It’s been long time that  I have posted something about my funny experiments at home. Today I just spent some time to write this post for those who want to know about creating a new SMF service .  This post also covers the procedure to create a parallel sshd service which runs on non standard port (i.e. 222) instead of regular port ( i.e. 22).

Before going to actual topic, few basic points:

1. /var/svc/manifest/network –   it is the directory where we can find existing network service templates like ssh, ftp, rpc, ipsec …etc

Full Story

Create Container:

Below instructions will help you to create new solaris zone/container

1) Where will the Container reside?

 # mkdir -p /export/zones

I decided to install my Zone into /export/zones

2) Configure the Container:

Command zonecfg, located in /usr/sbin like all other Zone Commands, is used to configure the Container.

The Zone name will be sol10zone. Feel free to change the name if desired. Full Story

Instructions to Verify the Configuration of Non-global Zones:

1. The zonecfg utility creates and modifies the configuration of a zone.  Its subcommand verify can be used to verify the current configuration for correctness:

• All resources have all of their required properties specified.
• A zonepath is specified

The syntax is zonecfg -z verify.  For example, to verify the configuration of zone1, run zonecfg -z zone1 verify at the shell prompt.

2. The subcommand export of the zonecfg utility prints the zone configuration to standard out.  The syntax is zonecfg -z export.  For example, to print the configuration of zone1, run zonecfg -z zone1 export at the shell prompt.

• Ensure the specified zonepath is a valid path.
• Ensure the file system where the zonepath resides is mounted, and the nosuid option should not be used.
• Ensure that the specified resources are available.
• Ensure that lofs is not excluded in the global zone.

Full Story

The non-global zones (or zones) facility in Solaris[TM] provides an isolated environment for running applications. The zones FAQ can be found at OpenSolaris.org.

Symptoms:

Full Story

Yesterday I faced an issue, where in I was unable to login into NGZ’s after kernel patching. Though the zlogin was working perfectly.

Initially I think the cause is ssh key, then I tried to login into the NGZ from the network, it was showing ssh connection refused.

I have checked the ssh services via zlogin. There were many services related to network which were not running including ssh. All services were depending on /system/sysidtool:net service which is in disbale mode. I tried to enable /system/sysidtool:net service but No luck.

Full Story

The command, zonecfg, has no provision for defining the netmask of network resources. Modifying /etc/netmask file resident within the designated zone does not configure the netmask of the new interface. This procedure details how to set the netmask of a network resource within a zone to the desired value. Full Story