Re: [zones-discuss] Bridging at Zones.

2012-08-26 Thread James Carlson
Simnet links are just point-to-point, so they're perhaps not too interesting if you're deeply concerned about details such as Appointed Forwarder operation or DR election, at least on those links, but you can use one or two real external Ethern

Re: [zones-discuss] Bridging at Zones.

2012-08-24 Thread James Carlson
, it uses physical interfaces. If you really need to keep it out of the global zone for some reason, I think you'll need to run it in a VM. But I don't understand the scenario in which that would be required. -- James Carlson 42.703N 71.076W _

Re: [zones-discuss] Can not ping between zones and internal network

2011-09-08 Thread James Carlson
r is a fixed e1000g driver that handles the multiple unicast slots properly, or one that at least allows you to disable the slots so that the VNIC logic is forced to use promiscuous mode itself. You might try crossbow-disc...@opensolaris.org. They may have other ideas.

Re: [zones-discuss] Can not ping between zones and internal network

2011-09-07 Thread James Carlson
ent fact that it's not doing that is a bug. Since this zone and the global zone are on the same subnet, one possible option here is to go with shared IP stack rather than exclusive. Or, as another possible work-around, you could put that interface into promiscuous mode at a pretty low lev

Re: [zones-discuss] ERROR: the zonepath must be a ZFS dataset.

2011-09-06 Thread James Carlson
than what we had for S10. Forcing users to put zones on distinct ZFS datasets seems to me like a trivial matter that ends up simplifying and providing a lot of benefit. -- James Carlson 42.703N 71.076W ___ zones-discuss mailin

Re: [zones-discuss] Future directions of Zones?

2011-06-20 Thread James Carlson
nts). Although possible, it's unclear to me whether any of that would be desirable. "So, what problem is it you're solving here?" -- James Carlson 42.703N 71.076W ___ zones-discuss mailing list zones-discuss@opensolaris.org

Re: [zones-discuss] question about nfs_global_client_only /etc/system flag

2011-03-21 Thread James Carlson
nge behavior or disappear without warning -- even in a patch. Only things that are actually intended for use by users, administrators, or third party developers are included in the system documentation. The paperwork required to use that sort of interface within Sun: http://arc.opensolaris.org

Re: [zones-discuss] "Security through virtualization is a failure":

2010-12-27 Thread James Carlson
or we're not. If we're not, then I'm going to set up secure protocols to talk; I'm not going to trust my data to any sort of partitioning scheme -- whether subnets, VLANs, VNICs or whatever.) -- James Carlson 42.703N 71.076W ___ zones-discuss mailing list zones-discuss@opensolaris.org

Re: [zones-discuss] "Security through virtualization is a failure":

2010-12-27 Thread James Carlson
r such protocols. Don't forget that with security, simple is usually better. Complex answers tend to be the ones that are hard to configure properly and thus are often done wrong. But good luck. -- James Carlson 42.703N 71.076W ___ zones-discuss mailing list zones-discuss@opensolaris.org

Re: [zones-discuss] Possible to use zones for hardening? Security?

2010-11-28 Thread James Carlson
ances, the zone itself must set up the routes it needs. With shared IP instances, all routing is done in the global zone alone. -- James Carlson 42.703N 71.076W ___ zones-discuss mailing list zones-discuss@opensolaris.org

Re: [zones-discuss] SunOS 5.10 Generic_138888-05 sun4u sparc SUNW, Sun-Fire-V890 supports IPv6

2010-10-13 Thread James Carlson
etworking-discuss instead of zones-discuss, since this is a networking question. Or maybe one of the S10 groups, like BigAdmin.) -- James Carlson 42.703N 71.076W ___ zones-discuss mailing list zones-discuss@opensolaris.org

Re: [zones-discuss] Possible to use zones for hardening? Security?

2010-09-29 Thread James Carlson
global zones will have networking that's completely independent of the global zone. You can't "shut down" the global zone, but you certainly can configure it so that it doesn't have any available networking interfaces. -- James Carlson 42.703N 71.076W

Re: [zones-discuss] Can I use 32-bits apps in zone on x64 OSOL?

2010-09-29 Thread James Carlson
e only question is whether this product has kernel modules. If it does, then you can't load 32-bit kernel modules into a 64-bit kernel (for much the same reason that you can't use 32-bit libraries with a 64-bit program). -- James Carlson

Re: [zones-discuss] zone with virtual and physical networking or per UID/GID routing?

2010-06-25 Thread James Carlson
my only option to add a third NIC to the machine and have > local traffic go through it? It would work but it's not pretty. What OpenSolaris version are you running? Is it the latest available? Have you tried using a vnic in a non-global zone with an exclusive IP stack instance? --

Re: [zones-discuss] ZFS ARC cache issue

2010-06-07 Thread James Carlson
use all of memory by default" scheme fairly problematic, as it would just intermittently shoot down large processes. Or just more fundamentally: needing to tune this at all seems a bit like a bug to me. -- James Carlson 42.703N 71.076W

Re: [zones-discuss] ZFS ARC cache issue

2010-06-04 Thread James Carlson
ng suspicious there. Since Fusion is Oracle and OpenSolaris and ZFS are Oracle, maybe there's another possibility. This could be one of those cases where that hoped-for "synergy" might kick in. ;-} -- James Carlson 42.703N 71.076W ___

Re: [zones-discuss] ZFS ARC cache issue

2010-06-04 Thread James Carlson
t the original poster complained about. His original message said that he was having trouble with a large application (Oracle Fusion) running on a system using ZFS. Does Fusion really need contiguous kernel memory (why?) or is there something else going on here? -- James Carlson 42.703N

Re: [zones-discuss] ZFS ARC cache issue

2010-06-04 Thread James Carlson
his at all? Isn't the ZFS ARC supposed to release memory when the system is under pressure? Is that mechanism not working well in some cases ... ? -- James Carlson 42.703N 71.076W ___ zones-discuss mailing list zones-discuss@opensolaris.org

Re: [zones-discuss] Q: is there a way to get a zoneid from kernel (not in user context)?

2010-05-28 Thread James Carlson
swer is to fetch the cred_t attached to the dblk_t, and get the zoneid from the cred_t. It's not unusual at all for interrupts and taskqs to do work on behalf of many different zones, and for them to need to track this information separately. -- James Carlson 42.703N 71.076W ___ zones-discuss mailing list zones-discuss@opensolaris.org

Re: [zones-discuss] Nero Linux in zones

2010-04-12 Thread James Carlson
Joerg Schilling wrote: > James Carlson wrote: > >>> Just try to describe _why_ you believe that you need Nero. >> Assuming that his original problem is that mkisofs and cdrecord are just >> too hard to use -- in comparison to the GUI-based features on other >

Re: [zones-discuss] Nero Linux in zones

2010-04-11 Thread James Carlson
y ;-}), but providing good UIs goes a long way to making users productive without forcing them to become grad students in each technical area. -- James Carlson 42.703N 71.076W ___ zones-discuss mailing list zones-discuss@opensolaris.org

Re: [zones-discuss] zonecfg export Segmentation Fault (core dumped) with a modified crle path

2010-04-03 Thread James Carlson
END* of the system paths -- that is, if you have some add-on libraries that do not conflict with any system library -- and is roughly equivalent to and slightly better then (4), but it's bad news if you try to override. You could create a custom LD_CONFIG file, but then you're essential

Re: [zones-discuss] zonecfg export Segmentation Fault (core dumped) with a modified crle path

2010-04-02 Thread James Carlson
Dr Lou wrote: > - However, with this crle configuration: > # crle -c /var/ld/ld.config -l /usr/local/lib:/lib:/usr/lib > # zonecfg -z zone-pg84 export segfaults: > Segmentation Fault (core dumped) What does "ldd /usr/sbin/zonecfg" say? -- James Carlson

Re: [zones-discuss] networking

2010-02-17 Thread James Carlson
d for a BSD-Jails-like environment, where you're consolidating numerous servers that were previously configured side-by-side on a single network. Shared doesn't work as well when the zones are mutually hostile. -- James Carlson 42.703N 71.076W ___ zones-discuss mailing list zones-discuss@opensolaris.org

Re: [zones-discuss] Installing a specific dev release into a zone?

2010-01-27 Thread James Carlson
roject in terms of kernel handling; it's not a layer in any sense), but there's a price to be paid in feature set for that lightness. -- James Carlson 42.703N 71.076W ___ zones-discuss mailing list zones-discuss@opensolaris.org

Re: [zones-discuss] zlogin -C zone

2010-01-26 Thread James Carlson
key logic usually doesn't misbehave like that, but not all logic is robust ...) -- James Carlson 42.703N 71.076W ___ zones-discuss mailing list zones-discuss@opensolaris.org

Re: [zones-discuss] Zones on shared storage - a warning

2010-01-08 Thread James Carlson
Mike Gerdts wrote: > This unsupported feature is supported with the use of Sun Ops Center > 2.5 when a zone is put on a "NAS Storage Library". Ah, ok. I didn't know that. -- James Carlson 42.703N 71.076W ___

Re: [zones-discuss] Zones on shared storage - a warning

2010-01-08 Thread James Carlson
ust be specified by a full path. Could it be that "discouraged" and "experimental" mean "not tested as thoroughly as you might like, and certainly not a good idea in any sort of production environment?" It sounds like a bug, sure, but the fix might be to remove the o

Re: [zones-discuss] Defaultrouter problem?

2009-09-27 Thread James Carlson
distinct from the ones that the non-global zones must reach, then you should be able to come up with a set of routes that will direct traffic appropriately based on remote address. (A routing protocol may help.) - Modify your default routers so that they know how to de

Re: [zones-discuss] [networking-discuss] is the zoneid signed or unsigned?

2009-09-18 Thread James Carlson
integers would be easier to encode and work with. The rest of the team, though, assumed differently: that if there was any coordination between machines, it would be on the basis of the assigned zone name, and that strings were just as easy to use. -- James Carlson 42.703N 71.0

Re: [zones-discuss] [networking-discuss] is the zoneid signed or unsigned?

2009-09-18 Thread James Carlson
Darren Reed wrote: > On 18/09/09 10:44 AM, James Carlson wrote: >> Darren Reed wrote: >>> As an unsigned integer for all values, except -1, or as a signed integer? >>> >> >> I still think it's properly "neither." Users can't reasonab

Re: [zones-discuss] [networking-discuss] is the zoneid signed or unsigned?

2009-09-18 Thread James Carlson
Darren Reed wrote: > James Carlson wrote: >> What kind of confusion are you expecting? >> > > If it is an opaque type, then how does it get printed? You have to use one of the look-up functions to convert it to a string for printing. Zones are named, not numbered, even

Re: [zones-discuss] [networking-discuss] is the zoneid signed or unsigned?

2009-09-18 Thread James Carlson
#x27;t seem to come into it. What kind of confusion are you expecting? -- James Carlson 42.703N 71.076W ___ zones-discuss mailing list zones-discuss@opensolaris.org

Re: [zones-discuss] [networking-discuss] Problem downloading packages within non-global zone

2009-07-29 Thread James Carlson
statically configure those things if you want. It sort of defeats the whole purpose of DHCP, but it's certainly supported. See the dhcpagent(1M) man page for details. > Which command I can use to know the dns settings in the global zone? Get shell access in the global zone and exa

Re: [zones-discuss] /export/home missing on non global zone

2009-07-05 Thread James Carlson
On Jul 5, 2009, at 5:39 AM, Anon Y Mous wrote: What I meant to say was that my OpenSolaris 2008.11 ipkg zones use / home for user directories instead of /export/home. I think it maybe has something to do with the automounter not being set up automatically in the zones? I know in the globa

Re: [zones-discuss] Parallel mount question

2009-06-29 Thread James Carlson
On Jun 29, 2009, at 2:31 PM, Glenn Faden wrote: Steve Lawrence wrote: I think each zone's automounter is smart enough to use lofs instead of nfs for mounts from a non-global to a global zone. Please explain how this is possible. How can the automounter convert an nfs specification of

Re: [zones-discuss] Can a non-global zone mount an NFS file system from its own global zone?

2009-06-29 Thread James Carlson
On Jun 29, 2009, at 2:58 PM, Nicolas Dorfsman wrote: Le 29 juin 09 à 18:37, John Lorenzon a écrit : The answer is no. 5065254 NFS/UFS deadlock when system is both NFS server and client We don't use UFS. ;-) That might not be enough to save you. The bug is a complicated (and rare)

Re: [zones-discuss] code review request: SUNWzoneint removal

2009-06-17 Thread James Carlson
ded. - The ABI exceptions entry isn't present ... but I have no idea what state the ABI tools are actually in. -- James Carlson, Solaris Networking Sun Microsystems / 35 Network Drive71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N

Re: [zones-discuss] code review request: SUNWzoneint removal

2009-06-17 Thread James Carlson
are these libraries now some form of Public interface? Or will IPS and Caiman have contracts, and is this just an exception to the usual rules? -- James Carlson, Solaris Networking Sun Microsystems / 35 Network Drive71.232W Vox +1 781 442 2084 MS UBUR02-212 / Bu

Re: [zones-discuss] Running a 32 bit zone in Solaris 64 bit

2009-05-27 Thread James Carlson
Bernd Schemmer writes: > >>hat exactly are you trying to do, and why won't it work on a regular > >>64-bit kernel? Do you just want to limit the output of 'isainfo', or > >>is there something more to it? > > Exactly -- ... The problem occured while I was creating a package for > the new QEMU ve

Re: [zones-discuss] Running a 32 bit zone in Solaris 64 bit

2009-05-27 Thread James Carlson
want to limit the output of 'isainfo', or is there something more to it? -- James Carlson, Solaris Networking Sun Microsystems / 35 Network Drive71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 ___ zones-discuss mailing list zones-discuss@opensolaris.org

zones-discuss@opensolaris.org

2009-05-22 Thread James Carlson
> caution against the use of -b not being supported. To me it seems more > safe > than relying on removing 4 fixed inherit-pkg-dirs which we might change > in the > future, although at this point certainly seems unlikely. Agreed; it is in fact very unlikely to change. And "

zones-discuss@opensolaris.org

2009-05-22 Thread James Carlson
ольга крыжановская writes: > 2009/5/22 James Carlson : > > If you're using S10 or SXCE, use "man zonecfg" and read the section on > > "Whole Root Zones." > > The person who installed this machine did a rm -f -r /usr/share/man to > conserve spac

zones-discuss@opensolaris.org

2009-05-22 Thread James Carlson
If you're using OpenSolaris, I think you shouldn't be having that problem. -- James Carlson, Solaris Networking Sun Microsystems / 35 Network Drive71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 __

Re: [zones-discuss] PS Re: Fwd: Live Upgrade and sparse root zones with their own /usr?

2009-05-13 Thread James Carlson
All you really need are some writable directories inside the inherited mount points. In those cases, you can set up lofs mounts to provide writable storage to the zone. -- James Carlson, Solaris Networking Sun Microsystems / 35 Network Drive71.232W Vox +1 781 442

Re: [zones-discuss] PS Re: Fwd: Live Upgrade and sparse root zones with their own /usr?

2009-05-11 Thread James Carlson
ackaged software (e.g., /usr/local can be made writable), but removing just "some" of the things on the sparse list will likely run you into upgrade trouble. -- James Carlson, Solaris Networking Sun Microsystems / 35 Network Drive71.232W Vox +1 781 442 2084 MS UBUR

Re: [zones-discuss] high values for zones size in os2008.11

2009-04-30 Thread James Carlson
solarg writes: > James Carlson wrote: > > > At a guess, the difference between these two machines is that > > 'catalogue4' was likely created as a sparse-root zone, while > > 'catalogue2' was created as a whole-root zone. The clones of that > &

Re: [zones-discuss] high values for zones size in os2008.11

2009-04-30 Thread James Carlson
@catalogue2_snap > rpool/zones/catalogue2/ROOT/z...@test_drupal_snap358M 4.75G - > rpool/zones/catalogue2/ROOT/z...@catalogue3_snap85.2M 7.47G - [...] > rpool/zones/catalogue3/ROOT/zbe 149M 6.66G > rpool/zones/catalogue2/ROOT/z.

Re: [zones-discuss] NTP client in non-global zone

2009-02-19 Thread James Carlson
ugh to know if a zone can be an NTP *server*. If anyone knows > Sun's position on this, I will add it to the FAQ. Being a server is easier than being a client. Clients have to adjust the local system time, or they're not doing anything useful. A server can broadcast the time withou

Re: [zones-discuss] NTP client in non-global zone

2009-02-19 Thread James Carlson
Nicolas Dorfsman writes: > Le 19 févr. 09 à 14:02, James Carlson a écrit : > > To expound on that a bit: non-global zones can have access to networks > > that the global zone cannot talk to. In these cases, it's possible > > for NTP to be configured to serve out time e

Re: [zones-discuss] NTP client in non-global zone

2009-02-19 Thread James Carlson
f it can't manage the time on the system. The "disable pll" option in ntp.conf would be used to set up such a server. > +1 > > It would be a great idea to have a easy solution to give these > privileges to a zone.___ Se

Re: [zones-discuss] Making directories in /usr visible (from global zone) in non-global zone

2009-02-10 Thread James Carlson
bal zone's "/usr". That's the default, and you have to do something at zone creation time (either using "-b" for the zonecfg create subcommand or deleting the "/usr" IPD) to get independent zones. If you did remove that IPD in some way when you c

Re: [zones-discuss] Install zones, configure as DHCP client

2009-02-09 Thread James Carlson
27;t, and you're ok with configuring the IP parts of networking for those non-global zones using zonecfg, then a shared stack instance may work. The two are different operational models, and which you choose depends on what you need. -- James Carlson, Solaris Networking Sun Micr

Re: [zones-discuss] Install zones, configure as DHCP client

2009-02-09 Thread James Carlson
ough, because there's still only one kernel image on the system.) > Will creating zones in a Virtual Box image qualify as that ? No. -- James Carlson, Solaris Networking Sun Microsystems / 35 Network Drive71.232W Vox +1 781 442 2084 M

Re: [zones-discuss] Install zones, configure as DHCP client

2009-02-09 Thread James Carlson
don't think a new RFE was ever opened. -- James Carlson, Solaris Networking Sun Microsystems / 35 Network Drive71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 ___ z

Re: [zones-discuss] Scratch Zone - purpose

2009-02-05 Thread James Carlson
he upgrade process. They're intentionally undocumented, because they're meant to be an internal design detail. -- James Carlson, Solaris Networking Sun Microsystems / 35 Network Drive71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N

Re: [zones-discuss] Adding a NIC to running zones

2009-01-28 Thread James Carlson
se they're different objects. "ifconfig" controls IP interfaces, not NICs. To move a NIC into a running exclusive-IP-stack zone, use dladm. This should do the trick: dladm set-linkprop -t -p zone=myzone bge0 Note that "-t" is required. To make a permanent cha

Re: [zones-discuss] Moving /opt to inherited

2008-12-23 Thread James Carlson
and others keep /opt local and then use lofs to "copy" selected things from the global zone. -- James Carlson, Solaris Networking Sun Microsystems / 35 Network Drive71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.4

Re: [zones-discuss] Moving /opt to inherited

2008-12-23 Thread James Carlson
ons are the default 'sparse root' and -b 'whole root' ones; I don't know of any mix-n-match testing with inherited product directories, so you might be skating out onto a thinner section of the ice. -- James Carlson, Solaris Networking Sun Microsyste

Re: [zones-discuss] exclusive-ip zone and non-observability

2008-12-16 Thread James Carlson
ust making sure. Using the existing Clearview interfaces (integrated back in November for build 103; see CR 4085089), you should be able to snoop lo0 just fine. -- James Carlson, Solaris Networking Sun Microsystems / 35 Network Drive71.232W Vox +1 781 442 2084 MS UBUR02-212 / B

Re: [zones-discuss] Zone Bandwidth

2008-12-09 Thread James Carlson
want. But that's not > even in OpenSolaris yet. Actually, Crossbow integrated into build 105 last Friday. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 35 Network Drive71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01

Re: [zones-discuss] Update on attach and upgrades

2008-12-08 Thread James Carlson
27;re suggesting would seem simpler and more obvious (it does to me), but it's up to marketing to determine what those words actually mean, and I'm not in marketing. Fortunately, I don't think the issue has any substantial impact on opensolaris.org. -- James Carlson, Solar

Re: [zones-discuss] zone p2v proposal

2008-12-08 Thread James Carlson
update pkgs within > the zone, whether the pkg varies by version number or by the patches > applied to the pkg. OK. The surprise to me is that it doesn't seem to care about minor release. I guess that's "obvious" when the me

Re: [zones-discuss] zone p2v proposal

2008-12-08 Thread James Carlson
plementation view) is effectively upgrade the bits as though patches were added due to the differing patch levels of the source archive and the running machine. I'm surprised that it might do something different. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsy

Re: [zones-discuss] zone p2v proposal

2008-12-08 Thread James Carlson
Jerry Jelinek writes: > James Carlson wrote: > > "Update on attach" just means "apply saved patches, if any are > > needed," right? > > Not really. We see what pkgs are out of sync, either because of the > pkg version of because of patches applied to t

Re: [zones-discuss] zone p2v proposal

2008-12-08 Thread James Carlson
Nicolas Williams writes: > On Mon, Dec 08, 2008 at 12:37:48PM -0500, James Carlson wrote: > > I suppose it'd be possible to look through the SMF 'privileges' for > > the services that are still enabled, and then attempt to union those > > into the zone privi

Re: [zones-discuss] zone p2v proposal

2008-12-08 Thread James Carlson
matter of seeing the manifests in a hollow package and then reading the manifests to determine what services they deliver, and disabling those. Is that right ... ?) -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 35 Network Drive

Re: [zones-discuss] zone p2v proposal

2008-12-08 Thread James Carlson
-d {path} - specifies a path to a tree of files as the source for the > >> installation. > > > > Just for clarification: does that '-d {path}' option point to a system > > root? Could I use "lumount" to mount up an inactive BE and t

Re: [zones-discuss] Update on attach and upgrades

2008-12-08 Thread James Carlson
e ones now missing in Indiana), I don't think it's something that would need to be discussed here, any more than any other entity offering to provide commercial support on existing open source code. (If what you might be expecting here is someone to take the code "private"

Re: [zones-discuss] zone p2v proposal

2008-12-08 Thread James Carlson
of files as the source for the > installation. Just for clarification: does that '-d {path}' option point to a system root? Could I use "lumount" to mount up an inactive BE and turn it into a zone? -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Mic

Re: [zones-discuss] DHCP client with shared ip interface in OpenSolaris 2008.11?

2008-11-19 Thread James Carlson
do this, but now that 5005887 has shipped, we'd probably need to open a new RFE for it. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 35 Network Drive71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington M

Re: [zones-discuss] Zone Statistics: monitoring resource use of zones

2008-11-18 Thread James Carlson
ain specific feature tests. It'd be better to start with a clear set of requirements and work down to an implementation, I think. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 35 Network Drive71

Re: [zones-discuss] Zone Statistics: monitoring resource use of zones

2008-11-18 Thread James Carlson
ing automated tools without imposing a great burden > on the tool developer. That sounds like a bug that should be fixed. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 35 Network Drive71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 0

Re: [zones-discuss] opensolaris zones cookbook

2008-10-22 Thread James Carlson
pkg to do your upgrades, then it's the OpenSolaris distribution. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 35 Network Drive71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01

Re: [zones-discuss] Questions regarding Solaris containers

2008-10-21 Thread James Carlson
re any log messages? What was the exact configuration used? (And have you contacted Sun's support group?) There are some known problems, such as CR 6632938, which makes a pattern like "/dev/dsk/c2t1d0s*" not work, but getting to the root of the problem will require details. -- Ja

Re: [zones-discuss] Somewhat unusual exclusive-IP type configuration needed

2008-10-20 Thread James Carlson
at it's always been a bit problematic. It wasn't the design center for the original Kevlar/Zones project: all zones were expected to go on a common set of subnets. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 35 Network Drive71

Re: [zones-discuss] Confirming Zone running Container

2008-10-02 Thread James Carlson
easily see which global zone matches your > local. Yet another way it leaks through, at least on systems with shared IP stacks, is in hardware addresses. Look at "netstat -np". -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 35 Netwo

Re: [zones-discuss] Etude and VLAN tagging

2008-09-26 Thread James Carlson
#x27;re obviously quite right ... I don't know where I got the idea that 'exclusive' didn't work here. Sorry about that. :-< -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 35 Network Drive71.232W Vox +1 781 442 208

Re: [zones-discuss] Etude and VLAN tagging

2008-09-26 Thread James Carlson
s to watch out for? It should work on any update that supports Etude. There've been continuous updates to our networking support since S10 FCS, but using VLANs (at least on some interfaces) was a feature in FCS. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> S

Re: [zones-discuss] [osol-code] Zones take differenent logical interfaces after every reboot

2008-08-28 Thread James Carlson
Ben Rockwood writes: > James Carlson wrote: > >> Let me know if you my explanation is not clear . > >> > > > > The part that's unclear is why this is a problem. What are you doing > > that depends on a logical interface name, and that needs to ke

Re: [zones-discuss] [osol-code] Zones take differenent logical interfaces after every reboot

2008-08-28 Thread James Carlson
. The part that's unclear is why this is a problem. What are you doing that depends on a logical interface name, and that needs to keep that name static? -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 35 Network Drive71.232W Vox +

Re: [zones-discuss] [smf-discuss] 6725004 - installing single-user-mode patches automatically

2008-08-19 Thread James Carlson
don't think we know how many of these sorts of special dependencies exist in ON. Except for the controlled environment of patches, we've always assumed synchronous delivery of everything built in ON as part of our design. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]&g

Re: [zones-discuss] Creating users and SMF services in SVR4 packages with zones

2008-07-15 Thread James Carlson
script will fail miserably when 'pkgadd' is pointed at an alternate boot environment, or when invoked during a custom install. That's why I'm discouraging its use, and instead pointing folks to CR 6387333. There's a missing feature here, and trying to paint around it ju

Re: [zones-discuss] Creating users and SMF services in SVR4 packages with zones

2008-07-15 Thread James Carlson
ocumented system library interfaces -- and not at the system call level.) What you're suggesting isn't supported and can't be supported. Instead of that, I'd suggest using nawk for now, and adding a call record to CR 6387333. useradd/groupadd should know how to deal with

Re: [zones-discuss] zoneadm confusion

2008-07-09 Thread James Carlson
g stacks. (There are more systematic ways to search for the offender, including locating the zone_t and finding out what it's blocked on, but looking at the stacks is often effective and quick.) -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems /

Re: [zones-discuss] zoneadm confusion

2008-07-09 Thread James Carlson
# zoneadm -z jcp-mail-zn-mn-colo1 halt > ^C (after 10 minutes) > > Any clues to what is going on? Is there any chance that it's stuck trying to shut down? I'd first look for threads that appear to be stuck in mdb's "::threadlist -v" output. -- James Carlson, Solari

Re: [zones-discuss] DSR

2008-06-25 Thread James Carlson
and later on > re-deploy 2 zones to physical boxes... Ah, ok. For staging, that makes sense. It was the deployment part I was looking at ... I couldn't see a reason why you'd want a permanent configuration built that way. -- James Carlson, Solaris Networking <[EMAIL

Re: [zones-discuss] S10U6 zone features

2008-06-25 Thread James Carlson
that no backport is in progress, at least right now. The way a backport often ends up happening is that a contract customer for one of those older supported releases makes a formal request through Sun's support group. That doesn't happen on opensolaris.org. -- James Carlson, Solaris Netw

Re: [zones-discuss] DSR

2008-06-24 Thread James Carlson
(I guess). I'd expect it to work fine, but be pointless. Why load-balance across multiple instances in a single box? In any event, using the 'vni' interface rather than 'lo' is likely to get you better results for most applications. This is exactly the sort of thin

Re: [zones-discuss] Making zoneadm more like the other adms...

2008-06-20 Thread James Carlson
n what problem we're solving. Is it just that zlogin has a command line that behaves like rlogin (needing no option to select "host"), and that zoneadm/zonecfg use an option to specify the same thing? -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun M

Re: [zones-discuss] DSR

2008-06-20 Thread James Carlson
inary IP nodes, and need not know that DSR is going on. (Note that doing load balancing across multiple zones on the same machine, while possible, might not make operational sense.) -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 35 Network Drive

Re: [zones-discuss] Making zoneadm more like the other adms...

2008-06-19 Thread James Carlson
pporting the old syntax is a minimum requirement, which (in addition to other problems) means you likely end up having have to define what "zoneadm -z foo boot bar" actually means. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 35 Network D

Re: [zones-discuss] Will exclusive IP allow for TCP /etc/system settings?

2008-06-18 Thread James Carlson
then gets the ioctl and can decide to do anything it wants with it. Sometimes, it sets a variable somewhere, or perhaps modifies multiple variables. Other ndd ioctls cause other functions to be called, locks to be taken, and other work done. Unlike /etc/system, the possibilities are endless. -- J

Re: [zones-discuss] Will exclusive IP allow for TCP /etc/system settings?

2008-06-18 Thread James Carlson
Jim Nissen writes: > Will Solaris 10 Zones, with exclusive IP, allow one to set NGZ TCP > tunables, like tcp_conn_req_max_q? Yes, every zone configured as exclusive has its own TCP/IP stack instance. Are you asking because you've encountered some problem with this? -- James Carls

Re: [zones-discuss] Zone with IP address from a different subnet

2008-06-05 Thread James Carlson
oup for S10 issues (yes, I saw your email address) and (b) this stuff works in current OpenSolaris. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsystems / 35 Network Drive71.232W Vox +1 781 442 2084 MS

Re: [zones-discuss] Zone with IP address from a different subnet

2008-06-05 Thread James Carlson
Alain Durand writes: > Could you please elaborate a bit further ? I must admit I do not > really understand what should be done. Something like this: # dladm create-vlan -l vfe0 -v 1 # zonecfg -z blue 'add net; set physical=vfe1000; end' -- James Carlson, So

Re: [zones-discuss] Zone with IP address from a different subnet

2008-06-05 Thread James Carlson
Alain Durand writes: > I built the driver with GLDv3 : > > # dladm show-link > vfe0type: non-vlan mtu: 1500 device: vfe0 > > What was your idea with a VLAN ? You can create VLANs on that device and place them into exclusive stack zones using zonecfg.

Re: [zones-discuss] Zone with IP address from a different subnet

2008-06-05 Thread James Carlson
e physical ethernet interface, is that possible ? Yes, if you can configure a VLAN on this interface using dladm. (I'm guessing that 'vfe' isn't a GLDv3 driver, and thus you can't do that.) -- James Carlson, Solaris Networking <[EMAIL PROTECTED]> Sun Microsyst

Re: [zones-discuss] zoneadm boot "error" message

2008-06-05 Thread James Carlson
Ben Rockwood writes: > I'm gonna bump this with hopes a developer will pick it up. I do not yet see > a bug associated with this issue. You're talking about CR 6684810, which was fixed back in snv_88. -- James Carlson, Solaris Networking <[EMAIL PROTECTED]>

Re: [zones-discuss] Zone with IP address from a different subnet

2008-06-05 Thread James Carlson
James Carlson writes: > Steffen Weiberle writes: > > BTW, this only works for default routes. Static ones don't work. at > > least that is my/others' experience. > > That's not true. Default routes are not supposed to be special. > They're just regul

  1   2   3   >