Zfs snapshot of "zoned" ZFS dataset

I have a ZFS (e.g. tank/zone1/data) which is delegated to a zone as a dataset.
As root in the global zone, I can "zfs snapshot" and "zfs send" this ZFS:
zfs snapshot tank/zone1/data and zfs send tank/zone1/data without any problem. When I "zfs allow" another user (e.g. amanda) with:
zfs allow -ldu amanda mount,create,rename,snapshot,destroy,send,receivethis user amanda CAN DO zfs snapshot and zfs send on ZFS filesystems in the global zone, but it can not do these commands for the delegated zone (whilst root can do it) and I get a permission denied. A truss shows me:
ioctl(3, ZFS_IOC_SNAPSHOT, 0x080469D0)          Err#1 EPERM [sys_mount]
fstat64(2, 0x08045BF0)                          = 0
cannot create snapshot 'tank/zone1/data@test'write(2, " c a n n o t   c r e a t".., 53) = 53Which setting am I missing to allow to do this for user amanda?
Anyone experiencing the same?
Regards,
Marcel

Hi Robert,
Thanks for your response. I suspected this might be the case, but it seems like I get conflicting information from the Sun website. It still says recommended and security patches are free everywhere I looked except when I went to download them. We got this machine in October and I obtained and installed a recommended patch cluster as well as a bunch of ZFS patches (it might have even been early November, shortly before the update), using only a valid account with no contract.
It would have been nice to know the policy on patch clusters was changing shortly, since now I want to use the snapshots as a backup for users.
For us at least, an upgrade install would be a royal pain in the butt, since this machine is sitting in a data center in the basement and that would entail me signing in there and sitting on the floor while it installs from DVD media.

Similar Messages

  • Zfs snapshots and booting ...

    Hello,
    In solaris 9, filesystem snapshots did not survive reboots. Do zfs snapshots in solaris 10 persist across reboots ?
    Can I boot off of a zfs partition ?
    thanks.

    Does this mean that when new machines appear with zfs
    support, OR when I can update my PROM, that I will be
    able to boot a zfs partition ?ZFS isn't out yet, so your question is premature. We'll get a look at it within a few weeks, hopefully.
    However, a few months ago it was widely reported by the developers that the initial release would not have boot support. Who knows if this has changed or not.
    I don't see any particular reason that PROM or hardware support is required, it should just need a bootloader that understands ZFS. I don't think that there's any UFS support in the existing proms. Just stuff that understands the VTOC label and how to load and execute a few blocks from a particular slice.
    Darren

  • Zfs snapshot question

    Hi guys,
    I will really appreciate it if someone can answer this for me.
    I do understand that you can use snapshots to back up file systems. But they also use up pool space when their file systems grow.
    So, is it necessary to create zfs snapshots even when you already have a full system back up in place?
    Thank you very much for your kind explanation.
    Arrey

    985798 wrote:
    So, is it necessary to create zfs snapshots even when you already have a full system back up in place? Nobody will force you to create or keep snapshots and if you are happy with taking "classic" backups then there may be no need for additional snapshots. And since snapshots will also take up space in your pool, it is usually a good idea to keep them only for a short period and delete them periodically. I like to use snapshots for two purposes:
    - create a snapshot, then write that snaptshot to take and destroy it afterwards. that way, you can guarantee that this tape backup is consistent
    - create snapshot at regular intervals and keep them around for a few days so that if I need to restore a file from just a day ago I don't have to go back to tapes but can rather fetch it from the snapshot. So that would be in addition to regular backups
    cheers
    bjoern

  • ZFS snapshot and SCP

    Hi,
    Any one can share the difference between the usage of ZFS snapshot/restoring the data and ordinary SCP to other host.
    Regards
    Siva

    The idea is that when you create a clone, it is lightweight and based on the snapshot. That's what makes it so fast. You're not copying every block in the filesystem. So the snapshot is what ties together the parent filesystem and the clone.
    For the clone to be independent, you'd have to copy all the blocks. There's no option to do that within the clone process. So as long as both the parent filesystem and the clone filesystem are around, the snapshot has to exist as well.
    Darren

  • Receiving zfs snapshots from remote system

    Hi guys,
    if you create zfs snapshots on systemA and then send them to systemB, how do you recover the snapshots from systemB back to systemA?
    Thanks guys .

    The same way, just do a send/receive from B to A. But that would create a new filesystem, not get you the snapshot within the original zfs back.
    cheers
    bjoern

  • ZFS Snapshots/ZFS Clones of Database on sun/solaris

    Our production database is on Sun/Solaris 10 (SunOS odin 5.10 Generic_127127-11 sun4u sparc SUNW,SPARC-Enterprise) with oracle 10.1.0 . It is about 1TB in size. We have also created our MOCK and DEVELOPMENT databases from the Production database. To save disk space, we created these databases as ZFS Snapshots/ZFS Clones at the OS level and are using less than 10GB each being clones as on now. Now I want to upgrade the production database from oracle 10.1 to 11.2 but I don't want to upgrade the MOCK and DEVELOPMENT databases for the time being and want them to continue to run as clones on 10.1. After upgrade, Prod will run from 11g oracle tree one one machine and MOCK/DEVL on 10g tree on another machine. Will the upgrade of Production from 10.1 to 11.2 INVALIDATE the cloned MOCK and DEVELOPMENT databases?? There might be data types/features in 11g which do not exist in 10g.
    Below are the links to the documentation we used to create the snapshots.
    http://docs.huihoo.com/opensolaris/solaris.../html/ch06.html
    http://docs.huihoo.com/opensolaris/solaris...ml/ch06s02.html

    Hi,
    The mentioned links in the post is not working.
    I would suggest u to raise an Official S.R. with http://support.oracle.com prior upgrading your database.
    Also you can try this out with 10g db installation on TEST machine and create databases as ZFS Snapshots/ZFS Clones at the OS level for MOCK. Then upgrade the 10g database and test it.
    Refer:
    *429825.1 -- Complete Checklist for Manual Upgrades to 11gR1*
    *837570.1 -- Complete Checklist for Manual Upgrades to 11gR2*
    Regards,
    X A H E E R

  • SunStorage 7110 + zfs snapshot

    I have a snapshot of a zfs file system on a server and I am trying to send it to the storage array using this zfs command. Does anyone know why I get the output shown below?
    zfs send testpool/[email protected] | ssh [email protected] zfs recv -F pool-0/[email protected]
    aksh: invalid command "zfs recv -F pool-0/[email protected]"
    aksh: invalid command "IûIûIÊ(Ê(IIIIf:ÿÿ Á!III:I:I:I:IûIIûIIIISISISISIÿIIIIIIIIIIIIIIIûIp}ûI A
    @# |øI"
    aksh: invalid command "Ûÿÿÿÿÿÿ"
    aksh: invalid command "ûI"
    This keeps repeating....I did a ctrl+c to stop it.

    Hi Robert,
    Thanks for your response. I suspected this might be the case, but it seems like I get conflicting information from the Sun website. It still says recommended and security patches are free everywhere I looked except when I went to download them. We got this machine in October and I obtained and installed a recommended patch cluster as well as a bunch of ZFS patches (it might have even been early November, shortly before the update), using only a valid account with no contract.
    It would have been nice to know the policy on patch clusters was changing shortly, since now I want to use the snapshots as a backup for users.
    For us at least, an upgrade install would be a royal pain in the butt, since this machine is sitting in a data center in the basement and that would entail me signing in there and sitting on the floor while it installs from DVD media.

  • Is there any way to refresh the zfs snapshot other than creating another on

    Hi,
    I want to use the zfs send / recv replication, after I create the snapshot and do send/ recv to the remote filesystem, is there any way to do send and recv from the same snapshot after making some changes to the original filesystem other than creating another snapshot every time before send / recv
    Thanking you
    Ushas Symon

    No, you'd have to take another snapshot and then send it, but you don't need to save all the snapshots after you are done. If you script it out to take snapshots fairly often during the day, the amount of data would be small. You can also send to a file and then backup that file to tape or whatever, you wouldn't have to save a million snapshots. You can also look into OpenSolaris' Time Slider function.

  • Solaris 10 kernel patch upgrade

    Hi all,
    i am in a process of upgrading the kernel patch of a solaris 10 x64 machine, the present kernel patch is "5.10 Generic_144489-06 i86pc i386 i86pc" the updated kernel patch that i am going to upgrade to is patch "144501-19".
    could you please let me know if there is any special handling to undergo the upgrade or it is only sufficient to follow the 144501-19 README file?
    i know that i should put the system on the single user mode level and i have to have a valid OS backup before doing the patchadd, but if i am missing anything else please let me know
    thanks

    Hello,
    if you are having system filesystems (/ /usr /var ...) on software RAID1 devices, best practise is to split mirrors and have most recent actual copy of the system (or create current ZFS snapshot if using ZFS on root),patch it in single user mode or use Live Upgrade functionality and create alternate boot environment and patch the ABE on running system (you can find various info in Oracle Docs or get inspired by various blogs:http://nilesh-joshi.blogspot.com/2011/10/oracle-solaris-patching-using-live.html). I always patch kernel and other system components using PCA patching utility - have a look on project homepage http://www.par.univie.ac.at/solaris/pca/ it's really advanced and helpful tool. It can save you lot of time when solving dependecies and also downloading the patches.
    Good luck

  • ZFS clones and snapshot... can't delete snapshot were clone is based on

    root@solaris [/] # zfs list -r
    NAME   USED  AVAIL  REFER  MOUNTPOINT
    home   100K  9,78G    21K  /datahome
    root@solaris [/] # zpool list
    NAME   SIZE   USED  AVAIL    CAP  HEALTH  ALTROOT
    home  9,94G   108K  9,94G     0%  ONLINE  -
    root@solaris [/] # zfs create home/test
    root@solaris [/] # zfs snapshot home/test@today
    root@solaris [/] # zfs clone home/test@today home/myclone
    root@solaris [/] # zfs list -r
    NAME              USED  AVAIL  REFER  MOUNTPOINT
    home              138K  9,78G    23K  /datahome
    home/myclone         0  9,78G    21K  /datahome/myclone
    home/test          21K  9,78G    21K  /datahome/test
    home/test@today      0      -    21K  -
    root@solaris [/] # zfs promote home/myclone
    root@solaris [/] # zfs list -r
    NAME                 USED  AVAIL  REFER  MOUNTPOINT
    home                 140K  9,78G    24K  /datahome
    home/myclone          21K  9,78G    21K  /datahome/myclone
    home/myclone@today      0      -    21K  -
    home/test               0  9,78G    21K  /datahome/test
    root@solaris [/] # zfs destroy home/myclone
    cannot destroy 'home/myclone': filesystem has children
    use '-r' to destroy the following datasets:
    home/myclone@today
    root@solaris [/] # zfs destroy home/myclone@today
    cannot destroy 'home/myclone@today': snapshot has dependent clones
    use '-R' to destroy the following datasets:
    home/test
    root@solaris [/] #Why can't I destroy a snapshot? home/myclone is now a volume that is not linked to home/test.
    So I would expect to be able to delete the snapshot from myclone.
    Maybe I misunderstand something about how this works or I have the wrong expectations.
    I would expect a clone to be something like a copy that is independent of the volume being cloned.

    The idea is that when you create a clone, it is lightweight and based on the snapshot. That's what makes it so fast. You're not copying every block in the filesystem. So the snapshot is what ties together the parent filesystem and the clone.
    For the clone to be independent, you'd have to copy all the blocks. There's no option to do that within the clone process. So as long as both the parent filesystem and the clone filesystem are around, the snapshot has to exist as well.
    Darren

  • Keeping mountpoints/attributes on a replicated (zoned=on) zfs filesystem

    Hi,
    I'm having to identical servers, one which is active and the other acts as a hot failover. Data on both servers should be identical. Both share the same IPs and hostnames. To ensure that I have data integrity I'm sending ZFS snapshots from the active server to the failover many times an hour, and one full snapshot every 24hrs.
    The layout is like this (both servers are evidently identical)
    global zone, mainly unused except by sysadmins, with one "production" zone
    - in the zone I have a zpool :
    - in the zpool I have pool/prodServer, mounted in /zones/prodSrv, which contains my production zone
    - I also have pool/home-prodSrv , which is delegated to the zone, and mounted in /export/home in the zone.
    It is important that I separate the /export/home from other data.
    Since pool/home-prodSrv is set with the attribute zoned=on , it is not seen in the global with df -h (it is, of course seen with zfs list).
    To replicate my data, in both global zones (active server and failover) I have a user called zfsman who sends / receive snapshots like this :
    [from the active zone] :
    sudo zfs snapshot pool/prodServer@full
    ssh zfsman@FAILOVER sudo zfs destroy pool/prodServer (so that the full will succeed)
    sudo zfs send pool/prodServer@full | ssh zfsman@FAILOVER sudo zfs recv pool/prodServer
    Now, if I shutdown the active zone on the main server and start it up on the failover, I get a problem :
    - pool/home-prodSrv is mounted over /export/home in the global zone
    - quota/reservation/other attributes are unset
    - pool/home-prodSrv is mounted in pool/prodServer in the production zone instead of /export/home
    I tried this, from the active zone :
    ssh zfsman@FAILOVER sudo zfs set mountpoint=/export/home pool/prodServer (it will complain that /export/home is already mounted, but no matter)
    ssh zfsman@FAILOVER sudo zfs set zoned=on pool/prodServer
    It works, but it just doesn't look/feel clean...
    I'm obviously missing the way to keep the attributes on the receiving end as they are set in the sending zone.
    Any idea, anybody, how to fix this ?
    Regards,
    Jeff
    Edited by: J.F.Gratton on Nov 15, 2008 11:33 AM

    Hi,
    I'm having to identical servers, one which is active and the other acts as a hot failover. Data on both servers should be identical. Both share the same IPs and hostnames. To ensure that I have data integrity I'm sending ZFS snapshots from the active server to the failover many times an hour, and one full snapshot every 24hrs.
    The layout is like this (both servers are evidently identical)
    global zone, mainly unused except by sysadmins, with one "production" zone
    - in the zone I have a zpool :
    - in the zpool I have pool/prodServer, mounted in /zones/prodSrv, which contains my production zone
    - I also have pool/home-prodSrv , which is delegated to the zone, and mounted in /export/home in the zone.
    It is important that I separate the /export/home from other data.
    Since pool/home-prodSrv is set with the attribute zoned=on , it is not seen in the global with df -h (it is, of course seen with zfs list).
    To replicate my data, in both global zones (active server and failover) I have a user called zfsman who sends / receive snapshots like this :
    [from the active zone] :
    sudo zfs snapshot pool/prodServer@full
    ssh zfsman@FAILOVER sudo zfs destroy pool/prodServer (so that the full will succeed)
    sudo zfs send pool/prodServer@full | ssh zfsman@FAILOVER sudo zfs recv pool/prodServer
    Now, if I shutdown the active zone on the main server and start it up on the failover, I get a problem :
    - pool/home-prodSrv is mounted over /export/home in the global zone
    - quota/reservation/other attributes are unset
    - pool/home-prodSrv is mounted in pool/prodServer in the production zone instead of /export/home
    I tried this, from the active zone :
    ssh zfsman@FAILOVER sudo zfs set mountpoint=/export/home pool/prodServer (it will complain that /export/home is already mounted, but no matter)
    ssh zfsman@FAILOVER sudo zfs set zoned=on pool/prodServer
    It works, but it just doesn't look/feel clean...
    I'm obviously missing the way to keep the attributes on the receiving end as they are set in the sending zone.
    Any idea, anybody, how to fix this ?
    Regards,
    Jeff
    Edited by: J.F.Gratton on Nov 15, 2008 11:33 AM

  • Cloning a ZFS rooted zone does a copy rather than snapshot and clone?

    Solaris 10 05/08 and 10/08 on SPARC
    When I clone an existing zone that is stored on a ZFS filesystem the system creates a copy rather than take a ZFS snapshot and clone as the documentation suggests;
    Using ZFS to Clone Non-Global Zones and Other Enhancements
    Solaris 10 6/06 Release: When the source zonepath and the target zonepath both reside on ZFS and are in the same pool,
    zoneadm clone now automatically uses the ZFS clone feature to clone a zone. This enhancement means that zoneadm
    clone will take a ZFS snapshot of the source zonepath and set up the target zonepathCurrently I have a ZFS root pool for the global zone, the boot environment is s10u6;
    rpool 10.4G 56.5G 94K /rpool
    rpool/ROOT 7.39G 56.5G 18K legacy
    rpool/ROOT/s10u6 7.39G 56.5G 6.57G /
    rpool/ROOT/s10u6/zones 844M 56.5G 27K /zones
    rpool/ROOT/s10u6/zones/moetutil 844M 56.5G 844M /zones/moetutil
    My first zone is called moetutil and is up and running. I create a new zone ready to clone the original one;
    -bash-3.00# zonecfg -z newzone 'create; set autoboot=true; set zonepath=/zones/newzone; add net; set address=192.168.0.10; set physical=ce0; end; verify; commit; exit'
    -bash-3.00# zoneadm list -vc
    ID NAME STATUS PATH BRAND IP
    0 global running / native shared
    - moetutil installed /zones/moetutil native shared
    - newzone configured /zones/newzone native shared
    Now I clone it;
    -bash-3.00# zoneadm -z newzone clone moetutil
    Cloning zonepath /zones/moetutil...
    I'm expecting to see;
    -bash-3.00# zoneadm -z newzone clone moetutil
    Cloning snapshot rpool/ROOT/s10u6/zones/moetutil@SUNWzone1
    Instead of copying, a ZFS clone has been created for this zone.
    What am I missing?
    Thanks
    Mark

    Hi Mark,
    Sorry, I don't have an answer but I'm seeing the exact same behavior - also with S10u6. Please let me know if you get an answer.
    Thanks!
    Dave

  • How to snapshot zfs volume

    Hi All,
    did anyone have expereience with ZFS volume snapshot and clone? what I am doing here is: create a zfs volume and present it as root disk to LDOM guest domain. I like to have the flexibility to snapshot and clone the volume before any maintenance. We have tested using image files already. We are comparing performance and maintenance complexity of using both image file and zfs volume.
    Any suggestion is welcome.
    Thanks,

    Thanks! could you please provide more details? zfs snapshot of file system is straightforward. But to snapshot volumes (which underline are 0 & 1s), it does not seem to be that easy. FYI, the zfs volume is only partitioned inside guest domain. From ldom controller domain, prtvtoc shows only one slice. That means inside LDOM controller domain, this volume just looks like raw device.

  • Zfs set userquota doesn't work on upgraded datasets?

    Greetings all,
    I put all the latest patches on a Solaris 10 system with zfs to and upgraded the zpool to version 15 and zfs to version 4 so I could use user-based quotas. When I try to set a userquota on an existing dataset, it takes the command but doesn't set up the quota. If I create a new dataset, then I can assign quotas to it. Does the userquota not work on existing datasets that have been upgraded? Here are the commands that illustrate the problem:
    # zfs list
    NAME USED AVAIL REFER MOUNTPOINT
    data 50.7G 145G 50.7G /data
    # zpool upgrade
    This system is currently running ZFS pool version 15.
    All pools are formatted using this version.
    # zfs upgrade
    This system is currently running ZFS filesystem version 4.
    All filesystems are formatted with the current version.
    # zfs set userquota@finleyc=50G data
    # zfs get userquota@finleyc data
    NAME PROPERTY VALUE SOURCE
    data userquota@finleyc - -
    # zfs create data/test
    # zfs set userquota@finleyc=50G data/test
    # zfs get userquota@finleyc data/test
    NAME PROPERTY VALUE SOURCE
    data/test userquota@finleyc 50G local
    # zfs destroy data/test
    Any ideas? Thanks!
    Tim

    Can you repeat the test and, before erasing the dataset, send the output for
    # zfs userspace data/testCheers
    Andy

  • Snapshot zone and dataset

    Hi,
    I (try !!) to manage a X86-64 solaris computer. and I want to create à snapshot in a secondary zone..
    That zone exist is ready and booted and I can login on it. So I use zfs snapshot koonytan/root/datatank to create the snapshot. And I got an error saying that there is no dataset for the snapshot. OK
    I search for dataset and found in an oracle/sun documentation, that I have to use zonecfg to create the data set :
    zonecfg -z koonytank
    zonecfg:zion> add dataset
    zonecfg:zion:dataset> set name=koonytank/root/dataset
    zonecfg:zion:dataset> end
    verrify, commit exit : no error.
    Then I reboot the zone with zoneadm and I get en error "the zone koonytank" could not be verify. and the zone don't boot.
    I have to remove the dataset declaration to reboot the zone.
    So my question is : How to declare a dataset. I have heard of a flag in the global zone that will be inherited by the zone but I found nothing on that.
    I thank you in advance
    Pierre Léonard

    Why do we require the reverse relation of rsign type 'A', what is the use of that?
    So that all HR objects are linked in both way... depending on your reporting need you could start looking at org. structure from the bottom (e.g. from employee point of view) or top (Org. unit point of view)....
    E.g, if you want to find the position of a given employee, better use the relation P->S (bottom up) than O->S->P (top bottom)since positon is not known...
    What is sclas in hrp1001 field for??? Should it be 'O' for all, shall I use all these 6 fields, in the select query , if i chose to solve my problem by select queries???
    Well why not just looking at his description ("Type of related object")....
    Object O can be linked to another object O (then OTYPE = "O" and sclas = "O") -> this is the case of your zone/region...
    But object O can be linked to an object S (position) (so OTYPE = "O" and SCLAS = "S") ....
    to summary:
    - SCLAS has the same meaning than OTYPE but for the linked object
    - SOBID has the same meaning that OBJID but for the linked object
    Let's say you want to check if relation exists between zone and region:
    SELECT count(*) FROM HRP1001
    WHERE OTYPE = 'O'
         AND OBJID = ID(Region)
         AND PLVAR = '01'
         AND SUBTY = 'B0002'   "(= concatenation of RSIGN and RELAT)
         AND ISTAT = '1'   "Active
         AND SCLAS = 'O'
         AND SOBID = ID(region).
    cheers, I need to go now

Maybe you are looking for

  • Inserting flash video does not work completelty

    Hello guys , i don't know how to give up with hard things but this matter drived me mad and i have read and tried many things without any result , locally and on the site when i publish it > I am embedding a flv video into dreamweaver but nothing it

  • 6480 issue: huge delay in printing.

    The problem seems to be a lack of communication or hugely delayed communication between my pc and my printer. Once it starts to actually print, it prints at normal speed. If i print a document, it goes into the que, but won't print. Then all of a sud

  • SEARCH: Widget that shows a PDF or XLS File

    Hey, I am looking for a widget which can show me a pdf or XLS file (Picture would be a possible work around). Best would be to show a small kind of thumbnail and a magnifying class to look up details. So far about the wish list . Reason is my weekly

  • Cant get pictures out of thumbnail size

    I can only view my photos thumbnail sized. I can't see them in slideshows or by clicking them. I've tried resetting it a million times. Please help

  • Hyperion Interactive Reports issue

    Hi, We have designed an IR report with Scenario, Version, Currency, Period and Year will be selectable from drop down and the grid will contain Account and Entity dimensions. The query result is showing correct but, in the dashboard, we can not see t