Re: [zones-discuss] code review: native brand refactoring

Ed, Edward Pilatowicz wrote: > hey jerry, > some final comments. > ed > > - could you update the sn1 brand so that it will still work? > (it's broken on x86 because of 6703962, but it should still work on sparc.) I'll take a look at what is going on there. > usr/src/lib/libbrand/dtd/brand.dtd

Re: [zones-discuss] Sparse vs. Whole Root Zones

Bob Netherton wrote: >> would I be able to export and import zones from one server to another if I >> have >> different pkg's in local zone from what it is in global? What is the subject >> to >> the resrtictions of PKG_ALL_ZONES? I am not sure if I do undesrtand this >> part. > > The short a

Re: [zones-discuss] code review: native brand refactoring

I believe I have resolved all of the code review comments received so far. I have posted an updated webrev at the same url. http://cr.opensolaris.org/~gjelinek/webrev/ I'll be doing some final testing with these changes so if there are any additional comments, please let me know soon. Thanks, J

Re: [zones-discuss] code review: native brand refactoring

Edward Pilatowicz wrote: > On Wed, May 28, 2008 at 01:00:08PM -0600, Jerry Jelinek wrote: >> Edward Pilatowicz wrote: >>> hm. from what i remember mount mode actually puts the zone root at >>> /a and lofs mounts stuff from the global zone at , >>> all so tha

Re: [zones-discuss] code review: native brand refactoring

Edward Pilatowicz wrote: > hm. from what i remember mount mode actually puts the zone root at > /a and lofs mounts stuff from the global zone at , > all so that the svr4 packaging code can "enter" the zone to do packaging > operations. i thought this dance was necessary because we wanted packagin

Re: [zones-discuss] code review: native brand refactoring

Ed, Responses below. Edward Pilatowicz wrote: > On Tue, May 27, 2008 at 08:48:17AM -0600, Jerry Jelinek wrote: >> I have updated the webrev at: >> >> http://cr.opensolaris.org/~gjelinek/webrev/ >> >> This includes the changes for the feedback I have >> rece

Re: [zones-discuss] code review: native brand refactoring

Edward Pilatowicz wrote: > On Wed, May 28, 2008 at 07:02:32AM -0600, Jerry Jelinek wrote: >>> - in the case of a forced attach why don't we run the brand callback? >> That is really the definition of forced. We don't do anything when >> forced except change

Re: [zones-discuss] code review: native brand refactoring

Edward Pilatowicz wrote: > On Wed, May 28, 2008 at 07:02:32AM -0600, Jerry Jelinek wrote: >>> - why is there no locking around the pre-detach hook? >> That hasn't changed with this code but if I recall correctly, the idea >> was that predetach is not making any ch

Re: [zones-discuss] code review: native brand refactoring

Nicolas Williams wrote: > On Tue, May 27, 2008 at 08:48:17AM -0600, Jerry Jelinek wrote: >> This includes the changes for the feedback I have >> received so far. I also added the zlogin.c file >> to the webrev with two bug fixes. One of these was for >> a bug I wa

Re: [zones-discuss] code review: native brand refactoring

Edward Pilatowicz wrote: > - why are you parsing arguments by hand in stead of using getopt()? > this will result in non-standard argument parsing and probably break > things that used to work like: > zoneadm -z foo clone -mcopy -sexport/zones/[EMAIL PROTECTED] ... > (note the lack of s

Re: [zones-discuss] code review: native brand refactoring

Steve Lawrence wrote: > Hey Jerry, > > Does this address this comment in 6621020: > > " > This appears to point out at least one bug in zlogin, namely that it > keeps stdout_pipe[1] and stderr_pipe[1] from noninteractive_login() > open when returning to the parent. > " > > Basically, I think the

Re: [zones-discuss] code review: native brand refactoring

Ed, My responses are in-line. Edward Pilatowicz wrote: > On Tue, May 27, 2008 at 08:48:17AM -0600, Jerry Jelinek wrote: >> I have updated the webrev at: >> >> http://cr.opensolaris.org/~gjelinek/webrev/ >> >> This includes the changes for the feedback I have >

Re: [zones-discuss] code review: native brand refactoring

I have updated the webrev at: http://cr.opensolaris.org/~gjelinek/webrev/ This includes the changes for the feedback I have received so far. I also added the zlogin.c file to the webrev with two bug fixes. One of these was for a bug I was hitting during testing of these changes and there is a s

Re: [zones-discuss] S10 branded zones

Rodney Lindner - SCT wrote: > Hi all, > has there been any thought of a S10 branded zone running under NV. > > Most of my servers run NV, but at times I need to test software that > only runs on S10. Running up a branded zone would > make my life very simple. We have the following RFE open. 666

Re: [zones-discuss] code review: native brand refactoring

Ed, My responses are in-line. Edward Pilatowicz wrote: > On Wed, May 21, 2008 at 09:43:27AM -0600, Jerry Jelinek wrote: >> Thanks again for your input. I am rebuilding and retesting with >> these changes. Once that is done, I'll post an updated webrev. >> >

Re: [zones-discuss] Solaris 8 and Solaris 9 containers in OpenSolaris

Robert Milkowski wrote: > Hello Jerry, > > Thursday, May 22, 2008, 3:40:13 PM, you wrote: > > JJ> Bernd Schemmer wrote: >>> Can I use Solaris 8 and Solaris 9 Containers in OpenSolaris? >>> >>> I installed the packages for both but could not create a Solaris 8 or >>> Solaris 9 zone. zonecfg alway

Re: [zones-discuss] code review: native brand refactoring

Edward Pilatowicz wrote: > On Wed, May 21, 2008 at 09:43:27AM -0600, Jerry Jelinek wrote: >> Thanks again for your input. I am rebuilding and retesting with >> these changes. Once that is done, I'll post an updated webrev. >> > > i couldn't wait

Re: [zones-discuss] Solaris 8 and Solaris 9 containers in OpenSolaris

Bernd Schemmer wrote: > Can I use Solaris 8 and Solaris 9 Containers in OpenSolaris? > > I installed the packages for both but could not create a Solaris 8 or > Solaris 9 zone. zonecfg always complained about a not supported brand. > > I'm running Solaris snv_89 No, this is only supported on S1

Re: [zones-discuss] code review: native brand refactoring

Ed, Thanks for your comments. My responses are in-line. Edward Pilatowicz wrote: > On Tue, May 13, 2008 at 09:59:22AM -0600, Jerry Jelinek wrote: >> I have posted a webrev at: >> >> http://cr.opensolaris.org/~gjelinek/webrev/ >> >> for bug: >> >>

Re: [zones-discuss] code review: native brand refactoring

Edward Pilatowicz wrote: > one comment to start: > - you're adding a bunch of '%*' tokens to native.xml, perhaps this is > the time to rip them out instead? > 6588602 libbrand '%*' token expansion is a mess Thanks Ed. Sure, I'll take a look at this. Its not like this already isn't a big

[zones-discuss] code review: native brand refactoring

I have posted a webrev at: http://cr.opensolaris.org/~gjelinek/webrev/ for bug: 6553514 native zone svr4 pkg code should be moved into zone callbacks This is a refactoring of the code so that it is easier to support different brands going forward. In particular this will help with the IPS suppo

Re: [zones-discuss] zoneadm problem

Terry Smith wrote: > Hi I seem to have found a small problem with zoneadm > > I have configured a zone called "2" in this case. > > I have two running zones with IDs 1 and 2 as below > > When I try and install the zone named "2" it seems to pick up the zone > with the instance ID of 2 instead a

Re: [zones-discuss] upgrade on attach

Maciej Browarski wrote: > Hello, > I'm using Nv_89 and try attach my old zones created with nv_84. > So, I type: > # zoneadm -z oracle attach -u > zoneadm: zone 'oracle': ERROR: attempt to downgrade package SUNWant > 11.12.0,REV=2006.01.13.13.45.29 to version 11.11.0,REV=2008.04.29.02.08 > > and

Re: [zones-discuss] etude & ld.conf

Robert Milkowski wrote: > Hello zones-discuss, > > Once I created a zone from s8 image some applications were not > working. It was due to ld.conf being overwritten by > /usr/lib/brand/solaris8/mods/S40_setup_preload so additional > paths we had on s8 system were gone. > >

Re: [zones-discuss] zone cloning question

Tony Ambrozie wrote: > Hi, > > I cloned an existing zone with *zoneadm -z newzone clone **oldzone** *etc. > After successfully booting the new zone, I noticed that services were in > different states between the two zones (for example, ssh was offline in the > new zone). Isn't the services reposi

Re: [zones-discuss] new option - cpu-dedicated

Maciej Browarski wrote: > Hello, > I upgrade Solaris 10 update 3 to update 4 but I use dedicated-cpu with > live upgrade but I don't see dedicated-cpu (and capped-mem) option in > zonecfg, but man zonecfg shows this option. > Is it possibility that I must add new packages to have this functiona

Re: [zones-discuss] sol10u4 importance parameter

William Aiken wrote: > Maciej, > > Before you created a non-global zone, you created a dynamic resource > pool and associated a processor set with it. Then you created a > non-global zone and associated it with the resource pool. > > Now you can create additional non-global zones and if you

Re: [zones-discuss] sol10u4 importance parameter

Maciej Browarski wrote: > Hello, > I play with dedicated-cpu on solaris 10 u4. > I read that, this function separate ncpus from global zone and pins this > ncpus exclusive to non global zone, but what, in this case, means > importance parameters ? > Is possibility to run more non-global zones

Re: [zones-discuss] How good is zonecfg/zoneadm's wildcard parsing?

Zoram Thanga wrote: > Hi Jerry, > > Have you had a chance to look at this? I am still seeing the wildcard > madness on s10u5: I really don't have anything to do with this. It looks like it was fixed in S10u5 build 7 by the folks who broke it. Are you running build 7? If so, maybe it is still

Re: [zones-discuss] Swap memory caps

Jason Bradfield wrote: > Jerry Jelinek wrote: >> Jason Bradfield wrote: >>> Do you have a definition of the used column for a df -h on the /tmp. >>> and how does this relate to the total swap in prstat.. >>> In my case prstat reports 942M and df reports 1.

Re: [zones-discuss] Swap memory caps

Jason Bradfield wrote: > Do you have a definition of the used column for a df -h on the /tmp. and > how does this relate to the total swap in prstat.. > In my case prstat reports 942M and df reports 1.1G used on /tmp A bug was just filed which might have an impact on what you are seeing: 6653688

Re: [zones-discuss] Swap memory caps

Jason Bradfield wrote: > Jerry Jelinek wrote: >> Jason Bradfield wrote: >>> Hi, >>> >>> I am still having trouble with this if anyone can help out.. >>> >>> Can someone explain.. >>> From prstat -Z >>> SWAP 941M >>

Re: [zones-discuss] Swap memory caps

Jason Bradfield wrote: > Hi, > > I am still having trouble with this if anyone can help out.. > > Can someone explain.. > From prstat -Z > SWAP 941M > RSS 844M > > From df -h > /tmp 1.1G > > From Suns doc http://docs.sun.com/app/docs/doc/819-2450/6n4o5mdis?a=view > "The output of prstat *-Z*

Re: [zones-discuss] Zones roadmap?

Matty wrote: > I was looking through the zone community documentation on > opensolaris.org, but was unable to dig up a roadmap. Does anyone > happen to know if one exists? I am curious which features are planned > for 2008 and 2009. I have posted our last roadmap which is actually almost a year o

Re: [zones-discuss] ?: lofs of NFS-mounted file system into a non-global zone

Steffen Weiberle wrote: > Thanks. Without looking at the RFE, > >> Since the comments aren't public I pasted the relevant stuff here: >> >> They're primariliy necessary due to (among other things) the fact >> that an NFS operation may translate to an over-the-wire call, and >> in fact

[zones-discuss] zone update on attach has integrated

I wanted to send out a quick note to let everyone know that I putback the zone 'update on attach' changes today. This addresses: PSARC 2007/621 zone update on attach 6480464 RFE: zoneadm attach should patch/update the zone to the new hosts level 6576592 RFE: zoneadm detach/attach should

Re: [zones-discuss] ?: lofs of NFS-mounted file system into a non-global zone

Steffen Weiberle wrote: > I have a customer who is restricting NFS access to their data. Thus, > instead of authorizing each non-global zone to be a client, would like > to authorize only the global zone, and then lofs mount the NFS-mounted > file system into the non-global zone. > > This work man

Re: [zones-discuss] Zones roadmap?

Mads Toftum wrote: > On Mon, Jan 14, 2008 at 07:00:36AM -0700, Jerry Jelinek wrote: >> We made an internal roadmap almost a year ago but I >> don't think we ever posted it on opensolaris.org. >> We haven't revisited that since then but I think >> the overall

Re: [zones-discuss] Zones roadmap?

Matty wrote: > I was looking through the zone community documentation on > opensolaris.org, but was unable to dig up a roadmap. Does anyone > happen to know if one exists? I am curious which features are planned > for 2008 and 2009. We made an internal roadmap almost a year ago but I don't think

Re: [zones-discuss] Roadmap

Andrew Dishong wrote: > I thought I saw a container roadmap but not able to find it has anyone > seen one? We have one on the internal zones webpage but it hasn't been updated in about 9 months. Jerry ___ zones-discuss mailing list zones-discuss@opens

Re: [zones-discuss] ?: configuration of a *running* zone

Steffen Weiberle wrote: > Is there a stable way of determining the configuration of a running zone? > > zonecfg and /etc/zones/ show the configuration that will > be used on the next boot, so if a change was made via zonecfg, the > current running instance may be different from what those report

Re: [zones-discuss] Changing the output of uname for all zones from within a zone

Bernd Schemmer wrote: > Hi, > > (second try; my email to the list seems to got lost) > > Using sloggi (http://www.roqe.org/sloggi/ ) I > can change the output of uname for all zones (including the global zone) from > within a zone: > > global zone [Mon Dec 31 17:

Re: [zones-discuss] sharing "terminal server ports" to non-global zone

Christine Tran wrote: > A customer is unable to share something called the "terminal server > ports" to non-global zone. I don't know what these are, but here's the > description: > > "Serial sensor interfaces are fed to a patch panel and then received by > a digital terminal server. Terminal

Re: [zones-discuss] Simple question... An inherit-pkg-dir resource with the dir '/lib' already

David Smith wrote: > I'm getting an error on trying to create a second zone. > > -bash-3.00# zonecfg -z test123 -f test123-zone-cmd.txt > On line 7 of test123-zone-cmd.txt: > An inherit-pkg-dir resource with the dir '/lib' already exists. > resource specification incomplete > Zone test123 failed

Re: [zones-discuss] Zones and defunct processes bypassing the LWP rctl

Gael wrote: > On 11/9/07, Jerry Jelinek <[EMAIL PROTECTED]> wrote: >> Gael wrote: >>> I had the bad surprise to find a production zone impacting a whole frame >>> this morning... visibly the third party application running in it as >> root >>> (n

Re: [zones-discuss] Zones and defunct processes bypassing the LWP rctl

Gael wrote: > I had the bad surprise to find a production zone impacting a whole frame > this morning... visibly the third party application running in it as root > (no comments) generated so many processes that the whole frame was > generating a lot of cannot fork errors... impacting the other zon

Re: [zones-discuss] Zone Migration - Sun4u to Sun4v - Supported?

Ihsan Zaghmouth wrote: > Jerry, > > How the *"update on attach"* is planned to be deployed, patch update or next > release of solaris10 U5 ? I am currently working on getting this done for nevada. Once it is integrated there then we'll see what S10 update we might be able to get into. I can gu

Re: [zones-discuss] Zone Migration - Sun4u to Sun4v - Supported?

Mads Toftum wrote: > On Thu, Nov 08, 2007 at 06:48:12AM -0700, Jerry Jelinek wrote: >> Although downgrading the zone might work in some cases it >> really unsupportable in the general case so we have no plans >> to do it. > > Would it at least be possible to get a list

Re: [zones-discuss] Zone Migration - Sun4u to Sun4v - Supported?

Mads Toftum wrote: > On Thu, Nov 08, 2007 at 06:22:40AM -0700, Jerry Jelinek wrote: >> For zones "update on attach" we are not supporting downgrading >> a zone. If you think you will want to migrate back, just leave >> the original copy of the zone on the origin

Re: [zones-discuss] Zone Migration - Sun4u to Sun4v - Supported?

LaoTsao(Dr. Tsao) wrote: > Just wondering if zone move from host-A to host-B and get update > what happen if this zone need to move back to host-A, does it need to be > downgraded? For zones "update on attach" we are not supporting downgrading a zone. If you think you will want to migrate back,

Re: [zones-discuss] Zone Migration - Sun4u to Sun4v - Supported?

Mike Gerdts wrote: > On Nov 8, 2007 6:40 AM, LaoTsao(Dr. Tsao) <[EMAIL PROTECTED]> wrote: >> hi >> it seems these issues will be solved by a brandZ for s10, nv etc not? > > Is that in the works? I've seen an example of how to do it on your > own but I haven't heard of any supported variant. The

[zones-discuss] code revew - zone update on attach

I have posted a webrev for the zone's "update on attach" changes at: http://cr.opensolaris.org/~gjelinek/webrev/ This addresses the following: PSARC 2007/621 zone update on attach 6480464 RFE: zoneadm attach should patch/update the zone to the new hosts level 6576592 RFE: zoneadm detach

Re: [zones-discuss] bug? zone wont create device files during boot

Pascal wrote: > bash-3.00# cat /etc/release >Solaris 10 8/07 s10s_u4wos_12b SPARC >Copyright 2007 Sun Microsystems, Inc. All Rights Reserved. > Use is subject to license terms. > Assembled 16 August 2007 > > z

Re: [zones-discuss] Need to force delete zones

Michael Webb - Sun Microsystems wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > please respond directly to me as I am not on the alias. > I've built a number of zones for Sun Cluster deliveries so I know just > enough to get by. > I managed to zorch the /etc/zones~.xml files as well

Re: [zones-discuss] Cloned zones and printers - redux

Phil Freund wrote: > Let's try this again. Maybe someone won't hijack this thread this time. > > I just ran across an odd issue. I have a default network printer I setup for > all of my zones. I added that printer to the zone I use as a source for > cloning new zones with no problem and it print

[zones-discuss] zone update on attach ARC case

FYI, if you are interested in zone update on attach, which we discussed back in June, I have filed the ARC case here: http://opensolaris.org/os/community/arc/caselog/2007/621/ Let me know if there are any questions or comments. Thanks, Jerry ___ zones-

Re: [zones-discuss] -s option to zoneadm clone does not work

Christine Tran wrote: > Hi, > > Possibly a discrepancy between the man page and U4 functionality? I'm > on Solaris x86 U4, and > > # zoneadm clone -s tank/[EMAIL PROTECTED] zone1 > > -s: illegal option --s > > The -s is clearly documented in the man page. Christine, Yes, the man page is wro

Re: [zones-discuss] Writing to /usr/.......... in a zone

Renaud Manus wrote: > If your zone need to write to /usr then you should create a whole root > zone (rather than inherit /usr from the global zone). > > cf. http://www.opensolaris.org/os/community/zones/faq/#cfg_wholeroot Or this item in the zones FAQ might also help if you only need to write int

Re: [zones-discuss] Solaris 8 Branded Zones

Erik Vanden Meersch wrote: > Jerry > > A question that I repeatedly get from customers is directly > related to what you write: > >> S10 is still a very dynamic >> release so the interpositioning layer would need constant >> work to cope with the on-going changes in the >> kernel/user-land bounda

Re: [zones-discuss] Solaris 8 Branded Zones

mario heimel wrote: > Hello, > > Congratulations on a job well done. > http://docs.sun.com/app/docs/doc/820-2914?l=ja > > when i read the details, i think we need a solaris 10 branded zone. > with a branded zone the central patching from the global zone is not applied. > there is no SUNW_PKG_ALLZ

Re: [zones-discuss] attaching an un-detached zone

Pedro Espinoza wrote: > Is it possible to attach a downrev un-detached zone using -f ? Pedro, Yes it is, although it is up to you to ensure that the combination will work ok. You might create a combination of global zone and non-global zone where the NGZ does not work or works in incorrect ways.

Re: [zones-discuss] attaching an un-detached zone

Christine Tran wrote: > Hi, > > Quick question, can I attach (-f) a zone on shared storage that hasn't > been detached from another host? I don't have the hardware setup > necessary to test this. -CT Attach -f will always work if the zone is in the configured state and not already in the inst

Re: [zones-discuss] zlogin invoked by cron hangs after a few minutes

Damien Carbery wrote: > Using snv_73 sparc. Trying to build JDS inside a whole root zone (because we > install packages under /usr, /etc during the build). > > I have a cron script that uninstalls the current build, does a svn update, > does a full build and then sends report mails. I noticed th

Re: [zones-discuss] Changing a zones installation path and name

Stefhen Hovland wrote: > Hi, > > I have an already installed zone, and i would like to change its > installation location and zonepath. Is this possible via the commands > below? I am just looking to change the zone name and installation dir > on the disk. I would like to preserve all data. > > I

Re: [zones-discuss] Sysidtool not running after first boot on new zone under kernel 120011-14

Philip wrote: > After I had created a new zone for the first time under kernel 120011-14 (on > sparc 6/06), I found that sysidtool would not run automatically at the first > boot; and so I was not being allowed to finish setting up the zone with the > time zone, DNS, hostname, etc. The zone boo

Re: [zones-discuss] troubleshooting zone boot issues - failed with exit code 32

Jerry Kemp wrote: > I have a Sun T2000 running Solaris 10u2, all UFS file systems that has > been in place for several months. This morning during a reboot, I had a > zone that would not come back up. It failed to boot due to an inability > to mount /svc with an error of "failed with exit code

Re: [zones-discuss] Zone Migration with Resource Bindings

Jim, Jim Mauro wrote: > Does Zone migration factor in resource allocations? > If I have zoneA on sysA, and have configured > zone.cpu-shares, or some other resource control, > does the migration process, and/or the dry-run feature > check for availability of configured resources, or is this > simp

Re: [zones-discuss] bug? zone wont create device files during boot

Enda O'Connor ( Sun Micro Systems Ireland) wrote: > I tried build 74, > add device > set match=/dev/dsk/c0t0d0s7 > end > add device > set match=/dev/rdsk/c0t0d0s7 > end > > rebooted zone and device is there ( verified it wasn't before hand ) > We need the user case that fails. Enda, I thought th

Re: [zones-discuss] Bug? zonecfg export using memory-caps can't be imported

Konstantin Gremliza wrote: > /Hi, > > I created a zone like this using memory-caps:/ > > zonecfg -z zone-a > zonecfg:zone-a> add capped-memory > zonecfg:zone-a:capped-memory> set swap=512m > zonecfg:zone-a:capped-memory> set physical=512m > zonecfg:zone-a:capped-memory> end > zonecfg:zone-a> exit

Re: [zones-discuss] 06/06 > 08/07

Mike Gerdts wrote: > On 9/9/07, Morris Hooten <[EMAIL PROTECTED]> wrote: >> how can migrate or upgrade my 6 sparse and whole root zones >> that are on a separate file system than my root disk if i just >> install a fresh copy of 08/07 instead of upgrading? > > Sounds like you need the "update on a

Re: [zones-discuss] memory stats on zones

Brian Kolaci wrote: > Thanks Lou. > Is there anything in the works that you know of? rcapd also doesn't work > properly due to this issue. The customer has several other systems > with zones that also do alot of shared memory that aren't oracle. They > were actually looking for this in SunMC or

Re: [zones-discuss] zone stuck in shutting_down state

Steve Zinck wrote: > I'm going to open a > call with Sun, what information should I gather for them? halt -d? Yes, a system crash dump of the system in this state is what is needed. Thanks, Jerry ___ zones-discuss mailing list zones-discuss@opensolaris

Re: [zones-discuss] can't halt a zone in the down state (S10u3)

Bob Scheifler wrote: > I've had several instances recently of a zone in the DOWN state, > for which zoneadm halt just hangs, and the only recourse seems > to be to reboot the machine. The zone may have gotten into the > down state due to bug 6504424, but I'm not sure. Looking > at a forced crash

Re: [zones-discuss] installing zones

Oscar wrote: > bash-3.00# zoneadm -z myzones install > Preparing to install zone . > Checking file system on device to be mounted at > > ERROR: file system check of > failed:d > ERROR: cannot setup zone inherited and configured file systems > ERROR: cannot setup zone file systems inherited

Re: [zones-discuss] zone info question

Russ Petruzzelli wrote: > In a script I'd like to run prtdiag if I am in a global zone. > > Is there a zoneadm command to tell me what kind of zone I'm in? It's > not jumping out at me in the zoneadm help. > > eg: > > if [[ == true ]]; then > > > OR is there a way to get this to run

Re: [zones-discuss] Patching downrev zones

Nicolas Williams wrote: I've a customer who wants to be able to attach a downrev zone and patch it. They want to know when (and in what S10 update) this will be possible. This is 6480464 RFE: zoneadm attach should patch/update the zone to the new hosts level There is currently no date for ge

Re: [zones-discuss] Re: zonepath

F.V.(Phil)Porcella wrote: Hi Edna, OK so having the zoneroot be under / is NOT required, (thank you), and from what you said, having it on its own mount point is NOT a problem. If fact, you indicate that having the zones under /export may be the best practice. I think having zones on a separ

Re: [zones-discuss] Multiple zones and shared ZFS filesystems?

Peter Eriksson wrote: Let's take a not-so-hypothetical situation: A thumper. Serving files via NFS and SMB (samba). Let's assume I want to run the Samba processes inside zones (multiple zones, also, serving different network domains) to limit any possible securit holes and also to make it easi

Re: [zones-discuss] zone install problem

Jim Bob wrote: Hi, we just received a couple of T1000's and i am trying to create a few zones on the boxes. after configuring the zone, i type the zone install command and receive the following error: [EMAIL PROTECTED] # zoneadm -z oracle-zone install Waiting for up to <300> seconds for zone

Re: [zones-discuss] How good is zonecfg/zoneadm's wildcard parsing?

Zoram Thanga wrote: Hi, On an S10u4_07/SPARC machine. So I want to export a disk slice to my zone. I did thus zonecfg:paris> add device zonecfg:paris> set match=/dev/*dsk/c1t1d0s6 zonecfg:paris> end I was hoping that this would create /dev/rdsk/c1t1d0s6 and /dev/dsk/c1t1d0s6 in the zone 'par

Re: [zones-discuss] ipfilter in local zones

Jason Bradfield wrote: I have done some more reading around and found the following.. can you please confirm this.. I have read in several blogs that ipfilter(within a non global zone) has been possible since early this year.. Then when I looked at our zone and the ipf.conf and the ipfilter s

Re: [zones-discuss] Zones and Veritas Volume Manager... easy upgrades/LU usage possible ?

Gael wrote: With the current thread about upgrades, I was wondering if it would be possible to upgrade our currents frames to U4 as I would like to use the memory capping capabilities of U4... the one apparent issue here is that we are using Veritas for BOTH the BE and the zones filesystems the

Re: [zones-discuss] updating a zone when attaching

Ellis, Mike wrote: Thanks for the note and discussion jerry... I'm not a huge fan of LU (historical bagage on my part I guess) I recently started seeing its use as a some sort of means to an end. The interesting thing is that what you're proposing here (which is much more of an "patch-upgrade"

Re: [zones-discuss] updating a zone when attaching

Mike, Ellis, Mike wrote: I like your eaxample... Good way to go if you can't swing the zones over to some other server for import/attach/upgrade. How would you envision backing out of the newbe environment if (after doing the zoneimport +upgrade) you decide you want to back out and boot to the

Re: [zones-discuss] updating a zone when attaching

Mike, Mike Gerdts wrote: This seems to imply I can do something along the lines of: lucreate -n newbe ... for zone in $allzones ; do zoneadm -z $zone halt zoneadm -z $zone detach done luupgrade -t -n newbe -s /tmp/10_Recommended ... luactivate newbe init 6 for zone in $allzones ; do

Re: [zones-discuss] zoneadm install

F.V.(Phil)Porcella wrote: ***Im getting some strange errors from zoneadmin install bash-3.00# zoneadm -z CIS2 install Preparing to install zone . Creating list of files to copy from the global zone. Copying <213> files to the zone. Initializing zone product registry. ERROR: Read-only file system:

[zones-discuss] Re: [install-discuss] updating a zone when attaching

James Carlson wrote: Is that your understanding as well? So maybe there could be an issue if we had a patch that was not suitable for use in a Solaris update but that was issued asynchronously? ... or that was just handled differently in the update. I know we've done some special things in p

[zones-discuss] Re: [install-discuss] updating a zone when attaching

James Carlson wrote: Jerry Jelinek writes: This document describes in detail how the packaging bits will be taken care of. But how are patches re-run to update the zone on attach? We don't have copies of the patch metadata (the scripts) around in usable form, do we? Do we just 'as

[zones-discuss] Re: [install-discuss] updating a zone when attaching

James, James Carlson wrote: Jerry Jelinek writes: to upgrade to. Pkg operations on pkgs with the SUNW_ALLZONES attribute set must be run from the global zone, the operation will be performed on all native zones, and this behavior is built-in to the pkg commands. This document

Re: [zones-discuss] updating a zone when attaching

roush wrote: Hi Jerry, This proposal mentions "native" zones. Please ensure that the "cluster" brand is treated as a "native" brand, as noted in PSARC 2007/304. Ellard, Will do. Thanks, Jerry ___ zones-discuss mailing list zones-discuss@opensolaris

Re: [zones-discuss] updating a zone when attaching

Jeff, I trimmed most of the original email. Jeff Victor wrote: This is probably out of scope for this project, but "software delivery via zones" creates a potential security risk: software delivered via this method could have a limitpriv setting which is inappropriate in certain environments.

[zones-discuss] updating a zone when attaching

Enclosed is a draft of an ARC fast-track proposal I have been working on recently, in-between a few other things. I would like to submit this for ARC review shortly but I wanted to send this out to see if anybody had any comments before I do that. I have cc-ed the install-discuss alias as well,

Re: [zones-discuss] Error

The Real Warren Belfer wrote: Jerry Jelinek wrote: Andrew Dishong wrote: Getting the following error after trying to uninstall a zone,any ideas? [lab-15k-c]:~\ # zoneadm -z test1 uninstall Are you sure you want to uninstall zone test1 (y/[n])? y rm: Unable to remove directory /zonesHA/test1

Re: [zones-discuss] Error

Andrew Dishong wrote: Getting the following error after trying to uninstall a zone,any ideas? [lab-15k-c]:~\ # zoneadm -z test1 uninstall Are you sure you want to uninstall zone test1 (y/[n])? y rm: Unable to remove directory /zonesHA/test1/test1/root/usr/lib/cpu: File exists rm: Unable to remo

Re: [zones-discuss] Removing pool defs. with zonecfg

Bill Casale wrote: Can anybody tell me how to remove pool definitions within the zonecfg utility? I've tried variations of zonecfg remove with no luck. I can't find any syntax expamples in the documentation for doing this. It depends what release you are running. This is bug: 6442252 zonecf

Re: [zones-discuss] Default RM controls for Containers?

Jeff Victor wrote: Wouldn't this lead to a waste of resources on systems with only one non-global zone? It may not be the most common setup, but still makes a lot of sense for a higher level of security. No, since this is only a cap, not a partitioning of resources, so everything is still sha

Re: [zones-discuss] Default RM controls for Containers?

Mads Toftum wrote: On Fri, May 11, 2007 at 10:48:04AM -0600, Jerry Jelinek wrote: The requirement for the RM defaults should be that a misbehaving zone can't effectively bring down the whole system. You want to be able to get on the global zone and clean up the misbehaving zone and any

Re: [zones-discuss] Default RM controls for Containers?

Jeff Victor wrote: With all of that, should default values be minima or maxima? The goal I have in mind is default values that will protect a zone from DoS attacks, or the equivalent symptom, caused by bad software. Although we could assign default values to caps, they would be arbitrary, an

Re: [zones-discuss] Default RM controls for Containers?

Dan Price wrote: On Thu 10 May 2007 at 04:21PM, Jerry Jelinek wrote: of the other controls is trickier although I think Dan's idea of scaling these based on the system makes it easier. We might also want to think about scaling based on the number of running zones. Another way to look

Re: [zones-discuss] Default RM controls for Containers?

Bob Netherton wrote: I see where you are going with this Jeff, and there are some good ideas behind all of this. I have a great desire to rephrase your question without the reference to zones - how well is Solaris itself protected against the various forms of DoS attack ? Do the controls here

<    1   2   3   4   5   >