Logical Domains (LDoms) 1.0.1 Administration Guide

Logical Domains (LDoms) 1.0.1 Administration Guide

820-3268-10

Contents

Figures

Tables

Examples

Preface

Overview of the Logical Domains Software

Hypervisor and Logical Domains

Logical Domains Manager

Roles for Logical Domains

Command-Line Interface

Virtual Input/Output

Virtual Network

Virtual Storage

Virtual Consoles

Dynamic Reconfiguration

Delayed Reconfiguration

Persistent Configurations

Security

Security Considerations

Solaris Security Toolkit and the Logical Domains Manager

Hardening

Minimizing Logical Domains

Authorization

Auditing

Compliance

Installing and Enabling Software

Upgrading to LDoms 1.0.1 Software

To Upgrade to LDoms 1.0.1 Software

Freshly Installing Software on the Control Domain

To Install the Solaris 10 OS

To Upgrade System Firmware

To Upgrade System Firmware Without an FTP Server

To Downgrade System Firmware

Downloading Logical Domains Manager and Solaris Security Toolkit

To Download the Logical Domains Manager, Solaris Security Toolkit, and Logical Domains MIB

Installing Logical Domains Manager and Solaris Security Toolkit

Using the Installation Script to Install the Logical Domains Manager 1.0.1 and Solaris Security Toolkit 4.2 Software

Using JumpStart to Install the Logical Domains Manager 1.0.1 and Solaris Security Toolkit 4.2 Software

Installing Logical Domains Manager and Solaris Security Toolkit Software Manually

To Install Using the install-ldm Script With No Options

To Install Using the install-ldm Script With the -d Option

To Install Using the install-ldm Script With the -d none Option

To Install Using the install-ldm Script With the -p Option

To Set Up a JumpStart Server

To Install Using JumpStart Software

To Install the Logical Domains Manager (LDoms) 1.0.1 Software Manually

(Optional) To Install the Solaris Security Toolkit 4.2 Software Manually

(Optional) To Harden the Control Domain Manually

To Validate Hardening

To Undo Hardening

Enabling the Logical Domains Manager Daemon

To Enable the Logical Domains Manager Daemon

Creating Authorization and Profiles and Assigning Roles for User Accounts

Managing User Authorizations

Managing User Profiles

Assigning Roles to Users

To Add an Authorization for a User

To Delete All Authorizations for a User

To Add a Profile for a User

To Delete All Profiles for a User

To Create a Role and Assign the Role to a User

Setting Up Services and Logical Domains

Output Messages

Sun UltraSPARC T1 Processors

Sun UltraSPARC T2 Processors

Creating Default Services

To Create Default Services

Initial Configuration of the Control Domain

To Set Up the Control Domain

Rebooting to Use Logical Domains

To Reboot to Use Logical Domains

Enabling Networking Between the Control/Service Domain and Other Domains

To Configure the Virtual Switch as the Primary Interface

Enabling the Virtual Network Terminal Server Daemon

To Enable the Virtual Network Terminal Server Daemon

Creating and Starting a Guest Domain

To Create and Start a Guest Domain

Jump-Starting a Guest Domain

Other Information and Tasks

Accessing the ldm(1M) Man Page

To Access the ldm(1M) Man Page

Restrictions on Entering Names in the CLI

File Names (file) and Variable Names (var_name)

Virtual Disk Server file|device and Virtual Switch device Names

Configuration Name (config_name)

All Other Names

Using ldm list Subcommands

Machine-Readable Output

Flag Definitions

Utilization Statistic Definition

Examples of Various Lists

Listing Constraints

To Show Syntax Usage for ldm Subcommands

To Show Software Versions (-V)

To Generate a Short List

To Generate a Long List (-l)

To Generate an Extended List (-e)

To Generate a Parseable, Machine-Readable List (-p)

To Show the Status of a Domain

To List a Variable

To List Bindings

To List Configurations

To List Devices

To List Services

To List Constraints for One Domains

To List Constraints in XML Format

To List Constraints in a Machine-Readable Format

The ldm stop-domain Command Can Time Out If the Domain Is Heavily Loaded

Determining the Solaris Network Interface Name Corresponding to a Virtual Network Device

To Find Solaris OS Network Interface Name

Assigning MAC Addresses Automatically or Manually

Range of MAC Addresses Assigned to Logical Domains Software

Automatic Assignment Algorithm

Duplicate MAC Address Detection

Freed MAC Addresses

Manual Allocation of MAC Addresses

To Allocate a MAC Address Manually

CPU and Memory Address Mapping

CPU Mapping

Memory Mapping

Examples of CPU and Memory Mapping

To Determine the CPU Number

To Determine the Real Memory Address

Configuring Split PCI Express Bus to Use Multiple Logical Domains

To Create a Split PCI Configuration

Enabling the I/O MMU Bypass Mode on a PCI Bus

Using Console Groups

To Combine Multiple Consoles Into One Group

Moving a Logical Domain From One Server to Another

To Set Up Domains to Move

To Move the Domain

Removing Logical Domains

To Remove All Guest Logical Domains

Operating the Solaris OS With Logical Domains

Power-Cycling a Server

Result of an OpenBoot power-off Command

Result of a Solaris OS shutdown Command

Result of a Solaris OS Break Key Sequence (L1-A)

Results from Halting or Rebooting the Control Domain

Some format(1M) Command Options Do Not Work With Virtual Disks

To Save Your Current Logical Domain Configurations to the SC First

Using LDoms With ALOM CMT

To Reset the Logical Domain Configuration to the Default or Another Configuration

Enabling and Using BSM Auditing

To Use the enable-bsm.fin Finish Script

To Use the Solaris OS bsmconv(1M) Command

To Verify that BSM Auditing is Enabled

To Disable Auditing

To Print Audit Output

To Rotate Audit Logs

Configuring Virtual Switch and Service Domain for NAT and Routing

To Set Up the Virtual Switch to Provide External Connectivity to Domains

Using ZFS With Virtual Disks

Creating a Virtual Disk on Top of a ZFS Volume

Using ZFS Over a Virtual Disk

Using ZFS for Boot Disks

To Create a Virtual Disk on Top of a ZFS Volume

To Use ZFS Over a Virtual Disk

To Use ZFS for Boot Disks

Using Volume Managers in a Logical Domains Environment

Using Virtual Disks on Top of Volume Managers

Note on Using Virtual Disks on Top of SVM

Note on Using Virtual Disks When VxVM Is Installed

Using Volume Managers on Top of Virtual Disks

Using ZFS on Top of Virtual Disks

Using SVM on Top of Virtual Disks

Using VxVM on Top of Virtual Disks

Configuring IPMP in a Logical Domains Environment

Configuring Virtual Network Devices into an IPMP Group in a Logical Domain

Configuring and Using IPMP in the Service Domain

Glossary

Logical Domains (LDoms) 1.0.1 Administration Guide

820-3268-10

Copyright © 2007, Sun Microsystems, Inc. All rights reserved.