Zones on zfs question

Hi,
I'm running solaris 10 update 8 with the latest patch cluster installed. I also have one non-global zone running on the system. Here is how things are setup.
The filesystems
zfs create -o canmount=noauto rpool/ROOT/10_U8/zones
zfs create -o canmount=noauto rpool/ROOT/10_U8/zones/nonGlobalZone
zfs set mountpoint=/zones rpool/ROOT/10_U8/zones
zfs set mountpoint=/zones rpool/ROOT/10_U8/zones/nonGlobalZoneThen I configured and installed the zone. Everything is running fine, except I noticed that the two zfs filesystems I created do not show up when I run df. They do show up with a zfs list though. If I run zfs get all, I notice that the two filesytems are listed as not mounted. How is it that my zone is running if the filesystem is showing up as not mounted?
Here is the output from zfs get all
rpool/ROOT                                             mounted               no                     -
rpool/ROOT/10_U8                                   mounted               yes                    -
rpool/ROOT/10_U8/var                             mounted               yes                    -
rpool/ROOT/10_U8/zones                         mounted               no                     -
rpool/ROOT/10_U8/zones/nonGlobalZone mounted               no                     -
Here is the zoneadm list output
ID NAME             STATUS     PATH                           BRAND    IP
   0 global           running    /                              native   shared
   1 nonGlobalZone         running    /zones/nonGlobalZone                native   shared

I'm relatively new to zones, but my guess is that the zones were created in the root partition, under /zones. If you cd into a directory under /zones and do a df, it probably will show that you are still under the / root partition.In my experience with ZFS, I have found that if I forget to mount a ZFS filesystem, the contents end up under /root (and sometimes fill it up, which the system does not like...).
-- Alan

Similar Messages

Create ZONE in ZFS pool solaris10

Hi Gurus,
I'm reading some solaris 10 tutorials about ZFS and Zones. Is it possible to create a new storage pool using my current hard disk in which I installed solaris???
I'm a bit new in Solaris, I have a SPARC box in which I'm learnin about solaris 10. I have installed Solaris 10 using ZFS file system. I think my box only have 1 disk but not sure. I see 46 GB of free space running "df -kh " command
I run "format" command, this is the output
root@orclidm # format
Searching for disks...done
AVAILABLE DISK SELECTIONS:
0. c0t0d0 <SUN72G cyl 14087 alt 2 hd 24 sec 424>
/pci@780/pci@0/pci@9/scsi@0/sd@0,0
1. c0t1d0 <SUN72G cyl 14087 alt 2 hd 24 sec 424>
/pci@780/pci@0/pci@9/scsi@0/sd@1,0
Specify disk (enter its number):
zpool list "display this:"
root@orclidm # zpool list
NAME SIZE ALLOC FREE CAP HEALTH ALTROOT
rpool 68G 13.1G 54.9G 19% ONLINE -
zfs list "display this:"
root@orclidm # zfs list
NAME USED AVAIL REFER MOUNTPOINT
rpool 21.3G 45.6G 106K /rpool
rpool/ROOT 11.6G 45.6G 31K legacy
rpool/ROOT/s10s_u10wos_17b 11.6G 45.6G 11.6G /
rpool/dump 1.50G 45.6G 1.50G -
rpool/export 66K 45.6G 32K /export
rpool/export/home 34K 45.6G 34K /export/home
rpool/swap 8.25G 53.9G 16K -
I read in a tutorial that when you create a zpool you need to specify an empty hard disk, is that correct?
Please point me on the best approach to create zones using zfs pools.
Regards

manin21 wrote:
Hi Gurus,
I'm reading some solaris 10 tutorials about ZFS and Zones. Is it possible to create a new storage pool using my current hard disk in which I installed solaris???IF you have a spare partition you may use that.
>
I'm a bit new in Solaris, I have a SPARC box in which I'm learnin about solaris 10. I have installed Solaris 10 using ZFS file system. I think my box only have 1 disk but not sure. I see 46 GB of free space running "df -kh " command
I run "format" command, this is the output
root@orclidm # format
Searching for disks...done
AVAILABLE DISK SELECTIONS:
0. c0t0d0 <SUN72G cyl 14087 alt 2 hd 24 sec 424>
/pci@780/pci@0/pci@9/scsi@0/sd@0,0
1. c0t1d0 <SUN72G cyl 14087 alt 2 hd 24 sec 424>
/pci@780/pci@0/pci@9/scsi@0/sd@1,0
Specify disk (enter its number):
This shows two disks. In a production setup you might mirror this.
zpool list "display this:"
root@orclidm # zpool list
NAME SIZE ALLOC FREE CAP HEALTH ALTROOT
rpool 68G 13.1G 54.9G 19% ONLINE -
The command:
zpool status
would show you what devices you are using
zfs list "display this:"
root@orclidm # zfs list
NAME USED AVAIL REFER MOUNTPOINT
rpool 21.3G 45.6G 106K /rpool
rpool/ROOT 11.6G 45.6G 31K legacy
rpool/ROOT/s10s_u10wos_17b 11.6G 45.6G 11.6G /
rpool/dump 1.50G 45.6G 1.50G -
rpool/export 66K 45.6G 32K /export
rpool/export/home 34K 45.6G 34K /export/home
rpool/swap 8.25G 53.9G 16K -
I read in a tutorial that when you create a zpool you need to specify an empty hard disk, is that correct?
No.
You can use partions/slices instead. A zone storage pool is composed of one or more devices; each device can be a a whole disk, disk slice or even a file if i remember correctly ( .... but you really dont want to use a file normally).
Please point me on the best approach to create zones using zfs pools.
RegardsYour storage rpool is 68GB in size on a 72GB disk .... therefore the disk is full up and their is no space for another zfs pool. If zpool status shows your disk is mirrored by zfs that is that. Otherwise you may choose to create a storage pool on the other disk (not best production practice).
often one creates a zfs filesystem out of an existing filesystem.
zfs create -o mountpoint=/zones rpool/zones
zfs create rpool/zones/myzone
Then use zonepath=/zones/myzone creating the zone.
- I was googling to cross check my answer ... the following blog has an example but it is a little old and may be opensolaris orientated.
https://blogs.oracle.com/DanX/entry/solaris_zfs_and_zones_simple
Authorative information is at http://docs.oracle.com, notably:
http://docs.oracle.com/cd/E23823_01/index.html
http://docs.oracle.com/cd/E23823_01/html/819-5461/index.html
http://docs.oracle.com/cd/E18752_01/html/817-1592/index.html

Zone path location question

I am rebuilding our Zone hosting server and the Zone paths are currently located on the SAN through an iscsi mount. My question is: If I plan to use Live Upgrade should the zone paths be in the root partition instead?
Also, if you have any suggestions about using Live upgrade with non-global zones I would like to hear them as well.
Thanks,
Dave

Which file system you are using?
I have patched several guest ldoms running several zones with Live Upgrade. Every zone's zroot is on separate zpool (because of HA). This way it is quite easy to migrate a single zone to second node (in the event of disaster)
One thing that you should remember is that Live Upgrade with ZFS does the patching by using ZFS snapshot. For example, if you do the patching to a live system (which is supported with Live Upgrade!) and the application running on the zone is storing its data on the same file system where zone's root is, the application's data might be out of date after you reboot the machine using the new BE that was created by Live Upgrade.

SFTP chroot from non-global zone to zfs pool

Hi,
I am unable to create an SFTP chroot inside a zone to a shared folder on the global zone.
Inside the global zone:
I have created a zfs pool (rpool/data) and then mounted it to /data.
I then created some shared folders: /data/sftp/ipl/import and /data/sftp/ipl/export
I then created a non-global zone and added a file system that loops back to /data.
Inside the zone:
I then did the ususal stuff to create a chroot sftp user, similar to: http://nixinfra.blogspot.com.au/2012/12/openssh-chroot-sftp-setup-in-linux.html
I modifed the /etc/ssh/sshd_config file and hard wired the ChrootDirectory to /data/sftp/ipl.
When I attempt to sftp into the zone an error message is displayed in the zone -> fatal: bad ownership or modes for chroot directory /data/
Multiple web sites warn that folder ownership and access privileges is important. However, issuing chown -R root:iplgroup /data made no difference. Perhaps it is something todo with the fact the folders were created in the global zone?
If I create a simple shared folder inside the zone it works, e.g. /data3/ftp/ipl......ChrootDirectory => /data3/ftp/ipl
If I use the users home directory it works. eg /export/home/sftpuser......ChrootDirectory => %h
FYI. The reason for having a ZFS shared folder is to allow separate SFTP and FTP zones and a common/shared data repository for FTP and SFTP exchanges with remote systems. e.g. One remote client pushes data to the FTP server. A second remote client pulls the data via SFTP. Having separate zones increases security?
Any help would be appreciated to solve this issue.
Regards John

sanjaykumarfromsymantec wrote:
Hi,
I want to do IPC between inter-zones ( commnication between processes running two different zones). So what are the different techniques can be used. I am not interested in TCP/IP ( AF_INET) sockets.Zones are designed to prevent most visibility between non-global zones and other zones. So network communication (like you might use between two physical machines) are the most common method.
You could mount a global zone filesystem into multiple non-global zones (via lofs) and have your programs push data there. But you'll probably have to poll for updates. I'm not certain that's easier or better than network communication.
Darren

Sol10 SC3.2 Zones and ZFS

I have a recently built cluster of 2 v240s (fusion03 and fusion04) running Solaris 10 08/07 with Sun Cluster 3.2 using an external Quorum Server to support failover of zones. Currently there are 2 zones (admin01 and admin02) configured as separate resource groups, each of which has a LogicalHostname and HAStoragePlus resource defined. I can bring up the zones on either node and failover the RG to the other node. However, there are two problems that I have not been able to resolve:
1. If I have the zone up and running on fusion03 and failover the RG to fusion04 using clrg switch -n fusion04 RG-admin01, the zpool, ip and zone move to fusion04 as expected, however zoneadm list -cv on fusion03 still shows it up and running - even though zpool list and ifconfig -a show that the zpool and ip are no longer available on fusion03.
2. When both nodes are booted, the zones do not automatically startup. Also, if failover occurs with the zone down, the RG fails over correctly, but the zone does not start. I have to manually boot the nodes in each case.
Here are the resource and resource group configs:
root@fusion04 # clrg list -v
Resource Group      Mode                Overall status
RG-admin01          Failover            online
RG-admin02          Failover            online
root@fusion04 # clresource list -v
Resource Name       Resource Type            Resource Group
DSK-admin01         SUNW.HAStoragePlus:6     RG-admin01
LH-admin01          SUNW.LogicalHostname:2   RG-admin01
DSK-admin02         SUNW.HAStoragePlus:6     RG-admin02
LH-admin02          SUNW.LogicalHostname:2   RG-admin02Here are the zone configs:
root@fusion04 # zoneadm list -cv
ID NAME             STATUS     PATH                           BRAND    IP
   0 global           running    /                              native   shared
   1 admin01          running    /zones/admin01                 native   shared
   3 admin02          running    /zones/admin02                 native   shared
root@fusion04 # zonecfg -z admin01 info
zonename: admin01
zonepath: /zones/admin01
brand: native
autoboot: false
bootargs:
pool:
limitpriv: contract_event,contract_observer,cpc_cpu,dtrace_proc,dtrace_user,file_chown,file_chown_self,file_dac_execute,file_dac_read,file_dac_search,file_dac_write,file_link_any,file_owner,file_setid,ipc_dac_read,ipc_dac_write,ipc_owner,net_icmpaccess,net_privaddr,net_rawaccess,proc_audit,proc_chroot,proc_clock_highres,proc_exec,proc_fork,proc_info,proc_lock_memory,proc_owner,proc_priocntl,proc_session,proc_setid,proc_taskid,sys_acct,sys_admin,sys_audit,sys_ipc_config,sys_mount,sys_nfs,sys_resource,sys_time
scheduling-class:
ip-type: shared
root@fusion04 # zonecfg -z admin02 info
zonename: admin02
zonepath: /zones/admin02
brand: native
autoboot: false
bootargs:
pool:
limitpriv: contract_event,contract_observer,cpc_cpu,dtrace_proc,dtrace_user,file_chown,file_chown_self,file_dac_execute,file_dac_read,file_dac_search,file_dac_write,file_link_any,file_owner,file_setid,ipc_dac_read,ipc_dac_write,ipc_owner,net_icmpaccess,net_privaddr,net_rawaccess,proc_audit,proc_chroot,proc_clock_highres,proc_exec,proc_fork,proc_info,proc_lock_memory,proc_owner,proc_priocntl,proc_session,proc_setid,proc_taskid,sys_acct,sys_admin,sys_audit,sys_ipc_config,sys_mount,sys_nfs,sys_resource,sys_time
scheduling-class:
ip-type: sharedAny ideas or pointers would be greatly appreciated.
fpsm

to me (and yeah i could well be wrong) it looks like you're refering to failover zones so you'd need a failover zone resource in the group as well, created with sczbt_register (maybe, maybe you like typing really long commands).
i've got a few failover zones that have resources like this (this one's empty at the moment, just a failover address, ZFS storage and zone).
d'oh~> clrs status -v -g sandpit-rg
Cluster Resources ===
Resource Name Node Name State Status Message
sandpit-lh-rs host005 Offline Offline - LogicalHostname offline.
host006 Online Online - LogicalHostname online.
sandpit-has-rs host005 Offline Offline
host006 Online Online
sandpit-zone-rs host005 Offline Offline
host006 Online Online - Service is online.

Zone-member security Question?

Hi guys, If I configure on my router some sub-interfaces (let's say G0/0.2, g0/0.3, etc) and they belong to my inside network where should I apply the zone-member secury inside command? On the G0/0 or on each sub-interface that I have traffic to protect?
Thanks
Regards

Hi Bro
From what I’ve understood from your question, you said that both the subinterfaces are catered for the inside users but I’m guessing they are assigned to different groups of users/vlans e.g. VLAN 10 for Users in Level 1, and VLAN 20 for User in Level 2 etc.
If that’s the case, then I would apply the “zone-member security XXX” command on each of the sub interfaces. A sample is shown below;
class-map type inspect match-any CM_TEST
match protocol tcp
match protocol udp
match protocol icmp
policy-map type inspect PM_TEST
class type inspect CM_TEST
inspect
zone security inside-vlan10
zone security inside-vlan20
zone-pair security ZP_TEST source inside-vlan10 destination inside-vlan20
service-policy type inspect PM_TEST
interface GigabitEthernet0/0.10
description – LAN Users in Level 1 --
zone security inside-vlan10
encapsulation dot1q 10
ip address 10.10.10.1 255.255.255.0
interface GigabitEthernet0/0.20
description – LAN Users in Level 2 --
zone security inside-vlan20
encapsulation dot1q 20
ip address 10.10.20.1 255.255.255.0
P/S: If you think this comment is useful, please do rate them nicely :-)

Drop zone QT format question

sorry to reask this, but apple couldn't answer it, so i'm a bit stumped.
1. what is the best way to use non standard sized qt's in drop zones? i want to use a QT that's roughly 380 x 220 as an animation on the menu. it get's very pixelated at 100%, plus it's difficult to determine the 100% size when scaling in dvd sp, as it brings it in at the default of 180 x 120. in my tests i've had to generate the animation at 2x the size to get a decent result.
apple uses a 640 x 480 QT in one of their tutorials on the discs, but it is sized down. i need to use a non-standard size.
it would be easier to compose the entire static background image with the animation, but the quality of the background image through the mpeg compressor is horrible.
2. you never would need to field render a clip that is not full screen in dvd sp, right?
any ideas?
macbook pro 2.33 Mac OS X (10.4.9)

Didn't want to start a new thread....
I'm just a recent beginner with DVDSP4. I have the same problem more or less. I followed Colin's post instructions above, which appear to be the same as in the User manual page 276.Neither method really works.
My situation is that I can position my 6 x 8 landscape format photo easily horizontally as per these instructions, but but not vertically. No movement possible up and down. The heads of 2 people are still cut off, although there's plenty of headroom around these people in the photo.
Just can't figure out what to do, or what I'm doing wrong.
Regards. Robert

DNS Zones Etc. Question - rehash

I'm having much the same issue as many others...
I've setup DNS for my local network and named records are resolving but addresses are not.
Router (Time Capsule)
WAN 69.x.x.x
Private 10.0.1.1
Server: duke.dshng.net (authority locally and forwards to google)
10.0.1.2
Server Second Interface: svn.dshng.net
10.0.1.3 (only exposed IP on router)
DNS is set to 10.0.1.2 on router and 127.0.0.1 on server.
Forwarding is set to 8.8.8.8 & 8.8.4.4 (Google)
Search Domain is set to dshng.net
If I setup as follows, I don't get the "Rebuild DNS" error but it only takes care of the local server. What I want follows this 'working' config:
+(this is only the duke entry - first things first)+
*Primary Zone*
*Primary Zone Name: duke.dshng.net.*
Nameservers
*Zone: duke.dshng.net*
*Nameserver Hostname: duke.dshng.net.*
Machine
*Machine Name: duke.dshng.net.*
*IP Addresses: 10.0.1.2*
*Reverse Zone*
*Reverse Zone Name: 1.0.10.in-addr.arpa.*
*Allows zone transfer: No*
Nameservers
*Zone: 1.0.10.in-addr.arpa.*
*Nameserver Hostname: duke.dshng.net.*
*Resolve 10.0.1.2 to duke.dshng.net.*
So what I want doesn't seem to work:
*Primary Zone*
*Primary Zone Name: dshng.net.*
Nameservers
*Zone: dshng.net*
*Nameserver Hostname: duke.dshng.net.*
Machine
*Machine Name: duke.dshng.net.*
*IP Addresses: 10.0.1.2*
*Machine Name: svn.dshng.net.*
*IP Addresses: 10.0.1.3*
*Reverse Zone*
*Reverse Zone Name: 1.0.10.in-addr.arpa.*
*Allows zone transfer: No*
Nameservers
*Zone: 1.0.10.in-addr.arpa.*
*Nameserver Hostname: duke.dshng.net.*
*Resolve 10.0.1.2 to duke.dshng.net.*
It seems pretty straightforward and I had this working, I thought, in Ubuntu, but it just doesn't seem to resolve. I'm using the GUI so maybe that's the issue??

Your primary zone is the DOMAIN name that ALL devices will append to their names to be looked up in DNS. so for you it is 'dshng.net'. YOu need to have a DNS server setup with a STATIC ip address and then when you create dshng.net you can add that DNS record. Then you add each device, such as 'duke' and 'svn'.
Peter

How to change permissions on a raw partition in ZFS file to write in zone

I created ZFS file system and create a raw partition( size 100m) in it like below.
// fnzone0 - name of zpool
global# zfs create -V 100m fnzone0/data0
global# zfs set reservatiion=100m fnzone0/data0
zonecfg:zone1>add device
zonecfg:zone1:device> set match=/dev/zvol/rdsk/fnzone0/data0
zonecfg:zone1:device>end
I would like to write to '/dev/zvol/rdsk/fnzone0/data0' from the local zone.
What permission should I change in the global zone and local zone?
Additional question:
Can I export zpool 'fnzone0' to a local zone and create a raw partition like above without createing filesystems?
Thank you.
-Yong

It was not a problem. The raw partition with the soft partition or ZFS filesystem works fine in the local zone.
Thank you for your help.
-Yong

Zfs newbie question

Hello
I have a fresh Solaris 10/6 install. My disk have 20Gb but I used only
10GB for the base solaris installation and home directory.
I have 10GB free without any partition.
I would like to use my free space to store my zones using zfs filesystem.
In example:
/zones
/zone/zona1
/zone/zone2
How I can create "/zones" filesystem ?
zpool create zones ?????
?????: What I must write ?
This is my filesystem setup now (solaris default):
df -h
Sistema de archivos tama�� usados aprovechar capacidad Montado en
/dev/dsk/c0d0s0 4,7G 3,1G 1,5G 67% /
/devices 0K 0K 0K 0% /devices
ctfs 0K 0K 0K 0% /system/contract
proc 0K 0K 0K 0% /proc
mnttab 0K 0K 0K 0% /etc/mnttab
swap 815M 716K 815M 1% /etc/svc/volatile
objfs 0K 0K 0K 0% /system/object
/usr/lib/libc/libc_hwcap1.so.1
4,7G 3,1G 1,5G 67% /lib/libc.so.1
fd 0K 0K 0K 0% /dev/fd
swap 815M 8K 815M 1% /tmp
swap 815M 28K 815M 1% /var/run
/dev/dsk/c0d0s7 3,5G 3,8M 3,5G 1% /export/home
Thanks in advance.
roberto pereyra

At least make a token attempt to read the documentation
http://docs.sun.com/app/docs/doc/819-5461
Then if you have a specific question someone will more likely to answer you.
Otherwise it sounds like your saying, "I'm too lazy to read any documentation. Can someone tell me all about it".
BTW I will point out that at the moment if you put your zones on a zfs filesystem, it means you will be unable to install new solaris upgrades. You can still patch, but not upgrade to a new release. They may add that functionality at some stage. But for the moment, its not there.

Best practise for zone ZFS backups

We have an M5000 server that will eventually have at least 40 zones configured. The zone root and data files will be on ZFS. There is a requirement to run daily and weekly backups. We also have Netbackup as an enterprise backup system.
My plan was to run daily zfs snapshots and to weekly "send" the snapshot to disk to be picked up by Netbackup.
Questions have been raised over the possible disk performance hit of keeping 7 snapshots per filesystem online. Has anyone experienced this or can suggest an alternative backup procedure?
Thanks.

You should be aware that using zones on zfs currently prevents liveupgrade from being used.
So it will make future patching trickier.

Need Best Practice for creating BE in ZFS boot environment with zones

Good Afternoon -
I have a Sparc system with ZFS Root File System and Zones. I need to create a BE for whenever we do patching or upgrades to the O/S. I have run into issues when testing booting off of the newBE where the zones did not show up. I tried to go back to the original BE by running the luactivate on it and received errors. I did a fresh install of the O/S from cdrom on a ZFS filesystem. Next ran the following commands to create the zones, and then create the BE, then activate it and boot off of it. Please tell me if there are any steps left out or if the sequence was incorrect.
# zfs create o canmount=noauto rpool/ROOT/S10be/zones
# zfs mount rpool/ROOT/S10be/zones
# zfs create o canmount=noauto rpool/ROOT/s10be/zones/z1
# zfs create o canmount=noauto rpool/ROOT/s10be/zones/z2
# zfs mount rpool/ROOT/s10be/zones/z1
# zfs mount rpool/ROOT/s10be/zones/z2
# chmod 700 /zones/z1
# chmod 700 /zones/z2
# zonecfg z z1
Myzone: No such zone configured
Use create to begin configuring a new zone
Zonecfg:myzone> create
Zonecfg:myzone> set zonepath=/zones/z1
Zonecfg:myzone> verify
Zonecfg:myzone> commit
Zonecfg:myzone>exit
# zonecfg z z2
Myzone: No such zone configured
Use create to begin configuring a new zone
Zonecfg:myzone> create
Zonecfg:myzone> set zonepath=/zones/z2
Zonecfg:myzone> verify
Zonecfg:myzone> commit
Zonecfg:myzone>exit
# zoneadm z z1 install
# zoneadm z z2 install
# zlogin C e 9. z1
# zlogin C e 9. z2
Output from zoneadm list -v:
# zoneadm list -v
ID NAME STATUS PATH BRAND IP
0 global running / native shared
2 z1 running /zones/z1 native shared
4 z2 running /zones/z2 native shared
Now for the BE create:
# lucreate n newBE
# zfs list
rpool/ROOT/newBE 349K 56.7G 5.48G /.alt.tmp.b-vEe.mnt <--showed this same type mount for all f/s
# zfs inherit -r mountpoint rpool/ROOT/newBE
# zfs set mountpoint=/ rpool/ROOT/newBE
# zfs inherit -r mountpoint rpool/ROOT/newBE/var
# zfs set mountpoint=/var rpool/ROOT/newBE/var
# zfs inherit -r mountpoint rpool/ROOT/newBE/zones
# zfs set mountpoint=/zones rpool/ROOT/newBE/zones
and did it for the zones too.
When ran the luactivate newBE - it came up with errors, so again changed the mountpoints. Then rebooted.
Once it came up ran the luactivate newBE again and it completed successfully. Ran the lustatus and got:
# lustatus
Boot Environment Is Active Active Can Copy
Name Complete Now On Reboot Delete Status
s10s_u8wos_08a yes yes no no -
newBE yes no yes no -
Ran init 0
ok boot -L
picked item two which was newBE
then boot.
Came up - but df showed no zones, zfs list showed no zones and when cd into /zones nothing there.
Please help!
thanks julie

The issue here is that lucreate add's an entry to the vfstab in newBE for the zfs filesystems of the zones. You need to lumount newBE /mnt then edit /mnt/etc/vfstab and remove the entries for any zfs filesystems. Then if you luumount it you can continue. It's my understanding that this has been reported to Sun, and, the fix is in the next release of Solaris.

Copy/cloning ZFS zones between servers

Hello,
We have two identical servers (two blades actually) and I created a zone with ZFS in one that i'd like to clone/copy to the other server.
Is this possible? if so? is there an easy way? I've searched in google and all I could find was copy/clone in the same server, but no info accross servers.
Thanks!

I think you will be able to use the ZFS replication features to sync your zone directory and data volumes to a remote host.
[http://blogs.sun.com/constantin/entry/7_easy_tips_for_zfs|http://blogs.sun.com/constantin/entry/7_easy_tips_for_zfs]

Confused about ZFS filesystems created with Solaris 11 Zone

Hello.
Installing a blank Zone in Solaris *10* with "zonepath=/export/zones/TESTvm01" just creates one zfs filesystem:
+"zfs list+
+...+
+rzpool/export/zones/TESTvm01 4.62G 31.3G 4.62G /export/zones/TESTvm01"+
Doing the same steps with Solaris *11* will ?create? more filesystems:
+"zfs list+
+...+
+rpool/export/zones/TESTvm05 335M 156G 32K /export/zones/TESTvm05+
+rpool/export/zones/TESTvm05/rpool 335M 156G 31K /rpool+
+rpool/export/zones/TESTvm05/rpool/ROOT 335M 156G 31K legacy+
+rpool/export/zones/TESTvm05/rpool/ROOT/solaris 335M 156G 310M /export/zones/TESTvm05/root+
+rpool/export/zones/TESTvm05/rpool/ROOT/solaris/var 24.4M 156G 23.5M /export/zones/TESTvm05/root/var+
+rpool/export/zones/TESTvm05/rpool/export 62K 156G 31K /export+
+rpool/export/zones/TESTvm05/rpool/export/home 31K 156G 31K /export/home"+
I dont understand why Solaris 11 is doing that. Just one FS (like in Solaris 10) would be better for my setup. I want to configure all created volumes by myself.
Is it possible to deactivate this automatic "feature"?

There are several reasons that it works like this, all guided by the simple idea "everything in a zone should work exactly like it does in the global zone, unless that is impractical." By having this layout we get:
* The same zfs administrative practices within a zone that are found in the global zone. This allows, for example, compression, encryption, etc. of parts of the zone.
* beadm(1M) and pkg(1) are able to create boot environments within the zone, thus making it easy to keep the global zone software in sync with non-global zone software as the system is updated (equivalent of patching in Solaris 10). Note that when Solaris 11 updates the kernel, core libraries, and perhaps other things, a new boot environment is automatically created (for the global zone and each zone) and the updates are done to the new boot environment(s). Thus, you get the benefits that Live Upgrade offered without the severe headaches that sometimes come with Live Upgrade.
* The ability to have a separate /var file system. This is required by policies at some large customers, such as the US Department of Defense via the DISA STIG.
* The ability to perform a p2v of a global zone into a zone (see solaris(5) for examples) without losing the dataset hierarchy or properties (e.g. compression, etc.) set on datasets in that hierarchy.
When this dataset hierarchy is combined with the fact that the ZFS namespace is virtualized in a zone (a feature called "dataset aliasing"), you see the same hierarchy in the zone that you would see in the global zone. Thus, you don't have confusing output from df saying that / is mounted on / and such.
Because there is integration between pkg, beadm, zones, and zfs, there is no way to disable this behavior. You can remove and optionally replace /export with something else if you wish.
If your goal is to prevent zone administrators from altering the dataset hierarchy, you may be able to accomplish this with immutable zones (see zones admin guide or file-mac-profile in zonecfg(1M)). This will have other effects as well, such as making all or most of the zone unwritable. If needed, you can add fs or dataset resources which will not be subject to file-mac-profile and as such will be writable.

Zone initialisation after creation

I've created two zones, both sparse root and full root, but when booting after creation neither run through the initial configuration as detailed in the zone documentation ie; zlogin -C zone - answer install questions. From the console both display the following only:
[NOTICE: Zone booting up]
SunOS Release 5.10 Version Generic_142900-03 64-bit
Copyright 1983-2009 Sun Microsystems, Inc. All rights reserved.
Use is subject to license terms.
Hostname: zone2
Reading ZFS config: done.
zone2 console login:
I'm obviously missing something but can't think what or is this now normal ie; no longer requires configuration. Done the usual web trawling but with no success.

Looks like I've possibly found the issue.
Fix in 137115-01
Workaround :
cd {zonepath}/root/var/svc/profile
ln -s ./generic_open.xml generic.xml

Zones on zfs question

Similar Messages

Maybe you are looking for