oracle home
Creating and Using Oracle
®
Solaris Zones
Exit Print View
Search Term
Search Scope:
This Document
Entire Library
» ...
Documentation Home
»
Oracle Solaris 11.2 Information Library
»
Creating and Using Oracle
®
...
»
About Oracle Solaris Zones Administration
»
Using IP Security Architecture in Zones
»
IP Security Architecture in Exclusive-IP Zones
Updated: May 2015
Creating and Using Oracle
®
Solaris Zones
Document Information
Using This Documentation
Product Documentation Library
Access to Oracle Support
Feedback
Chapter 1 How to Plan and Configure Non-Global Zones
Evaluating the Current System Setup
Disk Space Requirements
Restricting Zone Size
Determine the Zone Host Name and the Network Requirements
Zone Host Name
Shared-IP Zone Network Address
IPv4 Zone Network Address
IPv6 Zone Network Address
Exclusive-IP Zone Network Address
File System Configuration
Creating, Revising, and Deleting Non-Global Zone Configurations
Configuring, Verifying, and Committing a Zone
How to Configure the Zone
Where to Go From Here
How to Display the Configuration of a Non-Global Zone
Using the zonecfg Command to Modify a Zone Configuration
How to Modify a Resource Type in a Zone Configuration
How to Clear a Property in a Zone Configuration
How to Rename a Zone by Using the zonecfg Command
How to Add a Dedicated Device to a Zone
How to Set zone.cpu-shares in the Global Zone
Using the zonecfg Command to Revert or Remove a Zone Configuration
How to Revert a Zone Configuration
How to Delete a Zone Configuration
Chapter 2 About Installing, Shutting Down, Halting, Uninstalling, and Cloning Non-Global Zones
Zone Installation and Administration Concepts
Zone Construction
How Zones Are Installed
The zoneadmd Daemon
The zsched Zone Scheduler
Zone Application Environment
About Shutting Down, Halting, Rebooting, and Uninstalling Zones
Shutting Down a Zone
Halting a Zone
Rebooting a Zone
Zone Boot Arguments
Zone autoboot Setting
Uninstalling a Zone
About Cloning Non-Global Zones
Chapter 3 Installing, Booting, Shutting Down, Halting, Uninstalling, and Cloning Non-Global Zones
Zone Installation Task Map
Installing and Booting Zones
(Optional) How to Verify a Configured Zone Before It Is Installed
How to Install a Configured Zone
How to Obtain the UUID of an Installed Non-Global Zone
How to Mark an Installed Non-Global Zone Incomplete
(Optional) How to Transition the Installed Zone to the Ready State
How to Boot a Zone
How to Boot a Zone in Single-User Mode
Where to Go From Here
Shutting Down, Halting, Rebooting, Uninstalling, Cloning, and Deleting Non-Global Zones Task Map
Shutting Down, Halting, Rebooting, and Uninstalling Zones
How to Shutdown a Zone
How to Halt a Zone
How to Reboot a Zone
How to Use the zoneadm Command to Rename a Zone
How to Uninstall a Zone
Cloning a Non-Global Zone on the Same System
How to Clone a Zone
Moving a Non-Global Zone
How to Move a Zone That Is Not on Shared Storage
Deleting a Non-Global Zone From the System
How to Remove a Non-Global Zone
Chapter 4 About Non-Global Zone Login
zlogin Command
Internal Zone Configuration
System Configuration Interactive Tool
Example Zone Configuration Profiles
Non-Global Zone Login Methods
Zone Console Login
User Login Methods
Failsafe Mode
Remote Login
Interactive and Non-Interactive Modes
Interactive Mode
Non-Interactive Mode
Chapter 5 Logging In to Non-Global Zones
Initial Zone Boot and Zone Login Procedures Task Map
Logging In to a Zone
How to Create a Configuration Profile
How to Log In to the Zone Console to Perform the Internal Zone Configuration
How to Log In to the Zone Console
How to Use Interactive Mode to Access a Zone
How to Use Non-Interactive Mode to Access a Zone
How to Exit a Non-Global Zone
How to Use Failsafe Mode to Enter a Zone
How to Use zlogin to Shut Down a Zone
Enabling a Service
Printing the Name of the Current Zone
Chapter 6 Live Zone Reconfiguration
About Live Zone Reconfiguration
About Making Temporary Changes
About Making Changes to the Configuration
About Applying Changes to the Configuration
Live Zone Reconfiguration Examples
How to Inspect the Live Configuration of the Running Zone
How to View a Possible Configuration by Using a Dry Run
How to Make Persistent Configuration Changes and Apply the Changes
How to Temporarily Add an anet Resource to the Running Zone
How to Make Temporary Changes to the Running Zone
How to Recover From a Failure While Committing Temporary Changes
Chapter 7 About Zone Migrations and the zonep2vchk Tool
About Zone Migration
Physical to Virtual Migration (P2V) and Virtual to Virtual Migration (V2V) Usage
Choosing a Migration Strategy
About Zone Migration Tools and Utilities
Using Zones on Shared Storage for Zone Migration
Using Oracle Solaris Unified Archives for Zone Migration
Using zfs Archives for Zone Migration
Preparing for System Migrations Using the zonep2vchk Tool
About the zonep2vchk Tool
Types of Analyses
Information Produced
Chapter 8 Migrating Oracle Solaris Systems and Migrating Non-Global Zones
Migrating a Non-Global Zone to a Different Machine
About Migrating a Zone
How to Migrate a Non-Global Zone Using Shared Storage
How to Migrate a Non-Global Zone Using Unified Archives
How to Migrate A Non-Global Zone Using ZFS Archives
Migrating a Zone From a Machine That Is Not Usable
Migrating an Oracle Solaris System Into a Non-Global Zone
About Migrating an Oracle Solaris System Into a solaris Non-Global Zone
Scanning the Source System With zonep2vchk
How to Create an Archive of the System Image on a Network Device
How to Configure the Zone on the Target System
Installing the Zone on the Target System
Chapter 9 About Automatic Installation and Packages on an Oracle Solaris 11.2 System With Zones Installed
Image Packaging System Software on Systems Running the Oracle Solaris 11.2 Release
Zones Packaging Overview
About Packages and Zones
About Adding Packages in Systems With Zones Installed
Using pkg in the Global Zone
Using the pkg install Command in a Non-Global Zone
Adding Additional Packages in a Zone by Using a Custom AI Manifest
About Removing Packages in Zones
Package Information Query
Proxy Configuration on a System That Has Installed Zones
Configuring the Proxy in the Global Zone
Overriding system-repository Proxies by Using https_proxy and http_proxy
Parallel Zone Updates
How Zone State Affects Package Operations
Chapter 10 About Oracle Solaris Zones Administration
Global Zone Visibility and Access
Process ID Visibility in Zones
System Observability in Zones
Reporting Active Zone Statistics with the zonestat Utility
Monitoring Non-Global Zones Using the fsstat Utility
Non-Global Zone Node Name
Running an NFS Server in a Zone
File Systems and Non-Global Zones
The o nosuid Option
Mounting File Systems in Zones
Unmounting File Systems in Zones
Security Restrictions and File System Behavior
Non-Global Zones as NFS Clients
Use of mknod Prohibited in a Zone
Traversing File Systems
Restriction on Accessing A Non-Global Zone From the Global Zone
Networking in Shared-IP Non-Global Zones
Shared-IP Zone Partitioning
Shared-IP Network Interfaces
IP Traffic Between Shared-IP Zones on the Same Machine
Oracle Solaris IP Filter in Shared-IP Zones
IP Network Multipathing in Shared-IP Zones
Networking in Exclusive-IP Non-Global Zones
Exclusive-IP Zone Partitioning
Exclusive-IP Data-Link Interfaces
IP Traffic Between Exclusive-IP Zones on the Same Machine
Oracle Solaris IP Filter in Exclusive-IP Zones
IP Network Multipathing in Exclusive-IP Zones
Device Use in Non-Global Zones
/dev and the /devices Namespace
Exclusive-Use Devices
Device Driver Administration
Utilities That Do Not Work or Are Modified in Non-Global Zones
Utilities That Do Not Work in Non-Global Zones
SPARC: Utility Modified for Use in a Non-Global Zone
Allowed Utilities With Security Implications
Running Applications in Non-Global Zones
Resource Controls Used in Non-Global Zones
Fair Share Scheduler on a System With Zones Installed
FSS Share Division in a Global or Non-Global Zone
Share Balance Between Zones
Extended Accounting on a System With Zones Installed
Privileges in a Non-Global Zone
Using IP Security Architecture in Zones
IP Security Architecture in Shared-IP Zones
IP Security Architecture in Exclusive-IP Zones
Using Oracle Solaris Auditing in Zones
Core Files in Zones
Running DTrace in a Non-Global Zone
About Backing Up an Oracle Solaris System With Zones Installed
Backing Up Loopback File System Directories
Backing Up Your System From the Global Zone
Backing Up Individual Non-Global Zones on Your System
Creating Oracle Solaris ZFS Backups
Determining What to Back Up in Non-Global Zones
Backing Up Application Data Only
General Database Backup Operations
Tape Backups
About Restoring Non-Global Zones
Commands Used on a System With Zones Installed
Chapter 11 Administering Oracle Solaris Zones
Using the ppriv Utility
How to List Oracle Solaris Privileges in the Global Zone
How to List the Non-Global Zone's Privilege Set
How to List a Non-Global Zone's Privilege Set With Verbose Output
Using the zonestat Utility in a Non-Global Zone
How to Use the zonestat Utility to Display a Summary of CPU and Memory Utilization
How to Use the zonestat Utility to Report on the Default pset
Using zonestat to Report Total and High Utilization
How to Obtain Network Bandwidth Utilization for Exclusive-IP Zones
Reporting Per-Zone fstype Statistics for all Zones
How to Use the z Option to Monitor Activity in Specific Zones
How to Display Per-Zone fstype Statistics for all Zones
Using DTrace in a Non-Global Zone
How to Use DTrace
Checking the Status of SMF Services in a Non-Global Zone
How to Check the Status of SMF Services From the Command Line
How to Check the Status of SMF Services From Within a Zone
Mounting File Systems in Running Non-Global Zones
How to Use LOFS to Mount a File System
How to Delegate a ZFS Dataset to a Non-Global Zone
Adding Non-Global Zone Access to Specific File Systems in the Global Zone
How to Add Access to CD or DVD Media in a Non-Global Zone
Using IP Network Multipathing on an Oracle Solaris System With Zones Installed
How to Use IP Network Multipathing in Exclusive-IP Non-Global Zones
How to Extend IP Network Multipathing Functionality to Shared-IP Non-Global Zones
Administering Data-Links in Exclusive-IP Non-Global Zones
How to Use dladm show-linkprop
How to Use dladm to Assign Temporary Data-Links
How to Use dladm reset-linkprop
Using the Fair Share Scheduler on an Oracle Solaris System With Zones Installed
How to Set FSS Shares in the Global Zone Using the prctl Command
How to Change the zone.cpu-shares Value in a Zone Dynamically
Using Rights Profiles in Zone Administration
How to Assign the Zone Management Profile
Backing Up an Oracle Solaris System With Installed Zones
How to Use ZFSsend to Perform Backups
x64: How to Print a Copy of a Zone Configuration
Recreating a Non-Global Zone
How to Recreate an Individual Non-Global Zone
Chapter 12 Configuring and Administering Immutable Zones
Read-Only Zone Overview
Configuring Read-Only Zones
zonecfg file-mac-profile Property
zonecfg add dataset Resource Policy
zonecfg add fs Resource Policy
Administering Read-Only Zones
zoneadm list p Display
Options for Booting a Read-Only Zone With a Writable Root File System
Using the zlogin Command for File Editing or Adding Packages
Immutable Global Zones
Configuring an Global Immutable Zone
Maintaining an Immutable Global Zone
Chapter 13 Troubleshooting Miscellaneous Oracle Solaris Zones Problems
Exclusive-IP Zone Is Using Device, so dladm reset-linkprop Fails
Incorrect Privilege Set Specified in Zone Configuration
Zone Does Not Halt
Chapter 14 Getting Started With Oracle Solaris Zones on Shared Storage
About Shared Storage Resources Using Storage URIs
Local Device URI
Logical Unit URI
iSCSI URI
Managing Storage URIs and Shared Storage Resources
Assigning Shared Storage Resources to Oracle Solaris Zones
storage Property for Zones
rootzpool Resource
zpool Resource
Renaming Zones
Restrictions on Zone Configuration
Automated ZFS Storage Pool Management for Oracle Solaris Zones on Shared Storage Resources
About the unavailable State
Additional zoneadm Subcommand Options
Options for Installing, Cloning, and Attaching Zones
The x force-zpool-import Option
The x force-zpool-create= Option
x force-zpool-create-all Option
Options for Uninstalling Zones
x force-zpool-destroy=zpoolname Option
The x force-zpool-destroy-all Option
Restrictions in the Use of the zoneadm Command
Implementing Oracle Solaris Zones Hosted on Shared Storage Resources
zpool Configuration Considerations for Zones on Shared Storage
Sample Scenarios
Migrating Oracle Solaris Zones Hosted on Shared Storage Resources
Moving Existing Zones in and out of Shared Storage Zone Configurations
How To Move an Existing Zone Into a Shared Storage Configuration
How To Move an Existing Zone out of a Shared Storage Configuration
How To Add Additional ZFS Storage Pools to an Installed Zone
References
Man Pages
Oracle Solaris Administration Guides
Glossary
Index
Index A
Index B
Index C
Index D
Index F
Index H
Index I
Index L
Index M
Index N
Index O
Index P
Index R
Index S
Index T
Index U
Index V
Index Z
Language:
English
IP Security Architecture in Exclusive-IP Zones
IPsec can be used in exclusive-IP zones.
Previous
Next