Friday, June 11, 2010

Solaris Zoning

This example to create a zoning server on solaris 10.

# zoneadm list -vc
ID NAME STATUS PATH
0 global running /

# zonecfg -z buaya
buaya: No such zone configured
Use 'create' to begin configuring a new zone.
zonecfg:buaya> create
zonecfg:buaya> set zonepath=/export/home/buaya
zonecfg:buaya> set autoboot=false
zonecfg:buaya> add net
zonecfg:buaya:net> set address=192.168.1.2
zonecfg:buaya:net> set physical=bge0
zonecfg:buaya:net> end
zonecfg:buaya> verify
zonecfg:buaya> exit

# zoneadm list -vc
ID NAME STATUS PATH
0 global running /
- buaya configured /export/home/buaya

# zoneadm -z buaya install
Preparing to install zone .
Creating list of files to copy from the global zone.
Copying <2467> files to the zone.
Initializing zone product registry.
Determining zone package initialization order.
Preparing to initialize <1300> packages on the zone.
Initialized <1300> packages on zone.
Zone is initialized.
The file contains a log of the zone installation.

# zoneadm -z buaya boot
zoneadm: zone 'buaya': WARNING: bge0:1: no matching subnet found in netmasks(4) for 192.168.1.2; using default of 255.255.255.0.

# ifconfig -a
lo0: flags=2001000849 mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
lo0:1: flags=2001000849 mtu 8232 index 1
zone buaya
inet 127.0.0.1 netmask ff000000
bge0: flags=1004843 mtu 1500 index 2
inet 172.30.190.106 netmask ffffff00 broadcast 172.30.190.255
ether 0:16:17:9f:f:55
bge0:1: flags=1000843 mtu 1500 index 2
zone buaya
inet 192.168.1.2 netmask ffffff00 broadcast 192.168.1.25


# zlogin -C buaya
[Connected to zone 'buaya' console]


Select a Locale

0. English (C - 7-bit ASCII)
1. Hindi UTF-8
2. Thai TIS620
3. Thai UTF-8
4. Go Back to Previous Screen

Please make a choice (0 - 4), or press h or ? for help:


What type of terminal are you using?
1) ANSI Standard CRT
2) DEC VT52
3) DEC VT100
4) Heathkit 19
5) Lear Siegler ADM31
6) PC Console
7) Sun Command Tool
8) Sun Workstation
9) Televideo 910
10) Televideo 925
11) Wyse Model 50
12) X Terminal Emulator (xterms)
13) CDE Terminal Emulator (dtterm)
14) Other

Type the number of your choice and press Return: 3
Creating new rsa public/private host key pair
Creating new dsa public/private host key pair

- Host Name for bge0:1 ---------------------------------------------------------

Enter the host name which identifies this system on the network. The name
must be unique within your domain; creating a duplicate host name will cause
problems on the network after you install Solaris.

A host name must have at least one character; it can contain letters,
digits, and minus signs (-).


Host name for bge0:1 buaya

--------------------------------------------------------------------------------
Esc-2_Continue Esc-6_Help


- Confirm Information for bge0:1 -----------------------------------------------

> Confirm the following information. If it is correct, press F2;
to change any information, press F4.

Host name: buaya


--------------------------------------------------------------------------------
Esc-2_Continue Esc-4_Change Esc-6_Help


- Configure Security Policy: ---------------------------------------------------

Specify Yes if the system will use the Kerberos security mechanism.

Specify No if this system will use standard UNIX security.

Configure Kerberos Security
---------------------------
[ ] Yes
[X] No

--------------------------------------------------------------------------------
Esc-2_Continue Esc-6_Help


- Confirm Information ----------------------------------------------------------

> Confirm the following information. If it is correct, press F2;
to change any information, press F4.


Configure Kerberos Security: No

--------------------------------------------------------------------------------
Esc-2_Continue Esc-4_Change Esc-6_Help


- Name Service -----------------------------------------------------------------

On this screen you must provide name service information. Select the name
service that will be used by this system, or None if your system will either
not use a name service at all, or if it will use a name service not listed
here.

> To make a selection, use the arrow keys to highlight the option
and press Return to mark it [X].


Name service
------------
[ ] NIS+
[ ] NIS
[ ] DNS
[ ] LDAP
[X] None

--------------------------------------------------------------------------------
Esc-2_Continue Esc-6_Help


- Confirm Information ----------------------------------------------------------

> Confirm the following information. If it is correct, press F2;
to change any information, press F4.


Name service: None

--------------------------------------------------------------------------------
Esc-2_Continue Esc-4_Change Esc-6_Help


- Time Zone --------------------------------------------------------------------

On this screen you must specify your default time zone. You can specify a
time zone in three ways: select one of the continents or oceans from the
list, select other - offset from GMT, or other - specify time zone file.

> To make a selection, use the arrow keys to highlight the option and
press Return to mark it [X].


Continents and Oceans
----------------------------------
- [ ] Africa
¦ [ ] Americas
¦ [ ] Antarctica
¦ [ ] Arctic Ocean
¦ [X] Asia
¦ [ ] Atlantic Ocean
¦ [ ] Australia
¦ [ ] Europe
v [ ] Indian Ocean

--------------------------------------------------------------------------------
Esc-2_Continue Esc-6_Help


- Country or Region ------------------------------------------------------------

> To make a selection, use the arrow keys to highlight the option and
press Return to mark it [X].


Countries and Regions
------------------------
^ [ ] Israel
¦ [ ] Japan
¦ [ ] Jordan
¦ [ ] Kazakhstan
¦ [ ] Korea (North)
¦ [ ] Korea (South)
¦ [ ] Kuwait
¦ [ ] Kyrgyzstan
¦ [ ] Laos
¦ [ ] Lebanon
¦ [ ] Macao
¦ [X] Malaysia
v [ ] Mongolia

--------------------------------------------------------------------------------
Esc-2_Continue Esc-6_Help


- Time Zone --------------------------------------------------------------------

> To make a selection, use the arrow keys to highlight the option and
press Return to mark it [X].


Time zones
-----------------------
[X] peninsular Malaysia
[ ] Sabah & Sarawak

--------------------------------------------------------------------------------
Esc-2_Continue Esc-6_Help


- Confirm Information ----------------------------------------------------------

> Confirm the following information. If it is correct, press F2;
to change any information, press F4.


Time zone: peninsular Malaysia
(Asia/Kuala_Lumpur)

--------------------------------------------------------------------------------
Esc-2_Continue Esc-4_Change Esc-6_Help


- Root Password ----------------------------------------------------------------

Please enter the root password for this system.

The root password may contain alphanumeric and special characters. For
security, the password will not be displayed on the screen as you type it.

> If you do not want a root password, leave both entries blank.


Root password: ********
Root password: ********

--------------------------------------------------------------------------------
Esc-2_Continue Esc-6_Help


System identification is completed.


This system is configured with NFS version 4, which uses a domain
name that is automatically derived from the system's name services.
The derived domain name is sufficient for most configurations. In a
few cases, mounts that cross different domains might cause files to
be owned by "nobody" due to the lack of a common domain name.

Do you need to override the system's default NFS version 4 domain
name (yes/no) ? [no] : no

For more information about how the NFS version 4 default domain
name is derived and its impact, refer to the man pages for nfs(4)
and nfsmapid(1m), and the System Administration Guide: Network
Services.

rebooting system due to change(s) in /etc/default/init


[NOTICE: Zone rebooting]


SunOS Release 5.10 Version Generic_118855-33 64-bit
Copyright 1983-2006 Sun Microsystems, Inc. All rights reserved.
Use is subject to license terms.
Hostname: buaya

SunOS Release 5.10 Version Generic_118855-33 64-bit
Copyright 1983-2006 Sun Microsystems, Inc. All rights reserved.
Use is subject to license terms.
Hostname: buaya

buaya console login:

(press ~. to back to main server.)

# zoneadm list -vc
ID NAME STATUS PATH
0 global running /
2 buaya running /export/home/buaya

No comments: