http://asyd.net/home/ 2011-06-18T19:39:15+02:00 http://asyd.net/home/ http://asyd.net/home/lib/images/favicon.ico text/html 2008-10-03T08:25:38+02:00 http://asyd.net/home/docs/solaris/backup Dump an UFS file system Full backup ufsdump 0f [DumpFile] [PathToRawDevice] Restore an UFS file system from a file text/html 2008-10-03T08:25:38+02:00 http://asyd.net/home/docs/solaris/devel * LD_LIBRARY_PATH is for devel only, use crle * check ld's -R option text/html 2006-03-04T18:18:36+02:00 http://asyd.net/home/docs/solaris/fsacl Set default acl for a directory My default umask is 027, which denied access to apache ~asyd/public_html. I use setfacl to change the umask to 022 for this directory and all childrens setfacl -m d:m:rwx,d:u::rwx,d:g::r-x,d:o:r-x public_html setfacl -m default:o:r-x public_html text/html 2006-05-17T19:55:09+02:00 http://asyd.net/home/docs/solaris/ipv6 Solaris 8 Description Command Enable IPv6 on an interface ifconfig [interface] inet6 plumb Add an IPv6 at runtime on an interface ifconfig [interface] inet6 addif address/prefix Add an IPv6 route route add -inet6 address/prefix gateway Show IPv6 active interfaces ifconfig -au6 Show IPv6 routing table netstat -nrfinet6 ping IPv6 ping -A inet6 IPv6Address traceroute IPv6 traceroute -A inet6 IPv6Address IPv6 in solaris 8 is not enabled by default. You have to install packages at t… text/html 2008-01-17T13:49:49+02:00 http://asyd.net/home/docs/solaris/jumpstart Introduction Description Note: I start to write this note the first time I tried jumpstart. So, I guess there are some errors. My jumpstart was a Solaris 9, running in Sun Fire V120. Requirements Check if you have following services : * tftp server * rarpd (/usr/sbin/in.rarpd) * NFS server text/html 2006-02-10T13:38:58+02:00 http://asyd.net/home/docs/solaris/misc Duplicate a partition table prtvtoc /dev/rdsk/c1t0d0s2 | fmthard -s - /dev/rdsk/c1t1d0s2 Define a swap partition /dev/dsk/c1d0s5 - - swap - no - Back to Solaris section text/html 2008-10-03T08:25:38+02:00 http://asyd.net/home/docs/solaris/net_zones Default route How to add a default route which will reachable only from non global zones (guess a server with global zone connected only to LAN, and local zones connected to LAN and WAN) # ifconfig eri1 plumb # ifconfig eri1 addif xx.xx.xx.6 netmask 255.255.255.240 up # route add default xx.xx.xx.1 # ifconfig eri1 removeif xx.xx.xx.6 # zoneadm -z squid boot # zlogin squid text/html 2008-10-03T08:25:38+02:00 http://asyd.net/home/docs/solaris/network Solaris 9 Static * echo “hostname” >> /etc/hostname.<device> * Add the hostname/IP field in /etc/inet/hosts DHCP * touch /etc/dhcp.<device> * Edit the file /etc/default/dhcpagent, and set REQUEST_HOSTNAME to yes Solaris 10 Static * Put the hostname in file /etc/nodename * Put the line “inet <hostname>” in /etc/hostname.<device> * Check if <hostname> is in /etc/inet/hosts text/html 2008-10-03T08:25:38+02:00 http://asyd.net/home/docs/solaris/nis NIS Client # domainname <domain> # ypinit -c Solaris 10 # svcadm enable nis/client text/html 2008-10-03T08:25:38+02:00 http://asyd.net/home/docs/solaris/patches Required packages Solaris 9 * SUNWsmt Download PatchPro from here Solaris 10 * SUNWswmt * SUNWppror * SUNWpprou * SUNWppro-plugin-sunos-base smpatch set patchpro.sun.user=xxxx smpatch set patchpro.sun.passwd=xxxx Analyze # smpatch analyze text/html 2006-02-14T02:11:00+02:00 http://asyd.net/home/docs/solaris/pkgsrc Requirements Softwares * cvs (I used the sunfreeware's package) Packages * SUNWgccruntime * SUNWgcc * SUNWhea * SUNWgzip * SUNWbinutils * SUNWsprot * SUNWarc * SUNWbtool * SUNWtoo * SUNWscpr * SUNWscpu * SUNWxcu4 * SUNWlibmr * SUNWlibm * SUNWxwinc text/html 2008-10-03T08:25:38+02:00 http://asyd.net/home/docs/solaris/qos Example qos.conf fmt_version 1.0 action { module ipgpc name ipgpc.classify params { global_stats TRUE } class { name global next_action shaping } filter { name all direction LOCAL_OUT class global } } action { module tokenmt name shaping params { # Values in bps (bits per… text/html 2006-01-22T13:07:33+02:00 http://asyd.net/home/docs/solaris/rbac Notes List all defined privileges with a short description ppriv -vl Examples Create a role with basic and net_privaddr privilege $ groupadd apache $ roleadd -d /var/www -g apache -s /usr/bin/bash -c "Apache WebServer" apache $ rolemod -K "defaultpriv=basic,net_privaddr" apache text/html 2008-10-03T08:25:38+02:00 http://asyd.net/home/docs/solaris/resources Create a project : # projadd -U root,webservd -p 100 demos Modify a project to setup a max rss value, enable rcapd daemon, and start a weblogic server inside the project demos : # projmod -K rcap.mas-rss=1024M demos # rcapd -E # newtask -p demos ./weblogic.sh start text/html 2008-10-03T08:25:38+02:00 http://asyd.net/home/docs/solaris/smf Solaris 10 provide some new (interesting) tools to manage services. Services managements Start/Stop/Reload a service # svcadm enable network/ssh # svcadm disable network/ssh # svcadm refresh network/ssh Check status # svcs -x network/ssh svc:/network/ssh:default (SSH server) State: online since Sat Mar 19 12:49:43 2005 See: sshd(1M) See: /var/svc/log/network-ssh:default.log Impact: None. text/html 2008-10-03T08:25:38+02:00 http://asyd.net/home/docs/solaris/svm Required packages All of them are located in the first software CD : * SUNWmdr * SUNWmdu * SUNWmdx * SUNWmdix Remember to reboot with -r argument after install these packages. Physical device * metadb -a -f -c 3 /dev/dsk/c1t0d0s2 (3 is the number of metadb replicates to use) text/html 2005-10-24T01:05:36+02:00 http://asyd.net/home/docs/solaris/tips Change root shell in /etc/passwd can be dangerous sometimes, Sun even recommand to never change it. But sh is annoying, prefer something like : # echo "zsh" > ~/.profile /etc/ssh/sshd_config PubKeyAuthentication yes AuthorizedKeysFile %h/.ssh/authorized_keys text/html 2006-01-22T13:16:11+02:00 http://asyd.net/home/docs/solaris/zones Create a zone Zone configuration Simple Zone $ mkdir /zones $ mkdir /zones/zone1 $ chmod 700 /zones/zone1 $ zonecfg -z zone1 zonecfg> create zone1 zonecfg:zone1> set zonepath=/zones/zone1 zonecfg:zone1> add net zonecfg:zone1:net> set physical=hme0 zonecfg:zone1:net> set address=192.168.99.42 zonecfg:zone1:net> end zonecfg:zone1> verify zonecfg:zone1> commit zonecfg:zone1> exit