Here's YACUZ (Yet Another Creative Use of Zones):

Doug Scott documented a method of building a zone which will never be patched from the global zone. In other words, when a patch is applied to the global zone, it will not be applied to a zone built using this method, even if the patch is for a package which is marked "ALLZONES=true."

Note that this method would not be supported by Sun for the following reasons:
1) It uses functionality which is not yet supported by Sun (Branded Zones).
2) It requires you to edit system files which you shouldn't edit; the syntax of those files can change. 3) Eventually, a patch will modify the kernel and libc (or other kernel-dependent libs) in such a way that they will be incompatible with the 'cbe' brand. At that point the zone may no longer work until the 'cbe' brand is modified.

However, if those doesn't bother you, or if you want to learn more about how zones *really* work, take a look:

http://www.opensolaris.org/os/project/xfce/building_xfce/brandzbuild/


--------------------------------------------------------------------------
Jeff VICTOR              Sun Microsystems            jeff.victor @ sun.com
OS Ambassador            Sr. Technical Specialist
Solaris 10 Zones FAQ:    http://www.opensolaris.org/os/community/zones/faq
--------------------------------------------------------------------------
_______________________________________________
zones-discuss mailing list
zones-discuss@opensolaris.org

Reply via email to