The Blog of Ben Rockwood

Streamlining Zone Creation Thanks to ZFS Integration

28 Sep '06 - 17:07 by benr

Zone's a wonderful and handy tools for developers and admins alike, but creating them can be a time consuming activity especially when you need to create more than one. Scripting can help but your not shortening the time, just automating the process. But around Nevada B43 ZFS and Zones were integrated, building on each others strengths. Now we can clone zones, which reduces the amount of wasted disk space when creating multiple zones that are initially identical. When you create a zone in a ZFS pool a new filesystem is automatically created instead of just a simple directory. And just in case your existing zones are on UFS and you want to migrate them to ZFS, you can use the handy move capabilities of zoneadm to move everything seemlessly for you.

Lets take a look at the process.

First lets create our initial zone, which I'm calling "puppet1".

$ zonecfg -z puppet1 'create; set autoboot=true; set zonepath=/ultrastor/puppet1; add net; 
set address=10.0.0.21; set physical=nge0; end; verify; commit; exit'
$ zonecfg -z puppet1 info
zonename: puppet1
zonepath: /ultrastor/puppet1
autoboot: true
bootargs:
pool:
limitpriv:
inherit-pkg-dir:
        dir: /lib
inherit-pkg-dir:
        dir: /platform
inherit-pkg-dir:
        dir: /sbin
inherit-pkg-dir:
        dir: /usr
net:
        address: 10.0.0.21
        physical: nge0

Note in the above that by default /usr, /sbin, /lib, and /platform are loopback mounted rather than copied, which is the default behavior. If you wanted a "blank" configuration with no defaults set you could have specified create -b to zonecfg.

zonecfg only creates the metadata required for my zone to function, the zone itself hasn't actually been created. So now I'll go ahead and "install" the zone.

$ time zoneadm -z puppet1 install
A ZFS file system has been created for this zone.
Preparing to install zone .
Creating list of files to copy from the global zone.
Copying <35389> files to the zone.
Initializing zone product registry.
Determining zone package initialization order.
Preparing to initialize <1073> packages on the zone.
Initialized <1073> packages on zone.                                 
Zone  is initialized.
Installation of these packages generated warnings: 
The file  contains a log of the zone installation.

real    24m28.964s
user    1m0.522s
sys     1m50.353s

So that install took 25 minutes! Part of the hold up was due to my not inheriting /opt, and you see that in the output as the 35,000 files to copies. But because I want to write into /opt, it had to be done.

I personally can't stand going through the sysid when you boot a zone for the first time (the curses interface that asks you all the questions), so I'll insert a sysidcfg file before I boot the zone for the first time.

$ cat sysidcfg 
system_locale=C
timezone=US/Pacific
terminal=xterms
security_policy=NONE
root_password=HsANA7Dt/0sXX
timeserver=localhost
name_service=NONE
network_interface=primary {hostname=puppet1
        netmask=255.255.255.0
        protocol_ipv6=no
        default_route=10.0.0.250}
name_service=NONE
nfs4_domain=dynamic
$ cp sysidcfg /ultrastor/puppet1/root/etc/
$ zoneadm -z puppet1 boot

Against, this first boot is going to take a while as it initializes everything. While its booting you should watch the console by using zlogin -C puppet1 in another window.

So I've now spent the better part of an hour getting this zone setup and configured. At this point I can do any last little tweeks I want within the zone.

Now comes the real magic. I liked that first zone, but I need 4 more. Rather than repeat the process, I can simply clone them off! This first requires that I create the zone configuration for them.

$ zonecfg -z puppet2 'create; set autoboot=true; set zonepath=/ultrastor/puppet2; 
add net; set address=10.0.0.22; set physical=nge0; end; verify; commit; exit'
$ zonecfg -z puppet3 'create; set autoboot=true; set zonepath=/ultrastor/puppet3; 
add net; set address=10.0.0.23; set physical=nge0; end; verify; commit; exit'
$ zonecfg -z puppet4 'create; set autoboot=true; set zonepath=/ultrastor/puppet4; 
add net; set address=10.0.0.24; set physical=nge0; end; verify; commit; exit'

Now I can clone the first zone, puppet1, to bypass the normal "install" phase of the other zones.

$ zoneadm list -vc
  ID NAME             STATUS         PATH                          
   0 global           running        /                             
  19 puppet1          running        /ultrastor/puppet1                 
   - puppet2          configured     /ultrastor/puppet2            
   - puppet3          configured     /ultrastor/puppet3            
   - puppet4          configured     /ultrastor/puppet4   
$ zlogin puppet1 halt
$ time zoneadm -z puppet2 clone puppet1
Cloning snapshot ultrastor/puppet1@SUNWzone1
Instead of copying, a ZFS clone has been created for this zone.

real    0m53.895s
user    0m0.289s
sys     0m0.218s
$ zoneadm -z puppet3 clone puppet1
Cloning snapshot ultrastor/puppet1@SUNWzone2
Instead of copying, a ZFS clone has been created for this zone.
$ zoneadm -z puppet4 clone puppet1
Cloning snapshot ultrastor/puppet1@SUNWzone3
Instead of copying, a ZFS clone has been created for this zone.

You'll notice that it created a new ZFS snapshot each time I cloned, I could have actually specified "-s SUNWzone1" after the first clone to continue using that single snapshot.

Now we look again at our zone list to see that we've changed state for those 3 new zones from "configured" to "installed":

$ zoneadm list -vc
  ID NAME             STATUS         PATH                          
   0 global           running        /                             
   - puppet1          installed      /ultrastor/puppet1            
   - puppet2          installed      /ultrastor/puppet2            
   - puppet3          installed      /ultrastor/puppet3            
   - puppet4          installed      /ultrastor/puppet4

Perfect. To avoid any additional configuration I'll take that sysidcfg I created earlier, change the hostname, and then copy it in. Once thats done, start 'em up.

$ cp sysidcfg /ultrastor/puppet2/root/etc/
$ cp sysidcfg /ultrastor/puppet3/root/etc/
$ cp sysidcfg /ultrastor/puppet4/root/etc/
$ vi /ultrastor/puppet2/root/etc/sysidcfg
$ vi /ultrastor/puppet3/root/etc/sysidcfg
$ vi /ultrastor/puppet4/root/etc/sysidcfg
$ zoneadm -z puppet1 boot
$ zoneadm -z puppet2 boot
$ zoneadm -z puppet3 boot
$ zoneadm -z puppet4 boot

And we're done! Cloning lets us really leverage that initial time we spent getting our zone right and relieves us of having to repeat it over and over. While creating that first zone might take 30 minutes or more, more can be created in minutes with ease. By using sysidcfg files as well we even further reduce the intervention on our part.

$ zoneadm list -vc | grep puppet
  23 puppet1          running        /ultrastor/puppet1            
  27 puppet2          running        /ultrastor/puppet2            
  28 puppet3          running        /ultrastor/puppet3            
  29 puppet4          running        /ultrastor/puppet4

Just wrap some of this up in a script and things get even simpler. If you thought you were burning through your class C address space before, just watch your network admin cridge now!

- - C O M M E N T S - -
I really hope Sun will add DHCP support to zone soon, it would be so much easier for testing, no even necessary to talk to the network admin !

Francois - 29 September '06 - 00:19

The problem is that a zone doesn’t have a unique MAC address… that’ll be fixed with Project Crossbow and VNIC’s: [[http://www.opensolaris.org/os/project/..]]

benr - 29 September '06 - 03:31

Hey Ben,

you’re the Master of Puppets.

Rock on :D

Patrick - 29 September '06 - 19:26

How would you solve this same problem if you had 2000 servers that needed 4 zones each, without any human interaction whatsoever?

ux-admin (Email) - 30 September '06 - 04:31

Very nifty trick – I’ll try that at work!

One typo though – shouldn’t “zlogin puppet1 halt” be “zoneadm puppet1 halt”?

Chris Ridd (Email) - 01 October '06 - 07:21

Chris: No its not a typo. There are two ways to halt a zone, one is to use zoneadm, which would actually be “zoneadm -z puppet1 halt”. The other is to log into the zone and run the “halt” command, which can be done be done in one command from the global zone as “zlogin puppet1 halt”. The diff is, if halt with zoneadm nothing in the zone is stopped, its just halted. If you halt from within the zone it actually shuts down cleanly.

This is something I learned at Joyent/Textdrive… in my testing enviroment it never made a diffrence, but appearently here in production its bit them in the butt.

benr - 08 October '06 - 00:35

Oh, that’s definitely something to be wary of. Thanks for the tip!

Chris Ridd (Email) - 08 October '06 - 10:00

Ben,
its one of your padawon learners in sacramento
hey I am trying to take a snapshot of a zfs file system dedicated for a zone, I see that you are cloning your new zone images from actual snapshots.. I tried to emulate what you did and it seemed like it cloned from the target zone and not a snapshot?
help

Terry Greene (Email) - 05 March '08 - 18:43

Xanax (Generic) 60 pills x 2mg – Price: $199.00
Xanax is a tranquilizer used in the short-term relief of symptoms of anxiety or the treatment of anxiety disorders. Anxiety disorder is marked by unrealistic worry or excessive fears and concerns. Anxiety associated with depression is also responsive to Xanax.
Xanax and the extended-release formulation, Xanax XR, are also used in the treatment of panic disorder, which appears as unexpected panic attacks and may be accompanied by a fear of open or public places called agoraphobia. Only your doctor can diagnose panic disorder and best advise you about treatment.
Some doctors prescribe Xanax to treat alcohol withdrawal, fear of open spaces and strangers, depression, irritable bowel syndrome, and premenstrual syndrome.
Klonopin, Valium, Ambien – Low prices. Worldwide shipping (FEDEX, DHL, EMS, etc.), 100% Satisfaction Guaranteed, No prior prescription required, 24/7 customer support. AmEx, WU and E-CHECK.

worms (Email) (URL) - 10 May '08 - 14:24

024ae30f e2c33ec0 8c9 ancor1|ancor2|ancor3|ancor4|ancor5 He says I must select [URL= [[http://google4.com.com]] ]ancor1ancor2ancor3ancor4ancor5[/URL] , and knows I cant.
Are they all download ancor1ancor2ancor3ancor4ancor5 out to destroy our country?
[[http://google4.com.org]] Hot ancor1ancor2ancor3ancor4ancor5 round out the eighth and ninth positions.

I\\\’m love this great website. Many thanks guy

Josephine (Email) (URL) - 14 May '08 - 11:18

shop zithromax welcome

zithromax (Email) (URL) - 15 May '08 - 03:50

shop zithromax welcome

zithromax (Email) (URL) - 15 May '08 - 03:51

xanax

xanax (Email) (URL) - 21 May '08 - 01:00

viagra

viagra (Email) (URL) - 22 May '08 - 13:46

blodulv

blodulv (Email) (URL) - 23 May '08 - 22:56

Hello. Please tell me. What is it online pharmacy? Whether it is possible to trust online pharmacy?

hutopire (Email) (URL) - 26 June '08 - 02:31

If you do not wish to receive similar messages please inform us on it by mail ban.site[dog]gmail.com

Google (Email) (URL) - 07 July '08 - 11:21

is there a way to browse the different entries in [[http://www.cuddletech.com/blog/pivot/e..]]. I just want to search a different topic about Solaris

yon - 22 July '08 - 07:17

chizelnodro

cadrondart (Email) (URL) - 29 July '08 - 03:45

florida marlins and pax
catholic charities jobs long island

Mary-pv (Email) (URL) - 06 August '08 - 13:56

pictures of a sally growler hahnemann unversity hospital careers john berry your love amazes me boat retail whole sales screen printed t shirt
camaer surfcasting for striped bass topthrilldragster how much does a tower cost by its self pine wreaths

nanny_[!2] (Email) (URL) - 11 October '08 - 10:28

oakwood apartments bellingham ameran idol surveilance and target aquisition marines prosytems fx extended network generator myspace alcohol westlakebilling free limewire installer lawr teen red aol traveka nazarene
drag racing n michigan austin and central texas sanford clark blow job and family reunion the prodigy mp3 breathe dozzy cards arthartmann philly paper hegner saw 2007 calendars online

Mary-uq (Email) (URL) - 11 October '08 - 18:08

порно
лесбиянки
геи
анал
БДСМ
групповое
минеты
фетиш
фистинг
видео порно скачать
видео порно сиськи скачать
видео порно секс эротика
видео порно скачать video
видео порно секс старух
видео порно секс групповой
видео порно секс геев
видео порно секс анал
видео порно секс submit
видео порно скачать лолиты
хентай
порно
лесбиянки
геи
анал
БДСМ
групповуха
минет
фетиш
фистинг
хентай

herey (Email) (URL) - 11 October '08 - 22:35

truck liners professional writing services for cover letters camletoes cowboy hat for kids under 30 erics bbq pembroke pines florida
glenby inc. the austin chronicle and publisher true voice black female american poets jerry klauer

nanny_[!2] (Email) (URL) - 12 October '08 - 20:09

baywatch tv tome best tasting chocolate cake websites for transporting services needing independent contractors brighton court george washington 500 000 loan from pennsylvania farmer
pvc threaded fittings 308 winchester buy bernadette icon real estsate the differance between a dds dentist and a pdd

Mary-nt (Email) (URL) - 12 October '08 - 22:04

why i feel what i feel inside blackstreet lyrics aegea medi-spa and salon in conroe texas kirtland ohio lds tourist sites atlanta apparel mart looking for info on homeing pigeons in beloit wisc
grammatica mythical dragon pictures meet local nude men ocean life drawings sacramento and infinity and kovr

nanny_[!2] (Email) (URL) - 13 October '08 - 03:13

paper doll bannana republic bebe sell your house tips talking about getting myself off. freddie jackson live dvd unpretty
printable crossword for kids free hunting magazines traffic on 405 north wake up ona saturday night dont want to back

Mary-up (Email) (URL) - 13 October '08 - 04:26

видео порно скачать
видео порно сиськи скачать
видео порно секс эротика
видео порно скачать video
видео порно секс старух
видео порно секс групповой
видео порно секс геев
видео порно секс анал
видео порно секс submit
видео порно скачать лолиты
порно
лесбиянки
геи
анал
БДСМ
групповуха
минет
фетиш
фистинг
хентай

gyge (Email) (URL) - 13 October '08 - 07:41

brthdayexpress wright industries cheaper engagementrings monologue from closer stator brothers
cheap flights to myrtle beach federal agent mad cuz lasalle apartment ratings birmingham king george v teacher interview letters and thank you letters

nanny_[!2] (Email) (URL) - 13 October '08 - 10:21

Antoinette (Email) (URL) - 13 October '08 - 16:26

ohio sate and wbns-tv ocean tag landlord complaints new jersey comcast spotlight and miami and interconnect the honeycombs
sun shine kids club md online associates degree in nursing purchase confront weed killer haisten woodlawn funeral home apa bibliography

nanny_[!2] (Email) (URL) - 13 October '08 - 17:30

mysry skatebording parakeets preaning waldorf astoria in new york city dc government unclaimed properties usmcr
ron adrian artwork physicians formuls stacey deffenbaugh telemundo and kphz and phoenix seven wors of the world

nanny_[!2] (Email) (URL) - 14 October '08 - 00:09

Chester (Email) (URL) - 15 October '08 - 01:09

Скачать порно рома трахает беркову
Скачать порно с земановой
Скачать порно ролик 1 мин
Скачать порно ролики без паролей
Скачать порно за 1
Скачать порно ролики avi
Скачать порно наташа
Скачать порно русского инцеста
Скачать порно фотки зрелых женщин
Скачать порно наташа
Скачать порно видео ролик бессплатно
Секс скачать порно
Скачать порно фото изнасилование
Скачать порно торенты
Скачать порно с кавказцем
Скачать порно видео ролики в avi
Скачать порно платно
Скачать порно видело
Скачать порно видео эротику супер
Скачать порно дп

ftge (Email) (URL) - 15 October '08 - 19:46

viagra buy
[[http://hellgate.incgamers.com/forums/m..]]
online buying viagra cheapest
[[http://www.eugclan.com/forums/index.ph..]]
buying viagra no prescription
[[http://sdnforum.com/forums/member.php?..]]
viagra buy without a prescription
buying viagra without a prescription – viagra buying without prescription
online buying viagra
online buy viagra cheapest – buy viagra
cheap viagra buy
online viagra buy – buying viagra without a prescription
buying viagra no prescription
viagra buy without a prescription – viagra buying no prescription
buying viagra without prescription
online viagra buy – viagra buy without a prescription
viagra buy without prescription
cheap buying viagra – online buying viagra cheapest
viagra buy without a prescription
online viagra buy – online buying viagra cheapest
buy viagra without prescription
online buying viagra cheapest – online viagra buying cheapest
online viagra buy
buy viagra – buy viagra
viagra buy without a prescription
buy viagra – buy viagra without a prescription
online viagra buying cheapest
viagra buy no prescription – cheap buying viagra
cheap buy viagra
online viagra buy – cheap viagra buying
buying viagra without prescription
buying viagra without prescription – viagra buy
online viagra buy cheapest
cheap viagra buy – viagra buying without prescription
online viagra buy cheapest
buy viagra without prescription

ViagraBuyViagra (Email) (URL) - 15 October '08 - 20:20

Did you see it ? :) It’s simply beautyfull thing [u][[http://adventures.110mb.com[/u]]]]

sharpbobby (Email) - 17 October '08 - 20:29

- Emu oil is a natural substance which is found in the form of bracelets and necklaces, or even as bedding sheets and pillows which can help relieve arthritis pain through the use of essential oils which can be consumed as capsules, paste or in food. 1992 soma cyclone truck

infeliant (Email) (URL) - 02 November '08 - 19:26

This story is very useful. Really I like it. Thanks for sharing with us.

Cheap Airfares (Email) (URL) - 04 November '08 - 09:14

goldsmiths golf

Mary-cl (Email) (URL) - 10 November '08 - 21:56

кухни на заказ
шкаф купе на заказ
гардеробная комната на заказ
мебельные стенки на заказ
детская мебель на заказ
шпонированная мебель на заказ
мебель на заказ
каталог мебели
ремонт кухни и дизайн
купить шкафы-купе
доставка мебели по россии
материалы для мебели
стоимость мебели и заказ
мебель на заказ купить
купить шкаф купе
заказ шкаф купе
шкаф купе москва
шкафы купе на заказ
заказать шкаф купе
прихожая шкаф купе
расчет шкафа купе
шкаф купе продажа
шкаф купе фото
шкаф купе интернет

gfhd (Email) (URL) - 11 November '08 - 19:14

viagra buy
viagra
cialis
64 viagra
cialis 10
cialis 20
cialis me
cialis st
cialis uk
ed viagra
le cialis
le viagra
mg viagra
on viagra
uk cialis
uk viagra
viagra ad
viagra ru
viagra st
viagra tv

wr (Email) (URL) - 12 November '08 - 13:30

sdfsdfsdf

sdfg (Email) (URL) - 21 November '08 - 16:35

Very interesting article: “Streamlining Zone Creation Thanks to ZFS Integration”

Bab (Email) (URL) - 23 January '09 - 16:28

I am trying to take a snapshot of a zfs file system dedicated for a zone, I see that you are cloning your new zone images from actual snapshots.

Chris (Email) (URL) - 10 May '09 - 07:07

Wow you just saved me hours of time.

Cheap BlackBerry (Email) (URL) - 24 September '09 - 23:07

Good post! Thanks you for your information! China Wholesale Wholesale China Wholesalers Wholesale Game Accessories Wholesale Iphone Accessories Video Game Accessories Wholesale Wholesale Wii Accessories Wholesale Xbox 360 Accessories Wholesale Xbox 360 Games Wholesale Video Games Cheap Video Games Cheap Ps3 Games Cheap Xbox 360 Games Wholesale Computers Wholesale Laptop Computers Wholesale Laptops Discount Computers Cheap Computers Wholesale Iphones Wholesale Iphone Wholesale Iphones 3g Hiphones Wholesale Hiphone Wholesale Hiphones Wholesale Nokia Wholesale Nokia 8800 Wholesale Nokia n97 wholesale blackberry wholesale blackberry phones wholesale blackberry 9700 wholesale blackberry 9600 wholesale blackberry 9500

raging bull (Email) (URL) - 15 January '10 - 06:41

he content of the articles there will be a lot of attractive people to appreciate, I have to thank you such an article. As hard as it is to answer those questions, it would definitely not help by burying our head in the sand and refusing to talk about them

wholesale lingerie (Email) (URL) - 10 March '10 - 10:46

P90x .It really is not expensive if you factor in the cost

of a gym membership,P90x workout . The cost for P90X is

about three months of a paid gym membership but you get to

keep the program foreverP90x . You can try many of the

online sites, but it will be the same as buying from the

company or a Beachbody Coach. Make sure you are getting

original DVD’s. People are selling copies all over. The

problem is how long will they last, P90x workout ,and you

truly need the exercise and nutrition guide to even follow

the program. You can go to any site or you can go to

[[http://www.p90xmall.com]] and click on products. P90x dvd You can

order directly from the site,P90x dvd.

p90x (Email) (URL) - 05 May '10 - 06:01

A good idea! [[http://www.offerreplicawatches.com.The..]] sell Chanel Watches, Replica BRM Watches,offer Cartier Watches, Copy Ebel Watches, Replica Hublot Watches, Fake Tag Heuer Watches, wholesale Richard Mille Watches.

They also sell some very fashion watches, such as Montblanc Watches for sale,Chopard Watches, Dior Watches and Gucci Watches. Rolex watches are hot sell. If u are Armani Watches and Breitling Watches fan. You can still look at Omega Watches and Longines Watches, many new arrivals watches just come here.You can have a try on 58338312391273913. :[url=[[http://www.offerreplicawatches.com]www..]]].

Replica Chanel Watches,Dvd Boxes (Email) (URL) - 12 May '10 - 07:41

hp nx6100 battery [[http://www.adapterlist.com/hp/nx6100.h..]]

laptop battery (Email) (URL) - 15 May '10 - 06:10

Dell d630 Battery [[http://www.globallaptopbattery.co.uk/d..]]

laptop batteries (Email) (URL) - 15 May '10 - 06:13

Buy Nike Air Max 90 Shoes just $45-55 USD in[[http://www.iofferitems.com,]], 40-70% Off. Cheap Air Max 90 Shoes, Free Shipping! Buy Air Max 90 Now!

nike air max 90 shoes (Email) (URL) - 28 May '10 - 02:22

Buy Nike Air Max 90 Shoes just $45-55 USD in [[http://www.iofferitems.com,]], 40-70% Off. Cheap Air Max 90 Shoes, Free Shipping! Buy Air Max 90 Now!

nike air max 90 shoes (Email) (URL) - 28 May '10 - 05:36

I’ve just started using Zone recently. I find it really helpful for the work i’m doing.

blank wholesale tshirts (Email) (URL) - 07 June '10 - 17:55

I have read this post.It’s really awesome.I have noted some point which make this post excellent. I hope you will keep continue to write other informative and interesting post.Thank you.

p90x (Email) (URL) - 08 June '10 - 06:02

[[http://www.mbtshoeslatest.com]]
[[http://www.nikeairmaxshoe.com]]

Nike air max shoe (Email) (URL) - 24 June '10 - 07:36

The athletic shoes which makes using this technology may the very good local constable convoy mobilization body, Air Max 2009.
[[http://www.allhotshoes.com/]]

air max shoes (URL) - 09 July '10 - 05:28

very cool article ,thanks for sharing the article!like my cool stuff .very useful.
uCoolStuff is the leading China wholesaler for [[http://www.ucoolstuff.com]] cool stuff , [[http://www.ucoolstuff.com]] cool gifts, unusual gadgets and other unique gift ideas. We provide the very latest cool stuff and cool gifts for you

cool stuff (Email) (URL) - 25 August '10 - 08:35

excellent article , I added you to my [[http://www.china-wholesale-directory.c..]] Top China Wholesalers category.. thanks for sharing the article!

China Wholesale Directory (Email) (URL) - 25 August '10 - 08:43

The considerate iphone ringtone tool can transfer to iPhone directly without iTunes after conversion. With it, you can get any

clips from your video and audio sources and make it as your ringtone. Come on to try this wonderful software which will make your

iphone unique. Free [[http://www.makeiphoneringtone.biz]] make iphone ringtone right now!!!
[[http://www.makeiphoneringtone.biz/mp3-..]]

make iphone ringtone (Email) (URL) - 31 August '10 - 07:14