zfs discuss - Feb 2009 - Solaris 8/9 branded zones on ZFS root?

Hi all,

I have a situation where I need to consolidate a few servers running
Solaris 9 and 8.  If the application doesn''t run natively on Solaris
10 or Nevada, I was thinking of using Solars 9 or 8 branded zones.
My intent would be for the global zone to use ZFS boot/root; would I
be correct in thinking that this will be OK for the branded zones?
That is, they don''t care about the underlying file system type?

Or am I stuck with using UFS for the root file systems of Solaris 8
and 9 branded zones?  (I sure hpoe not!)

Many TIA,

-- 
Rich Teer, SCSA, SCNA, SCSECA

URLs: http://www.rite-group.com/rich
      http://www.linkedin.com/in/richteer

Hi Rich,

Solaris 8/9 zones seem to work fine with zfs root for the zone.

Only problem so far is where to put the root file system for the zone
in the zfs file system hierarchy.

branded zones do not seem to be part of the luupdate scheme.

At them moment I have another tree of file systems on rpool.

Problem is that the boot code doesn''t mount the root file system for
the zone when you re-boot.


Thanks

Peter


2009/2/25 Rich Teer <rich.teer at rite-group.com>:
> Hi all,
>
> I have a situation where I need to consolidate a few servers running
> Solaris 9 and 8. ?If the application doesn''t run natively on
Solaris
> 10 or Nevada, I was thinking of using Solars 9 or 8 branded zones.
> My intent would be for the global zone to use ZFS boot/root; would I
> be correct in thinking that this will be OK for the branded zones?
> That is, they don''t care about the underlying file system type?
>
> Or am I stuck with using UFS for the root file systems of Solaris 8
> and 9 branded zones? ?(I sure hpoe not!)
>
> Many TIA,
>
> --
> Rich Teer, SCSA, SCNA, SCSECA
>
> URLs: http://www.rite-group.com/rich
> ? ? ?http://www.linkedin.com/in/richteer
> _______________________________________________
> zfs-discuss mailing list
> zfs-discuss at opensolaris.org
> http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
>

Rich Teer wrote:
> I have a situation where I need to consolidate a few servers running
> Solaris 9 and 8.  If the application doesn''t run natively on
Solaris
> 10 or Nevada, I was thinking of using Solars 9 or 8 branded zones.
> My intent would be for the global zone to use ZFS boot/root; would I
> be correct in thinking that this will be OK for the branded zones?
That''s correct.  I have some solaris 8 zones running under cluster
control, where zonepath is zfs, and they''re doing just fine.
Nothing special had to be done.

-Tim

-- 
Timothy Kennedy
SDE Infrastructure Operations Manager
Email:	Timothy.Kennedy at Sun.COM
Phone:	+1-703-636-0531 / x53151
AIM/Skype: tkSUNW

Le 25 f?vr. 09 ? 23:12, Timothy Kennedy a ?crit :
> Rich Teer wrote:
>
>> I have a situation where I need to consolidate a few servers running
>> Solaris 9 and 8.  If the application doesn''t run natively on
Solaris
>> 10 or Nevada, I was thinking of using Solars 9 or 8 branded zones.
>> My intent would be for the global zone to use ZFS boot/root; would I
>> be correct in thinking that this will be OK for the branded zones?
>
> That''s correct.  I have some solaris 8 zones running under cluster
> control, where zonepath is zfs, and they''re doing just fine.
> Nothing special had to be done.

	Which ACL model is then used ?



	Nico

On Wed, 25 Feb 2009, Timothy Kennedy wrote:
> That''s correct.  I have some solaris 8 zones running under cluster
> control, where zonepath is zfs, and they''re doing just fine.
> Nothing special had to be done.
Excellent!  Just the news I was hoping for.

Thanks again,

-- 
Rich Teer, SCSA, SCNA, SCSECA

URLs: http://www.rite-group.com/rich
      http://www.linkedin.com/in/richteer

Nicolas Dorfsman wrote:
> 
>     Which ACL model is then used ?
It would seem that neither works from within the sol8 zone, although
you do have access to ZFS style ACLs from the global zone.  Trivial
ACLs set through the global zone seem to be honored by the sol8 zone.
I have not tried setting any non-trivial ACLs on the underlying ZFS,
so I can''t say whether they work as expected.

-Tim

-- 
Timothy Kennedy
SDE Infrastructure Operations Manager
Email:	Timothy.Kennedy at Sun.COM
Phone:	+1-703-636-0531 / x53151
AIM/Skype: tkSUNW

Timothy Kennedy wrote:
> 
> 
> Nicolas Dorfsman wrote:
>>
>>     Which ACL model is then used ?
> 
From: System Administration Guide: Solaris 8 Containers
( http://docs.sun.com/app/docs/doc/820-2914/gfjbk?a=view )


Using ZFS

Although the zone cannot use a delegated ZFS dataset, the zone can 
reside on a ZFS file system. You can add a ZFS file system to share with 
the global zone through the zonecfg fs resource. See Step 7 in How to 
Configure a solaris8 Branded Zone.

Note that the setfacl and getfacl commands cannot be used with ZFS. When 
a cpio or a tar archive with ACLs set on the files is unpacked, the 
archive will receive warnings about not being able to set the ACLs, 
although the files will be unpacked successfully. These commands can be 
used with UFS.

-Tim

-- 
Timothy Kennedy
SDE Infrastructure Operations Manager
Email:	Timothy.Kennedy at Sun.COM
Phone:	+1-703-636-0531 / x53151
AIM/Skype: tkSUNW

Le 26 f?vr. 09 ? 15:47, Timothy Kennedy a ?crit :
> Timothy Kennedy wrote:
>> Nicolas Dorfsman wrote:
>>>
>>>    Which ACL model is then used ?
>
> From: System Administration Guide: Solaris 8 Containers
> ( http://docs.sun.com/app/docs/doc/820-2914/gfjbk?a=view )
>
>
> Using ZFS
>
> Although the zone cannot use a delegated ZFS dataset, the zone can  
> reside on a ZFS file system. You can add a ZFS file system to share  
> with the global zone through the zonecfg fs resource. See Step 7 in  
> How to Configure a solaris8 Branded Zone.
>
> Note that the setfacl and getfacl commands cannot be used with ZFS.  
> When a cpio or a tar archive with ACLs set on the files is unpacked,  
> the archive will receive warnings about not being able to set the  
> ACLs, although the files will be unpacked successfully. These  
> commands can be used with UFS.
Thanks Timothy !


Nico