Zones and Swap space

Question

Hi,
setting up several zones for SAP i'm trying to give each zone it's own swap area. Unfortunately "swap -a /dev/md/dsk/d101" is rejected with "not owner" error messages on the local zone. Is it possibly to define dedicated swap area for local zones ? How to do ?
Thx.

Answer 1

Until the ability to create per-zone swap areas is implemented, I'm looking for a way to limit the impact of having multiple zones share the same swap area. I'm particularly interested in limiting the potential impact of having an application within a non-global zone filling swap by writing to /tmp. So far, I've looked at using the "size=" mount option to limit the size of a non-global zone's tmpfs file system, and I've also looked at setting up a non-global zone's /tmp directory to be mounted on a separate disk partition using the following zonecfg entries and removing the "swap /tmp" entry from the non-global zone's vfstab file:
dir: /tmp
special:/dev/dsk/c#t#d#s#
raw:/dev/rdsk/c#t#d#s#
type: ufs
One problem with both of these methods is that they could be reversed by the non-global zone's administrator, or someone else who was able to obtain the non-global zone's root password.
Is anyone aware of a way that either of these methods could be implemented so that they couldn't be circumvented by someone who has the non-global zone's root password? Is there some other method that could be used as a workaround?
I'm also interested in knowing how the vfstab file for non-global zones are created...are they created or copied from a template or copied from the global zone's vfstab file and edited?
Thanks,
Carolyn