container_workload.5 (2011 09)

CONTAINER_WORKLOAD(5) CONTAINER_WORKLOAD(5)

Software Management

The Software Distributor (sd(5)) is used to install or remove software. You must be in the global view to

install or remove software. A workload container shares ﬁlesystem namespace with the global view, so by

default. Products installed in the global view are accessible from a workload container.

Device Access

All devices in the global ﬁlesystem view are accessible in a workload container.

Disallowed Privileges

By default, no privileges are disallowed in a workload container. A system administrator may customize

a workload container to restrict privileged tasks by updating the disallowed privileges in the compart-

ment rules ﬁle for a speciﬁc container. Refer to privileges(5) for a description of privileges that may be

disallowed and compartments(4) for a description of how to change the container’s compartment

conﬁguration ﬁle.

MANAGING WORKLOAD CONTAINERS

Workload containers can be created, modiﬁed, deleted, and migrated or cloned across systems via the

srp(1M) command. Workload containers can be started and stopped in a similar manner to starting and

stopping an individual system, including startup and shutdown processing. See sys_sys(1M), srp(1M) and

srp_init(1M).

A workload container must be created via the srp(1M) command using the workload template.

RESTRICTIONS

Users in a container are prevented from accessing ﬁles or directories in another container via compart-

ments(4) rules.