Académique Documents
Professionnel Documents
Culture Documents
com/mandalika/entry/solaris_10_zone_creation_for
Oracle
Blogs Home
Products & Services
Downloads
Support
Partners
Communities
About
Login
Oracle Blog
Something to share
(Reproducing the three and half year old blog entry, a top 5 one, "as is" from my other blog hosted on blogger. Source URL: http://technopark02.blogspot.com/2006/02/solaris-
10-zone-creation-for-dummies.html)
About Zones
In its simple form, a zone is a virtual operating system environment created within a single instance of the Solaris operating system. Efficient resource utilization is the main goal of
this technology.
Solaris 10's zone partitioning technology can be used to create local zones that behave like virtual servers. All local zones are controlled from the system's global zone. Processes
running in a zone are completely isolated from the rest of the system. This isolation prevents processes that are running in one zone from monitoring or affecting processes that are
running in other zones. Note that processes running in a local zone can be monitored from global zone; but the processes running in a global zone or even in another local zone
cannot be monitored from a local zone.
As of now, the upper limit for the number of zones that can be created/run on a system is 8192; of course, depending on the resource availability, a single system may or may not
run all the configured zones effectively.
Global Zone
When we install Solaris 10, a global zone gets installed automatically; and the core operating system runs under global zone. To list all the configured zones, we can use zoneadm
command:
% zoneadm list -v
ID NAME STATUS PATH
0 global running /
Prerequisites:
Plenty of disk space to hold the newly installed zone. It needs at least 2G space to copy the essential files to the local zone, and of course the disk space needed by the
application(s) you are planning to run, in this zone; and
A dedicated IP for network connectivity
% df -h /
Filesystem size used avail capacity Mounted on
/dev/dsk/c1t1d0s0 29G 22G 7.1G 76% /
% ifconfig -a
lo0: flags=2001000849 mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
eri0: flags=1000843 mtu 1500 index 2
inet 192.168.74.217 netmask fffffe00 broadcast 192.168.75.255
2. Since there is more than 5G free space, I've decided to install a local zone under /zones.
% mkdir /zones
3. Next step is to define/create the zone root. This is the path to zone's root directory that is relative to the global zone's root directory. Zone root must be owned by root user
with the mode 700. This will be used in setting the zonepath property, during the zone creation process
% cd /zones
% mkdir appserver
1 of 12 5/28/2015 4:16 PM
Solaris 10: Zone Creation for Dummies (Giri Mandalika's Repository) https://blogs.oracle.com/mandalika/entry/solaris_10_zone_creation_for
% ls -l
total 2
drwx------ 2 root root 512 Feb 17 12:46 appserver
4. Create & configure a new 'sparse root' local zone, with root privileges
% zonecfg -z appserv
appserv: No such zone configured
Use 'create' to begin configuring a new zone.
zonecfg:appserv> create
zonecfg:appserv> set zonepath=/zones/appserver
zonecfg:appserv> set autoboot=true
zonecfg:appserv> add net
zonecfg:appserv:net> set physical=eri0
zonecfg:appserv:net> set address=192.168.175.126
zonecfg:appserv:net> end
zonecfg:appserv> add fs
zonecfg:appserv:fs> set dir=/repo2
zonecfg:appserv:fs> set special=/dev/dsk/c2t40d1s6
zonecfg:appserv:fs> set raw=/dev/rdsk/c2t40d1s6
zonecfg:appserv:fs> set type=ufs
zonecfg:appserv:fs> set options noforcedirectio
zonecfg:appserv:fs> end
zonecfg:appserv> add inherit-pkg-dir
zonecfg:appserv:inherit-pkg-dir> set dir=/opt/csw
zonecfg:appserv:inherit-pkg-dir> end
zonecfg:appserv> info
zonepath: /zones/appserver
autoboot: true
pool:
inherit-pkg-dir:
dir: /lib
inherit-pkg-dir:
dir: /platform
inherit-pkg-dir:
dir: /sbin
inherit-pkg-dir:
dir: /usr
inherit-pkg-dir:
dir: /opt/csw
net:
address: 192.168.175.126
physical: eri0
zonecfg:appserv> verify
zonecfg:appserv> commit
zonecfg:appserv> exit
In a Sparse Root Zone, the directories /usr, /sbin, /lib and /platform will be mounted as loopback file systems. That is, although all those directories appear as normal
directories under the sparse root zone, they will be mounted as read-only file systems. Any change to those directories in the global zone can be seen from the sparse root
zone.
However if you need the ability to write into any of those directories listed above, you may need to configure a Whole Root Zone. For example, softwares like ClearCase
need write permissions to /usr directory. In that case configuring a Whole Root Zone is the way to go. The steps for creating and configuring a new 'Whole Root' local zone
are as follows:
% zonecfg -z appserv
appserv: No such zone configured
Use 'create' to begin configuring a new zone.
zonecfg:appserv> create
zonecfg:appserv> set zonepath=/zones/appserver
zonecfg:appserv> set autoboot=true
zonecfg:appserv> add net
zonecfg:appserv:net> set physical=eri0
zonecfg:appserv:net> set address=192.168.175.126
zonecfg:appserv:net> end
zonecfg:appserv> add inherit-pkg-dir
zonecfg:appserv:inherit-pkg-dir> set dir=/opt/csw
zonecfg:appserv:inherit-pkg-dir> end
zonecfg:appserv> remove inherit-pkg-dir dir=/usr
zonecfg:appserv> remove inherit-pkg-dir dir=/sbin
zonecfg:appserv> remove inherit-pkg-dir dir=/lib
zonecfg:appserv> remove inherit-pkg-dir dir=/platform
zonecfg:appserv> info
zonepath: /zones/appserver
autoboot: true
pool:
inherit-pkg-dir:
dir: /opt/csw
net:
address: 192.168.175.126
physical: eri0
zonecfg:appserv> verify
zonecfg:appserv> commit
zonecfg:appserv> exit
\* zonepath=/zones/appserver
Local zone's root directory, relative to global zone's root directory. ie., local zone will have all the bin, lib, usr, dev, net, etc, var, opt etc., directories physically
under /zones/appserver directory
\* autoboot=true
\* physical=eri0
2 of 12 5/28/2015 4:16 PM
Solaris 10: Zone Creation for Dummies (Giri Mandalika's Repository) https://blogs.oracle.com/mandalika/entry/solaris_10_zone_creation_for
\* address=192.168.175.126
[Added 08/25/08] The whole add fs section adds the file system to the zone. In this example, the file system that is being exported to the zone is an existing UFS file system.
\* set dir=/repo2
Grant access to the block (/dev/dsk/c2t40d1s6) and raw (/dev/rdsk/c2t40d1s6) devices so the file system can be mounted in the non-global zone. Make sure the block
device is not mounted anywhere right before installing the non-global zone. Otherwise, the zone installation may fail with ERROR: file system check </usr/lib/fs/ufs
/fsck> of </dev/rdsk/c2t40d1s6> failed: exit status <33>: run fsck manually. In that case, unmount the file system that is being exported, uninstall the partially
installed zone (zoneadm -z <zone> uninstall) then install the zone from the scratch (no need to re-configure the zone, just do a re-install).
\* set type=ufs
\* dir=/opt/csw
read-only path, will be lofs'd (loop back mounted) from global zone. Note: it works for sparse root zone only -- whole root zone cannot have any shared file systems
zonecfg commands verify and commit, verifies and commits the zone configuration for the zone, respectively. Note that it is not necessary to commit the zone
configuration; it will be done automatically when we exit from zonecfg tool. info displays information about the current configuration
6. Next step is to install the configured zone. It takes a while to install the necessary packages
% ls -ld /zones
drwxrwxr-x 3 root root 512 Feb 17 12:46 /zones
Since /zones must not be group writable, let's change the mode to 700.
% ls -ld /zones
drwx------ 3 root root 512 Feb 17 12:46 /zones
8. Boot up the appserv zone. Let's note down the ifconfig output to see how it changes after the local zone boots up. Also observe that there is no answer from the server yet,
since it is not up
% ping 192.168.175.126
no answer from 192.168.175.126
% ifconfig -a
lo0: flags=2001000849 mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
eri0: flags=1000843 mtu 1500 index 2
inet 192.168.74.217 netmask fffffe00 broadcast 192.168.75.255
ether 0:3:ba:2d:0:84
3 of 12 5/28/2015 4:16 PM
Solaris 10: Zone Creation for Dummies (Giri Mandalika's Repository) https://blogs.oracle.com/mandalika/entry/solaris_10_zone_creation_for
% ping 192.168.175.126
192.168.175.126 is alive
% ifconfig -a
lo0: flags=2001000849 mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
lo0:1: flags=2001000849 mtu 8232 index 1
zone appserv
inet 127.0.0.1 netmask ff000000
eri0: flags=1000843 mtu 1500 index 2
inet 192.168.74.217 netmask fffffe00 broadcast 192.168.75.255
ether 0:3:ba:2d:0:84
eri0:1: flags=1000843 mtu 1500 index 2
zone appserv
inet 192.168.175.126 netmask ffff0000 broadcast 192.168.255.255
Observe that the zone appserv has it's own virtual instance of lo0, the system's loopback interface and the zone's IP address is also being served by the eri0 network
interface
9. Login to the Zone {console} and performing the internal zone configuration. zlogin utility can be used to enter a zone. The first time we log in to the console, we get a
chance to answer a series of questions for the desired zone configuraton. -C option of zlogin can be used to log in to the Zone console.
% zlogin -C -e [ appserv
[Connected to zone 'appserv' console]
Select a Language
0. English
1. es
2. fr
Select a Locale
...
Enter the host name which identifies this system on the network. The name
must be unique within your domain; creating a duplicate host name will cause
problems on the network after you install Solaris.
A host name must have at least one character; it can contain letters,
digits, and minus signs (-).
...
...
That is all there is in the creation of a local zone. Now simply login to the newly created zone, just like connecting to any other system in the network.
Sometimes it might be necessary to export file systems or create new file systems when the zone is already running. This section's focus is on exporting block devices and the raw
devices in such situations i.e., when the local zone is already configured.
If the file system does not exist on the device, raw devices can be exported as they are, so the file system can be created inside the non-global zone using the normal newfs
command.
The following example shows how to export the raw device to a non-global zone when the zone is already configured.
# zonecfg -z appserv
zonecfg:appserv> add device
4 of 12 5/28/2015 4:16 PM
Solaris 10: Zone Creation for Dummies (Giri Mandalika's Repository) https://blogs.oracle.com/mandalika/entry/solaris_10_zone_creation_for
After the zonecfg step, reboot the non-global zone to make the raw device visible inside the non-global zone. After the reboot, check the existence of the raw device.
# hostname
v440appserv
# ls -l /dev/rdsk/c5t0d0s6
crw-r----- 1 root sys 118, 126 Aug 27 14:33 /dev/rdsk/c5t0d0s6
Now that the raw device is accessible within the non-global zone, we can use the regular Solaris commands to create any file system like UFS.
eg.,
# newfs -v c5t0d0s6
newfs: construct a new file system /dev/rdsk/c5t0d0s6: (y/n)? y
mkfs -F ufs /dev/rdsk/c5t0d0s6 1140260864 -1 -1 8192 1024 251 1 120 8192 t 0 -1 8 128 n
Warning: 4096 sector(s) in last cylinder unallocated
/dev/rdsk/c5t0d0s6: 1140260864 sectors in 185590 cylinders of 48 tracks, 128 sectors
556768.0MB in 11600 cyl groups (16 c/g, 48.00MB/g, 5824 i/g)
super-block backups (for fsck -F ufs -o b=#) at:
32, 98464, 196896, 295328, 393760, 492192, 590624, 689056, 787488, 885920,
Initializing cylinder groups:
...............................................................................
...............................................................................
.........................................................................
super-block backups for last 10 cylinder groups at:
1139344160, 1139442592, 1139541024, 1139639456, 1139737888, 1139836320,
1139934752, 1140033184, 1140131616, 1140230048
If the file system exists on the device, block devices can be exported as they are, so the file system can be mounted inside the non-global zone using the normal Solaris command,
mount.
The following example shows how to export the block device to a non-global zone when the zone is already configured.
# zonecfg -z appserv
zonecfg:appserv> add device
zonecfg:appserv:device> set match=/dev/dsk/c5t0d0s6
zonecfg:appserv:device> end
zonecfg:appserv> verify
zonecfg:appserv> commit
zonecfg:appserv> exit
After the zonecfg step, reboot the non-global zone to make the block device visible inside the non-global zone. After the reboot, check the existence of the block device; and mount
the file system within the non-global zone.
# hostname
v440appserv
# ls -l /dev/dsk/c5t0d0s6
brw-r----- 1 root sys 118, 126 Aug 27 14:40 /dev/dsk/c5t0d0s6
# fstyp /dev/dsk/c5t0d0s6
ufs
# df -h /mnt
Filesystem size used avail capacity Mounted on
/dev/dsk/c5t0d0s6 535G 64M 530G 1% /mnt
Mounting a file system from the global zone into the non-global zone
Sometimes it is desirable to have the flexibility of mounting a file system in the global zone or non-global zone on-demand. In such situations, rather than exporting the file systems
or block devices into the non-global zone, create the file system in the global zone and mount the file system directly from the global zone into the non-global zone. Make sure to
unmount that file system in the global zone if mounted, before attempting to mount it in the non-global zone.
eg.,
# mkdir /repo1
# df -h /repo1
/dev/dsk/c2t40d0s6 134G 64M 133G 1% /repo1
# umount /repo1
# ls -ld /zones/appserv/root/repo1
drwxr-xr-x 2 root root 512 Aug 27 14:45 /zones/appserv/root/repo1
5 of 12 5/28/2015 4:16 PM
Solaris 10: Zone Creation for Dummies (Giri Mandalika's Repository) https://blogs.oracle.com/mandalika/entry/solaris_10_zone_creation_for
Now go back to the non-global zone and check the mounted file systems.
# hostname
v440appserv
# df -h /repo1
Filesystem size used avail capacity Mounted on
/repo1 134G 64M 133G 1% /repo1
To unmount the file system from the non-global zone, run the following command from the global zone.
# umount /zones/appserv/root/repo1
eg.,
Earlier in the zone creation step, the block device /dev/dsk/c2t40d1s6 was exported and mounted on the mount point /repo2 inside the non-global zone. To remove the file
system completely from the non-global zone, run the following in the global zone.
# zonecfg -z appserv
zonecfg:appserv> remove fs dir=/repo2
zonecfg:appserv> verify
zonecfg:appserv> commit
zonecfg:appserv> exit
Just for the sake of completeness, the following steps show how to remove a local zone.
[New: 07/14/2009]
The following instructions are for cloning a non-global zone on the same system. The example shown below clones the siebeldb zone. After the cloning process, a brand new zone
oraclebi emerges as a replica of siebeldb zone.
eg.,
6 of 12 5/28/2015 4:16 PM
Solaris 10: Zone Creation for Dummies (Giri Mandalika's Repository) https://blogs.oracle.com/mandalika/entry/solaris_10_zone_creation_for
2. Change the configuration of the new zone that differ from the existing one -- for example, IP address, data set names, network interface etc. To make these changes, edit
/tmp/siebeldb.config.cfg
3. Create the zone root directory for the new zone being created
# mkdir /zones3/oraclebi
# chmod 700 /zones3/oraclebi
# ls -ld /zones3/oraclebi
drwx------ 2 root root 512 Mar 12 15:41 /zones3/oraclebi
4. Create a new (empty, non-configured) zone in the usual manner with the edited configuration file as an input
This step takes at least 5 minutes to clone the whole zone. Larger zones may take longer to complete the cloning process.
8. Login to the console of the new zone to configure IP, networking, etc., and you are done.
# zlogin -C oraclebi
[New: 07/15/2009]
The following instructions demonstrate how to migrate the non-global zone, orabi to another server with examples.
3. Move the zonepath for the zone to be migrated from the old host to the new host.
# cd /zones3
# tar -Ecf orabi.tar orabi
# compress orabi.tar
# sftp newhost
Connecting to newhost...
sftp> cd /zones3
sftp> put orabi.tar.Z
Uploading orabi.tar.Z to /zones3/orabi.tar.Z
sftp> quit
On the newhost:
7 of 12 5/28/2015 4:16 PM
Solaris 10: Zone Creation for Dummies (Giri Mandalika's Repository) https://blogs.oracle.com/mandalika/entry/solaris_10_zone_creation_for
# cd /zones3
# uncompress orabi.tar.Z
# tar xf orabi.tar
Create the equivalent zone orabi on the new host -- use the zonecfg command with the -a option and the zonepath on the new host. Make any required adjustments to the
configuration and commit the configuration.
# zonecfg -z orabi
orabi: No such zone configured
Use 'create' to begin configuring a new zone.
zonecfg:orabi> create -a /zones3/orabi
zonecfg:orabi> info
zonename: orabi
zonepath: /zones3/orabi
brand: native
autoboot: false
bootargs:
pool:
limitpriv: all,!sys_suser_compat,!sys_res_config,!sys_net_config,!sys_linkdir,!sys_devices,!sys_config,!proc_zone,!dtrace_kernel,!sys_ip_config
scheduling-class:
ip-type: shared
inherit-pkg-dir:
dir: /lib
inherit-pkg-dir:
dir: /platform
inherit-pkg-dir:
dir: /sbin
inherit-pkg-dir:
dir: /usr
net:
address: IPaddress
physical: nxge1
defrouter not specified
zonecfg:orabi> set capped-memory
zonecfg:orabi:capped-memory> set physical=8G
zonecfg:orabi:capped-memory> end
zonecfg:orabi> commit
zonecfg:orabi> exit
5. Attach the zone on the new host with a validation check and update the zone to match a host running later versions of the dependent packages
# ls -ld /zones3
drwxrwxrwx 5 root root 512 Jul 15 12:30 /zones3
# chmod g-w,o-w /zones3
# ls -ld /zones3
drwxr-xr-x 5 root root 512 Jul 15 12:30 /zones3
Note:
It is possible to force the attach operation without performing the validation. You can do so with the help of -F option
Be careful when using this option because it could lead to an incorrect configuration; and an incorrect configuration could result in undefined behavior
[New: 07/19/2009]
Tip: How to find out whether connected to the primary OS instance or the virtual instance?
If the command zonename returns global, then you are connected to the OS instance that was booted from the physical hardware. If you see any string other than global, you
might have connected to the virtual OS instance.
Alternatively try running prstat -Z or zoneadm list -cv commands. If you see exactly one non-zero Zone ID, it is an indication that you are connected to a non-global zone.
Suggested reading:
Category: Solaris
8 of 12 5/28/2015 4:16 PM
Solaris 10: Zone Creation for Dummies (Giri Mandalika's Repository) https://blogs.oracle.com/mandalika/entry/solaris_10_zone_creation_for
Hey,
I want to install TOP package.
When I logon to these zone server can I install TOP and have it working?
Thanks, Joe
Hi dear,
- Kiran. N.
how come when i reset the server my local zones loose their Ethernet ports and they have to be plumbed at the global level before they can boot?
Very nice, informative, to the point and implementable post. Would appreciate if you can have a similar post for installing oracle cluster 4.0 for implementing a two node oracle
RAC DB with ZFS filessystem on single physical machine using two non-global zones...or even if you can re-direct me to any good posts/documentation explaining the same as I
couldn't find any satisfactory resource on this topic.
Thanks a ton.
I found that I could not newfs the device partition in the zone if the block device was not presented.
# newfs /dev/rdsk/c1t30s0
newfs: construct a new file system /dev/rdsk/c1t3d0s0: (y/n)? y
can't check mount point; can't stat
#
Post a Comment:
Name:
E-Mail:
URL:
Notify me by email of new comments
Remember Information?
9 of 12 5/28/2015 4:16 PM
Solaris 10: Zone Creation for Dummies (Giri Mandalika's Repository) https://blogs.oracle.com/mandalika/entry/solaris_10_zone_creation_for
Your Comment:
HTML Syntax: NOT allowed
1 + 51 =
About
Search
Recent Posts
Top Tags
11.2
analysis
analytics
benchmark
best
bi
business
c
c++
certification
cmt
code
compiler
consolidation
crm
data
database
ebs
enterprise
f5100
flash
intelligence
java
m4000
mysql
mysqlnd
nfs
opensolaris
oracle
payroll
peoplesoft
performance
php
practices
programming
rdbms
server
siebel
solaris
sparc
studio
sun
t4
t5440
tips
10 of 12 5/28/2015 4:16 PM
Solaris 10: Zone Creation for Dummies (Giri Mandalika's Repository) https://blogs.oracle.com/mandalika/entry/solaris_10_zone_creation_for
troubleshooting
tuning
ultrasparc
ultrasparct2plus
virtualization
Categories
Benchmarks
Best Practices
CMT
Enterprise
Fix
Generic
How-To
Java
MySQL
Oracle
Performance
Solaris
Sun
Tips
Tools
Troubleshooting
Workaround
Archives
May 2015
Sun Mon Tue Wed Thu Fri Sat
1 2
3 4 5 6 7 8 9
10 11 12 13 14 15 16
17 18 19 20 21 22 23
24 25 26 27 28 29 30
31
Today
Bookmarks
ISV Engineering
Java home
My External Blog
MySQL DevZone
OpenSolaris
Sun Developer Network
Menu
Blogs Home
Weblog
Login
Feeds
RSS
All
/Benchmarks
/Best Practices
/CMT
/Enterprise
/Fix
/Generic
/How-To
/Java
/MySQL
/Oracle
/Performance
/Solaris
/Sun
/Tips
/Tools
/Troubleshooting
/Workaround
Comments
Atom
All
/Benchmarks
/Best Practices
/CMT
/Enterprise
/Fix
11 of 12 5/28/2015 4:16 PM
Solaris 10: Zone Creation for Dummies (Giri Mandalika's Repository) https://blogs.oracle.com/mandalika/entry/solaris_10_zone_creation_for
/Generic
/How-To
/Java
/MySQL
/Oracle
/Performance
/Solaris
/Sun
/Tips
/Tools
/Troubleshooting
/Workaround
Comments
The views expressed on this blog are those of the author and do not necessarily reflect the views of Oracle. Terms of Use | Your Privacy Rights | Cookie Preferences
12 of 12 5/28/2015 4:16 PM