Moving from Solaris 10 to Solaris 11

Presentation

Objectives : Master Solaris 11 administration tasks.
Who can benefit : Oracle 10 System Administrators.
Prerequisites : Extensive experience in administering a Solaris 10 system.
Learning technique : Clear, theoretical course content divided into lessons and extensive LABS available on-line 24/24 7/7.
Student Progression : Student progression is monitored both in terms of effective course duration and in terms of student comprehension using self-assessment tests.
Operating Systems covered by this course : Oracle Solaris 11.

Contents

System Installation

Introduction

Installation

Preparing for Installation

Dual Boot Environments

Virtualisation

LAB #1 - Installing via Text Install

LAB #2 - Live Install in VirtualBox

Self-assessment test

Package and Boot Environment Administration

Solaris 10 pkgXYZ commands

Introduction

The pkginfo command

Command Line Switches

pkgadd

Command Line Switches

pkgchk

Command Line Switches

pkgrm

Command Line Switches

The Solaris 11 Image Packaging System (IPS)

Introduction

pkg Subcommands

LAB #1 - Using IPS

Basic pkg subcommands

Installing a Package

Uninstalling a Package

Searching for a Package containing a specific Program

Updating Packages

Solaris 11 Boot Environments

beadm Subcommands

LAB #2 - Managing Boot Environments

Using the beadm Command

Self-assessment test

Boot Process and Service Administration

Boot Process

SPARC Systems

x86 Systems

Grub 2

The Init Process

Inittab

Traditional Unix Run Levels

Solaris 11 Boot Milestones

Service Management Facility

Fault Management Resource Identifiers

SMF Service categories

SMF Service States

Legacy_run Services

SMF Commands

LAB #1 - Working with SMF

Using the svcs command

svcs switches

Using the svcadm command

Using the svcprop command

Maintenance mode

Using the svccfg command

inetd

TCP Wrapper

Boot Milestone Services

The shutdown command

Self-assessment test

Storage Administration

Preparing your Solaris 11 VM

Introduction

Solaris 11 and ZFS

ZFS Vocabulary

ZFS Commands

The zpool Command

The zfs Command

Solaris Slices

iSCSI Storage

LAB #1 - Managing ZFS Storage

Displaying Online Help

Checking Pool Status

Creating a Mirrored Pool

Adding File Systems to an Existing Pool

Changing the Pool Mount Point

Adding a Hot Spare

Observing Pool Activity

Setting a User Quota

Setting a User Reservation

Using Snapshots

Rolling Back to a Snapshot

Cloning a Snapshot

Using Compression

Using De-duplication

Using Encryption

Replacing a Faulty Disk

Destroying a Pool

Creating a RAID-5 Pool

Creating a RAID-6 Pool

Displaying the Zpool History

LAB #2 - Managing iSCSI Storage

Installing the COMSTAR Server

Creating SCSI Logical Units

Mapping the Logical Unit

Creating a Target

Configuring the Target for Discovery

Self-assessment test

Zone Administration - Duration: 4 hours

Solaris Containers

The Global Zone

Non-global or Local Zones

LAB #1 - Installing a Non-global Zone

Configuring the Zone's Dataset

Installing a Zone

A Zone's First Boot

Logging into a Zone Directly as Root

Logging into a Zone as a specific User

LAB #2 - Administering Zones

Sharing Files between the Global and Local Zones

Removing the Share

Allocating CPU Resources

Allocating Memory

Capping Resources

Adding Privileges to a Local Zone

Cloning a Local Zone

Changing a Zone's Name

Changing a Zone's Root Dataset

Backing Up a Zone

Restoring a Zone

Rehosting a Zone

Self-assessment test

Sample Course Material

…

The Solaris 11 Image Packaging System (IPS)

Introduction

Although still present as shown above, use of the Solaris 10 package management commands has been replaced in Solaris 11 by the Solaris Image Packaging System.

Solaris 11 uses the new Image Packaging System technology combined with the Service Management Facility ( SMF ), the Zettabyte File System ( ZFS ) technologies to greatly simplify both package management and patch management.

The IPS pkg command and its subcommands work much like their Linux counterparts yum, apt-get and zypper, relying on a repository which contains available packages.

pkg Subcommands

The pkg subcommands are as follows:

Subcommand	Description
publisher	Lists current and disabled repositories “published” by publishers
set-publisher	Adds a publisher
unset-publisher	Removes a publisher
list	Lists installed packages
search	Searches for a package in the system's active publishers and returns the first match found
install	Installs/Updates packages
uninstall	Uninstalls packages
refresh	Updates the cached list of available packages
update	Updates all or certain packages to their latest versions
info	Displays information about packages
contents	Displays files installed by a package
verify	Validates the installation and digital signature packages
history	Displays the pkg history
help	Lists the above and advanced subcommands and their switches

LAB #1 - Using IPS

Basic pkg subcommands

Firstly, check which publishers are installed on the system:

root@solaris:~# pkg publisher
PUBLISHER TYPE STATUS P LOCATION
solaris origin online F http://pkg.oracle.com/solaris/release/

You can display additional information about a publisher as follows:

root@solaris:~# pkg publisher solaris
Publisher: solaris
Alias:
Origin URI: http://pkg.oracle.com/solaris/release/
SSL Key: None
SSL Cert: None
Client UUID: ddee2130-0292-11e2-b9e5-80144f013e20
Catalog Updated: October 16, 2012 09:25:04 PM
Enabled: Yes

Now add the OpenIndiana publisher:

root@solaris:~# pkg set-publisher -g http://pkg.openindiana.org/sfe sfe
root@solaris:~# pkg publisher
PUBLISHER TYPE STATUS P LOCATION
solaris origin online F http://pkg.oracle.com/solaris/release/
sfe origin online F http://pkg.openindiana.org/sfe/

To understand the use of the -g switch, use the built-in help function:

root@solaris:~# pkg help set-publisher
Usage:
pkg set-publisher [-Ped] [-k ssl_key] [-c ssl_cert]
[-g origin_to_add|--add-origin=origin_to_add ...]
[-G origin_to_remove|--remove-origin=origin_to_remove ...]
[-m mirror_to_add|--add-mirror=mirror_to_add ...]
[-M mirror_to_remove|--remove-mirror=mirror_to_remove ...]
[-p repo_uri] [--enable] [--disable] [--no-refresh]
[--reset-uuid] [--non-sticky] [--sticky]
[--search-after=publisher]
[--search-before=publisher]
[--search-first]
[--approve-ca-cert=path_to_CA]
[--revoke-ca-cert=hash_of_CA_to_revoke]
[--unset-ca-cert=hash_of_CA_to_unset]
[--set-property name_of_property=value]
[--add-property-value name_of_property=value_to_add]
[--remove-property-value name_of_property=value_to_remove]
[--unset-property name_of_property_to_delete]
[--proxy proxy to use]
[publisher]

Display additional information about the publisher:

root@solaris:~# pkg publisher sfe
Publisher: sfe
Alias:
Origin URI: http://pkg.openindiana.org/sfe/
SSL Key: None
SSL Cert: None
Client UUID: e873ddf6-3fba-11e2-8b21-880027ed6b01
Catalog Updated: December 5, 2012 08:40:30 PM
Enabled: Yes

Now remove the OpenIndiana publisher:

root@solaris:~# pkg unset-publisher sfe
root@solaris:~# pkg publisher
PUBLISHER TYPE STATUS P LOCATION
solaris origin online F http://pkg.oracle.com/solaris/release/

List all available packages on the system:

root@solaris:~# pkg list | more
NAME (PUBLISHER) VERSION IFO
archiver/gnu-tar 1.26-0.175.1.0.0.24.0 i--
audio/audio-utilities 0.5.11-0.175.1.0.0.24.2 i--
codec/flac 1.2.1-0.175.0.0.0.0.0 i--
codec/libtheora 1.1.1-0.175.1.0.0.15.0 i--
codec/ogg-vorbis 2.30.0-0.175.1.0.0.12.0 i--
codec/speex 1.2-0.175.1.0.0.15.0 i--
communication/im/pidgin 2.10.5-0.175.1.0.0.24.0 i--
compress/bzip2 1.0.6-0.175.1.0.0.24.0 i--
compress/gzip 1.4-0.175.1.0.0.24.0 i--
compress/p7zip 9.20.1-0.175.1.0.0.24.0 i--
compress/unzip 6.0-0.175.1.0.0.24.0 i--
compress/xz 5.0.1-0.175.1.0.0.24.0 i--
compress/zip 3.0-0.175.1.0.0.24.0 i--
consolidation/SunVTS/SunVTS-incorporation 0.5.11-0.175.1.0.0.14.0 i--
consolidation/X/X-incorporation 0.5.11-0.175.1.0.0.24.1317 i--
consolidation/admin/admin-incorporation 0.5.11-0.175.1.0.0.5.0 i--
consolidation/cacao/cacao-incorporation 0.5.11-0.175.1.0.0.11.0 i--
consolidation/cde/cde-incorporation 0.5.11-0.175.0.0.0.0.0 i--
consolidation/cns/cns-incorporation 0.5.11-0.175.1.0.0.23.0 i--
consolidation/dbtg/dbtg-incorporation 0.5.11-0.175.1.0.0.15.0 i--
consolidation/desktop/desktop-incorporation 0.5.11-0.175.1.0.0.24.2 i--
consolidation/desktop/gnome-incorporation 0.5.11-0.175.1.0.0.22.0 i--
consolidation/gfx/gfx-incorporation 0.5.11-0.175.1.0.0.5.0 i--
consolidation/install/install-incorporation 0.5.11-0.175.1.0.0.24.1736 i--
consolidation/ips/ips-incorporation 0.5.11-0.175.1.0.0.24.0 i--
consolidation/java/java-incorporation 0.5.11-0.175.1.0.0.24.0 i--
consolidation/jdmk/jdmk-incorporation 0.5.11-0.173.0.0.0.0.0 i--
consolidation/l10n/l10n-incorporation 0.5.11-0.175.1.0.0.23.1134 i--
consolidation/man/man-incorporation 0.5.11-0.175.1.0.0.21.0 i--
consolidation/nspg/nspg-incorporation 0.5.11-0.175.1.0.0.5.0 i--
consolidation/nvidia/nvidia-incorporation 0.5.11-0.175.1.0.0.22.0 i--
consolidation/osnet/osnet-incorporation 0.5.11-0.175.1.0.0.24.2 i--
consolidation/sfw/sfw-incorporation 0.5.11-0.175.1.0.0.5.0 i--
consolidation/sic_team/sic_team-incorporation 0.5.11-0.175.1.0.0.5.0 i--
consolidation/solaris_re/solaris_re-incorporation 0.5.11-0.175.1.0.0.24.3 i--
consolidation/sunpro/sunpro-incorporation 0.5.11-0.175.1.0.0.19.0 i--
consolidation/ub_javavm/ub_javavm-incorporation 0.5.11-0.175.1.0.0.24.1 i--
consolidation/userland/userland-incorporation 0.5.11-0.175.1.0.0.24.0 i--
consolidation/vpanels/vpanels-incorporation 0.5.11-0.175.1.0.0.17.0 i-r
consolidation/xvm/xvm-incorporation 0.5.11-0.175.1.0.0.5.0 i--
crypto/ca-certificates 0.5.11-0.175.1.0.0.24.2 i--

Note the IFO column:

Letter	Description
i	The package is installed
f	The package is frozen and cannot be updated
o	The package is obsolete

To understand the r in the third column of the vpanels-incorporation package, use the info subcommand:

root@solaris:~# pkg info vpanels-incorporation
Name: consolidation/vpanels/vpanels-incorporation
Summary:
State: Installed (Renamed)
Renamed to: pkg:/consolidation/userland/userland-incorporation
pkg:/consolidation/osnet/osnet-incorporation
Publisher: solaris
Version: 0.5.11
Build Release: 5.11
Branch: 0.175.1.0.0.17.0
Packaging Date: May 29, 2012 10:02:23 PM
Size: 5.46 kB
FMRI: pkg://solaris/consolidation/vpanels/vpanels-incorporation@0.5.11,5.11-0.175.1.0.0.17.0:20120529T220223Z

Use the list subcommand to easily identify the package version number of a single package:

root@solaris:~# pkg list vpanels-incorporation
NAME (PUBLISHER) VERSION IFO
consolidation/vpanels/vpanels-incorporation 0.5.11-0.175.1.0.0.17.0 i-r

To identify the package creation timestamp, use the -v switch of the list subcommand:

root@solaris:~# pkg list -v vpanels-incorporation
FMRI IFO
pkg://solaris/consolidation/vpanels/vpanels-incorporation@0.5.11,5.11-0.175.1.0.0.17.0:20120529T220223Z i-r

The output of this command shows a line of the following format: FMRI Scheme://Publisher/Package Name@Version,Build Release-Branch:Package Creation Timestamp IFO The name FMRI means Fault Managed Resource Identifier. FMRIs are covered in the Service Administration lesson of this course.

Wildcards can be used to list packages available, either installed or not:

root@solaris:~# pkg list -a compress*
NAME (PUBLISHER) VERSION IFO
compress/bzip2 1.0.6-0.175.1.0.0.24.0 i--
compress/gzip 1.4-0.175.1.0.0.24.0 i--
compress/lcab (sfe) 1.0.12-0.151.1.5 ---
compress/lcab/src (sfe) 1.0.12-0.151.1.5 ---
compress/lha (sfe) 1.14.9.1-0.151.1.5 ---
compress/lha/src (sfe) 1.14.9.1-0.151.1.5 ---
compress/p7zip 9.20.1-0.175.1.0.0.24.0 i--
compress/unzip 6.0-0.175.1.0.0.24.0 i--
compress/unzoo (sfe) 4.4-0.151.1.5 ---
compress/unzoo/src (sfe) 4.4-0.151.1.5 ---
compress/xz 5.0.1-0.175.1.0.0.24.0 i--
compress/zip 3.0-0.175.1.0.0.24.0 i--

To display the number of installed packages, use the following command:

root@solaris:~# pkg list | wc -l
873

To display the number of installed and available packages, use the -a switch:

root@solaris:~# pkg list -a | wc -l
2615

Installing a Package

You are now going to install the ClamAV anti-virus package. This package is available from the OpenIndiana publisher. In order to use that publisher you need to add it once more:

root@solaris:~# pkg set-publisher -g http://pkg.openindiana.org/sfe sfe
root@solaris:~# pkg publisher
PUBLISHER TYPE STATUS P LOCATION
solaris origin online F http://pkg.oracle.com/solaris/release/
sfe origin online F http://pkg.openindiana.org/sfe/

There are two ways to identify the package name before being able to install it, either by using the list subcommand:

root@solaris:~# pkg list -a | grep clamav
antivirus/clamav (sfe) 0.97.6-0.151.1.6 ---
antivirus/clamav/src (sfe) 0.97.6-0.151.1.6 ---
security/clamav (sfe) 0.97.3-0.151.1 --r

or, alternatively by using the search subcommand:

root@solaris:~# pkg search antivirus/clamav
INDEX ACTION VALUE PACKAGE
require depend pkg:/antivirus/clamav@0.97.5,5.11-0.151.1.5 pkg:/security/clamav@0.97.3-0.151.1
pkg.fmri set sfe/antivirus/clamav pkg:/antivirus/clamav@0.97.5-0.151.1.5

Installing ClamAV is now very simple:

root@solaris:~# pkg install antivirus/clamav
Packages to install: 3
Create boot environment: No
Create backup boot environment: No
DOWNLOAD PKGS FILES XFER (MB) SPEED
Completed 3/3 55/55 1.7/1.7 458k/s
PHASE ITEMS
Installing new actions 110/110
Updating package state database Done
Updating image state Done
Creating fast lookup database Done

To check whether the package is now installed, use the list subcommand:

root@solaris:~# pkg list clamav
NAME (PUBLISHER) VERSION IFO
antivirus/clamav (sfe) 0.97.6-0.151.1.6 i--

or the verify subcommand:

root@solaris:~# pkg verify -v clamav
PACKAGE STATUS
pkg://sfe/antivirus/clamav OK

Remember that for more information about the installed package, you can use the info subcommand:

root@solaris:~# pkg info clamav
Name: antivirus/clamav
Summary: Unix anti-virus scanner
Category: Applications/System Utilities
State: Installed
Publisher: sfe
Version: 0.97.6
Build Release: 5.11
Branch: 0.151.1.6
Packaging Date: October 1, 2012 08:13:32 PM
Size: 3.95 MB
FMRI: pkg://sfe/antivirus/clamav@0.97.6,5.11-0.151.1.6:20121001T201332Z

By using the which command, you will notice that there is no clamav program in /bin or /usr/bin:

root@solaris:~# which clamav
no clamav in /usr/bin /usr/sbin

So, either the program is not called clamav or it is elsewhere in the filesystem. In order to see which files the package installed, use the contents subcommand:

root@solaris:~# pkg contents antivirus/clamav
PATH
etc
etc/clamav-milter.conf
etc/clamd.conf
etc/freshclam.conf
usr
usr/bin
usr/bin/clamav-config
usr/bin/clambc
usr/bin/clamconf
usr/bin/clamdscan
usr/bin/clamdtop
usr/bin/clamscan
usr/bin/freshclam
usr/bin/sigtool
usr/include
usr/include/clamav.h
usr/lib
usr/lib/libclamav.so
usr/lib/libclamav.so.6
usr/lib/libclamav.so.6.1.15
usr/lib/libclamunrar.so
usr/lib/libclamunrar.so.6
usr/lib/libclamunrar.so.6.1.15
usr/lib/libclamunrar_iface.so
usr/lib/libclamunrar_iface.so.6
usr/lib/libclamunrar_iface.so.6.1.15
usr/lib/pkgconfig
usr/lib/pkgconfig/libclamav.pc
usr/sbin
usr/sbin/clamav-milter
usr/sbin/clamd
usr/share
usr/share/doc
usr/share/doc/clamav
usr/share/doc/clamav/COPYING
usr/share/doc/clamav/COPYING.LGPL
usr/share/doc/clamav/COPYING.bzip2
usr/share/doc/clamav/COPYING.file
usr/share/doc/clamav/COPYING.getopt
usr/share/doc/clamav/COPYING.llvm
usr/share/doc/clamav/COPYING.lzma
usr/share/doc/clamav/COPYING.regex
usr/share/doc/clamav/COPYING.sha256
usr/share/doc/clamav/COPYING.unrar
usr/share/doc/clamav/COPYING.zlib
usr/share/doc/clamav/ChangeLog
usr/share/doc/clamav/FAQ
usr/share/doc/clamav/README
usr/share/doc/clamav/clamav-mirror-howto.pdf
usr/share/doc/clamav/clamdoc.pdf
usr/share/doc/clamav/phishsigs_howto.pdf
usr/share/doc/clamav/signatures.pdf
usr/share/man
usr/share/man/man1
usr/share/man/man1/clambc.1
usr/share/man/man1/clamconf.1
usr/share/man/man1/clamdscan.1
usr/share/man/man1/clamdtop.1
usr/share/man/man1/clamscan.1
usr/share/man/man1/freshclam.1
usr/share/man/man1/sigtool.1
usr/share/man/man5
usr/share/man/man5/clamav-milter.conf.5
usr/share/man/man5/clamd.conf.5
usr/share/man/man5/freshclam.conf.5
usr/share/man/man8
usr/share/man/man8/clamav-milter.8
usr/share/man/man8/clamd.8
var
var/clamav

As you can see, the package installed the following programs:

usr/bin/clamav-config
usr/bin/clambc
usr/bin/clamconf
usr/bin/clamdscan
usr/bin/clamdtop
usr/bin/clamscan
usr/bin/freshclam
usr/bin/sigtool
usr/sbin/clamav-milter
usr/sbin/clamd

Uninstalling a Package

Uninstalling the package is now as simple as installing it:

root@solaris:~# pkg uninstall clamav
Packages to remove: 3
Create boot environment: No
Create backup boot environment: No
PHASE ITEMS
Removing old actions 101/101
Updating package state database Done
Updating package cache 3/3
Updating image state Done
Creating fast lookup database Done

The uninstall subcommand removes all files installed by a package, except those that are dependencies of another installed package.

Searching for a Package containing a specific Program

You can also search for a package that contains a specific program:

root@solaris:~# pkg search /usr/bin/clamdscan
INDEX ACTION VALUE PACKAGE
path file usr/bin/clamdscan pkg:/antivirus/clamav@0.97.5-0.151.1.5
path file usr/bin/clamdscan pkg:/security/clamav@0.97.3-0.151.1

Updating Packages

The pkg command can also be used to update installed packages:

root@solaris:~# pkg update
No updates available for this image.

If you wish to update a specific package to the latest available version, use the following syntax : pkg update package@latest.

…

<html>

Copyright © 2004-2017 Hugh Norris.<br><br> <a rel=“license” href=“http://creativecommons.org/licenses/by-nc-nd/3.0/”><img alt=“Creative Commons License” style=“border-width:0” src=“http://i.creativecommons.org/l/by-nc-nd/3.0/88x31.png” /></a><br />This work is licensed under a <a rel=“license” href=“http://creativecommons.org/licenses/by-nc-nd/3.0/”>Creative Commons Attribution-NonCommercial-NoDerivs 3.0 Unported License</a>.

</html>