[zones-discuss] Using ZFS dataset...

2006-07-16 Thread Wee Yeh Tan
I encounter a pretty perplexing issue with using ZFS dataset in zones on S10u2 on a Sun x4100. I set up my zone in a zfs filesystem (say pool/solarisC) and inherit the dataset pool/solarisC/dataset. The zone occassionally gives me: [EMAIL PROTECTED]:~# zfs create pool/solarisC/dataset [EMAIL PR

Re: [zones-discuss] Using ZFS dataset...

2006-07-18 Thread Wee Yeh Tan
On 7/18/06, Jerry Jelinek <[EMAIL PROTECTED]> wrote: I am not sure what the complete sequence of commands is that you have run to cause this problem. However, the basic issue is that the mountpoint property cannot be inherited when you have zfs datasets that are configured for use in a zone. Yo

Re: [zones-discuss] Re: Proposal: Zone Boot Arguments II

2006-07-23 Thread Wee Yeh Tan
On 7/23/06, Manish Agrawal <[EMAIL PROTECTED]> wrote: Is there a timeframe when it will be possible to specify boot parameters in the zone configuration. I plan to use zones in a classroom environment and would like to script the process of destroying existing zones and recreating them at the

Re: [zones-discuss] ps -ef as non-root in global zone shows *all* processes

2006-09-07 Thread Wee Yeh Tan
On 9/7/06, Dick Davies <[EMAIL PROTECTED]> wrote: I could have sworn a 'ps -ef' (as a non-privileged user) in the global zone only showed processes in the global zone. As of b46, that's no longer the case. Is the change intentional? I'm quite sure I've never seen that but I'm still at b38. Wh

Re: [zones-discuss] Cost to Manage Solaris Containers vs. Just Global Zone?

2006-09-21 Thread Wee Yeh Tan
Mark, Here's what my organisation did with zones. We basically gave administrative privileges to the respective groups to manage their own zones. This turns out a lot cleaner since there is less overlap of responsibility and really improved turnaroud time launching new services. So the groups

Re: [zones-discuss] Bug, bad idea, or both?

2006-11-18 Thread Wee Yeh Tan
On 11/17/06, Andy Rumer <[EMAIL PROTECTED]> wrote: We have developers who need access to application log and configuration data, where the application is running in a zone. The actual request is usually for a "Read-Only Unix Account". We had, until recently been able to push them off due to S

Re: [zones-discuss] How to get global zone information from non-global zone

2006-11-25 Thread Wee Yeh Tan
Hi Mike, Can you share why you want the NGZ to know about the GZ? The reason I ask is that we are already doing zones but we will be scaling up the effort quite tremendously and I want to get my bases covered. I currently use our network operations centre software to track which zone is which b

Re: [zones-discuss] How to get global zone information from non-global zone

2006-11-29 Thread Wee Yeh Tan
. -- Just me, Wire ... On 11/26/06, Mike Gerdts <[EMAIL PROTECTED]> wrote: On 11/25/06, Wee Yeh Tan <[EMAIL PROTECTED]> wrote: > Hi Mike, > > Can you share why you want the NGZ to know about the GZ? There is little technical reason that most people will need to k

Re: [zones-discuss] SSH disconnections during zone creation

2007-01-29 Thread Wee Yeh Tan
Manish, I have not used zonemgr but I am quite sure this is not due to zonemgr specifically. If you are accessing the global zone through a firewall, it is possible that the firewall is dropping your connection due to inactivity. You can try to play around with 'ClientAliveInterval' and 'Client

Re: [zones-discuss] Several zonepaths on a single slice

2007-02-06 Thread Wee Yeh Tan
On 2/7/07, Paul Davis <[EMAIL PROTECTED]> wrote: I have a proposed config on T2000 that will use the HW RAID to mirror the internal disks. So with a limited number of physical slices on the internal disks, we are looking at having several zones sharing a single partition for their zonepaths, like

Re: [zones-discuss] Re: Zone start order

2007-03-08 Thread Wee Yeh Tan
On 3/8/07, James Carlson <[EMAIL PROTECTED]> wrote: I also don't think that having another abstraction is right, however I don't think the FMRI approach is right either. If these zones were independent nodes on a network, we would never be having this conversation. Instead, you'd be told to do

Re: [zones-discuss] Re: Zone start order

2007-03-08 Thread Wee Yeh Tan
On 3/9/07, Wee Yeh Tan <[EMAIL PROTECTED]> wrote: On 3/8/07, James Carlson <[EMAIL PROTECTED]> wrote: > I also don't think that having another abstraction is right, however I > don't think the FMRI approach is right either. > > If these zones were independent

Re: [zones-discuss] non-global zone sees /usr/local/bin

2007-03-29 Thread Wee Yeh Tan
On 3/30/07, David <[EMAIL PROTECTED]> wrote: Sorry for the newbie question, I'm trying to understand and get up to speed with zones, they seem like excellant thiings I created a non-global zone, it is able to see /usr/local/* from the global zone. The first problem i, I was attempting to in

Re: [zones-discuss] Re: non-global zone sees /usr/local/bin

2007-03-29 Thread Wee Yeh Tan
On 3/30/07, David <[EMAIL PROTECTED]> wrote: thank you for the good responses. Since i know that there are many I can approach this, I believe for know, for the sake of learning etc.. I believe what I want to accomplish is a seperate /usr/local/ and add necessary apps/binaries as needed. one

Re: [zones-discuss] What is the proper procedure to patch zones?

2007-03-29 Thread Wee Yeh Tan
On 3/30/07, Jill Manfield <[EMAIL PROTECTED]> wrote: 5) Boot the non-global zones # zoneadm -z zone boot Boot all zones manually so global accessible prior to patch application This is critical for reducing downtime. smpatch or similar should recognise that

Re: [zones-discuss] Local zone to global zone interaction

2007-04-24 Thread Wee Yeh Tan
AFAIK, no. Ideas previously thrown up includes having the global zone place this information in the local zone's filesystem. E.g. # zoneadm -z boot # echo Global Zone: `hostname` since `date` > `zonecfg -z phd-corner-z info zonepath | cut -f2 -d' '`/root/etc/globalzone_info -- Just me, Wire .

Re: [zones-discuss] Local zone to global zone interaction

2007-04-25 Thread Wee Yeh Tan
On 4/25/07, James Carlson <[EMAIL PROTECTED]> wrote: I would not recommend modifying the file system from the global zone. This provides a way for a malicious zone administrator to trash the global zone -- for example, by changing that file to be a symlink to /kernel/genunix. Instead, enter the

Re: [zones-discuss] updating a zone when attaching

2007-06-04 Thread Wee Yeh Tan
On 6/5/07, Mike Gerdts <[EMAIL PROTECTED]> wrote: With hundreds of zones in production today, it is feeling like later is already here. Worst case patching is well over 24 hours in single user mode. (I have developed my own workarounds to make each zone only add about 10 minutes to total outage

Re: [zones-discuss] Multiple zones and shared ZFS filesystems?

2007-06-13 Thread Wee Yeh Tan
On 6/12/07, Jerry Jelinek <[EMAIL PROTECTED]> wrote: Peter Eriksson wrote: > Let's take a not-so-hypothetical situation: > > A thumper. Serving files via NFS and SMB (samba). > > Let's assume I want to run the Samba processes inside zones > (multiple zones, also, serving different network domains

Re: [zones-discuss] zone backup recommendations

2007-07-26 Thread Wee Yeh Tan
On 7/25/07, Jason Burks <[EMAIL PROTECTED]> wrote: > What is the recommend way of backing up a system with zones. Do you > just backup the global zone, which would pick up the local zones. Or, do > you back up the global zone and each local zone like they were separate > servers? I'm not sure ab

Re: [zones-discuss] Zones on Netra T1

2007-08-14 Thread Wee Yeh Tan
Certainly. We ran >100 zone on a T2 on a single NIC. :). On 8/14/07, Neal Miskin <[EMAIL PROTECTED]> wrote: > Hi All > > I have a Netra T1 with 2 onboard NIC's. I would like to install Solaris 10 > and build two zones, one as a ftp server and one as a scp server. Is this > possible or do I need

Re: [zones-discuss] Zone Hang Problems accessing /proc filesystem

2007-09-12 Thread Wee Yeh Tan
On 9/13/07, Randall R. Schumm <[EMAIL PROTECTED]> wrote: > I'm having an issue similar to one documented in January > (http://mail.opensolaris.org/pipermail/zones-discuss/2007-January/006032.html > ). When a command tries to access a file in the /proc directory of a non > global zone it hangs, and