Manuals / Sun Microsystems / Computer Equipment / Computer Hardware

Sun Microsystems 10 manual Vii

Models: 10

1 121

Download 121 pages 49.77 Kb

Page 7

Version 3.1-enSolaris 10 Container Guide - 3.1 Disclaimer

Effective: 30/11/2009

Version	Contents	Who
	Drawings 1 - 6 as an image	Detlef Drewanz

1.2	06/11/2006
	General chapter virtualization	Detlef Drewanz, Ulrich Gräf
	Additional network examples
	27/10/2006
	Revision control table reorganized
1.1	(the latest at the top)	Detlef Drewanz
	References amended
	Hardening of zones amended

1.0	24/10/2006
	Feedback incorporated, corrections	Detlef Drewanz
	Use cases and network
	Zones added in the cluster	Thorsten Früauf/Detlef Ulherr
	Complete revision of various chapters	Ulrich Gräf

Draft 2.2	1st network example, corrections 31/07/2006	Ulrich Gräf

Draft 2.0	2nd draft published – 28/07/2006	Detlef Drewanz, Ulrich Gräf

Draft 1.0	1st draft (internal) – 28/06/2006	Detlef Drewanz, Ulrich Gräf

VII

Image 7

Sun Microsystems 10 manual Vii

Contents

Solaris 10 Container Guide Table of contents III Network limitation IPQoS Duplicating zones with zoneadm detach/attach and zfs clone Disclaimer VII Introduction Overview Solaris Containers and Solaris ZonesUg Characteristics of Solaris 10 Zones Zones and security Zones and software installationZones and privileges Fair share scheduler in a resource pool Zones and resource managementCPU resources Processor sets in a resource poolMemory resource management Network resource management IPQoS = IP Quality of ServiceUser interfaces for zones Branded zones Linux and Solaris 8/Solaris 9 compatibility Zones and high availabilitySolaris container cluster aka zone cluster Virtualization technologies compared Domains/physical partitions App ServerDd Logical partitions Logical partitionsDd Container Solaris zones in an OS Containers Solaris zones in an OSDd Consolidation in one computer Consolidation in one computerSummary of virtualization technologies Physical Logical Resource Virtualisation Management AppAssessment SolutionGrid computing with isolation RequirementSmall web servers Global Zone SystemDd Use case Multi-network consolidation Multi-network consolidationDd Use case Multi-network monitoring Multi-network monitoringDd Use case Multi-network backup Multi-network backupConsolidation development/test/integration/production Dd Use case Consolidation of test systems Consolidation of test systemsRequirements Training systemsDd Use case Server consolidation Server consolidationDd Use case Confidentiality of data and processes Confidentiality of data and processesDd Use case Developer test systems Test systems for developersSolaris 8 and Solaris 9 containers for development Solaris 8 and Solaris 9 containers as revision systems Dd Use case Hosting for different companies on one computer Hosting for several companies on one computerDa Use case SAP portals in Solaris containers SAP portals in Solaris containersDa Live upgrade Upgrade- and Patch-management in a virtual environmentDC1 DC2 Flying zones Service-oriented Solaris server infrastructureSolaris Container Cluster aka zone cluster Whole-root zones ConceptsSparse-root zones − /lib − /platform − /sbin − /usrWhole-root Var Usr Comparison between sparse-root zones and whole-root zonesPlatform ~3.6 GB Software in zones Software installation by the global zone usage in all zones Software installations in Solaris and zonesInstallation by the local zone usage in the local zone Program/application storage Data storageOpt/staroffice Root disk layoutZFS within a zone Volume manager in local zones Options for using ZFS in local zonesNFS and local zones Ndd -set /dev/ip iprestrictinterzoneloopback Network concepts Introduction into networks and zonesNetwork address management for zones Shared IP instance and routing between zonesFirewalls between zones IP filter Exclusive IP instancePlumb, snoop1M, dhcp5 or ipfilter5 is possible Interface = InterfacenameInstance + VLAN-IDIpmp Zones and limitations in the networkDynamic configuration of devices Static configuration of devicesProjects Separate name services in zonesServices Hosts databaseApplications in local zones only ParadigmsClustered containers One application per zoneClient Solaris Container Cluster Configuration and administration Automated provisioning of services Automatic configuration of zones by scriptInstallation and administration of a branded zone Lifecycle management Patching with live upgradePatching a system with local zones Patching with zoneadm attach -u Patching with upgrade serverMoving zones between architectures sun4u/sun4v ∙ create /zones/zone1 Backup and recovery of zonesMigration of a zone to another system Backup of zones with ZFSUsing boot arguments in zones Management and monitoringAuditing operations in the zone Consolidating log information of zonesMonitoring zone workload Extended accounting with zonesGlobal# dtrace -n iostart@zonename = count DTrace of processes within a zoneGeneral resource pools Resource managementTypes of resource management Capping of CPU time for a zoneProjects, projadd, projmod, projdel Lightweight processes LWPFair share scheduler FSS Fair share scheduler in a zoneLimiting virtual memory Limiting memory resourcesRcapstat Assessing memory requirements for global and local zonesPrivileges and resource management Limiting locked memoryNetwork limitation IPQoS IPC limits Semaphore, shared memory, message queuesDd Planning a Solaris container Solaris container navigatorDd Self-qualification of an application in a container 4zonecfgbrand=native Configuration files Installation and configurationDd File /etc/zones/index Command Description Special commands for zonesCommand Description Metadb SwapVar Var/crashConfiguring a sparse root zone required Actions Configuring a whole root zone required Actions Zone initialization with sysidcfg Zone installationUninstalling a zone Starting zones automatically Optional settingsChanging the set of privileges of a zone Storage within a zone Using a device in a local zoneZone1# ls /dev/dsk C1d0s0 Local zone mounts a UFS file system from a deviceUser level NFS server in a local zone Using a DVD drive in the local zoneVersion 3.1-enSolaris 10 Container Guide 3.1 5. Cookbooks User attributes for ZFS within a zone Several zones share a file systemZFS in a zone Tank 30.2M 10G 18K None Tank/zone1 16.3M 983M Mnt− zonecfg -z zone -f file Configuring a zone by command file or templateAutomatic quick installation of zones With zonecfg -z zone export -f file of an existing zoneZones hardening Accelerated automatic creation of zones on a ZFS file systemNetwork interfaces for exclusive IP instances Change network configuration for shared IP instancesSet default router for shared IP instance NetworkSet interceptloopback IP filter between shared IP zones on a systemImplementation IP filter between exclusive IP zones on a systemZones, networks and routing Global and local zone with shared networkNetworkNetwork Zone 1 /etc/hostname.bge1 Zone 2 /etc/hostname.bge2 Set defrouter=192.168.202.2 Zones in separate networks using the shared IP instanceIfconfig bge1 plumb down Zoneadm -z zone1 ready Zoneadm -z zone2 readyZonecfg set ip-type=exclusive Zones in separate networks using exclusive IP instancesZone 1 /etc/hostname.bge1 Zone2 192.168.202.1 are now active 192.168.101.201 Zone 1 /etc/hostname.bge1 Zone1 192.168.201.1,192.168.200.1 and zone2192.168.202.1 Zoneadm -z zone1 boot, zoneadm -z zone2 boot Zone 1 /etc/hostname.bge3 /etc/defaultrouter Load Balancer Boot arguments in zones Booting a zoneRoot password for system maintenance control-d to bypass Software installation per mount Zone migration among systems Software installation with provisioning system∙ Detach the zone with zoneadm -z zone detach Global# zoneadm -z test halt Zone migration within a systemGlobal# zoneadm List -vc Global Running Native Shared Test Export/home/zone/testDuplicating zones with zoneadm clone Global Running Native Shared Test Installed Container/test100 ID Name Status Path Brand101 Duplicating zones with zoneadm detach/attach and zfs clone102 Moving a zone between a sun4u and a sun4v system103 Lumount s10-807+1 Using live upgrade to patch a system with local zonesShutting down a zone Lucreate -c s10-807 -n s10-807+1 -m //dev/dsk/c1t0d0s4ufs105 Reboot Luactivate s10-807+1 initZone audit DTrace in a local zoneZone1# dtrace -l tail +2 zone1# Zone accountingResource pools with processor sets Limiting the /tmp-size within a zoneSwap Tmp Tmpfs Yes Size=250m Limiting the CPU usage of a zone CPU capping108 Global # svcs dynamic Dynamic resource pools for zones109 110 Limiting the physical main memory consumption of a projectImplementing memory resource management for zones Rcapadm -z zone1 -m 40mZone.max-swap Privileged 180MB Deny System 16.0EB Max Global # prctl -i zone zone1 Zone 22 zone1111 112 Solaris Container in OpenSolarisOpenSolaris general Ipkg-Branded zonesCookbook Installing an ipkg zone Cookbook Configuring an ipkg zone113 114 References