Prerequisites to configuration
- create a directory for the root of your non-global zone, mkdir /export/zones/dzone1.
chown root:root /export/zones/dzone1; chmod 700 /export/zones/dzone1 - create a 1G partition for the non-global zone root file system
- add filesystems to any volumes you have created from steps above
- mount your additional space for the root of your new zone (add to vfstab in global zone 0)
Zoneconfig
- zonecfg –z dzone1
- create
- set zonepath=/dzone1
- set autoboot=true
- add inherit-pkg-dir
- set dir=/opt
- end
- add net
- set address=[IP-ADDRESS]
- set physical=hme0
- end
- (could add a device here, but don’t believe it necessary for right now, we’ll see what we get by default)
- add rctl
- set name=zone.cpu-shares
- add value (priv=privileged,limit=20,action=none)
- end
- add attr
- set name=comment
- set type=string
- set value=”First test zone”
- end
- verify
- commit
- exit
Zoneadm
-
style="MARGIN: 0in 0in 0pt; mso-list: l0 level1 lfo2; tab-stops: list .5in">zoneadm –z dzone1 verify
style="MARGIN: 0in 0in 0pt; mso-list: l0 level1 lfo2; tab-stops: list .5in">zoneadm –z dzone1 install
-
style="MARGIN: 0in 0in 0pt; mso-list: l0 level2 lfo2; tab-stops: list 1.0in">if you get an error message during install check the state
style="MARGIN: 0in 0in 0pt; mso-list: l0 level2 lfo2; tab-stops: list 1.0in">zoneadm –z dzone1 list –v
style="MARGIN: 0in 0in 0pt; mso-list: l0 level2 lfo2; tab-stops: list 1.0in">if state is “configured” make corrections specified in the messateg and install the zone again
style="MARGIN: 0in 0in 0pt; mso-list: l0 level2 lfo2; tab-stops: list 1.0in">if state is “incomplete” remove the zone
style="MARGIN: 0in 0in 0pt; mso-list: l0 level2 lfo2; tab-stops: list 1.0in">zoneadm –z dzone1 uninstall
style="MARGIN: 0in 0in 0pt; mso-list: l0 level2 lfo2; tab-stops: list 1.0in">make corrections and install the zone again
zoneadm list –v
-
style="MARGIN: 0in 0in 0pt; mso-list: l0 level2 lfo2; tab-stops: list 1.0in">should report the zone is “ready”
zoneadm list –v
-
style="MARGIN: 0in 0in 0pt; mso-list: l0 level2 lfo2; tab-stops: list 1.0in">should report the zone is “running”
2 style=”MARGIN: 12pt 0in 3pt”>font>
-
style="MARGIN: 0in 0in 0pt; mso-list: l11 level1 lfo3; tab-stops: list .5in">zlogin –C dzone1
-
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">hit return
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">select 3 DEC VT100
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">enter hostname for the zone
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">hit esc-2 to continue
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">hit esc-2 to continue
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">be sure NO is checked for kerberos security
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">hit esc-2 to continue
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">hit esc-2 to continue
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">select DNS for name service
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">esc-2 to continue
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">enter abcd.com for domain
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">esc-2 to continue
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">enter [IP-ADDRESS] for the first IP
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">enter [IP-ADDRESS] for the second IP
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">esc-2 to continue
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">enter abcd.com for search domain
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">esc-2 to cont
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">confirm information
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">esc-2 to cont
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">choose NO for new name service information
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">esc-2 to cont
style="MARGIN: 0in 0in 0pt; mso-list: l11 level2 lfo3; tab-stops: list 1.0in">select
style=”MARGIN: 0in 0in 0pt; mso-list: l11 level1 lfo3; tab-stops: list .5in”>to disconnect from the console use “~.”
MARGIN: 12pt 0in 3pt”>Additional zonecfg
-
style="MARGIN: 0in 0in 0pt; mso-list: l12 level1 lfo12; tab-stops: list .5in">following zone initialization to add additional filesystem resources and resource controls follow the following instructions
style="MARGIN: 0in 0in 0pt; mso-list: l12 level1 lfo12; tab-stops: list .5in">create the directories in the zone you are going to modify
style="MARGIN: 0in 0in 0pt; mso-list: l12 level1 lfo12; tab-stops: list .5in">zonecfg –z dzone2
style="MARGIN: 0in 0in 0pt; mso-list: l12 level1 lfo12; tab-stops: list .5in">add fs
style="MARGIN: 0in 0in 0pt; mso-list: l12 level1 lfo12; tab-stops: list .5in">set dir=/export/home
style="MARGIN: 0in 0in 0pt; mso-list: l12 level1 lfo12; tab-stops: list .5in">set special=/dev/md/dsk/d51
style="MARGIN: 0in 0in 0pt; mso-list: l12 level1 lfo12; tab-stops: list .5in">set raw=/dev/md/rdsk/d51
style="MARGIN: 0in 0in 0pt; mso-list: l12 level1 lfo12; tab-stops: list .5in">set type=ufs
style="MARGIN: 0in 0in 0pt; mso-list: l12 level1 lfo12; tab-stops: list .5in">set options=logging
style="MARGIN: 0in 0in 0pt; mso-list: l12 level1 lfo12; tab-stops: list .5in">end
style="MARGIN: 0in 0in 0pt; mso-list: l12 level1 lfo12; tab-stops: list .5in">verify
style="MARGIN: 0in 0in 0pt; mso-list: l12 level1 lfo12; tab-stops: list .5in">commit
style="MARGIN: 0in 0in 0pt; mso-list: l12 level1 lfo12; tab-stops: list .5in">exit
style="MARGIN: 0in 0in 0pt; mso-list: l12 level1 lfo12; tab-stops: list .5in">bounce the zone
12pt 0in 3pt”>Login
style="MARGIN: 0in 0in 0pt; mso-list: l10 level1 lfo4; tab-stops: list .5in">zlogin –C zone
style="MARGIN: 0in 0in 0pt; mso-list: l10 level1 lfo4; tab-stops: list .5in">zlogin –l c1196 zone
Arial>Commands
style="MARGIN: 0in 0in 0pt; mso-list: l3 level1 lfo5; tab-stops: list .5in">ps with –Z
style="MARGIN: 0in 0in 0pt; mso-list: l3 level1 lfo5; tab-stops: list .5in">ipcs, pgrep, ptree, prstat with –z zonename option
Arial>Halt/Shutdown
style="MARGIN: 0in 0in 0pt; mso-list: l6 level1 lfo6; tab-stops: list .5in">zoneadm –z myzone halt
face=Arial>Boot
style="MARGIN: 0in 0in 0pt; mso-list: l8 level1 lfo7; tab-stops: list .5in">zoneadm –z myzone boot
face=Arial>Reboot
style="MARGIN: 0in 0in 0pt; mso-list: l5 level1 lfo8; tab-stops: list .5in">zoneadm –z myzone reboot
face=Arial>Grow FileSystem
style="MARGIN: 0in 0in 0pt; mso-list: l2 level1 lfo9; tab-stops: list .5in">from the global machine
style="MARGIN: 0in 0in 0pt; mso-list: l2 level1 lfo9; tab-stops: list .5in">growfs –M /zoneroot/root/filesystem /dev/md/rdsk/device
Arial>updating resources on the fly for a zone
style="MARGIN: 0in 0in 0pt; mso-list: l4 level1 lfo13; tab-stops: list .5in">must run the following command from the global zone
style="MARGIN: 0in 0in 0pt; mso-list: l4 level2 lfo13; tab-stops: list 1.0in">prctl –n zone.cpu-shares –v <value> -r –i zone <zone number>
-
style="MARGIN: 0in 0in 0pt; mso-list: l4 level2 lfo13; tab-stops: list 1.0in">prctl –n zone.cpu-shares –v <value> -r –i zone <zone number>
h2 style=”MARGIN: 12pt 0in 3pt”>=Arial>Notes
-
style="MARGIN: 0in 0in 0pt; mso-list: l1 level1 lfo10; tab-stops: list .5in">You can install apps either at a global or non-global level. Caveat, user’s will be unable to install packages to /usr/local at a non-global level unless we create /usr/local as a filesystem to mount.
But then, we must effectively cover anything in the global /usr/local. Just be aware.