[zones-discuss] zone filesystems not mounting

2012-08-08 Thread John D Groenveld
This morning's zoneadm -z search-1 attach -F and boot tripped over a funky mount: [Wednesday, August 8, 2012 10:56:46 AM EDT] Mounting rpool/var/zones/search-1/rpool/export at /tmp/tmp.zxa40u/export with ZFS temporary mount [Wednesday, August 8, 2012 10:56:46 AM EDT] Mounting

Re: [zones-discuss] zone filesystems not mounting

2012-08-08 Thread John D Groenveld
In message 5022a3bf.3080...@oracle.com, Mike Gerdts writes: Do you say race condition because you had something else (find, backups, etc.) that was crawling /tmp at the same time? Or is there something in Solaris th at you are saying raced against this temporary mount? How would things be

[zones-discuss] S11 zoneadm attach when pkg.Oracle.COM is unreachable?

2012-01-16 Thread John D Groenveld
Does attach -F ignore issues with reaching the repo? 1: Framework stall: URL: 'http://pkg.oracle.com/solaris/support/solaris/catalog/1/catalog.attrs'. (happened 2 times) 2: Framework error: code: 28 reason: Operation too slow. Less than 1024 bytes/sec transfered the last 30 seconds URL:

Re: [zones-discuss] S11 zone bug with migrated rpool/export ZFS

2012-01-05 Thread John D Groenveld
In message 20120103234407.gq24...@ultra24.us.oracle.com, Mike Gerdts writes: - The disk is busy doing other things such that these reads from the zone's /export/home are pretty slow to return? I was still sending the previous night's ZFS snapshots over the WAN. In any case, please let me

[zones-discuss] S11 zone bug with migrated rpool/export ZFS

2012-01-03 Thread John D Groenveld
I migrated my S11x system to S11 11/11 a few weeks ago and things have been running fine. I'm at S11 update 2a. However, I seem to have tripped over a bug on New Years. My nightly backup consist of zone shutdown, detach, snapshot, attach, boot. On Sunday the zone's filesystem-local svc could

Re: [zones-discuss] S11 zone bug with migrated rpool/export ZFS

2012-01-03 Thread John D Groenveld
In message 201201031705.q03h5uwi000...@elvis.arl.psu.edu, John D Groenveld wr ites: My nightly backup consist of zone shutdown, detach, snapshot, attach, boot. Here's the output from that cron: Progress being logged to /var/log/zones/zoneadm.20120101T021243Z.search-1.attach Attaching

Re: [zones-discuss] S11 zone bug with migrated rpool/export ZFS

2012-01-03 Thread John D Groenveld
In message 20120103203031.gl24...@ultra24.us.oracle.com, Mike Gerdts writes: Can you provide the following: %--- zfs list -o name,mountpoint,canmount,mounted -r rpool/var/zones/search-1 # zfs list -o name,mountpoint,canmount,mounted -r rpool/var/zones/search-1 NAME

Re: [zones-discuss] S11 zone bug with migrated rpool/export ZFS

2012-01-03 Thread John D Groenveld
In message 201201031723.q03hnbfr001...@elvis.arl.psu.edu, John D Groenveld writes: Lots of evil in attach log: [Sun Jan 1 21:11:30 EST 2012] Mounting rpool/var/zones/search-1/rpool/export/home at /tmp/tmp.7kayqJ/export/home with ZFS temporary mount cannot unmount '/tmp/tmp.7kayqJ/export/home

Re: [zones-discuss] S11 zone bug with migrated rpool/export ZFS

2012-01-03 Thread John D Groenveld
In message 20120103220311.go24...@ultra24.us.oracle.com, Mike Gerdts writes: It kinda sounds like something from the global zone had stepped into some filesystems that were temporarily mounted during an attach process. This is backed up by the evil in the attach log: Lots of evil in attach

Re: [zones-discuss] Problem booting Solaris 10 zone imported form Solaris 11 express

2011-12-14 Thread John D Groenveld
In message 4ee8c056.9060...@oracle.com, Enda O'Connor writes: actually, further to Mike's reply on how to reverse dsconvert, the message above should not have happened if zone was at update 9 level, as update 9 has 142909-17/142910-17, are you sure the zone was at update 9 kernel? And which

Re: [zones-discuss] Problem booting Solaris 10 zone imported form Solaris 11 express

2011-12-14 Thread John D Groenveld
In message 4ee8ef69.6010...@ianshome.com, Ian Collins writes: -U? There isn't a documented -U option. URL:http://docs.oracle.com/cd/E23823_01/html/816-5166/zoneadm-1m.html#scrolltoc For native zones, zoneadm checks package and patch lev- els on the machine to which the zone

Re: [zones-discuss] Problem booting Solaris 10 zone imported form Solaris 11 express

2011-12-13 Thread John D Groenveld
In message 4ee8183b.2050...@ianshome.com, Ian Collins writes: The zone originally came from a Solaris 10 update 9 system. How do I go about patching it? Can you v2v the zone back to an S10 system and then apply the latest patches there? John groenv...@acm.org

Re: [zones-discuss] Old publishers stopping zoneadm attach -u in Solaris 11?

2011-11-09 Thread John D Groenveld
In message 4ebb2534.80...@ianshome.com, Ian Collins writes: I have removed all reference to them in the global zone: # pkg publisher PUBLISHER TYPE STATUS URI solaris origin online http://pkg.oracle.com/solaris/release/ IIRC I

Re: [zones-discuss] S10 zone migration with pax(1)

2011-06-16 Thread John D Groenveld
In message 20110616022827.ga3...@mgerdts-laptop.us.oracle.com, Mike Gerdts wr ites: A quick look suggests that the differences between your 'pax -r' args and what attach uses is '-@ -p e'. See install_pax() in /usr/lib/brand/shared/common.ksh. If you update this line: ( cd $ARCHIVE_BASE

[zones-discuss] S10 zone migration with pax(1)

2011-06-15 Thread John D Groenveld
Following this recipe to migrate my non-global S10 zones to S11X: URL:http://download.oracle.com/docs/cd/E19963-01/html/821-1460/gjroc.html cpio(1) fails due = 8GB filesize limit. (See largefile(5).) Using pax results in a zone with foobar'd permissions. S10# pax -w -@ -p e -x xustar -f

Re: [zones-discuss] VirtualBox bridge nic in a zone

2011-01-25 Thread John D Groenveld
In message 547133454.11296012653482.JavaMail.Twebapp@sf-app1, Benji writes: I created a second VNIC, vboxzone1, inside the global zone. I added that secon By VNIC, I meant Crossbow VNIC, not VirtualBox NIC. In global: # dladm create-etherstub etherstub0 # dladm create-vnic vnic0 # dladm

Re: [zones-discuss] Security through virtualization is a failure:

2010-12-28 Thread John D Groenveld
In message 1012850535.101293547415032.javamail.tweb...@sf-app1, Orvar Korvar writes: (I have also considered installing Sunray software in a local zone, but that m eans all SunRay users are collected into one local zone. And they all run soft I assume there's documentation for load balancing Sun

Re: [zones-discuss] Security through virtualization is a failure:

2010-12-27 Thread John D Groenveld
In message 1922922131.01293446116372.javamail.tweb...@sf-app1, Orvar Korvar w rites: BTW, My original plan does not work. I have SunRay clients, which means I can not shutdown the global zone's NIC - because then the SunRay will stop functio n. I must somehow separate local zones traffic, from

Re: [zones-discuss] unable to upgrade from b111 to b134

2010-12-22 Thread John D Groenveld
In message aanlkti=by3uj7pz_qns17s-py37=e_cpkvjqrzuei...@mail.gmail.com, gera rd henry writes: i have a sun x4150 with 4 zones (b111). I want to upgrade to b134, before upgrading to S11express. The process fails. As a workourand, i'm trying to move zones on another server in b134. So i'm tryng to

Re: [zones-discuss] unable to upgrade from b111 to b134

2010-12-22 Thread John D Groenveld
In message 4d127340.5050...@ianshome.com, Ian Collins writes: What happens if you detach the zones, upgrade and then reattach with -u? I think he's got two problems: his ZBEs in the detach zones aren't (un)mounted properly and his ZBEs are clones and the snapshots are confusing the hell out of

Re: [zones-discuss] Possible to use zones for hardening? Security?

2010-11-27 Thread John D Groenveld
In message 1481154627.91285535031577.javamail.tweb...@sf-app1, Orvar Korvar w rites: Ok, so I shut down e1000g0 which means my global zone can not access internet. The local zone will have e1000g0:1 which I do not shut down, which means the local zone can access internet. Correct? Works for me.

Re: [zones-discuss] Possible to use zones for hardening? Security?

2010-11-25 Thread John D Groenveld
In message aanlkti=fhh7pknmc1vhztcgvyuofpe1fsft1j5r7r...@mail.gmail.com, Petr Benes writes: Hmm. VBox obviously needs to be installed in the global zone before. Is running it in a local zone significantly safer? Yep for separating different possible users, but it won't make running guests safer

Re: [zones-discuss] Unable to add physical device to new zone

2010-11-18 Thread John D Groenveld
In message 4ce45077.3080...@ianshome.com, Ian Collins writes: zone 'test': WARNING: unable to add network interface 'rge0': link busy zone 'test': failed to add network device: Device busy Any ideas? Shot in the dark, does NWAM have a hold of it? Assuming you have console access: # svcadm

Re: [zones-discuss] All zones continuously core dump after upgrade to Solaris Express

2010-11-18 Thread John D Groenveld
In message 4ce57afe.9070...@ianshome.com, Ian Collins writes: I run through the upgrade process on a system with half a dozen zones and on restart, they all get locked into a core dump/restart loop: Nov 19 07:57:50 i7 genunix: [ID 729207 kern.warning] WARNING: init(1M) for zone webhost (pid

[zones-discuss] recovery from removal of entire

2010-03-23 Thread John D Groenveld
I have a build 129 installation with a few zones that will not attach because I removed entire from global. Yes, I know entire is required. I can upgrade to 134, but I'm not sure how that will work if my zones are detached. I don't care if I can't downgrade back to 129, but I do need to get

Re: [zones-discuss] recovery from removal of entire

2010-03-23 Thread John D Groenveld
In message 201003231416.o2negw0f024...@elvis.arl.psu.edu, John D Groenveld wr ites: I have a build 129 installation with a few zones that will not attach because I removed entire from global. Yes, I know entire is required. I restored /var/pkg/state/installed from my snapshot and zfs mounted

Re: [zones-discuss] ERROR: no active dataset. w/ migration from Indiana snv_125 to Indiana snv_127

2009-12-01 Thread John D Groenveld
In message 4b145e73.3080...@sun.com, Jerry Jelinek writes: Thats not a workaround, thats what you have to do if you want to set [snipped] Thank you for the detailed explanation. Work-around or not its documented here the next time someone stumbles across the error, at least until the

Re: [zones-discuss] ERROR: no active dataset. w/ migration from Indiana snv_125 to Indiana snv_127

2009-11-30 Thread John D Groenveld
In message 4b141dac.7060...@sun.com, Jerry Jelinek writes: The workaround for what? On snv_127, zfs receive does not mount the zbe and zoneadm attach fails until its mounted: # uname -v snv_127 # zfs receive -d rpool /var/tmp/foo.snapshot # zonecfg -z foo create -a /var/opt/zones/foo # zfs get