SunOS 5.10 zones

Hello.
We have a server, with SunOs 5.10, running two zones. My question is how do you set the maximal file descriptor and how does that effect the two zones. Lets say the fd_max is set to 4096. Does that mean the two zones have 4096 each (2*4096) or do they share that amount?
TIA

If you change it in the global zone i think the non-global zones would still have the default value.
To change it in a zone you would have to add it to /etc/projects, i.e.:
user.root:1::::process.max-file-descriptor=(basic,4096,deny)
or
user.<my user>:101:My User:::process.max-file-descriptor=(privileged,4096,deny)
.. or similar ..
.7/M.

Similar Messages

Not all non-global zones updated for DST

We have one server with Solaris 10 and four non-global zones. I installed patch 122032-03 to the global zone and it installed successfull, according to the log. With the DST change on 3/11, TWO of the non-global zones and the global zone updated correctly to daylight time, but the other TWO non-global zone DID NOT. Does anyone know what would cause this?
I have also tried to manually change the time on the two non-global zones and have not been able to; as root I get the message "not owner"
ainsworth:hughesm> su -
Password:
Sun Microsystems Inc. SunOS 5.10 Generic January 2005
You have mail.
# date
Tue Mar 13 12:02:45 PST 2007
# date -u
Tue Mar 13 20:03:16 GMT 2007
# date
Tue Mar 13 12:04:31 PST 2007
# date 0313130007
date: Not owner
usage: date [-u] mmddHHMM[[cc]yy][.SS]
date [-u] [+format]
date -a [-]sss[.fff]
Fortunately, these were just test zones. They were set up by a previous admin to be used for pgpftp, so I'm wondering if there are some special configurations for security that is preventing the time change.

Thanks for replying.
I rebooted from the global zone. All the zones have the same uptime as the global zone, except one that was rebooted more recently.
Quick question - how do I tell if it's a sparse zone or full zone?
One of the zones that the time change worked on:
$ zdump -v US/Pacific | grep 2007
US/Pacific Tue Mar 13 22:37:59 2007 UTC = Tue Mar 13 15:37:59 2007 PDT isdst=1
US/Pacific Sun Mar 11 09:59:59 2007 UTC = Sun Mar 11 01:59:59 2007 PST isdst=0
US/Pacific Sun Mar 11 10:00:00 2007 UTC = Sun Mar 11 03:00:00 2007 PDT isdst=1
US/Pacific Sun Nov 4 08:59:59 2007 UTC = Sun Nov 4 01:59:59 2007 PDT isdst=1
US/Pacific Sun Nov 4 09:00:00 2007 UTC = Sun Nov 4 01:00:00 2007 PST isdst=0
tsbackup:hughesm> cd /usr/share/lib/zoneinfo; ls -al | grep Pac
drwxr-xr-x 2 root bin 1024 Jan 19 11:19 Pacific
cathedral:hughesm> cd /usr/share/lib/zoneinfo; ls -al | grep Pac (the global zone)
drwxr-xr-x 2 root bin 1024 Jan 19 11:19 Pacific
One zone that didn't work: (the other one that did not work is the same)
# zdump -v US/Pacific | grep 2007
US/Pacific Tue Mar 13 22:45:33 2007 UTC = Tue Mar 13 14:45:33 2007 PST isdst=0
US/Pacific Sun Apr 1 09:59:59 2007 UTC = Sun Apr 1 01:59:59 2007 PST isdst=0
US/Pacific Sun Apr 1 10:00:00 2007 UTC = Sun Apr 1 03:00:00 2007 PDT isdst=1
US/Pacific Sun Oct 28 08:59:59 2007 UTC = Sun Oct 28 01:59:59 2007 PDT isdst=1
US/Pacific Sun Oct 28 09:00:00 2007 UTC = Sun Oct 28 01:00:00 2007 PST isdst=0
# uname -a
SunOS albina 5.10 Generic_118822-02 sun4u sparc SUNW,Ultra-4
# cd /usr/share/lib/zoneinfo (non-global zone that did not update)
# ls -al | grep Pac
drwxr-xr-x 2 root bin 1024 Apr 20 2005 Pacific
I was thinking of trying to apply the patch within the zone itself, but when I tried smpatch analyze, it didn't list it:
# smpatch analyze
120900-04 SunOS 5.10: libzonecfg Patch
121133-02 SunOS 5.10: zones library and zones utility patch
119254-27 SunOS 5.10: Install and Patch Utilities Patch
119574-02 SunOS 5.10: su patch
121453-02 SunOS 5.10: Sun Update Connection Client Foundation
121118-08 SunOS 5.10: Sun Update Connection System Client 1.0.8
121081-05 SunOS 5.10: Connected Customer Agents 1.1.0
122231-01 SunOS 5.10 Sun Connection agents, transport certificate update
I attempted to add the patch using smpatch, but I've never run it here before so it's probably not configured right:
# smpatch update -i 122032-03
122032-03 cannot be validated.
com.sun.patchpro.model.PatchProRuntimeException: Unexpected throwable
at com.sun.patchpro.cli.PatchServices.waitForThread(PatchServices.java:1284)
at com.sun.patchpro.cli.PatchServices.installPatches(PatchServices.java:1121)
at com.sun.patchpro.cli.PatchServices.main(PatchServices.java:510)
Caused by:
java.lang.Throwable: ERROR: Failed to validate the digital signature(s).
at com.sun.patchpro.model.PatchProModel$InnerDownloadPatchThread.downloadPatchFailed(PatchProModel.java:2855)
at com.sun.patchpro.server.GroupPatchDownloader.dispatchFailedEvent(GroupPatchDownloader.java:384)
at com.sun.patchpro.server.GroupPatchDownloader.downloadPatchFailed(GroupPatchDownloader.java:335)
at com.sun.patchpro.server.ServerPatchServiceProvider.dispatchFailedEvent(ServerPatchServiceProvider.java:2577
at com.sun.patchpro.server.ServerPatchServiceProvider.validatePatchBundle(ServerPatchServiceProvider.java:2196
at com.sun.patchpro.server.ServerPatchServiceProvider.requestDownload(ServerPatchServiceProvider.java:1780)
at com.sun.patchpro.server.ServerPatchServiceProvider.performDownloadPatches(ServerPatchServiceProvider.java:1
2)
at com.sun.patchpro.server.ServerPatchServiceProvider.downloadPatches(ServerPatchServiceProvider.java:860)
at com.sun.patchpro.server.PatchServerProxy.downloadPatches(PatchServerProxy.java:142)
at com.sun.patchpro.server.GroupPatchDownloader.downloadPatches(GroupPatchDownloader.java:124)
at com.sun.patchpro.model.PatchProModel.performPatchDownload(PatchProModel.java:1932)
at com.sun.patchpro.model.PatchProStateMachine$10.run(PatchProStateMachine.java:526)
at com.sun.patchpro.util.State.run(State.java:266)
at java.lang.Thread.run(Thread.java:595)
So then I attempted to add the patch using patchadd:
# patchadd 122032-03
Validating patches...
Loading patches installed on the system...
Done!
Loading patches requested to install.
Done!
Checking patches that you specified for installation.
Done!
Global patches.
0 Patch 122032-03 is for global zone only - cannot be installed on local zone.
No patches to install.
under /var/sadm/patch/122032-03 on the Global zone, the log shows:
-rw-r--r-- 1 root root 2666 Jan 19 11:19 log
This appears to be an attempt to install the same architecture and
version of a package which is already installed. This installation
will attempt to overwrite this package.
WARNING: /usr/share/lib/zoneinfo/Africa/Timbuktu <no longer a regular file>
WARNING: /usr/share/lib/zoneinfo/America/Argentina/ComodRivadavia <no longer a regular file>
WARNING: /usr/share/lib/zoneinfo/America/Indiana/Indianapolis <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/America/Indianapolis <no longer a regular file>
WARNING: /usr/share/lib/zoneinfo/America/Kentucky/Louisville <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/America/Louisville <no longer a regular file>
WARNING: /usr/share/lib/zoneinfo/CST6CDT <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/EST <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/EST5EDT <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/Europe/Belfast <no longer a regular file>
WARNING: /usr/share/lib/zoneinfo/HST <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/MST <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/MST7MDT <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/PST8PDT <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/Pacific/Yap <no longer a regular file>
Dryrun complete.
No changes were made to the system.
This appears to be an attempt to install the same architecture and
version of a package which is already installed. This installation
will attempt to overwrite this package.
WARNING: /usr/share/lib/zoneinfo/Africa/Timbuktu <no longer a regular file>
WARNING: /usr/share/lib/zoneinfo/America/Argentina/ComodRivadavia <no longer a regular file>
WARNING: /usr/share/lib/zoneinfo/America/Indiana/Indianapolis <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/America/Indianapolis <no longer a regular file>
WARNING: /usr/share/lib/zoneinfo/America/Kentucky/Louisville <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/America/Louisville <no longer a regular file>
WARNING: /usr/share/lib/zoneinfo/CST6CDT <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/EST <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/EST5EDT <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/Europe/Belfast <no longer a regular file>
WARNING: /usr/share/lib/zoneinfo/HST <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/MST <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/MST7MDT <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/PST8PDT <no longer a linked file>
WARNING: /usr/share/lib/zoneinfo/Pacific/Yap <no longer a regular file>
Installation of <SUNWcsu> was successful.
On the non-global zones, either there is nothing under /var/sadm/patch or there isn't even a patch directory under /var/sadm. Is there somewhere else to look?
Thanks.

Latest round of patches on fabric booted system causes Solaris 10 to hang

I have a fairly stock install of Solaris 10 6/06 on a T2000 which uses a Emulex HBA to boot from Xiotech SAN attached disks.
I installed the following patches:
118712 14 < 16 R-- 24 SunOS 5.10: Sun XVR-100 Graphics Accelerator Patch
120050 05 < 06 RS- 28 SunOS 5.10: usermod patch
120222 16 < 17 R-- 19 SunOS 5.10: Emulex-Sun LightPulse Fibre Channel Adapter driver
120629 02 < 08 R-- 24 SunOS 5.10: libpool patch
120824 08 < 09 R-- 39 SunOS 5.10: SunBlade T6300 & Sun Fire (T1000, T2000) platform patc
121118 11 < 12 R-- 21 SunOS 5.10: Sun Update Connection System Client 1.0.9
122660 08 < 09 R-- 17 SunOS 5.10: zones patch
124258 03 < 05 RS- 19 SunOS 5.10: ufs and nfs driver patch
124327 -- < 04 R-- 34 SunOS 5.10: libpcp patch
120222 16 < 17 R-- 19 SunOS 5.10: Emulex-Sun LightPulse Fibre Channel Adapter driver
When I rebooted the system it will no longer boot up.
If I do a {ok} boot -m milestone=none and attempt to start all the services by hand, I see:
svc:/platform/sun4u/mpxio-upgrade:default (Multipath upgrade)
State: offline since June 4, 2007 4:05:58 PM CDT
Reason: Start method is running.
See: http://sun.com/msg/SMF-8000-C4
See: man -M /usr/share/man -s 1M stmsboot
See: /etc/svc/volatile/platform-sun4u-mpxio-upgrade:default.log
It appears the mpxio-upgrade script is failing to start.
If I run /lib/svc/method/mpxio-upgrade by hand the script hangs and can not be killed. Since I am on console the only want to recover is to send-brk and reboot. I truss'ed it and the last device it was trying to read is:
82: open("/devices/pseudo/devinfo@0:devinfo", O_RDONLY) = 5
82: ioctl(5, 0xDF82, 0x00000000) = 57311
This is the second time this has happened in the last 2 months. The first time the problem was resolved with a new kernel patch. However Sun could not tell me what the exact problem was.
Has anyone else run into SAN/Fabric booted servers failing to boot after various patches?

We have discovered the problem. It has nothing to do with SAN booting at all. It has to do with having a device plugged into the serial port. I was using this system to act as serial console for another device in the same rack. When the Sun kernel engineering asked me to unplug the serial cable and reboot I was skeptical, but it worked.
Sun has filed this as a bug. The only work around right now is to make sure you have nothing plugged into the serial port.

Registration issues.... Solaris 10 - 06/06

Having issues registering my V440 running Solaris 10 06/06. I have posted the error below and them some system information below that. any help is appreciated.
sysax /: /usr/sbin/sconadm register -a -r /usr/lib/breg/data/RegistrationProfile.properties
sconadm is running
Authenticating user ...
Exception in thread "main" java.lang.reflect.UndeclaredThrowableException
at $Proxy1.getInstanceName(Unknown Source)
at com.sun.scn.client.SCNClientSession.login(SCNClientSession.java:371)
at com.sun.cns.basicreg.cacao.ClientLoginCacaoAdapter.loginAccount(ClientLoginCacaoAdapter.java:209)
at com.sun.cns.basicreg.BasicRegCLI.authenticateUser(BasicRegCLI.java:1079)
at com.sun.cns.basicreg.BasicRegCLI.run(BasicRegCLI.java:669)
at com.sun.cns.basicreg.BasicRegCLI.main(BasicRegCLI.java:562)
Caused by: javax.management.InstanceNotFoundException: com.sun.scn:name=SCNBaseServiceFactory,assetSubProfile=Factory,host=sysax.consolidated.com,assetProfile=Factory,scnType=ServiceFactory,Vendor=Sun Microsystems Inc
at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.getMBean(DefaultMBeanServerInterceptor.java:1010)
at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.getClassLoaderFor(DefaultMBeanServerInterceptor.java:1349)
at com.sun.jmx.mbeanserver.JmxMBeanServer.getClassLoaderFor(JmxMBeanServer.java:1300)
at com.sun.jdmk.interceptor.DefaultMBeanServerInterceptor.getClassLoaderFor(DefaultMBeanServerInterceptor.java:285)
at com.sun.cacao.agent.DispatchInterceptor.getClassLoaderFor(DispatchInterceptor.java:474)
at com.sun.cacao.agent.auth.impl.AccessControlInterceptor.getClassLoaderFor(AccessControlInterceptor.java:427)
at com.sun.jdmk.JdmkMBeanServerImpl.getClassLoaderFor(JdmkMBeanServerImpl.java:1130)
at com.sun.cacao.common.instrum.impl.InstrumDefaultForwarder.getClassLoaderFor(InstrumDefaultForwarder.java:153)
at javax.management.remote.rmi.RMIConnectionImpl$4.run(RMIConnectionImpl.java:1306)
at java.security.AccessController.doPrivileged(Native Method)
at javax.management.remote.rmi.RMIConnectionImpl.getClassLoaderFor(RMIConnectionImpl.java:1303)
at javax.management.remote.rmi.RMIConnectionImpl.invoke(RMIConnectionImpl.java:766)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:294)
at sun.rmi.transport.Transport$1.run(Transport.java:153)
at java.security.AccessController.doPrivileged(Native Method)
at sun.rmi.transport.Transport.serviceCall(Transport.java:149)
at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:460)
at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:701)
at java.lang.Thread.run(Thread.java:595)
at sun.rmi.transport.StreamRemoteCall.exceptionReceivedFromServer(StreamRemoteCall.java:247)
at sun.rmi.transport.StreamRemoteCall.executeCall(StreamRemoteCall.java:223)
at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:126)
at com.sun.jmx.remote.internal.PRef.invoke(Unknown Source)
at javax.management.remote.rmi.RMIConnectionImpl_Stub.invoke(Unknown Source)
at javax.management.remote.rmi.RMIConnector$RemoteMBeanServerConnection.invoke(RMIConnector.java:969)
at javax.management.MBeanServerInvocationHandler.invoke(MBeanServerInvocationHandler.java:201)
... 6 more
sysax /: cat /etc/release
Solaris 10 6/06 s10s_u2wos_09a SPARC
Copyright 2006 Sun Microsystems, Inc. All Rights Reserved.
Use is subject to license terms.
Assembled 09 June 2006
sysax /: cat /var/sadm/system/admin/CLUSTER
CLUSTER=SUNWCall
sysax /: java -version
java version "1.5.0_06"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_06-b05)
Java HotSpot(TM) Server VM (build 1.5.0_06-b05, mixed mode)
sysax /: smpatch get
patchpro.backout.directory - ""
patchpro.baseline.directory - /var/sadm/spool
patchpro.download.directory - /var/sadm/spool
patchpro.install.types - rebootafter:reconfigafter:standard
patchpro.patch.source - https://getupdates1.sun.com/
patchpro.patchset - current
patchpro.proxy.host - ""
patchpro.proxy.passwd **** ****
patchpro.proxy.port - 8080
patchpro.proxy.user - ""
sysax /: cat /usr/lib/breg/data/RegistrationProfile.properties
# CLI registration profile template version 1.0
# ******** WARNING ********
# This profile contains sensitive data: passwords and subscription
# keys. You should take care in how you handle it, ensuring that it
# is always adequately protected (mode 400 or 600, owned by root)
# and not stored on insecure file systems like those exported through
# standard NFS.
# Sun Online account information. A new account can be created by visiting
# http://updates.sun.com
userName=**************
password=***********
# Name (label) of this machine as you would like it to appear on the Sun Connection
# portal. If left blank hostname will be used
hostName=devdbs01
# Service Plan / contract number with Sun. For more information on this topic
# please visit http://www.sun.com/service/warrantiescontracts/ . NOTE - a
# subscription key is required to use the Sun Connection Portal.
subscriptionKey=***************
# Allow this host to be managed by the Sun Connection Portal. If set to true,
# a subscription key is required.
portalEnabled=true
# HTTPS proxy information needed to connect to Sun for registration and patch
# updates.
proxyHostName=
proxyPort=
proxyUserName=
proxyPassword=

The error message I received was from the Sun Update Connection GUI. Once the patches I attempted to apply failed.
sysax /tmp: ./suc.sh.2
$USER:
$LOGNAME: root
Sat Feb 24 13:37:07 CST 2007
sysax
smpatch get:
patchpro.backout.directory - ""
patchpro.baseline.directory - /var/sadm/spool
patchpro.download.directory - /var/sadm/spool
patchpro.install.types - rebootafter:reconfigafter:standard
patchpro.patch.source - https://getupdates1.sun.com/
patchpro.patchset - current
patchpro.proxy.host - ""
patchpro.proxy.passwd **** ****
patchpro.proxy.port - 8080
patchpro.proxy.user - ""
smpatch analyze:
119252-15 SunOS 5.10: System Administration Applications Patch
119081-25 SunOS 5.10: CD-ROM Install Boot Image Patch
124630-03 SunOS 5.10: System Administration Applications, Network and Core Libraries Patch
124188-02 SunOS 5.10: Trusted Solaris Attributes Patch
119315-07 SunOS 5.10: Solaris Management Applications Patch
121308-08 SunOS 5.10: Solaris Management Console Patch
119313-10 SunOS 5.10: WBEM Patch
119534-10 SunOS 5.10: Flash Archive Patch
119254-34 SunOS 5.10: Install and Patch Utilities Patch
119963-08 SunOS 5.10: Shared library patch for C++
120753-03 SunOS 5.10: Microtasking libraries (libmtsk) patch
123494-03 X11 6.6.2: fontconfig patch
119812-02 X11 6.6.2: Freetype patch
125014-02 SunOS 5.10: IP filter patch
120780-03 SunOS 5.10: ixgb patch
119764-05 SunOS 5.10 : ipmitool patch
124258-01 SunOS 5.10: ufs and nfs driver patch
124252-01 SunOS 5.10: nfssrv patch
120812-15 OpenGL 1.5: OpenGL Patch for Solaris
123839-04 SunOS 5.10: Fault Manager Patch
124204-04 SunOS 5.10: zfs patch
122911-02 SunOS 5.10: Apache 1.3 Patch
120543-08 SunOS 5.10: Apache 2 Patch
117463-04 SunOS 5.10: passwdutil Patch
118890-03 SunOS 5.10: llib-lc patch
125024-01 SunOS 5.10: basic audit reporting tool patch
123908-01 SunOS 5.10: ar patch
120887-06 SunOS 5.10: cdrw patch
119580-05 SunOS 5.10: libcpc Patch
124244-01 SunOS 5.10: /usr/bin/rm patch
119685-10 SunOS 5.10: svc.startd patch
124997-01 SunOS 5.10: /usr/bin/tip patch
121081-06 SunOS 5.10: Connected Customer Agents 1.1.0
120845-04 SunOS 5.10: auditd patch
124235-01 SunOS 5.10: libpam.so.1 patch
120050-05 SunOS 5.10: usermod patch
122525-03 SunOS 5.10: Sun Fire V445 patch
124614-01 SunOS 5.10: sconadm proxy: UnknownHostException
120986-10 SunOS 5.10: mkfs and newfs patch
125040-01 SunOS 5.10: /usr/lib/inet/in.mpathd patch
122517-03 SunOS 5.10: Sun Fire V215/V245 platmod patch
125035-01 SunOS 5.10: libinetsvc.so.1 patch
123334-04 SunOS 5.10: e1000g_transition patch
122660-07 SunOS 5.10: zones patch
119998-02 SunOS 5.10: arp, ip, ipsecah drivers patch
125026-01 SunOS 5.10: message queue patch
118371-08 SunOS 5.10: elfsign Patch
123328-01 SunOS 5.10: expr patch
123520-01 SunOS 5.10: basename & dirname patch
123915-01 SunOS 5.10: libcfgadm.so.1 patch
125018-02 SunOS 5.10: scsi_vhci driver patch
123912-02 SunOS 5.10: ppriv patch
118367-04 SunOS 5.10: csh Patch
125016-01 SunOS 5.10: audit and init patch
119824-02 SunOS 5.10: prstat patch
123910-01 SunOS 5.10: platform_sun4v.xml patch
122255-04 SunOS 5.10: etc/flash/precreation/caplib patch
123319-01 SunOS 5.10: sysacct patch
118557-07 SunOS 5.10: platform/sun4u/kernel/drv/sparcv9/su patch
123271-01 SunOS 5.10: iwscn patch
124922-02 SunOS 5.10: ld.so.1 patch
123301-01 SunOS 5.10: i2c_svc patch
124325-01 SunOS 5.10: rcm modules patch
121561-04 SunOS 5.10: keymap patch
124918-02 SunOS 5.10: devfsadm, devlinks, drvconfig patch
122032-04 SunOS 5.10: Update timezones patch
124916-03 SunOS 5.10: sd, ssd drivers patch
121002-03 SunOS 5.10: pax patch
123252-01 SunOS 5.10: platform/SUNW,Netra-T2000 patch
122412-01 SunOS 5.10: ipseckey patch
122408-01 SunOS 5.10: libmtmalloc patch
120473-02 SunOS 5.10: nss_compat patch
124254-02 SunOS 5.10: sockfs patch
124250-03 SunOS 5.10: rpcmod patch
122752-04 SunOS 5.10: FMA snmp patch
124999-01 SunOS 5.10: mc-us3 driver patch
125319-01 SunOS 5.10: rmc_comm patch
125028-02 SunOS 5.10: pcipsy patch
118879-02 SunOS 5.10: dhcp daemon patch
118815-05 SunOS 5.10: awk nawk patch
121286-04 SunOS 5.10: libfru.so.1 and libfrureg.so.1 patch
122363-02 SunOS 5.10: fru_container.conf and libfruaccess.so.1 patch
119974-07 SunOS 5.10: fp plug-in for cfgadm
120222-15 SunOS 5.10: Emulex-Sun LightPulse Fibre Channel Adapter driver
119130-33 SunOS 5.10: Sun Fibre Channel Device Drivers
120182-05 SunOS 5.10: Sun Fibre Channel Host Bus Adapter Library
120346-06 SunOS 5.10: Common Fibre Channel HBA API Library
124943-01 SunOS 5.10: SunFreeware gzip man pages patch
122675-01 SunOS 5.10 : SunFreeware samba man pages patch
123809-01 SunOS 5.10: rpcsec_gss patch
121239-02 SunOS 5.10: libgss patch
120719-02 SunOS 5.10 : SunFreeware gzip patch
118925-05 SunOS 5.10: unistd header file patch
124208-01 SunOS 5.10: Trusted Extensions header files patch
124280-01 SunOS 5.10: libkdb.so.1 patch
120469-05 SunOS 5.10: kerberos patch
121006-02 SunOS 5.10: libkadm5 and kadmind patch
124991-01 SunOS 5.10: llc2 driver patch
124286-01 SunOS 5.10: chkey core dump
123186-02 SunOS 5.10: NIS yp utilities patch
124987-01 SunOS 5.10: ldap_cachemgr patch
119470-10 SunOS 5.10: Sun Enterprise Network Array firmware and utilities
122404-01 SunOS 5.10: xntpd patch
124990-01 SunOS 5.10: Sun-Blade-100 libprtdiag_psr.so.1 patch
121944-02 SunOS 5.10: libpsvcpolicy and libpsvcpolicy_psr patch
122537-02 SunOS 5.10: libpiclenvmon.so.1 patch
123590-02 SunOS 5.10: PostgresSQL patch
120629-05 SunOS 5.10: libpool patch
124993-01 SunOS 5.10: in.ndpd patch
125011-01 SunOS 5.10: sendmail patch
125022-01 SunOS 5.10: usr/sbin/sar patch
122376-01 SunOS 5.10: prex patch
120068-03 SunOS 5.10: in.telnetd patch
124995-01 SunOS 5.10: ehci driver patch
121010-05 SunOS 5.10: rpc.metad patch
124256-01 SunOS 5.10: md_mirror patch
125075-01 SunOS 5.10: svc-volfs patch
125073-01 SunOS 5.10: vold patch
119555-04 SunOS 5.10: Software to support QLogic Ultra3 SCSI host bus adapters
119090-22 SunOS 5.10: Sun iSCSI Device Driver and Utilities
120272-06 SunOS 5.10: SMA patch
124463-02 SunOS sparc : cacao 2.0 patch 02
119213-11 NSS_NSPR_JSS 3.11.4: NSPR 4.6.4 / NSS 3.11.4 / JSS 4.2.4
118666-11 J2SE 5.0: update 11 patch (5.0u11)
118667-11 J2SE 5.0: update 11 patch (5.0u11), 64bit
122119-05 SunOS 5.10: Patch for Arabic Fonts
119703-08 SunOS 5.10: Patch for localeadm issues
123003-02 SunOS 5.10: dependency issue with SUNWopenssl-include
123630-01 SunOS 5.10: HTTP proxy settings patch
123005-05 SunOS 5.10: Basic Registration Update
123011-01 SunOS 5.10: BR desktop icon patch
119648-03 SunOS 5.10: vlan driver patch
118777-08 SunOS 5.10: Sun GigaSwift Ethernet 1.0 driver patch
121118-11 SunOS 5.10: Sun Update Connection System Client 1.0.9
118712-13 SunOS 5.10: Sun XVR-100 Graphics Accelerator Patch
120410-17 SunOS 5.10: Internet/Intranet Input Method Framework patch
121734-05 SunOS 5.10: patch to support addition of new UTF-8 locales
119810-03 SunOS 5.10: International Components for Unicode Patch
120099-07 APOC 1.2: Sun Java(tm) Desktop System Configuration Shared Libraries
119546-07 APOC 1.2: APOC Configuration Agent Patch
124393-02 CDE 1.6: Dtlogin smf patch
123611-02 X11 6.6.2: Trusted Extensions patch
119280-10 CDE 1.6: Runtime library patch for Solaris 10
119278-12 CDE 1.6: dtlogin patch
124405-01 CDE1.6: sdtfprop patch
124403-01 CDE1.6: dtstyle patch
124401-01 CDE1.6: dtpad patch
124399-01 CDE1.6: dtfile patch
125279-01 CDE1.6: dtsession patch
121977-02 CDE 1.6: dtlogin resources patch
124397-02 CDE1.6: libDtWidget patch
124395-01 CDE1.6: dtaction patch
119117-29 Evolution 1.4.6 patch
123938-01 GNOME 2.6.0: GNU Transport Layer Security Library Patch
119418-03 GNOME 2.6.0: Gnome On-screen Keyboard Patch
119414-13 GNOME 2.6.0: Gnome Accessibility Libraries Patch
119598-08 GNOME 2.6.0: Gnome Screen Reader and Magnifier Patch
120454-02 GNOME 2.6.0: Gnome Apoc GConf Adapter Patch
120460-10 GNOME 2.6.0: Gnome libs Patch
120284-04 GNOME 2.6.0: GNOME CORBA ORB and component framework
122212-17 GNOME 2.6.0: GNOME Desktop Patch
119410-05 GNOME 2.6.0: Gnome Applets Patch
119540-05 GNOME 2.6.0: Gnome Dtlogin configuration Patch
119548-07 GNOME 2.6.0: Gnome Multi-protocol instant messaging client Patch
123162-02 GNOME 2.6.0: Gnome Java Run Time Patch
120739-03 GNOME 2.6.0: GNOME PDF Viewer based on Xpdf
119368-05 GNOME 2.6.0: Printing Technology Patch
121606-02 GNOME 2.6.0: Python patch
120288-03 GNOME 2.6.0: Gnome terminal Patch
119906-08 Gnome 2.6.0: Virtual File System Framework patch
119538-10 GNOME 2.6.0: Window Manager Patch
119115-23 Mozilla 1.7 patch
122958-02 GNOME 2.6.0: RealPlayer media application
119903-02 OpenWindows 3.7.3: Xview Patch
119059-21 X11 6.6.2: Xsun patch
125045-01 X11 6.6.2: Xft patch
124457-01 X11 6.6.2: xdm patch
showrev -p
119788-07
120335-04
121081-05
121118-06
121118-08
121118-10
121453-02
122231-01
java -version:
java version "1.5.0_06"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_06-b05)
Java HotSpot(TM) Server VM (build 1.5.0_06-b05, mixed mode)
/etc/release:
Solaris 10 6/06 s10s_u2wos_09a SPARC
Copyright 2006 Sun Microsystems, Inc. All Rights Reserved.
Use is subject to license terms.
Assembled 09 June 2006
/var/sadm/system/admin/CLUSTER:
CLUSTER=SUNWCall
/usr/lib/cc-ccr/bin/ccr -g cns.assetid:
1917645754
patchsvr setup -l
Patch source URL: https://getupdates1.sun.com/
Cache location: /var/sadm/spool/patchsvr
sysax /tmp: ps -ef | grep cc
root 2006 2003 0 Feb 22 ? 0:17 /usr/lib/cc-cfw/platform/transport/bin/cctransport
root 2022 2017 0 Feb 22 ? 0:01 /usr/lib/cc-cfw/platform/fwagent/bin/ccfwagent
root 2003 1 0 Feb 22 ? 0:00 /bin/sh /usr/lib/cc-cfw/framework/lib/watchdog /usr/lib/cc-cfw/platform/transpo
root 2013 2010 0 Feb 22 ? 0:01 /usr/lib/cc-cfw/platform/ccragent/bin/ccccragent
root 2010 1 0 Feb 22 ? 0:00 /bin/sh /usr/lib/cc-cfw/framework/lib/watchdog /usr/lib/cc-cfw/platform/ccragen
root 2017 1 0 Feb 22 ? 0:00 /bin/sh /usr/lib/cc-cfw/framework/lib/watchdog /usr/lib/cc-cfw/platform/fwagent
noaccess 1898 1 0 Feb 22 ? 1:02 /usr/jdk/instances/jdk1.5.0/bin/java -server -XX:+BackgroundCompilation -Djava.
root 8884 5284 0 13:39:27 console 0:00 grep cc
sysax /tmp:

Unable to install a zone: Copying 0 files to the zone.

Hi forum users,
I really hope someone has any idea what could be wrong here.
First of all, the server is patched with security and recommended patches, except for 118344-13 -> R-- SunOS 5.10_x86: Fault Manager Patch which I will install on the next maintenance day. It already has 4 zones running without problem.
However when I try to install a new zone now it always fails.
# zoneadm -z blah install
Preparing to install zone <blah>.
Creating list of files to copy from the global zone.
Copying <0> files to the zone.
Initializing zone product registry.
Determining zone package initialization order.
ERROR: package <SUNWcsu> is not complete: skipping installation of package
ERROR: package <SUNWcsr> is not complete: skipping installation of package
ERROR: package <SUNWcsl> is not complete: skipping installation of package
ERROR: package <SMCreadl> is not complete: skipping installation of package
ERROR: cannot determine dependency ordered package list from package repository </var/sadm/pkg>
ERROR: cannot generate dependency ordered list of packages from global zone </var/sadm/pkg>
ERROR: failed to initialize packages from global zone </> to zone </zones/blah/root>
ERROR: cannot copy and initialize packages from global zone to local zone <blah> path </zones/blah/root>
ERROR: cannot create zone boot environment <blah>
zoneadm: zone 'blah': '/usr/lib/lu/lucreatezone' failed with exit code 74.
To me it seems obvious that the problem lies in the fact that it doesnt even copy a single file to the configured zone, therefor it can't install any packages and all the rest fails too. The big question of course is, why does it think it only needs to copy 0 files? Has anyone encountered such a problem before? I havent found anything yet on patches breaking zoneadm install but might have missed it.
Does it looks like a HD corruption?Might be since the Sun Management Console agent does seem to freeze on that server too once in a while.

All the packages are fine in the global zone, pkginfo -l tells me the packages are complete.
I did try the truss wrap but it gives me so much info it is hard for me to figure out if something is wrong. The only error i think that returns often and that is not resolved is:
ioctl(4, TCGETA, 0x080471E4) Err#25 ENOTTY
ioctl(4, TCGETA, 0x08047294) Err#22 EINVAL
The part where it seems to compile a list of files to copy however is very empty of truss entries:
Preparing to install zone <gal2en-survey>.
Creating list of files to copy from the global zone.
Copying <0> files to the zone.
Initializing zone product registry.
Determining zone package initialization order.
read(4, 0x0806DD3C, 5120) (sleeping...)
ERROR: package <SUNWcsu> is not complete: skipping installation of package
This issue is still unresolved for me. For now the only way to create a new zone on that server is to manually copy all files from another zone, editing the zonecfg entry and net config files for the zone, then i can boot and run it.

Open ports in zones

I am encountering a strange behavior in new zones created using zonemgr 2.0.6 (this is the only way I create zones, so I do not know if the issue is more general). When I create a new zone, two strange things are happening:
1. Immediately after the zone is created, no services are running, not even ssh
2. About 10 minutes later, a whole bunch of services are running. Most of these are not running on the global zone.
For reference, nmap output on the global zone is the following:
[dcomsm1@dcomsm1:~] $ nmap t2000
Starting Nmap 5.00 ( http://nmap.org ) at 2010-02-28 20:51 EST
Interesting ports on 131.247.16.134:
Not shown: 991 closed ports
PORT STATE SERVICE
22/tcp open ssh
111/tcp open rpcbind
2161/tcp open apc-agent
3052/tcp open powerchute
4045/tcp open lockd
32774/tcp open sometimes-rpc11
32775/tcp open sometimes-rpc13
32776/tcp open sometimes-rpc15
32777/tcp open sometimes-rpc17
The new zone is created using the following zonemgr arguments:
[root@t2000:~/zonecfgs] # more ./temp.sh
#!/usr/bin/bash
./zonemgr -a add -n drenkhah -z "/export/zones" -P "root_pw" -I "131.247.16.159|e1000g0|25|drenkhah" -R "/root|/usr/bin/bash" -s "basic|lock"
zone creation output is as follows:
[root@t2000:~/zonecfgs] # ./temp.sh
Checking to see if the zone IP address (131.247.16.159) is already in use...IP is available.
cannot create '/drenkhah': leading slash in name
chmod: WARNING: can't access /export/zones/drenkhah
chown: /export/zones/drenkhah: No such file or directory
Zone drenkhah will be placed in the following directory: /export/zones/drenkhah
Preparing to install zone <drenkhah>.
Creating list of files to copy from the global zone.
Copying <2568> files to the zone.
Initializing zone product registry.
Determining zone package initialization order.
Preparing to initialize <1042> packages on the zone.
Initialized <1042> packages on zone.
Zone <drenkhah> is initialized.
The file </export/zones/drenkhah/root/var/sadm/system/logs/install_log> contains a log of the zone installation.
Creating the sysidcfg file for automated zone configuration.
Booting zone for the first time.
Waiting for first boot tasks to complete.
Waiting for automatic post-install reboot to complete
Updating netmask information.
Updating /etc/inet/hosts of the global zone with the drenkhah IP information.
Generating ssh host keys. Details in the (/root/.zonemgr/zone28330-ssh.log) file.
svcadm: Pattern 'svc:/network/ssh' doesn't match any instances
Setting the root user's home directory to /root
Setting the root user's shell to /usr/bin/bash
Disabling un-necessary services via basic method for the default services.
Zone drenkhah is complete and ready to use.
nmap output just after creating the zone is as follows:
[dcomsm1@dcomsm1:~] $ nmap drenkhah
Starting Nmap 5.00 ( http://nmap.org ) at 2010-02-28 17:53 EST
All 1000 scanned ports on 131.247.16.159 are closed
Nmap done: 1 IP address (1 host up) scanned in 29.39 seconds
nmap output 17 minutes later is as follows:
[dcomsm1@dcomsm1:~] $ nmap drenkhah
Starting Nmap 5.00 ( http://nmap.org ) at 2010-02-28 18:10 EST
Interesting ports on 131.247.16.159:
Not shown: 986 closed ports
PORT STATE SERVICE
21/tcp open ftp
22/tcp open ssh
23/tcp open telnet
25/tcp open smtp
79/tcp open finger
111/tcp open rpcbind
513/tcp open login
514/tcp open shell
587/tcp open submission
4045/tcp open lockd
6112/tcp open dtspc
6788/tcp open unknown
6789/tcp open ibm-db2-admin
7100/tcp open font-service
Nmap done: 1 IP address (1 host up) scanned in 29.25 seconds
Note that there are many open ports
# uname -a
SunOS t2000 5.10 Generic_137137-09 sun4v sparc SUNW,Sun-Fire-T200
Thanks
Manish

The Leopard OS X firewall is application based and not port based. Honestly, I haven't played with it enough to know for certain how to answer your question.
But... when you do connection sharing, you're essentially doing a port based NAT for the systems on the other side of your Mac. This pretty much keeps you from initiating anything to the other system even without a local firewall unless you were to configure port forwarding.
As for blocking packets, you would need to use the 'ipfw' command to do things at the port level.

Oracle 10g install is not working on Global zone

We installed Solaris 10 (below) in a T2000 using the same standards we have for many other hosts.After the installation was finished, three zones were exported from a M5000 class machine and imported into this T2000. From inside the zones we can call the Oracle10g installer and the graphical screen is presented. When executing the installed from the Global zone, we can see a java process running, using 100% of a thread, but no graphical interface is presented at all. Checking truss, we see a lot of pollsys being called. Any ideas?
# uname -a
SunOS wgsst2k01 5.10 Generic_127127-11 sun4v sparc SUNW,SPARC-Enterprise-T2000
# memconf -v
memconf: V2.6 06-May-2008 http://www.4schmidts.com/unix.html
hostname: wgsst2k01
banner: SPARC Enterprise T2000 (8-core quad-thread UltraSPARC-T1 1000MHz)
manufacturer: Sun Microsystems, Inc.
model: SPARC-Enterprise-T2000
Sun development codename: Ontario
Sun Family Part Number: SEB
Solaris 10 5/08 s10s_u5wos_10 SPARC, 64-bit kernel, SunOS 5.10
1 8-core quad-thread UltraSPARC-T1 1000MHz cpu, system freq: 200MHz
socket MB/CMP0/CH0/R0/D0 has a 1024MB (1GB) DIMM (address 0x000800000-0x4007fffff)
socket MB/CMP0/CH0/R0/D1 has a 1024MB (1GB) DIMM (address 0x000800000-0x4007fffff)
socket MB/CMP0/CH1/R0/D0 has a 1024MB (1GB) DIMM (address 0x000800000-0x4007fffff)
socket MB/CMP0/CH1/R0/D1 has a 1024MB (1GB) DIMM (address 0x000800000-0x4007fffff)
socket MB/CMP0/CH2/R0/D0 has a 1024MB (1GB) DIMM (address 0x000800000-0x4007fffff)
socket MB/CMP0/CH2/R0/D1 has a 1024MB (1GB) DIMM (address 0x000800000-0x4007fffff)
socket MB/CMP0/CH3/R0/D0 has a 1024MB (1GB) DIMM (address 0x000800000-0x4007fffff)
socket MB/CMP0/CH3/R0/D1 has a 1024MB (1GB) DIMM (address 0x000800000-0x4007fffff)
socket MB/CMP0/CH0/R1/D0 has a 1024MB (1GB) DIMM (address 0x000800000-0x4007fffff)
socket MB/CMP0/CH0/R1/D1 has a 1024MB (1GB) DIMM (address 0x000800000-0x4007fffff)
socket MB/CMP0/CH1/R1/D0 has a 1024MB (1GB) DIMM (address 0x000800000-0x4007fffff)
socket MB/CMP0/CH1/R1/D1 has a 1024MB (1GB) DIMM (address 0x000800000-0x4007fffff)
socket MB/CMP0/CH2/R1/D0 has a 1024MB (1GB) DIMM (address 0x000800000-0x4007fffff)
socket MB/CMP0/CH2/R1/D1 has a 1024MB (1GB) DIMM (address 0x000800000-0x4007fffff)
socket MB/CMP0/CH3/R1/D0 has a 1024MB (1GB) DIMM (address 0x000800000-0x4007fffff)
socket MB/CMP0/CH3/R1/D1 has a 1024MB (1GB) DIMM (address 0x000800000-0x4007fffff)
empty sockets: None
total memory = 16384MB (16GB)Cheers
Andreas

This pretty much says it all:
No connection could be made because the target machine actively refused it.What version of Vista?
What version of the agent? ... 10g is not a version number it is a marketing label
Did you check to see if the agent is compatible with your operating system?
My recommendation would be to get a real operating system: Either Oracle Linux or XP.

Audit is enable in local zone

Audit is enabled and working fine in Global zone.
root@MMS11:/var/audit# uname -a
SunOS MMS11 5.11 11.2 sun4v sparc sun4v
root@MMS11:/var/audit#
root@MMS11:/var/audit#
root@MMS11:/var/audit# pkg info entire
          Name: entire
       Summary: entire incorporation including Support Repository Update (Oracle Solaris 11.2.3.4.1).
   Description: This package constrains system package versions to the same
                build. WARNING: Proper system update and correct package
                selection depend on the presence of this incorporation.
                Removing this package will result in an unsupported system. For
                more information see
                https://support.oracle.com/rs?type=doc&id=1672221.1.
      Category: Meta Packages/Incorporations
         State: Installed
     Publisher: solaris
       Version: 0.5.11 (Oracle Solaris 11.2.3.4.1)
Build Release: 5.11
        Branch: 0.175.2.3.0.4.1
Packaging Date: October 2, 2014 10:39:23 PM
          Size: 5.46 kB
          FMRI: pkg://solaris/[email protected],5.11-0.175.2.3.0.4.1:20141002T223923Z
root@MMS11:/var/audit#
root@MMS11:/var/audit# ls -lhtr
total 34343
-rw-r-----   1 root     root        400K Apr 7 16:41 20150407134107.20150407134155.MMS11
-rw-r-----   1 root     root         11M Apr 7 17:21 20150407134157.20150407142120.MMS11
-rw-r-----   1 root     root        5.5M May 4 13:57 20150504103940.not_terminated.MMS11
root@MMS11:/var/audit#
root@MMS11:/var/audit# ls -lhtr /var/adm/auditlog
-rw-r-----   1 root     root        1.0M May 4 13:57 /var/adm/auditlog
root@MMS11:/var/audit# audit -s
root@MMS11:/var/audit# zoneadm list -cv
ID NAME             STATUS      PATH                         BRAND      IP
   0 global           running     /                            solaris    shared
   5 MMS_NG         running     /zones/MMS_NG              solaris    shared
=======================================================
but I am unable to enable audit on local zone.
I have following
root@MMS11:/var/audit# zlogin MMS_NG
[Connected to zone 'MMS_NG' pts/14]
Oracle Corporation      SunOS 5.11      11.2    September 2014
You have mail.
root@MMS_NG:~#
root@MMS_NG:~#
root@MMS_NG:~# audit -s
audit: Neither local nor remote auditing is configured in the non-global zone.
root@MMS_NG:~#
root@MMS_NG:~# audit -n
audit: Neither local nor remote auditing is configured in the non-global zone.
root@MMS_NG:~# cd /var/audit
root@MMS_NG:/var/audit# ls -lhtr
total 94399
-rw-r-----   1 root     root        149M Apr 7 16:40 20150208124745.not_terminated.MMS_NG
How I can enable audit in NG zone, I want to enable audit logs with syslog service. as enabled and configured on Global Zone.

I'm not sure why Ur looking for /etc/system in zones..
now in soalris 10u10 /soalrs 11..you can configure the kernel parameters as application/user specific
you can use projadd command to add the resources like shared memory
if you want add the parameters as global you can use
zonecfg
you can refer this doc what parameters u can add to zone with zonecfg
http://docs.oracle.com/cd/E19455-01/817-1592/z.config.ov-1/index.html
zone.cpu-shares (preferred: cpu-shares)
zone.max-locked-memory
zone.max-lwps (preferred: max-lwps)
zone.max-msg-ids (preferred: max-msg-ids)
zone.max-sem-ids (preferred: max-sem-ids)
zone.max-shm-ids (preferred: max-shm-ids)
zone.max-shm-memory (preferred: max-shm-memory)

Setting the sticky bit on a file fails in a zone

On initial inspection, the sticky bit on directories seem to be consistent across both the Global zone and local zone. However, they are inconsistent for files. Is this a bug, and if it is how to I raise a defect report?
Excerpt from chmod man page:
If a regular file is not executable and has {stick bit} set, the file is assumed to be a swap file. In this case, the system's page cache will not be used to hold the file's data. If the {stick bit} bit is set on any other file, the results are unspecified.
Solaris 10 update 4 (Global Zone).
# uname -a
SunOS mumble.amtest.com 5.10 Generic_120011-14 sun4v sparc SUNW,Sun-Fire-T1000
# chmod 1777 testfile
# ls -l testfile
-rwxrwxrwt 1 root other 0 Jul 11 14:24 testfile
# chmod 1770 testfile
# ls -l testfile
-rwxrwx--T 1 root other 0 Jul 11 14:24 testfile
# chmod 1000 testfile
# ls -l testfile
---------T 1 root other 0 Jul 11 14:24 testfile
Solaris 10 update 4 (Local Zone)
# uname -a
SunOS qatamos-z1 5.10 Generic_120011-14 sun4v sparc SUNW,Sun-Fire-T1000
# chmod 1777 testfile
# ls -l testfile
-rwxrwxrwx 1 root other 10 Jul 10 14:59 testfile
# chmod 1770 testfile
# ls -l testfile
-rwxrwx--- 1 root other 10 Jul 10 14:59 testfile
# chmod 1000 testfile
# ls -l testfile
---------- 1 root other 10 Jul 10 14:59 testfile

It isn't the fact that the bit isn't set. I guess the biggest complaint is that there is no error when trying to set the bit.
chmod returns success, even though it failed to set the bit.
Normally, if someone does not have enough privileges to modify permissions on a file, an error is returned.

Problem with Java in solaris 10 zone

HI ,
i get this error message in my solaris 10 zone :
#./java version
Exception java.lang.OutOfMemoryError: requested -4 bytes for size_t in /BUILD_AREA/jdk1.5.0_11/hotspot/src/os/solaris/vm/os_solaris.cpp. Out of swap space?
in global zone , java works fine !
uname -a
SunOS Server 5.10 Generic_141414-07 sun4u sparc SUNW,SPARC-Enterprise
best regards

I see mention of a similar problem, but only with early development releases of solaris10 branded zones running on Solaris 11 development bits. It seems as though this is not what you are running.
Since there are no swap caps nor brand emulation in place, the next thing I would suspect would be that you somehow have inconsistencies between key libraries (e.g. libc) and the kernel. This could happen if you have a full-root zone that has been force attached (zoneadm -z <zone> attach -F). In the past, I've seen products that do this under the covers (e.g. Veritas Cluster) so it may have happened without your knowledge. If it is a sparse root zone, you may want to run "zoneadm -z <zone> detach; zoneadm -z <zone> attach -u". Prior to doing so, take whatever precautions you would normally take when patching a system.
If you open a support call about this I bet the first advice you are going to get is to patch, as you seem to be 2+ years behind. Also, newer releases of Java 5 are available at http://www.oracle.com/technetwork/java/javasebusiness/downloads/java-archive-downloads-javase5-419410.html.

Failing to install pkg on non-global zone

(root)@syslog1:~# pkgadd -d . SUNWant
Processing package instance <SUNWant> from </home/iqbala>
Jakarta ANT(sparc) 11.10.0,REV=2005.01.08.05.16
WARNING: Stale lock installed for pkgrm, pkg SUNWaspell quit in remove-initial state.
Removing lock.
Using </> as the package base directory.
## Processing package information.
ERROR: Cannot allocate memory for package object array.
pkgadd: ERROR: memory allocation failure
pkgadd: ERROR: unable to process pkgmap
Installation of <SUNWant> failed (internal error).
No changes were made to the system.
(root)@syslog1:~#
(root)@syslog1:~# zonename
syslog
This non-global zone is capped to 1G phy memory out of 2G total of the T1000
(root)@syslog-global:~# uname -a
SunOS syslog-global 5.10 Generic_137137-09 sun4v sparc SUNW,Sun-Fire-T1000
(root)@syslog-global:~# zoneadm list
global
syslog
(root)@syslog-global:~# zonename
global
(root)@syslog-global:~# zonecfg -z syslog info
zonename: syslog
zonepath: /syslog
brand: native
autoboot: true
bootargs: -m verbose
pool:
limitpriv: default,sys_time
scheduling-class: FSS
ip-type: shared
inherit-pkg-dir:
     dir: /lib
inherit-pkg-dir:
     dir: /platform
inherit-pkg-dir:
     dir: /sbin
inherit-pkg-dir:
     dir: /usr
fs:
     dir: /var/logs
     special: /var/logs
     raw not specified
     type: lofs
     options: []
fs:
     dir: /usr/local
     special: /syslog-local/usr/local
     raw not specified
     type: lofs
     options: []
net:
     address: 192.168.0.114
     physical: aggr1
     defrouter: 192.168.0.1
dedicated-cpu:
     ncpus: 1-8
     importance: 10
capped-memory:
     physical: 1G
     [swap: 512M]
attr:
     name: comment
     type: string
     value: "syslog server"
rctl:
     name: zone.max-swap
     value: (priv=privileged,limit=536870912,action=deny)
(root)@syslog-global:~# prstat -Z
PID USERNAME SIZE RSS STATE PRI NICE TIME CPU PROCESS/NLWP
13118 root 7184K 5952K sleep 1 0 52:00:54 0.5% nco_p_syslog/10
11730 root 162M 123M sleep 59 0 38:51:35 0.1% splunkd/22
7324 root 12M 8280K sleep 59 0 0:58:06 0.0% syslogd/25
266 root 97M 24M sleep 49 0 31:45:02 0.0% poold/8
209 daemon 8104K 3080K sleep 59 0 24:39:56 0.0% rcapd/1
29553 root 2496K 2024K cpu4 59 5 0:00:00 0.0% splunk-optimize/1
21578 root 38M 36M sleep 59 0 0:01:10 0.0% puppetd/2
29554 root 6088K 3712K cpu0 49 0 0:00:00 0.0% prstat/1
24244 root 5760K 3104K sleep 49 0 0:00:00 0.0% bash/1
1024 noaccess 171M 96M sleep 59 0 8:41:32 0.0% java/18
27771 noaccess 189M 100M sleep 1 0 4:44:36 0.0% java/18
274 daemon 3192K 496K sleep 59 0 0:00:00 0.0% statd/1
279 daemon 2816K 576K sleep 60 -20 0:00:00 0.0% nfs4cbd/2
326 root 2304K 40K sleep 59 0 0:00:00 0.0% cimomboot/1
151 root 2576K 344K sleep 59 0 0:00:00 0.0% drd/2
ZONEID NPROC SWAP RSS MEMORY TIME CPU ZONE
3 47 465M 513M 25% 99:54:00 0.7% syslog
0 42 391M 466M 23% 71:04:39 0.1% global
Total: 89 processes, 386 lwps, load averages: 0.21, 0.26, 0.26
Am I hitting a bug?

If your pkg wants to be installed in /usr or another inherit-pkg-dir, it can't because they are share as read-only.
Verify wherer the pkg copies its files.

Problem to migrate a non-global zone to a different machine.

Hi, recently, I had try to migrate a non-global zone to a different machine but its doesnt work.
1. First, this is the structure of my machine with my non-global zone:
host1# uname -a
SunOS testsolaris 5.11 snv_101b i86pc i386 i86pc
host1# zfs list
NAME USED AVAIL REFER MOUNTPOINT
big-zone 1.71G 1.64G 20K /big-zone
big-zone/export 1.71G 1.64G 22K /big-zone/export
big-zone/export/big-zone 1.67G 1.64G 21K /big-zone/export/big-zon e
big-zone/export/big-zone/ROOT 1.67G 1.64G 18K legacy
big-zone/export/big-zone/ROOT/zbe 1.67G 1.64G 1.66G legacy
big-zone/export/zonetest 41.8M 1.64G 21K /big-zone/export/zonetes t
big-zone/export/zonetest/ROOT 41.8M 1.64G 18K legacy
big-zone/export/zonetest/ROOT/zbe 41.8M 1.64G 1.66G /big-zone/export/zonetes t/root
rpool 8.35G 7.28G 72K /rpool
rpool/ROOT 6.86G 7.28G 18K legacy
rpool/ROOT/opensolaris 6.86G 7.28G 6.73G /
rpool/dump 575M 7.28G 575M -
rpool/export 375M 7.28G 21K /export
rpool/export/home 18K 7.28G 18K /export/home
rpool/export/small-zone 375M 7.28G 21K /export/small-zone
rpool/export/small-zone/ROOT 375M 7.28G 18K legacy
rpool/export/small-zone/ROOT/zbe 375M 7.28G 375M legacy
rpool/swap 575M 7.78G 56.8M -
2. In second, I had detach my non-global zone zonetest whit this commands :
host1# zoneadm z zonetest halt
host1# zoneadm z zonetest detach
3. In third, I had move my zonepath to my new host.
host1# cd /big-zone/export
host1# tar cf zonetest.tar zonetest
host1# sftp jay@new-host
host1# put zonetest.tar
Uploading .
host1# quit
4. Unpack my .tar file
host2# cd /big-zone/export
host2# tar xf zonetest.tar
So, after this, I think that my zonepath is transfert to my new host.
This is the structure of my new host :
jay@alien:~$ uname -a
SunOS alien 5.11 snv_101b i86pc i386 i86pc Solaris
jay@alien:~$ zfs list
NAME USED AVAIL REFER MOUNTPOINT
rpool 18.3G 73.3G 72K /rpool
rpool/ROOT 2.98G 73.3G 18K legacy
rpool/ROOT/opensolaris 2.98G 73.3G 2.85G /
rpool/dump 1023M 73.3G 1023M -
rpool/export 13.3G 73.3G 19K /export
rpool/export/home 13.3G 73.3G 19K /export/home
rpool/export/home/jay 13.3G 73.3G 13.3G /export/home/jay
rpool/swap 1023M 73.9G 321M -
zdata 10.7G 80.8G 9.65G /zdata
zdata/zones 1.08G 80.8G 18K /zdata/zones
zdata/zones/zonetest 1.08G 80.8G 1.08G /big-zone/export/
*I have a mountpoint to /big-zone/export
5. I had try to configure my zone on my new host and I receive and error message:
host2# zonecfg -z zonetest
zonetest: No such zone configured
Use 'create' to begin configuring a new zone.
zonecfg:zonetest> create -a /big-zone/export/zonetest
invalid path to detached zone
zonecfg:zonetest>

And my new big-zone (on the second host) show this in the /big-zone/export/zonetest folder :
jay@alien:/zdata/zones# zfs list
NAME USED AVAIL REFER MOUNTPOINT
rpool 23.5G 68.0G 72K /rpool
rpool/ROOT 6.31G 68.0G 18K legacy
rpool/ROOT/opensolaris 6.31G 68.0G 6.18G /
rpool/dump 1023M 68.0G 1023M -
rpool/export 15.2G 68.0G 19K /export
rpool/export/home 15.2G 68.0G 19K /export/home
rpool/export/home/jay 15.2G 68.0G 15.2G /export/home/jay
rpool/swap 1023M 68.6G 361M -
zdata 11.6G 79.9G 10.7G /zdata
zdata/zones 921M 79.9G 18K /zdata/zones
zdata/zones/web 921M 79.9G 21K /zdata/zones/web
zdata/zones/web/ROOT 921M 79.9G 18K legacy
zdata/zones/web/ROOT/zbe 921M 79.9G 921M legacy
zdata/zones/zonetest 54K 79.9G 18K /big-zone/export/zonetest
zdata/zones/zonetest/ROOT 36K 79.9G 18K legacy
zdata/zones/zonetest/ROOT/zbe 18K 79.9G 18K legacy
jay@alien:/zdata/zones/zonetest# pwd
/zdata/zones/zonetest
jay@alien:/zdata/zones/zonetest# ls -ls
total 6
3 drwxr-xr-x 2 root sys 2 Feb 8 2009 dev
3 drwxr-xr-x 16 root root 19 Feb 8 2009 root
jay@alien:/zdata/zones/zonetest# cd root
jay@alien:/zdata/zones/zonetest/root# ls -ls
total 52902
1 lrwxrwxrwx 1 root root 9 Feb 1 20:29 bin -> ./usr/bin
3 drwxr-xr-x 13 root sys 15 Feb 8 2009 dev
11 drwxr-xr-x 55 root sys 168 Feb 8 2009 etc
3 dr-xr-xr-x 2 root root 2 Jan 22 16:26 home
15 drwxr-xr-x 9 root bin 241 Feb 4 2009 lib
3 drwxr-xr-x 2 root sys 2 Jan 22 16:23 mnt
3 dr-xr-xr-x 2 root root 2 Jan 22 16:26 net
3 drwxr-xr-x 4 root sys 4 Jan 24 15:26 opt
3 dr-xr-xr-x 2 root root 2 Jan 22 16:23 proc
3 drwx------ 3 root root 7 Feb 6 2009 root
5 drwxr-xr-x 2 root sys 47 Jan 22 16:24 sbin
3 drwxr-xr-x 4 root root 4 Jan 22 16:23 system
3 drwxrwxrwt 2 root sys 2 Feb 8 2009 tmp
5 drwxr-xr-x 30 root sys 42 Feb 6 2009 usr
3 drwxr-xr-x 32 root sys 32 Feb 6 2009 var
52835 -rw-r--r-- 1 root root 42882560 Jan 22 16:35 webmin-1.441.pkg
jay@alien:/zdata/zones/zonetest/root#
I think my problem is there ...
jay@alien:/big-zone/export/zonetest# pwd
/big-zone/export/zonetest
jay@alien:/big-zone/export/zonetest# ls -ls
total 8
2 ---------- 1 root root 114 Dec 31 1969 @LongLink
3 drwxr-xr-x 2 root root 2 Feb 1 21:10 root
3 drwx------ 4 root root 4 Feb 1 21:10 zonetest
jay@alien:/big-zone/export/zonetest# cd zonetest/
jay@alien:/big-zone/export/zonetest/zonetest# ls -ls
total 6
3 drwxr-xr-x 2 root sys 2 Feb 8 2009 dev
3 drwxr-xr-x 4 root root 5 Feb 1 21:10 root
jay@alien:/big-zone/export/zonetest/zonetest# cd root
jay@alien:/big-zone/export/zonetest/zonetest/root# ls -ls
total 7
1 lrwxrwxrwx 1 root root 9 Feb 1 21:10 bin -> ./usr/bin
3 drwxr-xr-x 4 root root 4 Jan 22 16:23 system
3 drwxr-xr-x 23 root sys 28 Feb 1 21:11 usr
I think I have a problem with my zfs mountpoint but I don't how to resolve this.
Edited by: jaymachine on Feb 26, 2009 6:16 PM

Adding remote printer to non-global zone

I have a non-global zone with a remote printer defined, and lpstat shows
# lpstat -lp abcdef
printer abcdef disabled since Thu Jun 06 13:18:43 2013. available.
Remote Name: abcdef
Remote Server: 192.168.x.x
On another non-global zone I want to print to the same printer. I referred to the Solaris Printing SAG, and I thought all I had to do is
lpadmin -p abcdef -s abcdefserver
but lpstat -lp abcdef gives
Failed to get printer info for abcdef: not-found
The zone is
SunOS myzone 5.10 Generic_142909-17 sun4u sparc SUNW,Sun-Fire-V490
and the destination (abcdefserver) is a Windows server with the LPD service installed.
What else do I have to do? I can ping and telnet abcdefserver:515, so the network part seems to be fine.

Please follow the procedure that you can find there : http://docs.oracle.com/cd/E19082-01/819-7761/ertsp/index.html

How I can duplicate a zone

I need to find a way to duplicate zones. For example, I create a zone, harden it and make some other changes. After that, I want to duplicate this zone with different zone name and IP addresss. How I can do that?

I had tried the following to duplicate a zone and it looks like it is working well.
1. Halt the zone that I want to duplicate
#zoneadm -z bzone halt
# zoneadm list -cvi
ID NAME STATUS PATH
0 global running /
8 azone running /export/home/azone
- bzone installed /export/home/bzone
2. Copy the binary
# mkdir -p /export/home/czone
# chmod 700 /export/home/czone
# cd /export/home/bzone
# tar cvf - ./* |( cd ../czone; tar xvf -)
3. Copy and modify the xml files
# cp /etc/zones/bzone.xml /etc/zones/czone.xml
4. vi the /etc/zones/czone.xml and change all value of bzone to czone. A new IP address is needed too.
# cat czone.xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE zone PUBLIC "-//Sun Microsystems Inc//DTD Zones//EN" "file:///usr/share/lib/xml/dtd/zonecfg.dtd.1">

<zone name="czone" zonepath="/export/home/czone" autoboot="true">
<inherited-pkg-dir directory="/lib"/>
<inherited-pkg-dir directory="/platform"/>
<inherited-pkg-dir directory="/sbin"/>
<inherited-pkg-dir directory="/usr"/>
<network address="135.91.72.196" physical="hme0"/>
</zone>
4. Edit /etc/zones/index, add the following line at the end o f the file:
czone:installed:/export/home/czone
# cat /etc/zones/index
# Copyright 2004 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
# ident "@(#)zones-index 1.2 04/04/01 SMI"
# DO NOT EDIT: this file is automatically generated by zoneadm(1M)
# and zonecfg(1M). Any manual changes will be lost.
global:installed:/
azone:installed:/export/home/azone
bzone:installed:/export/home/bzone
czone:installed:/export/home/czone
5. Boot the c zone
# zoneadm -z czone boot
# zoneadm list -cvi
ID NAME STATUS PATH
0 global running /
8 azone running /export/home/azone
10 czone running /export/home/czone
- bzone installed /export/home/bzone
6. Log into czone and change the node name with sys-unconfig.
# zlogin -C czone
[Connected to zone 'czone' console]
bzone console login: root
Password:
# sys-unconfig
WARNING
This program will unconfigure your system. It will cause it
to revert to a "blank" system - it will not have a name or know
about other systems or networks.
This program will also halt the system.
Do you want to continue (y/n) ? y
svc.startd: The system is coming down. Please wait.
svc.startd: 56 system services are now being stopped.
Mar 14 14:10:26 bzone rpcbind: rpcbind terminating on signal.
Mar 14 14:10:27 bzone syslogd: going down on signal 15
svc.startd: The system is down.
[NOTICE: Zone halted]
~.
[Connection to zone 'czone' console closed]
7. Boot the czone
# zoneadm -z czone boot
8. Login to czone and enter the system information
# zlogin -C czone
9. After the system reboot, login again and you will see everything is fine:
#zlogin -C czone
[Connected to zone 'czone' console]
czone console login: root
Password:
Mar 14 14:26:43 czone login: ROOT LOGIN /dev/console
Last login: Mon Mar 14 14:07:52 on console
Sun Microsystems Inc. SunOS 5.10 Generic January 2005
# zonename
czone

Performance degradation in a zone

Hi folks,
I'm new to solaris, so please bear with me. We've got a SUN-890, with 8 sparcv9-1800 CPUs and 32GB memory, according to "top":
Memory: 32G phys mem, 18G free mem, 64G swap, 64G free swap
This system has about 30 zones configured and is running Solaris 10, according to "uname":
SunOS sv2198 5.10 Generic_118833-24 sun4u sparc SUNW,Sun-Fire-V890
We noticed that a shell script running in a zone was taking longer and longer to run. a "ps -ef" was showing some strange "<defunct>" processes, certainly more than one usually sees. A "truss" of the script in question revealed that approximately 0.2 seconds elapsed between the exit of a child process, for example "cut" or "grep", and the shell resuming processing. This would explain the <defunct> proces. Here an example of the truss output:
9430: 5.1287 0.0000 write(1, " 0 6 7 + 0 0 0 ".., 6579) = 6579
9430: 5.1288 0.0000 _exit(0)
3424: 5.3609 0.0000 waitid(P_ALL, 0, 0xFFBFEB90, WEXITED|WTRAPPED) = 0
PID 9430 is "cut", "3424" is the script. The cut writes its result and exits at time=5.1288, the script wakes up after the "waitid" at time=5.3609.
In the default zone, things look totally different:
28302: 8.8922 0.0000 write(1, " T E C H C O D E = 0 ; ".., 19) = 19
28302: 8.8923 0.0000 _exit(0)
25849: 8.8930 0.0000 waitid(P_ALL, 0, 0xFFBFF3F0, WEXITED|WTRAPPED) = 0
(delta = 7/10000th of a second)
Other zones behave similarly to the default zone, i.e., things look normal. The system was not particularly loaded.
After a restart of the zone the problem went away...
This is probably just one of a number of symptoms.
Any ideas what could have caused this?
thanks,
Robert Urban
Message was edited by:
roburban

I have debug statements in the jsp(after every line) to spit out times and logging from the java that logs timestamps. The jsp thinks a call like this:
Render r = new Render();
takes 50 seconds. I have a statement in the constructor of this class to print out the timestamp immediately and also when its finished. The java thinks it takes only 20 seconds. That initial timestamp from the java is 30 seconds after the timestamp that is printed from the jsp just before that call.
The JSP is very small...
Chri

SunOS 5.10 zones

Similar Messages

Maybe you are looking for