Re: [zones-discuss] improved zones/RM integration

2006-06-28 Thread Jerry Jelinek
Jeff, Thanks for your comments. I have a few responses in-line. Jeff Victor wrote: 1) General comment: I agree that this will provide needed clarity to the seemingly unorganized RM features that we have scattered through Solaris during the last decade. The automation of certain activities

Re: [zones-discuss] Re: Proposal: Zone Boot Arguments II

2006-07-24 Thread Jerry Jelinek
Matty wrote: It sounds like you might be interested in the zoneadm clone option. This feature is currently in Solaris Express, and I am hopeful it will make Solaris 10 update 3. Does anyone from Sun happen to know if the attach, detach and clone features could be released as a patch for

Re: [zones-discuss] cpu and memory assignments in zones

2006-07-31 Thread Jerry Jelinek
Dave Bevans wrote: Hi All, I have a customer who wants to assign 1 cpu and 1 Gb of memory for each zone they have created. What is the best way for the customer to approach this? Is this possible? You can use a processor set pool to assign 1 cpu to the zone. We do not yet have the ability

Re: [zones-discuss] Question on user account config with zones

2006-07-31 Thread Jerry Jelinek
Paul Kraus wrote: On 7/31/06, Steffen Weiberle [EMAIL PROTECTED] wrote: Home directories are more problematic; you will need to loopback mount them into the local zones. Is the underlying problem being worked on, or is it worth an RFE to make this transparent (automount if remote,

Re: [zones-discuss] problems with installing iplanet in nonglobal zone

2006-08-02 Thread Jerry Jelinek
Steffen Weiberle wrote: If anything like Jave ES applications (directory, web, app server, etc.) you need a full root zone to install into. I.e., remove all your inherit-pkg-dir parts. Or, you may be able to use this technique from the zones FAQ if you only need a writable subdirectory in

Re: [zones-discuss] Re: Re: Question: Zones/Mpxio + Disk Array (HDS 9970V

2006-08-04 Thread Jerry Jelinek
Doug Scott wrote: Doug Scott wrote On 08/04/06 11:42,: create a zfs filesystem in the global zone for the zone. Something like $ zfs create mypool/export/zones/zone1 $ mkdir -p /export/zones/zone1 $ zfs set mountpoint=/export/zones/zone1 mypool/export/zones/zone1 With zonecfg set your

Re: [zones-discuss] Re: improved zones/RM integration

2006-08-16 Thread Jerry Jelinek
Steffen, Thanks for your comments. Responses in-line. Steffen Weiberle wrote: Hi Jerry, this is great. I have a few comments below. Thanks Steffen 1) Hard vs. Soft RM configuration within zonecfg We will enhance zonecfg(1M) so that the user can configure basic RM capabilities in

Re: [zones-discuss] Re: improved zones/RM integration

2006-08-17 Thread Jerry Jelinek
Steffen, Steffen Weiberle wrote: Jerry Jelinek wrote On 08/16/06 18:14,: Steffen, Thanks for your comments. Responses in-line. Steffen Weiberle wrote: Hi Jerry, this is great. I have a few comments below. Thanks Steffen 1) Hard vs. Soft RM configuration within zonecfg We

Re: [zones-discuss] question about zones status check. thanks

2006-08-17 Thread Jerry Jelinek
Chun-Huan Freesia Shen wrote: Hi experts, This is chunhuan from SC. I have a question to consult you. How can I confirm that the zones (global/non-global) status is ok or not through explorer file gathered by version 5.5 ? The explorer file is at the following site:

Re: [zones-discuss] Hmm ... tmpfs in zone?

2006-08-18 Thread Jerry Jelinek
Christine Tran wrote: Hi, I came across a zone example that looks like this: fs: dir: /tmp special: swap raw not specified type: tmpfs options: [size=1024] Hmm ... I think I know what the person is trying to do,

Re: [zones-discuss] Hmm ... tmpfs in zone?

2006-08-18 Thread Jerry Jelinek
Christine Tran wrote: zonecfg doesn't know about every option on every filesystem, bundled and unbundled, that is available on Solaris. zoneadm does some basic validation of fs entries but it too does not know about all of the special options each filesystem might have. Well, is this worth at

Re: [zones-discuss] Re: zone stuck in 'mounted' state

2006-08-24 Thread Jerry Jelinek
Peter Guthrie wrote: FYI, I just found this thread when I Google'd for the same problem. This is on a w2100z running B44. In my case the zone installed perfectly and I was able to login to it. After a reboot I found it in the 'mounted' state. As the previous posts in this thread indicate,

Re: [zones-discuss] rcapd to limit RAM usage of a zone

2006-08-29 Thread Jerry Jelinek
Phil Cordier wrote: Posted this question on the general zones group at got a deafening silence in response - anyone here have any possible answers? http://forum.sun.com/jive/thread.jspa?forumID=299threadID=100707 It is possible that prstat and rcapd are counting shared memory multiple times,

Re: [zones-discuss] Zones and cpu-shares

2006-08-31 Thread Jerry Jelinek
Marlanne DeLaSource wrote: Sorry about this question that may be stupid, but I wasn't able to display the cpu-shares afterwards. I set up the rctl cpu-shares in the various zones, used dispadminand prctl (I also rebooted). It worked nicely. But I wanted to check the cpu-shares given to the 3

Re: [zones-discuss] Where is the nice tool.

2006-09-01 Thread Jerry Jelinek
Marlanne DeLaSource wrote: Hi again, I'm still playing with zones... I was having a look at the clingan zone, and there is a snapshot of a tool here : http://blogs.sun.com/jclingan/resource/global_create.gif This tool has a nice display and seems to manage containers. I have installed sun

Re: [zones-discuss] zones, upgrades, and vxvm

2006-09-14 Thread Jerry Jelinek
Steffen Weiberle wrote: Jeff Victor wrote On 09/14/06 10:35,: [EMAIL PROTECTED] wrote: Does it make any difference as to where or what kind of fs that the zoneroot is mounted? and is there any difference with a whole root zone? The situation is the same for both sparse and whole-root

Re: [zones-discuss] Cost to Manage Solaris Containers vs. Just Global Zone?

2006-09-21 Thread Jerry Jelinek
Mark Mulligan wrote: Hi Community, I was wondering if any customers had done an evaluation on the administrative time or cost (same thing really) improved by using the efficiencies of Solaris Containers vs. managing individual servers with just one Solaris 10 global zone or one Solaris 8/9

Re: [zones-discuss] RFE?: Prevent installation of packages

2006-10-17 Thread Jerry Jelinek
Jens Elkner wrote: Is there a feature, which allows me to configure or tell zone install to NOT install certain packages? E.g. I've a machine with StarOffice installed. For obvious reasons I don not want to inherit the StarOffice packages into a none-global zone. Finding the appropriate

Re: [zones-discuss] Libraries not mounted in local zone

2006-10-18 Thread Jerry Jelinek
Bill Casale wrote: Is there a reason the hardware optimized libraries shouldn't be mounted in a local zone? They should be. This was bug 6407767 libc_psr does not get mounted in a zone which was integrated into b41. What build are you running? Jerry

Re: [zones-discuss] Libraries not mounted in local zone

2006-10-18 Thread Jerry Jelinek
Bill Casale wrote: Hi Jerry, Thanks for your reply, I did see that bug but this is happening on a V440 running Solaris 10 1/06 with KU 118833-23. It looks like this was also fixed in S10u3 build 4. I am not sure if it is in a patch yet. Jerry ___

Re: [zones-discuss] move is not showing up in zoneadm subcommands

2006-10-18 Thread Jerry Jelinek
Gregory Edwards - Software Support wrote: SunOS wasoaf04 5.10 Generic_118822-25 sun4u sparc SUNW,Sun-Fire # cat /etc/release Solaris 10 1/06 s10s_u1wos_19a SPARC Copyright 2005 Sun Microsystems, Inc. All Rights Reserved. Use is subject

Re: [zones-discuss] zone resource control, who gets signaled?

2006-10-19 Thread Jerry Jelinek
Christine Tran wrote: The zones.cpu-shares rctl has a set of threshhold actions: none, deny and signal=. Say if I set the action as signal=TERM, who actually gets signaled? Is it the process in the zone that's currently queuing to get on CPU, or is it zoneadmd (which presumably will pass it

Re: [zones-discuss] zone with lofs zfs - why legacy

2006-10-23 Thread Jerry Jelinek
Jens Elkner wrote: I've created a zone which should mount the /pool1/flexlm.ulo zfs via lofs: + zfs create pool1/flexlm.ulo + zfs set atime=off pool1/flexlm.ulo + zfs set sharenfs=off pool1/flexlm.ulo + zonecfg -z flexlm ... add fs set dir=/usr/local set

Re: [zones-discuss] non global zone and NFS server

2006-10-27 Thread Jerry Jelinek
Rayson Ho wrote: It's being worked on: http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=4964859 IIRC, it is currently not supported because the kernel part of NFS server does not understand the concept of zones... In order to help the NFS team understand the importance of this issue

Re: [zones-discuss] improved zones/RM integration

2006-11-02 Thread Jerry Jelinek
Mike, Mike Gerdts wrote: On 6/26/06, Gerald A. Jelinek [EMAIL PROTECTED] wrote: Attached is a description of a project we have been refining for a while now. The idea is to improve the integration of zones with some of the existing resource management features in Solaris. In the proposal

Re: [zones-discuss] fsck during zones boot ?

2006-11-15 Thread Jerry Jelinek
Detlef Drewanz wrote: Hi, is there a way to check a filesystem during a zones boot that was configured with zonecfg ? Sorry for the delayed response to this question. I have gotten a bit behind. I don't know of a way to do this when you add a file system in zonecfg using the fs resource.

Re: [zones-discuss] fsck during zones boot ?

2006-11-16 Thread Jerry Jelinek
Detlef Drewanz wrote: Thanks Jerry, that makes very much sense to do that in this way. But we should keep in mind that checking a filesystem during zonesboot might be required (esspecially after a crash or a cluster switch). With add device the raw device is in the zone available to do the

Re: [zones-discuss] Attach dry-run fails with missing or invalid brand

2006-11-16 Thread Jerry Jelinek
Menno Lageman wrote: Hi, doing a dry-run attach of a detached zone fails with the message zoneadm: missing or invalid brand and exit code 1. Attaching the zone for real succeeds though. I would expect the dry-run to succeed too because the zone was created on this system so everything

Re: [zones-discuss] Re: Attach dry-run fails with missing or invalid brand

2006-11-16 Thread Jerry Jelinek
Menno Lageman wrote: Menno Lageman wrote: Hi, doing a dry-run attach of a detached zone fails with the message zoneadm: missing or invalid brand and exit code 1. Attaching the zone for real succeeds though. I would expect the dry-run to succeed too because the zone was created on this

Re: [zones-discuss] Zone installation problem.

2006-12-06 Thread Jerry Jelinek
Chris Greenman wrote: Hello, I've got a problem I hope someone can help me with. I have two identical E250s (both jumpstarted identically) and I'm having problems installing a zone on one of them. The problem appears to center around some loopback filesystems I'm trying to create. The config

Re: [zones-discuss] Zone installation problem.

2006-12-07 Thread Jerry Jelinek
Chris Greenman wrote: That was kinda my thinking too but I guess an lofs mount would do the same thing. Quick question though, what is the major different between an inherit-pkg-dir and an lofs mount? This is one area of zones I haven't really researched that well. There are several

Re: [zones-discuss] Re: RE: ?: named pipes between zones using shared filesystem

2006-12-12 Thread Jerry Jelinek
Steffen Weiberle wrote: Is it safe to generalize that non-LOFS file systems in Solaris 10 do not allow cross-zone interaction? procfs does not. namefs does not. tmpfs does not. sockfs does not. doors does not. What about all the others (I can't even name them all)? Steffen, One issue to be

Re: [zones-discuss] Re: RE: ?: named pipes between zones using shared filesystem

2006-12-12 Thread Jerry Jelinek
Steffen Weiberle wrote: This new rctl is part of the overall zones/rm improvement project we have been working on for a while now. Thanks, Jerry! I am waiting with open arms :) for this, and memory sets, and swap sets, and IP instances! Oh, and CPU caps. Wait, does this replace swap sets?

[zones-discuss] duckhorn man pages

2007-01-29 Thread Jerry Jelinek
I know b56 is just getting out but for people who will be using duckhorn (the improved zones-rm project) some of the associated man page changes did not make it into b56. Specifically, the section 1M changes (zonecfg, rcapd, prtstat rcapadm) were omitted. I wanted to let everyone know these

Re: [zones-discuss] New zone, sysidtool:net isn't starting

2007-01-30 Thread Jerry Jelinek
[EMAIL PROTECTED] wrote: FYI, you can also use create -b (blank) so you don't have to run remove-pkg-dir 4 times. Actually, the documented way to create a whole-root zone *is* to remove the default inherit-pkg-dir resources. The reason for this is create -b says to use a blank template -

Re: [zones-discuss] New zone, sysidtool:net isn't starting

2007-01-31 Thread Jerry Jelinek
Tim Cook wrote: So essentially at this time blastwave is just a *bad idea* for global zones. Is something like sunfreeware ok then? I assume the -G option should work with those packages? I don't know a lot of the details of blastwave and how many different options it gives you. However, in

Re: [zones-discuss] zones-discuss@opensolaris.org

2007-02-02 Thread Jerry Jelinek
Mark Koeller wrote: Can you obtain S10 Update3 zones (move, copy, rename) features by adding zones patches to S10 Update 2? Must you run Solaris 10 Update 3/Nevada to get these new zones features? You can patch your way up. The x86 zones jumbo patch is 122661 and sparc zones jumbo patch

Re: [zones-discuss] Capped memory observability

2007-02-06 Thread Jerry Jelinek
Mike, Mike Gerdts wrote: One of the effects of setting capped-memory resource control for swap is that the size of /tmp is also limited. Unlike when a tmpfs size limit is set with the size=... mount option, df /tmp does not display a value that is reflective of the limits that are put in

Re: [zones-discuss] Changing a zone's inherit-pkg-dir

2007-02-06 Thread Jerry Jelinek
Matt Cohen wrote: Hi. We have a zone currently setup on one of our Solaris 10 servers, but it wasn't configured quite properly. Is there a way to go back and add an inherited dir to a zone that's already configured and has been running for a couple of weeks? You are not allowed to change

[zones-discuss] Re: [zfs-discuss] Downsides to zone roots on ZFS?

2007-02-07 Thread Jerry Jelinek
Rich, Rich Teer wrote: Hi all, Last time I checked, having one's zone roots (zonepaths) on ZFS file systems was not a recommended practice, despite the fact that this works. IIRC, the problem was that the upgrade code didn't grok zfs and would therefore get terribly confused should the zone

Re: [zones-discuss] Re: [zfs-discuss] Downsides to zone roots on ZFS?

2007-02-07 Thread Jerry Jelinek
John Clingan wrote: This is incorrect. All S10 updates have supported upgrading systems with zones. I believe what you are thinking of is that live-upgrade does not support upgrading systems with zones. This is being fixed in the next S10 update. It is already fixed in nevada. Which Nevada

Re: [zones-discuss] Re: [zfs-discuss] Downsides to zone roots on ZFS?

2007-02-08 Thread Jerry Jelinek
Ivan Buetler wrote: Is this true for OpenSolaris? My experience: I was trying to upgrade from SunOS 5.11 snv_28 to SunOS 5.11 snv_54 where my NGZ zone roots were set to a zfs mount point like below: NAME USED AVAIL REFER MOUNTPOINT zpool 93.8G 40.1G26K

Re: [zones-discuss] Re: [zfs-discuss] Downsides to zone roots on ZFS?

2007-02-08 Thread Jerry Jelinek
Ivan Buetler wrote: Jerry, Thank you for your response. See my zonecfg of the named NGZ here: [EMAIL PROTECTED] ~ # zonecfg -z named export create -b set zonepath=/zpool/zones/named set autoboot=true add inherit-pkg-dir set dir=/lib end add inherit-pkg-dir set dir=/platform end add

Re: [zones-discuss] Re: [nfs-discuss] Re: [sysadmin-discuss] NFS server in zones

2007-02-14 Thread Jerry Jelinek
Robert Gordon wrote: ... I'd even go further and say that any user in the global zone would not have access to /export/z1. ... This is already the case. The mode on the final zonepath directory must be 700. This is set when zoneadm installs the zone and verified when you do normal zone

Re: [zones-discuss] Re: [nfs-discuss] Re: [sysadmin-discuss] NFS server in zones

2007-02-15 Thread Jerry Jelinek
Robert Thurlow wrote: In a related area, and to address an earlier question I raised, I don't think getting a filesystem via a lofs mount should entitle you to share it - you should have device access delegated to your zone in order to do that. Zones folks may disagree. Rob, In general we

Re: [zones-discuss] Re: Zone start order

2007-03-08 Thread Jerry Jelinek
Paul Davis wrote: Rodney, you have some great ideas for an RFE. We do already have the following open RFE for folks who are interested in this topic. 5089475 RFE: provide control over zones boot sequence at system boot Jerry ___ zones-discuss

[zones-discuss] zoneadm attach enhancement

2007-03-09 Thread Jerry Jelinek
I wanted to let everyone know about a small enhancement to the zoneadm 'attach' command that we integrated yesterday. Currently, before you attach a zone to a host, it must have been detached from the original host. The detach process generates the information we need to validate the attach on

Re: [zones-discuss] Zone Cloning issues

2007-03-21 Thread Jerry Jelinek
Mark Huff wrote: IHAC who is pretty excited about the clone option in Solaris 10 11/06 (U3), however they're running into problems in the execution of the clone option for zoneadm. Here are the step-by-step procedures they are following For example they have a zone called bluto-zone1

Re: [zones-discuss] Zone Cloning issues

2007-03-22 Thread Jerry Jelinek
Mark Huff wrote: If I understand what your customer did, then I think you left out a step above. You said they changed their zonepath and IP address for the new host. However, based on the names above, it also looks like they changed the lofs mounted filesystem configuration for the new zone.

Re: [zones-discuss] duplicating zones from one server in one location to another server

2007-03-29 Thread Jerry Jelinek
Krzys wrote: Hello folks, I have a question, here is a situation. I did build a new server environment in one location (TX) and I have setup multiple zones and they are on a zfs. My goal is to take zone configuration with all zone content that is on zfs and duplicate it on into another

Re: [zones-discuss] Zones on large ZFS filesystems

2007-03-29 Thread Jerry Jelinek
Niclas Sodergard wrote: Hi everyone, Sorry for crossposting but it seems I have stumbled upon a problem that affects both. I have a V490 running Solaris 10u3 with a 16x750GB raid array connected to it. I've created an 8TB zfs filesystem called data1 and created a zfs filesystem called

Re: [zones-discuss] duplicating zones from one server in one location to another server

2007-04-02 Thread Jerry Jelinek
Krzys wrote: Is there any way to replicate zone from one server to another without actually bringing down the original zone down? I have a production server that I want to duplicate and I do not want to bring that zone down but I would like to duplicate it to another server in entire state...

Re: [zones-discuss] Patching/Packaging and brands

2007-04-24 Thread Jerry Jelinek
Zoram Thanga wrote: Hi, What changes, if any, have been made in our patching/packaging infrastructure to deal with branded zones? It is of course understandable that patchadd/pkgadd will skip lx types of brands that emulate entirely different operating environments. However, it is also

Re: [zones-discuss] limiting a percentage of CPU resource on a zone

2007-04-26 Thread Jerry Jelinek
DJR wrote: Hi, What would be the best way/easiest way to limit an amount of a 8core CPU to a specific zone. Can I do it in such a way to limit 2 of 8 cores, or does it have to be in a percentage bases. Im assuming it would be done with zonecfg, any help is appreciated. Some folks have

Re: [zones-discuss] Why is mount disabled for branded zones

2007-05-08 Thread Jerry Jelinek
Tirthankar wrote: Why is mount command disallowed for a branded zone ? I can boot the zone, using the normal zoneadm -z cz2 boot command The mount command is an undocumented command that is used primarily to support safe zone upgrades. If you look at the spec for the scratch zone in

Re: [zones-discuss] Default RM controls for Containers?

2007-05-10 Thread Jerry Jelinek
Jeff Victor wrote: By default, Solaris Containers do not have resource controls. Up through S10 11/06 you could add many resource controls to Containers, directly or indirectly, but some of them were... 'challenging' to use. ;-) S10 7/07 improves the situation greatly, moving many of the

Re: [zones-discuss] Default RM controls for Containers?

2007-05-10 Thread Jerry Jelinek
Bob Netherton wrote: I see where you are going with this Jeff, and there are some good ideas behind all of this. I have a great desire to rephrase your question without the reference to zones - how well is Solaris itself protected against the various forms of DoS attack ? Do the controls

Re: [zones-discuss] Default RM controls for Containers?

2007-05-11 Thread Jerry Jelinek
Jeff Victor wrote: With all of that, should default values be minima or maxima? The goal I have in mind is default values that will protect a zone from DoS attacks, or the equivalent symptom, caused by bad software. Although we could assign default values to caps, they would be arbitrary,

Re: [zones-discuss] Default RM controls for Containers?

2007-05-11 Thread Jerry Jelinek
Mads Toftum wrote: On Fri, May 11, 2007 at 10:48:04AM -0600, Jerry Jelinek wrote: The requirement for the RM defaults should be that a misbehaving zone can't effectively bring down the whole system. You want to be able to get on the global zone and clean up the misbehaving zone and any other

Re: [zones-discuss] Default RM controls for Containers?

2007-05-11 Thread Jerry Jelinek
Jeff Victor wrote: Wouldn't this lead to a waste of resources on systems with only one non-global zone? It may not be the most common setup, but still makes a lot of sense for a higher level of security. No, since this is only a cap, not a partitioning of resources, so everything is still

Re: [zones-discuss] Removing pool defs. with zonecfg

2007-05-25 Thread Jerry Jelinek
Bill Casale wrote: Can anybody tell me how to remove pool definitions within the zonecfg utility? I've tried variations of zonecfg remove poolname with no luck. I can't find any syntax expamples in the documentation for doing this. It depends what release you are running. This is bug:

Re: [zones-discuss] Error

2007-05-30 Thread Jerry Jelinek
Andrew Dishong wrote: Getting the following error after trying to uninstall a zone,any ideas? [lab-15k-c]:~\ # zoneadm -z test1 uninstall Are you sure you want to uninstall zone test1 (y/[n])? y rm: Unable to remove directory /zonesHA/test1/test1/root/usr/lib/cpu: File exists rm: Unable to

Re: [zones-discuss] Error

2007-05-30 Thread Jerry Jelinek
The Real Warren Belfer wrote: Jerry Jelinek wrote: Andrew Dishong wrote: Getting the following error after trying to uninstall a zone,any ideas? [lab-15k-c]:~\ # zoneadm -z test1 uninstall Are you sure you want to uninstall zone test1 (y/[n])? y rm: Unable to remove directory /zonesHA/test1

[zones-discuss] updating a zone when attaching

2007-06-04 Thread Jerry Jelinek
Enclosed is a draft of an ARC fast-track proposal I have been working on recently, in-between a few other things. I would like to submit this for ARC review shortly but I wanted to send this out to see if anybody had any comments before I do that. I have cc-ed the install-discuss alias as well,

Re: [zones-discuss] updating a zone when attaching

2007-06-04 Thread Jerry Jelinek
Jeff, I trimmed most of the original email. Jeff Victor wrote: This is probably out of scope for this project, but software delivery via zones creates a potential security risk: software delivered via this method could have a limitpriv setting which is inappropriate in certain environments.

[zones-discuss] Re: [install-discuss] updating a zone when attaching

2007-06-04 Thread Jerry Jelinek
James, James Carlson wrote: Jerry Jelinek writes: to upgrade to. Pkg operations on pkgs with the SUNW_ALLZONES attribute set must be run from the global zone, the operation will be performed on all native zones, and this behavior is built-in to the pkg commands. This document

Re: [zones-discuss] updating a zone when attaching

2007-06-04 Thread Jerry Jelinek
roush wrote: Hi Jerry, This proposal mentions native zones. Please ensure that the cluster brand is treated as a native brand, as noted in PSARC 2007/304. Ellard, Will do. Thanks, Jerry ___ zones-discuss mailing list zones-discuss@opensolaris.org

[zones-discuss] Re: [install-discuss] updating a zone when attaching

2007-06-04 Thread Jerry Jelinek
James Carlson wrote: Jerry Jelinek writes: This document describes in detail how the packaging bits will be taken care of. But how are patches re-run to update the zone on attach? We don't have copies of the patch metadata (the scripts) around in usable form, do we? Do we just 'assume

[zones-discuss] Re: [install-discuss] updating a zone when attaching

2007-06-04 Thread Jerry Jelinek
James Carlson wrote: Is that your understanding as well? So maybe there could be an issue if we had a patch that was not suitable for use in a Solaris update but that was issued asynchronously? ... or that was just handled differently in the update. I know we've done some special things in

Re: [zones-discuss] zoneadm install

2007-06-04 Thread Jerry Jelinek
F.V.(Phil)Porcella wrote: ***Im getting some strange errors from zoneadmin install bash-3.00# zoneadm -z CIS2 install Preparing to install zone CIS2. Creating list of files to copy from the global zone. Copying 213 files to the zone. Initializing zone product registry. ERROR: Read-only file

Re: [zones-discuss] updating a zone when attaching

2007-06-05 Thread Jerry Jelinek
Mike, Mike Gerdts wrote: This seems to imply I can do something along the lines of: lucreate -n newbe ... for zone in $allzones ; do zoneadm -z $zone halt zoneadm -z $zone detach done luupgrade -t -n newbe -s /tmp/10_Recommended ... luactivate newbe init 6 for zone in $allzones ; do

Re: [zones-discuss] updating a zone when attaching

2007-06-05 Thread Jerry Jelinek
Ellis, Mike wrote: Thanks for the note and discussion jerry... I'm not a huge fan of LU (historical bagage on my part I guess) I recently started seeing its use as a some sort of means to an end. The interesting thing is that what you're proposing here (which is much more of an patch-upgrade

Re: [zones-discuss] Zones and Veritas Volume Manager... easy upgrades/LU usage possible ?

2007-06-05 Thread Jerry Jelinek
Gael wrote: With the current thread about upgrades, I was wondering if it would be possible to upgrade our currents frames to U4 as I would like to use the memory capping capabilities of U4... the one apparent issue here is that we are using Veritas for BOTH the BE and the zones filesystems

Re: [zones-discuss] ipfilter in local zones

2007-06-06 Thread Jerry Jelinek
Jason Bradfield wrote: I have done some more reading around and found the following.. can you please confirm this.. I have read in several blogs that ipfilter(within a non global zone) has been possible since early this year.. Then when I looked at our zone and the ipf.conf and the ipfilter

Re: [zones-discuss] zone install problem

2007-06-12 Thread Jerry Jelinek
Jim Bob wrote: Hi, we just received a couple of T1000's and i am trying to create a few zones on the boxes. after configuring the zone, i type the zone install command and receive the following error: [EMAIL PROTECTED] # zoneadm -z oracle-zone install Waiting for up to 300 seconds for zone

Re: [zones-discuss] Re: zonepath

2007-06-14 Thread Jerry Jelinek
F.V.(Phil)Porcella wrote: Hi Edna, OK so having the zoneroot be under / is NOT required, (thank you), and from what you said, having it on its own mount point is NOT a problem. If fact, you indicate that having the zones under /export may be the best practice. I think having zones on a

Re: [zones-discuss] Patching downrev zones

2007-06-25 Thread Jerry Jelinek
Nicolas Williams wrote: I've a customer who wants to be able to attach a downrev zone and patch it. They want to know when (and in what S10 update) this will be possible. This is 6480464 RFE: zoneadm attach should patch/update the zone to the new hosts level There is currently no date for

Re: [zones-discuss] zone info question

2007-07-06 Thread Jerry Jelinek
Russ Petruzzelli wrote: In a script I'd like to run prtdiag if I am in a global zone. Is there a zoneadm command to tell me what kind of zone I'm in? It's not jumping out at me in the zoneadm help. eg: if [[ globalzone == true ]]; then OR is there a way to get this to run

Re: [zones-discuss] installing zones

2007-07-12 Thread Jerry Jelinek
Oscar wrote: bash-3.00# zoneadm -z myzones install Preparing to install zone myzones. Checking ufs file system on device /dev/rdsk/c1t0d0s7 to be mounted at /ho ERROR: file system check /usr/lib/fs/ufs/fsck of /dev/rdsk/c1t0d0s7 failed:d ERROR: cannot setup zone myzones inherited and

Re: [zones-discuss] zone stuck in shutting_down state

2007-07-20 Thread Jerry Jelinek
Steve Zinck wrote: I'm going to open a call with Sun, what information should I gather for them? halt -d? Yes, a system crash dump of the system in this state is what is needed. Thanks, Jerry ___ zones-discuss mailing list

Re: [zones-discuss] memory stats on zones

2007-08-28 Thread Jerry Jelinek
Brian Kolaci wrote: Thanks Lou. Is there anything in the works that you know of? rcapd also doesn't work properly due to this issue. The customer has several other systems with zones that also do alot of shared memory that aren't oracle. They were actually looking for this in SunMC or some

Re: [zones-discuss] Bug? zonecfg export using memory-caps can't be imported

2007-10-02 Thread Jerry Jelinek
Konstantin Gremliza wrote: /Hi, I created a zone like this using memory-caps:/ zonecfg -z zone-a zonecfg:zone-a add capped-memory zonecfg:zone-a:capped-memory set swap=512m zonecfg:zone-a:capped-memory set physical=512m zonecfg:zone-a:capped-memory end zonecfg:zone-a exit /When I

Re: [zones-discuss] bug? zone wont create device files during boot

2007-10-03 Thread Jerry Jelinek
Enda O'Connor ( Sun Micro Systems Ireland) wrote: I tried build 74, add device set match=/dev/dsk/c0t0d0s7 end add device set match=/dev/rdsk/c0t0d0s7 end rebooted zone and device is there ( verified it wasn't before hand ) We need the user case that fails. Enda, I thought the

Re: [zones-discuss] Zone Migration with Resource Bindings

2007-10-05 Thread Jerry Jelinek
Jim, Jim Mauro wrote: Does Zone migration factor in resource allocations? If I have zoneA on sysA, and have configured zone.cpu-shares, or some other resource control, does the migration process, and/or the dry-run feature check for availability of configured resources, or is this simply

Re: [zones-discuss] troubleshooting zone boot issues - failed with exit code 32

2007-10-09 Thread Jerry Jelinek
Jerry Kemp wrote: I have a Sun T2000 running Solaris 10u2, all UFS file systems that has been in place for several months. This morning during a reboot, I had a zone that would not come back up. It failed to boot due to an inability to mount /svc with an error of failed with exit code 32.

Re: [zones-discuss] Sysidtool not running after first boot on new zone under kernel 120011-14

2007-10-15 Thread Jerry Jelinek
Philip wrote: After I had created a new zone for the first time under kernel 120011-14 (on sparc 6/06), I found that sysidtool would not run automatically at the first boot; and so I was not being allowed to finish setting up the zone with the time zone, DNS, hostname, etc. The zone boot

Re: [zones-discuss] Changing a zones installation path and name

2007-10-22 Thread Jerry Jelinek
Stefhen Hovland wrote: Hi, I have an already installed zone, and i would like to change its installation location and zonepath. Is this possible via the commands below? I am just looking to change the zone name and installation dir on the disk. I would like to preserve all data. It looks

Re: [zones-discuss] Solaris 8 Branded Zones

2007-10-25 Thread Jerry Jelinek
mario heimel wrote: Hello, Congratulations on a job well done. http://docs.sun.com/app/docs/doc/820-2914?l=ja when i read the details, i think we need a solaris 10 branded zone. with a branded zone the central patching from the global zone is not applied. there is no SUNW_PKG_ALLZONES

Re: [zones-discuss] Solaris 8 Branded Zones

2007-10-25 Thread Jerry Jelinek
Erik Vanden Meersch wrote: Jerry A question that I repeatedly get from customers is directly related to what you write: S10 is still a very dynamic release so the interpositioning layer would need constant work to cope with the on-going changes in the kernel/user-land boundary. Is

Re: [zones-discuss] Need to force delete zones

2007-10-31 Thread Jerry Jelinek
Michael Webb - Sun Microsystems wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 please respond directly to me as I am not on the alias. I've built a number of zones for Sun Cluster deliveries so I know just enough to get by. I managed to zorch the /etc/zones~.xml files as well as the

Re: [zones-discuss] bug? zone wont create device files during boot

2007-11-02 Thread Jerry Jelinek
Pascal wrote: bash-3.00# cat /etc/release Solaris 10 8/07 s10s_u4wos_12b SPARC Copyright 2007 Sun Microsystems, Inc. All Rights Reserved. Use is subject to license terms. Assembled 16 August 2007 zonecfg

[zones-discuss] code revew - zone update on attach

2007-11-07 Thread Jerry Jelinek
I have posted a webrev for the zone's update on attach changes at: http://cr.opensolaris.org/~gjelinek/webrev/ This addresses the following: PSARC 2007/621 zone update on attach 6480464 RFE: zoneadm attach should patch/update the zone to the new hosts level 6576592 RFE: zoneadm

Re: [zones-discuss] Zone Migration - Sun4u to Sun4v - Supported?

2007-11-08 Thread Jerry Jelinek
Ihsan Zaghmouth wrote: Jerry, How the *update on attach* is planned to be deployed, patch update or next release of solaris10 U5 ? I am currently working on getting this done for nevada. Once it is integrated there then we'll see what S10 update we might be able to get into. I can

Re: [zones-discuss] Zone Migration - Sun4u to Sun4v - Supported?

2007-11-08 Thread Jerry Jelinek
Mads Toftum wrote: On Thu, Nov 08, 2007 at 06:22:40AM -0700, Jerry Jelinek wrote: For zones update on attach we are not supporting downgrading a zone. If you think you will want to migrate back, just leave the original copy of the zone on the original machine and don't boot it. That may

Re: [zones-discuss] Zone Migration - Sun4u to Sun4v - Supported?

2007-11-08 Thread Jerry Jelinek
Mads Toftum wrote: On Thu, Nov 08, 2007 at 06:48:12AM -0700, Jerry Jelinek wrote: Although downgrading the zone might work in some cases it really unsupportable in the general case so we have no plans to do it. Would it at least be possible to get a list of patches that should have been

Re: [zones-discuss] Zones and defunct processes bypassing the LWP rctl

2007-11-09 Thread Jerry Jelinek
Gael wrote: I had the bad surprise to find a production zone impacting a whole frame this morning... visibly the third party application running in it as root (no comments) generated so many processes that the whole frame was generating a lot of cannot fork errors... impacting the other zones

Re: [zones-discuss] Zones and defunct processes bypassing the LWP rctl

2007-11-09 Thread Jerry Jelinek
Gael wrote: On 11/9/07, Jerry Jelinek [EMAIL PROTECTED] wrote: Gael wrote: I had the bad surprise to find a production zone impacting a whole frame this morning... visibly the third party application running in it as root (no comments) generated so many processes that the whole frame

Re: [zones-discuss] Simple question... An inherit-pkg-dir resource with the dir '/lib' already

2007-11-30 Thread Jerry Jelinek
David Smith wrote: I'm getting an error on trying to create a second zone. -bash-3.00# zonecfg -z test123 -f test123-zone-cmd.txt On line 7 of test123-zone-cmd.txt: An inherit-pkg-dir resource with the dir '/lib' already exists. resource specification incomplete Zone test123 failed to

Re: [zones-discuss] sharing terminal server ports to non-global zone

2007-12-18 Thread Jerry Jelinek
Christine Tran wrote: A customer is unable to share something called the terminal server ports to non-global zone. I don't know what these are, but here's the description: Serial sensor interfaces are fed to a patch panel and then received by a digital terminal server. Terminal server

Re: [zones-discuss] Changing the output of uname for all zones from within a zone

2008-01-02 Thread Jerry Jelinek
Bernd Schemmer wrote: Hi, (second try; my email to the list seems to got lost) Using sloggi (http://www.roqe.org/sloggi/ http://www.roqe.org/sloggi/) I can change the output of uname for all zones (including the global zone) from within a zone: global zone [Mon Dec 31 17:36:11

  1   2   3   >