NFS in local zone

Hi,
Has anyone tried mount an NFS share into a zone?? I am unable to lofs or manually mount..
root@NFS_SERVER # share -F nfs -o rw /stage
root@LDOM1 # mount -F nfs -o rw NFS_SERVER:/stage /stage
Then try and mount /stage into the local zone - doesnt seem to work:
root@LDOM1 # zoneadm -z localzone boot
cannot verify fs /stage: NFS mounted file-system.
A local file-system must be used.
zoneadm: zone localzone failed to verify
root@LDOM1 #
Thanks.

I'm not sure what you're trying to do. It sounds like you're trying to mount a NFS filesystem in the global zone and then reference it somehow via the zone configuration as though it was a local filesystem. If so, I can't comment on whether that will work or not because I've no experience with that approach. What I have done successfully is to mount NFS filesystems via /etc/vfstab or automount inside the zone. That works just fine and it is done using exactly the same procedures as you'd use to mount NFS filesystems in the global zone.

Similar Messages

How to mount NFS into a zone or how to use the same IP in every zone?

Hi,
we are using a NFS server in a different subnet (= different network interface; nxge1) than our 'normal' network (= nxge0).
Now I want to mount serveral NFS directories into our zones.
First I thought the follwoing is possible:
In the global zone I just mount the filesystem into its place:
mount 10.11.3.1:/vol/vol_nfs_zones/zoneNNN_mnt /zones/zoneNNN/root/mnt
When the zone is halted this mount works, but when I start the zone, I receive the error:
# zoneadm -z zoneNNN boot
zoneadm: zone 'zoneNNN': These file-systems are mounted on subdirectories of /zones/zoneNNN/root:
zoneadm: zone 'zoneNNN': /zones/zoneNNN/root/mnt
zoneadm: zone 'zoneNNN': call to zoneadmd failed
When zoneNNN is already running and I try to mount it, I receive
nfs mount: mount: /zones/zoneNNN/root/mnt: Device busy
So the question is: How do I mount something in the gloabl zone from a NFS server into a zone?
The only alternative I see is to make the interface nxge1 available in every zone and give each an own IP in our storage network... But sadly this isn't an alternative because we don't have so many free IPs in that net! (Or is there a trick to use the same IP in the global and non-global zones for only this interface??)
Does anyone have a solution for our problem? I cannot believe that SUN misses this!
Any hints are more than welcome!

Mounting it by NFS in the global zone and trying to add this by the "add fs" and "type=lofs"-option yields to an error, when installing the zone:
cannot verify fs /data: NFS mounted file-system.
A local file-system must be used.
zoneadm: zone zoneNNN failed to verifyOur storage network is not accessable from other nets. (And I think it is a very bad idea to route storage network traffic...)
So I think we def. have to increase our storage network. :-(

Solaris 10, local zone & vcs

Hi,
Anybody tried running vcs from within a solaris 10 sparse local zone?
We currently have two T2000' s each running Solaris 10 6/06. I've installed Veritas Foundation Suite 4.1 on each and configured vcs. The cluster is functioning with failover enabled & tested. (I have a test service group running consisting of a 'hello world' program sitting on a VRTS volume/diskgroup on a SAN). This is all running fine in the Global Zone.
As part of our requirement we want to be able to run vcs from within a local zone, hence my creation of a sparse zone. I would like full clustering functionality running from within a zone on one server with failover/switching to an equvialent zone on the the second server.
I have played with the 'zone' option when setting up service groups but not surprisingly this is for switching the whole zone. Not what I want to do.
Am I failing to grasp this whole sparse zone idea? or am I missing something obvious, trying something that cant be done? Any help, particularly from somebody else thats tried this would be appreciated.
Thansk in advance,
Mark

Hello,
I can't help you a lot, but i have found that there is a lot of things that a local zone can't do when it comes to "kernel" things. As of today i found that you do NFS from a zone, for example.
As your problem seems to be related to filesystem it is probable that you can't do it from a zone. Again, i'm not sure.

Audit is enable in local zone

Audit is enabled and working fine in Global zone.
root@MMS11:/var/audit# uname -a
SunOS MMS11 5.11 11.2 sun4v sparc sun4v
root@MMS11:/var/audit#
root@MMS11:/var/audit#
root@MMS11:/var/audit# pkg info entire
          Name: entire
       Summary: entire incorporation including Support Repository Update (Oracle Solaris 11.2.3.4.1).
   Description: This package constrains system package versions to the same
                build. WARNING: Proper system update and correct package
                selection depend on the presence of this incorporation.
                Removing this package will result in an unsupported system. For
                more information see
                https://support.oracle.com/rs?type=doc&id=1672221.1.
      Category: Meta Packages/Incorporations
         State: Installed
     Publisher: solaris
       Version: 0.5.11 (Oracle Solaris 11.2.3.4.1)
Build Release: 5.11
        Branch: 0.175.2.3.0.4.1
Packaging Date: October 2, 2014 10:39:23 PM
          Size: 5.46 kB
          FMRI: pkg://solaris/[email protected],5.11-0.175.2.3.0.4.1:20141002T223923Z
root@MMS11:/var/audit#
root@MMS11:/var/audit# ls -lhtr
total 34343
-rw-r-----   1 root     root        400K Apr 7 16:41 20150407134107.20150407134155.MMS11
-rw-r-----   1 root     root         11M Apr 7 17:21 20150407134157.20150407142120.MMS11
-rw-r-----   1 root     root        5.5M May 4 13:57 20150504103940.not_terminated.MMS11
root@MMS11:/var/audit#
root@MMS11:/var/audit# ls -lhtr /var/adm/auditlog
-rw-r-----   1 root     root        1.0M May 4 13:57 /var/adm/auditlog
root@MMS11:/var/audit# audit -s
root@MMS11:/var/audit# zoneadm list -cv
ID NAME             STATUS      PATH                         BRAND      IP
   0 global           running     /                            solaris    shared
   5 MMS_NG         running     /zones/MMS_NG              solaris    shared
=======================================================
but I am unable to enable audit on local zone.
I have following
root@MMS11:/var/audit# zlogin MMS_NG
[Connected to zone 'MMS_NG' pts/14]
Oracle Corporation      SunOS 5.11      11.2    September 2014
You have mail.
root@MMS_NG:~#
root@MMS_NG:~#
root@MMS_NG:~# audit -s
audit: Neither local nor remote auditing is configured in the non-global zone.
root@MMS_NG:~#
root@MMS_NG:~# audit -n
audit: Neither local nor remote auditing is configured in the non-global zone.
root@MMS_NG:~# cd /var/audit
root@MMS_NG:/var/audit# ls -lhtr
total 94399
-rw-r-----   1 root     root        149M Apr 7 16:40 20150208124745.not_terminated.MMS_NG
How I can enable audit in NG zone, I want to enable audit logs with syslog service. as enabled and configured on Global Zone.

I'm not sure why Ur looking for /etc/system in zones..
now in soalris 10u10 /soalrs 11..you can configure the kernel parameters as application/user specific
you can use projadd command to add the resources like shared memory
if you want add the parameters as global you can use
zonecfg
you can refer this doc what parameters u can add to zone with zonecfg
http://docs.oracle.com/cd/E19455-01/817-1592/z.config.ov-1/index.html
zone.cpu-shares (preferred: cpu-shares)
zone.max-locked-memory
zone.max-lwps (preferred: max-lwps)
zone.max-msg-ids (preferred: max-msg-ids)
zone.max-sem-ids (preferred: max-sem-ids)
zone.max-shm-ids (preferred: max-shm-ids)
zone.max-shm-memory (preferred: max-shm-memory)

How to create raw partition in a local zone?

I tried to search for an answer for my question, but I spent a week and still no luck.
What I am trying to do is to create raw partitions for Sybase in a local zone. I tried to add device and set match to the block and raw device.
However, when I tried to do "format", I got core dumped. When I did zpool create, I got permission denied. Any advice?
zonecfg:z001> info
zonename: z001
zonepath: /export/ZONE/z001
autoboot: true
pool:
limitpriv:
fs:
dir: /shared/tmp
special: /tmp
raw not specified
type: lofs
options: []
net:
address: 10.110.1.2
physical: e1000g1
device
match: /dev/rdsk/c6t60060160DF2413003E2F0C2DF945DC11d0
device
match: /dev/dsk/c6t60060160DF2413003E2F0C2DF945DC11d0

You can't manipulate pools directly in a non-global zone. I'm not sure if you can run 'format'. You can use at least a limited amount of globbing. You might want to put a '*' at the end of your matched device name.
You can hand off a raw partition via 'match' and put it under UFS control, or with recent versions of Solaris Express, you can delegate a portion of a ZFS filesystem to the zone.
See the ZFS administration guide:
http://www.opensolaris.org/os/community/zfs/docs/zfsadmin.pdf
Especially the section on using ZFS in a zone (page 171). Note the guide is for the most recent version of ZFS in OpenSolaris. Versions available in Solaris 10 may not have all the same features.
Darren

How do you create a local zone that's not "stripped down"?

Hi all,
I've been exploring Solaris 11 Express a bit more after work, and I can't figure out how to create a new local zone that doesn't have a minimized package set. The ISV guide mentions that new local zones default to "minimal system software":
http://www.oracle.com/technetwork/articles/systems-hardware-architecture/o10-015-s11-isv-adoption-198348.pdf (page 6)
...but that I can specify additional packages with the "-e" flag during the zone install. I don't want to list dozens of supplemental packages by hand... there must be a way to make a new local zone that has an almost identical package loadout as a standard global zone. (i.e. ftp, smtp, telnet services exist in the global zone, but are not installed in a local zone).
Do I need to use ips commands to first make an image (of a global zone) then update my local zones to that image?
Thanks!
Mike

Thanks Russell, this sounds exactly like what I was looking for! I'm "zoneadm install"'ing a new zone right now to kick the tires. One note for everyone else:
pkg install -r slim_installI got an error that "-r" isn't a valid flag for pkg, but it seems to be working without it (i.e. "pkg install slim_install")
Regards,
[email protected]

First boot of local zone - how to determine when sysidtool has finished

Hello,
we use a /etc/sysidcfg in order to do the solaris base configuration automatically. After the first boot of a local zone I recognized that some tools are started by solaris (sysidtool, etc.) which apply the settings mentioned in /etc/sysconfig.
Since we want to script some post-install set-ups I need to know, when the first boot including all "first-boot-scripts" has completely finished. Is it possible to query this information, maybe by calliing a special tool or by looking up some string within an logfile?
I would be grateful for any hints,
Thomas

I haven't checked, but I assume they have normal dependencies in the SMF tree so that other services don't start until they complete.
I would probably look at the milestone/multi-user-server service and see if it's online yet. If it is, they're probably done.
Darren

How to dynamically set max-rss size for a local zone?

Running solaris 10 05/08.
Following situation: Three local zones in a Veritas cluster. The zones
can fail over but normally not all three are on the same physical box.
I want to be able to restrict physical memory usage for the zones in
situations where certain combinations of them end up on the same
physical box. So, I need to be able to dynamically change memory
resources. I know how to do this with, for example locked memory:
prctl -n zone.max-locked-memory -r -v <mem> `pgrep -z <zone name>
init`
but i need to do this for physical memory and I can't see that there
is a zone resource for this? I thought this was added in 05/08?

Hi
You can do this by using rcapd from the global zone
- start rcapd from the global zone:
svcadm enable svc:/system/rcap:default
- set a physical memory caping value for each zone
rcapadm -z your_zone -m max_rss_value
- check the memory use for all the zone capped
rcapstat -gz
You can set the rss capping value in the zone configuration:
# zonecfg -z your_zone
zonecfg:busi-app-prod> add capped-memory
zonecfg:busi-app-prod:capped-memory> set physical=900m
zonecfg:busi-app-prod:capped-memory> end
zonecfg:busi-app-prod> verify
zonecfg:busi-app-prod> commit
zonecfg:busi-app-prod> exit
This will be take in account at the next reboot of this zone.
Have a also a look to rcapadm to tune rcapd
Bye
Fred

Solaris 10 local zone setup requirement/steps for am/ps 7.0 installation

Hi,
Is there any document available on solaris 10 local zone creation/requirement for am server/ portal server 7.0 install? Any help/pointer is appreciated.
Thanks,

I don't believe there is any specific documentation am/portal in a zone. And as far as I know there are no specific requirements either. I have successfully installed portal in a solaris zone.
A good starter tutorial on zones is here: http://partneradvantage.sun.com/protected/solaris10/adoptionkit/tech/zones/tutorial.html
Hi,
Is there any document available on solaris 10 local
zone creation/requirement for am server/ portal
server 7.0 install? Any help/pointer is
appreciated.
Thanks,

Solaris 10, java, local zone and priority

Hi,
I have asked this on the Solaris 10/Zone forum 4 days ago but didn't
get any response. Maybe I get better luck here?
I have a jboss container running like a dog. It's running on a niceness
of 10 (by default - why?); renice fails with
$ renice -n 0 1635
renice: 1635:setpriority: Not owner
How do I fix that, and how can I get jboss to run with a niceness of
0 or 1 at startup?
I did manage to up the niceness manually from the global zone, but that's
not really an option once the system goes production. How/where do
I set java tasks to run with a sensible priority by default?
It appears that anything java (even within the global zone) runs on a
niceness of 20 (10 is what we see inside a local zone, the global will
report 20 in prstat).
Cheers

I removed this file,/usr/lib/libmlib/libmlib_sse.so.2, but I can't still use java desktop...
is there any other solution?

Install NetConnect in Global Zone of Solaris 10 x86 with 5 local zone fail

Problem:
Install NetConnect in Global Zone of Solaris 10 x86 with 5 local zone failed
But I didn't have any issue with the same pkg in Solaris 9
Steps taken:
# groupadd netcon
# useradd -d /export/home/netcon -g netcon -m netcon
# vi /etc/shadow
change LK to NP
# ./UninstallNetConnect.003.002.001.sh
# ./InstallNetConnect.003.002.001.sh
Enter the user account to use: netcon
Enter group: netcon
Installing Sun(SM) Net Connect Proxy Core as <SUNWsrspx>
## Installing part 1 of 1.
/etc/opt/SUNWsrspx/CustomerCert.pem
/etc/opt/SUNWsrspx/SRSCACert.pem
/etc/opt/SUNWsrspx/binaries
/etc/opt/SUNWsrspx/srsproxyconfig.cfg
/opt/SUNWsrspx/bin/srsexec
/opt/SUNWsrspx/bin/srsinstall
/opt/SUNWsrspx/bin/srsinstallmode
/opt/SUNWsrspx/bin/srsproxy
/opt/SUNWsrspx/bin/srspxrun
/opt/SUNWsrspx/bin/srspxstat
/opt/SUNWsrspx/bin/srspxtrace
/opt/SUNWsrspx/bin/srsuser
/opt/SUNWsrspx/bin/srsxfer
/opt/SUNWsrspx/lib/srsimapi.jar
/usr/lib/libsrsimapi.so.1
[ verifying class <none> ]
## Executing postinstall script.
copying initial install customer cert into place
copying initial install srs cert into place
copying initial install proxy config file into place
removing any existing uninstallscript before copying the correct one
copying uninstall script into place
/var/sadm/pkg/SUNWsrspx/install/postinstall: /opt/SUNWsrspx/bin/srspxrun: cannot execute
proxy queue initialization failed
pkgadd: ERROR: postinstall script did not complete successfully
Installation of <SUNWsrspx> failed.
ERROR: pkgadd failed for: SUNWsrspx
Please correct this situation and rerun the installation.
Exiting installation.
# cat /var/adm/messages
Oct 7 00:00:01 planet root: [ID 702911 daemon.error] ERROR: proxy queue initialization failed
Any clue, or it will only possible in Global zone that didn't have any local zone
thanks in advance

Problem:
Install NetConnect in Global Zone of Solaris 10 x86
with 5 local zone failed
But I didn't have any issue with the same pkg in
Solaris 9
Steps taken:
# groupadd netcon
# useradd -d /export/home/netcon -g netcon -m netcon
# vi /etc/shadow
change LK to NP
# ./UninstallNetConnect.003.002.001.sh
# ./InstallNetConnect.003.002.001.sh
Enter the user account to use: netcon
Enter group: netcon
Installing Sun(SM) Net Connect Proxy Core as
<SUNWsrspx>
## Installing part 1 of 1.
/etc/opt/SUNWsrspx/CustomerCert.pem
/etc/opt/SUNWsrspx/SRSCACert.pem
/etc/opt/SUNWsrspx/binaries
/etc/opt/SUNWsrspx/srsproxyconfig.cfg
/opt/SUNWsrspx/bin/srsexec
/opt/SUNWsrspx/bin/srsinstall
/opt/SUNWsrspx/bin/srsinstallmode
/opt/SUNWsrspx/bin/srsproxy
/opt/SUNWsrspx/bin/srspxrun
/opt/SUNWsrspx/bin/srspxstat
/opt/SUNWsrspx/bin/srspxtrace
/opt/SUNWsrspx/bin/srsuser
/opt/SUNWsrspx/bin/srsxfer
/opt/SUNWsrspx/lib/srsimapi.jar
/usr/lib/libsrsimapi.so.1
[ verifying class <none> ]
## Executing postinstall script.
copying initial install customer cert into place
copying initial install srs cert into place
copying initial install proxy config file into place
removing any existing uninstallscript before copying
the correct one
copying uninstall script into place
/var/sadm/pkg/SUNWsrspx/install/postinstall:
/opt/SUNWsrspx/bin/srspxrun: cannot execute
proxy queue initialization failed
pkgadd: ERROR: postinstall script did not complete
successfully
Installation of <SUNWsrspx> failed.
ERROR: pkgadd failed for: SUNWsrspx
Please correct this situation and rerun the
installation.
Exiting installation.
# cat /var/adm/messages
Oct 7 00:00:01 planet root: [ID 702911 daemon.error]
ERROR: proxy queue initialization failed
Any clue, or it will only possible in Global zone
that didn't have any local zone
thanks in advance
[I believe that it does not work in x86, watches with pkginfo - l SUNWsrspx, in the platform.
Willy Suarez
Sopport UNIX
Colombia/code]

Install SMC Server 3.6 in Sol 10 local zone?

Dear all,
Is it possible to install and running SMC Server 3.6 in local zone with whole root (not sparse) steup?
thanks

Is it possible to install and running SMC Server 3.6
in local zone with whole root (not sparse) steup?Right now the only part of SunMC that can run in a zone is the SunMC Agent. The Server can only be installed into the global zone. But it's a pretty good bet that you'll be able to do it with a future version of SunMC.
Regards,
[email protected]

Local zones during global shutdown in Solaris 10

Hello,
I am trying to determine if issuing a shutdown command from the global zone, e.g. shutdown -g0 -i5 -y performs graceful shutdowns on any running local zones, or does it issue a halt to the local zones without running shutdown scripts in them. Searching the Solaris zones forum brings up some older discussions (pre 2010) where users reported a halt was done, but the expectation is this would be changed in later Solaris 10 patches or revisions. Has this ever been addressed? Is there a way to determine if a local zone has been halted or shutdown? What is the recommended way to perform a shutdown of a global zone, when local zones are running?
Thanks,

The global zone will run a "svcadm disable zones" for each zones and this corresponds to a "zoneadm shutdown" or "zoneadm halt". Both zoneadm command will use a "init 0" in each zone.
If you have a zone that requires a shutdown script to stopping for example a database gracefully, then you should run the shutdown inside each zone directly.

Network access from local zones on a Solaris 10 router

I'm kind of stuck at an interesting problem.
I have a Solaris 10u6 system which is itself a router between a number of networks.
It has several dozen routes to different networks via different next-hop gateways,
just one of which is a default route to the ISP to internet.
I thought of setting up local zones to securely run infrastructure services (BIND,
Squid, Mail relay) on this machine, with only a single dedicated public IP address
(from our delegated address space) per such zone. Zones use a shared-IP stack
on one of the machine's VLAN interfaces (the LAN part with public IP addresses).
The problem is - since this machine is the gateway for the subnet used for the
local zones, they don't inherit any default route. The one default we have to the
ISP is on another interface's subnet.
[root@ns8 /]# netstat -rn | grep default
[root@ns8 /]# netstat -rn | wc -l
50
On a side note, these zones do inherit dozens of other routes (50 above) with
next-hop routers not on the local zone's subnet - so these are also not accessible.
I think such useless routes should also be filtered away - as "mismatching" default
routes are.
Due to all this the zone has no networking outside its subnet/mask: it doesn't
even try to send anything, since there is not a single route with a matching next
hop router, i.e.
[root@ns8 /]# traceroute -nI 194.87.0.50
traceroute to 194.87.0.50 (194.87.0.50), 30 hops max, 40 byte packets
1 xx.yy.zz.8 0.102 ms !H 0.032 ms !H 0.027 ms !H
To reiterate, this setup is different from that of the numerous replays of "How to
set up internet for zones with virtual IP addresses?"
That recipe suggests to add a fake router and maintain its ARP address to be
that of the real default gateway, and set up NAT to rewrite private IP addresses
to the global zone's public IP. While I've also used the recipe a number of times,
it does not seem feasible in this router's case - there are too many next-hop
routers (and learned with a dynamic routing protocol), not just one default-gw.
I can of course go back to running services in the global zone and binding them
to these dedicated public IP addresses via configuration files - and this works
since the global zone has access to any needed routers having IP addresses
in relevant subnets - but I hoped to secure the system a bit more and separate
routing from infrastructure tasks...
So the question is: how can I set up networking for local zones in this case
when they are running on a router? Is it possible?
Thanks,
//Jim

You can set the Airport Extreme in "Bridge" mode, and then it will just extend the existing subnet.
Airport Utility -> Airport Extreme -> Internet -> Connection Sharing -> Off (bridge mode)

Mount cdrom in a local zone

Hello,
how can I mount a cdrom in a local zone. It works
fine in the global zone, but in a local zone I got
an error no device
Thanks
Mark

To access the cdrom in a local zone you woul use zonecfg from the Global Zone
"myzone" being the name of our zone..
zonecfg -z myzone
zonecfg:myzone>add fs
zonecfg:myzone:fs>set dir=/cdrom
zonecfg:myzone:fs>set special=/cdrom
zonecfg:myzone:fs>set type=lofs
zonecfg:myzone:fs>set options=[nodevices]
zonecfg:myzone:fs>end
zonecfg:myzone>verify
zonecfg:myzone>commit
zonecfg:myzone>exit
There is more detail on this in http://developers.sun.com/solaris/articles/application_in_zone.html

NFS in local zone

Similar Messages

Maybe you are looking for