Oracle Solaris 11: First Look电子书

Oracle Solaris 11: First Look

Table of Contents

Oracle Solaris 11: First Look

Credits

About the Author

About the Reviewers

www.PacktPub.com

Support files, eBooks, discount offers and more

Why Subscribe?

Free Access for Packt account holders

Instant Updates on New Packt Books

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Errata

Piracy

Questions

1. IPS – The Image Packaging System

The brave new world of IPS

Repositories/repos

Repository URIs, also known as origins

Package naming schemes

Understanding the quirks of pkg name references

Understanding pkg FMRI version fields

Overview of package and patch installation

The traditional methods

New Solaris 11 patch and package installation methods

Practical examples of pkg command usage

Automatic package dependency use

Installation dry run

Finding packages that you want

Searching by filename (pkg search)

Searching by package names (pkg search)

Searching by package names (pkg list)

Listing files in a package

Searching for installation groups

Less-used pkg commands

Dealing with repositories

Creating your own IPS repository and packages

Creating a local repo

Copying the Oracle Solaris repository

Creating your own company repository

Creating a package

Uploading packages to the repository

Configuring machines to use your local repository

Package updates and patching

Summary

2. Solaris 11 Installation Methods

It's the Oracle of install systems!

Default passwords

Installation from CD-ROM

The x86 LiveCD install

Choosing Text Install image or Automated Install image

Manually invoking the install programs

Text Install image

Text Installer does AI too

Automated Install image

Getting a shell prompt from AI image

Speed of AI installer

Potential problems specific to AI install

Overview of how AI install works

AI installer client-side services

Manifest-locator service

Auto-installer service

AI installer server-side services

Network bootstrap process details

SPARC, wanboot, and DNS

PXE boot and x86

Setting up a local install server with installadm

Side effects of installadm create-service

Installadm, manifests, and profiles

Viewing existing manifests and profiles

Configuring a manifest

Dynamically generated manifests

Configuring a profile

Templates for profiles

Client registration via installadm create-client

Manifests and profiles for zones

Sharing wanboot with Solaris 10 clients

Common traps and pitfalls

Solaris 11 release version versus support version

Summary

3. Sysadmin Configuration Differences

Welcome to the new normal

Host identity: the sysconfig command

sysconfig configure

sysconfig unconfigure

sysconfig create-profile

Driver configuration: /etc/driver/drv

Network address configuration: ipadm and dladm

IP configuration

IP interface objects

IP interface tunables

IP and TCP tunables

Network layer 2 device configuration

Wireless configuration: Stick to the GUI if you can

Miscellaneous differences in system-level configuration

Name service related

Time zone and language settings

Nodename

Summary

4. Networking Nuts and Bolts

Networking re-architected

Kernel redesign

Orientation to new Solaris 11 networking

Interface naming and IP labels

A simple static IP example

Network infrastructure impact on zones

NWAM – NetWork AutoMagic

NWAM pitfalls

Sneaking around NWAM with VNICs

Using NWAM via GUI

IPMP – IP multipathing

Setting up IPMP

Link aggregation

VNIC – Virtual NIC

VLAN tagging

IP tunneling

Bridging

Network resource management

Per-interface management

Flow-based resource management

IP QoS – Quality of Service management

Step 1 – Create a temporary QoS configuration file

Step 2 – Activate the QoS rules file

Step 3 – Permanently configure (-c) it into the post-reboot kernel

Other changes

Summary

5. NWAM – Networking Auto-reconfiguration

What is NWAM and how you can use it

Capabilities of NWAM

NWAM basic concepts

Connections

Profiles

Locations

Summary

6. ZFS – Now You Can't Ignore It!

ZFS – your future, today

ZFS root – no more UFS

Primary benefit of ZFS root filesystem

ZFS booting and beadm

New boot-time options

New SPARC boot options

New x86 boot options

ZFS root limitations

ZFS, beadm, and zones

Deduplication now possible

ZFS encryption

ZFS diff between snapshots

ZFS's new ACL modes – simpler yet more powerful

Viewing ACLs on a file

Setting an ACL

Miscellaneous changes and improvements

Pool-related changes

Summary

7. Zones in Solaris 11

Taking things to the next zone

New zone utilities

New zone capabilities

Changes to zones

Allowable zone OS types limited

ZFS zoneroot layout and Boot Environments

Fast zone creation via clone

The zoned property of ZFS

Zone filesystems visible

Automatic Network Interfaces – the anet resource

Preconfiguring zones

Sysconfig information

Initial zonecfg defaults

Initial package content of zones

Example of fully preconfigured zone creation

Immutable zones

Creating an immutable zone

Verifying immutable zone configuration

Cloning an immutable zone

Updating immutable zone configurations

Summary

8. Security Improvements

Keeping the horse in the barn

Mandatory auditing

Auditing basics

Default audit events

Configuring more audit logging

Audit policies

Active versus configured values

Viewing audit logs

Immutable zones

ProFTPd is the new FTP server

Sudo privileged access tool

Direct root use now blocked by default

Fine-grained RBAC privileges

On-disk encryption

Warnings about encrypted ZFS filesystems

Creating an encrypted ZFS filesystem

Interaction between encryption, compression, and deduplication

PKCS11 centralized key store support

Profiles can now be in LDAP

Additional encryption support

Summary

9. Miscellaneous

What's in this chapter anyway?

Virtual consoles, also known as virtual terminals, are back

Fast reboot

CUPS printing

Power management

Notifications triggered by SMF state transitions

SMF notifications through e-mail, also known as SMTP

SMF notifications through SNMP

Querying and deleting SMF notifications

Trusted Solaris extras

COMSTAR and iSCSI

iSCSI targets

iSCSI initiator mode

Removing remote iSCSI devices

Safeguarding complex iSCSI configurations

Summary

A. IPS Package Reference

B. New ACL Permissions and Abbreviations

C. Solaris 10 Available Enhancements

ZFS backported enhancements

Other enhancements

Index