JavaScript is required to for searching.
Skip Navigation Links
Exit Print View
System Administration Guide: Oracle Solaris Containers-Resource Management and Oracle Solaris Zones
search filter icon
search icon

Document Information

Preface

Part I Resource Management

1.  Introduction to Solaris 10 Resource Management

2.  Projects and Tasks (Overview)

3.  Administering Projects and Tasks

4.  Extended Accounting (Overview)

5.  Administering Extended Accounting (Tasks)

6.  Resource Controls (Overview)

7.  Administering Resource Controls (Tasks)

8.  Fair Share Scheduler (Overview)

9.  Administering the Fair Share Scheduler (Tasks)

10.  Physical Memory Control Using the Resource Capping Daemon (Overview)

11.  Administering the Resource Capping Daemon (Tasks)

12.  Resource Pools (Overview)

13.  Creating and Administering Resource Pools (Tasks)

14.  Resource Management Configuration Example

15.  Resource Control Functionality in the Solaris Management Console

Part II Zones

16.  Introduction to Solaris Zones

17.  Non-Global Zone Configuration (Overview)

18.  Planning and Configuring Non-Global Zones (Tasks)

19.  About Installing, Halting, Cloning, and Uninstalling Non-Global Zones (Overview)

20.  Installing, Booting, Halting, Uninstalling, and Cloning Non-Global Zones (Tasks)

21.  Non-Global Zone Login (Overview)

22.  Logging In to Non-Global Zones (Tasks)

23.  Moving and Migrating Non-Global Zones (Tasks)

24.  Solaris 10 9/10: Migrating a Physical Solaris System Into a Zone (Tasks)

25.  About Packages and Patches on a Solaris System With Zones Installed (Overview)

26.  Adding and Removing Packages and Patches on a Solaris System With Zones Installed (Tasks)

27.  Solaris Zones Administration (Overview)

28.  Solaris Zones Administration (Tasks)

What's New in This Chapter?

What's New in This Chapter for Solaris 10 1/06?

What's New in This Chapter for Solaris 10 6/06?

What's New in This Chapter for Solaris 10 8/07?

Using the ppriv Utility

How to List Solaris Privileges in the Global Zone

How to List the Non-Global Zone's Privilege Set

How to List a Non-Global Zone's Privilege Set With Verbose Output

Using DTrace in a Non-Global Zone

How to Use DTrace

Checking the Status of SMF Services in a Non-Global Zone

How to Check the Status of SMF Services From the Command Line

How to Check the Status of SMF Services From Within a Zone

Mounting File Systems in Running Non-Global Zones

How to Import Raw and Block Devices by Using zonecfg

How to Mount the File System Manually

How to Place a File System in /etc/vfstab to Be Mounted When the Zone Boots

How to Mount a File System From the Global Zone Into a Non-Global Zone

Adding Non-Global Zone Access to Specific File Systems in the Global Zone

How to Add Access to CD or DVD Media in a Non-Global Zone

How to Add a Writable Directory under /usr in a Non-Global Zone

How to Export Home Directories in the Global Zone Into a Non-Global Zone

Using IP Network Multipathing on a Solaris System With Zones Installed

Solaris 10 8/07: How to Use IP Network Multipathing in Exclusive-IP Non-Global Zones

How to Extend IP Network Multipathing Functionality to Shared-IP Non-Global Zones

Solaris 10 8/07: Administering Data-Links in Exclusive-IP Non-Global Zones

How to Use dladm show-linkprop

How to Use dladm set-linkprop

How to Use dladm reset-linkprop

Using the Fair Share Scheduler on a Solaris System With Zones Installed

How to Set FSS Shares in the Global Zone Using the prctl Command

How to Change the zone.cpu-shares Value in a Zone Dynamically

Using Rights Profiles in Zone Administration

How to Assign the Zone Management Profile

Example--Using Profile Shells With Zone Commands

Backing Up a Solaris System With Installed Zones

How to Use ufsdump to Perform Backups

How to Create a UFS Snapshot Using fssnap

How to Use find and cpio to Perform Backups

How to Print a Copy of a Zone Configuration

Restoring a Non-Global Zone

How to Restore an Individual Non-Global Zone

29.  Upgrading a Solaris 10 System That Has Installed Non-Global Zones

30.  Troubleshooting Miscellaneous Solaris Zones Problems

Part III lx Branded Zones

31.  About Branded Zones and the Linux Branded Zone

32.  Planning the lx Branded Zone Configuration (Overview)

33.  Configuring the lx Branded Zone (Tasks)

34.  About Installing, Booting, Halting, Cloning, and Uninstalling lx Branded Zones (Overview)

35.  Installing, Booting, Halting, Uninstalling and Cloning lx Branded Zones (Tasks)

36.  Logging In to lx Branded Zones (Tasks)

37.  Moving and Migrating lx Branded Zones (Tasks)

38.  Administering and Running Applications in lx Branded Zones (Tasks)

Glossary

Index

Using Rights Profiles in Zone Administration

This section covers tasks associated with using rights profiles in non-global zones.

How to Assign the Zone Management Profile

The Zone Management profile grants the power to manage all of the non-global zones on the system to a user.

You must be the global administrator in the global zone to perform this procedure.

  1. Become superuser, or assume the Primary Administrator role.

    To create the role and assign the role to a user, see Using the Solaris Management Tools With RBAC (Task Map) in System Administration Guide: Basic Administration.

  2. Create a role that includes the Zone Management rights profile, and assign the role to a user.

Example—Using Profile Shells With Zone Commands

You can execute zone commands in a profile using the pfexec program. The program executes commands with the attributes specified by the user's profiles in the exec_attr database. The program is invoked by the profile shells pfksh, pfcsh, and pfsh.

Use the pfexec program to log in to a zone, for example, my-zone.

machine$ pfexec zlogin my-zone