Install R2 on Solaris 10 local Zone

Need to have this set up in 2 - 3 months, I will be appriciate if someone can give me some tips and/or links for the do's and don'ts for this process.
Thank you in advance.
Sun.

All the info you need should be in the Install Guide for Solaris.

Similar Messages

Setting a floating IP in a solaris local zone!!

I want to install my fault tolerant application in two different
solaris local zones just to save the hardware cost and for testing
purposes.
Earlier before solaris 10, My application runs on two different
machines and receives the incoming requests on a floating IP, thus it
achieves the Fault tolerant behavior with floating IP moving across
the machines on the active application.
There was a separate monitoring process on each machine which runs as
root user and sets and unsets the floating IP using ioctl system calls
on a particular machine as per request received from the application.
Now i want to replicate the same behaviour in solaris 10 setup with my
Fault tolerant application running on two local zones and my
monitoring process which runs on each local zone, set and unset the
floating IP on the particular local zone.
No i want to know that if it is possible for any application to set
floating IP on a particular local zone, from that zone itself and how
can we achieve the same?
regards,
rish

<div class="jive-quote">
<span class="jive-quote-header">MichaelMyers wrote:</span>
I gather some big changes are afoot with the IP stack and zones with the latest Solaris update (the 8/07, update 4 release) -- each zone either does or can have it's own IP stack. This may change the answer to this question...those who's been playing with Open Solaris and/or Solaris Express probably can answer more about that.
</div>
That's correct. You can now use private IP instances for a non-global zone if you want. That zone will now have it's own IP stack and can up/down addresses or whatever. But for now they have to have their own dedicated "interface". This has to be an ethernet device or a VLAN device.
<div class="jive-quote">
<span class="jive-quote-header">
On an unrelated note: the new forum editor apparently doesn't have a way to insert "code" type examples (eg. pre-formatted, in courier, etc.)...
</span>
</div>
Yup. Even in the old editor it was inconsistent where worked. Some forums it would, but not all. I guess now it consistently doesn't work? :-)<br />
<br />
-- <br />
Darren<br />

Veritas Netbackup Client Installed on Solaris 10 Zone Unable to Work

Hi
I am having problems with Veritas Netbackup client which had been installed on a Solaris 10 zone only. We are using Veritas Netbackup server which is installed on a Windows 2000 server and the NBU server is unable to add the new client for backup.
The way I installed the NBU client was using the manual method where I installed directly on the zone. The zone I've created is a full root zone and the installation seems to be successful.
Somehow the NBU server just can't see the new client. Do I need to install the client in the global zone to make it work? Is there any checks I can do to make sure I have installed the client correctly and that the services are running in the solaris 10 zone side? Any kind of help would be much appreciated.
Thanks
Xavier

Hi mcbrune1
I've check on the services in the client and all 4 services were up and running. Than I realized that this client was hardened a few weeks back. So I checked on the /etc/hosts.allow file and added an entry to allow the Master server to communicate using bpcd.
Now the Master server is able to see the client and everything seems to be working. Thanks for your help.
Cheers

Can't install 121118-12 on global zone

Hi, after our first round of patching, we're starting again. So, I've had to upgrade my external LPS to latest patches to get it to work at all. It is now on 119788-09 and 121118-12. The patchsvr has been reconfigured to point to getupdates1.sun.com without the trailing "solaris/".
So, I then tried to get my internal LPS working...proxy isn't running. smpatch pointed to the external (DMZ) LPS without a trailing "solaris/". Has patch revisions 119788-07 and 121118-08. Note, when I use the trailing "solaris/" then I get the "no patches" message. Without that, I now get a list of 40 patches (tho' I'm expecting about 190-odd as my external LPS is at the same patch levels otherwise and smpatch which points direct to Sun comes back with 196 patches).
Just to confirm, my current.zip (/var/sadm/spool/cache/Database/http....***...current.zip) gives me a patchlist.delimited file that is 9419 lines long. That seems about right.
So I thought - gosh! I really hope that this isn't going to be a 2-step patch process (currently running kernel rev 118833-24 and have seen a few warnings about going up to the mid-30s) so maybe I have to install the latest UC client patch for this to see that it needs more patches.
But trying to run "smpatch add -i 121118-12" barfs and finishes with the following message;
Patch 121118-12 failed to install due to a failure produced by pkgadd.
WARNING: patchadd returned <5> for global zone
pkgadd: ERROR: The package <SUNWppror> is currently installed on the system in the
global zone. To install the new instance of this package in the global
zone only, you must specify the -G option. To install the new instance
of this package in all zones you must first remove the existing instance
of this package from the global zone first (via pkgrm) and then install
the new instance of this package in all zones.
pkgadd: ERROR: package <SUNWppror> cannot be installed on this system/zoneSo, dutifully, I go to run (after unzip'ing my jar file); "patchadd -G 121118-12". The first time it says much like below, but to check the log file which says the bit above. Any subsequent attempts give up on telling you to look at the logfile because you should've already and just tell you this;
# patchadd -G 121118-12
Validating patches...
Loading patches installed on the system...
Done!
Loading patches requested to install.
Done!
Checking patches that you specified for installation.
Done!
Global patches.
0 Patch 121118-12 is for global zone only - cannot be installed on non-global zone.
No patches to install.Funnily enough, I am running on my global zone, but patchadd and smpatch just can't seem to tell. Has there been a major update to patchadd that I've missed or is there some other reason that I can't install this patch? Do I really need to remove it all before patching again? If so, how is that affected by 119788 which also patches SUNWppror?
Thanks for any help,
Sally.

Yes, there are relevant packages in that file;
server # grep SUNW gz*
# Last modified by <pkgadd> to <add> package <SUNWpkgcmdsu>
SUNWapch2d
SUNWapch2r
SUNWapch2u
SUNWexplo
SUNWexplu
SUNWexted
SUNWnbcpp
SUNWnbide
SUNWpkgcmdsu
SUNWppror
SUNWpprou
SUNWpsvrr
SUNWpsvru
SUNWsneep
server # Does this file get updated whenever patchadd/pkgadd -G is used? If so, I would've only installed the update connection proxy server patches on the global zone alone as it is not supported within local zones and I would've seen no reason to install it on a local zone (waste of time).
Also, when I was testing applying patches on zones, I would've run "patchadd -G" for some patches to see what the difference is, but I wouldn't have suspected that this would change the action of the patch forever more.
Or have these packages gotten in there another way.
Within one of my local zones, there are no SUNW packages in the /var/sadm/install/gz-only-packages file and yet the zone cannot remove the patch;
myzone # patchrm 121118-12
Validating patches...
Loading patches installed on the system...
Done!
Checking patches that you specified for removal.
Done!
Global patches.
0 Patch 121118-12 is for global zone only - cannot be removed on non-global zone.
No patches to remove.
myzone #but I guess that is because it is checking on the global zone at that stage. On that point, does a local zone know the name of the server its global zone is on? Can this be determined without being on the global zone?
Thanks,
Sally.

Unclear on branded solaris 9 zones and ipfilter

I just managed to install my first solaris 9 zone on a solaris 10 system (v490). It has gone fairly well so far but I
am definitely "unclear on the concept" with respect to ipfilter and the zone. This is a shared ip zone.
On solaris 9 we use ipfilter 3.4.32.
I used a flar from one of these systems to install the zone. On boot, I see that our ipfboot file in /etc/rc2.d fails with
modload failures etc
You must be superuser to load a module
open device: No such file or directory
open device: No such file or directory
constructing minimal name resolution rules...
open device: No such file or directory
open device: No such file or directory
open device: No such file or directory
open device: No such file or directory
/etc/rc2.d/S65ipfboot: load of /etc/opt/ipf/ipf.conf into alternate set failed
Not switching config due to load error.
/dev/ipf: open: No such file or directory
This makes sense but as I said what do I do instead. I found this in the solaris container system admin manual
"Solaris IP Filter can be enabled in non-global zones by turning on loopback filtering as described in Chapter 26, Solaris IP Filter (Tasks), in System Administration Guide: IP Services. "
Yes, but that doesn't help me much since the IP Filter tasks simply tell me to do this in ipf.conf in the global zone.
set intercept_loopback true;
Isn't there more to it than this? A real example some place would be most helpful. And how can I make sure it is working?
Not a real ipf guru :-(

First thing to check is if your zone can access the global zone (try pinging). If this isn't the case you probably need to setup a routing entry allowing the non-global zone some access.
For example, say the global is 10.0.0.1 and the non-global 192.168.0.1 on eri0 you'd use something like:
route add 10.0.0.1 192.168.0.1 -iface
This tells your non-global zone that it can reach the global zone through the eri0 interface. Ofcourse you can also expand this to networks and such.
Another very important factor to keep in mind when dealing with internet is trying to access it from the non-global zone (as a test). Your ipnat.conf entry should be enough, my guess for to the reason for not routing the data is a non-static arp entry of your internet gateway. Now, this is a mere guess but if you have a default route in your routing table setup for Internet access (netstat -rn) make sure that the host to which the default route is pointing also has a static arp entry (man arp). If this is indeed the case you may also need to setup a routing entry as mentioned above to allow your zone access to this remote gateway.
After that things should work as usual. Hope this helps.

Install NetConnect in Global Zone of Solaris 10 x86 with 5 local zone fail

Problem:
Install NetConnect in Global Zone of Solaris 10 x86 with 5 local zone failed
But I didn't have any issue with the same pkg in Solaris 9
Steps taken:
# groupadd netcon
# useradd -d /export/home/netcon -g netcon -m netcon
# vi /etc/shadow
change LK to NP
# ./UninstallNetConnect.003.002.001.sh
# ./InstallNetConnect.003.002.001.sh
Enter the user account to use: netcon
Enter group: netcon
Installing Sun(SM) Net Connect Proxy Core as <SUNWsrspx>
## Installing part 1 of 1.
/etc/opt/SUNWsrspx/CustomerCert.pem
/etc/opt/SUNWsrspx/SRSCACert.pem
/etc/opt/SUNWsrspx/binaries
/etc/opt/SUNWsrspx/srsproxyconfig.cfg
/opt/SUNWsrspx/bin/srsexec
/opt/SUNWsrspx/bin/srsinstall
/opt/SUNWsrspx/bin/srsinstallmode
/opt/SUNWsrspx/bin/srsproxy
/opt/SUNWsrspx/bin/srspxrun
/opt/SUNWsrspx/bin/srspxstat
/opt/SUNWsrspx/bin/srspxtrace
/opt/SUNWsrspx/bin/srsuser
/opt/SUNWsrspx/bin/srsxfer
/opt/SUNWsrspx/lib/srsimapi.jar
/usr/lib/libsrsimapi.so.1
[ verifying class <none> ]
## Executing postinstall script.
copying initial install customer cert into place
copying initial install srs cert into place
copying initial install proxy config file into place
removing any existing uninstallscript before copying the correct one
copying uninstall script into place
/var/sadm/pkg/SUNWsrspx/install/postinstall: /opt/SUNWsrspx/bin/srspxrun: cannot execute
proxy queue initialization failed
pkgadd: ERROR: postinstall script did not complete successfully
Installation of <SUNWsrspx> failed.
ERROR: pkgadd failed for: SUNWsrspx
Please correct this situation and rerun the installation.
Exiting installation.
# cat /var/adm/messages
Oct 7 00:00:01 planet root: [ID 702911 daemon.error] ERROR: proxy queue initialization failed
Any clue, or it will only possible in Global zone that didn't have any local zone
thanks in advance

Problem:
Install NetConnect in Global Zone of Solaris 10 x86
with 5 local zone failed
But I didn't have any issue with the same pkg in
Solaris 9
Steps taken:
# groupadd netcon
# useradd -d /export/home/netcon -g netcon -m netcon
# vi /etc/shadow
change LK to NP
# ./UninstallNetConnect.003.002.001.sh
# ./InstallNetConnect.003.002.001.sh
Enter the user account to use: netcon
Enter group: netcon
Installing Sun(SM) Net Connect Proxy Core as
<SUNWsrspx>
## Installing part 1 of 1.
/etc/opt/SUNWsrspx/CustomerCert.pem
/etc/opt/SUNWsrspx/SRSCACert.pem
/etc/opt/SUNWsrspx/binaries
/etc/opt/SUNWsrspx/srsproxyconfig.cfg
/opt/SUNWsrspx/bin/srsexec
/opt/SUNWsrspx/bin/srsinstall
/opt/SUNWsrspx/bin/srsinstallmode
/opt/SUNWsrspx/bin/srsproxy
/opt/SUNWsrspx/bin/srspxrun
/opt/SUNWsrspx/bin/srspxstat
/opt/SUNWsrspx/bin/srspxtrace
/opt/SUNWsrspx/bin/srsuser
/opt/SUNWsrspx/bin/srsxfer
/opt/SUNWsrspx/lib/srsimapi.jar
/usr/lib/libsrsimapi.so.1
[ verifying class <none> ]
## Executing postinstall script.
copying initial install customer cert into place
copying initial install srs cert into place
copying initial install proxy config file into place
removing any existing uninstallscript before copying
the correct one
copying uninstall script into place
/var/sadm/pkg/SUNWsrspx/install/postinstall:
/opt/SUNWsrspx/bin/srspxrun: cannot execute
proxy queue initialization failed
pkgadd: ERROR: postinstall script did not complete
successfully
Installation of <SUNWsrspx> failed.
ERROR: pkgadd failed for: SUNWsrspx
Please correct this situation and rerun the
installation.
Exiting installation.
# cat /var/adm/messages
Oct 7 00:00:01 planet root: [ID 702911 daemon.error]
ERROR: proxy queue initialization failed
Any clue, or it will only possible in Global zone
that didn't have any local zone
thanks in advance
[I believe that it does not work in x86, watches with pkginfo - l SUNWsrspx, in the platform.
Willy Suarez
Sopport UNIX
Colombia/code]

Solaris 10 local zone setup requirement/steps for am/ps 7.0 installation

Hi,
Is there any document available on solaris 10 local zone creation/requirement for am server/ portal server 7.0 install? Any help/pointer is appreciated.
Thanks,

I don't believe there is any specific documentation am/portal in a zone. And as far as I know there are no specific requirements either. I have successfully installed portal in a solaris zone.
A good starter tutorial on zones is here: http://partneradvantage.sun.com/protected/solaris10/adoptionkit/tech/zones/tutorial.html
Hi,
Is there any document available on solaris 10 local
zone creation/requirement for am server/ portal
server 7.0 install? Any help/pointer is
appreciated.
Thanks,

Solaris 10, local zone & vcs

Hi,
Anybody tried running vcs from within a solaris 10 sparse local zone?
We currently have two T2000' s each running Solaris 10 6/06. I've installed Veritas Foundation Suite 4.1 on each and configured vcs. The cluster is functioning with failover enabled & tested. (I have a test service group running consisting of a 'hello world' program sitting on a VRTS volume/diskgroup on a SAN). This is all running fine in the Global Zone.
As part of our requirement we want to be able to run vcs from within a local zone, hence my creation of a sparse zone. I would like full clustering functionality running from within a zone on one server with failover/switching to an equvialent zone on the the second server.
I have played with the 'zone' option when setting up service groups but not surprisingly this is for switching the whole zone. Not what I want to do.
Am I failing to grasp this whole sparse zone idea? or am I missing something obvious, trying something that cant be done? Any help, particularly from somebody else thats tried this would be appreciated.
Thansk in advance,
Mark

Hello,
I can't help you a lot, but i have found that there is a lot of things that a local zone can't do when it comes to "kernel" things. As of today i found that you do NFS from a zone, for example.
As your problem seems to be related to filesystem it is probable that you can't do it from a zone. Again, i'm not sure.

Sun Live Upgrade with local zones Solaris 10

I have M800 server running global root (/) fs on local disk and running 6 local zones on another local disk. I am running solaris 5.10 8/07.
I used live upgrade to patch the system and created new BE (lucreate). Both root fs are mirror as RAID-1.
When I ran lucreate, it copies all 6 local zones root fs to the global root fs and failed no enogh space.
What is the best procedure to use lu with local zones.
Note: I used lu with global zone only, and worked without any problem.
regards,

I have been trying to use luupgrade for Solaris10 on Sparc, 05/09 -> 10/09.
lucreate is successful, but luactivate directs me to install 'the rest of the packages' in order to make the BE stable enough to activate. I try to find the packages indicated , but find only "virtual packages" which contain only pkgmap.
I installed upgrade 6 on a spare disk to make sure my u7 installation was not defective, but got similar results.
I got beyond luactivate on x86 a while ago, but had other snags which I left unattended.

Unable to install .p5p package in global zones in Solaris 11

Hello All,
I have few zones configured on my Solaris 11 node which are up and running. I have a package in a .p5p archive package which i need to install in my global zone as well as the non-global zones. I dont want to use a network based repository for the installation.
When i try to install the package it gives me the below error
"pkg install: The proposed operation on this parent image can not be performed because
temporary origins were specified and this image has children. Please either
retry the operation again without specifying any temporary origins, or if
packages from additional origins are required, please configure those origins
persistently."
1. How to install a .p5p package without a network based repository ?
2. Is it possible to install packages from the global zone to non-global zones without having to log on to each of the zones ?
TIA,
Sudhir

Package can be installed from global zone to local zone. When you issue pkgadd command from global zone it will distribute the package to local zones.Solaris 11 packaging does not use pkgadd(1M), it uses pkg(1M), described in more detail in pkg(5). Unlike in Solaris 10, the global zone and each non-global zone can have a disjoint set of packages. Thus, it is possible to minimize the global zone but have a zone that has most of Solaris installed. To allow this, pkg does not cause packages that are installed in the global zone to be automatically installed in non-global zones. For most use cases, this is a big improvement over the way things worked in Solaris 10.
Note that pkgadd(1M) is still available in Solaris 11 to allow you to install legacy svr4 packages. Even when using pkgadd on Solaris 11, it does not cross zone boundaries.

Can EM12c Cloud Control agent be installed in a solaris zone?

Can EM12c Cloud Control agent be installed in a solaris zone?
If so, are Solaris 8 and Solaris 9 zones supported?
thanks

Yes we can...
Solaris 9 is supported...I have installed agents on solaris 9 and 10

Solaris 10, java, local zone and priority

Hi,
I have asked this on the Solaris 10/Zone forum 4 days ago but didn't
get any response. Maybe I get better luck here?
I have a jboss container running like a dog. It's running on a niceness
of 10 (by default - why?); renice fails with
$ renice -n 0 1635
renice: 1635:setpriority: Not owner
How do I fix that, and how can I get jboss to run with a niceness of
0 or 1 at startup?
I did manage to up the niceness manually from the global zone, but that's
not really an option once the system goes production. How/where do
I set java tasks to run with a sensible priority by default?
It appears that anything java (even within the global zone) runs on a
niceness of 20 (10 is what we see inside a local zone, the global will
report 20 in prstat).
Cheers

I removed this file,/usr/lib/libmlib/libmlib_sse.so.2, but I can't still use java desktop...
is there any other solution?

Install SMC Server 3.6 in Sol 10 local zone?

Dear all,
Is it possible to install and running SMC Server 3.6 in local zone with whole root (not sparse) steup?
thanks

Is it possible to install and running SMC Server 3.6
in local zone with whole root (not sparse) steup?Right now the only part of SunMC that can run in a zone is the SunMC Agent. The Server can only be installed into the global zone. But it's a pretty good bet that you'll be able to do it with a future version of SunMC.
Regards,
[email protected]

Local zones during global shutdown in Solaris 10

Hello,
I am trying to determine if issuing a shutdown command from the global zone, e.g. shutdown -g0 -i5 -y performs graceful shutdowns on any running local zones, or does it issue a halt to the local zones without running shutdown scripts in them. Searching the Solaris zones forum brings up some older discussions (pre 2010) where users reported a halt was done, but the expectation is this would be changed in later Solaris 10 patches or revisions. Has this ever been addressed? Is there a way to determine if a local zone has been halted or shutdown? What is the recommended way to perform a shutdown of a global zone, when local zones are running?
Thanks,

The global zone will run a "svcadm disable zones" for each zones and this corresponds to a "zoneadm shutdown" or "zoneadm halt". Both zoneadm command will use a "init 0" in each zone.
If you have a zone that requires a shutdown script to stopping for example a database gracefully, then you should run the shutdown inside each zone directly.

Network access from local zones on a Solaris 10 router

I'm kind of stuck at an interesting problem.
I have a Solaris 10u6 system which is itself a router between a number of networks.
It has several dozen routes to different networks via different next-hop gateways,
just one of which is a default route to the ISP to internet.
I thought of setting up local zones to securely run infrastructure services (BIND,
Squid, Mail relay) on this machine, with only a single dedicated public IP address
(from our delegated address space) per such zone. Zones use a shared-IP stack
on one of the machine's VLAN interfaces (the LAN part with public IP addresses).
The problem is - since this machine is the gateway for the subnet used for the
local zones, they don't inherit any default route. The one default we have to the
ISP is on another interface's subnet.
[root@ns8 /]# netstat -rn | grep default
[root@ns8 /]# netstat -rn | wc -l
50
On a side note, these zones do inherit dozens of other routes (50 above) with
next-hop routers not on the local zone's subnet - so these are also not accessible.
I think such useless routes should also be filtered away - as "mismatching" default
routes are.
Due to all this the zone has no networking outside its subnet/mask: it doesn't
even try to send anything, since there is not a single route with a matching next
hop router, i.e.
[root@ns8 /]# traceroute -nI 194.87.0.50
traceroute to 194.87.0.50 (194.87.0.50), 30 hops max, 40 byte packets
1 xx.yy.zz.8 0.102 ms !H 0.032 ms !H 0.027 ms !H
To reiterate, this setup is different from that of the numerous replays of "How to
set up internet for zones with virtual IP addresses?"
That recipe suggests to add a fake router and maintain its ARP address to be
that of the real default gateway, and set up NAT to rewrite private IP addresses
to the global zone's public IP. While I've also used the recipe a number of times,
it does not seem feasible in this router's case - there are too many next-hop
routers (and learned with a dynamic routing protocol), not just one default-gw.
I can of course go back to running services in the global zone and binding them
to these dedicated public IP addresses via configuration files - and this works
since the global zone has access to any needed routers having IP addresses
in relevant subnets - but I hoped to secure the system a bit more and separate
routing from infrastructure tasks...
So the question is: how can I set up networking for local zones in this case
when they are running on a router? Is it possible?
Thanks,
//Jim

You can set the Airport Extreme in "Bridge" mode, and then it will just extend the existing subnet.
Airport Utility -> Airport Extreme -> Internet -> Connection Sharing -> Off (bridge mode)

Install R2 on Solaris 10 local Zone

Similar Messages

Maybe you are looking for