Table of Contents

• Title and Copyright Information
• Using This Documentation
  • Product Documentation Library
  • Feedback
• 1 Before You Begin Working With Oracle Solaris Zones
  • Planning a Non-Global Zone Configuration
    • Hardware Requirements
    • Zone Size
    • Name Service and Network Considerations
    • About Zone Brands
  • Zone Installation and Configuration Concepts
    • About Zone Properties
    • About Zone Commands for Configuration and Installation
    • Using Manifests and Configuration Profiles
      • Creating a Manifest for Zone Installation
      • Creating a System Configuration Profile for Zone Installation
  • Using Rights Profiles to Install and Manage Zones
• 2 Setting Up a Non-Global Zone
  • Installing a Non-Global Zone
    • How to Create and Deploy a Non-Global Zone
  • Displaying Zone-Related Information
    • Using the zoneadm Command
    • Using the zonecfg Command
    • Using the zlogin Command
  • Installing Non-Global Zones Based on Existing Zones
    • Using Clones
    • Using Unified Archives
    • How to Install and Deploy Zones by Cloning
  • Uninstalling and Deleting a Non-Global Zone
    • How to Uninstall and Remove a Zone
• 3 Managing Zone Resources and Properties
  • About Configuring Zone Properties
    • How to Configure Zone Properties and Resources
  • Setting Values of Zone Properties and Resources
    • Limiting the Zone's Resources
      • Assigning CPUs to the Zone
      • Setting Cap Limits for Memory
    • Adding File Systems for Zone Use
    • Setting the hwprovider Property to Override the Global Zone Value (solaris10 Only)
    • Setting Time Values in Non-Global Zones
  • Modifying Zone Property and Resource Settings
    • Canceling a Configuration Session
    • How to Modify Zone Resources and Properties
  • Configuring the dataset Property on solaris Zones
  • Performing Zone Configuration From the Global Zone
• 4 Administering Networking in Oracle Solaris Non-Global Zones
  • About Networking In Zones
    • How to Create a Private Network of Multiple Zones
  • Using IP Network Multipathing With Non-Global Zones
    • How to Extend IP Network Multipathing Functionality to Shared-IP Non-Global Zones
  • Managing Datalinks Related to Zones
  • Changing Existing Shared-IP Zones to Exclusive-IP Zones
• 5 Administering SMF and Reporting in Oracle Solaris Non-Global Zones
  • Zones and the Service Management Facility
    • Zone SMF Dependencies
    • About the Zone SMF Instance Service State
    • Zone SMF Instance Service States
    • SMF Goal Services and Zones
    • Zones Boot Ordering
  • Administering the Zones Delegated Restarter
    • Zones Delegated Restarter
      • How the Zones Delegated Restarter Works
      • Zones Delegated Restarter Properties
  • Reporting the Status of SMF Services in a Non-Global Zone
  • Reporting Resource Usage in a Non-Global Zone
  • Reporting Per-Zone File System Statistics
  • Using the Fair Share Scheduler on a System With Zones Installed
    • How to Temporarily Set FSS Shares in the Global Zone
• 6 About Non-Global Zone Installation and Packages
  • Packages and Zones on an Oracle Solaris 11.4 System
    • Configuring Proxies to the Package Repository for Non-Global Zones
      • Overriding system-repository Proxies by Using https_proxy and http_proxy
        • How to Set https_proxy and http_proxy To Override Global Zone Proxies
  • Zone Contents After Creation
  • Zone Information After Installation
    • zoneadmd Zones Administration Daemon
    • zsched Zone Scheduler Process
  • Boot Environments and Zones
    • beadm Command in Non-Global Zones
    • Boot Environments in Global and Non-Global Zones
      • ‐x deny-zbe-clone Option
      • ‐x destroy-orphan-zbes Option
      • ‐x force-zbe-clone Option
    • Shared Zone State
    • Specifying an Alternate Root
    • About Orphaned Zone Boot Environments and Clones
      • Identifying Orphaned Boot Environments With the beadm Command
      • zoneadm Options for Orphaned Zone Boot Environments and Clones
• 7 About Non-Global Zone Administration
  • Security Measures for a System With Non-Global Zones
    • Privileges in a Non-Global Zone
  • Device Use in Non-Global Zones
    • /dev and the /devices Namespace
    • Exclusive-Use Devices and Zones
    • Device Driver Administration in Zones
    • Device Utilities and Non-Global Zones
      • Device Utilities That Do Not Work in Non-Global Zones
      • SPARC: eeprom in Non-Global Zones
      • Device Utilities With Security Implications
  • Resource Management With Non-Global Zones
    • Resource Controls Used in Non-Global Zones
    • Fair Share Scheduler on a System With Zones Installed
      • Share Balance Between Zones
    • Extended Accounting on a System With Zones Installed
  • Monitoring a System With Non-Global Zones
    • Global Zone Visibility and Access
    • Process ID Visibility in Zones
    • System Observability in Zones
    • Reporting Active Zone Statistics With the zonestat Utility
    • Monitoring Non-Global Zones With the fsstat Utility
    • Running DTrace in a Non-Global Zone
    • Core Files in Zones
    • Non-Global Zone Node Name
  • File Systems and Non-Global Zones
    • Running an NFS Server in a Zone
    • Mounting File Systems in Zones
    • Unmounting File Systems in Zones
    • Non-Global Zones as NFS Clients
    • Traversing File Systems
    • Security Restrictions and File System Behavior
    • Restriction on Using mknod in a Zone
    • Restriction on Accessing a Non-Global Zone From the Global Zone
  • Networking in Exclusive-IP Non-Global Zones
    • Overview of Networking in Exclusive-IP Zones
    • Exclusive-IP Zone Partitioning
    • Exclusive-IP Datalink Interfaces
    • Exclusive-IP Zones Traffic, Traffic Security, and IPMP Configuration
  • Networking in Shared-IP Non-Global Zones
    • Shared-IP Zone Partitioning
    • Shared-IP Network Interfaces
    • Shared-IP Zones Traffic, Traffic Security, and IPMP Configuration
  • Migration and Transformation of Non-Global Zones
    • About Cold Migration of solaris Zones
      • Zone Migration Configuration Requirements
      • zoneadm migrate Command
      • Zone Migration and Various Host Configurations
      • Zone Migration and Package Updates
    • About Zone Transformations
      • Zone Transformations Using Oracle Solaris Unified Archives
      • Zone Transformation Requirements for Source and Target Hosts
      • Zone Transformations From Systems That Contain Non-Global Zones
    • Using the zonep2vchk Tool to Prepare for Global to Non-Global Transformations
      • About the zonep2vchk Tool
      • Checks Performed by the zonep2vchk Tool
      • Issues Highlighted by the zonep2vchkTool
      • Zone Configuration Template for a Transformed Zone
  • Backup Strategies for a System With Non-Global Zones
    • Backup Methods for a System With Non-Global Zones
      • Backing Up Loopback File System Directories
      • Backing Up Your System From the Global Zone
      • Backing Up Individual Non-Global Zones on Your System
      • Creating Oracle Solaris Unified Archive Backups
    • Determining What to Back Up in Non-Global Zones
      • Backing Up Application Data Only
      • General Database Backup Operations
      • Tape Backups
    • About Restoring Non-Global Zones
  • Backing Up and Recreating Zones
  • Commands Used on a System With Non-Global Zones
    • Commands for Zone Administration and Monitoring
    • Commands for Resource Capping
    • Commands With Modifications for Zones
• 8 Migrating an Oracle Solaris Zone
  • Authorizing Non-Root Users to Perform Non-Global Zone Migrations
    • How to Authorize a User to Perform Cold Migration of an Individual Zone
  • Using Cold Migration to Migrate a solaris Zone
    • How to Cold Migrate a solaris Zone
  • Migrating a Zone From a System That Is Not Usable
  • Archiving and Moving Non-Global Zones That Are Not Using Shared Storage
    • How to Use Unified Archive to Move a Non-Global Zone to a New System
    • How to Move a Zone That Is Not on Shared Storage
• 9 Live Zone Reconfiguration of Oracle Solaris Zones
  • Live Zone Reconfiguration of Oracle Solaris Zones
    • zonecfg Utility Edit Modes
    • Temporary Changes to the Live Zone Configuration
    • Persistent Changes to the Live Zone Configuration
    • Live Zone Reconfiguration Dry Run
    • Reloading a Live Zone Configuration
  • Performing a Live Zone Reconfiguration
    • How to Inspect the Live Configuration of a Running Zone
    • How to Preview the Effect of a Live Zone Configuration
    • How to Make Persistent Configuration Changes to a Live Zone
    • How to Make Temporary Changes to the Running Zone
    • How to Recover From a Failure While Committing Live Zone Configuration Changes
  • Live Zone Reconfiguration of Datasets
    • How to Add a ZFS Dataset to a Running Zone
    • How to Remove a dataset Resource From a Running Zone
    • How to Export a Dataset From a solaris Zone
• 10 Transforming Systems to Oracle Solaris Zones
  • Transforming a Global Zone Into a solaris Non-Global Zone
    • How to Check the Source System With zonep2vchk
    • How to Create an Archive of the System Image
    • How to Configure the Transformed Zone on the Target System
    • How to Install the Transformed Zone From the Archive on the Target System
• 11 Configuring and Administering Immutable Zones
  • About Immutable Zones
  • Configuring Immutable Zones
    • Setting the MWAC Security Policy
    • Zone Resource Exceptions to MWAC Security Policy
    • SMF Services in Immutable Zones
  • Administering Immutable Non-Global Zones
    • Determining Whether a Non-Global Zone Is Immutable
    • Methods for Administering Non-Global Immutable Zones
    • Administering an Immutable Zone by Using the Trusted Path Domain
      • How to Enable Administrative Access to an Immutable Zone From the Console
      • How to Enable Remote Administrative Access to an Immutable Zone by Using RAD
    • Administering an Immutable Zone by Making It Writable
  • Immutable Global Zones
    • Configuring an Immutable Global Zone
    • Maintaining an Immutable Global Zone
• 12 Troubleshooting Miscellaneous Oracle Solaris Zones Problems
  • Installation Fails Due to Unmatched Allowable Packages
  • Troubleshooting Installation
  • Exclusive-IP Zone Is Using Device, so dladm reset-linkprop Fails
  • zonecfg -r Fails
  • Troubleshooting a Zone That Has Failed
    • About Zone UUIDs
    • How to Manage a Zone That Has Become Unavailable
  • Insufficient Privileges Specified for the Zone
  • Zone Does Not Halt
  • Zone Access Denied
• 13 Oracle Solaris Zones on Shared Storage
  • About Shared Storage Resources Using Storage URIs
    • Local Device URI
    • Logical Unit URI
    • iSCSI URI
  • Managing Storage URIs and Shared Storage Resources
  • Assigning Shared Storage Resources to Oracle Solaris Zones
    • storage Property for Zones
    • rootzpool Resource
    • zpool Resource
    • Renaming Zones
    • Relocating Shared Storage Resource
  • Automated ZFS Storage Pool Management for Oracle Solaris Zones on Shared Storage Resources
  • About the unavailable Zone State on Shared Storage
  • zoneadm Options for Shared Storage
    • Options for Installing, Cloning, and Attaching Zones
      • ‐x force-zpool-import Option
      • ‐x force-zpool-create= Option
      • ‐x force-zpool-create-all Option
    • Options for Uninstalling Zones
      • ‐x force-zpool-destroy=zpoolname Option
      • ‐x force-zpool-destroy-all Option
      • ‐x force-storage-destroy-all Option
    • Restrictions on Moving a Zone With the rootzpool Resource
  • Implementing Oracle Solaris Zones Hosted on Shared Storage Resources
    • zpool Configuration Considerations for Zones on Shared Storage
    • Sample Scenarios for Zones on Shared Storage
  • Migrating Oracle Solaris Zones Hosted on Shared Storage Resources
  • Moving Existing Zones To or From Shared Storage Zone Configurations
    • How to Move a Zone to a Shared Storage Configuration
    • How to Move a Zone From a Shared Storage Configuration
    • How to Move a Zone to Different Shared Storage
    • How to Add or Move a ZFS Storage Pool to an Installed Zone
  • Zones Documentation References for Shared Storage Resources
• Glossary
• Index