Import a new service in a non-running zone from global zone

Hi All,
I have zones implemented in VCS. i need to import a new service in SMF. i can do that in the running node by logging into the zone server directly.
Now i want to know, how can i import this new service in the non running zone (hsoted in other node), so that the service starts automatically during the faile over also.
Thanks in Advance !!!!

You could do it just as if they were separate systems by using a network tool like RSH/SSH.
If the non-root account has permissions on the full path to to the zone files (that would be unusual), then it could directly copy them there. But normally the root of the zone is set for root only access.
# zoneadm list -iv
ID NAME STATUS PATH
0 global running /
8 zone1 running /export/zones/zone1
# ls -ld /export/zones/zone1
drwx------ 4 root root 512 Jan 10 09:10 /export/zones/zone1
Darren

Similar Messages

Running a command from local zone in global zone

hi,
Does anyone have a document on how I can tunnel into the global zone, run a command and receive the return value in the global zone? I am sure that there should be a mechanism for that but couldn't find any.
Thanks,
Babak

That's the opposite of what you asked in your first post. The global zone can run commands in non-global zones with zlogin.
global# zlogin zone-a /path/to/command" | ...
global# zlogin zone1 zonename
zone1
global# zonename
global{code}
Darren

How to copy file from global zone to non-global zone?

Hi,
I'm new in zone.
I have installed a zone and I would like to install some programs.
Could you please tell me how to copy downloaded file from internet to the new installed zone?
Kind regards,
Daniel

I like to use zcp which came from BigAdmin I believe.
#!/usr/bin/perl
# zcp - copy a file from the global zone to a nonglobal zone. Solaris 10.
# 10-Mar-2005, ver 0.50 (first release)
# USAGE: zcp file1 zonename:file2
# eg,
# zcp /etc/syslog.conf workzone1:/tmp
# Standard Disclaimer: This is freeware, use at your own risk.
# 10-Mar-2005 Brendan Gregg Created this.
$ENV{PATH} = "/usr/bin:/usr/sbin";
$VERBOSE = 1;
# Process arguments
# check for arguments,
if (@ARGV != 2) {
die "USAGE: zcp file1 zonename:file2\n";
# check source file exists,
$srcpath = $ARGV[0];
if (! -e $srcpath) {
die "ERROR1: Can't find source file $srcpath\n";
# check destination zone exists,
($destzone,$destpath) = split(/:/,$ARGV[1]);
chomp(@Zones = `zoneadm list`);
foreach $zone (@Zones) { $Zone{$zone} = 1; }
unless ($Zone{$destzone}) {
die "ERROR2: Can't find zone $destzone\n";
# check if destination is a directory or filename,
$dir = `zlogin -S $destzone '
if [ -d "$destpath" ]; then echo 1; else echo 0; fi'`;
if ($dir == 1) {
$node = $srcpath;
$node =~ s:.*/::;
$destpath = "$destpath/$node";
# Print message
print "zcp from $srcpath, to zone $destzone, to file $destpath.\n" if $VERBOSE;
# Copy File
system("cat $srcpath | zlogin -S $destzone 'cat - > $destpath'");
# Verify file copied
$srcsize = -s $srcpath;
$destinfo = `zlogin -S $destzone 'ls -l $destpath'`;
@Fields = split(' ',$destinfo);
$destsize = $Fields[4];
if ($srcsize != $destsize) {
print STDERR "ERROR3: Copy failed, size mismatch ".
"($srcsize != $destsize)\n";
} else {
print "Copy successful ($destpath, $destsize bytes).\n" if $VERBOSE;
}

How to know global zone in case non global zone is hung

....I have nongloabazone1,nongloabazone1,nongloabazone2,nongloabazone3...
i am working on nongloabazone1 ..
suppose i am giving remote support ...
if my nongloabazone1 is hung ..i need to know the global zone on which this nongloabazone1 is installed and reboot from there ...if my nongloabazone1 is hung i cannot apply #arp -a and check it out by trial and error method and know the global zone....
in this case how can i reboot the nongloabazone1 .....i have the same question in case of Ldoms also..............
Thanks in Advance.......

Hi.
It's not clear what means "non global zone is hung".
In case it realy hangs you can't do anythins in this zone.
1) In case you have access to global zone. You can get list all zones running on this host:
zoneadm list -cv
For reboot local zone from global zone just need: zoneadm -z <zone_name> reboot
2) Zones not support live migration. So after zone started it can not change global zone.
Create script that put global zone name in file. When need - just read content of this file.
This file can be created from global zone when start (or create/move) local zone.
In case zone migration is not quickly operation, just create file (or database) for list what zone started on which host.
For LDOM it look wery same.
Regards.

NFS and non global zones

Hi,
Ive read numerous threads about mounting NFS shares to non global zones but have still not been able to successfully resolve my issue.
I have 5 T3-2's which are being used as standalone SAP servers running Solaris 10u9 and numerous sparse non global zones. Basically I have a 1Tb HDS LUN presented to 1 T3-2 and have NFS shared this out as /stage to the remaining 4 global zones which works as expected.
However I am unable to mount the shared NFS filesystem to the non global zones.
When I try to mount the NFS share from the non global zone itself I receive RPC errors, I have also tried configuring the non global zone with the NFS mount (from the global zone) as lofs but the zone wont boot and also manually mounting the NFS mount from the global zone which looks like it works but when I do a df on the non global zone I receive stat erros.
Ive even tried linking the NFS share on the global zone to the non global zone directory but that produces a strange linkage when the zone is booted.
Numerous threads say this is not supported but I cant believe Oracle after ~6/7 years of zones and numerous threads on the subject wouldnt have resolved this issue.
I could easily locally mount the storage locally and lofs it to the non global zone but unfortunately dont have the storage capacity available which is why I thought NFS mounting to the non global zone would work!!
Any suggestions would be gratefully received!
Thanks.

If you are trying to mount NFS file system on non-global zone from global zone of the same server, use lofs instead.
You can mount the same file system to all non-global zones using lofs and all non-global zones have read/write access to it.
If it is global zone of some other server then you can use NFS. But before that check the way it is exported on NFS server whether the client from which you are trying to mount it has permissions to do so.

Adding a cdrw to a non-global zone

Hi all,
I am attempting to add a cdrw on a laptop running Solaris 10 to a
non-global zone via the following (after browsing the archives of this
list as well as related forums and documentation):
"cdrw -l" when run in the global zone reports
"/dev/rdsk/c1t0d0s2" as the sole CD writer attached. I have previously
burnt cdr(s) using this, so the functionality of the drive is not an issue.
I then proceeded to configure a zone, "zulu01", and added a device via
the following using zonecfg (I have omitted the other configuration data
which is standard, root path, standard inherit-pkg-dir)
"add device"
"set match=/dev/rdsk/*"
"end"
"commit"
"verify"
I then installed the zone
"zoneadm -z zulu01 install"
zoneadm does the usual and reports success.
I boot the zone
"zoneadm -z zulu01 boot"
and login via "zlogin -C zulu01"
Inside zulu01, running "cdrw -l"
reports "No CD Writers found."
a "ls /dev/rdsk" shows that c1t0d0s2 is present.
I am aware that adding such a device is not recommended, but it is
supposedly possible?
Please advise on what I am doing wrong, or is it not possible to add a
cdrw to a non-local zone?
Thanks in advance.
Regards,
Jeremy.

This should work. A shot in the dark: can you try with another tool than cdrw, cdrecord for example? Also make sure that volume management is not running in the global zone (/etc/init.d/volmgt stop).
Blaise

LDAP Client Configuration in Non Global Zone

I have configured 3 non global zones (different ip addresses and different names from global zone), installed LDAP client 2 on each, which worked fine, until the zones were rebooted. The ldapcachemgr was running, but authentication does not work--have to reinstall ldapclient each time.
Does anyone have any suggestions?

Here are a few things to check:
1. /var/ldap/ldap_client_file - Does it have the info you're expecting? If not, it could be the config profile in the Direcotry Server is incorrect.
2. /etc/nsswitch.conf - Is it configured correctly?
3. /etc/pam.conf - Is that configured correctly?
4. If the above files appear OK, check the access logs on the Directory Server.
HTH,
Roger S.

How to unlock Root Account in non-global zone on Solaris 10 Branded Zone

Hello All,
I have a phsical x86 server running Solaris 11. On top of that, I have 3 Solaris 10 branded zones configured. Due to security policy the root account has been locked by 5 failed login attempts.
Is there a way by which I can unlock root account in non-global zone.
I have the root access of global zone.
Pls help as these are production servers.
Regards

Hey,
It worked. Actually i forgot to save the file.
I changed the /<zonepath>/root/etc/shadow
Removed *LK* & then from global zone did zlogin -l root zonename
Thanks lot.

FilesystemMountPoints for ufs disks mounted to non-global zones

Hello,
I have a SAN ufs disk to be used as a failover storage, mounted to non-global zones (NGZ).
Solaris 10 nodes using Cluster 3.2
I'm looking for the correct value for the property FilesystemMountPoints and the vfstab entry required for a failover disk mounted to a NGZ.
Should the path NOT include the NGZ root path?
From the man page for SUNW.HAStoragePlus, for the property FilesystemMountPoints:
You can specify both the path in a non-global zone and the path in a global zone, in this format:
Non-GlobalZonePath:GlobalZonePath
The global zone path is optional. If you do not specify a global zone path, Sun Cluster assumes that the path in
the non-global zone and in the global zone are the same. If you specify the path as
Non-GlobalZonePath:GlobalZonePath, you must specify Global-ZonePath in the global zone's /etc/vfstab.
The default setting for this property is an empty list.
You can use the SUNW.HAStoragePlus resource type to make a file system available to a non-global zone. To enable
the SUNW.HAStoragePlus resource type to do this, you must create a mount point in the global zone and in the
non-global zone. The SUNW.HAStoragePlus resource type makes the file system available to the non-global zone
by mounting the file system in the global zone. The resource type then performs a loopback mount in the
non-global zone.
Each file system mount point should have an equivalent entry in /etc/vfstab on all cluster nodes and in all
global zones. The SUNW.HAStoragePlus resource type does not check /etc/vfstab in non-global zones.
SUNW.HAStoragePlus resources that specify local file systems can only belong in a failover resource group
with affinity switchovers enabled. These local file systems can therefore be termed failover file systems. You
can specify both local and global file system mounts points at the same time.
Any file system whose mount point is present in the FilesystemMountPoints extension property is assumed to
be local if its /etc/vfstab entry satisfies both of the following conditions:
1. The non-global mount option is specified.
2. The "mount at boot" field for the entry is set to "no."
In my situation, I want to mount the disk to /mysql_data on the NGZ called ftp_zone. So, which is the correct setup?
a. FilesystemMountPoints=/mysql_data:/zones/ftp_zone/root/mysql_data
Global zone vfstab entry /dev/md/ftpabin/dsk/d110 /dev/md/ftpabin/rdsk/d110 /zones/ftp_zone/root/mysql_data ufs 1 no logging
NGZ mount point /mysql_data
OR
b. FilesystemMountPoints=/mysql_data:/mysql_data (can be condensed to simply /mysql_data)
Global zone vfstab entry /dev/md/ftpabin/dsk/d110 /dev/md/ftpabin/rdsk/d110 /mysql_data ufs 1 no logging
NGZ mount point /mysql_data
Should the path NOT include the NGZ root path?
And should the fsck pass # be 1 or 2?
Looking at this example from p. 26 of
http://wikis.sun.com/download/attachments/24543510/820-4690.pdf
This example doesn't mention the entry in vfstab.
Create a resource group that can holds services in nodea zonex and nodeb zoney
nodea# clresourcegroup create -n nodea:zonex,nodeb:zoney test-rg
Make sure the HAStoragePlus resource is registered
nodea# clresourcetype register SUNW.HAStoragePlus
Now add a UFS [or VxFS] fail-over file system: mount /bigspace1 to failover/export/install in NGZ
nodea# clresource create -t SUNW.HAStoragePlus -g test-rg \
-p FilesystemMountPoints=/fail-over/export/install:/bigspace1 \
ufs-hasp-rs
Thank you!

Hi,
/zones/oracle-z is my root directory of the zone.
* add the device to the zone :
root@mpbxapp1 # zonecfg -z oracle-z
zonecfg:oracle-z> add device
zonecfg:oracle-z:device> set match=/dev/global/dsk/d12s0
zonecfg:oracle-z:device> end
zonecfg:oracle-z> add device
zonecfg:oracle-z:device> set match=/dev/global/rdsk/d12s0
zonecfg:oracle-z:device> end
zonecfg:oracle-z> exit
* add FS to NGZ's /etc/vfstab : ( You may omit this step, I don't know why but it works without this step :) )
root@mpbxapp1 # vi /zones/oracle-z/root/etc/vfstab
/dev/global/dsk/d12s0 /dev/global/rdsk/d12s0 /global/oracle ufs 1 no logging
* add FS to global zone's /etc/vfstab :
root@mpbxapp1 # vi /etc/vfstab
/dev/global/dsk/d12s0 /dev/global/rdsk/d12s0 /zonefs/oracle ufs 1 no logging
* set the FilesystemMountPoints property :
root@mpbxapp1 # /usr/cluster/bin/clresource set -p FilesystemMountPoints=/global/oracle:/zonefs/oracle oracle-hastp
Whit this configuration you may ensure that the FS is not directly accessible from master zone. Actually, it's accessible but with a different PATH. For example, for Oracle, from the master zone Oracle can not be started/stopped because the controlfile can not be accessed. :)
Hope this helps,
Murat

Always install applications into non-global zones?

I am planning on taking full advantage of Containers and Zones as I migrate servers and applications to Solaris 10. During this migration process, I believe that I will have a need to initially just run just one application on a server. I fear that if I do this in the global zone I will lose flexibility down the road for future projects and workloads. So, should I consider always installing applications in a non-global zone and never install applications in the global zone? This would keep the global zone as the controller of the non-global zones and ensure that I can always add more non-global zones later without having to worry about what is running in the global zone.
Are there any thoughts or comments on this topic?

Yes we've found it's best to run the applications in non-global zones. Here are a few benefits, basically we only put an application in the global zone if it requires it (like Oracle RAC). Note non-RAC instances of Oracle will run in a non-global zone just fine.
Reasons to put applications in non-global zones
o Increased security (self contained environment)
o Increased flexibility for provisioning resources (CPU, memory, etc) when/if we decide to run multiple applications on the same hardware
o Increased flexibility in starting up temporary environments to debug issues in parallel to the primary environment (i.e. in another non-global zone on the same server)
o Works well with Sun Cluster (i.e. we cluster the non-global zones so that they can run across several hosts)
o Improved trouble shooting and performance diagnosis as the applications are isolated to a non-global zone
o Simplified environment for the application admins as the environment can be fine tuned for their needs (i.e. only let them see what they need)
o Disaster recovery is much faster for a non-global zone

Running VMware Server 2 services as a non-root user

Hello,
I have switched from VirtualBox to VMware Server 2 on my Arch64 server and the transition has been relatively painless. I am at the point now where I want to run VMware's services as a non-root user account (I have a service account called "svc-vmadmin" that I'd like to use). I'm generally not comfortable running services as root, but at the same time I'm conscious of the time and effort required vs. overall benefits.
I've done the usual Google searches and even checked the VMware Server 2 user guide and the VMware community, but I can't find specific details on how to achieve this.
Is this even plausible in a Linux environment? I used to run VMware Server 1 under the SYSTEM account on Windows Server, so I'm hopinga similar thing can be done on Arch.
I would greatly appreciate any information or personal experience that fellow Archers can share.
Thanks,
Thom

System services are handled by launchd.
If you look in /System/Library/LaunchDaemons/ you'll see a plist file for each service including org.isc.named.plist, the plist for named.
If you edit this file you'll see it's an XML document that describes the service and how the OS should handle it, including the part:
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/named</string>
<string>-f</string>
</array>
Just append another entry in the array that says <string>-u nobody</string> (or whatever username you want to run as.

I have a new iPad wi-fi lte 16gb.when I try to sync thru I tunes it keeps on accessing I tunes stores.i have windows xp service pack 3.after running diagnostics it showed iTunes secure connection failed.unable to sync completely even once. Plz help.thanks

I have a new iPad wi-fi lte 16gb.when I try to sync thru I tunes it keeps on accessing I tunes stores.i have windows xp service pack 3.after running diagnostics it showed iTunes secure connection failed.unable to sync completely even once. Plz help.thanks

I'd try the following document:
Apple software on Windows: May see performance issues and blank iTunes Store
(If there's a SpeedBit LSP showing up in Autoruns, it's usually best to just uninstall your SpeedBit Video Accelerator.)

Why wont this RUN and Set a New-Service..?

PS C:\WINDOWS\system32> New-Service -Name RunSafe -BinaryPathName C:\Users\3steveco33_01\Skydrive\Documents\Adminstartup.ps1
-DisplayName 'Active Protraction Service' -Description Safety and Security -StartupType Manual -Credential 'Admin_01' -Depen
New-Service-NameRunSafe-BinaryPathNameC:\Users\3steveco33_01\Skydrive\Documents\Adminstartup.ps1-DisplayName'*******
********** ******* '-DescriptionSafetyandSecurity-StartupTypeManual-Credential'Admin_01'-DependsOnSystem
dsOn System
New-Service : A positional parameter cannot be found that accepts argument 'and'.
At line:1 char:1
+ New-Service -Name RunSafe -BinaryPathName C:\Users\3steveco33_01\Skydrive\Docume ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidArgument: (:) [New-Service], ParameterBindingException
+ FullyQualifiedErrorId : PositionalParameterNotFound,Microsoft.PowerShell.Commands.NewServiceCommand
As can be plainly seen here there is no positional paraaaaameter with the argument and as indicated in the error message...WTF
s.mcknight
As can be plainly seen here there is no positional paraaaaameter with the argument and as indicated in the error message...WTF It work yesterday...I deleted it last night with a successful operation message and today this....it is more than frustrating....I
am clever, tenacious and persistent...and this one now has me stumped...!

Hi S.mcknight,
It seems you have solved this issue, if there is anything else regarding this iisue, please feel free to post back.
If you have any feedback on our support, please click here.
Best Regards,
Anna Wang
TechNet Community Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Problem while importing a web service model.

Hi
I am building a simple send email application using a web service.
While creating a new model i am using following options.
step 1 - Select "Import Adaptive web service model"
step 2 - Select Wsdl Source
2.1 - Local file system or URL
Step 3 - No logical destination
step 4 - choose wsdl file from file system.
Process successfully done and model created.
BUT
when i am trying to run this application it is throwing file not found exception. i.e. not able to locate wsdl file.
java.io.FileNotFoundException: C:\AbysalEmail.wsdl (The system cannot find the file specified)
I am using remote network connection to access NWDS. and in remote drive C: itself i have saned my file.
Then Why it is not able to locate my file.
Please Help me out.
Thanks.

Hi
I have provided in J2EE Engine visual administrator under
Web Services Security -> Dynamic web services proxies
following configuration.
I have created a new Dynamic web service proxie.
And in it under connection settings -> URL i have specified
http://<host>:<port>/
Above is host name and potr from where my WebDynpro application runs.
But my file is located in C:\
I think i am unable to set mapping configuration
from
http://<host>:<port>/
to
C:\
Where shall i ten keep my WSDL file.!!!
Thanks.
Edited by: Saurabh Agarwal on Jul 30, 2008 1:34 PM

Why does 'User not registered for online use' show up when I try to import a cd into itunes. None of the cd info shows up either

Why does 'User not registered for online use' show up when I try to import a cd into itunes? None of the cd info shows up either.

Well, the format I upload from the camera is "video clip" or "video for Windows"...sometimes I've converted them to avi format, too. But as I said, it never even lets me get that far...I never get to even select a clip. As soon as I tell the program to "import/clip" it freezes up before I can even go to the folder that the clips are in. It has only begun to do this recently, and I'd never had any problems like this before. Last night I tried it again, and I clicked "open composition", and it froze when I did that too.
I'm not sure how much more specific I can be about the details of the clips, since I'm positive it has nothing to do with the clips themselves...I'm running Windows XP, though...Home Edition Service Pack 2, Pentium 4 CPU 2.80GHz, with 504 MB of RAM. I have had the automatic updates turned on since I did my last reformat a couple of weeks ago. Could it have something to do with some kind of an update it may have done?

Import a new service in a non-running zone from global zone

Similar Messages

Maybe you are looking for