HP-UX Containers (SRP) A.03.01.007 Release Notes (766153-002, May 2014)

ManualsBrandsHP ManualsSoftwareHP-UX Containers (SRP)

Table Of Contents

Table of contents

HP secure development lifecycle ............................................................................................................ 2

HP-UX Containers ................................................................................................................................ 3

HP-UX Containers documentation ....................................................................................................... 3

1 HP-UX Containers ............................................................................................................................. 3

1.1 HP-UX Containers overview ......................................................................................................... 3

1.2 HP-UX Containers features ........................................................................................................... 3

1.3 HP 9000 Containers product ....................................................................................................... 5

1.4 What’s new in HP-UX Containers A.03.01.007 ............................................................................. 5

1.5 Acquiring and installing HP-UX Containers .................................................................................... 5

1.5.1 Installation requirements ....................................................................................................... 5

1.5.2 Configuration requirements................................................................................................... 5

1.5.3 Products included in HP-UX Containers depot......................................................................... 6

1.5.4 Installing HP-UX Containers product ....................................................................................... 6

1.5.5 Removing (un-installing) HP-UX Containers product .................................................................. 7

1.6 Upgrading to HP-UX Containers A.03.01.007 .............................................................................. 7

1.6.1 Upgrade requirements ......................................................................................................... 8

1.6.2 Upgrade instructions for HP-UX SRP A.02.02 .......................................................................... 8

1.6.3 Upgrade instructions for HP-UX Containers A.03.00 ................................................................ 9

1.7 Fixes and Enhancements in HP-UX Containers ............................................................................. 10

1.8 Limitations for HP-UX Containers A.03.01.007 ............................................................................ 13

1.9 Known issues in HP-UX Containers A.03.01.007 ......................................................................... 14

1.10 Compatibility with other products ............................................................................................. 16

1.11 Restrictions on system containers .............................................................................................. 16

1.11.1 Disallowed operations in system containers ........................................................................ 16

1.11.2 Disallowed privileges in system containers.......................................................................... 17

1.11.3 Disallowed commands in system containers ........................................................................ 18

1.11.4 Write restrictions on shared files in system containers .......................................................... 19

1.11.5 Restricted HP products in system containers ........................................................................ 19

1.11.6 Features not supported in system containers ........................................................................ 19

Documentation feedback .................................................................................................................... 20

HP-UX Containers (SRP) A.03.01.007

Release Notes

Summary of content (21 pages)

PAGE 1
HP-UX Containers (SRP) A.03.01.007 Release Notes Table of contents HP secure development lifecycle ............................................................................................................ 2 HP-UX Containers ................................................................................................................................ 3 HP-UX Containers documentation .......................................................................................................
PAGE 2
HP secure development lifecycle Starting with HP-UX 11i v3 March 2013 update release, HP secure development lifecycle provides the ability to authenticate HP-UX software. Software delivered through this release has been digitally signed using HP's private key. You can now verify the authenticity of the software before installing the products, delivered through this release. To verify the software signatures in signed depot, the following products must be installed on your system: • B.11.31.
PAGE 3
HP-UX Containers The information in this document is for HP-UX Containers A.03.01.007 only. HP-UX Containers documentation For more information on HP-UX Containers, refer to these documents: • HP-UX Containers (SRP) Administrator's Guide • • HP-UX Containers (SRP) White Papers CMGR Administrator's and Developer's Guide These documents are located at: http://www.hp.com/go/hpux-srp-docs 1 HP-UX Containers 1.
PAGE 4
to a container:  storage access  management roles  IP addresses  file system, networking, and IPC, and other isolation policies o Per container init processing - defines startup and shutdown activities per container. o Status reporting provides details on the various containers deployed on a system, including resource utilization and state. • Import and export a container o Copy a container from one system to another.
PAGE 5
• • Enhancements for Container Manager, formerly SRP Manager, to support configuration of multiple IP addresses for a container. Support to update the HP-UX operating system in an HP-UX Containers enabled system to a newer version using the update-ux(1M) command. The update-ux command was not supported with HP-UX Containers A.03.00.x. 1.3 HP 9000 Containers product HP 9000 Containers provides a binary emulation environment for HP-UX PA-RISC workloads.
PAGE 6
separate file systems for /var, /usr, and /sbin, you must create a new file system for /var/hpsrp or a new file system for each shared system container root directory (/var/hpsrp/container_name). Use the bdf command to identify the file systems and the associated mount points. Note that the /stand directory is always a unique file system. 1.5.3 Products included in HP-UX Containers depot The HP-UX Containers A.03.01.
PAGE 7
# swlist -d @ /tmp/HP-UX-SRP_A.03.01.007_HP-UX_B.11.31_IA_PA.depot 7. Log into the system as the root user. 8. To install the HP-UX-SRP bundle, enter # swinstall -x autoreboot=true -s /tmp/HP-UX-SRP_A.03.01.007_HPUX_B.11.31_IA_PA.depot \* The swinstall command displays an error message if the installation fails. Examine the /var/adm/sw/swagent.log file for information if the installation fails. 9. Run the swverify command to ensure that the products that you selected installed correctly.
PAGE 8
If the system has an operating system older than HP-UX 11i v3, March 2012 release, you must first update your system to HP-UX 11i v3 March 2012 or later release before installing HP-UX Containers A.03.01.007. The srp_migrate utility migrates existing HP-UX-SRP A.02.02 workload SRPs to HP-UX Containers A.03.01 and later workload containers. The HP-UX SRP A.02.02 workload SRPs are not visible in the HP-UX Containers A.03.01.007 environment until you run the srp_migrate utility. 1.6.
PAGE 9
1.6.3 Upgrade instructions for HP-UX Containers A.03.00 After installing HP-UX Containers A.03.01.007, the system will reboot. During system startup, the Adding SRPs to kernel configuration step may fail. If any containers are detected that do not conform to the file system configuration requirements (1.5.2 Configuration requirements), the /etc/rc.log file will capture errors reported from the /sbin/rc1.
PAGE 10
4. Copy the existing container data to the new file system. Copy all files excluding UNIX domain sockets into the new file system, preserving the file attributes: # cd /var/hpsrp.backup # find . ! –type s | /usr/bin/cpio –updmx /var/hpsrp 5. Reboot the system. # shutdown –r After the reboot, all containers will be configured successfully. HP-UX Containers Version A.03.01 and later delivers new default configuration in the following configuration file: /etc/opt/hpsrp/templates/srpdefaults.
PAGE 11
QXCR1001244844 Apache template does not provision index.html and associated files into workload container. A.03.01.006 QXCR1001148575 When creating a system container, SRP does not provision some directories present under global view "/" into the container. A.03.01.006 QXCR1001255074 System panics when the session/terminal, which is running the srp -start or srp -stop command, is closed prematurely or gets disconnected before the command runs to completion. A.03.01.
PAGE 12
shell characters. QXCR1001171208 Fixed issue of non-root user unable to FTP into global A.03.01.004 even if the user is authorized. QXCR1001187059 Corrected message shown in rc.log when swcopy fails to copy remote OE depot to local. A.03.01.004 QXCR1001195525 Fixed issue of "SRPsu" role missing after a container import operation. A.03.01.004 QXCR1001200102 Fixed error message reported while adding a shared system container. A.03.01.
PAGE 13
or remote system with a different container name. QXCR1001129210 Support for multiple containers when using the HP9000 Containers product. A.03.01 1.8 Limitations for HP-UX Containers A.03.01.007 When the HP-UX Containers A.03.01.007 bundle is installed on the system, the following features are not available: 1. Installation from a remote network registered SD depot is not supported for software installation. See the HP-UX Containers (SRP ) A.03.01 Administrator’s Guide for alternative options. 2.
PAGE 14
1.9 Known issues in HP-UX Containers A.03.01.007 This section lists known issues and appropriate workarounds: Issue: • Add custom configuration tab of SRP GUI is not listing the same variables for system and workload containers. System container is listing fewer variables than workload. Workaround: SRP command line interface needs to be used to “add custom configuration" to system container instead of SRP GUI interface.
PAGE 15
Issue: • The srp or srp_sys command may fail and print the error message, ‘“:POSIX” is not exported by the Errno module’, followed by a series of perl diagnostics. If the PERL5LIB environment variable is set to an alternate path, the referenced perl version may be incompatible with the HP-UX Containers product. The HP-UX Containers product has been validated with the Perl version E.5.8.8.F, shipped with the HP-UX 11i OE.
PAGE 16
# setrules # getrules | grep vxfs5.0/bcheckrc None /sbin/fs/vxfs5.0/bcheckrc 5. Start all system containers: # srp -start 1.10 Compatibility with other products The following compatibility issues must be noted before you install the HP-UX Containers product: HPVM Installing HP-UX Containers on an HPVM Host is not supported. However, you can install and configure HP-UX Containers on an HPVM guest. Trusted Systems HP-UX Containers is not supported on a system with Trusted Systems enabled.
PAGE 17
• Reading kernel memory • Make kernel • System crash configuration • Kernel Registry Services • DLKM management • Creating device files • Changing system time • Shutdown/reboot the physical system • Swap space management • Logical volume management • Physical devices management • Network interface card configuration • IP Address configuration • Network tunable configuration • Compartment rule configuration • Bypassing compartment rules using overriding privileges • Enable/di
PAGE 18
Allows a process to manage system attributes such as kernel tunables and system time. Example: kctune(1M), date(1M) DLKM Allows a process to load a kernel module, change the global search path for DLKM. Example: kcmodule(1M) FSS, FSSTHREAD Allows a process/thread to configure fair share scheduler. MKNOD Allows a process to create character or block special files. Example: mknod(1M) MPCTL Allows a process to change processor binding, locality domain binding, or launch policy of a process.
PAGE 19
be part of a command (certain options) or can be the command itself. Some examples of the disallowed commands are: accton(1M); acctsh(1M); date(1) –u, -a; getprivgrp(1M); ied(1); mknod(1M); mpsched(1); privgrp(4); psrset(1M); ptydaemon; reboot(1M); sar(1M), setboot(1M); setprivgrp(1M); setuname(1M) –s; shl(1); timex(1) –o, -p; umodem(1); uupath(1); who(1) –A, -t 1.11.4 Write restrictions on shared files in system containers System containers support two filesystem types: private and shared.
PAGE 20
Documentation feedback HP is committed to providing documentation that meets your needs. To help us improve the documentation, send any errors, suggestions, or comments to Documentation Feedback (docsfeedback@hp.com). Include the document title and part number, version number, or the URL when submitting your feedback.
PAGE 21
Technology for better business outcomes © Copyright 2012, 2013, 2014 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.