Hi David :

i) Can an NFS share be either mounted directly into a zone relative to the global root or lofs mounted relative to the global root?

I'm not sure on what you're asking specifically.

The global zone can export its own file systems to a non-global zone
via lofs(7FS) (including those it exports to other systems via NFS).

The non-global zone cannot export its own file systems via NFS to its
own non-global zones (due to a deadlock between the VM system and
Here I'm talking about NAS device on the network, separate from the global zone. Basically what I'm trying to achieve is a mechanism whereby I can administer all NFS mounted filesystems into zones from the global zone.

ii) Can an NFS share be lofs mounted via 'zoneadm add fs' into a zone?

If you mean a global zone's own file system, then yes, a "fs" resource
specifying a loopback mount works fine.

However, if you're asking if the global zone can export via lofs
something it's has already mounted from some *other* system, then the
answer is no - the zone itself must do the NFS mount itself.
Yep, this is what I was asking.. So, conversely, would the global zone be able to see NFS filesystems that are mounted from within zones?

iii) If both are possible, what are the merits of each?

Can you explain what you're trying to do and what the particulars are
of the file systems.  That might make it clearer who is trying to
mount/import/export whose file systems. ;)
As above, a method whereby I can centrally admin all filesystems from the global zone.

The reason for the question is that I cannot administer NFS filesystems from the global zone that have been mounted from within a zone using either /etc/vfstab or mount (although the new zone admin guide on docs.sun.com suggests that no other administration should take place from the global zone apart from zone backups)....

Could you point out which section suggests that?  We can improve the
wording to make it clear that NFS (and other) administration in the
global zone is a perfectly good thing to do.
Sure - PDF on docs.sun.com System Administration Guide : Solaris Containers - Resource Management and Solaris Zones - June 2006 (Beta) P.314, 1st sentence of 1st paragraph under 'Restriction on Accessing A Non-Global Zone From the Global Zone' states 'After a non-global zone is installed, the zone must never be accessed directly from the global zone by any commands other than system backup utilities'

By being unable to administer NFS file systems from the global zone,
can you provide some details?

In my example, I've mounted various filesystems from a NAS fileserver from within a non-global zone. If I then try to access the files on that mount from the global zone, I cannot see any of the files. 'mount' from the global zone confirms the filesystems are mounted into the non-global zones... Is this an affect of NFS? I guess this could be a moot point given that I could mount the filesystems into the global zone and administer from there....

Simon Redmill
Datacentre Architect
Sun Microsystems, Inc.
55 King William Street
London EC4R 9AD
Phone x78231 / +44 207 929 8231
Mobile +44 7711 025 797
Fax +44 207 256 3310

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

zones-discuss mailing list

Reply via email to