Version 1.0

1
Alcatel-Lucent SUN Virtualization
Implementations(Concepts Details)

• Version 1.0 January 27th, 2009
• IT Infrastructure Engineering
• Author Asim Zuberi

2
Good Evening!
Page 2
3
Basic Concepts
4
Basic Concepts Sun Zones
Page 4
5
Basic Concepts Sun Zones

• What is the purpose/meaning of the Russian
  Dolls?
• The technique of creating objects inside
  objects.

Page 5
6
Basic Concepts Sun Zones

• The objective of virtualization is to increase
  
• the level of utilization in pursuit of more
  value,
• efficiency and affordability

Page 6
7
Basic Concepts Sun Zones

• Solaris Zones technology, a way to virtualize
  system resources and use multiple software
  partitions with one instance of the OS.
• The Solaris Containers functionality comprises
  two main components, Solaris Zones partitioning
  technology and Resource Management tools.
• The Solaris Zones feature enables the
  administrator to create separate environments for
  running applications, while the Resource
  Management framework allows for the allocation,
  management, and accounting of system resources
  such as CPU and memory.
• Solaris Containers functionality is hardware
  independent and is available on any machine that
  will support the Solaris 10 OS.

Page 7
8
Basic Concepts Sun Zones
Two types of zones exist global and non-global.
A machine with the Solaris Zones feature
enabled has one global zone and up to 8191
non-global zones. Each zone has an ID assigned
by the system when it's booted with the global
zone, always listed as zone ID 0. Only the
global zone contains a bootable Solaris kernel
and is aware of all devices, file systems, and
other zones. The global zone is also the only
zone from which non-global zone configuration,
installation, and management are
possible. Non-global zones contain a subset of
the Solaris OS installed in the global zone and
possibly additional packages not installed in the
global zone. Each non-global zone has its own
package database listing each software package
installed relative to the zone and does not share
package information with the global or other
non-global zones.
Page 8
9
Basic Concepts Sun Zones
Page 9
10
Solaris 10 Native Zones
11
Solaris 10 Native Zones

• Step 1 to Solaris Zones - Creating Zones
• login to a system as root
• 2. check the current status of the zones using
  zoneadm command
• zoneadm list -cv
• ID NAME STATUS PATH BRAND IP
• 0 global running / native shared
• a clean system without any non-global zones
  installed.
• 3. check the interface name (e.g. ce0, ce4, gbe0,
  etc)
• 3. create a basic zone with IP address
  192.168.1.1 netmask 255.255.255.0
• zonecfg -z zone1
• zone1 No such zone configured
• Use 'create' to begin configuring a new zone.
• zonecfgzone1gt create -b
• zonecfgzone1gt set autoboottrue

Page 11
12
Solaris 10 Native Zones

• For autoboot to function, the zone service needs
  to be enabled.
• 'svcs' can be used to check the status.
• svcs a grep zones
• online 113306 svc/system/zonesdefault
• The result above shows that the zone service is
  enabled.
• If the result is otherwise (disabled), it can be
  enabled using the 'svcadm' command as below
• svcadm enable svc/system/zonesdefault
• Change the permissions on zones home dir
• chmod 700 /zones/zone1
• 5. After the 'exit' step, the zone1 zone is now
  in 'configured' state.
• zoneadm list -cv
• ID NAME STATUS PATH BRAND IP
• 0 global running / native shared

Page 12
13
Solaris 10 Native Zones

• Preparing to install zone lttzgt.
• Creating list of files to copy from the global
  zone.
• Copying lt7665gt files to the zone.
• Initializing zone product registry.
• Determining zone package initialization order.
• Preparing to initialize lt1142gt packages on the
  zone.
• Initializing package lt143gt of lt1142gt percent
  complete 12
• 7. At this state, the state of zone1' zone is
  incomplete
• zoneadm list -cv
• ID NAME STATUS PATH BRAND IP
• 0 global running / native shared
• - zone1 incomplete /zones/tz native shared
• 8. Wait till initialize package is done, the
  status will change to 'installed' as shown below
• zoneadm list -cv
• ID NAME STATUS PATH BRAND IP
• 0 global running / native shared
• zone1 installed /zones/tz native shared

Page 13
14
Solaris 10 Native Zones

• 11. command below will connect to the console
• zlogin -C zone1
• Since this is the first time that this zone is
  being booted up,
• some initial configurations needs to be
  performed
• After the reboot, the root prompt will appear and
  ready for login
• 14. Checking the interface
• ifconfig -a

ce0 flags1000843ltUP,BROADCAST,RUNNING,MULTICAST,
IPv4gt mtu 1500 index 2 inet 192.168.1.2
netmask ffffff00 broadcast 135.1.211.255
ether 0144fad46e2 ce01 flags1000843ltUP,BRO
ADCAST,RUNNING,MULTICAST,IPv4gt mtu 1500 index 2
zone zone1 inet 192.168.1.1 netmask
ffffff00 broadcast 135.1.211.255 ce02
flags1000843ltUP,BROADCAST,RUNNING,MULTICAST,IPv4gt
mtu 1500 index 2 zone zone3 inet
192.168.1.3 netmask ffffff00 broadcast
135.1.211.255
Page 14
15
Solaris 10 Native Zones
15. To shutdown the zone, issue the command
(assuming from global zone) zlogin zone1
shutdown -y -i0 -g0 (remember the console
terminal you've? Look at that and you'll see the
interesting following) zoneadm z zone1 halt
Page 15
16
Solaris 10 Native Zones Lessons Learned From
Experience

• zonecfgzone1gt create b
• The -b option would make non-global zone
  completely independent of the global zone.
• Also known as whole root zone.
• By default, zonecfgzone1gt create command
  creates spares root zones by inheriting following
• package dirs

inherit-pkg-dir dir /lib inherit-pkg-dir dir
/platform inherit-pkg-dir dir /sbin
inherit-pkg-dir dir /usr
Page 16
17
Solaris 10 Native Zones Lessons Learned From
Experience

• zonecfgzone1gt set zonepath/zones/zone1
• Set zonepath/zones/zone1 on a dedicated LUN
  or Disk.
• Create a ufs filesystem on /zones/zone1
• Encapsulate the /zones/zone1 under VRTS
  control for redundancy or clustering.

Page 17
18
Solaris 10 Branded Zones
19
Solaris 10 Branded Zones (Solaris 8)
Creating the Image for Directly Migrating Solaris
8 Systems Into Zones s8-system
flarcreate -S -n s8-system /net/s10system/export/s
8-system.flar Determining which
filesystems will be included in the archive...
Creating the archive... cpio File size
of "etc/mnttab" has increased by 435
2068650 blocks 1 error(s) Archive
creation complete.
Page 19
20
Solaris 10 Branded Zones (Solaris 8)
Installing the Solaris 8 Migration Assistant 1.0
Software on the Solaris 10 Host System global
patchadd -G 127111-01 patchadd -p grep
127111-01 Install the packages SUNWs8brandr and
SUNWs8brandu in the following order. pkgadd -d
/path/to/media SUNWs8brandr pkgadd -d
/path/to/media SUNWs8brandu
Page 20
21
Solaris 10 Branded Zones (Solaris 8)
zonecfg -z zone2 zonecfgzone2gt create -t
SUNWsolaris8 zonecfgzone2gt set
zonepath/zones/zone2 zonecfgzone2gt set
autoboottrue zonecfgzone2gt add
net zonecfgzone2netgt set address10.6.10.23/23 z
onecfgzone2netgt set physicalbge0 zonecfgzone2
netgt end zonecfgzone2gt add fs zonecfgzone2fsgt
set typelofs zonecfgzone2fsgt set
special/share/zone/zone2 zonecfgzone2fsgt set
dir/export/shared zonecfgzone2fsgt
end zonecfgzone2gt add attr zonecfgnewzoneattrgt
set namehostid zonecfgzone2attrgt set
typestring zonecfgnewzoneattrgt set
value8325f14d zonecfgzone2attrgt
end zonecfgzone2gt verify Commit the zone
configuration for the zone. zonecfgzone2gt
commit zonecfgzone2gt exit global zonecfg -z
zone2 info
Page 21
22
Solaris 10 Branded Zones (Solaris 8)
global zoneadm -z zone2 install -u -a
/net/server/s8_image.flar global zoneadm list
-cv ID NAME STATUS PATH
BRAND IP 0 global running
/ native
shared - zone2 configured /export/home/zone2
solaris8 shared global zoneadm -z
my-zone uninstall global zoneadm list
-cv global zoneadm -z zone2 boot global zoneadm
list v
Page 22
23
Solaris 10 Branded Zones (Solaris 9)
Installing the Solaris 9 Migration Assistant 1.0
Software on the Solaris 10 Host System global
patchadd -G 127111-01 patchadd -p grep
127111-01 Install the packages SUNWs9brandr and
SUNWs9brandu in the following order. pkgadd -d
/path/to/media SUNWs9brandr pkgadd -d
/path/to/media SUNWs9brandu pkgadd d
/path/to/media SUNWs9brandk
Page 23
24
Solaris 10 Branded Zones (Solaris 9)
zonecfg -z zone3 zonecfgzone3gt create -t
SUNWsolaris9 zonecfgzone3gt set
zonepath/zones/zone3 zonecfgzone3gt set
autoboottrue zonecfgzone3gt add
net zonecfgzone3netgt set address10.6.10.23/23 z
onecfgzone3netgt set physicalbge0 zonecfgzone3
netgt end zonecfgzone3gt add fs zonecfgzone3fsgt
set typelofs zonecfgzone3fsgt set
special/share/zone/zone3 zonecfgzone3fsgt set
dir/export/shared zonecfgzone3fsgt
end zonecfgzone3gt add attr zonecfgnewzoneattrgt
set namehostid zonecfgzone3attrgt set
typestring zonecfgnewzoneattrgt set
value8325f14d zonecfgzone3attrgt
end zonecfgzone3gt verify Commit the zone
configuration for the zone. zonecfgzone3gt
commit zonecfgzone3gt exit global zonecfg -z
zone3 info
Page 24
25
Solaris 10 Branded Zones (Solaris 9)
Creating the Image for Directly Migrating Solaris
8 Systems Into Zones s9-system
flarcreate -S -n s9-system /net/s10system/export/s
9-system.flar Determining which
filesystems will be included in the archive...
Creating the archive... cpio File size
of "etc/mnttab" has increased by 435
2068650 blocks 1 error(s) Archive
creation complete.
Page 25
26
Solaris 10 Branded Zones (Solaris 9)
global zoneadm -z zone3 install -u -a
/net/server/s9_image.flar global zoneadm list
-cv ID NAME STATUS PATH
BRAND IP 0 global running
/ native
shared - zone3 configured /export/home/zone3
solaris9 shared global zoneadm -z
my-zone uninstall global zoneadm list
-cv global zoneadm -z zone3 boot global zoneadm
list v
Page 26
27
Solaris 10 Branded Zones (Solaris 8 9)
Page 27
28
Solaris 10 Branded Zones (Solaris 10 unsupported)
1. Create the directory structure /usr/lib/brand/
solaris10 /usr/lib/brand/solaris10/mods /usr/lib/b
rand/solaris10/files /usr/lib/brand/solaris10/file
s/patches
2. Copy the files from the native brand and
the Solaris 9 brand (paths are relative from
/usr/lib/brand/), as shown in Table 1.
Source Destination
native/config.xml solaris10/config.xml
native/platform.xml solaris10/platform.xml
native/postclone solaris10/postclone
solaris9/s9_install solaris10/s10_install
solaris9/s9_servicetag solaris10/s10_servicetag
solaris9/s9_support solaris10/s10_support
solaris9/s9_p2v solaris10/s10_p2v
solaris9/s9_system solaris10/s10_system
solaris9/mods/S20_install_patches solaris10/mods/S20_install_patches
solaris9/mods/S3_ solaris10/mods/S3_
solaris9/files/patches/order solaris10/files/patches/order
Page 28
29
Solaris 10 Branded Zones (Solaris 10 unsupported)

• 3. Edit the information in the following files
• a. In config.xml
• Replace brand namenative with brand
  namesolaris10.
• Replace ltinstallgt/usr/lib/lu/lucreatezone -z
  zlt/installgt with
• ltinstallgt/usr/lib/brand/solaris10/s10_install
  z R lt/installgt.
• Replace ltinstalloptsgtlt/installoptsgt with
• ltinstalloptsgtadDhpsuvVlt/installoptsgt.
• Replace ltverify_cfggtlt/verify_cfggt with
• ltverify_cfggt/usr/lib/brand/solaris10/s10_s
  upport verifylt/verify_cfggt.
• b. In platform.xml, create an additional entry
  for the loopback mounting of the /usr file system
  
• (which is necessary for applying the
  modifications later on) during bootup by adding
  the following
• ltglobal_mount special"/usr" directory"/.SUNWnati
  ve/usr" \
• type"lofs" opt"ro,nodevices" /gt
• c. In s10_install, s10_servicetag and s10_system,
  replace all occurrences of Solaris9 and s9
• with Solaris10 and s10, respectively.

Page 29
30
Solaris 10 Branded Zones (Solaris 10 unsupported)
4. Now that the brand has been created, a Solaris
10 branded zone can be configured zonecfg -z
10_zone01 create set autoboottrue set
zonepath/zones/zone4 set brandsolaris10 add
net set physicalhme0 set address10.0.0.1/24
end remove inherit-pkg-dir verify commit
The configured zone can now be installed using
a flash archive (/tmp/solaris10.flar) zoneadm
-z 10_zone01 install -p -a /tmp/solaris10.flar
Page 30
31
Solaris 10 Branded Zones (Solaris 10 unsupported)
4. Now that the brand has been created, a Solaris
10 branded zone can be configured zonecfg -z
10_zone01 create set autoboottrue set
zonepath/zones/zone4 set brandsolaris10 add
net set physicalhme0 set address10.0.0.1/24
end remove inherit-pkg-dir verify commit
The configured zone can now be installed using
a flash archive (/tmp/solaris10.flar) zoneadm
-z 10_zone01 install -p -a /tmp/solaris10.flar
Page 31
32
Solaris 10 Zones Migration

• zoneadm z zone1 halt
• zoneadm z zone1 detach
• cd /zones
• tar cvf zone1.tar zone1
• gzip -9 zone1.tar
• scp zone1.tar.gz root_at_remotehost/zones
• scp /etc/zones/zone1.xml root_at_remotehost/etc/zo
  nes/zone1.xml
• On the remote host
• cd /zones
• gzip c d zone1.tar.gz tar xvf
• zonecfg z zone1
• create a /zones/zone1
• commit
• exit

Page 32
33
Solaris 10 Zones Administration

• zoneadm z zone1 boot
• zoneadm z zone1 halt
• zlogin C zone1
• zonecfg z zone1 info
• zoneadm -z zone1 uninstall
• zonecfg -z zone1 delete
• rm -r /zones/zone1
• zonecfg -z zone1
• zonecfgzone2 add fs
• zonecfgzone1fsgt set typezfs
• zonecfgzone1fsgt set specialshare/zone/s8-zone
• zonecfgzone1fsgt set dir/export/shared
• zonecfgzone1fsgt end
• zonecfgzone1gt add attr
• zonecfgzone1attrgt set namehostid
• zonecfgzone1attrgt set typestring

Page 33
34
Solaris 10 Zones Administration

• zonecfg -z zone1
• zonecfgzone2gt select fs special/local
• zonecfgzone2 gtadd option ro
• end
• verify
• commit

Page 34
35
Solaris 10 Sun Virtual Farm
Page 35
36
Trigence Capsules
37
Trigence Capsules

• With Trigence Application Capsules, enterprises
  run their applications where they want,
• when they want and how they want.
• Trigence Capsule packages OS into an
  application capsule, creating a discrete object
  that defines
• and contains an application.
• A capsule is a secure environment. Decouples
  the application from the underlying
  infrastructure.
• Legacy Solaris vers supported Solaris 9,
  Solaris 8, Solaris 7, Solaris 2.6
• Trigence Capsule consists of two software
  components
• Capsule Creator an interactive utility that
  packages the desired application into capsules

Page 37
38
Trigence Capsules
1. How to create cpio archive using the find
cmd
For root cd / find . -depth -xdev cpio -oc
gzip dd offilename.root.cpio.gz For var
(if /var is a separate filesystem) cd /varfind .
-depth -xdev cpio -oc gzipdd
offilename.var.cpio.gz For opt (if /var is a
sepate filesystem) cd /optfind .-depth -xdev
cpio -oc gzip dd offilename.opt.cpio.gz2
. Uncpio the archives cpio
i filename.cpio
Page 38
39
Trigence Capsules
Creator
Page 39
40
Trigence Capsules
Creator
Page 40
41
Trigence Capsules
Creator
Page 41
42
Trigence Capsules
Creator
Page 42
43
Trigence Capsules
Creator
Page 43
44
Trigence Capsules
Creator
Page 44
45
Trigence Capsules
Creator
Page 45
46
Trigence Capsules
alameda-tst trictrl list Name
Type Activated
State
hostfs
HostFS Docked bolt
Virtualized
Started dudley
Virtualized Started snarg
Virtualized
Started zeus
Virtualized Started
Alameda-tst ifconfig a ce411
flags1000843ltUP,BROADCAST,RUNNING,MULTICAST,IPv4gt
mtu 1500 index 2 inet 135.1.45.2 netmask
ffffff00 broadcast 135.1.45.255 ce412
flags1000843ltUP,BROADCAST,RUNNING,MULTICAST,IPv4gt
mtu 1500 index 2 inet 135.1.45.165
netmask ffffff00 broadcast 135.1.45.255 ce413
flags1000843ltUP,BROADCAST,RUNNING,MULTICAST,IPv4gt
mtu 1500 index 2 inet 135.1.45.173
netmask ffffff00 broadcast 135.1.45.255 ce414
flags1000843ltUP,BROADCAST,RUNNING,MULTICAST,IPv4gt
mtu 1500 index 2 zone charger
inet 135.1.44.149 netmask ffffff00 broadcast
135.1.44.255
Page 46
47
Trigence Capsules
alameda-tst cd /capsules alameda-tst ls bolt
bolt.con.cc08w37b snarg
zeus.con.cc08w21d bolt.con
dudley snarg.con bolt.con.cc08w33d
dudley.con.cc08w33d zeus
Page 47
48
Transitive QuickTransit
49
Transitive QuickTransit

• Transitive's QuickTransit cross-platform
  virtualization allow applications created for one
  CPU and OS to run on different platforms.
• Support legacy Solaris vers Solaris 9,
  Solaris 8, Solaris 7, Solaris 2.6 Solaris 2.5.1

Page 49
50
Transitive QuickTransit

• Two commands
• runsparc
• linksparc

• Sample Output
• -bash-3.1 uname -a
• Linux usilnw1asp 2.6.18-92.1.10.el5 1 SMP Wed
  Jul 23 035611 EDT 2008 x86_64 x86_64 x86_64
  GNU/Linux
• -bash-3.1 runsparc
• runsparc Warning. The current working directory
  is not visible from the VSE, changing to VSE "/"
• bash-3.00 uname -a
• SunOS usilnw1asp 5.10 CO_TB08Q3BHF_BASELINE_0013
  sun4u sparc SUNW,Ultra-Enterprise
• bash-3.00

Page 50
51
Thank You!
Page 51