Clustering and Branded Zones

After a bit of a struggle I have a Solaris 8 branded zone installed as a cluster resource and it will fail over perfectly happily. However
I installed it by the old fashioned method of building the zone, installing it on one node and then adding it as a resource by using the sczbt_config
command to install it as a resource.
It was a bit flakey (the hardest part was to get the zone configuration on the second node to go from Configured to Installed) but it now works fine.
Now I know that there is a new command, clzonecluster, which allows zones to be built considerably more simply but does anyone know if that command can be used with Sol 8 branded zones?

Hi,
Clustering is only supported by the database platform DB2 for Linux, UNIX, and Windows.
You can use partitioning to improve the performance of other databases.
http://help.sap.com/saphelp_nw2004s/helpdata/en/33/dc2038aa3bcd23e10000009b38f8cf/frameset.htm
Thanks & Best Regards,
Rajani

Similar Messages

Solaris 8 branded zone and privileges

Hello,
I've just installed a Solaris 8 Branded zone to migrate an old server. The migration worked like a charm, and everything seems ok excepted one thing. The zone must run a Lotus Domino server, so the process needs to bind ports 80, 443 and 389, but it can't.
I've found things about the limitpriv directive for the zone configuration, and the net_privaddr privilege to allow a process to bind ports under 1024.
So now, if I run the process in the non global zone as root, it can bind, but if it is launched as the user notes, it can't.
If I use the ppriv command to see what are the privileges of the process, I see :
1945:   /opt/lotus/notes/latest/sunspa/server
flags = <none>
        E: file_link_any,proc_exec,proc_fork,proc_info,proc_session
        I: file_link_any,proc_exec,proc_fork,proc_info,proc_session
        P: file_link_any,proc_exec,proc_fork,proc_info,proc_session
        L: contract_event,contract_observer,file_chown,file_chown_self,file_dac_execute,file_dac_read,file_dac_search,
        file_dac_write,file_link_any,file_owner,file_setid,ipc_dac_read,ipc_dac_write,ipc_owner,net_bindmlp,net_icmpaccess,
        net_mac_aware,net_privaddr,net_rawaccess,proc_audit,proc_chroot,proc_exec,proc_fork,proc_info,proc_lock_memory,
        proc_owner,proc_session,proc_setid,proc_taskid,sys_acct,sys_admin,sys_audit,sys_mount,sys_nfs,sys_resourceSo, the net_privaddr appears in the limit, but it is not enabled. How can I make it enabled for that process?
Thanks

Thanks for the link, good explanations about privileges but they seem unusable in Solaris 8 branded zone. It suggests to create a role with the privileges my process needs, using the "rolemod -K" command, but this option does not exist for the rolemod command in my Solaris 8 zone, it just supports "classic" RBAC.
Maybe the solution would be to create the good profile for the user running the process, but I'm a little bit lost with RBAC and I can't find an existing profile corresponding to what I want.
Actually, the limitpriv for my zone is "default,net_rawaccess,net_privaddr,file_dac_read" and that's all. I added net_privaddr and file_dac_read because I saw that a "ppriv -D" on the Lotus server complained about the lack of these privileges, but in fact they are already included in default privileges.

Trouble w/installing Solaris 10 branded zone on solaris 11.

Having issues creating a policy that works installing solaris 10 u10 branded nfs zone on sol11 in opscenter 12c u1. Maybe i'm just overlooking something basic or it isn't supported in opscenter. I'm able to create the policy but seem to get a very non-informative error message when deploying it.
Error Message:
"The DeploymentPlan execution job failed because the DeploymentProvider ZoneDeploymentProvider for Step Create Solaris Zones failed to generate tasks for the job: Cannot prepare zone tasks: java.lang.NullPointerException. Contact My Oracle Support if the problem persists. (10445)"
Here is the OpsCenter Profile:
Name Prefix:      hous
Starting Number:      1
Zone Description:      solaris 10 update 10
ZoneType:
Branded Zone
Branded Zone Image:
s10-update10-flar
Automatic Recovery:
Yes
Priority of Recovery:      0
CPU Shares:      1
CPU Cap:      0
Physical Memory Cap:      0
Locked Memory Cap:      0
Virtual Memory Cap:      0
Language:      en_US.ISO8859-15
Time Zone:      US/Central
Terminal Type:      xterm
NFSv4 Domain Name:      dynamic
Automatically boot zone when the global zone is booted:
Yes
Automatically boot zone after creation:
Yes
Storage for the metadata Library:      NAS, zone-prod1

Problem found. To jumpstart last two HP Blades we used the copies of AI templates. When we did it from scratch and re-installed the Solaris 11.0 we have no more errors.

Solaris 10-Branded Zone

Hi,
I am trying to establish whether the following configuration is officially supported (and documented):
"Non-Global zone running a release of Solaris 10 which is older than the release of Solaris 10 running in the Global Zone".
I'm familiar with the idea of Branded Zones to support Solaris 8, 9 & some Linux kernels, and have seen some forum posts where people have created Solaris 10-branded zones, but haven't really seen anything that puts the official seal of approval on that configuration. Also I'm familiar with LDOMs and appreciate that I could get to where I want to be that way too.
Any help welcome.
Thanks,
Paul.

This will be supported in Solaris 10 Upate 9 to a degree, using p2v. Below is a reply I had to a request I'd put in. You might also want to read this
http://blogs.sun.com/jerrysblog/entry/zones_p2v
Hi Sean,
I got information that p2v project is being backported for S10u9
This means, that you will be able to install a native zone from a flar.
I don't have detailed information at the moment, how this will work in terms of
patching in combination with Global Zone and other sibling NGZ's.
+According to Jerry Jelinek, Solaris10-branded zones will not being backported to Solaris 10,+
Got this info yesterday evening from Jerry.
I'll provide some more info about the p2v project for native zones in coming Solaris 10_U9,
once I got more details.
So, I'd suggest to check, whether the mentioned p2v project with flar on native zones might fit your requirements.
Thanks,
Alfred
Edited by: ftoomsh on Sep 2, 2010 3:02 AM

Add zfs volume to Solaris 8 branded zone

Hi,
I need to add a zfs volume to a Solaris 8 branded zone.
Basically ive created the zvol and added the following to the zone configuration.
# zonecfg -z test
zonecfg:test> add device
zonecfg:test:device> set match=/dev/zvol/dsk/sol8/vol
zonecfg:test:device> end
When I boot the zone it comes up ok but I am unable to see the device, nothing in format, /dev/dsk etc etc
Ive also tried to setmatch to the raw device as well to no avail.
Basically I have numerous zvols to add and dont really want a load of mount points from the global zone then lofs back to the local zone
Any ideas please??
Thanks...

Thanks but that's why I created zfs volumes and newfs'ed them to create UFS and presented those to the zone.
In the end I just create a script in /etc/rc2.d and mounted the filesystems in there.

Creating a Solaris 8 branded zone

I am in the process of configuring a Solaris 8 branded zone using the SUNWsolaris8 package and the instructions in the Solaris8 Container Guide. Solaris 10 08/07 is installed in the global zone. I have the following kernel patches installed as required: 127111-08 and 128548-08. I get the following error after configuring the zone when I try to verify the zone:
-bash-3.00# zonecfg -z gfxc-qazone
gfxc-qazone: No such zone configured
Use 'create' to begin configuring a new zone.
zonecfg:gfxc-qazone> create -t SUNWsolaris8
zonecfg:gfxc-qazone> set autoboot=true
zonecfg:gfxc-qazone> set zonepath=/export/zones/gfxc-qazone
zonecfg:gfxc-qazone> add attr
zonecfg:gfxc-qazone:attr> set name=machine
zonecfg:gfxc-qazone:attr> set type=string
zonecfg:gfxc-qazone:attr> set value=sun4u
zonecfg:gfxc-qazone:attr> end
zonecfg:gfxc-qazone> verify
gfxc-qazone: unknown brand.
gfxc-qazone: Invalid document
I cannot find any other information anywhere on this error. I am hoping those that have successfully installed a Solaris 8 branded zone can help me out. Thanks.

I have installed the SUNWs8brand packages before I started the configuration and I also installed the patch. I am not sure what you mean if the package installed in the correct order. I cannot find what I am missing. The original installation for the global zone was using the SUNCreq with other packages added during the installation. I realized after the O/S installation that I needed the zone packages as well as the live upgrade packages. After installing those packages I installed the SUNWs8brand packages. Let me know if there is something else that I am missing. I am thinking of re-installing the O/S with the End User software group.

CREATING SOLARIS 8 BRANDED ZONE

Attempting to configure a Solaris8 branded zone on a SunFireV125 (running Sol10_10/09). Got to the "zoneadm -z s8-zone boot" step and configuring for NIS when I received the following error:
"The following error occurred while trying to set the netmask 255.255.248.0 on the network interface bge0:1: ioctl: Not owner"
Running ifconfig -a on the global zone, bge0:1 shows up but with only the IP address. Any ideas out there in Sun land? I've tried a few things (even google) but to no affect.
Btw, it is created as a shared-ip zone.
Thanks,

I would suggest setting the interface's netmask in the zone configuration.
As an example:
address=192.168.0.5/22
Cheers,

Build Solaris 8 branded zone with ufs /var etc

We have an ancient application which runs on Solaris 8 which we would like to move to a Branded zone. The issue we have is that the application does a fstyp (but within the binary) on any file system that its is writing to and barfs if it doesn't recognise the type. Unfortunately we are limited to basically ufs and vxfs.
The problem is that I need to have /var configured as a UFS filesystem during the zone build ......
Now I know all of the methods that can be used to mount a filesystem within a branded zone:
1) Add FS within zonecfg ... fstype doesn't return UFS
2) LOFS : Doesn't return UFS
3) Mounting a file system after zone boot .... Great for non-system filesystems but not for /var
4) "add device" ... might work BUT I need to build /var during zone configuration .,.....
Any ideas?
Edited by: user13012897 on Dec 8, 2010 5:41 AM

It's not straightforward, but I'd consider writing an interposer library that gets loaded via LD_PRELOAD and gives a different answer than fstyp() would normally give.
http://www.itworld.com/UIR000929interposers

Solaris 8 branded zone not booting after server reboot hangs at ready state

Hi,
For ipchange/hostname change we rebooted the physical server...once rebooting the Solaris brand 8 zone stucks at ready state.
I have run the truss with zoneadm in the log process sleep and wait
Will post the log soon..any help to troubleshoot the issue
Both global zone and Ng zone having same hostid..
dmesg::
Apr 30 13:08:50 xyz zoneadmd[992]: [ID 702911 daemon.error] [zone 'abc'] WARNING: console /devices//pseudo/zconsnex@1/zcons@0 found, but it could not be removed.: I/O error
bash-3.00# ps -ef|grep -i abc
root 1441 1429 0 13:10:56 ? 0:00 /bin/ksh -p /usr/lib/brand/solaris8/s8_boot abc /abc
root 1429 1 0 13:10:55 ? 0:00 zoneadmd -z abc
root 1427 1397 0 13:10:54 pts/3 0:00 zoneadm -z abc boot -f -s
root 1542 1441 0 13:10:56 ? 0:00 /bin/ksh -p /usr/lib/brand/solaris8/s8_boot abc /abc
zoneadm list -cv
2 abc ready /abc solaris8 shared
Thanks
Edited by: muvvas on Apr 30, 2012 2:25 PM

moved the solaris 8 branded zone to other server.their its working fine.sorry for late reply.

Inetd services (telnet, rlogin ,rsh) in Solaris 9 Branded Zone

Hi,
I've got two Solaris 9 Branded Zones running on an M3000. They both use exclusive IP.
When I try and telnet, rlogin or rsh to either of my Solaris 9 zones from the other I get an error. With the r* commands I get a "Protocol error" message, and telnet just reports a terminated connection. I've tried Mr. Google, the results I get make sense for a physical host - i.e Protocol Error would occur if the server executable (in.rlogind, etc) was somehow messed up.
Just to complicate things slightly the exclusive IP NICs are on a physically separate switch from the other NICs.
I'd forgotten that with the Branded Zones some native features are actually handled by the underlying global zone (i.e. Solaris 10).
Anyway, has anybody else had this same problem and how did you resolve it?
Thanks
Tim Shaw.

I found out that the services in the Global Zone had been disabled. Simply enabling them fixed the problem :)

How do I maintain a Solaris 10 branded zone?

I'm not sure whether I should be putting this on the Solaris 10 or the Solaris 11 discussion since Solaris 10 branded zones run on top of Solaris 11 but I decided to put it here. I also apologize is this is clearly documented somewhere but if it is I've not found it.
Once I've moved a Solaris 10 system or zone to a "Solaris 10 branded zone" how do I maintain it. As far as I can determine, I cannot apply maintenance updates to it (ie. go from Solaris 10 9/10 to Solaris 10 8/11). Attempts to apply the associated patch bundles seem to fail in the checking out the system code. So it appears that I'm stuck with simple patching. It also appears that you can't use Live Upgrade which means that you might destabilize the zone during patching which makes it awkward if you need to maintain uptime. Furthermore, if appears that backing out the kernel patch in the zone (on Intel at least) can clobber libc.so.1 which clobbers the zone (thank heaven for ZFS snapshots - rollback!).
What is the safest way to patch these zones? Yes, I could recreate the zone from a Solaris 10 system but I'm thinking down the road where we're running Solaris 11 and Solaris 10 exists only in zones.

I've not received an answer to this so I've started rolling my own procedure which I hope will work well; however, it seems that there should be some information available from Oracle about this.

How do I get from Branded Zones to "real" Solaris 10 Zones?

My head is beginning to spin! I am beginning to think I have been led down a blind alley.
We have vast numbers of old Solaris 8 systems that we want to consolidate on new hardware in Solaris 10 Zones. We have been bombarded with advice that the way to go is to move it first to Branded Zones, as a stepping stone, and then migrate/upgrade it from there to Solaris 10. So we have started on our journey.
We now have our first bunch of Solaris 8 containers happily installed and running. And yes, it was relatively easy and painless, and the tool support was good. But now what? What are the steps and tools that will make the second step, from Solaris 8 to Solaris 10?
Everything out there hints that it is supposed to be easy. But every time I try and spec out the steps for our teams to follow I come unstuck. Does Live Upgrade feature in this anywhere? (And if so, at what point does my zone lose its Brand identity?) Is there some way to use archives? (And if so, how do I only include the bits I need to move?) Is there something magic under the covers of the Zone administration commands? (And if so, what pulls in my Solaris 8 stuff?) Is there at least some tool somewhere that will capture the configuration I need and build me a new one?
If the answer is that I just define the new Zone by hand and re-install all my applications from scratch, then can somebody explain just what I have achieved so far, and in what way it can be construed as a "stepping stone"?

Correct. But we have now invested in the time taken to learn about Branded Zones, do the migrations, teach the support teams how to manage them... Plus we are paying the subscription for the Branded Zone software. And we still have pure Solaris 8 applications staring end-of-support in the face. We could have made the same investment to re-install the applications in a real Solaris 10 Zone and make them work "properly". All the publicity tells me I've made my migration to Solaris 10 much easier, but I still can't see how I'm any nearer my end point.Here's where your losing it. There is no real distinction between what you call a normal Solaris 10 zone and a Solaris Branded 8 zone. They could have called it something else and you would still insist that somehow one is normal and one is not. There are a variety of Branded Zones. There's a Solaris 8, Solaris 9, and Linux Branded Zones. They differ from what you call "normal" zones in that you basically are adding an OS to the Base OS and are not just copying files from the Base OS. That's the only difference. In all other respects they are the same. The only differentiators is for a Branded Zone you are adding the files from some other OS, even if it's just an earlier version of Solaris.
How do you migrate from a Solaris 8 zone to a Solaris 10 zone. The same way that you moved from the Solaris 8 physical box to the Solaris 8 branded zone. The steps should be the same. Implicite_Order pretty much said the same thing.
You seem to have a hang up on the words "normal zone." Yea I know, you've spent time and money and educated everyone and now your looking for the payoff. As I already stated and has been echoed by I_O, contact the vendor to see if they have Solaris 10 support, if they do, create a zone on a dev box, do some testing, and then create the zone on the real box, do the install, migrate the data. Just as you already did from the Solaris 8 box. If they don't have a Solaris 10 specific version you can still setup a test box, create a "normal" zone, install the app and some test data, make sure it works, and then create the "normal" zone, install the app, migrate the data, and relax.
alan

Solaris10 branded zone creation error on Solaris 11.1

Hello,
We are having the problem in creating the Solaris10 branded zone on the solaris 11.1 version. We are trying to install this branded zone using the solaris10 VM template. Please can some one through some pointers ?
The installation steps stops at "Waiting for boot to complete" but never successfully boots even waiting for long times. We can see that Zone status in configured only.
root@localhost:~# /home/solaris-10u10-sparc.bin -p /solaris10 -i net0 -a xxx.xxx.xxx.xxx -z zone10
This is an Oracle VM Template for Oracle Solaris Zones.
Copyright Â© 2011, Oracle and/or its affiliates. All rights reserved.
This software and related documentation are provided under a license
agreement containing restrictions on use and disclosure and are
protected by intellectual property laws. Except as expressly
permitted in your license agreement or allowed by law, you may not
use, copy, reproduce, translate, broadcast, modify, license,
transmit, distribute, exhibit, perform, publish, or display any
part, in any form, or by any means. Reverse engineering,
disassembly, or decompilation of this software, unless required by
law for interoperability, is prohibited.
Checking disk-space for extraction
Ok
Extracting in /root/bootimage.dnaqaD ...
100% [===============================>]
Checking data integrity
Ok
Checking platform compatibility
The host and the image do not have the same Solaris release:
host Solaris release: 5.11
image Solaris release: 5.10
Will create a Solaris 10 branded zone.
IMAGE: /home/solaris-10u10-sparc.bin
ZONE: zone10
ZONEPATH: /solaris10/zone10
INTERFACE: net0
VNIC: vnicZBI6783
MAC ADDR: 2:8:20:5c:92:f5
IP ADDR: xxx.xxx.xxx.xxx
NETMASK: 255.0.0.0
DEFROUTER: # # This file is deprecated. Default routes will be created for any router # addresses specified here, but they will not change when the underlying # network configuration profile (NCP) changes. For NCP-specific static # routes, the '-p' option of the route(1M) command should be used. # # See netcfg(1M) for information about network configuration profiles. #
TIMEZONE: Asia/Kolkata
Checking disk-space for installation
Ok
Installing in /solaris10/zone10 ...
100% [===============================>]
Using a static exclusive-IP
./setupSysidcfgStaticIP[50]: file/sysidcfg.zone10: cannot create [No such file or directory]
cp: cannot access file/sysidcfg.zone10
chmod: WARNING: can't access file/sysidcfg.zone10
Attaching zone10
Booting zone10
zoneadm: zone 'zone10': must be installed before boot.
Waiting for boot to complete
booting...
booting...
booting...
root@localhost:# zoneadm list -cv
ID NAME STATUS PATH BRAND IP
0 global running / solaris shared
4 zone1 running /zone1 solaris excl
5 zone2 running /zone2 solaris excl
- zone10 configured /solaris10/zone10 solaris10 excl
root@localhost:#
I have installed the package pkg:/system/zones/brand/brand-solaris10 on the system.
# cat /etc/release
Oracle Solaris 11.1 SPARC
Copyright (c) 1983, 2012, Oracle and/or its affiliates. All rights reserved.
Assembled 19 September 2012

Sorry, please ignore my previous message about the wrong ip address (I assume you entered a valid ip address).
The problem you are facing is related to the defaultrouter, and I assume you are running Solaris 11 update 1.
If so, to workaround the problem for the time being you may edit the /etc/defaultrouter file in the global-zone and enter the ip address of the default router (you can remove this change when the template deployment is completed).
If you have no idea about the default router ip address, just rename /etc/defaultrouter (e.g. to /etc/defaultrouter.orig) so that it cannot be found by the template. Again, you can undo the change when deployment is complete.
Thierry

Clock_highres_nonroot in branded zone

Hello All,
We've migrated a physical machine (Solaris 9) to a virtual via p2v in a Solaris 9 branded zone on a Sparc machine. One application is running as non root user, and needs a high resolution timer.
On the physical machine the lines:
set hires_tick = 1
set clock_highres_nonroot = 1
are placed in the /etc/system file. This works fine.
After a p2v the line for setting a high resolution clock for non-root users is commented as unsupported for the virtual machine.
When running the program as root user, it is allowed to create a high resolution timer. As non root user, it is not. The call: timer_create returns EPERM.
Is creating a high resolution timer as non root user in a branded zone not supported?
thank you!
regards,
Twan
Edited by: wan on Dec 7, 2008 9:03 AM

setting clock_highres_nonroot in the Solaris 10 global zone is not support by the kernel (10/2008).
In solaris 10 assigning the privileges to a user:
usermod -K defaultpriv=basic,proc_clock_highres userx
but this is not available in Solaris 9.
regards,
Twan

Cloning the branded zone

Hi
I have created a Solaris 10 branded zone on Solaris 11 SPARC system. Can I use clone option to clone the Solaris 10 zone to make a copy like we usually do with Sparse zones? Or is there any different way to clone the branded zones? Please point me to the document.
$ cat /etc/release
                            Oracle Solaris 11.1 SPARC
Copyright (c) 1983, 2012, Oracle and/or its affiliates. All rights reserved.
                           Assembled 19 September 2012
$ zoneadm list -iv
ID NAME             STATUS     PATH                           BRAND    IP
   0 global           running    /                              solaris shared
   1 s10-zone1        running    /zones/s10-zone1               solaris10 excl

okay. Thanks.
Is having the sysidcfg file mandatory for Branded zones? I think, I have never used them in the Sparse Zones. I had different files for configuration like /etc/defaultrouter, /etc/hosts, etc.. I guess in Branded zones, you do not need to have these files present or configured.. just have sysidcfg file, right? Or?

Clustering and Branded Zones

Similar Messages

Maybe you are looking for