Solaris 10 zones - Resource Controls not persisting through reboot
Local zone was rebooted, but somehow the resource controls are not well configured and the oracle database did not start up.
The cat /etc/project shows this : The local zone has 10 gb. The oracle database was started manually with the startdb.sh, which conn /assysdba and issue a startup, adn also startups the listener.
cat /etc/project
system:0::::project.max-shm-memory=(privileged,8589934000,deny)
user.root:1::::project.max-shm-memory=(privileged,8589934000,deny)
noproject:2::::
default:3::::project.max-shm-memory=(privileged,6442450944,deny)
group.staff:10::::
user.oracle:100::oracle::project.max-shm-memory=(privileged,8589934000,deny)
group.dba:101::::project.max-sem-ids=(privileged,100,deny);project.max-shm-ids=(
privileged,100,deny);project.max-shm-memory=(privileged,6442450944,deny)
Nikolay, thank you for your reply.
What I know is that the zone was rebooted saturday. sunady at 1:00 am the oracle database (I'am a Dba not sysadmin), perform coldbackup (veritas.) then Veritas call a unix script to starts the database.
I run the script to starts the database manually sunday. Veritas could not open the database because of the Out of Memory.
The box has 10 gb , the oracle user, the rot and system are configured to use 8 gb, the rest are configured to use less.
I'am oracle user.
id -p
uid=100(oracle) gid=100(dba) projid=100(user.oracle)
prctl -i process $$
process: 8928: -ksh
NAME PRIVILEGE VALUE FLAG ACTION RECIPIENT
process.max-port-events
privileged 65.5K - deny -
system 2.15G max deny -
process.max-msg-messages
privileged 8.19K - deny -
system 4.29G max deny -
process.max-msg-qbytes
privileged 64.0KB - deny -
system 16.0EB max deny -
process.max-sem-ops
privileged 512 - deny -
system 2.15G max deny -
process.max-sem-nsems
privileged 512 - deny -
system 32.8K max deny -
process.max-address-space
privileged 16.0EB max deny -
system 16.0EB max deny -
process.max-file-descriptor
basic 256 - deny 8928
privileged 65.5K - deny -
system 2.15G max deny -
process.max-core-size
privileged 8.00EB max deny -
system 8.00EB max deny -
process.max-stack-size
basic 8.00MB - deny 8928
privileged 8.00EB - deny -
system 8.00EB max deny -
process.max-data-size
privileged 16.0EB max deny -
system 16.0EB max deny -
process.max-file-size
privileged 8.00EB max deny,signal=XFSZ -
system 8.00EB max deny -
process.max-cpu-time
privileged 18.4Es inf signal=XCPU -
system 18.4Es inf none -
task.max-cpu-time
system 18.4Es inf none -
task.max-lwps
system 2.15G max deny -
project.max-contracts
privileged 10.0K - deny -
project.max-device-locked-memory
privileged 987MB - deny -
project.max-locked-memory
system 16.0EB max deny -
project.max-port-ids
privileged 8.19K - deny -
project.max-shm-memory
privileged 8.00GB - deny -
project.max-shm-ids
privileged 128 - deny -
project.max-msg-ids
privileged 128 - deny -
project.max-sem-ids
privileged 128 - deny -
project.max-crypto-memory
privileged 3.85GB - deny -
project.max-tasks
system 2.15G max deny -
project.max-lwps
system 2.15G max deny -
project.cpu-cap
system 4.29G inf deny -
project.cpu-shares
privileged 1 - none -
zone.max-swap
privileged 20.0GB - deny -
zone.max-locked-memory
system 16.0EB max deny -
zone.max-shm-memory
system 16.0EB max deny -
zone.max-shm-ids
system 16.8M max deny -
zone.max-sem-ids
system 16.8M max deny -
zone.max-msg-ids
system 16.8M max deny -
zone.max-lwps
system 2.15G max deny -
zone.cpu-cap
system 4.29G inf deny -
zone.cpu-shares
privileged 1 - none -
Print configured reso
urce control
ksh: Print: not found
Similar Messages
-
When utilizing Solaris 10 Resource Control, should one use "user.root", "user.oracle" or "oracle" for the project identifier? Does it really make a difference?
For example,
I. projadd -U oracle -K "project.max-shm-memory=(priv,2048MB,deny)" user.oracle
II. projadd -U oracle -K "project.max-shm-memory=(priv,2048MB,deny)" user.root
III. projadd -U oracle -K "project.max-shm-memory=(priv,2048MB,deny)" oracle
I realize the Oracle Install documentation indicates "user.root", but I've seen other indications of either "user.oracle" or "oracle".thanks buddy. I was in this same tricky situation. and ur post solved my prblem.
Is this a bug with solaris 10.
Later i discovered.. on Oracle documentation that.. there r sum parameters that needed to be taken care while pre-installation of Oracle binaries.
Here is the excerpts.
The Oracle installer recognizes kernel parameters set using this method, but it is now deprecated in favour of resource control projects, explained below.
As the root user, issue the following command.
projadd oracle
Append the following line to the "/etc/user_attr" file.
oracle::::project=oracle
If you've performed a default installation, it is likely that the only kernel parameter you need to alter is "max-shm-memory". To check the current value issue the following command.
# prctl -n project.max-shm-memory -i project oracle
project: 100: oracle
NAME PRIVILEGE VALUE FLAG ACTION RECIPIENT
project.max-shm-memory
privileged 254MB - deny
system 16.0EB max deny
To reset this value, make sure at least one session is logged in as the oracle user, then from the root user issue the following commands.
# prctl -n project.max-shm-memory -v 4gb -r -i project oracle
# projmod -s -K "project.max-shm-memory=(priv,4gb,deny)" oracle
The first dynamically resets the value, while the second makes changes to the "/etc/project" file so the value is persistent between reboots.
# cat /etc/project
system:0::::
user.root:1::::
noproject:2::::
default:3::::
group.staff:10::::
oracle:100::::project.max-shm-memory=(priv,4294967296,deny)
The Oracle installer seems incapable of recognising kernel parameter set using resource control projects, but if you ignore the warnings the installation completes successfully.Even this method works.
Regards
Monu Koshy -
Zone Resource Control example website
G'Day folks,
I've began work on a website to list examples of setting zone resource controls (processor sets, FSS, ...).
http://www.brendangregg.com/zones.html
Now before I get carried away, does anyone think that maybe I shouldn't - if so I will take it offline no problem.
Just checking I dont get replies like,
"please don't document zones as it's all about to change", or something like that ...
PS. I was pretty happy to see FSS work - that's really cool! :-)
thanks,
Brendan Gregg
[Sydney, Australia]G'Day Gary,
Thanks for your comments!
Here are some corrections/additions:
The best way to check if pools are enabled is to run
pooladm and examine the output. poold may not be
running and pools may still be active, so performing
a pgrep for poold isn't conclusive.Yes, good point.
In commands 2, you don't need the "final pooladm -c".
The poolcfg -df command will have already done
e this.The final pooladm -c didn't make sense the first time I encountered it, so I had made pretty sure that it was necessary. I'll redo my checks and update the site. Without it, I'm only using poolcfg to make changes, and the man page for poolcfg has:
# man poolcfg
If you use the -d option,
the modifications occur to the kernel state. Actual activa-
tion of the resulting configuration is achieved by way of
the pooladm(1M) command.It seems to imply a pooladm command is necessary for activation (I used a pooladm -c).
In Resources CPU1 it may be worth mentioning that you
can immediately modify pool bindings for zones if you
use poolbind.
e.g.
/usr/sbin/poolbind -p work1-pool -i zoneid workzone1thanks, I hadn't seen this before!
At the end of Resource CPU 2. It isn't poold which
decides how to allocate CPUs when a configuration is
applied to a system using pooladm -c. This work is
done inside libpool (3LIB) by the pool_conf_commit
API.Ok, I haven't seen documentation on what specifically happens after typing pooladm -c. The documentation such as the poold man page draws a lot of attention to poold:
# man poold
poold periodically examines the load on the system and
decides whether intervention is required to maintain optimal
system performance with respect to resource consumption.
poold also responds to externally initiated (with respect to
poold) changes of either resource configuration or objec-
tives.
If intervention is required, poold attempts to reallocate
the available resources to ensure that performance objec-So a change in resource configuration sounds like it means "pooladm -c", and poold is responding.
I'm not sure you meant pool_conf_commit, the man page describes it as writing the config to permanent storage - not triggering an allocation of CPUs.
At my work blog, I have various hints, tips and
tricks for Solaris Resource Pools. If you want to add
a link to my blog (where I try and focus on Solaris
Resource Management issues) feel free. It's at:
http://blogs.sun.com/garypen
Great, I've linked it already, and uploaded a new version (and I imagine I'll upload more versions as I learn more about resource controls).
thanks,
Brendan -
Guide Line for zone resources control
Hi,
i'm looking for guide line or best practices about zone resource control, especially cpu-shares, swap and RAM.
I need this information to make decision when customers has no idea but has a lot of zone configured.
For example:
t2000, 32gb ram, 32gb swap and 20 zones
Applications run only in zones.
How can I set cpu-shares, max-swap and capped memory just for security purpose?
ThanksI'm of the opinion that the safest strategy for proactive resource management is CPU only. Playing with memory can have some effects that I'm not crazy about. Nothing unmanageable, but it can really confuse end-users unless you spend a lot of time educating them. The other consideration is that behind most resource pulls are increases in CPU use. Not always, but a lot of the time. So, if you must be proactive, go with CPU.
The best practice will depend heavily on your environment. Do you migrate zone containers in and out of the box often? Are the apps very similar or wildly differing? Many things need to be decided before mapping out a strategy. Let's take a simple case: Fairly similar apps that don't move in and out often. Figure out what percentage of the box you want each to have, then set up dynamic resource pools to match this model.
If you have a lot of zones and some degree of change, dynamic pools can get unwieldy, so you may prefer using the Fair share scehduler (FSS). In many cases however, proactive use of SRM means that you need to rebalance resources when you add/remove a zone.
I think once you understand the various resource controls available to you it's best to just make a bunch of scribbles on a white board to depict what you want at a high level and then map it into a resource constraint that best implements it. The hard part is defining what you want. -
[SOLVED] netcfg static IP not persisting across reboots in VM
I ran into an issue with netcfg static IP not persisting across reboots in a VM. I figured it out, but it took me awhile as a brand new user, so I thought I'd post it.
Setup
Using VMWare Workstation 8.0.3 build-703057 with bridged networking
Host OS: Linux Mint 14 64-bit
Guest OS: Arch Linux 2013.03.01 x86_64
Given a fresh install on the guest, setup netcfg:
cd /etc/network.d
cp examples/ethernet-static ./myprofile
nano myprofile
# customize this file. I also added NETMASK='255.255.255.0'
systemctl enable netcfg@myprofile
systemctl start netcfg@myprofile
Test the configuration. It should be successful:
ping google.com
Problem
See if the changes survive a reboot.
reboot
ping google.com
I got the error "connect: Network is unreachable".
Check the logs:
journalctl
G
I found the following netcfg failure..
[email protected]: main process exited, code=exited, status=1/FAILURE
..prior to the following device initialization:
kernel: e1000 0000:02:00.0 eth0: Intel(R) PRO/1000 Network Connection
system-udevd[117]: renamed network interface eth0 to emp2s0
Solution
It looks like netcfg is being started before the device it depends on has been initialized. Inform systemd of the
dependency so they start in the proper order:
# nano /etc/systemd/system/multi-user.target.wants/[email protected]
# Add the following to [Unit]. Remember to replace enp2s0 with your device name.
Requires=sys-subsystem-net-devices-enp2s0.device
After=sys-subsystem-net-devices-enp2s0.device
Test again:
reboot
ping google.com
This should now be successful.fukawi2 wrote:
$ man netcfg-profiles wrote:
Miscellaneous options
IPCFG
Array of arguments to pass to ip. The power of this options is
that it allows both simple and complicated routing
configurations, within the framework of netcfg.
SKIPNOCARRIER
‘yes’/‘no’. Don’t abort interface setup if no carrier is
found.
Thank you, [Solved]. -
Tap to click setting in system preferences not persisting after reboot!
Hi,
This is the 2nd time this has happened.. I shut down my system, and boot it up later, and when I go to tap, nothing happens. I go into to system prefs > trackpad, and see that my tap to click & dragging options are unchecked......
Why is it not remembering those settings?
-patrickI also have this behavior. It seems all trackpad preferences fail to persist after reboot and logout/login. I also disable Pinch Open & Close and Rotate settings and those also revert.
-
[SOLVED] Systemd journal not preserved through reboot
It appears that my journal in /var/log/journal is being flushed just before reboot. Every time I view the journal with the --all flag, the furthest back I can go is to right before the last reboot or power-off. Moreover, my /var/log/journal directory seems incapable of growing bigger than 2.6Mb or so, even though I have the journal configured to max out at 50Mb.
Here's my /etc/journald.conf:
# This file is part of systemd.
# systemd is free software; you can redistribute it and/or modify it
# under the terms of the GNU Lesser General Public License as published by
# the Free Software Foundation; either version 2.1 of the License, or
# (at your option) any later version.
# See journald.conf(5) for details
[Journal]
Storage=auto
#Compress=yes
#Seal=yes
#SplitMode=login
#SyncIntervalSec=5m
#RateLimitInterval=10s
#RateLimitBurst=200
SystemMaxUse=50M
#SystemKeepFree=
#SystemMaxFileSize=
#RuntimeMaxUse=500M
#RuntimeKeepFree=
#RuntimeMaxFileSize=
#MaxRetentionSec=
#MaxFileSec=1month
#ForwardToSyslog=yes
#ForwardToKMsg=no
#ForwardToConsole=no
#TTYPath=/dev/console
#MaxLevelStore=debug
#MaxLevelSyslog=debug
#MaxLevelKMsg=notice
#MaxLevelConsole=info
Any ideas?
Last edited by nbtrap (2013-07-01 10:10:47)Also of free space and that will trump SystemMaxUse. I know because it happens on my system. As /var fills, systemd keeps smaller persistent journal records.
EDIT:
SystemMaxUse= and RuntimeMaxUse= control how much disk space the
journal may use up at maximum. Defaults to 10% of the size of the respective file system. SystemKeepFree= and
RuntimeKeepFree= control how much disk space the journal shall always leave free for other uses if less than the disk space
configured in SystemMaxUse= and RuntimeMaxUse= is available. Defaults to 15% of the size of the respective file system.
SystemMaxFileSize= and RuntimeMaxFileSize= control how large individual journal files may grow at maximum.
Strictly speaking this seems inaccurate, though. You have more than the value of SystemMaxUse available so SystemKeepFree should not apply. However, it does.
Last edited by cfr (2013-07-01 02:41:22) -
Solaris intel (x86) DCA not saving when rebooted.
I'm working with a Panasonic CF-71 toughbook laptop. I have loaded the 2.6 Solaris intel OS and the Xig PCMCIA patch. I have been successful in getting a 3Com 3C589D card to work, but only if I enter into DCA at boot time and delete the PnP ISA PCMCIA device at port 3e2-3e3 and then add a ISA PCMCIA device at port 3e2-3e3. Unfortunately this must be done every time the system is rebooted. Does any one know of a way to do this delete/add using the /etc/system file? Any help is much appreciated.
Matt . . .Hi
I have download Solaris 9 x86 and Cd1 at boot time gives the same error as you mentioned. I am using my Toshiba Satellite A60. I have check the HDL list and its not listed there. Does it mean I can not install Solaris 9 x86 on this box. When I boot I get the same error which is mentioned above.
For more information I never installed Solaris in past and have no idea which Disk space /partition to be created it talks about in Install Guide.
Can some please clarify and do let me know where am I going wrong and how to fix it.
Thanks in Advance
Owais -
Solaris 10 resource controls - /etc/system vs /etc/projects
Can someone please explain to me why, if we set the set the max shared memory segment in the /etc/system file using 'set shmsys:shminfo_shmmax=4294967296' we are seeing 800GB instead of 4GB when running 'prctl -n project.max-shm-memory':
/etc/system:
* Oracle 10.2.0 parameters
set shmsys:shminfo_shmmax = 4294967295
set shmsys:shminfo_shmmin = 1
set shmsys:shminfo_shmmni = 200
set shmsys:shminfo_shmseg = 20
set semsys:seminfo_semmni = 100
set semsys:seminfo_semmsl = 260
set semsys:seminfo_semmns = 1024
set semsys:seminfo_semopm = 100
set semsys:seminfo_semvmx = 32767
set rstchown = 0
* Setting in for Oracle 10 upgrade
set noexec_user_stack = 1
With /etc/system populated running prctl produces:
# /bin/prctl -n project.max-shm-memory -i process $$
process: 3428: sh
NAME PRIVILEGE VALUE FLAG ACTION RECIPIENT
project.max-shm-memory
privileged 800GB - deny -
What is setting the maximum size for a shared segment to 800GB when using the /etc/system file to set the parameter?
If we remove the settings from /etc/system and use the normal default projects settings we get 1/4 of the physical memory, which is what we would expect to see.
Please note we will be using projects to control resources - I am just curious as to the effect of the /etc/system [set shmsys:shminfo_shmmax=4294967296] setting aboveI have since found the answer - the 800GB is coming from shminfo_shmmax multiplied by shminfo_shmmni. This has been confirmed on another system with different values.
-
Settings/icons/more not persisting through restart
I just recently installed ML and on every restart, my dock goes back to what it was on Lion and all my settings revert to what they were on lion. Nothing I change stays through a restart.
More examples after restart:
ical and address book return as ? icons in the dock, even though I've removed them and replaced them with Calendar and Contacts
Brand new adds to the dock, like messages, leave and I have to re-add them
Firefox, which I've set as my default browser, returns to non-default status
My screen starts in inverted-colors mode for no apparent reason, forcing me to hit Cmd+Option+Ctrl+8 to switch to normal
Any help?This is a long shot but it worked for me once when my stuff was messed up at start. I was told to do this by an Apple phone support person and it worked. And it may have nothing to do with your problem, but . . .
You need another admin user on the mac. Restart and log into the other user. Then restart back to your user. I did that and all was fixed. I asked how, and was just told that a mac does a lot of self healing. Your mileage may vary, and this was before Mountain Lion. -
Sound settings not sticking through reboot after 10.6.2
Since 10.6.2, my sound preferences are not sticking and always default to "internal speakers" on my MacPro1,1. I tried running the combo updater without success. Any other ideas?
Thanks.check another forum topic for potential answer:
http://discussions.apple.com/thread.jspa?threadID=2160114&tstart=0
I had the same problem and fixed mine. Others have fixed theirs too trying different methods discussed there.
Good luck. -
Bookmarks bar and tab controls not working in mobile Safari on iPad2
The bookmarks bar as well as tab controls in Mobile Safari on iPad 2 are not clickable. Only the topmost nav buttons work. This persists through reboots w/Safari closed via mem manager, and a system restore. What do?
closing Safari via the taskbar
or having done a reset (unless that is what you mean by a reboot)
"This persists through reboots w/Safari closed via mem manager"
That is obviously exactly what I meant. How does one reboot an iPad without "resetting" it? How does one do a system restore without "resetting" it? -
What is the resource control corresponding to each kernel parameter
Hi
I am trying to prepare (i.e. tune) a Solaris 10 instance for an Oracle 10g install using a Solaris 10 project.
I am new to using Solaris 10 project resource controls so I might get some of this totally wrong.
I know all of the "old" kernel parameter names: what each represents and its' required value and I know some of the corresponding resource controls but not all of them.
That is I do not know the resource control corresponding to each and all of the kernel parameters.
e.g. I know:
semsys:seminfo_semmsl == process.max-sem-nsems == The maximum number of sempahores that can be in one semaphore set
shmsys:shminfo_shmmax == project.max-shm-memory == The maximum size(in bytes) of a single shared memory segment
shmsys:shminfo_shmmni == project.max-shm-ids == The number of shared memory identifiers
But I do not know, for example, what resource control corresponds to:
semsys:seminfo_semmns == The number of semaphores in the system
Is there a list somewhere of the resource control corresponding to each of the kernel parameters ?
I know I can set some kernel parameters in /etc/system but that should only be used for system - wide kernel parameters, right ?
I know there are project, process, task and zone classes of resource controls.
Can a resource control of any and all of these types be set in a project ?
Are zone resource controls equivalent to system-wide resource controls ?
Are there corresponding resource controls to all kernel parameters e.g. such as noexec_user_stack ?
I have set noexec_user_stack in /etc/system.
And finally - just to be sure - using a project makes the resource control values permanent, right ?
Thanks
Brett.Hi;
Please check below which could be helpful for your issue:
Kernel setup for Solaris 10 using project files [ID 429191.1]
Regard
Helios -
My iPod Touch will not play through external speakers when it is docked. It only plays through it's internal speaker. All the other functions on the iPod can be controlled by the external speakers (volume,track, etc). How do I fix this?
I would try in oreder:
- Resetting the iPod:
Press and hold the On/Off Sleep/Wake button and the Home
button at the same time for at least ten seconds, until the Apple logo appears.
- Restoring the iPod via iTunes. First from backup and if problem persists, restore to factory defaults/new iPod. -
Resource Management and Solaris Zones Developer Guide
Solaris Information Products ("Pubs") is creating a
developer guide for resource management and Solaris Zones.
The department is seeking input on content from application
developers and ISVs.
We plan to discuss the different categories of applications
that can take advantage of Solaris resource management
features, and provide implementation examples that discuss
the particular RM features that can be used.
Although running in a zone poses no differences to most
applications, we will describe any possible limitations and
offer appropriate workarounds. We will also provide
information needed by the ISV, such as determining
the appropriate system calls to use in a non-global zone.
We plan to use case studies to document the zones material.
We would like to know the sorts of topics that you would
like to see covered. We want to be sure that we address
your specific development concerns with regard to these
features.
Thank you for your comments and suggestions.Hi there, i'm using solaris resource management in a
server with more thant 2thousand acounts.
Created profiles for users, defaul, staff, root and
services.Seeing the contents of your /etc/project file could be helpful.
But while using rctladm to enable syslog'ing, I set up
global flags of "deny" and "no-local-action" in almos
everything.The flags on the right hand side of the rctladm(1M) output are read-only:
they are telling you the characteristics of the resource control in question (what
operations the system will allow the resource control to take).
Now, many aplications don't work because they are
denied enough process.max-stack-size and
process.max-file-descriptor for them to work.
Applications such has prstat.If prstat(1) is failing due to the process.max-file-descriptor control value, that's
probably a bug. prstat(1) is more likely bumping into the limit to assess how many file
descriptors are available, and then carrying on--you're just seeing a log message since
prstat(1) tested the file descriptor limit, and you've enabled syslog for that control. Please
post the prstat(1) output, and we'll figure out if something's breaking.
I don't find a way to disable the global flags. You can't. I would disable the syslog action on the process.max-stack-size control first;
there is an outstanding bug on this control, in that it will report a false triggering event--
no actual effect to the process. (If you send me some mail, I will add you as a call record
on the bug.)
Can anyone tell me:
how to disable global flags?
how to disable and enable solaris resource management
all together?You could raise all of the control values, but the resource control facility (like the resource
limit facility it superseded) is always active. Let's figure out if you're hitting the bug I mentioned,
and then figure out how to proceed.
- Stephen
Stephen Hahn, PhD Solaris Kernel Development, Sun Microsystems
[email protected]
Maybe you are looking for
-
İ couldnt purchase and buy gems in store
İ have a problem with my itunes accounts.when i want to buy in-app features i got an error that; "Please comtact with itunnes support for completing this process" İ checked my device settings and tried my account with another ios device but result no
-
Folks, Below is the current list of dates that we would like to hold the 4-hour VCDX Workshop class. These do Coincide with the local VMUG's and are the day BEFORE in the afternoon so that people don't end up losing the day of the VMUG for the 4-hou
-
Hi. I'd like to know if there's any way to clone my main disk drive (the one which contains the operating system) in order to have a backup of all my data to use it when necessary... I've been thinking about using a dd in single user mode, but I'm no
-
Possible to repair the hidden partition on T61p?
Hi, it seems that my hidden partition has been damaged (not physically). Strange things happen when proceeding to a restore, mainly some software i had when i received the thinkpad isn't present after the "factory" restore.... Restoring with the cds
-
Can I play just the songs downloaded to my phone in iOS 7?
I have downloaded a large collection of songs to my iPhone and listen to them often on my subway commute where wifi is intermittent at best. After downloading iOS7, my iTunes now reflects not just the songs on my iPhone, but my entire collection from