Re: [zones-discuss] [zfs-discuss] zones and other filesystems
On 01/21/10 17:03, Thomas Burgess wrote: I'm pretty new to opensolaris. I come from FreeBSD. Naturally, after using FreeBSD forr awhile i've been big on the use of FreeBSD jails so i just had to try zones. I've figured out how to get zones running but now i'm stuck and need help. Is there anything like nullfs in opensolaris... or maybe there is a more solaris way of doing what i need to do. Basically, what i'd like to do is give a specific zone access to 2 zfs filesystems which are available to the global zone. my new zones are in: /export/home/zone1 /export/home/zone2 What i'd like to do is give them access to: /tank/nas/Video /tank/nas/JeffB # zonecfg -z zone1 add dataset set name=tank/nas/Video end add dataset set name=tank/nas/JeffB end exit # zoneadm -z zone1 reboot Thanks, Zoram i'm sure i looked over something hugely easy and important...thanks. ___ zfs-discuss mailing list zfs-disc...@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] quick bug fix webrev...
Hi Ed, lgtm. Thanks, Zoram On 11/20/09 10:46, Edward Pilatowicz wrote: hey all, i need a review for the following bugfix: http://cr.opensolaris.org/~edp/onnv-zmount3/ 6901952 zoneadm fails with unable to determine default brand thanks ed ___ zones-discuss mailing list zones-discuss@opensolaris.org ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] sam-qfs - non-global zones
Are you using Sun Cluster? If yes, you can add QFS file systems to a zone cluster: http://docs.sun.com/app/docs/doc/820-4677/ghogu?a=view I don't know if QFS works with vanilla zones. Thanks, Zoram On 11/10/09 23:10, David Beitler wrote: Could someone point me to any kind of documentation, on how to (if possible) share sam-qfs filesystems in a zone environment. I can't seem to find anything other than some very sparse comments about it being, or not being possible. Given that I have a sam-qfs filesystem mounted in the global zone, say /samfs1, should I not be able to, when creating non-global zones, simply use the addfs, and point two non-global zones to the same mount point?. Or are there issues I am not aware of, which could make this problematic? dbeit...@sdsc.edu ___ zones-discuss mailing list zones-discuss@opensolaris.org ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] How good is zonecfg/zoneadm's wildcard parsing?
Hi Jerry, Have you had a chance to look at this? I am still seeing the wildcard madness on s10u5: # zonecfg -z myzone info device device match: /dev/md/shared/1/dsk/* device match: /dev/md/shared/1/rdsk/* # zlogin myzone [Connected to zone 'myzone' pts/2] Last login: Tue Feb 5 03:29:01 on pts/2 Sun Microsystems Inc. SunOS 5.10 Generic January 2005 # ls -al /dev/md/shared/2 /dev/md/shared/2: No such file or directory # ls -al /dev/md/shared/1 total 8 drwxr-xr-x 4 root root 512 Feb 5 03:28 . drwxr-xr-x 3 root root 512 Feb 5 03:28 .. drwxr-xr-x 2 root root 512 Feb 5 03:28 dsk drwxr-xr-x 2 root root 512 Feb 5 03:28 rdsk # ls -al /dev/md/shared/1/dsk total 4 brw-r- 1 root sys 85, 8192 Feb 5 03:28 * == notice the * block device! drwxr-xr-x 2 root root 512 Feb 5 03:28 . drwxr-xr-x 4 root root 512 Feb 5 03:28 .. # cat /etc/release Solaris 10 5/08 s10s_u5wos_05 SPARC Copyright 2008 Sun Microsystems, Inc. All Rights Reserved. Use is subject to license terms. Assembled 07 January 2008 # Thanks, Zoram Jerry Jelinek wrote: Zoram Thanga wrote: Hi, On an S10u4_07/SPARC machine. So I want to export a disk slice to my zone. I did thus zonecfg:paris add device zonecfg:paris set match=/dev/*dsk/c1t1d0s6 zonecfg:paris end I was hoping that this would create /dev/rdsk/c1t1d0s6 and /dev/dsk/c1t1d0s6 in the zone 'paris'. So I login to the zone, and # zonename paris # ls /dev/ | grep dsk *dsk dsk rdsk # Notice that a *dsk directory was created (WTF? :) # cd *dsk # ls -l crw-r- 1 root sys 32, 6 Jun 7 05:13 c1t1d0s6 So my disk slice went under /dev/*dsk/ in the zone! Meanwhile, the /dev/dsk and /dev/rdsk directories are empty: # cd /dev/rdsk # ls -l total 0 # # cd /dev/dsk # ls -l # total 0 # Is this expected behavior or what? ( I also succeeded in exporting device match=/dev/rdsk/c1t1d0s* as /dev/rdsk/c1t1d0s* in the zone :) I just verified this works fine on nv b65. When I get a chance I'll double check S10u4. It sounds like it is a bug there. Jerry ___ zones-discuss mailing list zones-discuss@opensolaris.org ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] dhcp/zone
IIRC, you need to have ip-type=exclusive to have DHCP work in a non-global zone. Currently ce doesn't support exclusive IP stack, but I remember seeing an RFE somewhere that'd allow exclusive/ce combo. Perhaps this has already been fixed in Open Solaris, I'm not sure. Thanks, Zoram elkhaoul elkhaoul wrote: Hi, I want to install dhcp on local zone... OS : # uname -a SunOS esp43 5.10 Generic_127111-02 sun4u sparc SUNW,Sun-Fire-V490 # zoneadm list -cv ID NAME STATUS PATH BRANDIP 0 global running/ native shared 2 esp43 running/export/zones/esp43 native shared Is dhcp can run on this local zone ? As I have NIC=ce, I think, I can't set up exclusive-Ip zone Thanks ae - Nouveau : téléphonez moins cher avec Yahoo! Messenger ! Découvez les tarifs exceptionnels pour appeler la France et l'international.Téléchargez la version beta. ___ zones-discuss mailing list zones-discuss@opensolaris.org -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] Interfaces to automate zone system
Hi Tomas, Tomas Heran wrote: Hi Zoram, you might want to take a look at Project Duckwater - Simplified name services management: http://www.opensolaris.org/os/project/duckwater/. Now, Duckwater's command for creating and managing name services configuration - nscfg(1M) - doesn't know anything about zones, but I can add an RFE for us to be able to export a name service profile (the set of all name service configuration) into a file which you can later import somewhere else - e.g. you would configure name services in global zone, then exported this configuration (using nscfg) into a file and later imported this file (again, using nscfg) into your non-global zone(s). Would that work for you? This sounds promising. My basic requirement is that I should be able to non-interactively install and boot a zone (why? because interactive install/boot is too tedious in a multi-node environment like Sun Cluster). The user, if he wishes to, can explicitly enter the sysidcfg(4) parameters for the zone. But we expect that in most cases the only thing that would be different would be the root password (it would be unwise to have the same root password for global and non-global zones), and for the rest of the parameters use either a. global zone settings (name service, nfsv4 domain, security policy, timezone,...) or b. reasonable defaults (e.g., terminal) Stable interfaces to query name service configuration of the global zone (or any zone for that matter) will be a great help. Thanks, Zoram Regards, Tomas This message posted from opensolaris.org ___ zones-discuss mailing list zones-discuss@opensolaris.org -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
[zones-discuss] Interfaces to automate zone system identification
Hi All, I'd like to automate system identification for a zone when it is freshly installed. In most cases, I'd like to keep the same settings for domain name, name service, security policy, etc., as in the global zone. I'm wondering if there are (C) library interfaces to determine which name service is used in the global zone, so that I can make the following entry in the zone's /etc/sysidcfg file: name_service=service{service specific parameters} So, I'd like do something like: name_service = get_name_service() if (name_service is NIS) { /* get domain name */ /* get yp master */ } else if (name_service is NIS+) { /* get NIS+ details */ } else if (name_service is LDAP) { /* get LDAP details */ } else if (name_service is DNS) { /* get DNS details */ } ... Also, is there a library interface to get what the security_policy setting is in the global zone? So I want to do something like: security_policy = get_security_policy() if (security_policy is kerberos) { /* get kerberos details */ } else if ... ... Thanks, Zoram -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] Interfaces to automate zone system identification
Hi Mike, Mike Gerdts wrote: On Nov 15, 2007 4:04 AM, Zoram Thanga [EMAIL PROTECTED] wrote: Hi All, I'd like to automate system identification for a zone when it is freshly installed. In most cases, I'd like to keep the same settings for domain name, name service, security policy, etc., as in the global zone. It sounds like simply copying in whole or part the relevant files from the global zone and making the appropriate modifications to $zonepath/root/etc/.sysid* (forget the exact file name) would be a workable approach. This would have to be done from the global zone. Yes, the program will only run in the global zone, and only once after the new zone is installed. However, I'm wondering if we can count on the presence of /etc/sysidcfg on the global zone. Once a system has been initialized, we could safely remove /etc/sysidcfg and there would be no problem, right? I'm wondering if there are (C) library interfaces to determine which name service is used in the global zone, so that I can make the following entry in the zone's /etc/sysidcfg file: To the best of my knowledge, such an API is not even available to query in the same zone (e.g. global zone querying global zone). Such an API that allowed cross-zone queries of this information would cross isolation boundaries that have been held rather dear with zones. No, I am not looking to cross zone boundaries here - just obtain all the necessary information from the global zone and apply them to the freshly installed NGZs. Of course, if the user wants to specify sysid settings that are different from those of the global zone, she would be allowed to do so. But if she just wants to re-use the same name service setting, security policy setting, etc, then that's when I'd like to query the GZ for those informations. name_service=service{service specific parameters} So, I'd like do something like: name_service = get_name_service() if (name_service is NIS) { /* get domain name */ /* get yp master */ } else if (name_service is NIS+) { /* get NIS+ details */ } else if (name_service is LDAP) { /* get LDAP details */ } else if (name_service is DNS) { /* get DNS details */ } ... This approach, much like the one used by sysidconfig, is broken. What happens when you use LDAP for everything except hosts and DNS for hosts? If you are coming up with a new solution for setting up naming services, please don't repeat this mistake. Yes. I am aware of the complications, and no we're not trying to come up with new naming service solutions :) I just want to know how to query the settings when the user says use the same settings as in the GZ. You may want to take a look at zonemgr. It will do quite a bit of customization of a zone without interaction and may be just what you are looking for. I'll take a look. Can zonemgr query the settings if the user didn't specify them? Thanks, Zoram -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] Zones and samfs
Hi, Jens Nickel wrote: Hi all, is it possible to attach or mount a samfs to a zone? Is something like filesystem special=samfs directory=/glchdfs_test type=raw/ possible? No. zoneadm doesn't understand samfs. However, you could manually (or via a script) mount the file system under the zone's root path (zonepath/root/your mount point) from the global zone. You can of course use lofs to export samfs to the zone. Thanks, Zoram cheers Jens This message posted from opensolaris.org ___ zones-discuss mailing list zones-discuss@opensolaris.org -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] silent zone install?
Hi Robert, Robert Milkowski wrote: Hello Russ, Thursday, August 9, 2007, 2:09:43 AM, you wrote: Basically after zone is install and before you boot it, just change its state to ready (or mount) and then you proceed more or less like with finish script in a jumpstart. That's what I've been using for a long time - one script where you specify an inteface, ip, zonename and then it installs a zone, does all customization (users, site.xml, sshd config, etc.). The onlfy thing I don't like is that waiting to import all smf services on a first boot - if you're on zfs what I do sometimes is I disable ZIL which speeds it up quite a lot. Doesn't cloning a zone take care of also importing the SMF manifests? I think it does, and I remember thinking to myself This is the best way to configure multiple zones on a system. I agree that the SMF import phase is the most time-consuming (and boring) phase of zone administration :) Cheers, Zoram -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] Setting process.max-file-descriptor per zone?
Hi Steve, Thanks for the suggestions. Steve Lawrence wrote: We currently don't have a mechanism for stating the default rctls for all processes on a per-zone basis. Are these apps still being started out of inittab in the zone? Yes. These are apps from the largest database software maker ;) If so, can you run a script from inittab or from /etc/rc0.d to run the commands: prctl -n process.max-file-descriptor -t basic -r -v x `pgrep -x init` prctl -n process.max-file-descriptor -t priv -r -v y `pgrep -x init` If you can run these commands before init starts your legacy applications, then they will inherit init's process.max-file-descriptor values. This sounds like an approach we can use because we can't modify the apps themselves. The problem is that the app's daemons on startup call sysconf(3C) to get the max number of descriptors (fd_max) and close all descriptors from 0 to fd_max. This can take a very long time when, for example, fd_max is 2.15G! I'm guessing that the rctl tuning is only desired for the legacy apps, and not for all processes started by init. This is correct. Thanks, Zoram The best thing to do would be to stop using inittab, and instead create a service for these legacy apps. This service can be assigned to a project, and the project can specify the rctls as desired. You could also start the legacy apps from an /etc/rc?.d script, and set the rctls in the script: cat /etc/rc3.d/S99startlegacyapps #!/sbin/sh prctl -n process.max-file-descriptor -t basic -r -v x $$ prctl -n process.max-file-descriptor -t priv -r -v y $$ ..start legacy applications... exit 0 -Steve L. On Wed, Aug 01, 2007 at 07:44:51PM +0530, Zoram Thanga wrote: Hi, Has anyone succeeded in setting the process.max-file-descriptor rctl on a per-zone level? Somewhat like making the set rlim_fd_cur=x set rlim_fd_max=y entries in /etc/system? The setting must apply to all processes in a given zone, independently of the settings in the GZ or other NGZ's. At present max-file-descriptor is not a zone level rctl, and there are some *legacy* applications that are started out from inittab that wouldn't honor SRM project settings or start up before SRM settings are applied. Any ideas appreciated. Thanks, Zoram -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
[zones-discuss] Setting process.max-file-descriptor per zone?
Hi, Has anyone succeeded in setting the process.max-file-descriptor rctl on a per-zone level? Somewhat like making the set rlim_fd_cur=x set rlim_fd_max=y entries in /etc/system? The setting must apply to all processes in a given zone, independently of the settings in the GZ or other NGZ's. At present max-file-descriptor is not a zone level rctl, and there are some *legacy* applications that are started out from inittab that wouldn't honor SRM project settings or start up before SRM settings are applied. Any ideas appreciated. Thanks, Zoram -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] How good is zonecfg/zoneadm's wildcard parsing?
Thanks Jerry. I double-checked this again and I think it definitely is a bug. Zoram Jerry Jelinek wrote: Zoram Thanga wrote: Hi, On an S10u4_07/SPARC machine. So I want to export a disk slice to my zone. I did thus zonecfg:paris add device zonecfg:paris set match=/dev/*dsk/c1t1d0s6 zonecfg:paris end I was hoping that this would create /dev/rdsk/c1t1d0s6 and /dev/dsk/c1t1d0s6 in the zone 'paris'. So I login to the zone, and # zonename paris # ls /dev/ | grep dsk *dsk dsk rdsk # Notice that a *dsk directory was created (WTF? :) # cd *dsk # ls -l crw-r- 1 root sys 32, 6 Jun 7 05:13 c1t1d0s6 So my disk slice went under /dev/*dsk/ in the zone! Meanwhile, the /dev/dsk and /dev/rdsk directories are empty: # cd /dev/rdsk # ls -l total 0 # # cd /dev/dsk # ls -l # total 0 # Is this expected behavior or what? ( I also succeeded in exporting device match=/dev/rdsk/c1t1d0s* as /dev/rdsk/c1t1d0s* in the zone :) I just verified this works fine on nv b65. When I get a chance I'll double check S10u4. It sounds like it is a bug there. Jerry -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
[zones-discuss] How good is zonecfg/zoneadm's wildcard parsing?
Hi, On an S10u4_07/SPARC machine. So I want to export a disk slice to my zone. I did thus zonecfg:paris add device zonecfg:paris set match=/dev/*dsk/c1t1d0s6 zonecfg:paris end I was hoping that this would create /dev/rdsk/c1t1d0s6 and /dev/dsk/c1t1d0s6 in the zone 'paris'. So I login to the zone, and # zonename paris # ls /dev/ | grep dsk *dsk dsk rdsk # Notice that a *dsk directory was created (WTF? :) # cd *dsk # ls -l crw-r- 1 root sys 32, 6 Jun 7 05:13 c1t1d0s6 So my disk slice went under /dev/*dsk/ in the zone! Meanwhile, the /dev/dsk and /dev/rdsk directories are empty: # cd /dev/rdsk # ls -l total 0 # # cd /dev/dsk # ls -l # total 0 # Is this expected behavior or what? ( I also succeeded in exporting device match=/dev/rdsk/c1t1d0s* as /dev/rdsk/c1t1d0s* in the zone :) Thanks, Zoram -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] Re: re: Re: dladm create-vnic not available in build 63?
Manish Agrawal wrote: Thanks, if that is the case, what do I need to do to make ip-type=exclusive work in a non-global zone? What I mean is, my interface name in the global zone is e1000g0: Since VLAN/VNIC isn't yet available, you'd need to allocate an entire physical NIC to the non-global zone. Does e1000g1 exist in your system (ifconfig -a doesn't show it, so I'm assuming it doesn't exist)? If not, what you are trying won't work. You'll need to have another physical interface besides e1000g0 to allocate to the non-global zone. Zoram -bash-3.00 (global zone)# ifconfig -a lo0: flags=2001000849UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL mtu 8232 index 1 inet 127.0.0.1 netmask ff00 e1000g0: flags=201004843UP,BROADCAST,RUNNING,MULTICAST,DHCP,IPv4, CoS mtu 1500 index 2 inet 192.168.16.147 netmask ff80 broadcast 192.168.16.255 ether 0:6:5b:cf:6b:3c lo0: flags=2002000849UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL mtu 8252 index 1 inet6 ::1/128 Say I use a zonecfg that looks like this: -bash-3.00# more exclusivezonecfg create -b set zonepath=/export/zone/excl1 set autoboot=true set ip-type=exclusive add inherit-pkg-dir set dir=/lib end add inherit-pkg-dir set dir=/platform end add inherit-pkg-dir set dir=/sbin end add inherit-pkg-dir set dir=/usr end add net set physical=e1000g1 end add attr set name=comment set type=string set value=Zone exc1l end (I am trying to use e1000g1 in the non-global zone). When I install: -bash-3.00# zoneadm -z excl1 install WARNING: skipping network interface 'e1000g1' which cannot be opened. Preparing to install zone excl1. ... -bash-3.00# zoneadm -z excl1 boot WARNING: skipping network interface 'e1000g1' which cannot be opened. zoneadm: zone 'excl1': WARNING: unable to hold network interface 'e1000g1'.: Invalid argument When I login to the zone (zlogin -C excl1), I am not asked for network configuration. Bottomline, what do I need to do so that I can configure ip-type=exclusive in the non-global zone? My requirement is that I want to run ipfilter in the non-global zone. I really hope it is still possible, I had given up yesterday when vnics didn't work. (non-global zone)# ifconfig -a lo0: flags=2001000849UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL mtu 8232 index 1 inet 127.0.0.1 netmask ff00 lo0: flags=2002000849UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL mtu 8252 index 1 inet6 ::1/128 This message posted from opensolaris.org ___ zones-discuss mailing list zones-discuss@opensolaris.org -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
[zones-discuss] Patching/Packaging and brands
Hi, What changes, if any, have been made in our patching/packaging infrastructure to deal with branded zones? It is of course understandable that patchadd/pkgadd will skip lx types of brands that emulate entirely different operating environments. However, it is also reasonable that we can have userland brands that do not emulate different OSes - the brands are basically tailor-made for certain usages; but they are identical to the native brand in all aspects of patching/packaging. How does patching/packaging deal with such brands? Thanks, Zoram -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] Re: Globle Zone information from Local Zone
prakash wrote: I have the sitiuation like the below:- === Normally pepole will directly login to the local zones, some of the machines not installed by me, so i dont know about the globel zone information of a local zone, So here i have to increase a filesystem on the local zone how to do that ? There's no tool/command to find out the hostname of the global zone on which a given non-global zone is running. You'll need to store this information somewhere else and look it up when required. Thanks, Zoram -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] Failover IP-Address in Zone
Hi Mika, Mika Borner wrote: I have two nodes with one zone on each. Both Zones share a service IP-address. When a zone is booted, the interface will come up automatically. In case of this service address, this would mean, that in the worst case the address is up on two zones at the same time = bad! How can I prevent certain network interfaces to stay down, when a zone is booted? From within the zone it is not possible to change the state of an interface. Are you using Sun Cluster by any chance? If not, you can accomplish what you want by using the Sun Cluster Support for Solaris Zones in SC3.2, due out in the next two weeks. Have a look at http://blogs.sun.com/SC/entry/sun_cluster_and_solaris_zones Thanks, Zoram This message posted from opensolaris.org ___ zones-discuss mailing list zones-discuss@opensolaris.org -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] Re: Failover IP-Address in Zone
Mika Borner wrote: Are you using Sun Cluster by any chance? If not, you can accomplish what Unfortunatly Sun Cluster is not an option yet. Ahh...that's too bad :) I'm looking for a way to achieve this with standard OS tools. In that case you'll need to have something running in the global zone control the plumbing and unplumbing of the IP address in the NGZ. That is, you can't have the failover IP address be a part of the zones' configuration. Thanks, Zoram This message posted from opensolaris.org ___ zones-discuss mailing list zones-discuss@opensolaris.org -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] Re: Failover IP-Address in Zone
Mike Gerdts wrote: On 12/7/06, Jeff Victor [EMAIL PROTECTED] wrote: Mike Gerdts wrote: Is there an existing RFE to fix this? I have been meaning to file one for quite some time but just haven't gotten around to it. Which this is broken? I haven't verified it yet, but I am pretty sure that I can now boot a server with boot -m none (or is it boot -o milestone=none?) and have the global zone come up without networking. Presumably, I would want the same to happen if I boot the zone. This is not good: # zoneadm -z z1 boot -- -s # zlogin z1 # svcs | grep network | grep online online 12:38:13 svc:/network/loopback:default online 12:38:14 svc:/network/physical:default online 12:38:15 svc:/milestone/network:default # uname -sv SunOS snv_53 Neither is this: # zoneadm -z z1 boot -- -m milestone=none # zlogin z1 # svcs |grep network | grep online no network service online, but # ifconfig -a lo0:1: flags=2001000849UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL mtu 8232 index 1 inet 127.0.0.1 netmask ff00 bge0:1: flags=201000843UP,BROADCAST,RUNNING,MULTICAST,IPv4,CoS mtu 1500 index 2 inet 10.11.102.26 netmask ff00 broadcast 10.11.102.255 Thanks, Zoram -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] Oracle in zones vs SunCluster HA oracle
Hi Ulf, It's not clear to me, from your mail, whether or not you're planning to deploy on Sun Cluster. Can you confirm one way or the other? I might be able to help if you're going to use Sun Cluster. Thanks, Zoram Ulf Björklund wrote: Hi All, I'm about to deploy a new platform for about 30+ oracle instances. These will be Ora 9i to Ora 10g. The availability for these will match what you'll get from SunCluster HA Oracle agents. (FailOverServices) The instances will be spread over three to five nodes so one could manually balance the load. (planned actions) Would it be preferable to use one zone for each ora-instance instead of making then HA-aware in the global zone as traditional HA-services? (Ora in zones might be more integrated in SC3.2) Some obvious tasks is acctually easier to manage in a zone, like local users, roles, profiles, system resources and so on. Any comments and suggestions on the different approach is much appreciated. /Best Regards Ulf This message posted from opensolaris.org ___ zones-discuss mailing list zones-discuss@opensolaris.org -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] Solaris Express?
Nergal Dimitri wrote: Can I get the feature of administrating privileges for zones (set limitpriv=...) by using Solaris Express? Yes. ...and anyone know ETA for Solaris 10 release 7 ? I heard S10u3. Thanks, Zoram -- Zoram Thanga::Sun Cluster Development::http://blogs.sun.com/zoram ___ zones-discuss mailing list zones-discuss@opensolaris.org
Re: [zones-discuss] forgot to inherit a directory
Use zonecfg(1M) to edit the inherit-pkg-dir resource of the zone so that the application directory is included. The setting is now persistent. Reboot the zone now to have the desired directory mounted. Thanks, Zoram Michael Barrett wrote: Let's say you forgot to inherit an application directory from the global zone when you first created a local sparse zone. Do you have to manually lofs mount the global zone directory of interest into the local zone every time you reboot, or can you somehow change the local zone definition and reboot it to get it to inherit the directory from now on? Thanks, Mike ___ zones-discuss mailing list zones-discuss@opensolaris.org -- Zoram Thanga, Sun Cluster Development. ___ zones-discuss mailing list zones-discuss@opensolaris.org