Re: [zones-discuss] a little scripting problem with zonecfg

2009-02-13 Thread Jordan Vaughan
are you running? Jordan /* * Jordan Vaughan * Solaris Kernel Developer * jordan.vaug...@sun.com * blogs.sun.com/lunchware */ On 02/13/09 16:48, Christine Tran wrote: I'm writing a script that adds an LOFS to a zone, using a pre-made batch file it works but I rather generate this on the fly

Re: [zones-discuss] solaris10 brand project proposal

2009-04-23 Thread Jordan Vaughan
+1 Jordan On 04/23/09 09:02, Jerry Jelinek wrote: I would like to propose a project to be sponsored by the zones community. This project would create a solaris10 branded zone for use on OpenSolaris. We will use the BrandZ infrastructure to deliver a solaris10 brand. This will be provided as

Re: [zones-discuss] cli zone configuration

2009-06-12 Thread Jordan Vaughan
Hi swagman, You can lump the commands into a single zonecfg execution by passing them as a single string argument in which the commands are separated by semicolons. Using your example: zonecfg -z zfoo set zonepath=/zonefs/zfoo; add net; set physical=foonic0; end Hope that helps, Jordan

Re: [zones-discuss] 2 line code review...

2009-06-15 Thread Jordan Vaughan
Edward Pilatowicz wrote: hey all, could i get a code review for this two line change: http://cr.opensolaris.org/~edp/onnv-bugs1/ 6850112 zonecfg verify should verify the native brand type thanks ed ___ zones-discuss mailing list

Re: [zones-discuss] clone -m copy works on OpenSolaris?

2009-07-21 Thread Jordan Vaughan
Hi Robinsky, The ipkg brand does not support '-m copy' because the IPS packaging system requires that zones have specific ZFS dataset hierarchies. A straight file-to-file copy without setting up the requisite datasets (which is what '-m copy' normally does) would incapacitate the new zone.

Re: [zones-discuss] Problem downloading packages within non-global zone

2009-07-28 Thread Jordan Vaughan
On 07/28/09 09:42 AM, Steffen Weiberle wrote: On 07/27/09 23:40, Jack LING wrote: dear all, I've installed mysql and glassfish packages in my OpenSolaris 2009.06 installation in VirtualBox. Then I created a non-global zone (I think it is sparse-root, by default). Within the non-global

Re: [zones-discuss] Configure a zone through sysidcfg

2009-08-14 Thread Jordan Vaughan
On 08/14/09 02:55 PM, v wrote: I created an exclusive IP zone. Now I want to configure it using sysidcfg and avoid the prompts at the initial login. I created the below sysidcfg file: timezone=US/Eastern system_locale=C terminal=xterms network_interface=vnic1 {dhcp protocol_ipv6=yes}

Re: [zones-discuss] creating zones in open solaris on x86

2009-08-20 Thread Jordan Vaughan
On 08/20/09 01:59 PM, sai prasath wrote: Hi I have installed open solaris on HP Proliant ML 370 G6.While creating zones I am getting error message for the following command. #zfs create -o canmount=noauto rpool/ROOT/S10be/zones cannot create 'rpool/ROOT/S10be/zones': parent does not exist.

Re: [zones-discuss] folding brandz into zones on os.o

2009-09-14 Thread Jordan Vaughan
On 09/14/09 01:55 PM, Edward Pilatowicz wrote: hey all, just a quick heads up. it's been on my todo list for a very long time (and i figured that i really should get it done before the xwiki migration), so i finally merged all the brandz community content into the zones community. you can see

Re: [zones-discuss] s10 brand Phase I webrev

2009-10-05 Thread Jordan Vaughan
On 10/ 1/09 05:40 AM, Jerry Jelinek wrote: Edward Pilatowicz wrote: i'm not done yet, but i've attached what i've got so far. Ed, Thanks for your comments. I'll start to work through these while we're waiting for the rest of your input and respond if there is anything we're not going to

Re: [zones-discuss] review needed for scratch zone mount fix

2009-10-19 Thread Jordan Vaughan
Hi Ed, usr/src/head/libzonecfg.h This isn't critical, but shouldn't zonecfg_default_brand() be declared somewhere other than the group of privilege-related functions? Perhaps it should go under higher-level routines. Other than that, this looks good to me. Thanks, Jordan On 10/16/09

Re: [zones-discuss] one line webrev...

2009-11-04 Thread Jordan Vaughan
On 11/ 4/09 11:53 AM, Edward Pilatowicz wrote: hey all, so with my recent zoneadm mount putback i broke the native brand on nevada. i've got a webrev with the one line fix here: http://cr.opensolaris.org/~edp/onnv-zmount2 6898056 native zones no longer boot: zone 'public': missing or invalid

Re: [zones-discuss] One a Question

2009-11-18 Thread Jordan Vaughan
On 11/18/09 11:19 AM, Christian Tovar Duran wrote: Hi I have the application RSA, but I dont know is supported in Solaris 10 containers, can you help me? Gracias y saludos Hi Christian, If RSA is supported in native Solaris 10u8+ zones, then it should work in Solaris 10 Containers as

Re: [zones-discuss] quick bug fix webrev...

2009-11-19 Thread Jordan Vaughan
On 11/19/09 09:16 PM, Edward Pilatowicz wrote: hey all, i need a review for the following bugfix: http://cr.opensolaris.org/~edp/onnv-zmount3/ 6901952 zoneadm fails with unable to determine default brand thanks ed ___ zones-discuss mailing list

Re: [zones-discuss] create New Zone error

2009-11-23 Thread Jordan Vaughan
On 11/21/09 15:26, Bryan Allen wrote: +-- | On 2009-11-21 15:25:22, Hosam Al Ali wrote: | | aho...@xx:~# zoneadm -z myzone install | /mnt/zone/myzone must not be group readable. | /mnt/zone/myzone must not be group

Re: [zones-discuss] ERROR: no active dataset. w/ migration from Indiana snv_125 to Indiana snv_127

2009-11-30 Thread Jordan Vaughan
If I remember correctly, zbe datasets' mountpoints should be set to legacy. rpool/var/zones/oracle-1/ROOT/zbe's mountpoint isn't legacy on your snv_127 system. What was rpool/var/zones/oracle-1/ROOT/zbe's mountpoint property's value on the snv_125 system prior to the zfs send operation?

Re: [zones-discuss] preferred way to image-update zones

2009-12-04 Thread Jordan Vaughan
On 12/ 4/09 02:28 PM, Anil wrote: Once a the global zone is upgraded (and rebooted with the new BE), what is the best way to update the zones? It seems like all I would need to do is: pkg -R zone path/root image-update reboot zone This seems like a hack, how would post package processing

Re: [zones-discuss] preferred way to image-update zones

2009-12-04 Thread Jordan Vaughan
On 12/ 4/09 03:02 PM, Anil wrote: Ah, thanks. I knew that was available on Solaris but not in OpenSolaris. The man page had no reference to the -u option (I take it you meant -u and not -U). I will try that out later. It probably is -u but I used -U and it worked fine. Go with -u just to

Re: [zones-discuss] solaris 10 branded zone

2009-12-07 Thread Jordan Vaughan
On 12/ 7/09 04:19 PM, xx wrote: i am following the zonecfg script at the bottom of: http://hub.opensolaris.org/bin/view/Community+Group+zones/s10brand_dev_guide however i fail to create the SUNWsolaris10 zone: init...@dogpatch:~# uname -a SunOS dogpatch 5.11 snv_128a i86pc i386 i86pc

Re: [zones-discuss] why not just bury zoneadm [-x nodataset] option ?

2009-12-08 Thread Jordan Vaughan
Hi Frank, I'd be happy with ditching -x nodataset and requiring that zonepaths be backed by ZFS datasets. Only lx-branded zones would be able to support the option but I don't know any reasons why someone wouldn't want his lx-branded zones to be backed by ZFS datasets. Is managing an

Re: [zones-discuss] Solaris10-Branded Zones Webrev: CR 6882732

2009-12-09 Thread Jordan Vaughan
On 12/ 9/09 03:04 PM, Edward Pilatowicz wrote: On Wed, Dec 09, 2009 at 02:54:05PM -0800, Jordan Vaughan wrote: I need someone to review my fix for 6882732 unpacking archive with extended file attributes reports errors The webrev is accessible via http://cr.opensolaris.org/~flippedb/onnv-s10c

Re: [zones-discuss] Solaris10-Branded Zones Webrev: CR 6882732

2009-12-09 Thread Jordan Vaughan
On 12/ 9/09 03:45 PM, Jerry Jelinek wrote: Jordan Vaughan wrote: I need someone to review my fix for 6882732 unpacking archive with extended file attributes reports errors The webrev is accessible via http://cr.opensolaris.org/~flippedb/onnv-s10c Jordan, Nice job, this looks good to me

Re: [zones-discuss] preferred way to image-update zones

2009-12-10 Thread Jordan Vaughan
On 12/ 8/09 11:50 AM, xx wrote: when updating from 126 to 128, one zone would attach: init...@dogpatch:~/.VirtualBox/HardDisks$ pfexec zoneadm -z ldap attach -U Log File: /var/tmp/ldap.attach_log.9hay7p Attaching... Global zone version: ent...@0.5.11,5.11-0.128:20091125T051747Z

Re: [zones-discuss] code review for 6495558

2009-12-11 Thread Jordan Vaughan
On 12/11/09 05:24 AM, Frank Batschulat (Home) wrote: friends, may I request code review for the earth-shattering fix to: 6495558 zoneadm -z zone boot should not only check but repair filesystems http://cr.opensolaris.org/~batschul/onnv-vplat/ backround: Evaluation when booting a zone,

[zones-discuss] Webrev for CR 6782448

2009-12-14 Thread Jordan Vaughan
I need someone to review my fix for 6782448 libzonecfg may return uninitialized memory to zoneadm and zoneadmd The webrev is temporarily accessible via http://cr.opensolaris.org/~flippedb/onnv-zone2 Thanks, Jordan ___ zones-discuss mailing list

Re: [zones-discuss] zones code review

2009-12-15 Thread Jordan Vaughan
On 12/15/09 07:39 AM, Jerry Jelinek wrote: I have an initial code review for the fix for bug: 6768950 panic[cpu1]/thread=ff084ce0b3e0: syscall_asm_amd64.s:480 lwp ff0756a8cdc0, pcb_rupdate != 0 There is a webrev at: http://cr.opensolaris.org/~gjelinek/webrev.6768950/ The code

Re: [zones-discuss] code review for 6911329

2009-12-17 Thread Jordan Vaughan
On 12/17/09 10:17 AM, Frank Batschulat (Home) wrote: May I have 2 code reviewers for: 6911329 Incorrect code in kstat_delete causes panic http://cr.opensolaris.org/~batschul/onnvkstat/ Description A colleague was looking into a crash and the reason turned out to be a NULL pointer

Re: [zones-discuss] Application leaking on local zone

2009-12-17 Thread Jordan Vaughan
As Steve said, libumem will be your best tool for this job. Is the program zone-aware? The program might behave differently (i.e., its logic is different) while running in non-global zones and the alternative code paths might be leaking memory. Jordan On 12/17/09 11:23 AM, Steve Lawrence

Re: [zones-discuss] Webrev for CR 6782448

2009-12-18 Thread Jordan Vaughan
I expanded my webrev to include my fix for 6910339 zonecfg coredumps with badly formed 'select net defrouter' I need someone to review my changes. The webrev is still accessible via http://cr.opensolaris.org/~flippedb/onnv-zone2 Thanks, Jordan ___

[zones-discuss] Webrev for CR 6909222

2009-12-21 Thread Jordan Vaughan
I need someone to review my fix for 6909222 reboot of system upgraded from 128 to build 129 generated error from an s10 zone due to boot-archive My webrev is accessible via http://cr.opensolaris.org/~flippedb/onnv-s10c Thanks, Jordan ___

Re: [zones-discuss] Webrev for CR 6782448

2009-12-21 Thread Jordan Vaughan
That's a good idea. I updated the webrev. Thanks, Jordan On 12/21/09 05:08 PM, Steve Lawrence wrote: Minor nit. You could use != POC_STRING, put the Z_NO_ENTRY in the {}, and put the success case after. Not a required change. LGTM. -Steve On Fri, Dec 18, 2009 at 07:28:52PM -0800, Jordan

Re: [zones-discuss] Webrev for CR 6909222

2009-12-21 Thread Jordan Vaughan
involve removing the fix for 6909222 (since it would essentially be obsoleting this fix.) ed On Mon, Dec 21, 2009 at 03:46:00PM -0800, Jordan Vaughan wrote: I need someone to review my fix for 6909222 reboot of system upgraded from 128 to build 129 generated error from an s10 zone due to boot

Re: [zones-discuss] Webrev for CR 6909222

2009-12-22 Thread Jordan Vaughan
will rarely occur. Thanks again for the review, Jordan On 12/22/09 07:06 AM, Frank Batschulat (Home) wrote: On Tue, 22 Dec 2009 00:46:00 +0100, Jordan Vaughan jordan.vaug...@sun.com wrote: I need someone to review my fix for 6909222 reboot of system upgraded from 128 to build 129 generated

Re: [zones-discuss] Webrev for CR 6782448

2009-12-22 Thread Jordan Vaughan
Hi Frank, Thanks for reviewing my fix. I'll respond to your questions below. On 12/22/09 05:55 AM, Frank Batschulat (Home) wrote: On Sat, 19 Dec 2009 04:28:52 +0100, Jordan Vaughan jordan.vaug...@sun.com wrote: I expanded my webrev to include my fix for 6910339 zonecfg coredumps

Re: [zones-discuss] Webrev for CR 6782448

2010-01-03 Thread Jordan Vaughan
Frank Batschulat (Home) wrote: On Wed, 23 Dec 2009 01:34:59 +0100, Jordan Vaughan jordan.vaug...@sun.com wrote: http://cr.opensolaris.org/~flippedb/onnv-zone2 [...] zone_lookup_nwif() needs the three loop checks. I regenerated the webrev. You'll notice that the assertion was replaced

Re: [zones-discuss] Webrev for CR 6909222

2010-01-04 Thread Jordan Vaughan
On 01/ 4/10 07:26 AM, Jerry Jelinek wrote: Jordan Vaughan wrote: I need someone to review my fix for 6909222 reboot of system upgraded from 128 to build 129 generated error from an s10 zone due to boot-archive My webrev is accessible via http://cr.opensolaris.org/~flippedb/onnv-s10c

Re: [zones-discuss] Webrev for CR 6909222

2010-01-04 Thread Jordan Vaughan
On 12/23/09 12:40 AM, Frank Batschulat (Home) wrote: On Tue, 22 Dec 2009 00:46:00 +0100, Jordan Vaughan jordan.vaug...@sun.com wrote: I need someone to review my fix for 6909222 reboot of system upgraded from 128 to build 129 generated error from an s10 zone due to boot-archive My webrev

Re: [zones-discuss] Webrev for CR 6909222

2010-01-04 Thread Jordan Vaughan
On 01/ 4/10 09:57 AM, Enda O'Connor wrote: Hi Jordan Not being too familiar with the underlying technology, I assume s10_boot.ksh is run every boot, as otherwise a patch can deliver create_ramdisk to the system after it's removed. Enda Correct. Thanks, Jordan

Re: [zones-discuss] Webrev for CR 6909222

2010-01-04 Thread Jordan Vaughan
On 01/ 4/10 09:54 AM, Jerry Jelinek wrote: Jordan Vaughan wrote: On 01/ 4/10 07:26 AM, Jerry Jelinek wrote: Jordan Vaughan wrote: I need someone to review my fix for 6909222 reboot of system upgraded from 128 to build 129 generated error from an s10 zone due to boot-archive My webrev

Re: [zones-discuss] Webrev for CR 6909222

2010-01-04 Thread Jordan Vaughan
On 01/ 4/10 10:25 AM, Jerry Jelinek wrote: Jordan Vaughan wrote: On 01/ 4/10 09:54 AM, Jerry Jelinek wrote: Jordan Vaughan wrote: On 01/ 4/10 07:26 AM, Jerry Jelinek wrote: Jordan Vaughan wrote: I need someone to review my fix for 6909222 reboot of system upgraded from 128 to build 129

Re: [zones-discuss] zones code review

2010-01-15 Thread Jordan Vaughan
On 01/14/10 08:18 AM, Jerry Jelinek wrote: I need a code review for my proposed fix for: 6887823 brandz on x86 should ignore %gs and simplify brand hooks There is a webrev at: http://cr.opensolaris.org/~gjelinek/webrev.6887823/ This simplifies some of the handling for the %gs register,

Re: [zones-discuss] move ZFS fs to a zone

2010-02-08 Thread Jordan Vaughan
Hi Dick, Use the dataset resource in zonecfg(1M): ---8--- root arrakis [14:20:17]# zfs list rpool/test NAME USED AVAIL REFER MOUNTPOINT rpool/test19K 190G19K /rpool/test root arrakis [14:20:18]# zoneadm list -civ ID NAME STATUS PATH

Re: [zones-discuss] OpenSolaris zone migration

2010-02-09 Thread Jordan Vaughan
On 02/ 3/10 04:11 PM, Ted Ward wrote: Hello all. I am trying to migrate a zone on OpenSolaris from one identical system to another. It's going from x86 to sparc, but even when going from x86 to x86 I get the same error. Here's the build of both systems SunOS hostname 5.11 snv_111b i86pc

Re: [zones-discuss] global vs non-global zones

2010-02-15 Thread Jordan Vaughan
On 02/15/10 01:01 PM, Dombrowski, Neil wrote: If I have a non-global zone running sendmail, and I run “ps –ef |grep sendmail” in the global zone, will I see the sendmail processes running for the non-global zone and the global zone? Thanks, Neil

Re: [zones-discuss] codereview for 6914152 (zonecfg)

2010-02-19 Thread Jordan Vaughan
On 02/19/10 10:32 AM, Frank Batschulat (Home) wrote: On Fri, 19 Feb 2010 15:39:21 +0100, Jerry Jelinekgerald.jeli...@sun.com wrote: On 02/19/10 06:53, Frank Batschulat (Home) wrote: May I request 2 code reviewers for the changes for: 6914152 zonecfg fails when less(1M) is missing

Re: [zones-discuss] renaming zonepath

2010-02-22 Thread Jordan Vaughan
On 02/21/10 08:33 AM, Anil wrote: Never mind. I will not do this rename. It's not worth the trouble. r...@vps1:~# zoneadm -z note move /zones/note Moving across file systems; copying zonepath /zones/bugs...sh[1]: cd: /zones/bugs: [No such file or directory] zoneadm: zone 'note': 'copy' failed

Re: [zones-discuss] Not all zones will start at system boot on b133

2010-03-08 Thread Jordan Vaughan
Hi Paul, I wrote the code that introduced the zcons (zone console) ioctl that's failing on your system. I'll investigate this problem as soon as possible. Does this problem occur consistently (i.e., every time you boot your system)? Does it ever happen when you manually boot a zone?

Re: [zones-discuss] Sendmail is mising from my zone.

2010-03-17 Thread Jordan Vaughan
keegam wrote: I just built a new opensolaris server. This is my first time using opensolaris. I'm mirroring a sol10 environment, so that could be where i went wrong. Here is the zonecfg info: zonecfg -z myzone info zonename: myzone zonepath: /zones/myzone brand: ipkg autoboot: true bootargs:

Re: [zones-discuss] no pkgadd in zone

2010-07-01 Thread Jordan Vaughan
Try pkg search /usr/sbin/pkgadd: ---8--- arrakis [12:39:03 0]% pkg search `whence pkgadd` [...] path file usr/sbin/pkgadd pkg:/sunwpkgc...@0.5.11-0.132 path file usr/sbin/pkgadd pkg:/package/s...@0.5.11-0.133 path file usr/sbin/pkgadd pkg:/package/s...@0.5.11-0.134

Re: [zones-discuss] v2v solaris 8-9 zone to solaris 10 zone

2010-09-20 Thread Jordan Vaughan
Hi Gael, No, there is no supported way to convert an S8- or S9-branded zone to a native Solaris 10 zone. Regards, Jordan On 09/17/10 06:27 PM, Gael wrote: Hello Now that p2v supports S10 with U9, is there some automated easier way to convert existing solaris 8/9 branded zones into native

Re: [zones-discuss] Assigning Qlogic HBA to Virtual domain in LDOMS

2010-09-27 Thread Jordan Vaughan
Try the ldoms-discuss mailing list. Jordan On 09/27/10 11:13 AM, Sanjay Akula wrote: Hi, Need help, How can I assign Qlogic HBA's to virtual domain in Ldoms? Thanks, -- Regards, SysAdmin ___ zones-discuss mailing list

Re: [zones-discuss] Possible to use zones for hardening? Security?

2010-09-29 Thread Jordan Vaughan
Is there a way to disable all remote connections to the GZ? In other words, couldn't you use a firewall to reject connections on all ports to the GZ? That would effectively deny remote access to the GZ without having to disable any network interfaces. Of course, disabling the GZ's

Re: [zones-discuss] Zones zone.max-shm-memory setting.

2010-11-29 Thread Jordan Vaughan
Locked memory is the same as pinned memory: In other words, pages that won't be paged to disk. Applications can request that pages be locked into memory. The pager won't page locked pages to disk. Regarding an appropriate value for desktop usage: It depends on what kinds of applications