hostname.bge1001
-
group 10.0.1.0
I find that when I do cable pulls (pull bge0, replace bge0, pull bge1,
replace bge1) that a zone IP address has been transitioned to a test
address. Yuck!
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
_
On 5/24/06, Peter Memishian <[EMAIL PROTECTED]> wrote:> > > I find that when I do cable pulls (pull bge0, replace bge0, pull bge1,> > replace bge1) that a zone IP address has been transitioned to a test
> > address. Yuck!> > A test address? It actually ends up with IFF_NOFAILOVER set?I misstat
On 5/28/06, Peter Memishian <[EMAIL PROTECTED]> wrote:
I have a fix for (1) available that I can putback to Nevada immediately.Please let me know if you'd like to test it.I will most likely be able to test it once it is there - it would be easier for me to test against S10 than it would be against
On 6/20/06, Simon Redmill <[EMAIL PROTECTED]> wrote:
Hi,
Apologies if this has been discussed before. A customer recently
insisted that Zones are not supported/do not work if installed on a NAS
device. Is this the case?
TIA,
Simon.The best solution that I have seen so far is to use lo
y and the host.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
the global is required to make FSS active.
For that matter, there should be a warning message on zone boot that FSS is not
active and the configured zone.cpu-shares value will be ignored.
No reboot is required. See poolbind in this example:
http://users.tpg.com.au/adsln4yb/zones.html
ing from zones, I have been writing
scripts that sometimes parse the output of "zonecfg info". Changing
this format stands a good chance of breaking my scripts. It sounds
like if I set pool and rctl resources, they would still be displayed
as rctl and not translated to the syntax associated with temporary
pools. Is this correct?
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
would need to run in the global zone. This implies that
there would be a fair amount of rework between the CFSmount and Oracle
(is that the right name?) resources to add loopback mounts and zone
resources.
Mike
--
Mike Gerdts
http://mgerdts.blogsp
quot;split brain" protection and get rid of the worries about
firewall, tcp wrappers, etc. mentioned above.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
On 6/29/06, James Carlson <[EMAIL PROTECTED]> wrote:
Mike Gerdts writes:
> > - Zone roots can be setup on SAN LUNs as long as the HBA drivers are in the
Solaris 10 DVD miniroot. This allows for OS upgrades. We are using the Sun-branded
Qlogic HBAs which are handled by the Leadvill
L
and compare it to the output you get from ^Ec? after doing "platform
console".
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
be in update 3? Please?
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
in the new zone. They would like to know how
to get this working.
Does /opt/CA exist in /var/sadm/install/contents? It sounds to me
like the package creates the directory with mkdir in one of the
installation scripts without calling installf to tell the package
database what it did.
Mike
--
of when the zone name is greater than 29
characters. Then you run into bug 6284623, which is fixed with
123015-01. The patch came out in January, but I am not sure if it
was included in update 2 or not.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
__
irtual interface where it started (e.g. bge2:1). When the zone is
halted in this situation, the IP address stays active on bge2 until
you unplumb it. This also prevents the zone from completely shutting
down.
Mike
--
Mike Gerdts
http://mgerdts.blogsp
told the bug ID on this one yet.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
tes on the progress of this project? How does its
timing compare to the other projects (hypervisor support on sun4v
(11/06?), Xen on x86 (6/07?)) that could also offer the level of CPU
and memory controls requested?
Mike
--
Mike Gerdts
http://mgerdts.bl
ure
that svcs -x is clean, be sure that ~root/.rhosts doesn't say "+ +",
etc.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
onecfg -z newzone
create -t template-somezone
The source and destination servers may be at different patch levels,
and eventually different OS releases. Is a safer mechanism to zonecfg
-z export?
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zone
eaches a point that /var is known to be available it switches over to
/var. Looking at the output of svcs -xv will show where the log file
is for services that are holding up the boot process.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-d
files. PID files were a great idea at one time, but their usefulness
is eclipsed by contracts + SMF.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
". Workaround is to configure dummy IP addresses in a
down state on each VLAN interface.
I don' t think that the problems above happen if probe-based IPMP is
used. However, in some load situations in.mpathd introduces false
failures due to dropped ICMP packets and/or logic bugs in in.mpa
booted.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
to express this as one
big transition-- does that work for everyone?
Perhaps if zoneadmd is running in a debug or verbose mode (selected by
zonecfg(1M) property or /etc/default/zones?) then it could log
detailed state transition info to da
pper level monitoring agents without a lot of work by lots of
What if "zoneadm monitor -a" (all zones) had the ability to spit
syslog entries and/or SNMP traps? Perhaps if the SNMP route is taken,
a subagent to snmpd(1M) would be the right approach.
Mike
--
Mike Gerdts
http://mger
ready
foo 7 running ready
I'm not sure why the newstate and oldstate would be the same.
In order for an approach using a program like the one above to be
useful there would need to be some way to indicate what the desired
state for the zone is in addition to the the state that it has just
ut.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
shared segments only once
As I am looking forward to using zfs, I am trying to figure out how I
can tell how much memory is being used aside from the zfs buffer
cache.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-d
a man page
(time for swapfs(7s)?) and references to that definition in relevant
man pages.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
tly available physical memory.
I've seen confusion on this among many sysadmins and had a short while
ago brought it up without PSARC-EXT on the reply list.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
don't say "gzname" or
similar because the same file is intended to be useful with domains
(refer to the frame/system controller name), LDOM's, etc.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
sers within their "comfort zones" has
been a big part of introducing the new features that come with Solaris
10.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
As I look forward to possibly including blastwave in standard images,
I am thinking that Chris' approach of inherit-pkg-dir of /opt/csw (and
any other kinda big directories in /opt) is the more proper way to go.
Mike
--
Mike Gerdts
http://mger
uot;disable" subcommands. Among other things, the
disable subcommand "comments" network interfaces. That is, it adds an
attribute (or multiple) that includes the information about the
interface and removes the "net" resource(s). I then have an uncomme
On 12/7/06, Jeff Victor <[EMAIL PROTECTED]> wrote:
Mike Gerdts wrote:
> Is there an existing RFE to fix this? I have been meaning to file one
> for quite some time but just haven't gotten around to it.
Which "this" is broken?
I need a way to boot a zone for admi
t some of the values I am looking for are available
through kstat (thank you!). Is there some more user-friendly tool
(already or coming) to use inside the zone?
Oh, and the question that everyone at work will ask when I tell them
about this - when will it find its way into Solaris? :)
Mike
On 2/6/07, Paul Davis <[EMAIL PROTECTED]> wrote:
SVM with soft partitions is not an option and there will be no SAN
attached storage to mount small slices for zonepaths. Other than the
obvious issue of zones sharing a single partition (disk slice), are
there any other concerns with this configura
newfs /dev/md/rdsk/d$i
i=`expr $i + 1`
done
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
ey do not
touch private interfaces (e. g. no munging of /etc/zones/index).
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
e, be consistent in the use of hostnames or IP
addresses. That is, don't test "route get" with hostname but ping by
IP address. This will just compound your confusion in the event that
you have bad DNS entries.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
__
patched with patchadd -G, which would result in
confusing configurations with the various non-global zones. Perhaps
patchrm and patchadd (sans -G) would be in order.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
at
http://cvs.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/cmd-inet/usr.lib/in.dhcpd/interfaces.c#1402
yet.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
te doable.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
zfs file systems in the global
zone, could the global zone be cloned to form sparse non-global zones?
Arguably the value of sparse zones goes down substantially when ZFS
clones are involved, but it does provide interesting food for thought.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
UFS, not NFS and can be lofs mounted into the non-global zone.
Surely I am missing something else. What is it? Any interesting
complications with patching and/or live upgrade?
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing li
acle/O
0005000 1956 1919 0- ? 0:00
Aside from rebooting the entire system is there anything I can do to clean this
up?
Which process did you try to kill? 1919 or 1956? Normally killing
1919 would cause 1956 to go away. Is 1919 in some state that it can't
be killed?
Mi
way and the zone can go down.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
9 on a V490.
Perhaps you should be looking at either two systems or looking at an
M4000 with two domains.
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
t you can't take away
used space without deleting data.
HTH,
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
27;s product line
and opening up the computation methods to allow others to "benchmark"
other systems would be very helpful. Perhaps in the future ISV's
would say more meaningful things like "1 - 8 threads with at least 17
ZPUs and 6 GB RAM."
Mike
--
Mike Gerdts
http://mg
re you run into
problems with the system running a large number of zones.
Mike
[1] This assumes that you buy into the idea that a 4 processor system
with 8GB of RAM is modest - I may be a bit spoiled.
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
hout
a related physical interface. However, as soon as you try to
communicate with a non-existent IP address (UDP in my test case) you
can crash Nevada or hang the process in S10.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailin
ing the UDP packet to hang and become "immortal"
(ignored kill -9) and was spinning in the kernel.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
This could
be done either through looking at the unapplied patches or through a
web service that just provides the required scripts. A web service
may be a lot of work for what should be a relatively short term
problem.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
__
e on a system with zones on ZFS (significant pain
point) this looks very promising.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
o be available on
opensolaris.org and the mercurial change log is not terribly
revealing.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
d about 10 minutes to total outage time in my initial tests.)
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
On 6/4/07, Jeff Victor <[EMAIL PROTECTED]> wrote:
Wee Yeh Tan wrote:
> On 6/5/07, Mike Gerdts <[EMAIL PROTECTED]> wrote:
>> With hundreds of zones in production today, it is feeling like later
>> is already here. Worst case patching is well over 24 hours in si
On 6/4/07, Wee Yeh Tan <[EMAIL PROTECTED]> wrote:
On 6/5/07, Mike Gerdts <[EMAIL PROTECTED]> wrote:
> With hundreds of zones in production today, it is feeling like later
> is already here. Worst case patching is well over 24 hours in single
> user mode. (I have developed
On 6/29/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
No, you can't do that except by upgrading to a later Solaris 10 release.
It seems to me that what is really needed is a fix for 4966416[1]. It
looks to me as though the current rev of the zones patch[2] has this.
Of course the dependency
ill lofs mount
/san/data/zone1 from the root file system.
In some respects, this seems easier. In other respects, it seems to
allow for confusion, potentially with /san/data/zone1 on the root file
system eventually getting writes that it shouldn't.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
he upgrade bits have not yet been made ZFS aware. As such,
the bits to clone zones with zfs have not been backported to Solaris
10.
It works great in Nevada...
To make it work in Solaris 10, take a look here:
http://mail.opensolaris.org/pipermail/zfs-discuss/2006-November/035806.html
Mike
--
M
ibly "zones-discuss" in the search
terms. When I tried to use the jive interface I found it to be an
overall unrewarding experience. Of course subscribing to a bunch of
lists has its own drawbacks too.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
_
t;.
I have requested that Symantec improve things in this area. In
particular, I have requested:
- zones should be able to specify boot arguments
- there should be a zone run-level resource type
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
IP address.
This is not a comprehensive list. It is just a sampling of the types
of things that I ran into or could see as likely failure modes when
trying to get VCS (and similar service groups in VAD) to work with
zones.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
__
this is a good thing to do. I am, however, a
proponent of trying things that aren't in the book because that's when
you tend to learn the most.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
> [EMAIL PROTECTED]
Try this:
zonecfg -z labv490-01z5 delete -F
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
" - there's lots of other
virtualization in Solaris that is not part of this community.
2. Or "v12n-discuss" to not chew up the entire subject line.
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
ation - thanks for sharing.
While you used a zone to prove this out, it by no means is specific to
zones. You could probably reach those that are most interested at
sysadmin-discuss or security-discuss.
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
dium (DVD-only) to carry the same bits twice -- once as packages
> (for regular upgrades of global-zone-only systems) and then again as a
> set of patches (for Ashanti upgrades of systems with non-global
> zones). It wasn't sustainable.
Is this the purpose of the UpgradePatches dir
rmail/zones-discuss/2006-October/005474.html.
The short answer is that if you don't have an IP address on that
subnet in the global zone, you will have to resort to hackery to get
the default route added in the global zone after the zone's IP address
is up.
Mike
--
Mike
On 9/4/07, LaoTsao(Dr. Tsao) <[EMAIL PROTECTED]> wrote:
> if U are using nv build then U can cap zone's physical memory with
> project, s10u4 also has some memory cap feature due out soon
> http://opensolaris.org/os/community/zones/files/Zones_RM_Improvements.html
Update 4 (Solaris 10 8/07) can be
Solaris 10. I was
particularly surprised when I heard in the last couple of weeks that
ZFS root looks like it will make it into Solaris 10. (I'm not sure if
I ran across this on install-discuss, caiman-discuss, or one of the
installer conference calls.)
Mike
--
Mike Gerdts
http://mge
or pdo.c to become available to see what can be done to
improve it, but the wait is getting to be quite long.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
If you mix the two, you will have some
difficulties.
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
ne that OpenSolaris supports.
1. http://mgerdts.blogspot.com/2006/02/zone-created-in-0922-seconds.html
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
This has the potential to complicate zone
migration and causes confusion for those that are already struggling
with zones and inherited directories.
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
n their security system, not the OS) and stores the credentials in
the zone. This is needed if you want to run ha* commands from within
the zone. You may need to fix these up - or not. So far I haven't
had a lot of need for running ha* commands in zones, but I'm sure some
day I will co
utput (assuming that all zones use
the same name service - may break anyway if ps is "too smart"). You
can adjust the columns to match the -flZ output if desired.
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
confused by the fact that "rsh
hostname" really uses the rlogin protocol and "rsh hostname command"
uses the rsh protocol. I wish I had a dime for every time I had to
explain this to someone that was trying to get rsh or rcp to work.
--
Mike Gerdts
http://mgerdts.blogspo
ion with only one short
outage to each zone.
- Patching and upgrades can be done to one or many zones at a time.
That is, we would no longer be stuck with the current method that
forces all zones on a box to be patched serially during one long
outage to all zones on that box.
--
Mike G
blocks in swap device).
This would mean that critical operations stand less of a chance of
getting messed up by the system running short of memory during
patching operations. Perhaps a ramdisk would be better suited, but I
assume that the "ram" part of the name implies bad things on systems
irst S10 kernel
patch was released), I found similar behavior when running JASS via
zlogin. When I caused JASS to dramatically reduce its output (to
almost nothing) the problem went away. I don't know if this is
related or not - lots has changed in the code since then.
/zone.cfg
host1# zoneadm -z attach
My use case is based upon the notion that I want each zone to be able
to move independently, and as such a zpool is created per-zone.
Certainly there are other strategies that could be applied (move many
zones at once, use zfs send | somethin
nfiguring access to the "remote" queue.
It seems as though printers.conf could point to localhost in the
"master" zone and the clones would then also point to their respective
selves. Is there something broken with that approach?
--
Mike Gerdts
http://mgerdts.blogspot.
On 10/31/07, Norm Jacobs <[EMAIL PROTECTED]> wrote:
> Mike Gerdts wrote:
> > It seems as though printers.conf could point to localhost in the
> > "master" zone and the clones would then also point to their respective
> > selves. Is there something broken
to get better grounded in how
NPIV works and would appreciate any pointers to concise info to help
bring me up to speed.
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
g with large -Xmx parameters set but don't actually use all of
this memory.
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
.
2) Install another 2 GB of RAM.
Paging to swap devices is evil. Workloads that need more memory than
you have physical RAM for their working set will not give suitable
interactive performance (and even batch performance would be
miserable).
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
act, so long as you don't run into 32-bit
address space issues. If you have multiple processes contending for a
couple hundred IOPs of swap device performance, those processes will
suffer.
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
yte of RAM.
You can also use "vmstat" and "vmstat -p" to confirm that paging
activity is high and somewhat characterize what is being paged.
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
an unimportant conflict:
http://www.opensolaris.org/jive/message.jspa?messageID=29843#29910
Dave Miner explains that that multi-platform flash was supposed to
work but cautions that there may be dragons.
http://www.opensolaris.org/jive/message.jspa?messageID=29843#30095
--
Mike Gerdts
http://mgerd
ate on attach") I
was having a hard time. I really think that "update on attach" would
also solve the issue at hand, now that I think about it.
http://www.opensolaris.org/os/community/arc/caselog/2007/621/
Mike
--
Mike Gerdts
http://mgerdts.blogspot.com/
e back to host-A, does it need to be
> downgraded?
It would need to be downgraded, but the last draft I read of the
update on attach spec that I read did not support this. I would not
expect it to support it in the future either, as "downgrade" in
Solaris and pretty much every o
e a look at zonemgr. It will do quite a bit of
customization of a zone without interaction and may be just what you
are looking for.
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
with the same
error message above. The messages were interspersed, possibly
implying that multiple threads were writing the messages. I had to
hard reset the system to get back.
Be careful with vni.
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-
etmasks would be worthless for that.
For configuring IP addresses on the typical machine bolted to a rack
or sitting on a desk, /etc/netmasks is quite manageable, stable, and
desirable.
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones
continue to spread the word about "dynamic" frequently. I
can't tell you how many times I have had to express the same to people
that have a fear of it because they assume that every address
allocated will be from a dynamic address range or that a
hcpd
can run zones just fine. Solaris 10 update 3 and later (I forget
which Nevada build) have all the required bits in place.
http://mail.opensolaris.org/pipermail/install-discuss/2007-March/004266.html
--
Mike Gerdts
http://mgerdts.blogspot.com/
it work without any special tweaks was straightforward.
If you offer up hints, I make take this on in the future. I've got a
couple other things I want to work on before this one, though.
--
Mike Gerdts
http://mgerdts.blogspot.com/
___
zones-discuss mailing list
zones-discuss@opensolaris.org
1 - 100 of 245 matches
Mail list logo
