Overriding system-repository Proxies by Using https_proxy and http_proxy

Proxies should be set in an image, and only the system-repository service proxy should be set. The https_proxy and http_proxy environment variables should be set in the environment where you run the pkg command.

You can also configure the proxies used by the system-repository SMF service, overriding any proxies configured on publishers in the global zone. The system-repository proxies can be set by using the config/http_proxy or config/https_proxy SMF properties.

For more information, see Updating Systems and Adding Software in Oracle Solaris 11.4 and the following procedure, How to Set https_proxy and http_proxy To Override Global Zone Proxies.

This procedure sets proxies in the system-repository service on an internal subnet that does not have a direct connection to the IPS publisher repository. This configuration overrides any proxies that the pkg command configured in the global zone. Non-global zones communicate with the system-repository over HTTP. The system-repository then accesses the publishers using the protocol for that repository as configured in the global zone.

This configuration allows the solaris non-global zones to contact the publisher set in the global zone as well. Recursive pkg operations into the solaris zones will succeed.