Index

Symbols

/etc/vfstab file 7.5.3
‐x deny-zbe-clone option 6.4.2.1
‐x destroy-orphan-zbes option 6.4.2.2
‐x force-storage-destroy-all option 13.6.2.3
‐x force-zbe-clone option 6.4.2.3
‐x force-zpool-create= option 13.6.1.2
‐x force-zpool-create-all option 13.6.1.3
‐x force-zpool-destroy=zpoolname option 13.6.2.1
‐x force-zpool-destroy-all option 13.6.2.2
‐x force-zpool-import option 13.6.1.1

A

add dataset configuration
- example 3.4
- exception to MWAC 11.2.2
- live mode 3.5
- temporarily 3.5
add fs configuration
- example 3.2.2
- exception to MWAC 11.2.2
- UFS example 3.2.2
adding
- dataset 3.4, 3.5
- file system 3.2.2
- privileges to limitpriv 12.6
- system daemons to TPD 11.3.3
- ZFS storage pool 13.9.4
administering
- device drivers 7.2.3
- immutable zones 11.3
- packages 6.1
- shared storage resources 13.2
- writable immutable zones 11.3.4
- zones delegated restarter 5.2
alternate root environment 6.4.4
applications
- devices and zones 7.2
- privileges and zones 7.1.1
- unsuitable for zones 7.1.1, 7.2
- zone backups 7.9.2.1
archiveadm command
- creating a recovery archive 8.4.1
- example 8.4.1
- installing zone from 2.3.2
- zone transformation and 10.1.2
- zone transformations and 7.8.2.1
assigning
- boot priority 5.1.5
- CPUs to zones 3.2.1.1
- CPUs to zones from global zone 3.5
- devices to zones 7.2.2
- FSS shares 7.3.2.1
- rights profiles to zone administrators 1.3
- rights to migrate zones 8.1
- shared storage to zones 13.3
attaching zones
- shared storage options 13.6.1
autoboot property 2.1.1, 3.3.2, 8.4.1
AutoFS file system
- security restrictions 7.5.6

B

backing up
- databases in zones 7.9.2.2
- LOFS directories 7.9.1.1
- zone contents 7.9.2
- zones 7.9.1, 7.10
beadm command
- boot environments and shared storage 13.6.2.2
- in non-global zones 6.4.1
boot environments
- alternate root 6.4.4
- effect of shared zone state 6.4.3
- orphaned 6.4.5.1
- zones and 6.4
booting
- immutable zone 11.3.4
- zones in order 5.1.5
boot order
- assigning priority 5.1.5
branded zones 1.1.4
brands
- list of 1.1.4

C

canceling
- zone configuration 3.3.1
cap limits for memory 3.2.1.2
changing
- configuration temporarily 3.3.2
- property values 3.2
- resource control settings 3.3.2
- resources 3.3.2
- shared-IP to exclusive-IP 4.4
- shared storage URI 13.3.5
- zone properties 3.3
cloning zones
- for small number of zones 2.3.1
- how to 2.3.3
- shared storage options 13.6.1
cold migration
- overview 7.8.1
- zones 8.2
command references
- zones 7.11
- zones on shared storage 13.10
configuring
- immutable global zones 11.4.1
- modifying properties temporarily 3.3.2
- proxies to package repository 6.1.1
- zones
  - default mode 3.1
  - how to 2
  - live mode 3.1, 3.3.2
  - properties 3.1
- zpool on shared storage 13.7.1
converting
- global zone to solaris zone 10.1
core files and zones 7.4.7
CPUs
- assigning to zones 3.2.1.1
- assigning to zones from global zone 3.5
- monitoring 7.4.4
- reporting 5.4
- reporting utilization 5.4
- zone.cpu-shares property 7.3.2.1
creating
- recovery archive 8.4.1
- zone administrator 8.1.1
- zone migration administrator 8.1.1
- zones 3.1

D

daemons
- adding to TPD 11.3.3
- zoneadmd 6.3.1
- zonestatd 7.4.4
datalinks
- exclusive-IP zones 7.6.3
- zones and 4.3
datasets
- adding to a running zone 9.3.1
- Live Reconfiguration 9.3
- removing from zone 3.4, 9.3.2
delegated restarter 5.2.1
deleting
- file systems 2.4.1
deny-zbe-clone option 6.4.2.1
description property 2.1.1
destroying
- file systems 2.4.1
destroy-orphan-zbes option 6.4.2.2
devfs file system 7.2.1
device drivers
- administering 7.2.3
devices and zones 7.2
directories
- sharing with global zone 3.2.2
disk space requirements 1.1.1
displaying
- list of zones 2.2.1
- name of current zone 2.2
- zone configuration information 2.2
- zone information from the global zone 2.2, 2.2.3
- zone processes 7.4.1
- zone resource properties 2.2.2
- zones delegated restarter 5.2
dladm reset-linkprop error message 12.3
dtrace_proc privilege 7.4.6, 12.6
dtrace_user privilege 7.4.6, 12.6
DTrace Toolkit rights profile 12.6
dynamic-zones MWAC security policy 11.2.1

E

examples
- adding DTrace rights to a zone 12.6
- authorizing user to configure zones 8.1.1
- authorizing user to migrate all zones 8.1.1
- backing up zone with unified archives 7.10
- changing resource control 3.3.2
- changing zone.cpu-shares dynamically 5.6.1
- configuring private network 4.1.1
- creating a zone 2.1.1
- creating a zone with default values 2.1.1
- creating zones from a source zone 2.3.3
- discarding configuration changes 3.3.2
- dry run of cold migration 8.2.1
- listing default processor set 5.4
- making the global zone immutable 11.2.1
- migrating using iSCSI shared storage 13.8
- producing storage URIs 13.2
- proxy configuration in global zone 6.1.1
- reverting zone to default values 3.3.2
- showing CPU use 5.4
- showing per-zone filesystem activity 5.5
- showing zone network bandwidth from global zone 5.4
- using DAS storage devices 13.7.2
- using fibre channel-based storage devices 13.7.2
- using iSCSI-based shared storage 13.7.2
- using live mode 3.3.2
- zones on shared storage 13.7.2
exclusive-IP zones
- network address 1.1.3
- network bandwidth 5.4
- reporting bandwidth utilization 5.4
exiting a zone 2.1.1
exporting
- dataset prior to migration 3.4
extended accounting and zones 7.3.3

F

failsafe mode login 12.8
fair share scheduler (FSS)
- assigning shares 7.3.2.1
- zones and 5.6, 7.3.2
file-mac-profile security property 11.2.1
file systems
- access restrictions from global zone 7.5.8
- adding 3.2.2
- adding UFS 3.2.2
- administering root file system 6.1
- archiving 10.1.2
- destroying 2.4.1
- devfs 7.2.1
- fs resource 3.2.2
- LOFS 3.2.2
- mounting behavior 7.5.6
- mounting options 7.5.2
- mounting read-only 11.2.2
- read-only root file system 11.1
- report example 5.5
- reporting activity 5.5
- root directory 7.5
- root zone path 2.1.1
- security restrictions 7.5.6
- temporarily writable 11.3.4
- traversing 7.5.5
- unmount failure 12.7
- unmounting in zones 7.5.3
- zones and 7.5
firewall
- exclusive-IP zones 7.6.4
- shared-IP zones 7.7.3
fixed-configuration MWAC security policy 11.2.1
flexible-configuration MWAC security policy 11.2.1
force-storage-destroy-all option 13.6.2.3
force-zbe-clone option 6.4.2.3
force-zpool-create= option 13.6.1.2
force-zpool-create-all option 13.6.1.3
force-zpool-destroy=zpoolname option 13.6.2.1
force-zpool-destroy-all option 13.6.2.2
force-zpool-import option 13.6.1.1
fs-allowed property 7.5.2
fs resource 3.2.2
FSS 7
fsstat statistics 5.5, 7.4.5
fstype statistics and zones 5.5

G

global zones
- caution about zone configuration from 3.5
- configuring non-global zones from 3.5
- device utilities not allowed in zones 7.2.4.1
- directories shared with non-global zone 3.2.2
- displaying zone information 2.2
- hwprovider property 3.2.3
- making immutable 11
- monitoring zones 7.4
- package differences from zones 6.1
- privileges not allowed to zones 7.1.1
- proxies to access package repositories 6.1.1
- security measures and zones 7.1
- time value differences in non-global zones 3.2.4
- transforming into solaris zone 10.1
goal services
- Service Management Facility (SMF) 5.1.4

H

halting a zone 12.7
- troubleshooting 12.7
host names for zones 1.1.3
hwprovider global property 3.2.3

I

immutable zones
- about 11.1
- access with zlogin command 11.3.4
- add dataset configuration 11.2.2
- add fs configuration 11.2.2
- administering 11.3, 11.3.3
- authorization for zlogin command 11.3.4
- booting writable 11.3.4
- configuring 11.2
- dynamic-zones 11.2.1
- file-mac-profile security property 11.2.1
- fixed-configuration MWAC policy 11.2.1
- flexible-configuration MWAC policy 11.2.1
- global zones 11, 11.4
- kernel zones 11
- none MWAC policy 11.2.1
- non-global zones 11
- setting security policy 11.2.1
- SMF commands and 11.2.3
- strict MWAC policy 11.2.1
- Trusted Path Domain 11.3.3
installadm command
- zone transformations and 7.8.2.1
installing zones
- clones and 2.3.1
- from archive 2.3.2
- overview 2.1
- shared storage options 13.6.1
- troubleshooting 12.2
- troubleshooting packages 12.1
- Unified Archives and 2.3
IPMP
- exclusive-IP zones 7.6.4
- shared-IP zones 7.7.3
- zones and 4.2
IPsec
- exclusive-IP zones 7.6.4
- shared-IP zones 7.7.3
iSCSI shared storage
- migrating zones 13.8

K

kernel zones
- making immutable 11
- solaris-kz brand 1.1.4

L

labeled brand 1.1.4
limiting
- administrator rights in zones 1.3, 8.1
- memory available to zones 3.2.1.2
- resources provided to zones 3.2.1
- zone size 1.1.2
limitpriv privilege set
- adding to 12.6
- DTrace privileges 7.4.6
- insufficient privileges 12.6
- troubleshooting 12.6
live migration
- by non-root users 8.1
Live Reconfiguration
- datasets 9.3
live zone editing fails 12.4
Live Zone Reconfiguration
- adding a dataset 9.3.1
- dry run 9.1.4
- non-global zones 9.1
- procedures 9.2
- reloading the configuration 9.1.5
- temporary changes 9.1.2
- test run 9.1.4
LOFS file system
- backing up directories 7.9.1.1
- security restrictions 7.5.6
- sharing directory with global zone 3.2.2
logging in
- failsafe mode 12.8
- zone console 2.1.1
logging out of a zone 2.1.1

M

maintaining
- immutable global zones 11.4.2
managing 1
mandatory write access control 11
memory
- limiting use by zones 3.2.1.2
- reporting utilization 5.4
- zone requirements 1.1.1
migrate command 7.8.1
migrating
- by non-root users 8.1
- iSCSI shared storage 13.8
- solaris zone 8.2
- transformation requirements 7.8.2.2
- zones 8
- zones on shared storage 13.8
- zone without shared storage 7.8.2
mknod command and zones 7.5.7
MNTFS file system
- security restrictions 7.5.6
modifying 1
monitoring
- active zone statistics 7.4.4
- resource use 7.4.1
- zones from global zone 7.4
- zone statistics 7.4.5
mounting file systems 7.5.2
moving a ZFS storage pool 13.9.4
moving a zone
- from shared storage 13.9.2
- on shared storage 13.9
- on the same system 8.4.2
- to different shared storage 13.9.3
- to shared storage 13.9.1
MWAC
- definition 11.1, 11.2
- security policy exception 11.2.2
- security policy for zones 11.2.1

N

namespaces
- devices, for 7.2.1
- zones and global zones 7.5.5
network address
- exclusive-IP zone 1.1.3
network bandwidth
- exclusive-IP zones 5.4
- zones statistics 5.4
networking
- exclusive-IP zones 7.6
- shared-IP 7.7
network interfaces
- shared-IP zones 7.7.2
new features
- hwprovider global property 3.2.3
NFS file system
- security restrictions 7.5.6
- server 7.5.1
node names and zones 7.4.8
none MWAC security policy 11.2.1
non-global zones
- differences from global zone
  - available privileges 7.1.1
  - devices available 7.2
  - IKE in shared-IP zones 7.7.3
  - packages 6.1
  - privileges 7.1.1

O

orphaned boot environments 6.4.5
overriding global zone proxies 6.1.1.1

P

packages
- administering 6.1
- system/file-system/ufs 7.5.2
- troubleshooting zone installation 12.1
- zones and 6.1
parallel zone updates 6.1.1.1.1
partitioning
- exclusive-IP zones 7.6.2
- shared-IP zones 7.7.1
persistent Live Zone Reconfiguration
- applying to live configuration 9.1.3
pfbash shell 1.3
pfexec command 1.3, 5.5
physical property 2.1.1
populating a zone 6.2
privileges
- missing in zone 12.6
- troubleshooting 12.6
- zone subset 7.1.1
processes
- global visible to zone 7.4.1
- visibility in zones 7.4.2
processor set
- reporting information 5.4
PROCFS file system
- security restrictions 7.5.6
properties
- setting values 3.2
proxy
- configuring for package repository 6.1.1
- setting in global zone 6.1.1
pset resource pool element
- reporting information 5.4

R

read-only zone root 11
recovery archive
- creating 8.4.1
- creating per zone 7.8.2.3
- failing to install 10.1.2
recreating zones 7.10
reloading live zone configurations 9.1.5
removing
- dataset resource 3.4, 9.3.2
renaming
- zones on shared storage 13.3.4
reporting
- file system activity 5.5
resource controls
- changing settings 3.3.2
- zones and 7.3.1
resources
- exceptions to MWAC 11.2.2
- modifying 3.3.2
- modifying settings 3.3
- reporting use of 5.4
- setting values 3.2
restoring zones 7.9.3
restricting 3
reverting to zone default values 3.3.2
rights profiles
- DTrace Toolkit 12.6
- zone administration 1.3
- Zone Migration 8.1
- Zone Security 11.2.1
root directory 7.5
root file system
- administering from global zone 6.1
root zone path 2.1.1
rootzpool resource 13.3.2
running DTrace in a zone 7.4.6, 12.6

S

security issues
- assigning devices to zones 7.2.2
- file systems 7.5.6
- global zones and zones 7.1
- mounting non-default file systems 7.5.2
security policy
- MWAC 11.1, 11.2
Service Management Facility (SMF)
- boot order 5.1.5
- dependencies 5.1.1
- goal services 5.1.4
- immutable zone and 11.2.3
- instance service state 5.1.2
- overview 5.1
- service state descriptions 5.1.3
- status of services in zones 5.3
- system/zones:default service 5.1.1
- system-repository service 6.1.1
- zones delegated restarter 5.2.1
  - displaying 5.2
  - properties description 5.2.1.2
  - setting properties 5.2
setting properties
- autoboot 3.3.2
- canceling set values 3.3.2
- hwprovider 3.2.3
- memory limits 3.2.1.2
- time values 3.2.4
- values 3.2
- zones delegated restarter 5.2
shared storage
- assigning to zones 13.3
- automated ZFS 13.4
- hosting zones 13.7
- managing 13.2
- migrating zones 13.8
- moving zones to or from 13.9
- unavailable zone state and 12.5, 13.5
- URIs 13, 13.1
- zoneadm options 13.6
sharing
- directory with global zone 3.2.2
shutting down a zone 2.4.1
SMF 5.1
snapshots
- ZFS 2.3.3
solaris10 brand 1.1.4
solaris brand 1.1.4
solaris branded zone
- migrating 8.2
- packages and 6.1
solaris-kz brand 1.1.4
states
- zone SMF instance service 5.1.3
storage-based file systems
- security restrictions 7.5.6
storage property 13.3.1
strict MWAC security policy 11.2.1
system/zones:default SMF service
- dependencies 5.1.1
system memory and zones 1.1.1
system-repository proxy 6.1.1.1
system-repository SMF service 6.1.1

T

temporary Live Zone Reconfiguration 9.1.2
test run
- Live Zone Reconfiguration 9.1.4
time values and zones 3.2.4
TPD 11
traffic between zones
- exclusive-IP zones 7.6.4
- shared-IP zones 7.7.3
transformations
- starting with archiveadm 10.1.2
- using archives 7.8.2.1
- using zonep2vchk 7.8.3
- zones to other types of zones 10
troubleshooting
- dladm reset-linkprop error message 12.3
- installation failure 12.2
- live mode failure 12.4
- missing privileges in zone 12.6
- package installation failure 12.1
- unavailable zone state 12.5
- zone access denied 12.8
- zones 12
- zone will not halt 12.7
Trusted Path Domain
- immutable zone access 11.3.3
- immutable zones and SMF services 11.2.3

U

UFS non-default file system
- assigning to zone 3.2.2
- mounting 7.5.2
unavailable zone state
- shared storage and 12.5, 13.5
unbootable boot environments
- zones 6.4.2
Unified Archive
- overview 2.3
uninstalling
- shared storage options 13.6.2
- zones 2.4.1
Universal Resource Identifiers (URIs) 13
UNIX file system 3
unmounting
- /etc/vfstab file and 7.5.3
- unmounting file systems 7.5.3
updating zones in parallel 6.1.1.1.1
URIs
- shared storage 13.1
UUIDs
- zones, for 12.5.1

V

virtual-cpu resource type
- removing VCPUs in live configuration 9.2.3
virtual zpool
- export 9.3.3

Z

ZFS file system
- adding dataset 3.4
- clones 2.3.3
- security restrictions 7.5.6
- snapshots 2.3.3
ZFS storage pools
- adding to a zone 13.9.4
- moving to another zone 13.9.4
zlogin command
- displaying information inside zones 2.2.3
- failsafe mode 12.8
- zone console 2.1.1
zone.cpu-shares property 5.6.1, 7.3.2.1
zoneadm apply command 3.1
zoneadm command
- about 1.2.2
- halt failure 12.7
- installing default zone 3.1
- installing zones 2.1.1
- listing zones 2.2.1
- shared storage options 13.6
- specifying alternate root 6.4.4
- viewing changes in boot environment 6.4.1
- zone transformations and 7.8.2.1
zoneadmd daemon 6.3.1
zone administrator rights 1.3
zoneadm install command 2.1.1
zoneadm migrate command 7.8.1.2, 8.2.1
zoneadm shutdown command 8.2.1
zoneadm uninstall command 2.4.1
zonecfg command 9.1.1
- about 1.2.2
- configuring zones 3.1
- default mode 9.1.1
- displaying resource properties 2.2.2
- info subcommand 2.2.2
- live mode 9.1.1
- zone transformations and 7.8.2.1
zone configuration
- displaying 2.2
zone console login 2.1.1
zone construction 6.2
zone host name 1.1.3
Zone Migration rights profile 8.1
zone name
- displaying 2.2
- exclusive-IP zone and 1.1.3
- extended accounting tag 7.3.3
- name services difference between global and zone 7.4.3
- node name and 7.4.8
- zone UUID and 12.5.1
zonename command 2.2
zone network address 1.1.3
zonep2vchk command
- analysis of conversion impact 10.1.1
- runtime check 10.1.1
- template generation 10.1.1
- transformation preparation 7.8.3
- zone transformations and 7.8.2.1
zonepath property 2.2.1
zone requirements
- disk space 1.1.1
- hardware 1.1.1
- host names 1.1.3
- memory 1.1.1
- networking considerations 1.1.3
zone root directory 7.5
zones 1
- active monitoring 7.4.4
- administering datalinks 4.3
- administering immutable 11.3
- applications and devices 7.2
- applications and privileges 7.1.1
- backing up 7.9.1
- backing up applications 7.9.2.1
- backing up files 7.10
- backing up individually 7.9.1.3
- backing up zone contents 7.9.2
- beadm actions on unbootableenvironments 6.4.2
- beadm command and 6.4.1
- boot environments 6.4
- brands 1.1.4
- canceling configuration 3.3.1
- changing resource control setting 3.3.2
- changing shared-IP to exclusive-IP 4.4
- commands used in 7.11
- configuring global immutable 11.4.1
- core files 7.4.7
- database backups 7.9.2.2
- device use 7.2
- displaying name 2.2
- exporting 3.4
- extended accounting 7.3.3
- fair share scheduler (FSS) 5.6, 7.3.2
- file systems 7.5
- fsstat monitoring 5.5
- fstype statistics 5.5
- general administration 4, 5
- immutable global 11.4
- immutable zones 11.1
- IPMP 4.2
- IPsec 7.6.4
- limiting resources 3.2.1
- limiting size 1.1.2
- live reconfiguration 9.1
- maintaining global immutable 11.4.2
- migrating 7.8.2.2, 8
- migrating from unusable system 8.3
- modifying properties 3.3
- monitoring 7.4.5
- network bandwidth statistics 5.4
- networking and exclusive-IP 7.6
- networking and shared-IP 7.7
- NFS server 7.5.1
- node name 7.4.8
- observability 7.4.3
- orphaned boot environments 6.4.5
- packaging 6.1
- privileges 7.1.1
- processes visible to global zone 7.4.1
- process ID visibility 7.4.2
- proxy configuration 6.1.1
- recreating individual 7.10
- resource controls 7.3.1
- resource exceptions to MWAC 11.2.2
- restoring 7.9.3
- reverting property value to default 3.3.2
- running DTrace in 7.4.6
- setting file-mac-profile value 11.2.1
- setting MWAC security policy 11.2.1
- setting property values 3.2
- setting resource values 3.2
- setting security policy 11.2.1
- setting to immutable 11.2
- shared BEs 6.4.3
- shared storage URIs 13.1
- SMF service status 5.3
- support for beadm 6.4.1
- time values 3.2.4
- transformations using archives 7.8.2.1
- troubleshooting 12
- updating in parallel 6.1.1.1.1
- usage examples 4, 5
- UUIDs 12.5.1
- zonecfg command 9.1.1
- zonep2vchk tool 7.8.3
- zonestat command 5.4
- zonestat statistics 5.4
zones delegated restarter
- administering 5.2
- displaying 5.2
- how it works 5.2.1.1
- overview 5.2.1
- properties description 5.2.1.2
- setting properties 5.2
Zone Security rights profile 11.2.1
zones on shared storage (ZOSS)
- assigning shared storage 13.3
- automated ZFS storage 13.4
- command references 13.10
- documentation references 13.10
- implementing 13.7
- migrating 13.8
- moving to or from shared storage 13.9
- overview 13
- supported renaming methods 13.3.4
- unavailable zone state and 12.5, 13.5
- zoneadm subcommand options 13.6
zonestat command
- active monitoring 7.4.4
- network bandwidth 5.4
- reporting resource usage 5.4
zonestatd daemon
- monitoring resource use 7.4.4
zone utilization, reporting 5.4
ZOSS 13
zpool resource 13.3.3
- configuration considerations on shared storage 13.7.1
zsched process 6.3.2