Solaris 10 Container Guide - Functionality Status up to Solaris 10 10/09 and Opensolaris 2009.06

Total Page:16

File Type:pdf, Size:1020Kb

Solaris 10 Container Guide - Functionality Status up to Solaris 10 10/09 and Opensolaris 2009.06 Solaris 10 Container Guide - Functionality status up to Solaris 10 10/09 and OpenSolaris 2009.06 - Detlef Drewanz, Ulrich Gräf, et al. Sun Microsystems GmbH Effective: 30/11/2009 Functionalities Use Cases Best Practices Cookbooks Version 3.1-en Solaris 10 Container Guide - 3.1 Effective: 30/11/2009 Table of contents Disclaimer....................................................................................................................................................VI Revision control............................................................................................................................................VI 1. Introduction................................................................................................................................................1 2. Functionality..............................................................................................................................................2 2.1. Solaris Containers and Solaris Zones................................................................................................2 2.1.1. Overview................................................................................................................................2 2.1.2. Zones and software installation..............................................................................................4 2.1.3. Zones and security.................................................................................................................4 2.1.4. Zones and privileges..............................................................................................................4 2.1.5. Zones and resource management..........................................................................................5 2.1.5.1. CPU resources...............................................................................................................................................5 2.1.5.2. Memory resource management......................................................................................................................6 2.1.5.3. Network resource management (IPQoS = IP Quality of Service)...................................................................6 2.1.6. User interfaces for zones.......................................................................................................6 2.1.7. Zones and high availability.....................................................................................................7 2.1.8. Branded zones (Linux and Solaris 8/Solaris 9 compatibility)..................................................7 2.1.9. Solaris container cluster (aka "zone cluster") ........................................................................8 2.2. Virtualization technologies compared.................................................................................................9 2.2.1. Domains/physical partitions..................................................................................................10 2.2.2. Logical partitions..................................................................................................................11 2.2.3. Containers (Solaris zones) in an OS....................................................................................12 2.2.4. Consolidation in one computer.............................................................................................13 2.2.5. Summary of virtualization technologies................................................................................14 3. Use Cases...............................................................................................................................................16 3.1. Grid computing with isolation............................................................................................................16 3.2. Small web servers............................................................................................................................17 3.3. Multi-network consolidation..............................................................................................................18 3.4. Multi-network monitoring..................................................................................................................19 3.5. Multi-network backup........................................................................................................................20 3.6. Consolidation development/test/integration/production....................................................................21 3.7. Consolidation of test systems...........................................................................................................22 3.8. Training systems..............................................................................................................................23 3.9. Server consolidation.........................................................................................................................24 3.10. Confidentiality of data and processes.............................................................................................25 3.11. Test systems for developers..........................................................................................................26 3.12. Solaris 8 and Solaris 9 containers for development.......................................................................27 3.13. Solaris 8 and Solaris 9 containers as revision systems..................................................................28 3.14. Hosting for several companies on one computer...........................................................................29 3.15. SAP portals in Solaris containers...................................................................................................30 3.16. Upgrade- and Patch-management in a virtual environment...........................................................31 3.17. "Flying zones" – Service-oriented Solaris server infrastructure......................................................32 3.18. Solaris Container Cluster (aka "zone cluster")................................................................................33 4. Best Practices.........................................................................................................................................34 4.1. Concepts..........................................................................................................................................34 4.1.1. Sparse-root zones................................................................................................................34 4.1.2. Whole-root zones.................................................................................................................34 4.1.3. Comparison between sparse-root zones and whole-root zones...........................................35 4.1.4. Software in zones.................................................................................................................35 4.1.5. Software installations in Solaris and zones..........................................................................36 II Version 3.1-en Solaris 10 Container Guide - 3.1 Effective: 30/11/2009 4.1.5.1. Software installation by the global zone – usage in all zones.......................................................................36 4.1.5.2. Software installation by the global zone – usage in a local zone...................................................................36 4.1.5.3. Software installation by the global zone – usage in the global zone..............................................................37 4.1.5.4. Installation by the local zone – usage in the local zone.................................................................................37 4.1.6. Storage concepts.................................................................................................................38 4.1.6.1. Storage for the root file system of the local zones........................................................................................38 4.1.6.2. Data storage.................................................................................................................................................38 4.1.6.3. Program/application storage.........................................................................................................................38 4.1.6.4. Root disk layout............................................................................................................................................39 4.1.6.5. ZFS within a zone.........................................................................................................................................39 4.1.6.6. Options for using ZFS in local zones............................................................................................................40 4.1.6.7. NFS and local zones.....................................................................................................................................40 4.1.6.8. Volume manager in local zones....................................................................................................................40 4.1.7. Network concepts.................................................................................................................41 4.1.7.1. Introduction into networks and zones...........................................................................................................41 4.1.7.2. Network address management
Recommended publications
  • Oracle VM Virtualbox Container Domains for SPARC Or X86
    1 <Insert Picture Here> Virtualisierung mit Oracle VirtualBox und Oracle Solaris Containern Detlef Drewanz Principal Sales Consultant SAFE HARBOR STATEMENT The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle. In addition, the following is intended to provide information for Oracle and Sun as we continue to combine the operations worldwide. Each country will complete its integration in accordance with local laws and requirements. In the EU and other non-EU countries with similar requirements, the combinations of local Oracle and Sun entities as well as other relevant changes during the transition phase will be conducted in accordance with and subject to the information and consultation requirements of applicable local laws, EU Directives and their implementation in the individual members states. Sun customers and partners should continue to engage with their Sun contacts for assistance for Sun products and their Oracle contacts for Oracle products. 3 So .... Server-Virtualization is just reducing the number of boxes ? • Physical systems • Virtual Machines Virtualizationplattform Virtualizationplattform 4 Virtualization Use Workloads and Deployment Platforms
    [Show full text]
  • Oracle Solaris Administration IP Services
    Oracle® Solaris Administration: IP Services Part No: 821–1453–11 March 2012 Copyright © 1999, 2012, Oracle and/or its affiliates. All rights reserved. This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited. The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing. If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, the following notice is applicable: U.S. GOVERNMENT END USERS. Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including anyoperating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government. This software or hardware is developed for general use in a variety of information management applications.
    [Show full text]
  • ISSN: 1804-0527 (Online) 1804-0519 (Print) Vol.8 (2), PP. 63-69 Introduction During the Latest Years, a Lot of Projects Have Be
    Perspectives of Innovations, Economics & Business, Volume 8, Issue 2, 201 1 EVALUATION OF PERFORMANCE OF SOLARIS TRUSTED EXTENSIONS USING CONTAINERS TECHNOLOGY EVALUATION OF PERFORMANCE OF GENTI DACI SOLARIS TRUSTED EXTENSIONS USING CONTAINERS TECHNOLOGY Faculty of Information Technology Polytechnic University of Tirana, Albania UDC: 004.45 Key words: Solaris Containers. Abstract: Server and system administrators have been concerned about the techniques on how to better utilize their computing resources. Today, there are developed many technologies for this purpose, which consists of running multiple applications and also multiple operating systems on the same hardware, like VMWARE, Linux-VServer, VirtualBox, Xen, etc. These systems try to solve the problem of resource allocation from two main aspects: running multiple operating system instances and virtualizing the operating system environment. Our study presents an evaluation of scalability and performance of an operating system virtualization technology known as Solaris Containers, with the main objective on measuring the influence of a security technology known as Solaris Trusted Extensions. Solaris. We will study its advantages and disadvantages and also the overhead that it introduces to the scalability of the system’s main advantages. ISSN: 1804 -0527 (online) 1804 -0519 (print) Vol.8 (2), PP. 63 -69 Introduction administration because there are no multiple operating system instances in a system. During the latest years, a lot of projects have been looking on virtualizing operating system Operating systems environments, such as FreeBSD Jail, Linux- VServer, Virtuozzo etc. This virtualization technique is based in using only one underlying Solaris/OpenSolaris are Operating Systems operating system kernel. Using this paradigm the performing as the main building blocks of computer user has the possibility to run multiple applications systems; they provide the interface between user in isolation from each other.
    [Show full text]
  • Oracle® Enterprise Manager Ops Center Security
    Oracle® Enterprise Manager Ops Center Security 12c Release 4 (12.4.0.0.0) F17675-01 April 2019 Oracle Enterprise Manager Ops Center Security, 12c Release 4 (12.4.0.0.0) F17675-01 Copyright © 2007, 2019, Oracle and/or its affiliates. All rights reserved. Primary Author: Krithika Gangadhar This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited. The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing. If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, then the following notice is applicable: U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency- specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs.
    [Show full text]
  • The Server Virtualization Landscape, Circa 2007
    ghaff@ illuminata.com Copyright © 2007 Illuminata, Inc. single user license Gordon R Haff Illuminata, Inc. TM The Server Virtualization Bazaar, Circa 2007 Inspired by both industry hype and legitimate customer excitement, many Research Note companies seem to have taken to using the “virtualization” moniker more as the hip phrase of the moment than as something that’s supposed to convey actual meaning. Think of it as “eCommerce” or “Internet-enabled” for the Noughts. The din is loud. It doesn’t help matters that virtualization, in the broad sense of “remapping physical resources to more useful logical ones,” spans a huge swath of Gordon Haff technologies—including some that are so baked-in that most people don’t even 27 July 2007 think of them as virtualization any longer. Personally licensed to Gordon R Haff of Illuminata, Inc. for your personal education and individual work functions. Providing its contents to external parties, including by quotation, violates our copyright and is expressly forbidden. However, one particular group of approaches is capturing an outsized share of the limelight today. That would, of course, be what’s commonly referred to as “server virtualization.” Although server virtualization is in the minds of many inextricably tied to the name of one company—VMware—there are many companies in this space. Their offerings include not only products that let multiple virtual machines (VMs) coexist on a single physical server, but also related approaches such as operating system (OS) virtualization or containers. In the pages that follow, I offer a guide to today’s server virtualization bazaar— which at first glance can perhaps seem just a dreadfully confusing jumble.
    [Show full text]
  • Virtual Containers: Asset Management Best Practices and Licensing Considerations
    Virtual Containers: Asset Management Best Practices and Licensing Considerations Virtual containers have seen tremendous adoption and growth within all industries. However, in terms of IT asset management, cont- ainers are not being managed and are an unknown area of risk for many of our clients. Because it is a newer technology, there is very little information about managing containers and how to address the emerging SAM & ITAM challenges they bring. Due to this lack of public information, Anglepoint has published this whitepaper on navigating the world of containers, with an empha- sis on asset management and licensing. We will cover everything from the history of containers, to what containers are, the benefits of containers, asset management best practices, and some publisher-specific licensing considerations. A BRIEF HISTORY OF VIRTUAL CONTAINERS The first proper containers came from the Linux world as LXC (LinuX Containers) in 2008. However, it wasn’t until 2013 that containers entered the IT public consciousness, when Docker came onto the scene with Enterprise usage in mind. Even then, though, it was more of an enthusiast’s technology. In 2015, Google released and open sourced Kubernetes which manages and ‘orchestrates’ containers. However, it wasn’t until 2017 that Docker and Kubernetes had matured enough to be considered for production use within corporate environments. 2017 also saw VMware, Microsoft, and Amazon beginning to support and offer solutions for Kubernetes and Docker on their top-tier cloud infrastructure. WHAT IS A CONTAINER? Often, people conflate the term ‘container’ with multiple technologies that make up the container ecosystem. Let’s look at what a modern container is at the most fundamental level.
    [Show full text]
  • Wdd-Ebook.Pdf
    The illumos Writing Device Drivers Sun Microsystems, Inc. has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more U.S. patents or pending patent applications in the U.S. and in other countries. U.S. Government Rights – Commercial software. Government users are subject to the Sun Microsystems, Inc. standard license agreement and applicable provisions of the FAR and its supplements. This distribution may include materials developed by third parties. Parts of the product may be derived from Berkeley BSD systems, licensed from the University of California. UNIX is a registered trademark in the U.S. and other countries, exclusively licensed through X/Open Company, Ltd. Sun, Sun Microsystems, the Sun logo, the Solaris logo, the Java Coffee Cup logo, docs.sun.com, Java, and Solaris are trademarks or registered trademarks of Sun Microsystems, Inc. or its subsidiaries in the U.S. and other countries. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. in the U.S. and other countries. Products bearing SPARC trademarks are based upon an architecture developed by Sun Microsystems, Inc. The OPEN LOOK and Sun™ Graphical User Interface was developed by Sun Microsystems, Inc. for its users and licensees. Sun acknowledges the pioneering efforts of Xerox in researching and developing the concept of visual or graphical user interfaces for the computer industry. Sun holds a non-exclusive license from Xerox to the Xerox Graphical User Interface, which license also covers Sun’s licensees who implement OPEN LOOK GUIs and otherwise comply with Sun’s written license agreements.
    [Show full text]
  • System Virtualization Support in Sun Java System Products
    SystemVirtualization Support in Sun Java System Products October 2009 This document is maintained by Sun Java System team. Software Products Covered by this Statement This document summarizes Sun support for Sun Java System products when used in conjunction with system virtualization products and features. It applies to Sun products contained in the following Sun Java System suites: ■ Sun GlassFish Portfolio ■ Sun Java Application Platform Suite ■ Sun Java Identity Management Suite ■ Sun Java Composite Application Platform Suite ■ Sun B2B Suite ■ Sun ESB Suite ■ Sun MDM Suite ■ Sun Java Web Infrastructure Suite ■ Sun Java Communications Suite Refer to the Sun Java Enterprise System (Java ES) and Communications Suite product pages for more information on these suites. The Sun Java Availability Suite and Solaris Cluster are not addressed in this support statement. Refer to the Solaris Cluster product information for further details on Solaris Cluster's support for operating system virtualization. Introduction A core capability of system virtualization offerings is the ability to execute multiple operating system (OS) instances on shared hardware. Functionally, an application deployed to an OS hosted in a virtualized environment is generally unaware that the underlying platform has been virtualized. Sun performs testing of its Sun Java System products on select system virtualization and OS combinations to help validate that the Sun Java System products continue to function on properly sized and configured virtualized environments as they do on non-virtualized systems. System Resource Sizing The combination of being able to deploy multiple OS instances and applications on a single system and the ease by which system resources can be allocated to OS instances increases the likelihood of realizing undersized environments for your applications.
    [Show full text]
  • Containerisation Gareth Roy Gridpp 32, Pitlochry 1 Intermodal Containers
    Containerisation Gareth Roy GridPP 32, Pitlochry "1 Intermodal Containers Developed by Malcolm P. McLean & Keith W. Tantlinger. Reaction to slow loading times produced by using “break bulk cargo.” Apparatus for shipping freight (1958): “In 1956, loose cargo cost $5.86 per ton US 2853968 A - Malcolm P McLean to load. Using an ISO shipping container, the cost was reduced to only .16 cents per ton.” IMPERIAL METRIC Length 19’ 10.5” 6.058 m Width 8’ 0” 2.438 m Height 8’ 6” 2.591 m Empty Weight 4,850 lb 2,200 kg Max Weight 66,139 lb 30,400 kg "2 Mærsk Mc-Kinney Møller (18270 TEU) Linux Containers Form of OS Level Virtualisation. Kernel hosts multiple separated user-land instances (Virtual Environment/Engine). Application Low overheads, elastic, multi-tennant. VE Storage can be Copy-on-Write or use UnionFS OS Examples: chroot (1982) Solaris Containers (2005) Physical Hardware FreeBSD Jails (1988) AIX WPARS (2007) Virtuozzo (2001) LXC (2008) OpenVZ (2005) "3 VM’s vs Containers Application Application Application Application Guest OS Guest OS VE VE Virtual HW Virtual HW OS Hypervisor / OS Physical Hardware Physical Hardware Virtual Machine Linux Container "4 VM’s vs Containers (Arguments) Pros: Pros: OS Independent Lightweight / Dense Secure / Isolated Fast Instantiation Flexible Elastic Resource Live Migration Low Memory Consumption Mature Ecosystem Native Performance Cons: Cons: Full System Image Restricted / Linux Only Slow Startup/Shutdown/Build Shared Kernel Memory Consumption Overhead Security Model Opaque to System Young Ecosystem Virtual Machine Linux Container "5 Containers in More Detail Running Application Application Application Instanced Namespace Virtual Environment Virtual Environment Resource Control Group Container CGROUP Container CGROUP Kernel Namespace Layer PID MNT IPC NET UTS USER* Linux Kernel > 2.6.23 OS Physical Hardware "6 Namespaces Application A Namespace wraps a global resource and presents an isolated instance to running process.
    [Show full text]
  • Oracle Solaris 11 Express What's
    ORACLE SOLARIS 11 EXPRESS 2010.11 | WHAT’S NEW ORACLE SOLARIS 11 EXPRESS 2010.11 WHAT’S NEW Oracle Solaris is the industry leading operating system for the enterprise. Oracle Solaris 11 Express 2010.11 raises the bar on the innovation introduced in Oracle Solaris 10, with a unique feature set NEW FEATURE HIGHLIGHTS that few other operating systems can offer. Oracle Solaris 11 Express 2010.11 has been tested and • Oracle Solaris 10 Zones for business optimized for Oracle hardware and software, and is an integral part of Oracle's combined hardware investment protection and software portfolio. • Built-in network virtualization and resource Oracle Solaris 11 Express 2010.11 provides customers with the latest access to Oracle Solaris 11 management for enhanced server workload technology, allowing developers, architects and administrators to test and deploy within an consolidation enterprise environments and greatly simplify their day to day operations. Oracle Solaris 11 Express 2010.11 has the reliability, availability, and serviceability that you'd expect from a leading • Greatly reduced planned and unplanned downtime with new package management tools enterprise operating system. with safe system upgrade With new features such as network based package management tools to greatly decrease planned • New optimizations and features designed to system downtime and provide for a completely safe system upgrade, built-in network virtualization deliver proven scalability and reliability as an and resource control management for an unprecedented level of flexibility for application integrated component of Oracle's Exadata and consolidation, and on-disk ZFS encryption to provide the highest levels of security in your data Exalogic systems center, Oracle Solaris 11 Express 2010.11 is the most exciting release of the Oracle Solaris platform to date.
    [Show full text]
  • Avanquest Software Teams with Sun Microsystems
    Avanquest Software teams with Sun Microsystems to produce and publish two of Sun Microsystems flagship products in the whole of Europe: Sun’s xVM VirtualBox, one of the industry’s most popular cross-platform virtualization software and StarOffice 9, the latest version of Sun’s award- winning office suite La Garenne-Colombes, France – September 22, 2008 Avanquest Software , a leading developer and publisher of business and consumer software for the global PC market, today announced that it will produce and publish two of Sun Microsystems ’ most popular software programs – StarOffice and Sun xVM VirtualBox. StarOffice 9 is the latest version of the highly acclaimed, easy-to-use and affordable office suite alternative and is compatible not only with Windows and Linux platforms, but also with Mac OS X (10.4 or higher). Sun xVM VirtualBox is a high-performance desktop virtualization solution that supports all major host operating systems (OS), including Mac OS X, Linux, Windows, Solaris™ and OpenSolaris™. It will be sold by Avanquest as a stand-alone product as well as in a bundle with OpenSolaris and StarOffice 8. From October 2008, Avanquest will market these products via retail outlets, the web and corporate and SMB channels across Europe. Sun Microsystems is an established market leader in virtualization technology and desktop office suites. The agreements are in keeping with Avanquest’s strategy to publish the most innovative technologies and offer customers – from single users up to corporations – greater choice. “Andy Goldstein, European Chief Operating Officer at Avanquest Software, added: “The trust shown by Sun is a great source of satisfaction for Avanquest.
    [Show full text]
  • Sun Fire X4170, X4270, and X4275 Server Architectures
    SUN FIRE™ X4170, X4270, AND X4275 SERVER ARCHITECTURE Optimizing Performance, Density, and Expandability to Maximize Datacenter Value White Paper April 2009 Abstract In compact 1U and 2U form factors, the Sun Fire X4170, X4270, and X4275 servers combine the power of a new generation of Intel Xeon processors with Sun’s system engineering expertise. Based on Sun’s Open Network System design approach, these servers offer the needed performance, density, and expandability to satisfy demanding datacenter applications, especially for virtualization and consolidation initiatives. This white paper describes the architecture of the Sun Fire X4170, X4270, and X4275 servers, including the processor technology, I/O subsystem, built-in system management features, and range of supported operating systems. Sun Microsystems, Inc. This Page Intentionally Left Blank Sun Microsystems, Inc. Table of Contents Executive Summary . 1 Managing Capacity and Complexity . 2 Introducing the Sun Fire™ X4170, X4270, and X4275 servers . 2 Comparing the Sun Fire X4170, X4270, and X4275 servers . 4 A choice of operating systems . 6 The Intel Advantage . 7 New Intel Core Microarchitecture. 7 Modular architecture . 10 Power management technologies . 10 Intel Xeon Processor 5500 platform . 11 Sun Fire X4170, X4270, and X4275 Server Architectures . 12 Sun Fire X4170 system-level architecture . 12 Sun Fire X4170 server overview. 13 Sun Fire X4170 server enclosure . 14 Sun Fire X4170 server front and rear perspectives . 14 Sun Fire X4270 system-level architecture . 16 Sun Fire X4270 server overview. 17 Sun Fire X4270 server enclosure . 17 Sun Fire X4270 server front and rear perspectives . 18 Sun Fire X4275 system-level architecture . 19 Sun Fire X4275 server overview.
    [Show full text]