Create a Zone

The SA Client enables you to create a fully operable, non-global zone on a Solaris global Zone (hypervisor).

If the SA Core is installed in third-party certificate mode, this option creates a non-global Solaris Zone but the SA Agent does not register with the SA Core and the managed server is unreachable.
To avoid this issue, use one of the following workarounds available in SA 10.60:
Workaround 1:
  1. Go to Administration > System Configuration > Configuration Parameters > Data Access Engine (spin) and make sure the spin.agent.bootstrap_enabled parameter is set to 1. For more information on this parameter, see Self-signed temporary SA Agent certificates.
  2. Click the Save button.
  3. Restart the SA Spin component if you have any pending changes.

Workaround 2:
After creating a Solaris Zone in SA, install the SA Agent in third-party mode:

Before a non-global Zone can be created with the SA Client for the first time, the global Zone’s hardware must be registered with SA.The hardware registration must occur each time the hardware from the Solaris machine is updated (e.g., when a network interface is added or removed) Creating a non-global Zone also installs an Agent on the Zone, bringing the Zone under Agent management by SA. After Agent installation, the non-global Zone appears in the All Managed Servers and the Virtual Servers lists in the SA Client.

To create a non-global Zone:

  1. In the SA Client, from the navigation pane, select the Devices tab.
  2. Expand Servers and select Oracle Solaris Zones.
  3. In the content pane, right-click the global Zone that will host the new Zone, and select Oracle Solaris Zones > Create Zone.
  4. In the Zone Definition Method step of the Create Virtual Zone window, select one of the following methods:
    • Manual (Fill out data form): Using this method, you must manually enter the Zone configuration parameters in the fields provided on the Zone Definition dialog.
    • Zone Creation Command Script: Using this method, you provide a command script that contains the Zone creation and configuration commands. When using a script, if IPv6 addresses are provided, then the local link addresses also need to be specified (Solaris does not generate them).

      The local link addresses provided as part of the script will not be visible in the modify step and cannot be updated. This command script has the same syntax as the command_file specified by the following Solaris command:

      zonecfg -z zone_name -f command_file

SA does not validate the contents of the Zone creation command script, so ensure that your script works. For the syntax of the commands allowed in the script, see the Solaris 10/Solaris 11 documentation on zonecfg.

  1. Click Next to proceed to the Zone Definition step.
  2. If you are using a Zone Creation Command script, skip to step 7. If you chose the manual method in step 4 above, complete the following fields:
    • Server: Enter the SA server name for the new virtual server. (The global Zone (hypervisor) that will host the new non-global Zone is displayed below this field.)
    • Zone Name: Enter an appropriate name for the new non-global Zone.
    • Locale: Enter the language code for the non-global Zone.
    • Terminal Type: Specify the terminal client that the SA Client uses for Remote Terminal sessions on the non-global Zone.
    • Auto Reboot: Specifies whether to automatically reboot the non-global Zone if the physical server running the hosting Global Zone is rebooted.
    • Time Zone: Specify a time Zone for the non-global Zone.
    • Root Password: Enter the root password for the non-global Zone.
    • Confirm Password: Enter the root password again for verification.
    • CPU Shares Reservation: Enter an integer that allocates the shares of the CPU resource.

    For the CPU Shares Reservation to take effect, the Fair Share Scheduler (FSS) must be enabled on the Solaris hypervisor server on which you are creating the new Zone. By default, the FSS is not enabled.

    • IP Address: It is possible to add IPv4 and IPv6 addresses (as shown in the following figure):

      • If you add an IPv4 address, enter the IP address and select the virtual network interface. A Zone that requires network connectivity must have one or more dedicated IP addresses. These addresses are associated with the physical network interface of the global Zone.

      • If you add an IPv6 address, the default prefix (64) is added at the end of the address, provided that no valid prefix (an integer between 1 and 128) has been given. In this case, the netmask value is set to null by default and cannot be changed.

        For IPv6, one does not need to manually add the local-link addresses, as they are generated by SA.

    • Device: (Optional) Click Add to enter a path name to a device, for example, /dev/pts*, on the global Zone hypervisor. This action gives the new Zone access to a device on the global Zone.
    • Inherited Package Directory: (Optional) Click Add to enter a path name to the package directory you want the Zone to inherit. These package directories are read-only. Or, click Add Sparse Root Directoryto enter a default package directory inherited by the new Zone from the global Zone.
    The Add Sparse Root Directory is disabled in Solaris 11. See Solaris 11 documentation for further details.
    • Mount Directory: (Optional) Click Add to mount a file system type and path for the Zone. This action grants the Zone access to a physical disk or file system of the non-global Zone. A ufs file system creates a file system mount within the Zone; the lofs type is a loopback file system mount to the global Zone.
  3. If you are using a Zone Creation Command Script, you will see the Zone Configuration Commands section. Here you can manually enter the contents of the Zone creation command script, cut-and-paste from another file, or select Import File to import the script directly from another file, then select Next.
  4. Scheduling: Select when you want the create Zone job to run, then select Next.
  5. Notifications: Enter email addresses to receive notifications when the job finishes. Select the type of notifications you want. Optionally enter a ticket identifier to be associated with the job, then select Next.
  6. Job Status: Select the Start Job or Schedule Job button. This runs the job or schedules it to be run in the future and displays the Job ID number in the window banner. You can use the Job ID number to look up the job under the Jobs and Sessions tab.

    When the job runs, it creates the Zone and displays the results.