Logical Domains (LDoms) 1.1 Administration Guide

Logical Domains (LDoms) 1.1 Administration Guide

820-4913-10

Contents

Preface

Overview of the Logical Domains Software

Hypervisor and Logical Domains

Logical Domains Manager

Roles for Logical Domains

Command-Line Interface

Virtual Input/Output

Virtual Network

Virtual Storage

Virtual Console

Dynamic Reconfiguration

Delayed Reconfiguration

Persistent Configurations

Security

Security Considerations

Solaris Security Toolkit and the Logical Domains Manager

Hardening

Minimizing Logical Domains

Authorization

Auditing

Compliance

Installing and Enabling Software

Upgrading a System Already Using Logical Domains

Upgrading the Solaris OS

Saving and Restoring the Logical Domains Constraints Database File

Preserving the Logical Domains Constraints Database File When Using Live Upgrade

Upgrading From Solaris 10 OS Older Than Solaris 10 5/08 OS

Upgrading the Logical Domains Manager and the System Firmware

Stop All Domains Running on the Platform, Except the Control Domain

Upgrading to LDoms 1.1 Software

Upgrade From LDoms 1.0 Software

Upgrade From LDoms 1.0.1, 1.0.2, or 1.0.3

Installing Logical Domains Software on a New System

Updating the Solaris OS

Upgrading the System Firmware

Upgrade System Firmware

Upgrade System Firmware Without an FTP Server

Downloading Logical Domains Manager and Solaris Security Toolkit

Download the Software

Installing the Logical Domains Manager and Solaris Security Toolkit

Installing the Logical Domains Manager and Solaris Security Toolkit Software Automatically

Using JumpStart to Install the Logical Domains Manager 1.1 and Solaris Security Toolkit 4.2 Software

Installing Logical Domains Manager and Solaris Security Toolkit Software Manually

Enabling the Logical Domains Manager Daemon

Enable the Logical Domains Manager Daemon

Creating Authorization and Profiles and Assigning Roles for User Accounts

Managing User Authorizations

Managing User Profiles

Assigning Roles to Users

Factory Default Configuration and Disabling Logical Domains

Remove All Guest Logical Domains

Restore the Factory Default Configuration

Disable the Logical Domains Manager

Removing the Logical Domains Manager

Restore the Factory Default Configuration From the System Controller

Setting Up Services and Logical Domains

Output Messages

Sun UltraSPARC T1 Processors

Sun UltraSPARC T2 and T2 Plus Processors

Creating Default Services

Create Default Services

Initial Configuration of the Control Domain

Set Up the Control Domain

Rebooting to Use Logical Domains

Reboot

Enabling Networking Between the Control/Service Domain and Other Domains

Configure the Virtual Switch as the Primary Interface

Enabling the Virtual Network Terminal Server Daemon

Enable the Virtual Network Terminal Server Daemon

Creating and Starting a Guest Domain

Create and Start a Guest Domain

Installing Solaris OS on a Guest Domain

Install Solaris OS on a Guest Domain From a DVD

Install Solaris OS on a Guest Domain From a Solaris ISO File

Jump-Start a Guest Domain

Saving Logical Domain Configurations for Future Rebuilding

Save All Logical Domain Configurations

Rebuild Guest Domain Configurations

Rebuilding the Control Domain

Logical Domain Information (ldom_info) Section

Cryptographic (mau) Section

CPU (cpu) Section

Memory (memory) Section

Physical Input/Output (physio_device) Section

Virtual Switch (vsw) Section

Virtual Console Concentrator (vcc) Section

Virtual Disk Server (vds) Section

Virtual Disk Server Device (vdsdev) Section

Using PCI Busses With Logical Domains Software

Configuring PCI Express Busses Across Multiple Logical Domains

Create a Split PCI Configuration

Enabling the I/O MMU Bypass Mode on a PCI Bus

Using Virtual Disks With Logical Domains

Introduction to Virtual Disks

Managing Virtual Disks

Add a Virtual Disk

Export a Virtual Disk Backend Multiple Times

Change Virtual Disk Options

Change the Timeout Option

Remove a Virtual Disk

Virtual Disk Appearance

Full Disk

Single Slice Disk

Virtual Disk Backend Options

Read-only (ro) Option

Exclusive (excl) Option

Slice (slice) Option

Virtual Disk Backend

Physical Disk or Disk LUN

Export a Physical Disk as a Virtual Disk

Physical Disk Slice

Export a Physical Disk Slice as a Virtual Disk

Export Slice 2

File and Volume

File or Volume Exported as a Full Disk

Export a File as a Full Disk

File or Volume Exported as a Single Slice Disk

Export a ZFS Volume as a Single Slice Disk

Exporting Volumes and Backward Compatibility

Summary of How Different Types of Backends Are Exported

Guidelines

Configuring Virtual Disk Multipathing

Configure Virtual Disk Multipathing

CD, DVD and ISO Images

Export a CD or DVD From the Service Domain to the Guest Domain

Virtual Disk Timeout

Virtual Disk and SCSI

Virtual Disk and the format(1M) Command

Using ZFS With Virtual Disks

Configuring a ZFS Pool in a Service Domain

Storing Disk Images With ZFS

Examples of Storing Disk Images With ZFS

Create a Disk Image Using a ZFS Volume

Create a Disk Image Using a ZFS File

Export the ZFS Volume

Export the ZFS File

Assign the ZFS Volume or File to a Guest Domain

Creating a Snapshot of a Disk Image

Create a Snapshot of a Disk Image

Using Clone to Provision a New Domain

Cloning a Boot Disk Image

Using Volume Managers in a Logical Domains Environment

Using Virtual Disks on Top of Volume Managers

Using Virtual Disks on Top of SVM

Using Virtual Disks When VxVM Is Installed

Using Volume Managers on Top of Virtual Disks

Using ZFS on Top of Virtual Disks

Using SVM on Top of Virtual Disks

Using VxVM on Top of Virtual Disks

Using a Virtual Network With Logical Domains

Introduction to a Virtual Network

Virtual Switch

Virtual Network Device

Managing a Virtual Switch

Add a Virtual Switch

Set Options for an Existing Virtual Switch

Remove a Virtual Switch

Managing a Virtual Network Device

Add a Virtual Network Device

Set Options for an Existing Virtual Network Device

Remove a Virtual Network Device

Determining the Solaris Network Interface Name Corresponding to a Virtual Network Device

Find Solaris OS Network Interface Name

Assigning MAC Addresses Automatically or Manually

Range of MAC Addresses Assigned to Logical Domains Software

Automatic Assignment Algorithm

Duplicate MAC Address Detection

Freed MAC Addresses

Using Network Adapters With LDoms

Determine If a Network Adapter Is GLDv3-Compliant

Configuring Virtual Switch and Service Domain for NAT and Routing

Set Up the Virtual Switch to Provide External Connectivity to Domains

Configuring IPMP in a Logical Domains Environment

Configuring Virtual Network Devices into an IPMP Group in a Logical Domain

Configure a Host Route

Configuring and Using IPMP in the Service Domain

Using VLAN Tagging With Logical Domains Software

Port VLAN ID (PVID)

VLAN ID (VID)

Assign VLANs to a Virtual Switch and Virtual Network Device

Using NIU Hybrid I/O

Configure a Virtual Switch With an NIU Network Device

Enable Hybrid Mode

Disable Hybrid Mode

Migrating Logical Domains

Introduction to Logical Domain Migration

Overview of a Migration Operation

Software Compatibility

Authentication

Migrating an Active Domain

CPUs

Memory

Physical Input/Output

Virtual Input/Output

NIU Hybrid Input/Output

Cryptographic Units

Delayed Reconfiguration

Operations on Other Domains

Migrating Bound or Inactive Domains

CPUs

Virtual Input/Output

Performing a Dry Run

Monitoring a Migration in Progress

Canceling a Migration in Progress

Recovering From a Failed Migration

Examples

Other Information and Tasks

Using CPU Power Management With LDoms 1.1 Software

Showing CPU Power-Managed Strands in LDoms 1.1 Software

List CPU Power-Managed Strands

List Power-Managed CPUs

Entering Names in the CLI

File Names (file) and Variable Names (var_name)

Virtual Disk Server backend and Virtual Switch Device Names

Configuration Name (config_name)

All Other Names

Listing Logical Domains Resources

Machine-Readable Output

Show Syntax Usage for ldm Subcommands

Flag Definitions

Utilization Statistic Definition

Examples of Various Lists

Show Software Versions (-V)

Generate a Short List

Generate a Long List (-l)

Generate an Extended List (-e)

Generate a Parseable, Machine-Readable List (-p)

Generate a Subset of a Long List (-o format)

List a Variable

List Bindings

List Configurations

List Devices

List Available Memory

List Services

Listing Constraints

List Constraints for One Domain

List Constraints in XML Format

List Constraints in a Machine-Readable Format

Connecting to a Guest Console Over a Network

Stopping a Heavily-Loaded Domain Can Time Out

Determining Where Errors Occur by Mapping CPU and Memory Addresses

CPU Mapping

Determine the CPU Number

Memory Mapping

Determine the Real Memory Address

Examples of CPU and Memory Mapping

Using Console Groups

Combine Multiple Consoles Into One Group

Operating the Solaris OS With Logical Domains

OpenBoot Firmware Not Available After Solaris OS Has Started If Domaining Is Enabled

Power-Cycling a Server

Save Your Current Logical Domain Configurations to the SC

Do Not Use the psradm(1M) Command on Active CPUs in a Power-Managed Domain

Result of Solaris OS Breaks

Results From Halting or Rebooting the Control Domain

Using LDoms With ALOM CMT

Reset the Logical Domain Configuration to the Default or Another Configuration

Enabling and Using BSM Auditing

Use the enable-bsm.fin Finish Script

Use the Solaris OS bsmconv(1M) Command

Verify that BSM Auditing is Enabled

Disable Auditing

Print Audit Output

Rotate Audit Logs

Using the XML Interface With the Logical Domains Manager

XML Transport

XMPP

Local Connections

XML Protocol

Request and Response Messages

Requests

Responses

Events

Registration and Unregistration

The <LDM_event> Messages

Event Types

Domain Events

Resource Events

Hardware Events

All Events

Logical Domains Manager Actions

Logical Domains Manager Resources and Properties

Logical Domain Information (ldom_info) Resource

CPU (cpu) Resource

MAU (mau) Resource

Memory (memory) Resource

Virtual Disk Server (vds) Resource

Virtual Disk Server Volume (vds_volume) Resource

Disk (disk) Resource

Virtual Switch (vsw) Resource

Network (network) Resource

Virtual Console Concentrator (vcc) Resource

Variable (var) Resource

Physical I/O Device (physio_device) Resource

SP Configuration (spconfig) Resource

Virtual Data Plane Channel Service (vdpcs) Resource

Virtual Data Plane Channel Client (vdpcc) Resource

Console (console) Resource

Domain Migration

XML Schemas

LDM_interface XML Schema

LDM_Event XML Schema

The ovf-envelope.xsd Schema

The ovf-section.xsd Schema

The ovf-core.xsd Schema

The ovf-virtualhardware.xsc Schema

The cim-rasd.xsd Schema

The cim-vssd.xsd Schema

The cim-common.xsd Schema

The GenericProperty XML Schema

Binding_Type XML Schema

Glossary

Logical Domains (LDoms) 1.1 Administration Guide

820-4913-10

Copyright © 2008, Sun Microsystems, Inc. All rights reserved.