HP-UX Containers (SRP) A.03.00 Release Notes

ManualsBrandsHP ManualsSoftwareHP-UX Containers (SRP)

Table of contents

HP-UX Containers ................................................................................................................................ 2

HP-UX Containers documentation ....................................................................................................... 2

1 HP-UX Containers ............................................................................................................................. 2

1.1 HP-UX Containers overview ......................................................................................................... 2

1.2 HP-UX Containers features ........................................................................................................... 2

1.3 New HP-UX Containers features in A.03.00 .................................................................................. 3

1.4 HP 9000 Containers product ....................................................................................................... 4

1.5 Acquiring and installing HP-UX Containers .................................................................................... 4

1.5.1 Installation requirements ....................................................................................................... 4

1.5.2 Products included in the HP-UX Containers depot .................................................................... 4

1.5.3 Installing HP-UX Containers product ....................................................................................... 5

1.5.4 Removing (un-installing) HP-UX Containers product .................................................................. 5

1.6 Upgrading to HP-UX Containers A.03.00 ..................................................................................... 6

1.6.1 Upgrading requirements ....................................................................................................... 6

1.6.2 Upgrading instructions ......................................................................................................... 6

1.7 Limitations for HP-UX Containers A.03.00 ..................................................................................... 7

1.8 Restrictions on system containers .................................................................................................. 7

1.8.1 Disallowed operations in system containers ............................................................................ 8

1.8.2 Disallowed privileges in system containers.............................................................................. 8

1.8.3 Disallowed commands in system containers .......................................................................... 10

1.8.4 Restricted shared files in system containers ........................................................................... 10

1.8.5 Restricted HP products in system containers .......................................................................... 10

1.8.6 Features not supported in system containers .......................................................................... 10

1.9 Known problems in HP-UX Containers A.03.00 ........................................................................... 10

HP-UX Containers (SRP) A.03.00

Release Notes

Summary of content (13 pages)

PAGE 1
HP-UX Containers (SRP) A.03.00 Release Notes Table of contents HP-UX Containers ................................................................................................................................ 2 HP-UX Containers documentation ....................................................................................................... 2 1 HP-UX Containers ............................................................................................................................. 2 1.
PAGE 2
HP-UX Containers The information in this document is for HP-UX Containers A.03.00 only. HP-UX Containers documentation NOTE: This document was updated to include the following: • A new section: 1.8.3 Disallowed commands in system containers • A limitation for the SD command in section 1.7 Limitations for HP-UX Containers A.03.
PAGE 3
update, and delete containers. You can also use the tool to assign the following items to a container:  storage access  management roles  IP addresses  file system, networking, and IPC, and other isolation policies o Per container init processing - defines startup and shutdown activities per container. o Status reporting provides details on the various containers deployed on a system, including resource utilization and state.
PAGE 4
1.4 HP 9000 Containers product HP 9000 Containers provide a binary emulation environment for HP-UX PA-RISC workloads. The HP 9000 Containers product is installed separately from the HP-UX Containers (SRP) product. Once the HP-UX-SRP and HP 9000 Containers products are both installed, you can use the srp(1M) command to manage an HP 9000 container. Refer to the HP 9000 Containers documentation (http://www.hp.
PAGE 5
1.5.3 Installing HP-UX Containers product To install HP-UX Containers on your HP-UX 11i v3 March 2011 system, follow these steps: 1. Be sure your system meets all prerequisites described above. 2. Click Receive for Free>>. 3. Enter your registration information. Read and accept the Terms and Conditions and the Software License Agreement. Click Next. 4. Click Download. Save the HP-UX-SRP bundle as a local file on your system. For example: /tmp/HP-UX-SRP_A.03.00.depot 5.
PAGE 6
NOTE: Only the HP-UX-SRP bundle and the FsSrp product will be removed from the system. All other product bundles included in the HP-UX Containers A.03.00 bundle will remain on the system. 6. Use the swlist command to verify that the HP-UX-SRP bundle is removed from the system. The swlist command will not report the components of HP-UX-SRP if they were successfully removed from the system. # swlist HP-UX-SRP 1.6 Upgrading to HP-UX Containers A.03.00 HP-UX Containers A.03.
PAGE 7
3. Verify that all containers have been successfully migrated and are recognized by the system: # srp –status The migrated workload containers will be in the stopped state by default. 4. HP-UX Containers Version A.03.00 delivers new default configuration in the following configuration files: /etc/opt/hpsrp/cmpt/base.srp_incl /etc/opt/hpsrp/templates/srpdefaults.cst If you have modified these two configuration files in A.02.02, then you need to manually incorporate your A.02.02 changes into the A.03.
PAGE 8
1.8.1 Disallowed operations in system containers All users in a system container (including root) are prevented from performing the following list of administrative tasks.
PAGE 9
CMPTWRITE Allows a process to write to a file or directory, bypassing compartment rules. COMMALLOWED Allows a process to override compartment rules in the IPC and network subsystems. CORESYSATTR Allows a process to manage system attributes such as kernel tunables and system time. Example: kctune(1M), date(1M) DLKM Allows a process to load a kernel module, change the global search path for DLKM. Example: kcmodule(1M) FSS, FSSTHREAD Allows a process/thread to configure fair share scheduler.
PAGE 10
SYSNFS Allows a process to export a file system. TRIALMODE Allows a process to log privileges required to execute in the syslog file. 1.8.3 Disallowed commands in system containers The commands and system calls that fall into the category of disallowed operations covered in 1.8.1 Disallowed operations in system containers will fail in a system container. The disallowed operations can be part of a command (certain options) or can be the command itself.
PAGE 11
Workaround: Use the '-' option or set the TZ variable manually when the srp_su command is used without the '-' option. • The srp command allows configuring IPFilter and IPSec Services for only the primary IP address. The srp command allows configuring more than one IP addresses for a container. However, the IPFilter and IPSec services for the container will be configured only for primary IP address and not for secondary IP addresses.
PAGE 12
Workaround: To delete only the IPFilter service use the command line interface: # srp –delete -t