Changing process.max-file-descriptor  in non global zone

Hello Folks,
I have non global zone.
i wanted to change process.max-file-descriptor to 8192 so i issued the below command
projmod -s -K 'process.max-file-descriptor=(basic,8192,deny)' default
i have rebooted zone, after reboot system is not showing the value as 8192.
can u someone help me to find out the missed

# id -p
uid=0(root) gid=0(root) projid=1(user.root)
# prctl -P $$ | grep file
process.max-file-descriptor basic 256 - deny 19452
process.max-file-descriptor privileged 65536 - deny -
process.max-file-descriptor system 2147483647 max deny -
process.max-file-size privileged 9223372036854775807 max deny,signal=XFSZ -
process.max-file-size system 9223372036854775807 max deny -
# ulimit -n
256
# cat /etc/project | grep file
default:3::::process.max-file-descriptor=(basic,8192,deny)
#

Similar Messages

  • Genunix: basic rctl process.max-file-descriptor (value 256) exceeded

    Hi .,
    I am getting the following error in my console rapidly.
    I am using Sun Sparc server running with Solaris 10 ., We start getting this error
    suddently after a restart of the server and the error is continously rolling on the console...
    The Error:
    Rebooting with command: boot
    Boot device: disk0 File and args:
    SunOS Release 5.10 Version Generic_118822-25 64-bit
    Copyright 1983-2005 Sun Microsystems, Inc. All rights reserved.
    Use is subject to license terms.
    Hardware watchdog enabled
    Failed to send email alert for recent event.
    SC Alert: Failed to send email alert for recent event.
    Hostname: nitwebsun01
    NOTICE: VxVM vxdmp V-5-0-34 added disk array DISKS, datype = Disk
    NOTICE: VxVM vxdmp V-5-3-1700 dmpnode 287/0x0 has migrated from enclosure FAKE_ENCLR_SNO to enclosure DISKS
    checking ufs filesystems
    /dev/rdsk/c1t0d0s4: is logging.
    /dev/rdsk/c1t0d0s7: is logging.
    nitwebsun01 console login: Nov 20 14:56:41 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 439
    Nov 20 14:56:41 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 414
    Nov 20 14:56:41 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 413
    Nov 20 14:56:41 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 414
    Nov 20 14:56:41 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 413
    Nov 20 14:56:41 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 121
    Nov 20 14:56:41 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 414
    Nov 20 14:56:41 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 413
    Nov 20 14:56:41 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 121
    Nov 20 14:56:41 nitwebsun01 last message repeated 1 time
    Nov 20 14:56:43 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 470
    Nov 20 14:56:43 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 467
    Nov 20 14:56:44 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 470
    Nov 20 14:56:44 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 121
    Nov 20 14:56:44 nitwebsun01 last message repeated 1 time
    Nov 20 14:56:49 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 503
    Nov 20 14:56:50 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 510
    Nov 20 14:56:50 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 121
    Nov 20 14:56:50 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 519
    Nov 20 14:56:50 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 516
    Nov 20 14:56:50 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 519
    Nov 20 14:56:53 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 540
    Nov 20 14:56:53 nitwebsun01 last message repeated 2 times
    Nov 20 14:56:53 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 549
    Nov 20 14:56:53 nitwebsun01 last message repeated 4 times
    Nov 20 14:56:56 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 665
    Nov 20 14:56:56 nitwebsun01 last message repeated 6 times
    Nov 20 14:56:56 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 667
    Nov 20 14:56:56 nitwebsun01 last message repeated 2 times
    Nov 20 14:56:56 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 121
    Nov 20 14:56:57 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 868
    Nov 20 14:56:57 nitwebsun01 /usr/lib/snmp/snmpdx: unable to get my IP address: gethostbyname(nitwebsun01) failed [h_errno: host not found(1)]
    Nov 20 14:56:58 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 887
    Nov 20 14:57:00 nitwebsun01 genunix: basic rctl process.max-file-descriptor (value 256) exceeded by process 976
    nitwebsun01 console login: root
    Nov 20 14:57:00 nitwebsun01 last message repeated 2 times
    Here I attached my /etc/project file also..
    [root@nitwebsun01 /]$ cat /etc/project
    system:0::::
    user.root:1::::
    process.max-file-descriptor=(privileged,1024,deny);
    process.max-sem-ops=(privileged,512,deny);
    process.max-sem-nsems=(privileged,512,deny);
    project.max-sem-ids=(privileged,1024,deny);
    project.max-shm-ids=(privileged,1024,deny);
    project.max-shm-memory=(privileged,4294967296,deny)
    noproject:2::::
    default:3::::
    process.max-file-descriptor=(privileged,1024,deny);
    process.max-sem-ops=(privileged,512,deny);
    process.max-sem-nsems=(privileged,512,deny);
    project.max-sem-ids=(privileged,1024,deny);
    project.max-shm-ids=(privileged,1024,deny);
    project.max-shm-memory=(privileged,4294967296,deny)
    group.staff:10::::
    [root@nitwebsun01 /]$
    Help me to came out of this issue
    Regards
    Suseendran .A

    This is an old post but I'm going to reply to it for future reference of others.
    Please ignore the first reply to this thread... by default /etc/rctladm.conf doesn't exist, and you should never use it. Just put it out of your mind.
    So, then... by default, a process can have no more than 256 file descriptors open at any given time. The likelyhood that you'll have a program using more than 256 files very low... but, each network socket counts as a file descriptor, therefore many network services will exceed this limit quickly. The 256 limit is stupid but it is a standard, and as such Solaris adheres to it. To look at the open file descriptors of a given process use "pfiles <pid>".
    So, to change it you have several options:
    1) You can tune the default threshold on the number of descriptors by specifying a new default threshold in /etc/system:
    set rlim_fd_cur=1024
    2) On the shell you can view your limit using 'ulimit -n' (use 'ulimit' to see all your limit thresholds). You can set it higher for this session by supplying a value, example: 'ulimit -n 1024', then start your program. You might also put this command in a startup script before starting your program.
    3) The "right" way to do this is to use a Solaris RCTL (resource control) defined in /etc/project. Say you want to give the "oracle" user 8152 fd's... you can add the following to /etc/project:
    user.oracle:101::::process.max-file-descriptor=(priv,8152,deny)
    Now log out the Oracle user, then log back in and startup.
    You can view the limit on a process like so:
    prctl -n process.max-file-descriptor -i process <pid>
    In that output, you may see 3 lines, one for "basic", one for "privileged" and one for "system". System is the max possible. Privileged is the limit by which you need to have special privs to raise. Basic is the limit that you as any user can increase yourself (such as using 'ulimit' as we did above). If you define a custom "priviliged" RCTL like we did above in /etc/projects it will dump the "basic" priv which is, by default, 256.
    For reference, if you need to increase the threshold of a daemon that you can not restart, you can do this "hot" by using the 'prctl' program like so:
    prctl -t basic -n process.max-file-descriptor -x -i process <PID>
    The above just dumps the "basic" resource control (limit) from the running process. Do that, then check it a minute later with 'pfiles' to see that its now using more FD's.
    Enjoy.
    benr.

  • Reg process.max-file-descriptor setting

    Hi,
    We are running Solaris 10 and have set project for Oracle user id. When I run prctl for one of running process, I am getting below output.
    process.max-file-descriptor
    basic 8.19K - deny 351158
    privileged 65.5K - deny -
    system 2.15G max deny -
    My question is whats the limit for process running under this project as far as max-file-descriptor attribute is concerned? Will it be 8.19K or 65.5K or 2.15G? Also what is the difference among all three. Please advice. Thanks.

    Hi,
    Welcome to oracle forums :)
    User wrote:
    Hi,
    We are running Solaris 10 and have set project for Oracle user id. When I run prctl for one of running process, I am getting >below output.
    process.max-file-descriptor
    basic 8.19K - deny 351158
    privileged 65.5K - deny -
    system 2.15G max deny -
    My question is whats the limit for process running under this project as far as max-file-descriptor attribute is concerned? Will it >be 8.19K or 65.5K or 2.15G? Also what is the difference among all three. Please advice. Thanks.Kernel parameter process.max-file-descriptor: Maximum file descriptor index. Oracle recommends *65536*
    For more information on these settings please refer MOS tech note:
    *Kernel setup for Solaris 10 using project files. [ID 429191.1]*
    Hope helps :)
    Regards,
    X A H E E R

  • List of configuration files copied to non-global zone

    I understand that when a non-global zone is installed, the zone installation process uses "pristine" copies of quite a few configurable files (/etc/profile, /etc/syslog.conf, etc..) instead of the files which are configured in the global zone. Does anyone know exactly which configuration files are copied from their "pristine" versions instead of the files actually used by the global zone? Is there a list of all of these files somewhere? Where are the "pristine" versions kept in the global zone?
    Thank you.

    Where all information concerning specific packages is being kept. Namely /var/sadm/pkg.

  • Cannot reset max-file-descriptor?

    My /var/ad/messages is full of :
    Apr 17 12:30:27 srv1 genunix: [ID 883052 kern.notice] basic rctl process.max-file-descriptor (value 256) exceeded by process 6910
    Even though I have tried to set process.max-file-descriptor set to 4096 for all projects, which appears correct whenever I query any running process, ie:
    srv1 /var/adm # prctl -t basic -n process.max-file-descriptor -i process $$
    process: 2631: -ksh
    NAME PRIVILEGE VALUE FLAG ACTION RECIPIENT
    process.max-file-descriptor
    basic 4.10K - deny 2631
    Any ideas...?
    Thanks!!

    Hi,
    Finally found the route cause.
    It is the mistake of the user. In one of his startup scripts(.profile) he is running the command (ulimit -n 1024) which is setting both the soft and hard limits of file descriptors.
    This was the reason, I was unable to increase the file descriptor limit beyond 1024.
    Thanks & Regards,
    -GnanaShekar-

  • Not all non-global zones updated for DST

    We have one server with Solaris 10 and four non-global zones. I installed patch 122032-03 to the global zone and it installed successfull, according to the log. With the DST change on 3/11, TWO of the non-global zones and the global zone updated correctly to daylight time, but the other TWO non-global zone DID NOT. Does anyone know what would cause this?
    I have also tried to manually change the time on the two non-global zones and have not been able to; as root I get the message "not owner"
    ainsworth:hughesm> su -
    Password:
    Sun Microsystems Inc. SunOS 5.10 Generic January 2005
    You have mail.
    # date
    Tue Mar 13 12:02:45 PST 2007
    # date -u
    Tue Mar 13 20:03:16 GMT 2007
    # date
    Tue Mar 13 12:04:31 PST 2007
    # date 0313130007
    date: Not owner
    usage: date [-u] mmddHHMM[[cc]yy][.SS]
    date [-u] [+format]
    date -a [-]sss[.fff]
    Fortunately, these were just test zones. They were set up by a previous admin to be used for pgpftp, so I'm wondering if there are some special configurations for security that is preventing the time change.

    Thanks for replying.
    I rebooted from the global zone. All the zones have the same uptime as the global zone, except one that was rebooted more recently.
    Quick question - how do I tell if it's a sparse zone or full zone?
    One of the zones that the time change worked on:
    $ zdump -v US/Pacific | grep 2007
    US/Pacific Tue Mar 13 22:37:59 2007 UTC = Tue Mar 13 15:37:59 2007 PDT isdst=1
    US/Pacific Sun Mar 11 09:59:59 2007 UTC = Sun Mar 11 01:59:59 2007 PST isdst=0
    US/Pacific Sun Mar 11 10:00:00 2007 UTC = Sun Mar 11 03:00:00 2007 PDT isdst=1
    US/Pacific Sun Nov 4 08:59:59 2007 UTC = Sun Nov 4 01:59:59 2007 PDT isdst=1
    US/Pacific Sun Nov 4 09:00:00 2007 UTC = Sun Nov 4 01:00:00 2007 PST isdst=0
    tsbackup:hughesm> cd /usr/share/lib/zoneinfo; ls -al | grep Pac
    drwxr-xr-x 2 root bin 1024 Jan 19 11:19 Pacific
    cathedral:hughesm> cd /usr/share/lib/zoneinfo; ls -al | grep Pac (the global zone)
    drwxr-xr-x 2 root bin 1024 Jan 19 11:19 Pacific
    One zone that didn't work: (the other one that did not work is the same)
    # zdump -v US/Pacific | grep 2007
    US/Pacific Tue Mar 13 22:45:33 2007 UTC = Tue Mar 13 14:45:33 2007 PST isdst=0
    US/Pacific Sun Apr 1 09:59:59 2007 UTC = Sun Apr 1 01:59:59 2007 PST isdst=0
    US/Pacific Sun Apr 1 10:00:00 2007 UTC = Sun Apr 1 03:00:00 2007 PDT isdst=1
    US/Pacific Sun Oct 28 08:59:59 2007 UTC = Sun Oct 28 01:59:59 2007 PDT isdst=1
    US/Pacific Sun Oct 28 09:00:00 2007 UTC = Sun Oct 28 01:00:00 2007 PST isdst=0
    # uname -a
    SunOS albina 5.10 Generic_118822-02 sun4u sparc SUNW,Ultra-4
    # cd /usr/share/lib/zoneinfo (non-global zone that did not update)
    # ls -al | grep Pac
    drwxr-xr-x 2 root bin 1024 Apr 20 2005 Pacific
    I was thinking of trying to apply the patch within the zone itself, but when I tried smpatch analyze, it didn't list it:
    # smpatch analyze
    120900-04 SunOS 5.10: libzonecfg Patch
    121133-02 SunOS 5.10: zones library and zones utility patch
    119254-27 SunOS 5.10: Install and Patch Utilities Patch
    119574-02 SunOS 5.10: su patch
    121453-02 SunOS 5.10: Sun Update Connection Client Foundation
    121118-08 SunOS 5.10: Sun Update Connection System Client 1.0.8
    121081-05 SunOS 5.10: Connected Customer Agents 1.1.0
    122231-01 SunOS 5.10 Sun Connection agents, transport certificate update
    I attempted to add the patch using smpatch, but I've never run it here before so it's probably not configured right:
    # smpatch update -i 122032-03
    122032-03 cannot be validated.
    com.sun.patchpro.model.PatchProRuntimeException: Unexpected throwable
    at com.sun.patchpro.cli.PatchServices.waitForThread(PatchServices.java:1284)
    at com.sun.patchpro.cli.PatchServices.installPatches(PatchServices.java:1121)
    at com.sun.patchpro.cli.PatchServices.main(PatchServices.java:510)
    Caused by:
    java.lang.Throwable: ERROR: Failed to validate the digital signature(s).
    at com.sun.patchpro.model.PatchProModel$InnerDownloadPatchThread.downloadPatchFailed(PatchProModel.java:2855)
    at com.sun.patchpro.server.GroupPatchDownloader.dispatchFailedEvent(GroupPatchDownloader.java:384)
    at com.sun.patchpro.server.GroupPatchDownloader.downloadPatchFailed(GroupPatchDownloader.java:335)
    at com.sun.patchpro.server.ServerPatchServiceProvider.dispatchFailedEvent(ServerPatchServiceProvider.java:2577
    at com.sun.patchpro.server.ServerPatchServiceProvider.validatePatchBundle(ServerPatchServiceProvider.java:2196
    at com.sun.patchpro.server.ServerPatchServiceProvider.requestDownload(ServerPatchServiceProvider.java:1780)
    at com.sun.patchpro.server.ServerPatchServiceProvider.performDownloadPatches(ServerPatchServiceProvider.java:1
    2)
    at com.sun.patchpro.server.ServerPatchServiceProvider.downloadPatches(ServerPatchServiceProvider.java:860)
    at com.sun.patchpro.server.PatchServerProxy.downloadPatches(PatchServerProxy.java:142)
    at com.sun.patchpro.server.GroupPatchDownloader.downloadPatches(GroupPatchDownloader.java:124)
    at com.sun.patchpro.model.PatchProModel.performPatchDownload(PatchProModel.java:1932)
    at com.sun.patchpro.model.PatchProStateMachine$10.run(PatchProStateMachine.java:526)
    at com.sun.patchpro.util.State.run(State.java:266)
    at java.lang.Thread.run(Thread.java:595)
    So then I attempted to add the patch using patchadd:
    # patchadd 122032-03
    Validating patches...
    Loading patches installed on the system...
    Done!
    Loading patches requested to install.
    Done!
    Checking patches that you specified for installation.
    Done!
    Global patches.
    0 Patch 122032-03 is for global zone only - cannot be installed on local zone.
    No patches to install.
    under /var/sadm/patch/122032-03 on the Global zone, the log shows:
    -rw-r--r-- 1 root root 2666 Jan 19 11:19 log
    This appears to be an attempt to install the same architecture and
    version of a package which is already installed. This installation
    will attempt to overwrite this package.
    WARNING: /usr/share/lib/zoneinfo/Africa/Timbuktu <no longer a regular file>
    WARNING: /usr/share/lib/zoneinfo/America/Argentina/ComodRivadavia <no longer a regular file>
    WARNING: /usr/share/lib/zoneinfo/America/Indiana/Indianapolis <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/America/Indianapolis <no longer a regular file>
    WARNING: /usr/share/lib/zoneinfo/America/Kentucky/Louisville <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/America/Louisville <no longer a regular file>
    WARNING: /usr/share/lib/zoneinfo/CST6CDT <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/EST <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/EST5EDT <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/Europe/Belfast <no longer a regular file>
    WARNING: /usr/share/lib/zoneinfo/HST <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/MST <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/MST7MDT <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/PST8PDT <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/Pacific/Yap <no longer a regular file>
    Dryrun complete.
    No changes were made to the system.
    This appears to be an attempt to install the same architecture and
    version of a package which is already installed. This installation
    will attempt to overwrite this package.
    WARNING: /usr/share/lib/zoneinfo/Africa/Timbuktu <no longer a regular file>
    WARNING: /usr/share/lib/zoneinfo/America/Argentina/ComodRivadavia <no longer a regular file>
    WARNING: /usr/share/lib/zoneinfo/America/Indiana/Indianapolis <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/America/Indianapolis <no longer a regular file>
    WARNING: /usr/share/lib/zoneinfo/America/Kentucky/Louisville <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/America/Louisville <no longer a regular file>
    WARNING: /usr/share/lib/zoneinfo/CST6CDT <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/EST <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/EST5EDT <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/Europe/Belfast <no longer a regular file>
    WARNING: /usr/share/lib/zoneinfo/HST <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/MST <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/MST7MDT <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/PST8PDT <no longer a linked file>
    WARNING: /usr/share/lib/zoneinfo/Pacific/Yap <no longer a regular file>
    Installation of <SUNWcsu> was successful.
    On the non-global zones, either there is nothing under /var/sadm/patch or there isn't even a patch directory under /var/sadm. Is there somewhere else to look?
    Thanks.

  • Patchadd failure - non-global zones

    Hi there
    Having issues running patchadd. Can't find libcrypto.so.0.9.7. The file exists and have attempted using crle and LD_LIBRARY_PATH to point patchadd in the right direction. This occurs when zones in a halted state. If I start zones then patchadd works OK, however not an option when trying to install patch bundle.
    Note, we do have openssh & openssl installed which use libcrypto.so.0.9.8
    Preparing checklist for non-global zone check...
    Checking non-global zones...
    ld.so.1: pdo: fatal: libcrypto.so.0.9.7: open failed: No such file or directory
    Non-global zone check failed. No change made to the System.                  
    Patchadd exiting.                                                              Any suggestions?
    Cheers
    Garry

    After much trial and error located the problem.
    It would seem that when patching non-global zones, Solaris 10 sets up a "live upgrade environment" in which various directories are mounted over temporary "lu" mount points. Sorry, no longer have a screen dump. When patchadd was failing the zone was left in a state of "mounted" - (rectified by running zoneadm -z zonename unmount). While in this mounted state, I could zlogin and run an ldd on patchadd (ldd `which patchadd`). This resulted in libcrypto.so.0.9.7 pointing to "file not found".
    The cause of this was due to Openssh & Openssl being installed over the standard distribution. Copied libcrypto.so.0.9.7 from /usr/sfw/lib to /usr/lib and problem went away

  • NFS and non global zones

    Hi,
    Ive read numerous threads about mounting NFS shares to non global zones but have still not been able to successfully resolve my issue.
    I have 5 T3-2's which are being used as standalone SAP servers running Solaris 10u9 and numerous sparse non global zones. Basically I have a 1Tb HDS LUN presented to 1 T3-2 and have NFS shared this out as /stage to the remaining 4 global zones which works as expected.
    However I am unable to mount the shared NFS filesystem to the non global zones.
    When I try to mount the NFS share from the non global zone itself I receive RPC errors, I have also tried configuring the non global zone with the NFS mount (from the global zone) as lofs but the zone wont boot and also manually mounting the NFS mount from the global zone which looks like it works but when I do a df on the non global zone I receive stat erros.
    Ive even tried linking the NFS share on the global zone to the non global zone directory but that produces a strange linkage when the zone is booted.
    Numerous threads say this is not supported but I cant believe Oracle after ~6/7 years of zones and numerous threads on the subject wouldnt have resolved this issue.
    I could easily locally mount the storage locally and lofs it to the non global zone but unfortunately dont have the storage capacity available which is why I thought NFS mounting to the non global zone would work!!
    Any suggestions would be gratefully received!
    Thanks.

    If you are trying to mount NFS file system on non-global zone from global zone of the same server, use lofs instead.
    You can mount the same file system to all non-global zones using lofs and all non-global zones have read/write access to it.
    If it is global zone of some other server then you can use NFS. But before that check the way it is exported on NFS server whether the client from which you are trying to mount it has permissions to do so.

  • Pkgmap files missing in global zone, can't build non-global zone

    My solaris 10 server is missing the pkgmap files for the packages. As a result, I can't build a non-global zone. Is there a way to recreate the pkgmap files?
    The OS on the Solaris 10 server was installed via jumpstart (initial install). However, the Jumpstart process used a Solaris 9 boot server which seems to have caused the missing pkgmap problem.
    Does anyone know of any other problems which would result from a version mismatch between a boot and installation server during the jumpstart process?

    Hi, i have problems with building transmission from svn too:
    $ versionpkg
    ==> retrieving latest revision number from svn... 3730
    ==> newer revision detected: 3730
    ==> Entering fakeroot environment
    ==> Making package: transmission-svn 3730-1 (Di 6. Nov 08:28:38 CET 2007)
    ==> Checking Runtime Dependencies...
    ==> Checking Buildtime Dependencies...
    ==> Retrieving Sources...
    ==> Validating source files with md5sums
    ==> Extracting Sources...
    ==> Removing existing pkg/ directory...
    ==> Starting build()...
    Fetching external item into 'Transmission/third-party/libevent'
    Checked out external at revision 477.
    Checked out revision 3730.
    ==> SVN checkout done or server timeout
    ==> Starting make...
    ./autogen.sh: line 16: autoreconf: command not found
    Creating aclocal.m4 ...
    Running glib-gettextize...  Ignore non-fatal messages.
    Copying file mkinstalldirs
    Copying file po/Makefile.in.in
    Please add the files
      codeset.m4 gettext.m4 glibc21.m4 iconv.m4 isc-posix.m4 lcmessage.m4
      progtest.m4
    from the /aclocal directory to your autoconf macro directory
    or directly to your aclocal.m4 file.
    You will also need config.guess and config.sub, which you can get from
    ftp://ftp.gnu.org/pub/gnu/config/.
    Making aclocal.m4 writable ...
    Running intltoolize...
    PKGBUILD: line 33: ./configure: No such file or directory
    make: *** No targets specified and no makefile found.  Stop.
    ==> ERROR: Build Failed.  Aborting...
    ==> ERROR: Reverting pkgver...
    i dont know whats up with the autoreconf
    i hope anyone can help me!
    greez

  • Administration file for non-global zones

    I want to install package in global zone. What attributes can I set in administration file? I use administration file for relocating packages by altering basedir. In global zone package is relocated, but installation continues for non-global zones in package basedir.
    Is it possible to specify pkgadd -G parameter (install only in current zone) in administration file?
    Regards
    Jezz

    We use the CDE login mechanism. From the CDE login screen on the global zone:
    [] Select Options, Remote Login, Enter Host Name from the CDE login screen.
    [] Enter the hostname (not the zone name!) of the non-global zone in the Enter the host name box.
    [] Click OK.
    [] Once the CDE login screen appears with the hostname of the non-globalzone listed at the top, log in as sysadmin.
    Notes: If the non-global zone or the system was recently booted, wait a few minutes and check to make sure that the cde-login service is running using the command:
    svcs -a | grep cde-login
    Also, if you have restricted /etc/Xaccess, you'll need to add your non-global zone to it.
    Message was edited by:
    r2ad
    Message was edited by:
    r2ad, http://www.r2ad.com

  • Failing to install pkg on non-global zone

    (root)@syslog1:~# pkgadd -d . SUNWant
    Processing package instance <SUNWant> from </home/iqbala>
    Jakarta ANT(sparc) 11.10.0,REV=2005.01.08.05.16
    WARNING: Stale lock installed for pkgrm, pkg SUNWaspell quit in remove-initial state.
    Removing lock.
    Using </> as the package base directory.
    ## Processing package information.
    ERROR: Cannot allocate memory for package object array.
    pkgadd: ERROR: memory allocation failure
    pkgadd: ERROR: unable to process pkgmap
    Installation of <SUNWant> failed (internal error).
    No changes were made to the system.
    (root)@syslog1:~#
    (root)@syslog1:~# zonename
    syslog
    This non-global zone is capped to 1G phy memory out of 2G total of the T1000
    (root)@syslog-global:~# uname -a
    SunOS syslog-global 5.10 Generic_137137-09 sun4v sparc SUNW,Sun-Fire-T1000
    (root)@syslog-global:~# zoneadm list
    global
    syslog
    (root)@syslog-global:~# zonename
    global
    (root)@syslog-global:~# zonecfg -z syslog info
    zonename: syslog
    zonepath: /syslog
    brand: native
    autoboot: true
    bootargs: -m verbose
    pool:
    limitpriv: default,sys_time
    scheduling-class: FSS
    ip-type: shared
    inherit-pkg-dir:
         dir: /lib
    inherit-pkg-dir:
         dir: /platform
    inherit-pkg-dir:
         dir: /sbin
    inherit-pkg-dir:
         dir: /usr
    fs:
         dir: /var/logs
         special: /var/logs
         raw not specified
         type: lofs
         options: []
    fs:
         dir: /usr/local
         special: /syslog-local/usr/local
         raw not specified
         type: lofs
         options: []
    net:
         address: 192.168.0.114
         physical: aggr1
         defrouter: 192.168.0.1
    dedicated-cpu:
         ncpus: 1-8
         importance: 10
    capped-memory:
         physical: 1G
         [swap: 512M]
    attr:
         name: comment
         type: string
         value: "syslog server"
    rctl:
         name: zone.max-swap
         value: (priv=privileged,limit=536870912,action=deny)
    (root)@syslog-global:~# prstat -Z
    PID USERNAME SIZE RSS STATE PRI NICE TIME CPU PROCESS/NLWP
    13118 root 7184K 5952K sleep 1 0 52:00:54 0.5% nco_p_syslog/10
    11730 root 162M 123M sleep 59 0 38:51:35 0.1% splunkd/22
    7324 root 12M 8280K sleep 59 0 0:58:06 0.0% syslogd/25
    266 root 97M 24M sleep 49 0 31:45:02 0.0% poold/8
    209 daemon 8104K 3080K sleep 59 0 24:39:56 0.0% rcapd/1
    29553 root 2496K 2024K cpu4 59 5 0:00:00 0.0% splunk-optimize/1
    21578 root 38M 36M sleep 59 0 0:01:10 0.0% puppetd/2
    29554 root 6088K 3712K cpu0 49 0 0:00:00 0.0% prstat/1
    24244 root 5760K 3104K sleep 49 0 0:00:00 0.0% bash/1
    1024 noaccess 171M 96M sleep 59 0 8:41:32 0.0% java/18
    27771 noaccess 189M 100M sleep 1 0 4:44:36 0.0% java/18
    274 daemon 3192K 496K sleep 59 0 0:00:00 0.0% statd/1
    279 daemon 2816K 576K sleep 60 -20 0:00:00 0.0% nfs4cbd/2
    326 root 2304K 40K sleep 59 0 0:00:00 0.0% cimomboot/1
    151 root 2576K 344K sleep 59 0 0:00:00 0.0% drd/2
    ZONEID NPROC SWAP RSS MEMORY TIME CPU ZONE
    3 47 465M 513M 25% 99:54:00 0.7% syslog
    0 42 391M 466M 23% 71:04:39 0.1% global
    Total: 89 processes, 386 lwps, load averages: 0.21, 0.26, 0.26
    Am I hitting a bug?

    If your pkg wants to be installed in /usr or another inherit-pkg-dir, it can't because they are share as read-only.
    Verify wherer the pkg copies its files.

  • Add tape device to non-global zone

    Hi,
    I have a SCSI attached Ultrium tape device attached and configured against the global zone.
    The /dev/rmt/0* definitions in the global zone are links to ../../devices/pci@2*
    I need to be able to use this tape device from the non-global zones.
    To enable this, I have done the following:
    zonecfg -z <zone name>
    add device
    set match=/dev/rmt/0
    end
    verify
    commit
    exit
    I repeated the above for /dev/rmt/0m and /dev/rmt/0mn
    Then I restarted the zone with the command:
    zoneadm -z <zone name> reboot
    After the reboot, I can see the device when using "mt -f /dev/rmt/0 status", but whenever I try to write a SAP brbackup to the new (initialised and not write protected) tape within the drive I get the following error:
    BR0278E Command output of 'LANG=C cd /oracle/<SID>/sapbackup && /usr/sap/<SID>/SYS/exe/run/brtools -f detach LANG=C cpio -iuvB .tape
    sh: /dev/rmt/0mn: cannot open
    BR0280I BRBACKUP time stamp: 2012-04-04 08.21.41
    BR0279E Return code from 'LANG=C cd /oracle/<SID>/sapbackup && /usr/sap/<SID>/SYS/exe/run/brtools -f detach LANG=C cpio -iuvB .tape.
    BR0359E Restore of /oracle/<SID>/sapbackup/.tape.hdr0 from /dev/rmt/0mn failed due to previous errors
    Have I created the device incorrectly, or does anyone have any ideas what could be the reason the write fails?
    Any help appreciated.
    Edited by: user11329299 on 04-Apr-2012 01:09

    Hi,
    Just to bring you up to speed, I have now fixed the issue.
    The resolution was all within the iniSID.sap file that the backup is using. I have changed a number of parameters within this file:
    1.     tape_copy_cmd = dd (was cpio)
    2.     rewind = "mt     -f $ rew; sleep 30" (was " mt -f $ rew")
    3.     rewind_offline = "mt -f $ offline; sleep 30" (was "mt -f $ offline")
    4.     tape_pos_cmd = "mt -f $ fsf $: sleep 30" (was "mt -f $ fsf $")
    5.     tape_size = 500G (was 18000M)
    After making those changes, the backup started from within DB13. I believe that the main culprit was the tape_copy_cmd, but the others were changed to allow the tape drive time to become online again after any query.

  • How to enable GUI in a non global zone in solaris11?

    How to enable graphical logon in a non global zone in solaris11, so the zone can be login by Xmanager? Thanks!

    This guide will cover how to setup a basic VNC connection to a Solaris 11 machine. There is also an optional step to allow for persistent VNC connections.
    Step 1
    Configure GDM to include ‘[security] DisallowTCP=false’ and ‘[xdmcp] Enable=true’.
    $ sudo gedit /etc/gdm/custom.conf
    # GDM configuration storage
    [daemon]
    [security]
    DisallowTCP=false
    [xdmcp]
    Enable=true
    [greeter]
    [chooser]
    [debug]
    Step 2
    Configure X-Server to accept remote connections.
    # svccfg -s application/x11/x11-server
    svc:/application/x11/x11-server> setprop options/tcp_listen = boolean: true
    svc:/application/x11/x11-server> end
    Step 3
    Configure the VNC service (you could change the ‘-geometry 1280×720′ to whatever resolution you would like).
    # svccfg -s xvnc-inetd
    svc:/application/x11/xvnc-inetd> setprop inetd_start/exec = astring: "/usr/bin/Xvnc -desktop sol11:0 -geometry 1024x768 -inetd -query localhost -once securitytypes=none"
    svc:/application/x11/xvnc-inetd> setprop inetd/wait = boolean: true
    svc:/application/x11/xvnc-inetd> end
    ** The line highlighted red is optional – only do this if you want your VNC connection to persist (as well as any potential security issues)
    or
    # svccfg -s xvnc-inetd
    svc:/application/x11/xvnc-inetd> editprop
    search for # setprop inetd_start/exec = astring: "/usr/bin/Xvnc
    copy the line, uncomment the copy, makethe changes above, write the file out.
    svcadm refresh xvnc-inetd
    Step 4
    Disable and the re-enable the GDM and VNC-inetd services for the changes to take effect.
    $ su root
    Password:
    # svcadm disable gdm xvnc-inetd; svcadm enable gdm xvnc-inetd
    If still in maintenance, reboot (I had to, don't know why).
    Step 5
    Point your favourite VNC client at your Solaris server and test if it accepts your VNC connection – you should be presented with a Username/Password login screen.
    If you performed the optional step to make your connections persist – close your favourite VNC client and then reconnect – if you remained logged in you have a persistent connections.
    Greg on said:
    After a fresh text install of Solaris-11 (11/11) both xvnc-inetd and gdm are not present. After installing them (# pkg install xvnc-inetd gdm) I can’t get gdm to start:
    # svcadm enable gdm
    # svcs gdm
    offline 10:24:03 svc:/application/graphical-login/gdm:default
    Any thoughts?
    Ron on said:
    You are missing some X packages. Do the following:
    pkg install slim_install           # installs 400+ packages
    svcadm enable gdm && exit      # gdm now works
    pkg uninstall slim_install           # uninstalls the installer package only

  • How to know global zone in case non global zone is hung

    ....I have nongloabazone1,nongloabazone1,nongloabazone2,nongloabazone3...
    i am working on nongloabazone1 ..
    suppose i am giving remote support ...
    if my nongloabazone1 is hung ..i need to know the global zone on which this nongloabazone1 is installed and reboot from there ...if my nongloabazone1 is hung i cannot apply #arp -a and check it out by trial and error method and know the global zone....
    in this case how can i reboot the nongloabazone1 .....i have the same question in case of Ldoms also..............
    Thanks in Advance.......

    Hi.
    It's not clear what means "non global zone is hung".
    In case it realy hangs you can't do anythins in this zone.
    1) In case you have access to global zone. You can get list all zones running on this host:
    zoneadm list -cv
    For reboot local zone from global zone just need: zoneadm -z <zone_name> reboot
    2) Zones not support live migration. So after zone started it can not change global zone.
    Create script that put global zone name in file. When need - just read content of this file.
    This file can be created from global zone when start (or create/move) local zone.
    In case zone migration is not quickly operation, just create file (or database) for list what zone started on which host.
    For LDOM it look wery same.
    Regards.

  • Application pkg install in non Global zone

    I have got another virtual instance up on solaris box, i am trying to install application pkg which writes to
    /usr
    which is mounted as read only.
    is it possible to create policy to write under that folder
    e.g. /usr/writable where u can add/change stuff in non global zone
    thanks

    You'll need to build a "whole root" zone to do that. You currently have a "sparse root" zone.
    There are two types of non-global zone root file system models: sparse and whole root. The sparse root zone model optimizes the sharing of objects. The whole root zone model provides the maximum configurability. These concepts are discussed in Chapter 18, Planning and Configuring Non-Global Zones (Tasks).
    (from http://docs.sun.com/app/docs/doc/817-1592/6mhahuooc?a=view )

Maybe you are looking for