22
Oracle Solaris 10 Syntax Oracle Solaris 11 Syntax Description lucreate -n newBE beadm create newBE Create a new BE lustatus beadm list Display BE information luactivate newBE beadm activate newBE  Activate a BE ludelete  BE beadm destroy  BE Destroy an inactive BE luupgrade or patchadd pkg update Upgrade or update a BE How to Update Your ZFS Boot Environment To update a ZFS boot environment use t!e pkg update command" #f you update a ZFS BE by using pkg update a new BE is created and automatically activated" #f t!e updates to t!e e$isting BE are minimal a bac%up BE is created before t!e updates are applied" T!e pkg update command displays w!et!er a bac%up BE or a new BE is created" &" Display your existin BE in!ormation" 2. # beadm list 3. BE Acti ve Mountp oint Space Po licy Created 4. -- ------ ---------- ----- ------ ------- solaris NR / 12.24G static 2011-10-04 09:42 #n t!e above output NR means t!e BE is active now and will be t!e active BE on reboot" '" Update your BE" 6. # pkg update 7. Packages to remove: 117 8. Packages to install: 186 9. Packages to update: 315 10. Create boot envi ronment: Yes 11. DOWN LO AD PKGS FILES XFER (MB) 12. Com pleted 618/618 29855/29 855 600.7 /60 0.7 13. . 14. . . #f your e$isting BE name is solaris a new BE solaris-1 is created and automatically activated after t!e pkg update operation is complete" &'" #e$oot t%e system to complete t%e BE activation" &%en' con!irm your BE status" 16. # init 6 17. . 18. . 19. .

Beadm Ipcs Ai

Embed Size (px)

Citation preview

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 1/22

Oracle Solaris 10 Syntax Oracle Solaris 11 Syntax Descriptionlucreate -n newBE beadm create newBE Create a new BElustatus beadm list Display BE informationluactivate newBE beadm activate newBE Activate a BEludelete BE beadm destroy BE Destroy an inactive BEluupgrade or patchadd pkg update Upgrade or update a BE

How to Update Your ZFS Boot EnvironmentTo update a ZFS boot environment use t!e pkg update command" #f you update a ZFS BE by using pkgupdate a new BE is created and automatically activated" #f t!e updates to t!e e$isting BE are minimal a bac%upBE is created before t!e updates are applied" T!e pkg update command displays w!et!er a bac%up BE or a newBE is created"

&" Display your existin BE in!ormation"

2. # beadm list3. BE Active Mountpoint Space Policy Created4. -- ------ ---------- ----- ------ -------

solaris NR / 12.24G static 2011-10-04 09:42

#n t!e above output NR means t!e BE is active now and will be t!e active BE on reboot"

'" Update your BE"

6. # pkg update7. Packages to remove: 1178. Packages to install: 1869. Packages to update: 31510. Create boot environment: Yes11. DOWNLOAD PKGS FILES XFER (MB)12. Completed 618/618 29855/29855 600.7/600.713. .14. .

.

#f your e$isting BE name is solaris a new BE solaris-1 is created and automatically activated aftert!e pkg update operation is complete"

&'" #e$oot t%e system to complete t%e BE activation" &%en' con!irm your BE status"

16. # init 617. .18. .19. .

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 2/22

20. # beadm list21. BE Active Mountpoint Space Policy Created22. -- ------ ---------- ----- ------ -------23. solaris NR / 12.24G static 2011-10-04 09:42

solaris-1 - - 6.08G static 2011-10-11 10:42

()" (! an error occurs w%en $ootin t%e new BE' activate and $oot to t%e previous BE"

# beadm activate solaris-1

root@Unixarena-SOL11:~# mkdir /old-be

root@Unixarena-SOL11:~# beadm mount solaris /old-be

root@Unixarena-SOL11:~# pkg -R /old-be list difstat

pkg list: no pa kages mat !ing "difstat" installed

root@Unixarena-SOL11:~#

Rollback operation1.Any time you can rollback the Solaris 11 to old boot environment using below command.root@Unixarena-SOL11:~# beadm a ti ate solaris

root@Unixarena-SOL11:~# beadm l ist

$% & ti e 'ountpoint Spa e (oli ) *reated-- ------ ---------- ----- ------ -------

U&-+%, + / .1 0 ' stati 231 -3 -14 2 : 1

solaris R /old-be 5 246 stati 231 -32-12 3 :24

root@Unixarena-SOL11:~#

N- Active nowR- Active upon Reboot

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 3/22

Displaying ZFS Share Information

As in t!e previous releases you display t!e value of t!e sharenfs property by using zfs getsharenfs property or by using t!e zfs get all command synta$"

# zfs get sharenfs rpool/fs1NAME PROPERTY VALUE SOURCErpool/fs1 sharenfs on local

T!e new s!are information is available by using t!e zfs get share command"

# zfs get share rpool/fs1NAME PROPERTY VALUE SOURCErpool/fs1 share name=rpool_fs1,path=/rpool/fs1,prot=nfs local

T!e new s!are information is not available in t!e zfs get all command synta$"

#f you create a s!are of a newly created ZFS file system use t!e zfs get share command to identify t!e share-

name name or t!e share-path name" For e$ample*

# zfs create -o mountpoint=/data -o sharenfs=on rpool/data# zfs get share rpool/dataNAME PROPERTY VALUE SOURCErpool/data share name=data,path=/data,prot=nfslocal

ZFS Sharing Inheritance#n!eritance of t!e zfs share property and t!e sharenfs or t!e sharesmb property wor%s as follows*

• T!e zfs share property is not in!erited from a parent to a descendent file system" #n addition t!e zfsset share command does not support t!e -r option to set a ZFS property on descendent file systems"

• #f t!e sharenfs or t!e sharesmb property is set on a parent file system t!e sharenfs ort!e sharesmb property is also set on t!e descendent file systems" For e$ample*

• # zfs create -o mountpoint=/ds rpool/ds• # zfs set share=name=ds,path=/ds,prot=nfs rpool/ds• name=ds,path=/ds,prot=nfs• # zfs set sharenfs=on rpool/ds• # cat /etc/dfs/sharetab• /ds rpool_ds nfs sec=sys,rw• # zfs create rpool/ds/ds1• # zfs get sharenfs rpool/ds/ds1

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 4/22

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 5/22

rpool/ds share name=ds,path=/ds,prot=nfs local

T!en remove t!e s!are by identifying t!e share-name name" For e$ample*

# zfs set -c share=name=ds rpool/dsshare 'ds' was removed.

#f a s!are is establis!ed by creating a default s!are w!en t!e file system is created t!en a s!are can be removed byt!e share-name name or t!e share-path name" For e$ample t!is s!are is given a default share-name name data and

a default share-path name /data "

# zfs create -o mountpoint=/data -o sharenfs=on rpool/data# zfs get share rpool/dataNAME PROPERTY VALUE SOURCErpool/data share name=data,path=/data,prot=nfs local

.emove t!e s!are by identifying t!e share-name name" For e$ample*

# zfs set -c share=name=data rpool/datashare 'data' was removed.

.emove t!e s!are by identifying t!e share-path name" For e$ample*

# zfs set -c share=path=/data rpool/datashare 'data' was removed.

ZFS File Sharing Within a Non-Global Zone

#n previous Solaris releases you could not create and publis! ,FS or S-B s!ares in a 0racle Solaris non1global2one" #n t!is Solaris release you can create and publis! ,FS s!ares by using t!e zfs set share command and

t!e legacy share command wit! a non1global 2one"

• #f a ZFS file system is mounted and available in a non1global 2one it can be s!ared in t!at 2one"

• A file system can be s!ared in t!e global 2one if it is not mounted in a non1global 2one or is not s!ared to anon1global 2one"

• #f a ZFS file system+s mountpoint property set to legacy t!e file system can be s!ared by using t!e

legacy share command"

For e$ample t!e /export/home/data and /export/home/data1 file systems are available in

t!e zfszone "

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 6/22

zfszone# share -F nfs /export/home/datazfszone# cat /etc/dfs/sharetab/export/home/data export_home_data nfs sec=sys,rwzfszone# zfs set share=name=data1,path=/export/home/data1,prot=nfstank/zones/export/home/data1zfszone# zfs set sharenfs=on tank/zones/export/home/data1

zfszone# cat /etc/dfs/sharetab/export/home/data1 data1 nfs sec=sys,rw

New ZFS Sharing an !egacy Share Comman S"mmary

T!is table describes t!e new ZFS file system s!aring synta$ and t!e legacy s!aring synta$"

&a$le )*+ ZFS S%arin and ,e acy S%are -ommand Summary

ZFS ShareTask

Legacy Share Syntax New Share Syntax

S!are a 78S9le s)stemo er +8S

Set t!e sharenfs propert) to on

# zfs set sharenfs=ontank/fs1

1 *reate t!e +8S s!are

2. # zfs setshare=name=fs1,path=/fs1,

prot=nfs tank/fs1

3. Set the sharenfs property to on.

# zfs set sharenfs=on tank/fs1

S!are 78S9le s)stemo er S'$

Set t!e sharesmb propert) to on

# zfs set sharesmb=ontank/fs2

1 *reate t!e S'$ s!are

2. # zfs setshare=name=fs2,path=/fs2,

prot=smb tank/fs2

3. Set the sharesmb property to on.

# zfs set sharesmb=on tank/fs2

Uns!are t!e78S 9les)stem

Set t!e sharenfs propert) to of

# zfs set sharenfs=off

Set t!e sharenfs propert) to of

# zfs set sharenfs=off tank/fs1

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 7/22

tank/fs1

Set t!e sharesmb propert) to of

# zfs set sharesmb=offtank/fs2

Set t!e sharesmb propert) to of

# zfs set sharesmb=off tank/fs2

&dd s!areoptions toan existings!are

Reset t!e sharenfs propert)

# zfs set sharenfs=nosuidtank/fs1

Reset t!e s!are it! t!e additionalpropert)

# zfs set share=name=fs1,prot=nfs,nosuid rpool/fs1name=fs1,path=/rpool/fs1,prot=nfs,nosuid=true

*reate apermanent+8S s!are

Set t!e sharenfs propert) to on

# zfs set sharenfs=ontank/fs1

For legacy share command syntax,you had to editthe /etc/dfs/dfstab file to create a

permanent share.

Set t!e sharenfs propert) to on

# zfs set sharenfs=on tank/fs1

The /etc/dfs/dfstab file is not available inthis Solaris release.

*reate apermanentS'$ s!are

Set t!e sharesmb propert) to on

# zfs set sharesmb=ontank/fs2

Or, create the SMB shareith sharemgr .

# sharemgr create -P smbfssmb# sharemgr add-share -r fs-smb -s /tank/fs2 fssmb

Set t!e sharesmb propert) to on

# zfs set sharesmb=on tank/fs2

The sharemgr feature is not available in thisSolaris release.

#ro"bleshooting ZFS Share $roblems

• /ou can+t s!are a parent file system if a subdirectory or descendent file system is already s!ared"

• # share -F nfs /rpool/fs2/dir1• # share -F nfs /rpool/fs2/dir2

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 8/22

• # share -F nfs /rpool/fs2

share: NFS: descendant of path is shared: /rpool/fs2/dir1 inrpool_fs2_dir2

• .enaming a s!are t!at is created wit! t!e zfs set share command is not supported"

• /ou can create a file system s!are wit! bot! ,FS and S-B protocols by using t!e zfs setshare command" For e$ample*

• # zfs set share=name=ds,path=/ds,prot=nfs,prot=smb rpool/ds

name=ds,path=/ds,prot=nfs,prot=smb

#f you want to create a file system s!are wit! bot! ,FS and S-B protocols by using t!e

legacy share command you must specify t!e command twice" For e$ample*

# share -F nfs /rpool/ds# share -F smb /rpool/ds# zfs get share rpool/dfname=rpool_ds,path=/rpool/ds,prot=nfs,prot=smb

• A s!are pat! or description t!at includes a comma 3 4 must be 5uoted wit! double 5uotes"

C#FS S!aring on Solaris &&By Paul Johnson-Oracle on Feb 20, 2012

T!ings !ave c!anged since Solaris &6 3and Solaris && E$press too74 on !ow to properly set up a C#FS server on yourSolaris && mac!ine so t!at 8indows clients can access files" T!ere+s some documentation on t!e c!anges !ere butlet me s!are t!e full instructions from beginning to end"

hostname: adrenaline

username: paulie

poolname: pool

mountpnt: /pool

share: mysharename

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 9/22

• #nstall S-B server pac%age

[paulie@adrenaline ~]$ sudo pkg install service/file-system/smb

• Create t!e name of t!e s!are

[paulie@adrenaline ~]$ sudo zfs setshare name mysharename!path /pool!prot smb pool

• Turn on s!aring using 2fs

[paulie@adrenaline ~]$ sudo zfs set sharesmb on pool

• Turn on your smb server

[paulie@adrenaline ~]$ sudo svcadm enable -r smb/server

• C!ec% t!at t!e s!are is active

[paulie@adrenaline ~]$ sudo smbadm sho"-shares adrenaline

#nter pass"ord:

c$ efault %hare

&'($ )emote &'(

mysharename

* shares +total *! read *,

• Enable an e$isting U,#9 user for C#FS s!aring 3you may !ave to reset t!e password again eg":passwd

paulie: 4

[paulie@adrenaline ~]$ sudo smbadm enable-user paulie

• Edit pam to allow for smb aut!entication 3add line to end of file4

Solaris 11 ./ only

[paulie@adrenaline ~]$ vi /etc/pam conf

other pass"ord re.uired pam smb pass"d so 0 no"arn

Solaris 11 U1 or later

[paulie@adrenaline ~]$ vi /etc/pam d/other

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 10/22

pass"ord re.uired pam smb pass"d so 0 no"arn

• Try to mount t!e s!are on your 8indows mac!ine

11adrenaline1mysharename

.ecovering ;asswords in Solaris &&By Paul Johnson-Oracle on Feb 11, 2013

About once a year #+ll find a way to loc% myself out of a Solaris system" <ere+s !ow to get out of t!is scenario" /ou+llneed a Solaris && =ive CD or =ive USB stic%"

• Boot up from t!e =ive CD>USB

• Select t!e +Te$t Console+ option from t!e ?.UB menu

• =ogin to t!e solaris console using t!e username>password of @ac%>@ac%

• Switc! to root

$ sudo su

password jack

• -ount t!e solaris boot environment in a temporary directory

2 beadm mount solaris /a

• Edit t!e s!adow file

2 vi /a/etc/shado"

• Find your username and remove t!e password !as!

Convert

username:i#"ei3*%am'le4ashonf5670:089 ;::::::0930;

to

username::089 ;::::::0930;

• Allow empty passwords at login

$ vi /a/etc/default/login

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 11/22

Switch this line

'<%%)#= >#%

to

'<%%)#= ?

• Update t!e boot arc!ive

2 bootadm update-archive -) /a

• .eboot and remove t!e =ive CD>USB from system

2 reboot

#f prompted for a password !it return since t!is !as now been blan%ed"

Configuring a Basic =DA; Server Client in Solaris &&By Paul Johnson-Oracle on Feb 21, 2013

-on!i urin t%e ServerSolaris && s!ips wit! 0pen=DA; to use as an =DA; server" To configure you+re going to need a simple slapd"conf fileand an =D#F sc!ema file to populate t!e database" First let+s loo% at t!e slapd"conf configuration*

2 cat /etc/openldap/slapd conf

include /etc/openldap/schema/core schema

include /etc/openldap/schema/cosine schema

include /etc/openldap/schema/inetorgperson schema

include /etc/openldap/schema/nis schema

pidfile /var/openldap/run/slapd pid

argsfile /var/openldap/run/slapd args

database bdb

suffiA Bdc buford!dc hillvalleyB

rootdn Bcn admin!dc buford!dc hillvalleyB

rootp" secret

directory /var/openldap/openldap-data

indeA obCect(lass e.

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 12/22

/ou may want to c!ange t!e lines suffi$ and rootdn to better represent your networ% naming sc!ema" -y =DA;server+s !ostname is buford and domain name is !illvalley" /ou will need to add additional domain components 3dc 4if t!e name is longer" T!is sc!ema assumes t!e =DA; manager will be called admin" #ts password is +secret+" T!is isin clear1te$t @ust as an e$ample but you can generate a new one using slappasswd*

[paulie@buford ~]$ slappass"d

?e" pass"ord:

)e-enter ne" pass"ord:

D%%4<EFlyGaHAI;>&=5d/J";f&Ih<KHiaogk5I

.eplace +secret+ wit! t!e entire !as! SS<A -lyFaZ$? /# 6d>Gw f#?!A9Ziaog%6? for t!e rootpw line" ,ow let+screate a basic sc!ema for my networ%"

2 cat /etc/openldap/schema/hillvalley ldif

dn: dc buford!dc hillvalley

obCect(lass: dc bCect

obCect(lass: organization

o: bufford hillvalley

dc: buford

dn: ou groups!dc buford!dc hillvalley

obCect(Lass: top

obCect(lass: organizationalunitou: groups

dn: ou users!dc buford!dc hillvalley

obCect(lass: top

obCect(lass: organizationalunit

ou: users

dn: cn "orld!ou groups!dc buford!dc hillvalley

obCect(lass: top

obCect(lass: posiAIroup

cn: "orld

gid?umber: 0550

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 13/22

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 14/22

adding ne" entry uid paulie!ou users!dc buford!dc hillvalley

T!at+s it7 0ur =DA; server is up populated and ready to aut!enticate against"

-on!i urin t%e -lient#+m going to turn my e$ample server buford"!illvalley into an =DA; client as well" To do t!is we need to run t!e

:ldapclient: command to map our new user and group data*

[paulie@buford ~]$ ldapclient manual 1

-a credentialLevel proAy 1

-a authenticationFethod simple 1

-a default%earchOase dc buford!dc hillvalley 1

-a domain?ame buford hillvalley 1

-a default%erverList 063 0;7 0 05* 1

-a proAy ? cn admin!dc buford!dc hillvalley 1

-a proAy'ass"ord secret 1

-a attributeFap group:gidnumber gid?umber 1

-a attributeFap pass"d:gidnumber gid?umber 1

-a attributeFap pass"d:uidnumber uid?umber 1

-a attributeFap pass"d:homedirectory home irectory 1

-a attributeFap pass"d:loginshell login%hell 1

-a attributeFap shado":userpass"ord user'ass"ord 1

-a obCect(lassFap group:posiAIroup posiAgroup 1

-a obCect(lassFap pass"d:posiA<ccount posiAaccount 1

-a obCect(lassFap shado":shado"<ccount posiAaccount 1

-a service%earch escriptor pass"d:ou users!dc buford!dc hillvalley 1

-a service%earch escriptor group:ou groups!dc buford!dc hillvalley 1

-a service%earch escriptor shado":ou users!dc buford!dc hillvalley

As usual c!ange t!e !ost and domain names as well as t!e #; address !eld in defaultServer=ist and t!e

pro$y;assword" T!e command s!ould respond bac% t!at t!e system was configured properly !owever additionalc!anges will need to be made if you use D,S for !ostname loo%ups 3most people use D,S so run t!esecommands4"

svccfg -s name-service/s"itch setprop config/host astring: 1Bfiles dnsldap1B

svccfg -s name-service/s"itch:default refresh

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 15/22

svcadm restart name-service/cache

,ow we need to c!ange !ow users login so t!at t!e client %nows t!at t!ere is an e$tra =DA; server to aut!enticateagainst" T!is s!ould not loc%out local worries" E$amine t!e two files >etc>pam"d>login and >etc>pam"d>ot!er" C!angeany instance of

auth re.uired pam uniA auth so 0

to

auth binding pam uniA auth so 0 server policy

After t!is line add t!e following new line*

auth re.uired pam ldap so 0

T!at+s it7 Finally reboot your system and see if you can login wit! your newly created user"

Update ?lenn Faden wrote an e$cellent guide to configuring 0pen=DA; using t!e native Solaris user>group>role

management system"

Configuring a Basic D,S Server Client in Solaris &&By Paul Johnson-Oracle on Mar 04, 2013

-on!i urin t%e ServerT!e default install of Solaris && does not come wit! a D,S server but t!is can be added easily t!roug! #;S li%e so*

[paulie@griff ~]$ sudo pkg install service/net"ork/dns/bind

Before enabling t!is service t!e named"conf file needs to be modified to support t!e D,S structure" <ere+s w!atmine loo%s li%e*

[paulie@griff ~]$ cat /etc/named conf

options D

directory B/etc/namedb/"orkingBP

pid-file B/var/run/named/pidBP

dump-file B/var/dump/named dump dbBP

statistics-file B/var/stats/named statsBP

for"arders D 357 ;9 333 333P 357 ;9 335 335P EP

EP

zone BhillvalleyB D

type masterP

file B/etc/namedb/master/hillvalley dbBP

EP

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 16/22

zone B0 0;7 063 in-addr arpaB D

type masterP

file B/etc/namedb/master/0 0;7 063 dbBP

EP

-y forwarders use t!e 0penD,S servers so any re5uest t!at t!e local D,S server can+t process goes t!roug! t!ere"#+ve also setup two 2ones* !illvalley"db for my forward 2one and &"& H"&I("db for my reverse 2one" 8e need bot! fora proper configuration" 8e also need to create some directories to support t!is file*

[paulie@griff ~]$ sudo mkdir /var/dump

[paulie@griff ~]$ sudo mkdir /var/stats

[paulie@griff ~]$ sudo mkdir -p /var/run/namedb

[paulie@griff ~]$ sudo mkdir -p /etc/namedb/master

[paulie@griff ~]$ sudo mkdir -p /etc/namedb/"orking

,ow let+s populate t!e D,S server wit! a forward and reverse file"

Forward !ile

[paulie@griff ~]$ cat /etc/namedb/master/hillvalley db

$QQL *h

@ &? % < griff hillvalley paulie griff hillvalley +

350*5339 Pserial +change after every update, *;55 Prefresh +0 hour,

*;55 Pretry +0 hour,

;5 755 PeApire +0 "eek,

*7 55 Pminimum +0 day,

,

hillvalley &? ?% griff hillvalley

delorean &? < 063 0;7 0 0 P )outer

biff &? < 063 0;7 0 050 P ?G% %erver

griff &? < 063 0;7 0 053 P ?% %erver

buford &? < 063 0;7 0 05* P L <' %erver

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 17/22

marty &? < 063 0;7 0 05 P Rorkstation

doc &? < 063 0;7 0 058 P Laptop

Cennifer &? < 063 0;7 0 05; P OoAee

lorraine &? < 063 0;7 0 059 P OoAee

#everse File

[paulie@griff ~]$ cat /etc/namedb/master/0 0;7 063 db

$QQL *h

@ &? % < griff hillvalley paulie griff hillvalley +

350*5339 Pserial +change after every update,

*;55 Prefresh +0 hour,

*;55 Pretry +0 hour,

;5 755 PeApire +0 "eek,

*7 55 Pminimum +0 day,

,

&? ?% griff hillvalley

0 &? 'Q) delorean hillvalley P )outer

050 &? 'Q) biff hillvalley P ?G% %erver

053 &? 'Q) griff hillvalley P ?% %erver

05* &? 'Q) buford hillvalley P L <' %erver

05 &? 'Q) marty hillvalley P Rorkstation

058 &? 'Q) doc hillvalley P Laptop

05; &? 'Q) Cennifer hillvalley P OoAee

059 &? 'Q) lorraine hillvalley P OoAee

For referencing !ow t!ese files wor%s*

• paulie is t!e admin user account name

• griff is t!e !ostname of t!e D,S server

• !illvalley is t!e domain name of t!e networ%

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 18/22

• ( love B&&F

Feel free to twea% t!is e$ample to matc! your own networ%" Finally enable t!e D,S service and c!ec% t!at it+s online*

[paulie@griff ~]$ sudo svcadm enable dns/server

[paulie@griff ~]$ sudo svcs N grep dns/serveronline 33:*3:35 svc:/net"ork/dns/server:default

-on!i urin t%e -lient8e will need t!e #; address 3&I("& H"&"&6(4 !ostname 3griff4 and domain name 3!illvalley4 to configure D,S wit!t!ese commands*

[paulie@buford ~]$ sudo svccfg -s net"ork/dns/client setprop config/nameserver net address: 063 0;7 0 053

[paulie@buford ~]$ sudo svccfg -s net"ork/dns/client setprop config/domain astring: hillvalley

[paulie@buford ~]$ sudo svccfg -s net"ork/dns/client setprop config/search astring: hillvalley

[paulie@buford ~]$ sudo svccfg -s name-service/s"itch setprop config/ipnodes astring: SBfiles dnsBS

[paulie@buford ~]$ sudo svccfg -s name-service/s"itch setprop config/host astring: SBfiles dnsBS

Gerify t!e configuration is correct*

[paulie@buford ~]$ svccfg -s net"ork/dns/client listprop config

config application

config/value authorization astring solaris smf value name-service dns client

config/nameserver net address 063 0;7 0 053

config/domain astring hillvalley

config/search astring hillvalley

And enable*

[paulie@buford ~]$ sudo svcadm enable dns/client

,ow we need to test t!at t!e D,S server is wor%ing using bot! forward and reverse D,S loo%ups*

[paulie@buford ~]$ nslookup lorraine

%erver: 063 0;7 0 053

<ddress: 063 0;7 0 05328*

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 19/22

?ame: lorraine hillvalley

<ddress: 063 0;7 0 059

[paulie@buford ~]$ nslookup 063 0;7 0 0

%erver: 063 0;7 0 053

<ddress: 063 0;7 0 05328*

0 0 0;7 063 in-addr arpa name delorean hillvalley

Solaris && #;o#B #;-;By Paul Johnson-Oracle on Jul 10, 2013

# recently needed to create a two port active*standby #;-; group to be served over #nfiniband on Solaris &&" 8ow

t!at+s a mout!ful of terminology7 <ere+s !ow # did it*

=ist available #B lin%s

[root@adrenaline ~]2 dladm sho"-ib

L&?T 4(<IU& ' )QIU& ' )Q %Q<Q# 'T#>%

net8 30375550(G (6; 30375550(G (69 0 up GGGG

net; 30375550(G (6; 30375550(G (67 3 up GGGG

;artition t!e #B lin%s" -y p%ey will be H66&"

[root@adrenaline ~]2 dladm create-part -l net8 -' 5A7550 p7550 net8

[root@adrenaline ~]2 dladm create-part -l net; -' 5A7550 p7550 net;

[root@adrenaline ~]2 dladm sho"-part

L&?T 'T#> J#) %Q<Q# GL<I%

p7550 net8 7550 net8 unkno"n ----

p7550 net; 7550 net; unkno"n ----

Create test addresses for t!e newly created datalin%s

[root@adrenaline ~]2 ipadm create-ip p7550 net8

[root@adrenaline ~]2 ipadm create-addr -Q static -a 063 0;7 0 050p7550 net8/ipv

[root@adrenaline ~]2 ipadm create-ip p7550 net;

[root@adrenaline ~]2 ipadm create-addr -Q static -a 063 0;7 0 053p7550 net;/ipv

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 20/22

[root@adrenaline ~]2 ipadm sho"-addr

< ) OM Q>'# %Q<Q# < )

p7550 net8/ipv static ok 063 0;7 0 050/3

p7550 net;/ipv static ok 063 0;7 0 053/3

Create an #;-; group and add t!e #B datalin%s

[root@adrenaline ~]2 ipadm create-ipmp ipmp5

[root@adrenaline ~]2 ipadm add-ipmp -i p7550 net8 -i p7550 net; ipmp5

Set one #B datalin% to standby

[root@adrenaline ~]2 ipadm set-ifprop -p standby on -m ip p7550 net;

Assign an #; address to t!e #;-; group

[root@adrenaline ~]2 ipadm create-addr -Q static -a 063 0;7 0 055/3 ipmp5/v

T!at+s it7 Final c!ec%s*

[root@adrenaline ~]2 ipadm

?<F# (L<%%/Q>'# %Q<Q# U? #) < )

ipmp5 ipmp ok -- --

ipmp5/v static ok -- 063 0;7 0 055/3

p7550 net8 ip ok ipmp5 --

p7550 net8/ipv static ok -- 063 0;7 0 050/3

p7550 net; ip ok ipmp5 --

p7550 net;/ipv static ok -- 063 0;7 0 053/3

[root@adrenaline ~]2 ping 063 0;7 0 055

063 0;7 0 055 is alive

-on!i urin t%e Oracle ZFS Stora e /ppliance

Eac! database s!ould be contained in its own pro@ect"

&" From t!e ZFS controllerJs C=# create a pro@ect called Kmys5lJ"

zfs:V shares proCect mys.l

(" Set logbias to latency to leverage write flas! capabilities*

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 21/22

zfs:shares mys.l +uncommitted,V set logbias latency

logbias latency +uncommitted,

L" Set t!e default user to mys5l and default group to mys5l*

zfs:shares mys.l +uncommitted,V set default user mys.l

default user mys.l +uncommitted,

zfs:shares mys.l +uncommitted,V set default group mys.l

default group mys.l +uncommitted,

Note: If a na e ser!"ce such as #$%P or NI& "s not be"n' use(, chan'e these to the actual )I$ an( *I$ foun( "n +etc+ ass ( an( +etc+'rou on the host.

)" Disable KUpdate access time on readJ*

zfs:shares mys.lV set atime false

atime false +uncommitted,

'" Commit t!e c!anges*

zfs:shares mys.lV commit

" Create a filesystem called innodb1data to !old data files*

zfs:shares mys.lV filesystem innodb-data

M" Set t!e database record si2e to & N to matc! #nnodbJs standard page si2e*

zfs:shares mys.l/innodb-data +uncommitted,V set recordsize 0;T

recordsize 0;T +uncommitted,

zfs:shares mys.l/innodb-data +uncommitted,V commit

H" Create a filesystem called Kinnodb1logJ to !old redo logs*

zfs:shares mys.lV filesystem innodb-log

I" Set t!e database record si2e to &(HN*

zfs:shares mys.l/innodb-log +uncommitted,V set recordsize 037T

recordsize 037T +uncommitted,

zfs:shares mys.l/innodb-log +uncommitted,V commit

8/20/2019 Beadm Ipcs Ai

http://slidepdf.com/reader/full/beadm-ipcs-ai 22/22

-on!i urin t%e server

T!is e$ample assumes a =inu$ server will be running t!e -yS = database" T!e following commands are roug!ly t!esame for a Solaris mac!ine*

&" A directory structure s!ould be created to contain t!e -yS = database*

2 mkdir Wp /mys.l/nas/innodb-data

2 mkdir Wp /mys.l/nas/innodb-log

2 cho"n W) mys.l:mys.l /mys.l/nas

(" Eac! filesystem provisioned on t!e 0racle ZFS Storage Appliance s!ould be mounted wit! t!e following options*

r"!bg!hard!rsize 05 789;!"size 05 789;!vers *!nointr!timeo ;55!tcp!

actimeo 5!nolock

L" T!is s!ould be supplied in >etc>fstab in order to be mounted automatically at boot or it can be run manually from as!ell li%e so*

2 mount Wt nfs Wo r"!bg!hard!rsize 05 789;!"size 05 789;!vers *!nointr!

timeo ;55!tcp!actimeo 5!nolock zfs:/eAport/innodb-data /mys.l/nas/innodb-data

2 mount Wt nfs Wo r"!bg!hard!rsize 05 789;!"size 05 789;!vers *!nointr!

timeo ;55!tcp!actimeo 5!nolock zfs:/eAport/innodb-log /mys.l/nas/innodb-log

-on!i urin t%e yS2, data$ase