Go to main content
oracle home
Creating and Using Oracle
®
Solaris Zones
Exit Print View
Search Term
» ...
Documentation Home
»
Oracle Solaris 11.4 Information Library
»
Creating and Using Oracle
®
...
Updated: November 2021
Creating and Using Oracle
®
Solaris Zones
Document Information
Using This Documentation
Product Documentation Library
Feedback
Chapter 1 Before You Begin Working With Oracle Solaris Zones
Planning a Non-Global Zone Configuration
Hardware Requirements
Zone Size
Name Service and Network Considerations
About Zone Brands
Zone Installation and Configuration Concepts
About Zone Properties
About Zone Commands for Configuration and Installation
Using Manifests and Configuration Profiles
Creating a Manifest for Zone Installation
Creating a System Configuration Profile for Zone Installation
Using Rights Profiles to Install and Manage Zones
Chapter 2 Setting Up a Non-Global Zone
Installing a Non-Global Zone
How to Create and Deploy a Non-Global Zone
Displaying Zone-Related Information
Using the zoneadm Command
Using the zonecfg Command
Using the zlogin Command
Installing Non-Global Zones Based on Existing Zones
Using Clones
Using Unified Archives
How to Install and Deploy Zones by Cloning
Uninstalling and Deleting a Non-Global Zone
How to Uninstall and Remove a Zone
Chapter 3 Managing Zone Resources and Properties
About Configuring Zone Properties
How to Configure Zone Properties and Resources
Setting Values of Zone Properties and Resources
Limiting the Zone's Resources
Assigning CPUs to the Zone
Setting Cap Limits for Memory
Adding File Systems for Zone Use
Setting the hwprovider Property to Override the Global Zone Value (solaris10 Only)
Setting Time Values in Non-Global Zones
Modifying Zone Property and Resource Settings
Canceling a Configuration Session
How to Modify Zone Resources and Properties
Configuring the dataset Property on solaris Zones
Performing Zone Configuration From the Global Zone
Chapter 4 Administering Networking in Oracle Solaris Non-Global Zones
About Networking In Zones
How to Create a Private Network of Multiple Zones
Using IP Network Multipathing With Non-Global Zones
How to Extend IP Network Multipathing Functionality to Shared-IP Non-Global Zones
Managing Datalinks Related to Zones
Changing Existing Shared-IP Zones to Exclusive-IP Zones
Chapter 5 Administering SMF and Reporting in Oracle Solaris Non-Global Zones
Zones and the Service Management Facility
Zone SMF Dependencies
About the Zone SMF Instance Service State
Zone SMF Instance Service States
SMF Goal Services and Zones
Zones Boot Ordering
Administering the Zones Delegated Restarter
Zones Delegated Restarter
How the Zones Delegated Restarter Works
Zones Delegated Restarter Properties
Reporting the Status of SMF Services in a Non-Global Zone
Reporting Resource Usage in a Non-Global Zone
Reporting Per-Zone File System Statistics
Using the Fair Share Scheduler on a System With Zones Installed
How to Temporarily Set FSS Shares in the Global Zone
Chapter 6 About Non-Global Zone Installation and Packages
Packages and Zones on an Oracle Solaris 11.4 System
Configuring Proxies to the Package Repository for Non-Global Zones
Overriding system-repository Proxies by Using https_proxy and http_proxy
How to Set https_proxy and http_proxy To Override Global Zone Proxies
Zone Contents After Creation
Zone Information After Installation
zoneadmd Zones Administration Daemon
zsched Zone Scheduler Process
Boot Environments and Zones
beadm Command in Non-Global Zones
Boot Environments in Global and Non-Global Zones
–x deny-zbe-clone Option
–x destroy-orphan-zbes Option
–x force-zbe-clone Option
Shared Zone State
Specifying an Alternate Root
About Orphaned Zone Boot Environments and Clones
Identifying Orphaned Boot Environments With the beadm Command
zoneadm Options for Orphaned Zone Boot Environments and Clones
Chapter 7 About Non-Global Zone Administration
Security Measures for a System With Non-Global Zones
Privileges in a Non-Global Zone
Device Use in Non-Global Zones
/dev and the /devices Namespace
Exclusive-Use Devices and Zones
Device Driver Administration in Zones
Device Utilities and Non-Global Zones
Device Utilities That Do Not Work in Non-Global Zones
SPARC: eeprom in Non-Global Zones
Device Utilities With Security Implications
Resource Management With Non-Global Zones
Resource Controls Used in Non-Global Zones
Fair Share Scheduler on a System With Zones Installed
Share Balance Between Zones
Extended Accounting on a System With Zones Installed
Monitoring a System With Non-Global Zones
Global Zone Visibility and Access
Process ID Visibility in Zones
System Observability in Zones
Reporting Active Zone Statistics With the zonestat Utility
Monitoring Non-Global Zones With the fsstat Utility
Running DTrace in a Non-Global Zone
Core Files in Zones
Non-Global Zone Node Name
File Systems and Non-Global Zones
Running an NFS Server in a Zone
Mounting File Systems in Zones
Unmounting File Systems in Zones
Non-Global Zones as NFS Clients
Traversing File Systems
Security Restrictions and File System Behavior
Restriction on Using mknod in a Zone
Restriction on Accessing a Non-Global Zone From the Global Zone
Networking in Exclusive-IP Non-Global Zones
Overview of Networking in Exclusive-IP Zones
Exclusive-IP Zone Partitioning
Exclusive-IP Datalink Interfaces
Exclusive-IP Zones Traffic, Traffic Security, and IPMP Configuration
Networking in Shared-IP Non-Global Zones
Shared-IP Zone Partitioning
Shared-IP Network Interfaces
Shared-IP Zones Traffic, Traffic Security, and IPMP Configuration
Migration and Transformation of Non-Global Zones
About Cold Migration of solaris Zones
Zone Migration Configuration Requirements
zoneadm migrate Command
Zone Migration and Various Host Configurations
Zone Migration and Package Updates
About Zone Transformations
Zone Transformations Using Oracle Solaris Unified Archives
Zone Transformation Requirements for Source and Target Hosts
Zone Transformations From Systems That Contain Non-Global Zones
Using the zonep2vchk Tool to Prepare for Global to Non-Global Transformations
About the zonep2vchk Tool
Checks Performed by the zonep2vchk Tool
Issues Highlighted by the zonep2vchkTool
Zone Configuration Template for a Transformed Zone
Backup Strategies for a System With Non-Global Zones
Backup Methods for a System With Non-Global Zones
Backing Up Loopback File System Directories
Backing Up Your System From the Global Zone
Backing Up Individual Non-Global Zones on Your System
Creating Oracle Solaris Unified Archive Backups
Determining What to Back Up in Non-Global Zones
Backing Up Application Data Only
General Database Backup Operations
Tape Backups
About Restoring Non-Global Zones
Backing Up and Recreating Zones
Commands Used on a System With Non-Global Zones
Commands for Zone Administration and Monitoring
Commands for Resource Capping
Commands With Modifications for Zones
Chapter 8 Migrating an Oracle Solaris Zone
Authorizing Non-Root Users to Perform Non-Global Zone Migrations
How to Authorize a User to Perform Cold Migration of an Individual Zone
Using Cold Migration to Migrate a solaris Zone
How to Cold Migrate a solaris Zone
Migrating a Zone From a System That Is Not Usable
Archiving and Moving Non-Global Zones That Are Not Using Shared Storage
How to Use Unified Archive to Move a Non-Global Zone to a New System
How to Move a Zone That Is Not on Shared Storage
Chapter 9 Live Zone Reconfiguration of Oracle Solaris Zones
Live Zone Reconfiguration of Oracle Solaris Zones
zonecfg Utility Edit Modes
Temporary Changes to the Live Zone Configuration
Persistent Changes to the Live Zone Configuration
Live Zone Reconfiguration Dry Run
Reloading a Live Zone Configuration
Performing a Live Zone Reconfiguration
How to Inspect the Live Configuration of a Running Zone
How to Preview the Effect of a Live Zone Configuration
How to Make Persistent Configuration Changes to a Live Zone
How to Make Temporary Changes to the Running Zone
How to Recover From a Failure While Committing Live Zone Configuration Changes
Chapter 10 Transforming Systems to Oracle Solaris Zones
Transforming a Global Zone Into a solaris Non-Global Zone
How to Check the Source System With zonep2vchk
How to Create an Archive of the System Image
How to Configure the Transformed Zone on the Target System
How to Install the Transformed Zone From the Archive on the Target System
Chapter 11 Configuring and Administering Immutable Zones
About Immutable Zones
Configuring Immutable Zones
Setting the MWAC Security Policy
Zone Resource Exceptions to MWAC Security Policy
SMF Services in Immutable Zones
Administering Immutable Non-Global Zones
Determining Whether a Non-Global Zone Is Immutable
Methods for Administering Non-Global Immutable Zones
Administering an Immutable Zone by Using the Trusted Path Domain
How to Enable Administrative Access to an Immutable Zone From the Console
How to Enable Remote Administrative Access to an Immutable Zone by Using RAD
Administering an Immutable Zone by Making It Writable
Immutable Global Zones
Configuring an Immutable Global Zone
Maintaining an Immutable Global Zone
Chapter 12 Troubleshooting Miscellaneous Oracle Solaris Zones Problems
Installation Fails Due to Unmatched Allowable Packages
Troubleshooting Installation
Exclusive-IP Zone Is Using Device, so dladm reset-linkprop Fails
zonecfg -r Fails
Troubleshooting a Zone That Has Failed
About Zone UUIDs
How to Manage a Zone That Has Become Unavailable
Insufficient Privileges Specified for the Zone
Zone Does Not Halt
Zone Access Denied
Chapter 13 Oracle Solaris Zones on Shared Storage
About Shared Storage Resources Using Storage URIs
Local Device URI
Logical Unit URI
iSCSI URI
Managing Storage URIs and Shared Storage Resources
Assigning Shared Storage Resources to Oracle Solaris Zones
storage Property for Zones
rootzpool Resource
zpool Resource
Renaming Zones
Relocating Shared Storage Resource
Automated ZFS Storage Pool Management for Oracle Solaris Zones on Shared Storage Resources
About the unavailable Zone State on Shared Storage
zoneadm Options for Shared Storage
Options for Installing, Cloning, and Attaching Zones
–x force-zpool-import Option
–x force-zpool-create= Option
–x force-zpool-create-all Option
Options for Uninstalling Zones
–x force-zpool-destroy=zpoolname Option
–x force-zpool-destroy-all Option
–x force-storage-destroy-all Option
Restrictions on Moving a Zone With the rootzpool Resource
Implementing Oracle Solaris Zones Hosted on Shared Storage Resources
zpool Configuration Considerations for Zones on Shared Storage
Sample Scenarios for Zones on Shared Storage
Migrating Oracle Solaris Zones Hosted on Shared Storage Resources
Moving Existing Zones To or From Shared Storage Zone Configurations
How to Move a Zone to a Shared Storage Configuration
How to Move a Zone From a Shared Storage Configuration
How to Move a Zone to Different Shared Storage
How to Add or Move a ZFS Storage Pool to an Installed Zone
Zones Documentation References for Shared Storage Resources
Zones Glossary
Index
Index A
Index B
Index C
Index D
Index E
Index F
Index G
Index H
Index I
Index K
Index L
Index M
Index N
Index O
Index P
Index R
Index S
Index T
Index U
Index V
Index X
Index Z
Language:
English
Creating and Using Oracle
®
Solaris Zones
November 2021
Describes how to create and administer Oracle Solaris Zones.
Document Information
Using This Documentation
Product Documentation Library
Feedback
1 Before You Begin Working With Oracle Solaris Zones
Planning a Non-Global Zone Configuration
Hardware Requirements
Zone Size
Name Service and Network Considerations
About Zone Brands
Zone Installation and Configuration Concepts
About Zone Properties
About Zone Commands for Configuration and Installation
Using Manifests and Configuration Profiles
Creating a Manifest for Zone Installation
Creating a System Configuration Profile for Zone Installation
Using Rights Profiles to Install and Manage Zones
2 Setting Up a Non-Global Zone
Installing a Non-Global Zone
How to Create and Deploy a Non-Global Zone
Displaying Zone-Related Information
Using the zoneadm Command
Using the zonecfg Command
Using the zlogin Command
Installing Non-Global Zones Based on Existing Zones
Using Clones
Using Unified Archives
How to Install and Deploy Zones by Cloning
Uninstalling and Deleting a Non-Global Zone
How to Uninstall and Remove a Zone
3 Managing Zone Resources and Properties
About Configuring Zone Properties
How to Configure Zone Properties and Resources
Setting Values of Zone Properties and Resources
Limiting the Zone's Resources
Assigning CPUs to the Zone
Setting Cap Limits for Memory
Adding File Systems for Zone Use
Setting the hwprovider Property to Override the Global Zone Value (solaris10 Only)
Setting Time Values in Non-Global Zones
Modifying Zone Property and Resource Settings
Canceling a Configuration Session
How to Modify Zone Resources and Properties
Configuring the dataset Property on solaris Zones
Performing Zone Configuration From the Global Zone
4 Administering Networking in Oracle Solaris Non-Global Zones
About Networking In Zones
How to Create a Private Network of Multiple Zones
Using IP Network Multipathing With Non-Global Zones
How to Extend IP Network Multipathing Functionality to Shared-IP Non-Global Zones
Managing Datalinks Related to Zones
Changing Existing Shared-IP Zones to Exclusive-IP Zones
5 Administering SMF and Reporting in Oracle Solaris Non-Global Zones
Zones and the Service Management Facility
Zone SMF Dependencies
About the Zone SMF Instance Service State
Zone SMF Instance Service States
SMF Goal Services and Zones
Zones Boot Ordering
Administering the Zones Delegated Restarter
Zones Delegated Restarter
How the Zones Delegated Restarter Works
Zones Delegated Restarter Properties
Reporting the Status of SMF Services in a Non-Global Zone
Reporting Resource Usage in a Non-Global Zone
Reporting Per-Zone File System Statistics
Using the Fair Share Scheduler on a System With Zones Installed
How to Temporarily Set FSS Shares in the Global Zone
6 About Non-Global Zone Installation and Packages
Packages and Zones on an Oracle Solaris 11.4 System
Configuring Proxies to the Package Repository for Non-Global Zones
Overriding system-repository Proxies by Using https_proxy and http_proxy
How to Set https_proxy and http_proxy To Override Global Zone Proxies
Zone Contents After Creation
Zone Information After Installation
zoneadmd Zones Administration Daemon
zsched Zone Scheduler Process
Boot Environments and Zones
beadm Command in Non-Global Zones
Boot Environments in Global and Non-Global Zones
–x deny-zbe-clone Option
–x destroy-orphan-zbes Option
–x force-zbe-clone Option
Shared Zone State
Specifying an Alternate Root
About Orphaned Zone Boot Environments and Clones
Identifying Orphaned Boot Environments With the beadm Command
zoneadm Options for Orphaned Zone Boot Environments and Clones
7 About Non-Global Zone Administration
Security Measures for a System With Non-Global Zones
Privileges in a Non-Global Zone
Device Use in Non-Global Zones
/dev and the /devices Namespace
Exclusive-Use Devices and Zones
Device Driver Administration in Zones
Device Utilities and Non-Global Zones
Device Utilities That Do Not Work in Non-Global Zones
SPARC: eeprom in Non-Global Zones
Device Utilities With Security Implications
Resource Management With Non-Global Zones
Resource Controls Used in Non-Global Zones
Fair Share Scheduler on a System With Zones Installed
Share Balance Between Zones
Extended Accounting on a System With Zones Installed
Monitoring a System With Non-Global Zones
Global Zone Visibility and Access
Process ID Visibility in Zones
System Observability in Zones
Reporting Active Zone Statistics With the zonestat Utility
Monitoring Non-Global Zones With the fsstat Utility
Running DTrace in a Non-Global Zone
Core Files in Zones
Non-Global Zone Node Name
File Systems and Non-Global Zones
Running an NFS Server in a Zone
Mounting File Systems in Zones
Unmounting File Systems in Zones
Non-Global Zones as NFS Clients
Traversing File Systems
Security Restrictions and File System Behavior
Restriction on Using mknod in a Zone
Restriction on Accessing a Non-Global Zone From the Global Zone
Networking in Exclusive-IP Non-Global Zones
Overview of Networking in Exclusive-IP Zones
Exclusive-IP Zone Partitioning
Exclusive-IP Datalink Interfaces
Exclusive-IP Zones Traffic, Traffic Security, and IPMP Configuration
Networking in Shared-IP Non-Global Zones
Shared-IP Zone Partitioning
Shared-IP Network Interfaces
Shared-IP Zones Traffic, Traffic Security, and IPMP Configuration
Migration and Transformation of Non-Global Zones
About Cold Migration of solaris Zones
Zone Migration Configuration Requirements
zoneadm migrate Command
Zone Migration and Various Host Configurations
Zone Migration and Package Updates
About Zone Transformations
Zone Transformations Using Oracle Solaris Unified Archives
Zone Transformation Requirements for Source and Target Hosts
Zone Transformations From Systems That Contain Non-Global Zones
Using the zonep2vchk Tool to Prepare for Global to Non-Global Transformations
About the zonep2vchk Tool
Checks Performed by the zonep2vchk Tool
Issues Highlighted by the zonep2vchkTool
Zone Configuration Template for a Transformed Zone
Backup Strategies for a System With Non-Global Zones
Backup Methods for a System With Non-Global Zones
Backing Up Loopback File System Directories
Backing Up Your System From the Global Zone
Backing Up Individual Non-Global Zones on Your System
Creating Oracle Solaris Unified Archive Backups
Determining What to Back Up in Non-Global Zones
Backing Up Application Data Only
General Database Backup Operations
Tape Backups
About Restoring Non-Global Zones
Backing Up and Recreating Zones
Commands Used on a System With Non-Global Zones
Commands for Zone Administration and Monitoring
Commands for Resource Capping
Commands With Modifications for Zones
8 Migrating an Oracle Solaris Zone
Authorizing Non-Root Users to Perform Non-Global Zone Migrations
How to Authorize a User to Perform Cold Migration of an Individual Zone
Using Cold Migration to Migrate a solaris Zone
How to Cold Migrate a solaris Zone
Migrating a Zone From a System That Is Not Usable
Archiving and Moving Non-Global Zones That Are Not Using Shared Storage
How to Use Unified Archive to Move a Non-Global Zone to a New System
How to Move a Zone That Is Not on Shared Storage
9 Live Zone Reconfiguration of Oracle Solaris Zones
Live Zone Reconfiguration of Oracle Solaris Zones
zonecfg Utility Edit Modes
Temporary Changes to the Live Zone Configuration
Persistent Changes to the Live Zone Configuration
Live Zone Reconfiguration Dry Run
Reloading a Live Zone Configuration
Performing a Live Zone Reconfiguration
How to Inspect the Live Configuration of a Running Zone
How to Preview the Effect of a Live Zone Configuration
How to Make Persistent Configuration Changes to a Live Zone
How to Make Temporary Changes to the Running Zone
How to Recover From a Failure While Committing Live Zone Configuration Changes
10 Transforming Systems to Oracle Solaris Zones
Transforming a Global Zone Into a solaris Non-Global Zone
How to Check the Source System With zonep2vchk
How to Create an Archive of the System Image
How to Configure the Transformed Zone on the Target System
How to Install the Transformed Zone From the Archive on the Target System
11 Configuring and Administering Immutable Zones
About Immutable Zones
Configuring Immutable Zones
Setting the MWAC Security Policy
Zone Resource Exceptions to MWAC Security Policy
SMF Services in Immutable Zones
Administering Immutable Non-Global Zones
Determining Whether a Non-Global Zone Is Immutable
Methods for Administering Non-Global Immutable Zones
Administering an Immutable Zone by Using the Trusted Path Domain
How to Enable Administrative Access to an Immutable Zone From the Console
How to Enable Remote Administrative Access to an Immutable Zone by Using RAD
Administering an Immutable Zone by Making It Writable
Immutable Global Zones
Configuring an Immutable Global Zone
Maintaining an Immutable Global Zone
12 Troubleshooting Miscellaneous Oracle Solaris Zones Problems
Installation Fails Due to Unmatched Allowable Packages
Troubleshooting Installation
Exclusive-IP Zone Is Using Device, so dladm reset-linkprop Fails
zonecfg -r Fails
Troubleshooting a Zone That Has Failed
About Zone UUIDs
How to Manage a Zone That Has Become Unavailable
Insufficient Privileges Specified for the Zone
Zone Does Not Halt
Zone Access Denied
13 Oracle Solaris Zones on Shared Storage
About Shared Storage Resources Using Storage URIs
Local Device URI
Logical Unit URI
iSCSI URI
Managing Storage URIs and Shared Storage Resources
Assigning Shared Storage Resources to Oracle Solaris Zones
storage Property for Zones
rootzpool Resource
zpool Resource
Renaming Zones
Relocating Shared Storage Resource
Automated ZFS Storage Pool Management for Oracle Solaris Zones on Shared Storage Resources
About the unavailable Zone State on Shared Storage
zoneadm Options for Shared Storage
Options for Installing, Cloning, and Attaching Zones
–x force-zpool-import Option
–x force-zpool-create= Option
–x force-zpool-create-all Option
Options for Uninstalling Zones
–x force-zpool-destroy=zpoolname Option
–x force-zpool-destroy-all Option
–x force-storage-destroy-all Option
Restrictions on Moving a Zone With the rootzpool Resource
Implementing Oracle Solaris Zones Hosted on Shared Storage Resources
zpool Configuration Considerations for Zones on Shared Storage
Sample Scenarios for Zones on Shared Storage
Migrating Oracle Solaris Zones Hosted on Shared Storage Resources
Moving Existing Zones To or From Shared Storage Zone Configurations
How to Move a Zone to a Shared Storage Configuration
How to Move a Zone From a Shared Storage Configuration
How to Move a Zone to Different Shared Storage
How to Add or Move a ZFS Storage Pool to an Installed Zone
Zones Documentation References for Shared Storage Resources
Zones Glossary
Index
A
B
C
D
E
F
G
H
I
K
L
M
N
O
P
R
S
T
U
V
X
Z