Trouble w/installing Solaris 10 branded zone on solaris 11.

Having issues creating a policy that works installing solaris 10 u10 branded nfs zone on sol11 in opscenter 12c u1. Maybe i'm just overlooking something basic or it isn't supported in opscenter. I'm able to create the policy but seem to get a very non-informative error message when deploying it.
Error Message:
"The DeploymentPlan execution job failed because the DeploymentProvider ZoneDeploymentProvider for Step Create Solaris Zones failed to generate tasks for the job: Cannot prepare zone tasks: java.lang.NullPointerException. Contact My Oracle Support if the problem persists. (10445)"
Here is the OpsCenter Profile:
Name Prefix:      hous
Starting Number:      1
Zone Description:      solaris 10 update 10
ZoneType:
Branded Zone
Branded Zone Image:
s10-update10-flar
Automatic Recovery:
Yes
Priority of Recovery:      0
CPU Shares:      1
CPU Cap:      0
Physical Memory Cap:      0
Locked Memory Cap:      0
Virtual Memory Cap:      0
Language:      en_US.ISO8859-15
Time Zone:      US/Central
Terminal Type:      xterm
NFSv4 Domain Name:      dynamic
Automatically boot zone when the global zone is booted:
Yes
Automatically boot zone after creation:
Yes
Storage for the metadata Library:      NAS, zone-prod1

Problem found. To jumpstart last two HP Blades we used the copies of AI templates. When we did it from scratch and re-installed the Solaris 11.0 we have no more errors.

Similar Messages

[Solved] Arch Linux in a Solaris branded Zone

Hello,
After having read this article at the Genunix WiKi, I 'd very much like to install Arch Linux (http://204.152.191.100/wiki/index.php/I … anded_zone) in a Solaris branded Zone. However, the Arch Linux file to download is about two years old now, so I 'd like to roll one with a bit more recent kernel.
I just wonder what might be the procedure to do so.
a) Is it just unpacking the ISO inside the zone and let it enroll whilst booting?, or
b) is it advisable to install the old package and upgrade from there?
I am quite curious to learn how this works.
TIA, Algey
Last edited by algernonz (2011-11-28 18:42:31)

Hi,
it does indeed sound like an interesting little project. You should, however, revert to your procedure (a) and use one of the recent ISO images the Arch team has updated this year.
Using that old tar will give you numerous headaches when trying to upgrade. Doing a simple upgrade from that old file will most probably break the system, thats why they took the effort to provide the new ones.
Good luck.

Solaris Branded Zones, Unable to reboot/Halt

Hi People,
Hoping someone can help. Im running Solaris 10 on a Sun Workstation Ultra 45. I have two disks. One disk has the default install of solaris 10 all updated to the latest patches.The second disk is mounted as /zones and holds each of the zones on ZFS. I have then downloaded and installed successfully Solaris 8 and Solaris 9 and Solaris 10 zones. So I have 3 zones.
The problem I am facing is I can boot up all 3 zones fine and they work great, however when I halt or reboot either Solaris 8 or solaris 9, they never come back up. I try and zlogin to them and telnet and ssh and they are totally unresponsive and quite literally dont boot. I have tried to pkill -9 -z zonename ; umount /zonesfilesystem; zpool clear and even rebooted the Global zone. Still will not come up. The only way they will boot after being shutdown is if i shutdown the global zones and turn the server off and back on.
Solaris 10 Zone boots up and down fine with no isses. I have tried this on both UFS and ZFS thinking it might be a file lock issue. Still unable to reboot or halt a zone and bring it back up.
Any help please :)
Thanks in advance.

When they are unable to come back up, what does 'zoneadm list -cv' say? If the state of the zone is "down" or "shutting_down", you can probably benefit from the fix for:
7038404 outstanding zone references should not cause zone_destroy(2) to hang
This is available in 147440-05 (sparc) / 147441-05 (x86) or later.

Solaris 10 Zone for Solaris 11.1 creation with template fails.

Hi,
We are trying to use the Oracle VM Template for Oracle Solaris 10 Zone to create a solaris 10 zone on a solaris 11.1 GZ
root@exsolh0005:/opt/scripts# ./solaris-10u11-sparc -v
This is an Oracle VM Template for Oracle Solaris Zones.
Copyright Â© 2011, Oracle and/or its affiliates. All rights reserved.
This software and related documentation are provided under a license
agreement containing restrictions on use and disclosure and are
protected by intellectual property laws. Except as expressly
permitted in your license agreement or allowed by law, you may not
use, copy, reproduce, translate, broadcast, modify, license,
transmit, distribute, exhibit, perform, publish, or display any
part, in any form, or by any means. Reverse engineering,
disassembly, or decompilation of this software, unless required by
law for interoperability, is prohibited.
Version: 1.0.9.12
root@exsolh0005:/opt/scripts# ./solaris-10u11-sparc -p /rpool -a 10.83.128.35/24 -i net6 -z testzone
This is an Oracle VM Template for Oracle Solaris Zones.
Copyright Â© 2011, Oracle and/or its affiliates. All rights reserved.
This software and related documentation are provided under a license
agreement containing restrictions on use and disclosure and are
protected by intellectual property laws. Except as expressly
permitted in your license agreement or allowed by law, you may not
use, copy, reproduce, translate, broadcast, modify, license,
transmit, distribute, exhibit, perform, publish, or display any
part, in any form, or by any means. Reverse engineering,
disassembly, or decompilation of this software, unless required by
law for interoperability, is prohibited.
IMAGE: ./solaris-10u11-sparc
ZONE: testzone
ZONEPATH: /rpool/testzone
VNIC: vnicZBI83273795
IP ADDR: 10.83.128.35
NETMASK: 255.255.255.0
DEFROUTER: 10.83.128.1
TIMEZONE: Europe/Copenhagen
Checking disk-space for extraction
Ok
Extracting in /opt/scripts/bootimage.8Ham6r ...
100% [===============================>]
Checking data integrity
Ok
Checking platform compatibility
The host and the image do not have the same Solaris release:
host Solaris release: 5.11
image Solaris release: 5.10
Will create a Solaris 10 branded zone.
Checking disk-space for installation
Ok
Installing in /rpool/testzone ...
100% [===============================>]
Attaching testzone
Problem attaching testzone.
More details in /var/sadm/install/logs/solaris-10u11-sparc.log
Cleaning up and exiting.
Friday, May 10, 2013 03:18:01 PM CEST: cleaning up
root@exsolh0005:/opt/scripts#
root@exsolh0005:/opt/scripts# cat /var/log/zones/zoneadm.20130510T131756Z.testzone.attach
[Friday, May 10, 2013 03:17:56 PM CEST] ==== Starting: /usr/lib/brand/solaris10/attach testzone /rpool/testzone -c /opt/scripts/bootimage.8Ham6r/sysidcfg.testzone ====
[Friday, May 10, 2013 03:17:56 PM CEST] Progress being logged to /var/log/zones/zoneadm.20130510T131756Z.testzone.attach
[Friday, May 10, 2013 03:17:56 PM CEST] Pinning datasets under rpool/testzone
[Friday, May 10, 2013 03:17:56 PM CEST] Pinning rpool/testzone
[Friday, May 10, 2013 03:17:56 PM CEST] Pinning rpool/testzone/rpool
[Friday, May 10, 2013 03:17:56 PM CEST] Pinning rpool/testzone/rpool/ROOT
[Friday, May 10, 2013 03:17:56 PM CEST] Pinning rpool/testzone/rpool/ROOT/zbe
[Friday, May 10, 2013 03:17:56 PM CEST] Log File: /var/log/zones/zoneadm.20130510T131756Z.testzone.attach
[Friday, May 10, 2013 03:17:57 PM CEST] Converting detached zone boot environment 'zbe'.
[Friday, May 10, 2013 03:17:57 PM CEST] Unmounting /rpool/testzone/root
[Friday, May 10, 2013 03:18:00 PM CEST] setting ZFS property zoned=on on rpool/testzone/rpool
[Friday, May 10, 2013 03:18:00 PM CEST] setting ZFS property canmount=noauto on rpool/testzone/rpool/ROOT
[Friday, May 10, 2013 03:18:00 PM CEST] setting ZFS property mountpoint=legacy on rpool/testzone/rpool/ROOT
[Friday, May 10, 2013 03:18:01 PM CEST] Mounting boot environment in rpool/testzone/rpool/ROOT/zbe-0 at /rpool/testzone/root (including child datasets)
cannot open 'ERROR: Error: Command <zfs list -H -o name -t filesystem -r rpool/testzone/rpool/ROOT/zbe-0> exited with status 1': invalid dataset name
[Friday, May 10, 2013 03:18:01 PM CEST] ERROR: refresh of ERROR: Error: Command <zfs list -H -o name -t filesystem -r rpool/testzone/rpool/ROOT/zbe-0> exited with status 1 failed
[Friday, May 10, 2013 03:18:01 PM CEST] ERROR: Error: rpool/testzone/rpool/ROOT/zbe-0: No such dataset.
[Friday, May 10, 2013 03:18:01 PM CEST] Unpinning datasets under rpool/testzone
[Friday, May 10, 2013 03:18:01 PM CEST] Unpinning rpool/testzone
[Friday, May 10, 2013 03:18:01 PM CEST] Unpinning rpool/testzone/rpool
[Friday, May 10, 2013 03:18:01 PM CEST] Unpinning rpool/testzone/rpool/ROOT
[Friday, May 10, 2013 03:18:01 PM CEST] Unpinning rpool/testzone/rpool/ROOT/zbe
[Friday, May 10, 2013 03:18:01 PM CEST] Result: Attach Failed.
[Friday, May 10, 2013 03:18:01 PM CEST] Exiting with exit code 254
[Friday, May 10, 2013 03:18:01 PM CEST] ==== Completed: /usr/lib/brand/solaris10/attach testzone /rpool/testzone -c /opt/scripts/bootimage.8Ham6r/sysidcfg.testzone ====
Looks like a script bug..
Regards
Claus

Hello All,
I would love to know if someone has a solution to this as I am seeing a similar issue with a slightly different setup.
Solaris 8 and Netra 240. I get the same result with and without patches and finish scripts. After the jumpstart and the failed boot attempt from disk. I can boot from cd, copy the glm driver from the cd to disk, and then everything works as it should. Obviously this is not a solution but only a work around.
Is it something to do with the SCSI hardware architecture used in the *240s?
Edited by: Gareth_Mann on Oct 2, 2007 7:41 PM

Probem in creating Solaris 10 branded zone on Solaris 11.0

Hello,
I'm creating a zone on HP Blade with Solaris 11.0 using VM template Solaris 10u10 (x86).
I haven't /etc/defaultrouter file, my Solaris 11 is 11/11 and not Express version.
The error shows that variable used for temporary directory is lost. It's very strange because I completed 5 installations in the same way without any problem. But two last just are stopping with this error:
./setupSysidcfgStaticIP[50]: America/Montreal/sysidcfg.VL-VM-LD104: cannot create [No such file or directory]
cp: cannot access America/Montreal/sysidcfg.VL-VM-LD104
chmod: WARNING: can't access America/Montreal/sysidcfg.VL-VM-LD104
The "setupSysidcfgStaticIP" script is one of the many in the image which runs the creation of sysidcfg-file for the zone. It has 9 arguments to run:
CONT=$1
ZONEPATH=$2
NIC=$3
IP_ADDR=$4
NETMASK=$5
DEFROUT=$6
PASSWD=$7
TZONE=$8
TMPDIR=$9
The sysidcfg-filename is calculated as SYSIDCFG=$TMPDIR/sysidcfg.$CONT <- here is the error, the $TMPDIR fails
After that the script creates the file and renames it:
/usr/bin/rm -rf $SYSIDCFG
/usr/bin/sed -e s/RzoneR/$CONT/ $_tktHome/conf/sysidcfgStaticIP |\
/usr/bin/sed -e s/RnicR/$NIC/ |\
/usr/bin/sed -e s/RnetmaskR/$NETMASK/ |\
/usr/bin/sed -e s/RdefaultrouterR/$DEFROUT/ |\
/usr/bin/sed -e s/Rip_addrR/$IP_ADDR/ |\
/usr/bin/sed -e s]RtimezoneR]$TZONE] |\
/usr/bin/sed -e s]RpasswdR]$PASSWD] >> $SYSIDCFG
/usr/bin/cp $SYSIDCFG $ZONEPATH/root/etc/sysidcfg
/usr/bin/chmod 777 $SYSIDCFG
The tmpdir is created and used in main script but it fails in the subroutine. I don't understand why it was used before without any problem and now it fails. I spent yesterday about 6 hours to debug it but still don't have any idea how to fix it.
I use the image solaris-10u10-x86.bin .
I cannot use the newer image solaris-10u11-x86.bin (which works perfectly) because it isn't certified for our production and the set of servers needs to be installed with the same patch level.
Any help will be appreciated!
Vlad
Edited by: 919435 on May 24, 2013 5:56 AM

Problem found. To jumpstart last two HP Blades we used the copies of AI templates. When we did it from scratch and re-installed the Solaris 11.0 we have no more errors.

Solaris10 branded zone creation error on Solaris 11.1

Hello,
We are having the problem in creating the Solaris10 branded zone on the solaris 11.1 version. We are trying to install this branded zone using the solaris10 VM template. Please can some one through some pointers ?
The installation steps stops at "Waiting for boot to complete" but never successfully boots even waiting for long times. We can see that Zone status in configured only.
root@localhost:~# /home/solaris-10u10-sparc.bin -p /solaris10 -i net0 -a xxx.xxx.xxx.xxx -z zone10
This is an Oracle VM Template for Oracle Solaris Zones.
Copyright Â© 2011, Oracle and/or its affiliates. All rights reserved.
This software and related documentation are provided under a license
agreement containing restrictions on use and disclosure and are
protected by intellectual property laws. Except as expressly
permitted in your license agreement or allowed by law, you may not
use, copy, reproduce, translate, broadcast, modify, license,
transmit, distribute, exhibit, perform, publish, or display any
part, in any form, or by any means. Reverse engineering,
disassembly, or decompilation of this software, unless required by
law for interoperability, is prohibited.
Checking disk-space for extraction
Ok
Extracting in /root/bootimage.dnaqaD ...
100% [===============================>]
Checking data integrity
Ok
Checking platform compatibility
The host and the image do not have the same Solaris release:
host Solaris release: 5.11
image Solaris release: 5.10
Will create a Solaris 10 branded zone.
IMAGE: /home/solaris-10u10-sparc.bin
ZONE: zone10
ZONEPATH: /solaris10/zone10
INTERFACE: net0
VNIC: vnicZBI6783
MAC ADDR: 2:8:20:5c:92:f5
IP ADDR: xxx.xxx.xxx.xxx
NETMASK: 255.0.0.0
DEFROUTER: # # This file is deprecated. Default routes will be created for any router # addresses specified here, but they will not change when the underlying # network configuration profile (NCP) changes. For NCP-specific static # routes, the '-p' option of the route(1M) command should be used. # # See netcfg(1M) for information about network configuration profiles. #
TIMEZONE: Asia/Kolkata
Checking disk-space for installation
Ok
Installing in /solaris10/zone10 ...
100% [===============================>]
Using a static exclusive-IP
./setupSysidcfgStaticIP[50]: file/sysidcfg.zone10: cannot create [No such file or directory]
cp: cannot access file/sysidcfg.zone10
chmod: WARNING: can't access file/sysidcfg.zone10
Attaching zone10
Booting zone10
zoneadm: zone 'zone10': must be installed before boot.
Waiting for boot to complete
booting...
booting...
booting...
root@localhost:# zoneadm list -cv
ID NAME STATUS PATH BRAND IP
0 global running / solaris shared
4 zone1 running /zone1 solaris excl
5 zone2 running /zone2 solaris excl
- zone10 configured /solaris10/zone10 solaris10 excl
root@localhost:#
I have installed the package pkg:/system/zones/brand/brand-solaris10 on the system.
# cat /etc/release
Oracle Solaris 11.1 SPARC
Copyright (c) 1983, 2012, Oracle and/or its affiliates. All rights reserved.
Assembled 19 September 2012

Sorry, please ignore my previous message about the wrong ip address (I assume you entered a valid ip address).
The problem you are facing is related to the defaultrouter, and I assume you are running Solaris 11 update 1.
If so, to workaround the problem for the time being you may edit the /etc/defaultrouter file in the global-zone and enter the ip address of the default router (you can remove this change when the template deployment is completed).
If you have no idea about the default router ip address, just rename /etc/defaultrouter (e.g. to /etc/defaultrouter.orig) so that it cannot be found by the template. Again, you can undo the change when deployment is complete.
Thierry

Possible to upgrade Solaris 9 branded zone to 10?

We have an application running in a Solaris 9 branded zone. The application version is not compatible with Solaris 10, however, the next version of the application is compatible with Solaris 10.
So the plan is to upgrade the application in the branded zone, then upgrade the branded zone to Solaris 10.
All the reading I have found so far indicates that it is not possible to upgrade a Solaris 9 branded zone to !0.
Can it be done, and if so, pointers to a documented process would be helpful.

fog-on-the-tyne wrote:
We have an application running in a Solaris 9 branded zone. The application version is not compatible with Solaris 10, however, the next version of the application is compatible with Solaris 10.
So the plan is to upgrade the application in the branded zone, then upgrade the branded zone to Solaris 10.If the next version is compatible with Solaris 10 then backup the data,
create a new Solaris 10 zone
install the new version into the zone
migrate the data
test
destroy the now unnecessary Solaris 9 branded zone.
For something like this play in a dev environment first.
alan

Solaris 8 graphical logon (CDE) in branded zone

How do I enable/configure a graphical interface (cde) for my Solaris 8 branded zone in solaris 10?

1. check if dtlogin is running in S8 BZ:
# ps -ef | grep dtlogin
if it's not running start it:
# /etc/init.d/dtlogin start
2. from client initiate a XDMCP request using the IP of this S8 BZ.
From Solaris 10 you can use "Options -> Remote Login".

Multithreading issue on Solaris 8 branded zone

Hi,
We are facing a multithreading problem in Solaris 8 container (branded zone) on Solaris 10.
The core file shows 2 LWPs for a single thread.
First LWP
(dbx) lwp
current LWP ($lwp) is l@1403
(dbx) print this->m_ThreadId->m_IdImpl.m_PosixId
this->m_ThreadId.m_IdImpl.m_PosixId = 1404U
Second LWP
(dbx) lwp
current LWP ($lwp) is l@1404
(dbx) print this->m_ThreadId->m_IdImpl.m_PosixId
this->m_ThreadId.m_IdImpl.m_PosixId = 1404U
Another point to note is that dbx returns 'MT support is disabled' for this program even though it has been built using the -mt option. The dbx version is Sun Dbx Debugger 7.5 2005/10/13.
As far as I have read, the Solaris 8 branded zone uses the alternate T2 thread library. Note also that this program is linked with the alternate thread library @ /usr/lib/lwp.
This alternate thread library is supposed to use the 1:1 thread model.
Can someone explain why are we then seeing 2 LWPs for a single thread ?
Thanks,
Best regards,
Raj Iyer

This error messages are output by
cssd which is a input method of Japanese.
If you don't use Japanese input method cs00, you can stop it by following method.
# /etc/init.d/loc.ja.cssd stop
# mv /etc/rc2.d/S90loc.ja.cssd /etc/rc2.d/_S90loc.ja.cssd

Confused about ZFS filesystems created with Solaris 11 Zone

Hello.
Installing a blank Zone in Solaris *10* with "zonepath=/export/zones/TESTvm01" just creates one zfs filesystem:
+"zfs list+
+...+
+rzpool/export/zones/TESTvm01 4.62G 31.3G 4.62G /export/zones/TESTvm01"+
Doing the same steps with Solaris *11* will ?create? more filesystems:
+"zfs list+
+...+
+rpool/export/zones/TESTvm05 335M 156G 32K /export/zones/TESTvm05+
+rpool/export/zones/TESTvm05/rpool 335M 156G 31K /rpool+
+rpool/export/zones/TESTvm05/rpool/ROOT 335M 156G 31K legacy+
+rpool/export/zones/TESTvm05/rpool/ROOT/solaris 335M 156G 310M /export/zones/TESTvm05/root+
+rpool/export/zones/TESTvm05/rpool/ROOT/solaris/var 24.4M 156G 23.5M /export/zones/TESTvm05/root/var+
+rpool/export/zones/TESTvm05/rpool/export 62K 156G 31K /export+
+rpool/export/zones/TESTvm05/rpool/export/home 31K 156G 31K /export/home"+
I dont understand why Solaris 11 is doing that. Just one FS (like in Solaris 10) would be better for my setup. I want to configure all created volumes by myself.
Is it possible to deactivate this automatic "feature"?

There are several reasons that it works like this, all guided by the simple idea "everything in a zone should work exactly like it does in the global zone, unless that is impractical." By having this layout we get:
* The same zfs administrative practices within a zone that are found in the global zone. This allows, for example, compression, encryption, etc. of parts of the zone.
* beadm(1M) and pkg(1) are able to create boot environments within the zone, thus making it easy to keep the global zone software in sync with non-global zone software as the system is updated (equivalent of patching in Solaris 10). Note that when Solaris 11 updates the kernel, core libraries, and perhaps other things, a new boot environment is automatically created (for the global zone and each zone) and the updates are done to the new boot environment(s). Thus, you get the benefits that Live Upgrade offered without the severe headaches that sometimes come with Live Upgrade.
* The ability to have a separate /var file system. This is required by policies at some large customers, such as the US Department of Defense via the DISA STIG.
* The ability to perform a p2v of a global zone into a zone (see solaris(5) for examples) without losing the dataset hierarchy or properties (e.g. compression, etc.) set on datasets in that hierarchy.
When this dataset hierarchy is combined with the fact that the ZFS namespace is virtualized in a zone (a feature called "dataset aliasing"), you see the same hierarchy in the zone that you would see in the global zone. Thus, you don't have confusing output from df saying that / is mounted on / and such.
Because there is integration between pkg, beadm, zones, and zfs, there is no way to disable this behavior. You can remove and optionally replace /export with something else if you wish.
If your goal is to prevent zone administrators from altering the dataset hierarchy, you may be able to accomplish this with immutable zones (see zones admin guide or file-mac-profile in zonecfg(1M)). This will have other effects as well, such as making all or most of the zone unwritable. If needed, you can add fs or dataset resources which will not be subject to file-mac-profile and as such will be writable.

Cloning the branded zone

Hi
I have created a Solaris 10 branded zone on Solaris 11 SPARC system. Can I use clone option to clone the Solaris 10 zone to make a copy like we usually do with Sparse zones? Or is there any different way to clone the branded zones? Please point me to the document.
$ cat /etc/release
                            Oracle Solaris 11.1 SPARC
Copyright (c) 1983, 2012, Oracle and/or its affiliates. All rights reserved.
                           Assembled 19 September 2012
$ zoneadm list -iv
ID NAME             STATUS     PATH                           BRAND    IP
   0 global           running    /                              solaris shared
   1 s10-zone1        running    /zones/s10-zone1               solaris10 excl

okay. Thanks.
Is having the sysidcfg file mandatory for Branded zones? I think, I have never used them in the Sparse Zones. I had different files for configuration like /etc/defaultrouter, /etc/hosts, etc.. I guess in Branded zones, you do not need to have these files present or configured.. just have sysidcfg file, right? Or?

Solaris 10 branded zone VM Template Install Problem

Hi,
I don't seem to be able to install the template on a system that uses an aggregate NIC (aggr0). The template install script is looking for physical NICs, which it can't use since the NICs are assigned to the aggregate link.
Any suggestions for a clean solution or workaround?
Thanks

On line 1 of /tmp/zcfg.final:
SYSsolaris10: No such zone configured
Problem configuring the zone10 zone, exitingThis indicates one of two things:
1. You are not running Solaris 11. You may be running Solaris 11 Express, where that template zone name would have been SUNWsolaris10 rather than SYSsolaris10.
2. You do not have the solaris10 brand installed. You can fix that with:
# pkg install pkg:/system/zones/brand/brand-solaris10In either case, it would probably be better for the script that wraps the archive to check before trying to install the zone to give a more helpful error message.
rm: Cannot remove any directory in the path of the current working directory
//bootimage.7Oayzm/bootstrap
rm: Unable to remove directory //bootimage.7Oayzm: Directory not emptyThis seems to be an unrelated bug in the error handling routines in the script that wraps the archive. I'll raise this thread to the attention of those that assemble the VM Templates.

Solaris 8 branded zone and privileges

Hello,
I've just installed a Solaris 8 Branded zone to migrate an old server. The migration worked like a charm, and everything seems ok excepted one thing. The zone must run a Lotus Domino server, so the process needs to bind ports 80, 443 and 389, but it can't.
I've found things about the limitpriv directive for the zone configuration, and the net_privaddr privilege to allow a process to bind ports under 1024.
So now, if I run the process in the non global zone as root, it can bind, but if it is launched as the user notes, it can't.
If I use the ppriv command to see what are the privileges of the process, I see :
1945:   /opt/lotus/notes/latest/sunspa/server
flags = <none>
        E: file_link_any,proc_exec,proc_fork,proc_info,proc_session
        I: file_link_any,proc_exec,proc_fork,proc_info,proc_session
        P: file_link_any,proc_exec,proc_fork,proc_info,proc_session
        L: contract_event,contract_observer,file_chown,file_chown_self,file_dac_execute,file_dac_read,file_dac_search,
        file_dac_write,file_link_any,file_owner,file_setid,ipc_dac_read,ipc_dac_write,ipc_owner,net_bindmlp,net_icmpaccess,
        net_mac_aware,net_privaddr,net_rawaccess,proc_audit,proc_chroot,proc_exec,proc_fork,proc_info,proc_lock_memory,
        proc_owner,proc_session,proc_setid,proc_taskid,sys_acct,sys_admin,sys_audit,sys_mount,sys_nfs,sys_resourceSo, the net_privaddr appears in the limit, but it is not enabled. How can I make it enabled for that process?
Thanks

Thanks for the link, good explanations about privileges but they seem unusable in Solaris 8 branded zone. It suggests to create a role with the privileges my process needs, using the "rolemod -K" command, but this option does not exist for the rolemod command in my Solaris 8 zone, it just supports "classic" RBAC.
Maybe the solution would be to create the good profile for the user running the process, but I'm a little bit lost with RBAC and I can't find an existing profile corresponding to what I want.
Actually, the limitpriv for my zone is "default,net_rawaccess,net_privaddr,file_dac_read" and that's all. I added net_privaddr and file_dac_read because I saw that a "ppriv -D" on the Lotus server complained about the lack of these privileges, but in fact they are already included in default privileges.

Solaris 10-Branded Zone

Hi,
I am trying to establish whether the following configuration is officially supported (and documented):
"Non-Global zone running a release of Solaris 10 which is older than the release of Solaris 10 running in the Global Zone".
I'm familiar with the idea of Branded Zones to support Solaris 8, 9 & some Linux kernels, and have seen some forum posts where people have created Solaris 10-branded zones, but haven't really seen anything that puts the official seal of approval on that configuration. Also I'm familiar with LDOMs and appreciate that I could get to where I want to be that way too.
Any help welcome.
Thanks,
Paul.

This will be supported in Solaris 10 Upate 9 to a degree, using p2v. Below is a reply I had to a request I'd put in. You might also want to read this
http://blogs.sun.com/jerrysblog/entry/zones_p2v
Hi Sean,
I got information that p2v project is being backported for S10u9
This means, that you will be able to install a native zone from a flar.
I don't have detailed information at the moment, how this will work in terms of
patching in combination with Global Zone and other sibling NGZ's.
+According to Jerry Jelinek, Solaris10-branded zones will not being backported to Solaris 10,+
Got this info yesterday evening from Jerry.
I'll provide some more info about the p2v project for native zones in coming Solaris 10_U9,
once I got more details.
So, I'd suggest to check, whether the mentioned p2v project with flar on native zones might fit your requirements.
Thanks,
Alfred
Edited by: ftoomsh on Sep 2, 2010 3:02 AM

Creating a Solaris 8 branded zone

I am in the process of configuring a Solaris 8 branded zone using the SUNWsolaris8 package and the instructions in the Solaris8 Container Guide. Solaris 10 08/07 is installed in the global zone. I have the following kernel patches installed as required: 127111-08 and 128548-08. I get the following error after configuring the zone when I try to verify the zone:
-bash-3.00# zonecfg -z gfxc-qazone
gfxc-qazone: No such zone configured
Use 'create' to begin configuring a new zone.
zonecfg:gfxc-qazone> create -t SUNWsolaris8
zonecfg:gfxc-qazone> set autoboot=true
zonecfg:gfxc-qazone> set zonepath=/export/zones/gfxc-qazone
zonecfg:gfxc-qazone> add attr
zonecfg:gfxc-qazone:attr> set name=machine
zonecfg:gfxc-qazone:attr> set type=string
zonecfg:gfxc-qazone:attr> set value=sun4u
zonecfg:gfxc-qazone:attr> end
zonecfg:gfxc-qazone> verify
gfxc-qazone: unknown brand.
gfxc-qazone: Invalid document
I cannot find any other information anywhere on this error. I am hoping those that have successfully installed a Solaris 8 branded zone can help me out. Thanks.

I have installed the SUNWs8brand packages before I started the configuration and I also installed the patch. I am not sure what you mean if the package installed in the correct order. I cannot find what I am missing. The original installation for the global zone was using the SUNCreq with other packages added during the installation. I realized after the O/S installation that I needed the zone packages as well as the live upgrade packages. After installing those packages I installed the SUNWs8brand packages. Let me know if there is something else that I am missing. I am thinking of re-installing the O/S with the End User software group.

Trouble w/installing Solaris 10 branded zone on solaris 11.

Similar Messages

Maybe you are looking for