Enhancements in Solaris Container Manager May 2007 Sun Microsystems, Inc.

Transcription

1 Enhancements in Solaris Container Manager May 2007 Sun Microsystems, Inc.

2 Copyright 2007 Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, California 95054, U.S.A. All rights reserved. U.S. Government Rights - Commercial software. Government users are subject to the Sun Microsystems, Inc. standard license agreement and applicable provisions of the FAR and its supplements. Use is subject to license terms. This distribution may include materials developed by third parties. Parts of the product may be derived from Berkeley BSD systems, licensed from the University of California. UNIX is a registered trademark in the U.S. and in other countries, exclusively licensed through X/Open Company, Ltd. X/Open is a registered trademark of X/Open Company, Ltd. Sun, Sun Microsystems, the Sun logo, Solaris, and OpenSolaris are trademarks or registered trademarks of Sun Microsystems, Inc. in the U.S. and other countries. This product is covered and controlled by U.S. Export Control laws and may be subject to the export or import laws in other countries. Nuclear, missile, chemical biological weapons or nuclear maritime end uses or end users, whether direct or indirect, are strictly prohibited. Export or reexport to countries subject to U.S. embargo or to entities identified on U.S. export exclusion lists, including, but not limited to, the denied persons and specially designated nationals lists is strictly prohibited. DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. 2

3 Table of Contents Introduction...4 Zone Management Enhancements...4 Zone Rename...5 Zone Move...6 Zone Clone...7 Zone Migration...9 Copy With Contents...10 Confirmable Privileges for Non-Global Zones...11 Other Enhancements...13 Alarm Enhancements...13 Search Feature...16 Known Issues...17 Summary...17 References

4 Introduction This document highlights the prominent new features and enhancements to SolarisTM Container Manager. Note: This document is intended for IT managers, system administrators, and architects in organizations using or planning to use the Solaris Container Manager solution. It assumes that readers are familiar with the installation, setup, and use of the software. Solaris Container Manager is an integral part of SunTM Management Center software, and it is shipped with the Sun Management Center software as an add-on product. Solaris Container Manager works in a browser-based console to manage software containers, and it helps to maximize resource utilization and increase data center productivity. The Solaris 10 11/06 OS (also called Update 3) provides additional zone management features, such as zone rename, zone move, zone clone, zone migration, and zone privilege management. This Solaris release enhances the Solaris Container Manager software and provides support for these new features. This Solaris release also provides some enhancements, such as the addition of zone search, the addition of improved alarm management functionality, and the introduction of a new feature to the zone copy operation called copy with contents. These enhancements are available as a patch <SCM Patch 1258>, which you can apply to an existing Solaris Container Manager installation. (Patch IDs are , , , , and ) For more information about Solaris Container Manager and the content presented in this document, see the References section. 4

5 Zone Management Enhancements This section outlines the key zone management enhancements in Solaris Container Manager. These enhancements and additional zone management features are described in Table 1. Table 1: Zone Management Features Feature Description Rename This feature allows you to rename an existing zone to a new name. Move This feature allows you to change a zone path to a user-specified path. Clone This feature allows you to clone an existing zone. Migration This feature allows you to migrate a selected zone from the source system to the target system. Detach This feature allows you to detach a zone. Attach This feature allows you to attach a zone. Privilege Configuration This feature allows you to configure zone privileges when you create a new zone. Zone Rename Zone rename is an additional feature in Solaris 10 Update 3, which allows you to rename a non-global zone. For more information, refer to System Administration Guide: Solaris Containers-Resource Management and Solaris Zones ( The Solaris Container Manager user interface (UI) allows you to select a particular zone and change the zone name by navigating to the zone's Properties tab. For zones hosted on machines that are not running Solaris 10 Update 3, the Zone Name field is disabled. Figure 1 illustrates the zone rename feature. 5

6 Figure 1: Zone Rename Zone Move Zone move enables non-global zones to be relocated from one zone path to another. For more information, refer to System Administration Guide: Solaris Containers-Resource Management and Solaris Zones ( The Solaris Container Manager UI allows you to select a particular zone and change the zone path by navigating to that zone's Properties tab. For zones hosted on machines that are not running Solaris 10 Update 3, the Zone Path field is disabled. Figure 2 illustrates the zone move feature. 6

7 Figure 2: Zone Move Zone Clone Zone clone enables administrators to create new non-global zones rapidly. For more information, refer to System Administration Guide: Solaris Containers-Resource Management and Solaris Zones ( Solaris Container Manager provides a way to clone a zone as a special case of the existing zone copy feature on the same host. A check box is provided for you to choose the clone zone option. This feature is not available for zones hosted on machines that are not running Solaris 10 Update 3. Figure 3 illustrates the clone feature. 7

8 Figure 3: Zone Clone 8

9 Zone Migration Zone migration is the process of moving an installed non-global zone from one machine to other. Manual zone migration involves many steps, such as detaching the zone on the source machine, migrating the zone archive to the target machine, reconfiguring the zone on the target machine, and attaching the zone on the target machine. With Solaris Container Manager, the entire migration process is presented as a single operation. After you select the zone to be migrated and you click the Migrate Zone button, the Zone Migrate wizard appears. This wizard allows you to select the target machines to which the zone needs to be migrated. This feature simplifies the entire migration process. Note: For the migration to succeed, the source and the target systems must be compatible with respect to the installed packages and patches. 9

10 Figure 4: Zone Migration For flexibility, the UI also allows you to carry out a detach or attach operation. Select the zone to be detached and click the Detach button to perform the detach operation. Similarly, you can initiate an attach operation that takes as input the zone to be attached and the zone path from which the zone can be configured. For more information on the detach and attach feature, refer to System Administration Guide: Solaris Containers-Resource Management and Solaris Zones ( Copy With Contents The copy with contents feature is an extension to the zone copy feature provided by Solaris Container Manager (<SCM Patch 1258>). Selecting the Copy Contents check box enables causes the entire zone to be replicated on the selected target or targets. This feature allows you to copy zones from a single source to multiple targets, as shown in Figure 5. 10

11 Figure 5: Copy With Contents Configurable Privileges for Non-Global Zones The limitpriv property of the zonecfg command can be used to specify the set of privileges that processes are limited to in a non-global zone. For more information, refer to System Administration Guide: Solaris Containers-Resource Management and Solaris Zones ( Solaris Container Manager allows you to do the following: Create a zone with fewer privileges than the default, safe set Augment the default set of privileges with additional privileges You can exclude certain default privileges by selecting among the list of privileges that are provided in Step 9 of the zone creation process in the New Zone wizard, as shown in Figure 6. The selected privileges are denied to the zone. 11

12 Figure 6: Excluding Privileges Solaris Container Manager also lets you add optional privileges to a zone in Step 10 of the zone creation process in the New Zone wizard, as shown in Figure 7. The selected privileges are granted to the zone in addition to the default privileges. 12

13 Figure 7: Adding Optional Privileges Other Enhancements This section discusses features such as alarm enhancements and the search functionality. Alarm Enhancements There are enhancements to the alarm functionality for zones and pools, in addition to the existing alarms for projects. You can configure alarms for zone state, zone CPU Threshold, and pool CPU Threshold. Both zone and pool alarms are visible on the Open Alarms page. Also, propagation of zone alarms and pool alarms is visible in the tree up to the zone node. Figure 8 shows where you configure a pool alarm, Figure 9 shows where you configure a zone alarm, Figure 10 shows zone propagation information, and Figure 11 shows the Open Alarms page. 13

14 Figure 8: Pool Alarm 14

15 Figure 9: Zone Alarm 15

16 Figure 10: Zone Alarm Propagation Figure 11: Open Alarms 16

17 Search Feature The search operation helps you locate zones based on the zone name, which you can specify as a wild card or by specifying other details such as host name, OS and platform, the minimum number of processors, the minimum amount of memory, or the clock speed. This feature enables you to select zones according to your requirements, as shown in Figure 12. Figure 12: Search Feature Known Issues The following is a list of known issues. Fixes are in progress and are planned for future releases: Zone name and zone path cannot be changed at the same time. The workaround is to avoid changing both attributes together. Inconsistencies arise while changing zone path. A changed zone path is reflected immediately in the Properties tab, but it takes some time for the changed path to appear on the Zone Table next to that particular zone. Alarm does not get updated in the tree hierarchy on UI immediately after generation. Similarly, removing an alarm is not reflected in the tree immediately. As a workaround, you click the Open Alarms tab to apply the change. Summary Solaris Container Manager provides a richer user experience by incorporating important zone features, such as zone rename, zone move, zone migration, and zone clone. Other notable additions in this 17

18 release are the search feature and enhancements to existing alarm functionality. With the Solaris 10 11/06 OS, you will be able to use all these new features. References Please refer to the following documents for additional information about the features described in this document. Sun Management Center and Solaris OS documents on docs.sun.com. Sun Management Center User's Guide: Installing and Administering Solaris Container Manager 3.6.1: Zone rename (see "Using the zonecfg Command") Zone clone (see "Cloning a Non-Global Zone on the Same System") Zone move (see "Moving and Migrating Non-Global Zones") System Administration Guide: Solaris Containers-Resource Management and Solaris Zones: For more information, please see the IT Management hub on the BigAdmin System Administration Portal: 18