Zone Resource Control example website

G'Day folks,
I've began work on a website to list examples of setting zone resource controls (processor sets, FSS, ...).
http://www.brendangregg.com/zones.html
Now before I get carried away, does anyone think that maybe I shouldn't - if so I will take it offline no problem.
Just checking I dont get replies like,
"please don't document zones as it's all about to change", or something like that ...
PS. I was pretty happy to see FSS work - that's really cool! :-)
thanks,
Brendan Gregg
[Sydney, Australia]

G'Day Gary,
Thanks for your comments!
Here are some corrections/additions:
The best way to check if pools are enabled is to run
pooladm and examine the output. poold may not be
running and pools may still be active, so performing
a pgrep for poold isn't conclusive.Yes, good point.
In commands 2, you don't need the "final pooladm -c".
The poolcfg -df command will have already done
e this.The final pooladm -c didn't make sense the first time I encountered it, so I had made pretty sure that it was necessary. I'll redo my checks and update the site. Without it, I'm only using poolcfg to make changes, and the man page for poolcfg has:
# man poolcfg
     If you use the -d option,
     the modifications occur to the kernel state. Actual activa-
     tion of the resulting configuration is achieved by way of
     the pooladm(1M) command.It seems to imply a pooladm command is necessary for activation (I used a pooladm -c).
In Resources CPU1 it may be worth mentioning that you
can immediately modify pool bindings for zones if you
use poolbind.
e.g.
/usr/sbin/poolbind -p work1-pool -i zoneid workzone1thanks, I hadn't seen this before!
At the end of Resource CPU 2. It isn't poold which
decides how to allocate CPUs when a configuration is
applied to a system using pooladm -c. This work is
done inside libpool (3LIB) by the pool_conf_commit
API.Ok, I haven't seen documentation on what specifically happens after typing pooladm -c. The documentation such as the poold man page draws a lot of attention to poold:
# man poold
     poold periodically examines the load on the system and
     decides whether intervention is required to maintain optimal
     system performance with respect to resource consumption.
     poold also responds to externally initiated (with respect to
     poold) changes of either resource configuration or objec-
     tives.
     If intervention is required, poold attempts to reallocate
     the available resources to ensure that performance objec-So a change in resource configuration sounds like it means "pooladm -c", and poold is responding.
I'm not sure you meant pool_conf_commit, the man page describes it as writing the config to permanent storage - not triggering an allocation of CPUs.
At my work blog, I have various hints, tips and
tricks for Solaris Resource Pools. If you want to add
a link to my blog (where I try and focus on Solaris
Resource Management issues) feel free. It's at:
http://blogs.sun.com/garypen
Great, I've linked it already, and uploaded a new version (and I imagine I'll upload more versions as I learn more about resource controls).
thanks,
Brendan

Similar Messages

Guide Line for zone resources control

Hi,
i'm looking for guide line or best practices about zone resource control, especially cpu-shares, swap and RAM.
I need this information to make decision when customers has no idea but has a lot of zone configured.
For example:
t2000, 32gb ram, 32gb swap and 20 zones
Applications run only in zones.
How can I set cpu-shares, max-swap and capped memory just for security purpose?
Thanks

I'm of the opinion that the safest strategy for proactive resource management is CPU only. Playing with memory can have some effects that I'm not crazy about. Nothing unmanageable, but it can really confuse end-users unless you spend a lot of time educating them. The other consideration is that behind most resource pulls are increases in CPU use. Not always, but a lot of the time. So, if you must be proactive, go with CPU.
The best practice will depend heavily on your environment. Do you migrate zone containers in and out of the box often? Are the apps very similar or wildly differing? Many things need to be decided before mapping out a strategy. Let's take a simple case: Fairly similar apps that don't move in and out often. Figure out what percentage of the box you want each to have, then set up dynamic resource pools to match this model.
If you have a lot of zones and some degree of change, dynamic pools can get unwieldy, so you may prefer using the Fair share scehduler (FSS). In many cases however, proactive use of SRM means that you need to rebalance resources when you add/remove a zone.
I think once you understand the various resource controls available to you it's best to just make a bunch of scribbles on a white board to depict what you want at a high level and then map it into a resource constraint that best implements it. The hard part is defining what you want.

Solaris 10 zones - Resource Controls not persisting through reboot

Local zone was rebooted, but somehow the resource controls are not well configured and the oracle database did not start up.
The cat /etc/project shows this : The local zone has 10 gb. The oracle database was started manually with the startdb.sh, which conn /assysdba and issue a startup, adn also startups the listener.
cat /etc/project
system:0::::project.max-shm-memory=(privileged,8589934000,deny)
user.root:1::::project.max-shm-memory=(privileged,8589934000,deny)
noproject:2::::
default:3::::project.max-shm-memory=(privileged,6442450944,deny)
group.staff:10::::
user.oracle:100::oracle::project.max-shm-memory=(privileged,8589934000,deny)
group.dba:101::::project.max-sem-ids=(privileged,100,deny);project.max-shm-ids=(
privileged,100,deny);project.max-shm-memory=(privileged,6442450944,deny)

Nikolay, thank you for your reply.
What I know is that the zone was rebooted saturday. sunady at 1:00 am the oracle database (I'am a Dba not sysadmin), perform coldbackup (veritas.) then Veritas call a unix script to starts the database.
I run the script to starts the database manually sunday. Veritas could not open the database because of the Out of Memory.
The box has 10 gb , the oracle user, the rot and system are configured to use 8 gb, the rest are configured to use less.
I'am oracle user.
id -p
uid=100(oracle) gid=100(dba) projid=100(user.oracle)
prctl -i process $$
process: 8928: -ksh
NAME PRIVILEGE VALUE FLAG ACTION RECIPIENT
process.max-port-events
privileged 65.5K - deny -
system 2.15G max deny -
process.max-msg-messages
privileged 8.19K - deny -
system 4.29G max deny -
process.max-msg-qbytes
privileged 64.0KB - deny -
system 16.0EB max deny -
process.max-sem-ops
privileged 512 - deny -
system 2.15G max deny -
process.max-sem-nsems
privileged 512 - deny -
system 32.8K max deny -
process.max-address-space
privileged 16.0EB max deny -
system 16.0EB max deny -
process.max-file-descriptor
basic 256 - deny 8928
privileged 65.5K - deny -
system 2.15G max deny -
process.max-core-size
privileged 8.00EB max deny -
system 8.00EB max deny -
process.max-stack-size
basic 8.00MB - deny 8928
privileged 8.00EB - deny -
system 8.00EB max deny -
process.max-data-size
privileged 16.0EB max deny -
system 16.0EB max deny -
process.max-file-size
privileged 8.00EB max deny,signal=XFSZ -
system 8.00EB max deny -
process.max-cpu-time
privileged 18.4Es inf signal=XCPU -
system 18.4Es inf none -
task.max-cpu-time
system 18.4Es inf none -
task.max-lwps
system 2.15G max deny -
project.max-contracts
privileged 10.0K - deny -
project.max-device-locked-memory
privileged 987MB - deny -
project.max-locked-memory
system 16.0EB max deny -
project.max-port-ids
privileged 8.19K - deny -
project.max-shm-memory
privileged 8.00GB - deny -
project.max-shm-ids
privileged 128 - deny -
project.max-msg-ids
privileged 128 - deny -
project.max-sem-ids
privileged 128 - deny -
project.max-crypto-memory
privileged 3.85GB - deny -
project.max-tasks
system 2.15G max deny -
project.max-lwps
system 2.15G max deny -
project.cpu-cap
system 4.29G inf deny -
project.cpu-shares
privileged 1 - none -
zone.max-swap
privileged 20.0GB - deny -
zone.max-locked-memory
system 16.0EB max deny -
zone.max-shm-memory
system 16.0EB max deny -
zone.max-shm-ids
system 16.8M max deny -
zone.max-sem-ids
system 16.8M max deny -
zone.max-msg-ids
system 16.8M max deny -
zone.max-lwps
system 2.15G max deny -
zone.cpu-cap
system 4.29G inf deny -
zone.cpu-shares
privileged 1 - none -
Print configured reso
urce control
ksh: Print: not found

What is the resource control corresponding to each kernel parameter

Hi
I am trying to prepare (i.e. tune) a Solaris 10 instance for an Oracle 10g install using a Solaris 10 project.
I am new to using Solaris 10 project resource controls so I might get some of this totally wrong.
I know all of the "old" kernel parameter names: what each represents and its' required value and I know some of the corresponding resource controls but not all of them.
That is I do not know the resource control corresponding to each and all of the kernel parameters.
e.g. I know:
semsys:seminfo_semmsl == process.max-sem-nsems == The maximum number of sempahores that can be in one semaphore set
shmsys:shminfo_shmmax == project.max-shm-memory == The maximum size(in bytes) of a single shared memory segment
shmsys:shminfo_shmmni == project.max-shm-ids == The number of shared memory identifiers
But I do not know, for example, what resource control corresponds to:
semsys:seminfo_semmns == The number of semaphores in the system
Is there a list somewhere of the resource control corresponding to each of the kernel parameters ?
I know I can set some kernel parameters in /etc/system but that should only be used for system - wide kernel parameters, right ?
I know there are project, process, task and zone classes of resource controls.
Can a resource control of any and all of these types be set in a project ?
Are zone resource controls equivalent to system-wide resource controls ?
Are there corresponding resource controls to all kernel parameters e.g. such as noexec_user_stack ?
I have set noexec_user_stack in /etc/system.
And finally - just to be sure - using a project makes the resource control values permanent, right ?
Thanks
Brett.

Hi;
Please check below which could be helpful for your issue:
Kernel setup for Solaris 10 using project files [ID 429191.1]
Regard
Helios

Solaris 10 Resource Control

When utilizing Solaris 10 Resource Control, should one use "user.root", "user.oracle" or "oracle" for the project identifier? Does it really make a difference?
For example,
I. projadd -U oracle -K "project.max-shm-memory=(priv,2048MB,deny)" user.oracle
II. projadd -U oracle -K "project.max-shm-memory=(priv,2048MB,deny)" user.root
III. projadd -U oracle -K "project.max-shm-memory=(priv,2048MB,deny)" oracle
I realize the Oracle Install documentation indicates "user.root", but I've seen other indications of either "user.oracle" or "oracle".

thanks buddy. I was in this same tricky situation. and ur post solved my prblem.
Is this a bug with solaris 10.
Later i discovered.. on Oracle documentation that.. there r sum parameters that needed to be taken care while pre-installation of Oracle binaries.
Here is the excerpts.
The Oracle installer recognizes kernel parameters set using this method, but it is now deprecated in favour of resource control projects, explained below.
As the root user, issue the following command.
projadd oracle
Append the following line to the "/etc/user_attr" file.
oracle::::project=oracle
If you've performed a default installation, it is likely that the only kernel parameter you need to alter is "max-shm-memory". To check the current value issue the following command.
# prctl -n project.max-shm-memory -i project oracle
project: 100: oracle
NAME    PRIVILEGE       VALUE    FLAG   ACTION                       RECIPIENT
project.max-shm-memory
        privileged       254MB      -   deny
        system          16.0EB    max   deny
To reset this value, make sure at least one session is logged in as the oracle user, then from the root user issue the following commands.
# prctl -n project.max-shm-memory -v 4gb -r -i project oracle
# projmod -s -K "project.max-shm-memory=(priv,4gb,deny)" oracle
The first dynamically resets the value, while the second makes changes to the "/etc/project" file so the value is persistent between reboots.
# cat /etc/project
system:0::::
user.root:1::::
noproject:2::::
default:3::::
group.staff:10::::
oracle:100::::project.max-shm-memory=(priv,4294967296,deny)
The Oracle installer seems incapable of recognising kernel parameter set using resource control projects, but if you ignore the warnings the installation completes successfully.Even this method works.
Regards
Monu Koshy

Good resources and examples for making beautiful things

Hello ,
I am new in flash and I know how to work with tools and create some shapes but my problem is that I cannot create beautiful things with good filters and such like and it is because I have not seen good examples .is there any website or anything else as resource and example which I can learn how to create beautiful items(like using filters or making 3D objects and beautiful shapes and using color to give effect)?

Hi Immigrantbird,
I'm not sure if you're after a more design oriented resources rather than a flash specific one.
It might be worth doing a wider search on graphis / design principals rather than just specifically flash.
You could check out some of the examples at:
http://unitzeroone.com/blog/labs/
http://unitzeroone.com/blog/
Regards
Chris

Using VISA Resource control with Windows 7 64-bit

Hi.
My company recently upgraded our laptops, and I'm now working on Windows 7 64-bit rather than Windows XP 32-bit. I reinstalled LabVIEW 2009 Base Package, trusting that the Windows 7 64-bit OS would be able to handle LabVIEW 2009 32-bit without problems. But when trying to run our test system, the VISA Resource control doesn't work.
We use it to get a list of the available COM (RS232) ports on the computer. But now the list comes up blank. The only option that comes up in the list, is the text "Refresh". But nothing happens when I press it. Is this a bug in LabVIEW? I've installed the latest patch I found, so now I'm running LabVIEW v9.0f3 (32-bit).
Thanks alot for any and all assistance!
Solved!
Go to Solution.

Sorry for not replying to you earlier. I've been busy on other projects.
I'm not sure what you refer to with MAX, but I'm able to access the com ports using other tools/loggers. So it's not an issue with Windows 7 itself. But it seems logical that the problem would have something to do with running 32-bit drivers on a 64-bit OS. Referring to this list from NI (http://digital.ni.com/public.nsf/allkb/71E9408E6DEAD76C8625760B006B6F98), I'm downloading the 64-bit installer now.
But if I understand it correctly, you cannot run applications from a 64-bit Application Builder on a 32-bit OS. So basically you need the Application Builder installed on both a 32-bit and 64-bit OS to have all bases covered. But in the FAQ, it's asked if it's possible to have both 32-bit and 64-bit LabVIEW 2009 installed on the same 64-bit OS. Why would this be wanted? If you cannot use the 32-bit Application Builder, and you cannot trust that the 32-bit LabVIEW runs successfully (i.e. driver issues etc.), why would you want to have a 32-bit installation on a 64-bit OS?

Resource control assignment failed for project

I've setup a new project (we run sap), and keep getting the following msg
pam_unix_cred: project.max-sem-ids resource control assignment failed for
project "PAB"
I know you can get this sort of msg if you have wrong syntax in your project, but it all looks well to me. Any ideas gratefully received. cheers Lou
/etc/project >
PAB:1000:SAP System PAB:orapab,pabadm::
process.max-sem-nsems=(priv,2048,deny);project.max-sem-ids=(priv,1024,deny);project.max-shm-i
ds=(priv,256,deny);project.max-shm-memory=(priv,18446744073709551615,deny)

Hi
The original entries were created with projadd.
I've just done a projdel and another projadd (as below) and watching out for error msgs - will post again when I get the error msgs - cheers Lou
root@sappab # projadd -p 1000 -c "SAP System PAB" -U pabadm,orapab \
root@sappab > -K "project.max-sem-ids=(priv,1024,deny)" \
root@sappab > -K "process.max-sem-nsems=(priv,2048,deny)" \
root@sappab > -K "project.max-shm-ids=(priv,256,deny)" \
root@sappab > -K "project.max-shm-memory=(priv,18446744073709551615,deny)" \
root@sappab > PAB
root@sappab # more /etc/project
system:0::::
user.root:1::::
noproject:2::::
default:3::::
group.staff:10::::
PAB:1000:SAP System PAB:orapab,pabadm::process.max-sem-nsems=(priv,2048,deny);project.max-sem-ids=(priv,1024,deny);project.max-shm-i
ds=(priv,256,deny);project.max-shm-memory=(priv,18446744073709551615,deny)

Resource Controls on Oracle Systems

The normal resource controls for the oracle user are pretty straight forward -- per the Oracle documentation even though it is hugely Solaris 10 deficient. (we are deploying on solaris 10 u8)
We are deploying a new data center with 2 and 3-node SFRAC clusters and we have an onsite Sun prof. services person that claims we also need to limit the user.root and default projects in the following manner (systems have 64gb memory):
projmod -sK "project.max-shm-memory=(priv,6GB,deny)" user.root
projmod -sK "project.max-sem-nsems=(priv,256,deny)" user.root
projmod -sK "project.max-sem-ids=(priv,100,deny)" user.root
projmod -sK "project.max-shm-ids=(priv,100,deny)" user.root
projmod -sK "project.max-shm-memory=(priv,6GB,deny)" default
projmod -sK "project.max-sem-nsems=(priv,256,deny)" default
projmod -sK "project.max-sem-ids=(priv,100,deny)" default
projmod -sK "project.max-shm-ids=(priv,100,deny)" default
Has anyone see this done anywhere? Even when I was working at oracle on some of the largest oracle databases in existence I never saw such settings being deployed on Solaris 10.
Can anyone point me to any hard documentation or similar resource?
Much thanks,
CC
Edited by: rhugga1 on Jan 21, 2010 7:10 AM

Yes the oracle documentation is wrong. I know how to set the oracle parameters.. As my OP states I was inquiring about limits set on the user.root and default projects
Since Solaris 10 update 4, these oracle kernel parameters ARE IGNORED COMPLETELY when set in /etc/system (not to mention some are deprecated) You can easily do an empirical test of this yourself since there is so much conflicting documentation out there, including some of Sun's docs.
Solaris 10 update 4 and later method:
projadd -c "Oracle" 'user.oracle'
projmod -s -K "process.max-file-descriptor=(priv,1024,deny)" 'user.oracle'
projmod -s -K "project.max-shm-memory=(privileged,25769803770,deny)" 'user.oracle'
projmod -s -K "project.max-shm-ids=(privileged,1024,deny)" 'user.oracle'
projmod -s -K "project.max-sem-ids=(privileged,1024,deny)" 'user.oracle'
projmod -s -K "process.max-sem-nsems=(privileged,1024,deny)" 'user.oracle'
But back to the OT, I've been told there are root project tweaks that don't really make sense to me and I've yet to find any viable documentation supporting this guys claim.
-CC

Visa resource control loses value set during config and saved to step properties in TestStand

I'm using a Visa resource control to set the instrument handle in my VI (edit sub-step) and it gets saved into a step property of a custom step I've built at edit time. At run time the control value is intermittantly changed to "temp 0" value and I don't understand why. I have LabVIEW 7.1, TestStand 3.0

Hi kphite,
Are you using the Refnum to Session.vi and Session to Refnum.vi?
You would use the Refnum to Session.vi to convert your Visa session value to a U32. Then you can pass this back to TestStand.
Going back to LabView you use the Session to Refnum.vi to convert a U32 back to the Visa session.
Regards
Ray Farmer
Regards
Ray Farmer

Finding the resource controls of a given project

Currently, one can use "*prctl*" to list resource control limits of a given project. However, to gather the statistics of the usage by all processes associated with a given project in relation to these resource control limits, we would need to execute multiple commands/utilities.
For some, information outputs can be direct, yet for others, outputs can be indirect. Even then it is not guaranteed that all statistics are collected.
I thought of developing a command/utility acting like "sar" or "vmstat" that gathers statistics on usage of all resource controls for a given project.
Could you please drop in your suggestions on the features such a command should have ?
Thanks

Do you know how to find the minimum value of a collection? You will want to do the same here but search for the minimum difference instead of the minimum value. Math.abs() will help deal will negative differences.

Why can i no longer operate controle on websites when controls are at top of screen?

i c an no longer operate controls on websites when controls are at top of my screen. this happens with google search engine, e mails and websites.
Please help me correct this.
Chris
[ed. removed phone number]

If the inoperable button or link is near the top of the page....
Recently, the Yahoo Toolbar and the Babylon extension have been reported to cause that problem. They seem to overlap invisibly over the top of the web page display. If you have either or both, uninstall or disable them/it, or see if an update is available that solves the problem.
*Uninstall Yahoo Toolbar --> http://help.yahoo.com/l/us/yahoo/toolbar/toolbar8/general/general-07.html
*Uninstall Babylon --> http://support.babylon.com/index.php?/Knowledgebase/Article/View/177/0/uninstall-babylon-software
*See --> http://support.mozilla.com/en-US/kb/Uninstalling+add-ons
*See --> http://support.mozilla.com/en-US/kb/Cannot%20uninstall%20an%20add-on
*See --> http://kb.mozillazine.org/Uninstalling_toolbars
If that does not solve the problem:
*See --> [http://support.mozilla.org/en-US/kb/Troubleshooting+extensions+and+themes Troubleshooting extensions and themes]
*See --> [http://support.mozilla.org/en-US/kb/Troubleshooting+plugins Troubleshooting plugins]
*See --> [http://support.mozilla.org/en-US/kb/Basic+Troubleshooting Basic Troubleshooting]
'''If this reply solves your problem, please click "Solved It" next to this reply when <u>signed-in</u> to the forum.'''

Driver implementation into PID manuel-Auto Temp Control Example vi

There is PID manuel-Auto Temp Control Example vi in PID tool kit. I want to use this in my system implementing of my driver. Lakeshore 336 temp. control. Please advice me how to put drivers, what to do to use this tool kit with instrument. I need direction like, change this with this, delete this and add this...
thanks in advance....

Dear all,
thanks for advices. PID tutorials help me alot. yeap, 336 has already PID control itself.I downloded and installed inst.lib already and it works. The problem is my vi. I want my vi like PID tool kit vi. I mean very nice control. I am not sure that I made nice. It works, but response time, wuality, noise, and so on. If someone can interests, I can send my vi to be checked and make comment on it.
I started to study LV in 2003. At that time I didn't know English (I am Turkish) so I couldn't find any source in my language. I tried to learn by myself following vi's. Then I left it and started working 3 weeks ago. So, I am beginner, but I could write my own high temperature controller.)
But I would like be adviced in any case from experienced people like you. Thanks in advance...

Getrct(): resource control value sequence (use of RCTL_FIRST and RCTL_NEXT)

% uname -a
SunOS snt5010 5.10 Generic_127111-11 sun4v sparc SUNW,SPARC-Enterprise-T5220
From Sun Documentation:
The getrctl() function provides a mechanism for iterating through all*
of the established values on a resource control. The iteration is
primed by calling getrctl() with old_blk set to NULL, a valid resource
control block pointer in new_blk, and specifying RCTL_FIRST in the
flags argument. Once a resource control block has been obtained,
repeated calls to getrctl() with RCTL_NEXT in the flags argument and
the obtained control in the old_blk argument will return the next
resource control block in the sequence. The iteration reports the end
of the sequence by failing and setting errno to ENOENT.
My question is concerning "all of the established values on a resource control".
Why not "*_the only value_ of a resource control*"? Why several?
For instance, there may be several values for project.max-shm-memory.
What does that mean? Which value should one use (if they are different)?
Alex Vinokur
Edited by: Alex-Vinokur on Nov 18, 2008 9:25 PM

% uname -a
SunOS snt5010 5.10 Generic_127111-11 sun4v sparc SUNW,SPARC-Enterprise-T5220
From Sun Documentation:
The getrctl() function provides a mechanism for iterating through all*
of the established values on a resource control. The iteration is
primed by calling getrctl() with old_blk set to NULL, a valid resource
control block pointer in new_blk, and specifying RCTL_FIRST in the
flags argument. Once a resource control block has been obtained,
repeated calls to getrctl() with RCTL_NEXT in the flags argument and
the obtained control in the old_blk argument will return the next
resource control block in the sequence. The iteration reports the end
of the sequence by failing and setting errno to ENOENT.
My question is concerning "all of the established values on a resource control".
Why not "*_the only value_ of a resource control*"? Why several?
For instance, there may be several values for project.max-shm-memory.
What does that mean? Which value should one use (if they are different)?
Alex Vinokur
Edited by: Alex-Vinokur on Nov 18, 2008 9:25 PM

Resource-ref example wont work

Hi,
I down loaded some jsp examples from this site "http://www.orionserver.com/taglibtut/"
ia now trying out lesson no 7. Which uses a java mail to send an email. I have created
a mail resource on wls server. Its name is "http://www.orionserver.com/taglibtut/".
When I am uploading the war I get the error cannot load war file. I have attached
the examples codings for you perusal. Please have a look and let me know what can
be the problem.
Thanks,
Gavin
[temp.zip]

sorry the name of the email resource is "mail/MailSession"
"gavin" <[email protected]> wrote:
>
>
>
Hi,
I down loaded some jsp examples from this site "http://www.orionserver.com/taglibtut/"
ia now trying out lesson no 7. Which uses a java mail to send an email.
I have created
a mail resource on wls server. Its name is "http://www.orionserver.com/taglibtut/".
When I am uploading the war I get the error cannot load war file. I have
attached
the examples codings for you perusal. Please have a look and let me know
what can
be the problem.
Thanks,
Gavin

Zone Resource Control example website

Similar Messages

Maybe you are looking for