Solaris 10, java, local zone and priority

Hi,
I have asked this on the Solaris 10/Zone forum 4 days ago but didn't
get any response. Maybe I get better luck here?
I have a jboss container running like a dog. It's running on a niceness
of 10 (by default - why?); renice fails with
$ renice -n 0 1635
renice: 1635:setpriority: Not owner
How do I fix that, and how can I get jboss to run with a niceness of
0 or 1 at startup?
I did manage to up the niceness manually from the global zone, but that's
not really an option once the system goes production. How/where do
I set java tasks to run with a sensible priority by default?
It appears that anything java (even within the global zone) runs on a
niceness of 20 (10 is what we see inside a local zone, the global will
report 20 in prstat).
Cheers

I removed this file,/usr/lib/libmlib/libmlib_sse.so.2, but I can't still use java desktop...
is there any other solution?

Similar Messages

Solaris 10, local zone & vcs

Hi,
Anybody tried running vcs from within a solaris 10 sparse local zone?
We currently have two T2000' s each running Solaris 10 6/06. I've installed Veritas Foundation Suite 4.1 on each and configured vcs. The cluster is functioning with failover enabled & tested. (I have a test service group running consisting of a 'hello world' program sitting on a VRTS volume/diskgroup on a SAN). This is all running fine in the Global Zone.
As part of our requirement we want to be able to run vcs from within a local zone, hence my creation of a sparse zone. I would like full clustering functionality running from within a zone on one server with failover/switching to an equvialent zone on the the second server.
I have played with the 'zone' option when setting up service groups but not surprisingly this is for switching the whole zone. Not what I want to do.
Am I failing to grasp this whole sparse zone idea? or am I missing something obvious, trying something that cant be done? Any help, particularly from somebody else thats tried this would be appreciated.
Thansk in advance,
Mark

Hello,
I can't help you a lot, but i have found that there is a lot of things that a local zone can't do when it comes to "kernel" things. As of today i found that you do NFS from a zone, for example.
As your problem seems to be related to filesystem it is probable that you can't do it from a zone. Again, i'm not sure.

Setting a floating IP in a solaris local zone!!

I want to install my fault tolerant application in two different
solaris local zones just to save the hardware cost and for testing
purposes.
Earlier before solaris 10, My application runs on two different
machines and receives the incoming requests on a floating IP, thus it
achieves the Fault tolerant behavior with floating IP moving across
the machines on the active application.
There was a separate monitoring process on each machine which runs as
root user and sets and unsets the floating IP using ioctl system calls
on a particular machine as per request received from the application.
Now i want to replicate the same behaviour in solaris 10 setup with my
Fault tolerant application running on two local zones and my
monitoring process which runs on each local zone, set and unset the
floating IP on the particular local zone.
No i want to know that if it is possible for any application to set
floating IP on a particular local zone, from that zone itself and how
can we achieve the same?
regards,
rish

<div class="jive-quote">
<span class="jive-quote-header">MichaelMyers wrote:</span>
I gather some big changes are afoot with the IP stack and zones with the latest Solaris update (the 8/07, update 4 release) -- each zone either does or can have it's own IP stack. This may change the answer to this question...those who's been playing with Open Solaris and/or Solaris Express probably can answer more about that.
</div>
That's correct. You can now use private IP instances for a non-global zone if you want. That zone will now have it's own IP stack and can up/down addresses or whatever. But for now they have to have their own dedicated "interface". This has to be an ethernet device or a VLAN device.
<div class="jive-quote">
<span class="jive-quote-header">
On an unrelated note: the new forum editor apparently doesn't have a way to insert "code" type examples (eg. pre-formatted, in courier, etc.)...
</span>
</div>
Yup. Even in the old editor it was inconsistent where worked. Some forums it would, but not all. I guess now it consistently doesn't work? :-)<br />
<br />
-- <br />
Darren<br />

Non-global zones and unix sockets

Hello, I have a problem with local zones and unix socket sharing. I've created directory in global zone for ex. /zones/shared. Added it to zones via 'add fs, type=lofs' . In one zone I'm putting mysql socket in it and I want that other local zones could use it. Is it possible to share socket between zones?
After all my experiments I'm always getting 'can't connect to mysql ... (146)' , 146 is 'connection refused' error.

These services are off-line in the non-global zone, which is why non of the
rc2.d or rc3.d scripts are being run:
offline Dec_12 svc:/milestone/multi-user-server:default
offline Dec_12 svc:/milestone/multi-user:default
Any idea how to enable these, and why they are offline?
Michael
Created a non-global zone on a Solaris 10 box.
Boots up ok and I can login with zlogin.
It doesn't seem to run any of the scripts in
/etc/rc2.d or /etc/rc3.d
I know Solaris 10 uses "Service Management Facility"
for most services now,
but could still run legacy scripts in /etc/init.d ?
Also I can't get sshd to start on the non-global
zone.
# svcs -a |grep ssh2
offline 11:44:58 svc:/network/ssh:default
# svcadm enable -t svc:/network/ssh:default
# svcs -a |grep ssh2
offline 11:44:58 svc:/network/ssh:default
Anyone got any ideas?
Michael

Modify Ethernet driver settings for a local zone of exclusive ip-type

Hi there
A quick one. Have configured a local zone with ip-type set to exclusive for a physical interface fjgi1. How can I modify the fjgi driver settings for this local zone?
Should I edit /platform/SUNW,SPARC-Enterprise/kernel/drv/fjgi.conf under the global zone and reboot the global zone, or create and edit a new config file in the local zone and reboot it?
Thank you
Sunny

Driver settings like this are shared by all zones. So you'd need to make the change in the global zone.
Darren

SAP/ORACLE File Systems Disappeared in Local Zone

I created some 20-30 files systems as meta devices for a SAP/Oracle installation on my 6320 SAN for a local zone.
I did a newfs on all of them and then mounted them in the global zone with their appropriate mount points.
I then did a zonecfg with the following input.
zonepath: /export/zones/zsap21
autoboot: true
pool:
inherit-pkg-dir:
dir: /lib
inherit-pkg-dir:
dir: /platform
inherit-pkg-dir:
dir: /sbin
inherit-pkg-dir:
dir: /opt/sfw
inherit-pkg-dir:
dir: /usr
fs:
dir: /oracle
special: /oracle_zsap21
raw not specified
type: lofs
options: []
fs:
dir: /oracle/stage/920_64
special: /oracle/stage/920_64_zsap21
raw not specified
type: lofs
options: []
fs:
dir: /temp
special: /temp_zsap21
raw not specified
type: lofs
options: []
fs:
dir: /usr/local
special: /usr/local_zsap21
raw not specified
type: lofs
options: []
fs:
dir: /usr/sap
special: /usr/sap_zsap21
raw not specified
type: lofs
options: []
fs:
dir: /usr/sap/install
special: /usr/sap/install_zsap21
raw not specified
type: lofs
options: []
fs:
dir: /usr/sap/trans
special: /usr/sap/trans_zsap21
raw not specified
type: lofs
options: []
fs:
dir: /export/home/zsap21
special: /export/home_zsap21
raw not specified
type: lofs
options: []
fs:
dir: /oracle/FS1
special: /oracle/FS1
raw not specified
type: lofs
options: []
fs:
dir: /oracle/FS1/920_64
special: /oracle/FS1/920_64
raw not specified
type: lofs
options: []
fs:
dir: /oracle/FS1/mirrlogA
special: /oracle/FS1/mirrlogA
raw not specified
type: lofs
options: []
fs:
dir: /oracle/FS1/oraarch
special: /oracle/FS1/oraarch
raw not specified
type: lofs
options: []
fs:
dir: /oracle/FS1/origlogA
special: /oracle/FS1/origlogA
raw not specified
type: lofs
options: []
fs:
dir: /oracle/FS1/origlogB
special: /oracle/FS1/origlogB
raw not specified
type: lofs
options: []
fs:
dir: /oracle/FS1/saparch
special: /oracle/FS1/saparch
raw not specified
type: lofs
options: []
fs:
dir: /oracle/FS1/sapdata1
special: /oracle/FS1/sapdata1
raw not specified
type: lofs
options: []
***********more available but I truncated it here**********************
I successfully installed and configured the zone.
I then logged into the local zone and installed a new version of Oracle and a working SAP instance. I know that it worked because I was able to log into it.
Upon rebooting the server and the local zone I have lost access to all of my file systems in the Oracle/SAP zone.
It's almost as if the global zone has not mounted its file systems over the local zones mount points. In the local zone I can see no files in the directories where I would expect Oracle or SAP files.
I either mis-configured the zonecfg or missed a step somewhere.
I suspect that my file system contents are still around somewhere waiting to be hooked up with a zone's mount point.
In the local zone a df -k shows all of the file systems (like the local zone knows about what file systems belong) but they all have the same size and free space (probably from the root zone).
Any thoughts appreciated.
Atis

Do you have amount point within the zone path for these oradb mounts?
You have to add a directory entry for /oradb in the zone's root directory, i.e. ``zone_path''/root/oradb

Jumpstart zones and applications

hello
Is is possible to write some rules to create zones and install aplications into those zones when automating an install with jumpstart.
Alternativly can you create a systems image of several zones and install that zone image using jumpstart.
basically what i want to do is install solaris 10, create 2 zones and install oracle 10g into those zones.
regards
neville

From within the zone, you can see what pool you're bound to by simply using
the -q argument to poolbind(1M) with a valid pid, such as "poolbind -q $$".
Alternatively, you can use the pooladm(1M) command with no arguments.
Note that if you don't have pools active, this will result in a "Facility is not active"
message but otherwise you'll see the details about the pool this zone is bound
to.
From the global zone, you can see the actual pool the zone is currently bound
by doing something like "zlogin myzone 'poolbind -q $$'". And you can see
which pool the zone will attempt to bind to the next time it reboots by using
the "zonecfg -z myzone info pool" command.
Does this help?

Solaris 10 local zone setup requirement/steps for am/ps 7.0 installation

Hi,
Is there any document available on solaris 10 local zone creation/requirement for am server/ portal server 7.0 install? Any help/pointer is appreciated.
Thanks,

I don't believe there is any specific documentation am/portal in a zone. And as far as I know there are no specific requirements either. I have successfully installed portal in a solaris zone.
A good starter tutorial on zones is here: http://partneradvantage.sun.com/protected/solaris10/adoptionkit/tech/zones/tutorial.html
Hi,
Is there any document available on solaris 10 local
zone creation/requirement for am server/ portal
server 7.0 install? Any help/pointer is
appreciated.
Thanks,

Install NetConnect in Global Zone of Solaris 10 x86 with 5 local zone fail

Problem:
Install NetConnect in Global Zone of Solaris 10 x86 with 5 local zone failed
But I didn't have any issue with the same pkg in Solaris 9
Steps taken:
# groupadd netcon
# useradd -d /export/home/netcon -g netcon -m netcon
# vi /etc/shadow
change LK to NP
# ./UninstallNetConnect.003.002.001.sh
# ./InstallNetConnect.003.002.001.sh
Enter the user account to use: netcon
Enter group: netcon
Installing Sun(SM) Net Connect Proxy Core as <SUNWsrspx>
## Installing part 1 of 1.
/etc/opt/SUNWsrspx/CustomerCert.pem
/etc/opt/SUNWsrspx/SRSCACert.pem
/etc/opt/SUNWsrspx/binaries
/etc/opt/SUNWsrspx/srsproxyconfig.cfg
/opt/SUNWsrspx/bin/srsexec
/opt/SUNWsrspx/bin/srsinstall
/opt/SUNWsrspx/bin/srsinstallmode
/opt/SUNWsrspx/bin/srsproxy
/opt/SUNWsrspx/bin/srspxrun
/opt/SUNWsrspx/bin/srspxstat
/opt/SUNWsrspx/bin/srspxtrace
/opt/SUNWsrspx/bin/srsuser
/opt/SUNWsrspx/bin/srsxfer
/opt/SUNWsrspx/lib/srsimapi.jar
/usr/lib/libsrsimapi.so.1
[ verifying class <none> ]
## Executing postinstall script.
copying initial install customer cert into place
copying initial install srs cert into place
copying initial install proxy config file into place
removing any existing uninstallscript before copying the correct one
copying uninstall script into place
/var/sadm/pkg/SUNWsrspx/install/postinstall: /opt/SUNWsrspx/bin/srspxrun: cannot execute
proxy queue initialization failed
pkgadd: ERROR: postinstall script did not complete successfully
Installation of <SUNWsrspx> failed.
ERROR: pkgadd failed for: SUNWsrspx
Please correct this situation and rerun the installation.
Exiting installation.
# cat /var/adm/messages
Oct 7 00:00:01 planet root: [ID 702911 daemon.error] ERROR: proxy queue initialization failed
Any clue, or it will only possible in Global zone that didn't have any local zone
thanks in advance

Problem:
Install NetConnect in Global Zone of Solaris 10 x86
with 5 local zone failed
But I didn't have any issue with the same pkg in
Solaris 9
Steps taken:
# groupadd netcon
# useradd -d /export/home/netcon -g netcon -m netcon
# vi /etc/shadow
change LK to NP
# ./UninstallNetConnect.003.002.001.sh
# ./InstallNetConnect.003.002.001.sh
Enter the user account to use: netcon
Enter group: netcon
Installing Sun(SM) Net Connect Proxy Core as
<SUNWsrspx>
## Installing part 1 of 1.
/etc/opt/SUNWsrspx/CustomerCert.pem
/etc/opt/SUNWsrspx/SRSCACert.pem
/etc/opt/SUNWsrspx/binaries
/etc/opt/SUNWsrspx/srsproxyconfig.cfg
/opt/SUNWsrspx/bin/srsexec
/opt/SUNWsrspx/bin/srsinstall
/opt/SUNWsrspx/bin/srsinstallmode
/opt/SUNWsrspx/bin/srsproxy
/opt/SUNWsrspx/bin/srspxrun
/opt/SUNWsrspx/bin/srspxstat
/opt/SUNWsrspx/bin/srspxtrace
/opt/SUNWsrspx/bin/srsuser
/opt/SUNWsrspx/bin/srsxfer
/opt/SUNWsrspx/lib/srsimapi.jar
/usr/lib/libsrsimapi.so.1
[ verifying class <none> ]
## Executing postinstall script.
copying initial install customer cert into place
copying initial install srs cert into place
copying initial install proxy config file into place
removing any existing uninstallscript before copying
the correct one
copying uninstall script into place
/var/sadm/pkg/SUNWsrspx/install/postinstall:
/opt/SUNWsrspx/bin/srspxrun: cannot execute
proxy queue initialization failed
pkgadd: ERROR: postinstall script did not complete
successfully
Installation of <SUNWsrspx> failed.
ERROR: pkgadd failed for: SUNWsrspx
Please correct this situation and rerun the
installation.
Exiting installation.
# cat /var/adm/messages
Oct 7 00:00:01 planet root: [ID 702911 daemon.error]
ERROR: proxy queue initialization failed
Any clue, or it will only possible in Global zone
that didn't have any local zone
thanks in advance
[I believe that it does not work in x86, watches with pkginfo - l SUNWsrspx, in the platform.
Willy Suarez
Sopport UNIX
Colombia/code]

Local zones during global shutdown in Solaris 10

Hello,
I am trying to determine if issuing a shutdown command from the global zone, e.g. shutdown -g0 -i5 -y performs graceful shutdowns on any running local zones, or does it issue a halt to the local zones without running shutdown scripts in them. Searching the Solaris zones forum brings up some older discussions (pre 2010) where users reported a halt was done, but the expectation is this would be changed in later Solaris 10 patches or revisions. Has this ever been addressed? Is there a way to determine if a local zone has been halted or shutdown? What is the recommended way to perform a shutdown of a global zone, when local zones are running?
Thanks,

The global zone will run a "svcadm disable zones" for each zones and this corresponds to a "zoneadm shutdown" or "zoneadm halt". Both zoneadm command will use a "init 0" in each zone.
If you have a zone that requires a shutdown script to stopping for example a database gracefully, then you should run the shutdown inside each zone directly.

Network access from local zones on a Solaris 10 router

I'm kind of stuck at an interesting problem.
I have a Solaris 10u6 system which is itself a router between a number of networks.
It has several dozen routes to different networks via different next-hop gateways,
just one of which is a default route to the ISP to internet.
I thought of setting up local zones to securely run infrastructure services (BIND,
Squid, Mail relay) on this machine, with only a single dedicated public IP address
(from our delegated address space) per such zone. Zones use a shared-IP stack
on one of the machine's VLAN interfaces (the LAN part with public IP addresses).
The problem is - since this machine is the gateway for the subnet used for the
local zones, they don't inherit any default route. The one default we have to the
ISP is on another interface's subnet.
[root@ns8 /]# netstat -rn | grep default
[root@ns8 /]# netstat -rn | wc -l
50
On a side note, these zones do inherit dozens of other routes (50 above) with
next-hop routers not on the local zone's subnet - so these are also not accessible.
I think such useless routes should also be filtered away - as "mismatching" default
routes are.
Due to all this the zone has no networking outside its subnet/mask: it doesn't
even try to send anything, since there is not a single route with a matching next
hop router, i.e.
[root@ns8 /]# traceroute -nI 194.87.0.50
traceroute to 194.87.0.50 (194.87.0.50), 30 hops max, 40 byte packets
1 xx.yy.zz.8 0.102 ms !H 0.032 ms !H 0.027 ms !H
To reiterate, this setup is different from that of the numerous replays of "How to
set up internet for zones with virtual IP addresses?"
That recipe suggests to add a fake router and maintain its ARP address to be
that of the real default gateway, and set up NAT to rewrite private IP addresses
to the global zone's public IP. While I've also used the recipe a number of times,
it does not seem feasible in this router's case - there are too many next-hop
routers (and learned with a dynamic routing protocol), not just one default-gw.
I can of course go back to running services in the global zone and binding them
to these dedicated public IP addresses via configuration files - and this works
since the global zone has access to any needed routers having IP addresses
in relevant subnets - but I hoped to secure the system a bit more and separate
routing from infrastructure tasks...
So the question is: how can I set up networking for local zones in this case
when they are running on a router? Is it possible?
Thanks,
//Jim

You can set the Airport Extreme in "Bridge" mode, and then it will just extend the existing subnet.
Airport Utility -> Airport Extreme -> Internet -> Connection Sharing -> Off (bridge mode)

Sun Live Upgrade with local zones Solaris 10

I have M800 server running global root (/) fs on local disk and running 6 local zones on another local disk. I am running solaris 5.10 8/07.
I used live upgrade to patch the system and created new BE (lucreate). Both root fs are mirror as RAID-1.
When I ran lucreate, it copies all 6 local zones root fs to the global root fs and failed no enogh space.
What is the best procedure to use lu with local zones.
Note: I used lu with global zone only, and worked without any problem.
regards,

I have been trying to use luupgrade for Solaris10 on Sparc, 05/09 -> 10/09.
lucreate is successful, but luactivate directs me to install 'the rest of the packages' in order to make the BE stable enough to activate. I try to find the packages indicated , but find only "virtual packages" which contain only pkgmap.
I installed upgrade 6 on a spare disk to make sure my u7 installation was not defective, but got similar results.
I got beyond luactivate on x86 a while ago, but had other snags which I left unattended.

Solaris 11 - zones and repos

Hi,
We're customers with support and pointed our servers to access the SRU repo as per http://www.oracle.com/technetwork/articles/servers-storage-admin/o11-018-howto-update-s11-1572261.html
Now we want to get started with zones for which Oracle recommends having a local IPS repo. All the docs seem to point to the public release repo as source for this local IPS repo.
How does this work together then with the SRU? Syncing the SRU seems to result in HTTP 401 unauthorized errors.

The way zones work with IPS is that they will communicate through the global zone. This means that whatever IPS publishers have been configured in the global zone, they get exposed within each of the non-global zones though what we call a 'system proxy'. You can compare this by typing 'pkg publisher' in both the global zone and any non-global zones.
I'm not sure what problems you're experiencing, but if you have configured the support repository in the global zone, you should be able to provision (and install other software) within a non-global zone. Also, once one zone has been provisioned on the system, all the package data is cached in the global zone so that additional zone installs (rather than clones) are much faster.
We use the release repository in many examples simply because it also allows administrators to evaluate the OS even if they don't have a current support contract through Oracle, but the same will work for those who do have a support contract and wish to the use the Oracle Solaris support repository.
In terms of creating a local IPS repository, it depends on how your environment looks and how many systems you are needing to update. If this number is relatively low, you may consider just updating that system directly from the Oracle hosted repositories. However, if that number is large, you may be better off creating a local repository. This not only provides faster access for local clients, but also provides another level of change control - you can control how often you sync with the master Oracle repository. To synchronize the Oracle SRU repository, don't forget that you will need to use the key and cert options to pkgrecv to ensure that you have the appropriate credentials to access that repository.
Good luck!

Can external users change their language, time zone, and locale settings?

Hi,
We’re migrating our hosts from WebEx cloud to our on-prem solution right now (CWMS 1.5.1.323.A).
We’ve learned that CWMS 1.5 does not provide an online address book where hosts could customize language, time zone, and locale settings for their external attendees.
Do external users have any chance at all to change their language, time zone and locale settings individually?
Thank you,
Helge

Hi Dejan,
"external users" are those participants, who do not have an LDAP account in our deployment, since they are not intendet to act as hosts: our stakeholders, partners, customers, clients.
It looks, as if these people would stick to the systems' default language / time zone / locale.
We are wondering if there might be a CWMS-component like this:
https://artcom.webex.com/cmp0307l/webcomponents/widget/preference.do?serviceType=MC&siteurl=artcom&target=Page&backUrl=%2Fmw0307l%2Fmywebex%2Fdefault.do%3Fsiteurl%3Dartcom%26service%3D1
to allow those "extenal" participants to make their adjustments.
Thank you,
Helge

Dedicating physical CPUs to a zone and migrating a Solaris 8 box to a zone?

If I have a machine with a large number of cores (say 24), and dedicate 4 of the CPUs to the zone, psrinfo shows the number of CPU's dedicated to that zone as 4, however, the global zone still shows 24.
Does this mean that if there's enough stuff running in global that it can preempt the stuff running inside the zone? The concern here is that the stuff we want to run in the zone is a bit more critical than in global, so we wouldn't want global to eat up CPU resources of the zone. (I suppose we could repurpose the stuff running inside global and the zone, but then we'd get the reverse isolation issue at some other point.)
The other questions is that there's an old E450 running Solaris 8 and it's got a bunch of stuff installed on it. Would it be possible to somehow convert all the software and data of that E450 into a container or zone and run that on a more modern machine - say a T5420 which runs Solaris 10 (without upgrading the stuff running under the E450 to Solaris 10?)

you can create a flar archive of the entire system and then import it as a solaris 8 zone. if you are doing this on a cool threads system, beware of the processor. it does well with threads. if what you run on the 450 is mostly single threaded or needs a decent cpu, the coolthreads servers are not a good fit.

Solaris 10, java, local zone and priority

Similar Messages

Maybe you are looking for