HP-UX Secure Resource Partitions (SRP) A.02.02 Administrator's Guide

87
a software version mismatch from the source to the target system.
The default is no.
You can use the following notation to assign a value to a variable:
name=value, name='value', or name="value"
17.3 Best practices for Exporting and Importing an SRP
To simplify the export and import of an SRP across systems, HP recommends to you keep the
properties of the SRP to be atomic and that you do not share files and data with other SRP
compartments unnecessarily. The following are best practices for using the srp –export and srp
-import commands:
• Maintain consistent OS versions and patch levels across systems
While SRP itself has minimal requirements for OS levels and patches to be synchronized
across systems, applications utilized within the SRP compartments may have more specific
requirements. By maintaining consistency across systems, you will not have to manually track
application dependencies when determining a target system for the SRP to import.
• Consider using shared storage or file systems when creating an SRP that will
be cloned
By using shared storage for the SRP home directory and any file systems mounted within the
SRP, you will not need to export and import file sets, and the data between SRPs will remain
consistent.
• Keep files and directories used by the SRP within the SRP home directory
Locating files within the SRP home directory (/var/hpsrp/<srpname>) will simplify
exporting or mounting SRP file sets.
• Avoid cross-compartment security relationships
If you customize the SRP compartment configuration to include access rules specifying another
compartment, the other compartment must exist on the system you import the SRP into.
• Synchronize or centralize user and group management
By ensuring that all systems have the same users and groups, SRP login user and groups and
file and directory ownership will not have to be modified after importing an SRP on a target
system. Consider defining a single group for all users for a given SRP.
• Use the –preview option to identify a suitable target system
You can use the srp –import command with the –preview option to validate if a target
system will accept an exchange file for import.
• Adjust device configuration after import
Configuration that specifies physical paths such as network interface devices and file system
mount points require manual configuration changes after import. HP recommends that you
adjust these device configurations after completing the import operation.