HP 9000 Containers A.03.01 on HP Integrity Server Administrator Guide HP-UX 11i v3 (5900-3112, June 2013)

NOTE: This enables MKNOD privilege inside the container, but ensure that the mknod command
is not used for any other purposes other than by DDFA itself. In general, using mknod inside the
container is not supported and can result in undefined system state.
4.5.15 Disabling Autofs
If Autofs is not used, disable this service to save container startup and shutdown time.
Open the file /etc/rc.config.d/nfsconf and set AUTOFS=0.
4.5.16 Configuring telnet for HP-UX 10.xx containers
HP-UX 10.xx version of telnetd is incompatible with ARIES emulation on HP-UX 11i v3. The
workaround is to copy the files from an HP-UX 11i v1 or HP-UX 11.00 system to the 10.xx container.
The files to be copied are as follows:
/usr/lbin/telnetd
/usr/lib/libc.2
/usr/lib/libsis.1
/etc/inetsvcs.conf
Create a symbolic link inside the container:
$ ln –s /usr/lib/libsis.1 /usr/lib/libsis.sl
4.5.17 Configuring OSI Transport Services
If OSI Transport Services (OTS) is in use on the HP 9000 server, download the version for Integrity
HP-UX 11i v3 and install it on the host system (global). Copy the related devices into the container:
$ srp –add <srp_name> –tune device=/dev/osotipi
$ srp –add <srp_name> –tune device=/dev/otsop
4.5.18 Enabling auditing
Auditing is not supported inside an HP 9000 system container, but auditing can be enabled from
the global container and records can be filtered at a container granularity. For auditing, selection
of users must be done inside the container.
To enable auditing in the global, run the audsys(1M) command. For example,
$ audsys -n -c /var/adm/audit_trail -N 1
To select events or system calls for auditing, use the audevent command. Migrating the list of
selected system calls from the PA-RISC file system image to the global is a manual process.
The user selection for auditing is retained inside the container file system. You can change the user
settings inside the container by running the audusr (with trusted mode) or userdbset (with
SMSE) command. HP SMH or SAM is not supported inside an HP 9000 container.
For more information about how to filter and view audit records for a container and view the list
of known auditing limitations, see Section 8.13 (page 58).
4.6 Testing HP 9000 system container
If the HP 9000 system container is configured on the primary node of an SG cluster with container
package model, see Section 10.5.1 (page 68) for more information about how to start the HP
9000 container for testing.
Otherwise, start the container:
$ srp –start <srp_name>
4.6 Testing HP 9000 system container 29