Sun Virtualization: Solaris 10 Containers Administration

Transcription

1 Sun Virtualization: Solaris 10 Containers Administration Student Guide SA-355-S10 Rev A.1 D61772GC11 Edition 1.1 D65087

2 Copyright 2009, 2010, Oracle and/or its affiliates. All rights reserved. Disclaimer This document contains proprietary information, is provided under a license agreement containing restrictions on use and disclosure, and is protected by copyright and other intellectual property laws. You may copy and print this document solely for your own use in an Oracle training course. The document may not be modified or altered in any way. Except as expressly permitted in your license agreement or allowed by law, you may not use, share, download, upload, copy, print, display, perform, reproduce, publish, license, post, transmit, or distribute this document in whole or in part without the express authorization of Oracle. The information contained in this document is subject to change without notice. If you find any problems in the document, please report them in writing to: Oracle University, 500 Oracle Parkway, Redwood Shores, California USA. This document is not warranted to be error-free. Sun Microsystems, Inc. Disclaimer This training manual may include references to materials, offerings, or products that were previously offered by Sun Microsystems, Inc. Certain materials, offerings, services, or products may no longer be offered or provided.oracle and its affiliates cannot be held responsible for any such references should they appear in the text provided. Restricted Rights Notice If this documentation is delivered to the U.S. Government or anyone using the documentation on behalf of the U.S. Government, the following notice is applicable: U.S. GOVERNMENT RIGHTS The U.S. Government s rights to use, modify, reproduce, release, perform, display, or disclose these training materials are restricted by the terms of the applicable Oracle license agreement and/or the applicable U.S. Government contract. Trademark Notice Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. UNIX is a registered trademark licensed through X/Open Company, Ltd.

3 Table of Contents About This Course...Preface-i Course Goals... Preface-i Topics Not Covered...Preface-iii How Prepared Are You?...Preface-iv Introductions...Preface-v How to Use Course Materials...Preface-vi Conventions...Preface-vii Typographical Conventions... Preface-ix Additional Conventions... Preface-x Virtualization Trends in the Datacenter Objectives Additional Resources Introduction to Server Virtualization What is Server Virtualization Virtualization Benefits: the Dynamic Datacenter Virtualization Technologies by Sun Microsystems Describing Solaris Zones and Containers Objectives Additional Resources Solaris Zones Zone Features When to Use Solaris Zones Solaris Zones and Solaris Containers Guidelines for Deploying Solaris Containers Zone Concepts Zone Types Zone Daemons Zone Models Zone Networking Zone States Creating, Installing and Booting Zones vii

4 Objectives Additional Resources Configuring Zones Using the zonecfg Command to Configure Zones Identifying the zonecfg Command Scope Using zonecfg Subcommands Using zonecfg Resource and Property Parameters Zone Configuration Walk-Through Viewing the Zone Configuration Exporting the Zone Configuration Using the zoneadm Command Verifying a Configured Zone Installing a Configured Zone Booting a Zone Rebooting a Zone Halting a Zone Using the zlogin Command Modes of Operation Logging In to the Zone s Virtual Console First Time Using Failsafe Mode to Access a Zone Using the init Command Using the shutdown Command Using an /etc/sysidcfg File to Perform Initial Zone System Identification Connecting Storage to Zones Objectives Additional Resources Storage in Non-Global Zones Direct Attached Storage, Network Attached Storage, and Storage Area Networks Assigning File Systems to Zones Unmounting File Systems from Zones Working With Loopback File Systems (LOFS) Working With Solaris ZFS File Systems Working With UNIX File Systems Working With Network File Systems Security Restrictions and File System Behavior Additional File System Considerations Accessing Direct Devices Using the -o nosuid Option Mounting Read-Only File Systems Sharing File Systems Managing Packages and Patches Within Zones Objectives Additional Resources viii Sun Virtualization: Solaris 10 Containers Administration

5 Package Management and Solaris Zones Technology How Zone State Affects Package Operations Package Parameters for Zones Adding Packages in Zones Using pkgadd in the Global Zone Using pkgadd in a Non-Global Zone Removing Packages from Zones Using pkgrm in the Global Zone Using pkgrm in a Non-Global Zone Adding Patches in Zones Using patchadd in the Global Zone Using Parallel Patching to Reduce Patching Time Using patchadd in a Non-Global Zone Removing Patches from Zones Using patchrm in the Global Zone Using patchrm in a Non-Global Zone Upgrading Systems With Non-Global Zones Installed Configuring Persistent Resource Pools Objectives Additional Resources Introducing Resource Management Resource Containment Resource Management Control Mechanisms Managing Workloads Defining Workloads Introducing Resource Pools When to Use Resource Pools Resource Pools Framework The Pool Daemon The /etc/pooladm.conf Configuration File Implementing Pools on a System Configuring Resource Pools Enabling and Disabling the Resource Pools Service Configuring Pools Moving CPUs Between Processor Sets Validate a Configuration Binding to a Resource Pool Monitoring Statistics for Pool-Related Resources Remove a Pools Configuration Configuring Resource Management With Zones Objectives Additional Resources Introducing Resource Management With Zones Enhancing Solaris Containers With Newer Solaris 10 Features Used With zonecfg ix

6 Managing Scheduling Classes and the Fair Share Scheduler Describing CPU Shares Combining FSS With Other Scheduling Classes Configuring FSS Configuring CPU Shares for Zones Using the cpu-shares Zone Property Using prctl to Configure CPU Shares Monitoring the Effect of CPU Shares Using prstat Configuring Temporary Resource Pools Using the dedicated-cpu Zone Resource Displaying Temporary Resource Pool Configurations Configuring the capped-cpu Resource for Zones Configuring Memory Capping for Zones How Resource Capping Works Resource Capping Guidelines Enabling and Disabling the rcap Service Using zonecfg to Configure Memory Caps Using rcapadm to Configure Memory Caps Monitoring the Effect of Memory Caps Using rcapstat Setting the Memory Cap Enforcement Threshold Performing Zone Advanced Network Management Objectives Additional Resources Introducing IPMP Using IPMP on a System With Zones Installed IPMP in Shared-IP Zones IPMP in Exclusive-IP Non-Global Zones Renaming, Moving, Cloning, and Migrating Zones Objectives Additional Resources Renaming a Zone Moving a Zone Cloning a Zone Clone a Zone Migrating a Zone Migrate a Non-Global Zone How to Validate a Zone Migration Before the Migration Is Performed Performing Zone Backups and Restores Objectives Additional Resources Creating Backups on Systems With Installed Zones Relating Non-Global Zone Configurations to Backup and Recovery Requirements x Sun Virtualization: Solaris 10 Containers Administration

7 Making Zone Backups From the Global Zone Making Backups From Within a Non-Global Zone Backing Up Loopback File System Directories Saving and Restoring Non-Global Zone Configuration Information Recovering Individual Non-Global Zones Configuring the lx Branded Zone Objectives Additional Resources Branded Zones Technology Linux Distribution Support Planning the lx Branded Zone Configuration System and Space Requirements Branded Zone Network Address Managing the lx Branded Zone Resources Determining the Zone Name and Zone Path Configuring the lx Branded Zone Configuring the lx Branded Zone Walk-Through Displaying the Configuration of a Branded Zone Installing the lx Branded Zone Obtaining the Linux Archives lx Branded Zone Software Installation Walk-Through Booting the lx Branded Zone Boot an lx Branded Zone Enable Networking in an lx Branded Zone Administering Applications in lx Branded Zones IPMP Overview... A-1 Objective... A-1 Introducing IPMP... A-1 Probe-Based IPMP... A-2 Configuring Probe-Based IPMP Using the Command Line... A-4 Link-Based IPMP Configuration... A-10 Configuring Link-Based IPMP Using Files... A-10 xi

8