Re: [zones-discuss] Re: zone migration

2006-06-20 Thread Jerry Jelinek
Dagobert Michelsen wrote: I hate replying to my own post. However, I just found out that this has already been discussed at http://www.opensolaris.org/jive/thread.jspa?threadID=8745 and that there is even an RFE for that. Dagobert, Yes, that is the correct description for this feature. The

Re: [zones-discuss] improved zones/RM integration

2006-06-28 Thread Jerry Jelinek
Jeff, Thanks for your comments. I have a few responses in-line. Jeff Victor wrote: 1) General comment: I agree that this will provide needed clarity to the seemingly unorganized RM features that we have scattered through Solaris during the last decade. The automation of certain activities

Re: [zones-discuss] improved zones/RM integration

2006-06-28 Thread Jerry Jelinek
Mike, I think most of your comments were addressed in my response to Jeff but I did want to make sure one thing was clear. Mike Gerdts wrote: On 6/27/06, Jeff Victor [EMAIL PROTECTED] wrote: 4) Aliases: The notion of aliases also creates redundant output which could be confusing. I like the

Re: [zones-discuss] improved zones/RM integration

2006-06-28 Thread Jerry Jelinek
Amol, Thanks for your comments. I have some responses in-line. Amol A Chiplunkar wrote: These are very exciting features !! Some comments. If a dedicated-cpu (or eventually a dedicated-memory) resource is configured for the zone, then when the zone boots zoneadmd will create a temporary

Re: [zones-discuss] zoneadm install fails with legacy mounted ZFS filesystem

2006-07-17 Thread Jerry Jelinek
Jeff Victor wrote: Brian Kolaci wrote: Jerry Jelinek wrote: Brian Kolaci wrote: I've tried this as well, still doesn't take it. I've been able to boot the zone (without the fs added), play with it, then halt it and add it back in. Still gives an error... could not verify fs /data

Re: [zones-discuss] Re: Proposal: Zone Boot Arguments II

2006-07-24 Thread Jerry Jelinek
Matty wrote: It sounds like you might be interested in the zoneadm clone option. This feature is currently in Solaris Express, and I am hopeful it will make Solaris 10 update 3. Does anyone from Sun happen to know if the attach, detach and clone features could be released as a patch for

Re: [zones-discuss] inherit-pkg-dir after zone-install?

2006-07-26 Thread Jerry Jelinek
Jeff Victor wrote: Is it possible to add an inherit-pkg-dir to a zone's config after zoneadm ... install? I'm confident the answer is 'no' but just had to ask. The man page and docs.sun.com are a little vague on this. They both say Such resources [those pkgs] are not modifiable or removable

Re: [zones-discuss] inherit-pkg-dir after zone-install?

2006-07-27 Thread Jerry Jelinek
Jeff Victor wrote: Enda o'Connor - Sun Microsystems Ireland - Software Engineer wrote: Jerry Jelinek wrote: Jeff Victor wrote: Is it possible to add an inherit-pkg-dir to a zone's config after zoneadm ... install? I'm confident the answer is 'no' but just had to ask. The man page

Re: [zones-discuss] cpu and memory assignments in zones

2006-07-31 Thread Jerry Jelinek
Dave Bevans wrote: Hi All, I have a customer who wants to assign 1 cpu and 1 Gb of memory for each zone they have created. What is the best way for the customer to approach this? Is this possible? You can use a processor set pool to assign 1 cpu to the zone. We do not yet have the ability

Re: [zones-discuss] Question on user account config with zones

2006-07-31 Thread Jerry Jelinek
Paul Kraus wrote: On 7/31/06, Steffen Weiberle [EMAIL PROTECTED] wrote: Home directories are more problematic; you will need to loopback mount them into the local zones. Is the underlying problem being worked on, or is it worth an RFE to make this transparent (automount if remote,

Re: [zones-discuss] cpu and memory assignments in zones

2006-07-31 Thread Jerry Jelinek
Mike Gerdts wrote: On 7/31/06, Jerry Jelinek [EMAIL PROTECTED] wrote: http://www.opensolaris.org/os/project/rm/pools/msets/. We are working on making this whole process easier. The project is described here http://www.opensolaris.org/jive/thread.jspa?threadID=10451tstart=0. Are there any

Re: [zones-discuss] zones.cpu-shares and pools

2006-08-01 Thread Jerry Jelinek
Steffen Weiberle wrote: Jerry Jelinek wrote On 08/01/06 09:32,: Christine Tran wrote: Hi, I found an old email written by Amol a while ago stating in effect that zones.cpu-shares has no meaning when the system is carved up into different pools. I would like some clarification, directly, I

Re: [zones-discuss] problems with installing iplanet in nonglobal zone

2006-08-02 Thread Jerry Jelinek
Steffen Weiberle wrote: If anything like Jave ES applications (directory, web, app server, etc.) you need a full root zone to install into. I.e., remove all your inherit-pkg-dir parts. Or, you may be able to use this technique from the zones FAQ if you only need a writable subdirectory in

Re: [zones-discuss] Re: Re: Question: Zones/Mpxio + Disk Array (HDS 9970V

2006-08-04 Thread Jerry Jelinek
Doug Scott wrote: Doug Scott wrote On 08/04/06 11:42,: create a zfs filesystem in the global zone for the zone. Something like $ zfs create mypool/export/zones/zone1 $ mkdir -p /export/zones/zone1 $ zfs set mountpoint=/export/zones/zone1 mypool/export/zones/zone1 With zonecfg set your

Re: [zones-discuss] Re: improved zones/RM integration

2006-08-16 Thread Jerry Jelinek
Nils, Thanks for looking this over. Nils Nieuwejaar wrote: On Wed 08/16/06 at 09:10 AM, [EMAIL PROTECTED] wrote: [...] dedicated-memory [...] physical: A positive decimal number or a range with a required [...] virtual: This accepts the same numbers

Re: [zones-discuss] Re: improved zones/RM integration

2006-08-16 Thread Jerry Jelinek
Steffen, Thanks for your comments. Responses in-line. Steffen Weiberle wrote: Hi Jerry, this is great. I have a few comments below. Thanks Steffen 1) Hard vs. Soft RM configuration within zonecfg We will enhance zonecfg(1M) so that the user can configure basic RM capabilities in

Re: [zones-discuss] Re: improved zones/RM integration

2006-08-17 Thread Jerry Jelinek
Steffen, Steffen Weiberle wrote: Jerry Jelinek wrote On 08/16/06 18:14,: Steffen, Thanks for your comments. Responses in-line. Steffen Weiberle wrote: Hi Jerry, this is great. I have a few comments below. Thanks Steffen 1) Hard vs. Soft RM configuration within zonecfg We

Re: [zones-discuss] question about zones status check. thanks

2006-08-17 Thread Jerry Jelinek
Chun-Huan Freesia Shen wrote: Hi experts, This is chunhuan from SC. I have a question to consult you. How can I confirm that the zones (global/non-global) status is ok or not through explorer file gathered by version 5.5 ? The explorer file is at the following site:

Re: [zones-discuss] Hmm ... tmpfs in zone?

2006-08-18 Thread Jerry Jelinek
Christine Tran wrote: Hi, I came across a zone example that looks like this: fs: dir: /tmp special: swap raw not specified type: tmpfs options: [size=1024] Hmm ... I think I know what the person is trying to do,

Re: [zones-discuss] Hmm ... tmpfs in zone?

2006-08-18 Thread Jerry Jelinek
Christine Tran wrote: zonecfg doesn't know about every option on every filesystem, bundled and unbundled, that is available on Solaris. zoneadm does some basic validation of fs entries but it too does not know about all of the special options each filesystem might have. Well, is this worth at

Re: [zones-discuss] Re: zone stuck in 'mounted' state

2006-08-24 Thread Jerry Jelinek
Peter Guthrie wrote: FYI, I just found this thread when I Google'd for the same problem. This is on a w2100z running B44. In my case the zone installed perfectly and I was able to login to it. After a reboot I found it in the 'mounted' state. As the previous posts in this thread indicate,

Re: [zones-discuss] rcapd to limit RAM usage of a zone

2006-08-29 Thread Jerry Jelinek
Phil Cordier wrote: Posted this question on the general zones group at got a deafening silence in response - anyone here have any possible answers? http://forum.sun.com/jive/thread.jspa?forumID=299threadID=100707 It is possible that prstat and rcapd are counting shared memory multiple times,

Re: [zones-discuss] Zones and cpu-shares

2006-08-31 Thread Jerry Jelinek
Marlanne DeLaSource wrote: Sorry about this question that may be stupid, but I wasn't able to display the cpu-shares afterwards. I set up the rctl cpu-shares in the various zones, used dispadminand prctl (I also rebooted). It worked nicely. But I wanted to check the cpu-shares given to the 3

Re: [zones-discuss] Where is the nice tool.

2006-09-01 Thread Jerry Jelinek
Marlanne DeLaSource wrote: Hi again, I'm still playing with zones... I was having a look at the clingan zone, and there is a snapshot of a tool here : http://blogs.sun.com/jclingan/resource/global_create.gif This tool has a nice display and seems to manage containers. I have installed sun

Re: [zones-discuss] zones, upgrades, and vxvm

2006-09-14 Thread Jerry Jelinek
Steffen Weiberle wrote: Jeff Victor wrote On 09/14/06 10:35,: [EMAIL PROTECTED] wrote: Does it make any difference as to where or what kind of fs that the zoneroot is mounted? and is there any difference with a whole root zone? The situation is the same for both sparse and whole-root

Re: [zones-discuss] Cost to Manage Solaris Containers vs. Just Global Zone?

2006-09-21 Thread Jerry Jelinek
Mark Mulligan wrote: Hi Community, I was wondering if any customers had done an evaluation on the administrative time or cost (same thing really) improved by using the efficiencies of Solaris Containers vs. managing individual servers with just one Solaris 10 global zone or one Solaris 8/9

Re: [zones-discuss] RFE?: Prevent installation of packages

2006-10-17 Thread Jerry Jelinek
Jens Elkner wrote: Is there a feature, which allows me to configure or tell zone install to NOT install certain packages? E.g. I've a machine with StarOffice installed. For obvious reasons I don not want to inherit the StarOffice packages into a none-global zone. Finding the appropriate

Re: [zones-discuss] Libraries not mounted in local zone

2006-10-18 Thread Jerry Jelinek
Bill Casale wrote: Is there a reason the hardware optimized libraries shouldn't be mounted in a local zone? They should be. This was bug 6407767 libc_psr does not get mounted in a zone which was integrated into b41. What build are you running? Jerry

Re: [zones-discuss] Libraries not mounted in local zone

2006-10-18 Thread Jerry Jelinek
Bill Casale wrote: Hi Jerry, Thanks for your reply, I did see that bug but this is happening on a V440 running Solaris 10 1/06 with KU 118833-23. It looks like this was also fixed in S10u3 build 4. I am not sure if it is in a patch yet. Jerry ___

Re: [zones-discuss] move is not showing up in zoneadm subcommands

2006-10-18 Thread Jerry Jelinek
Gregory Edwards - Software Support wrote: SunOS wasoaf04 5.10 Generic_118822-25 sun4u sparc SUNW,Sun-Fire # cat /etc/release Solaris 10 1/06 s10s_u1wos_19a SPARC Copyright 2005 Sun Microsystems, Inc. All Rights Reserved. Use is subject

Re: [zones-discuss] zone resource control, who gets signaled?

2006-10-19 Thread Jerry Jelinek
Christine Tran wrote: The zones.cpu-shares rctl has a set of threshhold actions: none, deny and signal=. Say if I set the action as signal=TERM, who actually gets signaled? Is it the process in the zone that's currently queuing to get on CPU, or is it zoneadmd (which presumably will pass it

Re: [zones-discuss] zone with lofs zfs - why legacy

2006-10-23 Thread Jerry Jelinek
Jens Elkner wrote: I've created a zone which should mount the /pool1/flexlm.ulo zfs via lofs: + zfs create pool1/flexlm.ulo + zfs set atime=off pool1/flexlm.ulo + zfs set sharenfs=off pool1/flexlm.ulo + zonecfg -z flexlm ... add fs set dir=/usr/local set

Re: [zones-discuss] non global zone and NFS server

2006-10-27 Thread Jerry Jelinek
Rayson Ho wrote: It's being worked on: http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=4964859 IIRC, it is currently not supported because the kernel part of NFS server does not understand the concept of zones... In order to help the NFS team understand the importance of this issue

Re: [zones-discuss] improved zones/RM integration

2006-11-02 Thread Jerry Jelinek
Mike, Mike Gerdts wrote: On 6/26/06, Gerald A. Jelinek [EMAIL PROTECTED] wrote: Attached is a description of a project we have been refining for a while now. The idea is to improve the integration of zones with some of the existing resource management features in Solaris. In the proposal

Re: [zones-discuss] ZFS moving from one zone to another

2006-11-15 Thread Jerry Jelinek
Marlanne DeLaSource wrote: This question is both for the ZFS forum and the Zones forum. I have a global zone with a pool (mapool). I have 2 zones, z1 and z2,. I want to pass a dataset (mapool/fs1) from z1 to z2. Solution 1 : mapool/fs1 is mounted under /thing on the global zone (legacy) and

Re: [zones-discuss] fsck during zones boot ?

2006-11-15 Thread Jerry Jelinek
Detlef Drewanz wrote: Hi, is there a way to check a filesystem during a zones boot that was configured with zonecfg ? Sorry for the delayed response to this question. I have gotten a bit behind. I don't know of a way to do this when you add a file system in zonecfg using the fs resource.

Re: [zones-discuss] fsck during zones boot ?

2006-11-16 Thread Jerry Jelinek
Detlef Drewanz wrote: Thanks Jerry, that makes very much sense to do that in this way. But we should keep in mind that checking a filesystem during zonesboot might be required (esspecially after a crash or a cluster switch). With add device the raw device is in the zone available to do the

Re: [zones-discuss] Attach dry-run fails with missing or invalid brand

2006-11-16 Thread Jerry Jelinek
Menno Lageman wrote: Hi, doing a dry-run attach of a detached zone fails with the message zoneadm: missing or invalid brand and exit code 1. Attaching the zone for real succeeds though. I would expect the dry-run to succeed too because the zone was created on this system so everything

Re: [zones-discuss] Re: Attach dry-run fails with missing or invalid brand

2006-11-16 Thread Jerry Jelinek
Menno Lageman wrote: Menno Lageman wrote: Hi, doing a dry-run attach of a detached zone fails with the message zoneadm: missing or invalid brand and exit code 1. Attaching the zone for real succeeds though. I would expect the dry-run to succeed too because the zone was created on this

Re: [zones-discuss] Zone installation problem.

2006-12-06 Thread Jerry Jelinek
Chris Greenman wrote: Hello, I've got a problem I hope someone can help me with. I have two identical E250s (both jumpstarted identically) and I'm having problems installing a zone on one of them. The problem appears to center around some loopback filesystems I'm trying to create. The config

Re: [zones-discuss] Zone installation problem.

2006-12-07 Thread Jerry Jelinek
Chris Greenman wrote: That was kinda my thinking too but I guess an lofs mount would do the same thing. Quick question though, what is the major different between an inherit-pkg-dir and an lofs mount? This is one area of zones I haven't really researched that well. There are several

Re: [zones-discuss] Re: RE: ?: named pipes between zones using shared filesystem

2006-12-12 Thread Jerry Jelinek
Steffen Weiberle wrote: Is it safe to generalize that non-LOFS file systems in Solaris 10 do not allow cross-zone interaction? procfs does not. namefs does not. tmpfs does not. sockfs does not. doors does not. What about all the others (I can't even name them all)? Steffen, One issue to be

Re: [zones-discuss] Re: RE: ?: named pipes between zones using shared filesystem

2006-12-12 Thread Jerry Jelinek
Steffen Weiberle wrote: This new rctl is part of the overall zones/rm improvement project we have been working on for a while now. Thanks, Jerry! I am waiting with open arms :) for this, and memory sets, and swap sets, and IP instances! Oh, and CPU caps. Wait, does this replace swap sets?

Re: [zones-discuss] Defining Multiple RCTL Entries in Zone Config

2006-12-23 Thread Jerry Jelinek
Menno Lageman wrote: Ben Rockwood wrote: I'm interested in adding multiple entries for a single rctl that have diffrent actions to a zone config. Using the latest build (55 archives) I can only have one defined which means I can't create a layered plan of attack. For example, I'd like to be

Re: [zones-discuss] Error during zone migration: invalid path to detached zone

2007-01-09 Thread Jerry Jelinek
Paul Nguyen wrote: Hi, I am running Solaris 10 11/06 and trying to use the new zoneadm detach and attach commands. I am running into a problem when trying to create a blank zone on the target host. 'Invalid path to detached zone'. Has someone seen this error and know how to get past it?

Re: [zones-discuss] Zone attach detach status info from zoneadm list?

2007-01-10 Thread Jerry Jelinek
Simon Redmill wrote: Hi All, I have 2 machines running S10U3 SPARC and are connected to a shared SAN LUN. When I detach a zone it disappears from my zone list (zoneadm list -iv). What would be really useful is if 'zoneadm list' would return the fact that the zone is detached (and has

Re: [zones-discuss] Zones and Resource Pools

2007-01-17 Thread Jerry Jelinek
Phil Freund wrote: I have started using resource pools to limit the number of CPUs available to a zone. I'm trying to find a way to track the pool assignment info and have the following questions: Is there a command that will tell me which pools my zones are assigned to or do I have to check

[zones-discuss] duckhorn man pages

2007-01-29 Thread Jerry Jelinek
I know b56 is just getting out but for people who will be using duckhorn (the improved zones-rm project) some of the associated man page changes did not make it into b56. Specifically, the section 1M changes (zonecfg, rcapd, prtstat rcapadm) were omitted. I wanted to let everyone know these

Re: [zones-discuss] New zone, sysidtool:net isn't starting

2007-01-30 Thread Jerry Jelinek
[EMAIL PROTECTED] wrote: FYI, you can also use create -b (blank) so you don't have to run remove-pkg-dir 4 times. Actually, the documented way to create a whole-root zone *is* to remove the default inherit-pkg-dir resources. The reason for this is create -b says to use a blank template -

Re: [zones-discuss] New zone, sysidtool:net isn't starting

2007-01-31 Thread Jerry Jelinek
Tim Cook wrote: I'm confused then if /opt is not inherited by default. This was my scenario: Install snv_b55. Then installed the pkg-get tool from blastwave and installed screen, openssh, and a few other utils (all of which go into /opt/csw/whatever. I then created my zpool tank, and then

Re: [zones-discuss] New zone, sysidtool:net isn't starting

2007-01-31 Thread Jerry Jelinek
Tim Cook wrote: So essentially at this time blastwave is just a *bad idea* for global zones. Is something like sunfreeware ok then? I assume the -G option should work with those packages? I don't know a lot of the details of blastwave and how many different options it gives you. However, in

Re: [zones-discuss] zones-discuss@opensolaris.org

2007-02-02 Thread Jerry Jelinek
Mark Koeller wrote: Can you obtain S10 Update3 zones (move, copy, rename) features by adding zones patches to S10 Update 2? Must you run Solaris 10 Update 3/Nevada to get these new zones features? You can patch your way up. The x86 zones jumbo patch is 122661 and sparc zones jumbo patch

Re: [zones-discuss] Capped memory observability

2007-02-06 Thread Jerry Jelinek
Mike, Mike Gerdts wrote: One of the effects of setting capped-memory resource control for swap is that the size of /tmp is also limited. Unlike when a tmpfs size limit is set with the size=... mount option, df /tmp does not display a value that is reflective of the limits that are put in

Re: [zones-discuss] Changing a zone's inherit-pkg-dir

2007-02-06 Thread Jerry Jelinek
Matt Cohen wrote: Hi. We have a zone currently setup on one of our Solaris 10 servers, but it wasn't configured quite properly. Is there a way to go back and add an inherited dir to a zone that's already configured and has been running for a couple of weeks? You are not allowed to change

[zones-discuss] Re: [zfs-discuss] Downsides to zone roots on ZFS?

2007-02-07 Thread Jerry Jelinek
Rich, Rich Teer wrote: Hi all, Last time I checked, having one's zone roots (zonepaths) on ZFS file systems was not a recommended practice, despite the fact that this works. IIRC, the problem was that the upgrade code didn't grok zfs and would therefore get terribly confused should the zone

Re: [zones-discuss] Re: [zfs-discuss] Downsides to zone roots on ZFS?

2007-02-07 Thread Jerry Jelinek
John Clingan wrote: This is incorrect. All S10 updates have supported upgrading systems with zones. I believe what you are thinking of is that live-upgrade does not support upgrading systems with zones. This is being fixed in the next S10 update. It is already fixed in nevada. Which Nevada

Re: [zones-discuss] Capped memory observability

2007-02-08 Thread Jerry Jelinek
Allan Packer wrote: Hi, Does this code modify rcapd to properly account for shared memory? That particular feature was mentioned in the case materials for PSARC 2006/496, but I wasn't clear on whether it made it in or not. Allan, Yes, we added new support in the kernel to account for

Re: [zones-discuss] Re: [zfs-discuss] Downsides to zone roots on ZFS?

2007-02-08 Thread Jerry Jelinek
Ivan Buetler wrote: Is this true for OpenSolaris? My experience: I was trying to upgrade from SunOS 5.11 snv_28 to SunOS 5.11 snv_54 where my NGZ zone roots were set to a zfs mount point like below: NAME USED AVAIL REFER MOUNTPOINT zpool 93.8G 40.1G26K

Re: [zones-discuss] Re: [zfs-discuss] Downsides to zone roots on ZFS?

2007-02-08 Thread Jerry Jelinek
Ivan Buetler wrote: Jerry, Thank you for your response. See my zonecfg of the named NGZ here: [EMAIL PROTECTED] ~ # zonecfg -z named export create -b set zonepath=/zpool/zones/named set autoboot=true add inherit-pkg-dir set dir=/lib end add inherit-pkg-dir set dir=/platform end add

Re: [zones-discuss] Zones boot and devfsadm door interaction: a clarification question

2007-02-12 Thread Jerry Jelinek
Xu wrote: Hello, Truly Truly sorry ; now, at last ,this **REALLLY** the full text! I verified it with preview ! The thing is that some redirection to console in the text messed it somehow.So I omitted it. I tried to trace Zones booting with DTrace. I ran DTrace thus: dtrace -qn

Re: [zones-discuss] Re: [nfs-discuss] Re: [sysadmin-discuss] NFS server in zones

2007-02-14 Thread Jerry Jelinek
Robert Gordon wrote: ... I'd even go further and say that any user in the global zone would not have access to /export/z1. ... This is already the case. The mode on the final zonepath directory must be 700. This is set when zoneadm installs the zone and verified when you do normal zone

Re: [zones-discuss] Re: [nfs-discuss] Re: [sysadmin-discuss] NFS server in zones

2007-02-15 Thread Jerry Jelinek
Robert Thurlow wrote: In a related area, and to address an earlier question I raised, I don't think getting a filesystem via a lofs mount should entitle you to share it - you should have device access delegated to your zone in order to do that. Zones folks may disagree. Rob, In general we

Re: [zones-discuss] Re: Zone start order

2007-03-08 Thread Jerry Jelinek
Paul Davis wrote: Rodney, you have some great ideas for an RFE. We do already have the following open RFE for folks who are interested in this topic. 5089475 RFE: provide control over zones boot sequence at system boot Jerry ___ zones-discuss

[zones-discuss] zoneadm attach enhancement

2007-03-09 Thread Jerry Jelinek
I wanted to let everyone know about a small enhancement to the zoneadm 'attach' command that we integrated yesterday. Currently, before you attach a zone to a host, it must have been detached from the original host. The detach process generates the information we need to validate the attach on

Re: [zones-discuss] Zone Cloning issues

2007-03-21 Thread Jerry Jelinek
Mark Huff wrote: IHAC who is pretty excited about the clone option in Solaris 10 11/06 (U3), however they're running into problems in the execution of the clone option for zoneadm. Here are the step-by-step procedures they are following For example they have a zone called bluto-zone1

Re: [zones-discuss] Zone Cloning issues

2007-03-22 Thread Jerry Jelinek
Mark Huff wrote: If I understand what your customer did, then I think you left out a step above. You said they changed their zonepath and IP address for the new host. However, based on the names above, it also looks like they changed the lofs mounted filesystem configuration for the new zone.

Re: [zones-discuss] duplicating zones from one server in one location to another server

2007-03-29 Thread Jerry Jelinek
Krzys wrote: Hello folks, I have a question, here is a situation. I did build a new server environment in one location (TX) and I have setup multiple zones and they are on a zfs. My goal is to take zone configuration with all zone content that is on zfs and duplicate it on into another

Re: [zones-discuss] Zones on large ZFS filesystems

2007-03-29 Thread Jerry Jelinek
Niclas Sodergard wrote: Hi everyone, Sorry for crossposting but it seems I have stumbled upon a problem that affects both. I have a V490 running Solaris 10u3 with a 16x750GB raid array connected to it. I've created an 8TB zfs filesystem called data1 and created a zfs filesystem called

Re: [zones-discuss] duplicating zones from one server in one location to another server

2007-04-02 Thread Jerry Jelinek
Krzys wrote: Is there any way to replicate zone from one server to another without actually bringing down the original zone down? I have a production server that I want to duplicate and I do not want to bring that zone down but I would like to duplicate it to another server in entire state...

Re: [zones-discuss] Patching/Packaging and brands

2007-04-24 Thread Jerry Jelinek
Zoram Thanga wrote: Hi, What changes, if any, have been made in our patching/packaging infrastructure to deal with branded zones? It is of course understandable that patchadd/pkgadd will skip lx types of brands that emulate entirely different operating environments. However, it is also

Re: [zones-discuss] using a zfs pool as a zone's home dir

2007-04-24 Thread Jerry Jelinek
Michael Barrett wrote: When you tell a local zone to use a mount point that is actually a zfs file system as it's home directory, does the local zone think it's a ufs or does it know it's a zfs? Note this is _not_ me importing a legacy set file system into a zone as a zfs type file system.

Re: [zones-discuss] zone hung in shutting_down status

2007-04-24 Thread Jerry Jelinek
Dave Pigliavento wrote: I have a Solaris 10 release 6/06 system that is configured with several zones. One of which is now in an unusable state after a reboot attempt. The status of the zone is shutting_down and there is a defunct process that can't be killed. preap just hangs indefinitely

Re: [zones-discuss] Problem removing multiple filesystems

2007-04-24 Thread Jerry Jelinek
Justin Lloyd wrote: I'm having the following problem when trying to remove multiple filesystems at once. I can remove fs once but when I try to remove a second filesystem in the same session, I get a No such resource with that id message, as shown below. I've removed four other filesystems

Re: [zones-discuss] limiting a percentage of CPU resource on a zone

2007-04-26 Thread Jerry Jelinek
DJR wrote: Hi, What would be the best way/easiest way to limit an amount of a 8core CPU to a specific zone. Can I do it in such a way to limit 2 of 8 cores, or does it have to be in a percentage bases. Im assuming it would be done with zonecfg, any help is appreciated. Some folks have

Re: [zones-discuss] Why is mount disabled for branded zones

2007-05-08 Thread Jerry Jelinek
Tirthankar wrote: Why is mount command disallowed for a branded zone ? I can boot the zone, using the normal zoneadm -z cz2 boot command The mount command is an undocumented command that is used primarily to support safe zone upgrades. If you look at the spec for the scratch zone in

Re: [zones-discuss] Default RM controls for Containers?

2007-05-10 Thread Jerry Jelinek
Jeff Victor wrote: By default, Solaris Containers do not have resource controls. Up through S10 11/06 you could add many resource controls to Containers, directly or indirectly, but some of them were... 'challenging' to use. ;-) S10 7/07 improves the situation greatly, moving many of the

Re: [zones-discuss] Default RM controls for Containers?

2007-05-10 Thread Jerry Jelinek
Bob Netherton wrote: I see where you are going with this Jeff, and there are some good ideas behind all of this. I have a great desire to rephrase your question without the reference to zones - how well is Solaris itself protected against the various forms of DoS attack ? Do the controls

Re: [zones-discuss] Default RM controls for Containers?

2007-05-11 Thread Jerry Jelinek
Jeff Victor wrote: With all of that, should default values be minima or maxima? The goal I have in mind is default values that will protect a zone from DoS attacks, or the equivalent symptom, caused by bad software. Although we could assign default values to caps, they would be arbitrary,

Re: [zones-discuss] Default RM controls for Containers?

2007-05-11 Thread Jerry Jelinek
Mads Toftum wrote: On Fri, May 11, 2007 at 10:48:04AM -0600, Jerry Jelinek wrote: The requirement for the RM defaults should be that a misbehaving zone can't effectively bring down the whole system. You want to be able to get on the global zone and clean up the misbehaving zone and any other

Re: [zones-discuss] Default RM controls for Containers?

2007-05-11 Thread Jerry Jelinek
Jeff Victor wrote: Wouldn't this lead to a waste of resources on systems with only one non-global zone? It may not be the most common setup, but still makes a lot of sense for a higher level of security. No, since this is only a cap, not a partitioning of resources, so everything is still

Re: [zones-discuss] Removing pool defs. with zonecfg

2007-05-25 Thread Jerry Jelinek
Bill Casale wrote: Can anybody tell me how to remove pool definitions within the zonecfg utility? I've tried variations of zonecfg remove poolname with no luck. I can't find any syntax expamples in the documentation for doing this. It depends what release you are running. This is bug:

Re: [zones-discuss] Error

2007-05-30 Thread Jerry Jelinek
Andrew Dishong wrote: Getting the following error after trying to uninstall a zone,any ideas? [lab-15k-c]:~\ # zoneadm -z test1 uninstall Are you sure you want to uninstall zone test1 (y/[n])? y rm: Unable to remove directory /zonesHA/test1/test1/root/usr/lib/cpu: File exists rm: Unable to

Re: [zones-discuss] Error

2007-05-30 Thread Jerry Jelinek
The Real Warren Belfer wrote: Jerry Jelinek wrote: Andrew Dishong wrote: Getting the following error after trying to uninstall a zone,any ideas? [lab-15k-c]:~\ # zoneadm -z test1 uninstall Are you sure you want to uninstall zone test1 (y/[n])? y rm: Unable to remove directory /zonesHA/test1

[zones-discuss] updating a zone when attaching

2007-06-04 Thread Jerry Jelinek
Enclosed is a draft of an ARC fast-track proposal I have been working on recently, in-between a few other things. I would like to submit this for ARC review shortly but I wanted to send this out to see if anybody had any comments before I do that. I have cc-ed the install-discuss alias as well,

Re: [zones-discuss] updating a zone when attaching

2007-06-04 Thread Jerry Jelinek
Jeff, I trimmed most of the original email. Jeff Victor wrote: This is probably out of scope for this project, but software delivery via zones creates a potential security risk: software delivered via this method could have a limitpriv setting which is inappropriate in certain environments.

[zones-discuss] Re: [install-discuss] updating a zone when attaching

2007-06-04 Thread Jerry Jelinek
James, James Carlson wrote: Jerry Jelinek writes: to upgrade to. Pkg operations on pkgs with the SUNW_ALLZONES attribute set must be run from the global zone, the operation will be performed on all native zones, and this behavior is built-in to the pkg commands. This document

Re: [zones-discuss] updating a zone when attaching

2007-06-04 Thread Jerry Jelinek
roush wrote: Hi Jerry, This proposal mentions native zones. Please ensure that the cluster brand is treated as a native brand, as noted in PSARC 2007/304. Ellard, Will do. Thanks, Jerry ___ zones-discuss mailing list zones-discuss@opensolaris.org

[zones-discuss] Re: [install-discuss] updating a zone when attaching

2007-06-04 Thread Jerry Jelinek
James Carlson wrote: Jerry Jelinek writes: This document describes in detail how the packaging bits will be taken care of. But how are patches re-run to update the zone on attach? We don't have copies of the patch metadata (the scripts) around in usable form, do we? Do we just 'assume

[zones-discuss] Re: [install-discuss] updating a zone when attaching

2007-06-04 Thread Jerry Jelinek
James Carlson wrote: Is that your understanding as well? So maybe there could be an issue if we had a patch that was not suitable for use in a Solaris update but that was issued asynchronously? ... or that was just handled differently in the update. I know we've done some special things in

Re: [zones-discuss] zoneadm install

2007-06-04 Thread Jerry Jelinek
F.V.(Phil)Porcella wrote: ***Im getting some strange errors from zoneadmin install bash-3.00# zoneadm -z CIS2 install Preparing to install zone CIS2. Creating list of files to copy from the global zone. Copying 213 files to the zone. Initializing zone product registry. ERROR: Read-only file

Re: [zones-discuss] updating a zone when attaching

2007-06-05 Thread Jerry Jelinek
Mike, Mike Gerdts wrote: This seems to imply I can do something along the lines of: lucreate -n newbe ... for zone in $allzones ; do zoneadm -z $zone halt zoneadm -z $zone detach done luupgrade -t -n newbe -s /tmp/10_Recommended ... luactivate newbe init 6 for zone in $allzones ; do

Re: [zones-discuss] updating a zone when attaching

2007-06-05 Thread Jerry Jelinek
Ellis, Mike wrote: Thanks for the note and discussion jerry... I'm not a huge fan of LU (historical bagage on my part I guess) I recently started seeing its use as a some sort of means to an end. The interesting thing is that what you're proposing here (which is much more of an patch-upgrade

Re: [zones-discuss] Zones and Veritas Volume Manager... easy upgrades/LU usage possible ?

2007-06-05 Thread Jerry Jelinek
Gael wrote: With the current thread about upgrades, I was wondering if it would be possible to upgrade our currents frames to U4 as I would like to use the memory capping capabilities of U4... the one apparent issue here is that we are using Veritas for BOTH the BE and the zones filesystems

Re: [zones-discuss] ipfilter in local zones

2007-06-06 Thread Jerry Jelinek
Jason Bradfield wrote: I have done some more reading around and found the following.. can you please confirm this.. I have read in several blogs that ipfilter(within a non global zone) has been possible since early this year.. Then when I looked at our zone and the ipf.conf and the ipfilter

Re: [zones-discuss] zone install problem

2007-06-12 Thread Jerry Jelinek
Jim Bob wrote: Hi, we just received a couple of T1000's and i am trying to create a few zones on the boxes. after configuring the zone, i type the zone install command and receive the following error: [EMAIL PROTECTED] # zoneadm -z oracle-zone install Waiting for up to 300 seconds for zone

Re: [zones-discuss] Multiple zones and shared ZFS filesystems?

2007-06-12 Thread Jerry Jelinek
Peter Eriksson wrote: Let's take a not-so-hypothetical situation: A thumper. Serving files via NFS and SMB (samba). Let's assume I want to run the Samba processes inside zones (multiple zones, also, serving different network domains) to limit any possible securit holes and also to make it

Re: [zones-discuss] Re: zonepath

2007-06-14 Thread Jerry Jelinek
F.V.(Phil)Porcella wrote: Hi Edna, OK so having the zoneroot be under / is NOT required, (thank you), and from what you said, having it on its own mount point is NOT a problem. If fact, you indicate that having the zones under /export may be the best practice. I think having zones on a

Re: [zones-discuss] Patching downrev zones

2007-06-25 Thread Jerry Jelinek
Nicolas Williams wrote: I've a customer who wants to be able to attach a downrev zone and patch it. They want to know when (and in what S10 update) this will be possible. This is 6480464 RFE: zoneadm attach should patch/update the zone to the new hosts level There is currently no date for

Re: [zones-discuss] zone info question

2007-07-06 Thread Jerry Jelinek
Russ Petruzzelli wrote: In a script I'd like to run prtdiag if I am in a global zone. Is there a zoneadm command to tell me what kind of zone I'm in? It's not jumping out at me in the zoneadm help. eg: if [[ globalzone == true ]]; then OR is there a way to get this to run

Re: [zones-discuss] installing zones

2007-07-12 Thread Jerry Jelinek
Oscar wrote: bash-3.00# zoneadm -z myzones install Preparing to install zone myzones. Checking ufs file system on device /dev/rdsk/c1t0d0s7 to be mounted at /ho ERROR: file system check /usr/lib/fs/ufs/fsck of /dev/rdsk/c1t0d0s7 failed:d ERROR: cannot setup zone myzones inherited and

  1   2   3   4   >