I highly recommend that you use version 1.8.1 instead of 1.8 as
it includes many bug fixes that are not in 1.8.  Having said that,
mounting a configuration file used by the global zone into a
non-global zone can be a security risk.  I wouldn't recommend it.

Here is a example to illustrate how you could readonly mount a file 
via lofs from a global zone into a non-global zone during zone 
creation through the zone manager with the -r flag.

# z=`uname -n`
# cp /etc/hosts /etc/${z}
# zonemgr -F -a add -n z1 -z /zones -P pw -r "/etc/${z}|/etc/global"
# cksum /etc/hosts
2265366463      1183    /etc/hosts
# zlogin z1 "cksum /etc/global"
2265366463      1183    /etc/global
# zonemgr-a info -n z1
Zone information for zone z1
zonename: z1
zonepath: /zones/z1
brand: native
autoboot: true
ip-type: shared
        dir: /lib
        dir: /platform
        dir: /sbin
        dir: /usr
        dir: /etc/global
        special: /etc/globalhostname
        raw not specified
        type: lofs
        options: [ro,nodevices]
        name: comment
        type: string
        value: "Zone z1"

Hope that helps!

Just as an FYI... the next version of the zonemgr which I hope 
to complete soon has a new unified mounting syntax that works
for all the main supported filesystems available today.  It is
still in alpha so I haven't yet posted on the site. If you are
interested in trying it out, send me a separate e-mail and I
will gladly send you a copy.


On Tue, 2007-11-20 at 14:29 +0100, Konstantin Gremliza wrote:
> Hi there,
> I have a question regarding zonemgr.
> We would like to use lofs to mount (ro) a file /etc/GLOBAL into the
> zones. It should contain the name of the global zone so anyone can
> easily find out, what system he is really on.
> Zonemgr 1.8 only supports directories for readonly lofs mounts: option
> -r
> Can it be changed to support files ?
> Thanks and regards,
> Konstantin
> _______________________________________________
> zones-discuss mailing list
> zones-discuss@opensolaris.org
      _/_/_/  _/    _/  _/     _/   Brad Diggs
     _/      _/    _/  _/_/   _/    Communications Area Market
    _/_/_/  _/    _/  _/  _/ _/     Senior Directory Architect
       _/  _/    _/  _/   _/_/
  _/_/_/   _/_/_/   _/     _/       Office:  972-992-0002
                                    E-Mail:  [EMAIL PROTECTED]
 M  I  C  R  O  S  Y  S  T  E  M  S

zones-discuss mailing list

Reply via email to