>>After creating and cloning the zones (we have 33 of them), the booting of the >>zones will bring our machine to its knees as it attempts to configure >>about 118 services in each zone. Further, with each zone, its >> svc.configd >>runs at about 5~6% of the CPU, which seems like a lot when all the zones >>are running at once. >> >>I'd like to see something that will clone each zone and initialize it in >> a >>few minutes with extreme minimal services rather than the full suite that >>it does now. Is there a way to place a specific xml file under the >>/var/svc directory somewhere that will configure a very limited set of >>services in the zone prior to that initial boot (sort of like what can be >>done with /etc/sysidcfg) so that the first initialization doesn't take >> too >>long? >> >> > When you create your initial zone, you should Initialize it with the > menu item and > then bring up a Zone Console, and Start (boot) the zone. Login using > the console and use > > > svcadm disable > > to turn off sendmail, snmpx, dtlogin, etc. >
I found the culprit to be the "cde-login" service running in each zone and attempting (by default) to run X servers with non-existent frame buffers. The processes were starting and stopping too quickly to be recognized except by DTrace, who pointed to the culprit. I wasn't sure of how much of the cde-login needed to be running for the multi-level desktop to allow logging into the zones. After disabling that service in the labeled zones, I have seen no impact to the running system (aside from the freeing of processing). I've also noticed that auditd runs by default in both the global and local zones, and that they conflict (you can't run both). I have turned off auditd in the local zones and defer to the one running at the global level. Thanks for all your help! -- Michael Lewis -- Jackpine Technologies Corporation 1380 Corporate Center Curve, Suite 108, Eagan, MN 55121 (651)209-6042 -- mdl at JackpineTech.com
