SPARC: How to Configure HA for Oracle VM Server

Before You Begin

Install the data service packages during your initial Oracle Solaris Cluster installation.

If you did not install the HA for Oracle VM Server packages as part of your initial Oracle Solaris Cluster installation, go to Installing the HA for Oracle VM Server Package.

1. Assume the root role or assume a role that provides solaris.cluster.modify and solaris.cluster.admin RBAC authorization on the node in the cluster that hosts the Oracle VM Server for SPARC guest domain.
2. Register the SUNW.ldom resource type.

   # clresourcetype register SUNW.ldom

3. Create an Oracle VM Server for SPARC guest domain resource in the failover resource group.

   If you plan to use warm migration (see Step 4), a password_file property is required. For warm migration, specify the complete path to the file that contains the target host password that is required for guest domain migration.

   # clresource create -g LDom-failover-rg -t SUNW.ldom \
   -p password_file=path-to-file-with-target-host-password \
   -p Domain_name=LDom-guest-domain-instance LDom-guest-domain-resource

4. If an encrypted password is required for the logical domain migration, you must do the following:
   1. Insert the word encrypted into the file you specify with the Password_file extension property when creating the resource.

      # echo "encrypted" > /var/cluster/.ldg1_passwd

   2. Assume the root role and create an encrypted password.

      In the following example, the root password for the primary domain, encrypted_password, is being encrypted and ldg1 reflects the logical domain name.

      node1# dd if=/dev/urandom of=/var/cluster/ldom_key bs=16 count=1
      node1# chmod 400 /var/cluster/ldom_key
      node1# echo encrypted_password | /usr/sfw/bin/openssl enc -aes128 -e \
      -pass file:/var/cluster/ldom_key -out /opt/SUNWscxvm/.ldg1_passwd
      node1# chmod 400 /opt/SUNWscxvm/.ldg1_passwd

   3. Verify that the encrypted password can be decrypted.

      node1# /usr/sfw/bin/openssl enc -aes128 -d -pass file:/var/cluster/ldom_key \
      -in /opt/SUNWscxvm/.ldg1_passwd

   4. Repeat the preceding steps on all other Oracle Solaris Cluster nodes that will host the logical domain service.
   5. Create or update the resource and set the Password_file property to the path provided in Step a.

      ---

      Note -  You can perform this step only when the resource is disabled.

      ---

      # clresource set -p Password_file=/var/cluster/.ldg1_passwd LDom-guest-domain-resource

5. If you plan to use warm migration, enable warm migration to be performed on a guest domain during logical domain resource failovers.

   Warm migration requires that the migration_type property be set to MIGRATE, which is the default value. For a value of MIGRATE, the password_file is required (see Step 3).

   If the migration_type property is instead set to NORMAL, change the property value to MIGRATE:

   # clresource set -p Migration_type=MIGRATE LDom-guest-domain-resource

6. Enable each guest domain resource.

   Repeat this step for each guest domain instance, if multiple instances were created.

   # clresource status
   # clresource enable LDom-guest-domain-resource