Victor
That suggestion would be an improvement, but implies that any value greater than 1 must be an integer, which isn't true. --JeffV Sent from my Tricorder On Apr 28, 2010, at 5:14 AM, Loïc Mahé wrote: The comment for capped-cpu is wrong since this parameter doesn't accept ranges :

Re: [zones-discuss] confusing zone login processes

2010-06-03 Thread Jeff Victor
What is 3386? Is it the zone's init? Just a guess: Zone users are not allowed to learn of pids outside of the zone. --JeffV Sent from my Tricorder On Jun 2, 2010, at 3:30 AM, "Frank Batschulat (Home)" > wrote: just noticed something strange, perhaps someone has an explanation ? after bo

Re: [zones-discuss] Possible to use zones for hardening? Security?

2010-09-28 Thread Jeff Victor
If you configure a zone to use the exclusive-IP feature, the global zone will not be able to use the zone's network interfaces. See the zonecfg(1M) man page. On Sat, Sep 25, 2010 at 6:23 AM, Orvar Korvar wrote: > I am a home user with a PC and two SunRay2. > > I wonder if it is possible to shut d

Re: [zones-discuss] Possible to use zones for hardening? Security?

2010-09-28 Thread Jeff Victor
On Sun, Sep 26, 2010 at 5:03 PM, Orvar Korvar wrote: > Ok, so I shut down e1000g0 which means my global zone can not access > internet. The local zone will have e1000g0:1 which I do not shut down, which > means the local zone can access internet. Correct? > > But, if we look at this picture > ht

Re: [zones-discuss] lucreate failure call to zoneadmd failed

2010-11-02 Thread Jeff Victor
Hi Paul, It looks like the ABE's copy of zone z01.nyc-sed3 can't be brought to the state it needs to be in, to continue LU processing. Can the "real" zone z01.nyc-sed3 be booted? "zoneadm list..." shows it's not currently running. If it won't boot, try to address that problem first. --JeffV On

Re: [zones-discuss] Possible to use zones for hardening? Security?

2010-11-25 Thread Jeff Victor
On Thu, Nov 25, 2010 at 9:21 AM, Petr Benes wrote: >> Limit the damage if the Zone's VBox application is somehow >> subverted by the guest OS. > > There are VBox modules in the kernel and the containers framework > can't stop misbehavior in kernelspace. The use of kernel modules in VBox doesn't w

Re: [zones-discuss] Zones zone.max-shm-memory setting.

2010-11-29 Thread Jeff Victor
Back to the original question (locked-shm-memory on servers): If you are running multiple applications on a server, and at least one of them uses shared memory, you should consider using max-shm-memory or max-locked-memory for the zone that will use shared memory. Any memory that a process locks

Re: [zones-discuss] How secure are zones? Hackers?

2010-11-30 Thread Jeff Victor
Orvar, The document http://hub.opensolaris.org/bin/download/Project+isc/WebHome/820%2D7017.pdf may give you a better understanding of the security capabilities of Solaris Zones. --JeffV On Tue, Nov 30, 2010 at 8:48 AM, Orvar Korvar wrote: > I am thinking if it is safer to reach the outside wor

<    1   2   3   4   >