Ldom Quick Setup Guide

LDOM(1.0.2) quick setup guide Written by geekyS Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

www.geekyfacts.com

 

Terminalogy

Hypervisor

Hypervisor is a thin firmware layer that provides a stable virtualized machine architecture to which an operating system can be written. It resides in the flas PROM of the motherboard and act as interface between operating system and the hardware. It provides a set of support fuctions to the operating system, so that the OS does not need to know intimate details of how to perform fuctions with the hardware.

Logical Domain

Logical domain is a discrete logical grouping with its own operating system, resources and identity within a single computer system. Each logical domain cab be created, destroyed, reconfigured, and rebooted independently, without requiring a power cycle of the server. We can run a variety of applications software in different logical domains and keep them independent of performance and security purposes.

1 / 14

LDOM(1.0.2) quick setup guide Written by geekyS Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

Logical Domains Manager

The Logical Domains Manager is used to create and manage logical domains. There can be only one Logical Domains Manager per serer. The Logical Domains Manager maps logical domains to physical resources.

Control Domain

Domain in which the Logical Domain Manager runs allowing you to create and manager other logical domains and allocate virtual resources to other domains. There can be only one control domain per servers. The initial domain created when installing Logical Domains software is a control domain and is named primary.

Service Domain

Domain that provides virtual device services to other domains, such as a virtual switch, a virtual console concentrator, and a virtual disk server.

I/O Domain

Domain that has direct ownership of and direct access to physical I/O devices, such as a network card in a PCI express controller. Shares the devices with other domains in the form of virtual devices wehn the I/O domain is

2 / 14

LDOM(1.0.2) quick setup guide Written by geekyS Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

also the control domain.

Guest Domain

Domain that is managed by the control domain and uses services from the I/O and service domains.

Patch Installation

 

Refer the Logical Domains 1.0.2 Release notes for the required patches/softwares for your OS release

 

 

System Firmware Upgrade

 

3 / 14

LDOM(1.0.2) quick setup guide Written by geekyS Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

Refer the Logical Domains 1.0.2 Release notes for the required System Firmware patches for your OS release

Quick steps for upgrading Firmware

 

1) check the system firmware version using showhost sc>showhost

 

2) Download the latest firmware based on your hardware model from http://sunsolve.sun.com

 

3) Use sysfwdownload utility comes with the downloaded firmware package to install the firmware

#./sysfwdownload [firmware].bin

 

4 / 14

LDOM(1.0.2) quick setup guide Written by geekyS Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

4) Power off the server

#shutdown -i5 -g0 -y

5) Upgrade the firmware using flashupdate

sc>flashupdate -s 127.0.0.1

 

6) reset the system controller and poweron

sc>resetsc -y sc>poweron sc>boot

Logical Domain manager Installation

1) Download Logical DOmains Manager Package(LDoms_Manager-1_0_2.zip) from here http:/ /www.sun.com/ldoms 2) unzip LDoms_Manager-1_0_2.zip file 3) Execute install-ldm script from the unzip folder

5 / 14

LDOM(1.0.2) quick setup guide Written by geekyS Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

 

#./install-ldm Welcome to the LDoms installer.

You are about to install the domain manager package that will enable you to create, destroy and control other domains on your system. Given the capabilities of the domain manager, you can now change the security configuration of this Solaris instance using the Solaris Security Toolkit.

Select a security profile from this list:

a) Hardened Solaris configuration for LDoms (recommended) b) Standard Solaris configuration c) Your custom-defined Solaris security configuration profile

Enter a, b, or c [a]: The changes made by selecting this option can be undone through the Solaris Security Toolkit's undo feature. This can be done with the '/opt/SUNWjass/bin/jass-execute -u' command. Installing LDoms and Solaris Security Toolkit packages. pkgadd -n -d "/ldom/LDOM/LDoms_Manager-1_0_2/Product" -a pkg_admin SUNWldm.v Copyright 2008 Sun Microsystems, Inc. All rights reserved. Use is subject to license terms.

Installation of (SUNWldm) was successful. pkgadd -n -d "/ldom/LDOM/LDoms_Manager-1_0_2/Product" -a pkg_admin SUNWjass Copyright 2005 Sun Microsystems, Inc. All rights reserved. Use is subject to license terms.

Installation of (SUNWjass) was successful.

6 / 14

LDOM(1.0.2) quick setup guide Written by geekyS Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

Verifying that all packages are fully installed. OK. Enabling services: svc:/ldoms/ldmd:default Running Solaris Security Toolkit 4.2.0 driver ldm_control-secure.driver. Please wait. . . /opt/SUNWjass/bin/jass-execute -q -d ldm_control-secure.driver Executing driver, ldm_control-secure.driver Solaris Security Toolkit hardening executed successfully; log file /var/opt/SUNWjass/run/20080617183524/jass-install-log.txt. It will not take effect until the next reboot. Before rebooting, make sure SSH or the serial line is setup for use after the reboot.

Default Service Creation

 

All LDOM related commands will be available under /opt/SUNWldm/bin/ldm. Add this path to your PATH variable(export PATH=$PATH:/opt/SUNWldm/bin/ldm)

Creating Virtual Disk server(vds)

Virtual disk server helps importing virtual disks into a logical domain from the control domain.

primary#ldm add-vds primary-vds0 primary

 

7 / 14

LDOM(1.0.2) quick setup guide Written by geekyS Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

Creating Virtual Console concentrator Server(vcc)

Virtual Console concentrator server provides terminal service to logical domain consoles.

primary#ldm add-vcc port-range=5000-5100 primary-vcc0 primary

 

 

Creating Virtual Switch server(vsw)

Virtual Switch server enables networking between virtual network devices in logical domains.

primary#ldm add-vsw net-dev=e1000g0 primary-vsw0 primary

 

 

Listing the default service created

# ldm list-services primary ------------------------------------------------------------------------------

8 / 14

LDOM(1.0.2) quick setup guide Written by geekyS Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

Notice: the LDom Manager is running in configuration mode. Configuration and resource information is displayed for the configuration under construction; not the current active configuration. The configuration being constructed will only take effect after it is downloaded to the system controller and the host is reset. -----------------------------------------------------------------------------VDS NAME VOLUME OPTIONS DEVICE primary-vds0

VCC NAME PORT-RANGE primary-vcc0 5000-5100

VSW NAME MAC NET-DEV DEVICE MODE primary-vsw0 00:11:4a:19:ac:3c e1000g1 switch@0 prog,promisc

ether 0:2:ac:d9:11:12

 

Control Domain Creation

Creating the control domain with 4 cpu's and 1gb RAM.

 

9 / 14

LDOM(1.0.2) quick setup guide Written by geekyS Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

#/opt/SUNWldm/bin/ldm set-mau 0 primary

#/opt/SUNWldm/bin/ldm set-vcpu 4 primary

#/opt/SUNWldm/bin/ldm set-memory 1024m primary

Make the modified configuration permanent using list-spconfig option

 

#ldm list-spconfig factory-default [current]

 

#ldm add-spconfig initial

 

#ldm list-spconfig factory-default [current] initial [next]

 

10 / 14

LDOM(1.0.2) quick setup guide Written by geekyS Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

Reboot the server to come up with initial configuration.

#shutdown -i6 -g0 -y

Enable Networking between domains

Networking between control,service and other domains is disabled by default. To enable this, the virtual switch device should be configured as a network device.

 

Login to the server console and perform the following network configuration steps,

primary#ifconfig -a

Note down the name,ip configured for the primary interface.

Plumb the virtual switch(vsw0)

 

11 / 14

LDOM(1.0.2) quick setup guide Written by geekyS Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

primary#ifconfig vsw0 plumb

 

Bring down the primary interface(use appropriate interface name in place of e1000g1)

 

primary#ifconfig e1000g1 down unplumb

 

Configure Virtual switch with the primary interface details (replace primary_interface_up,primary_interface_netmask appropriately)

 

primary#ifconfig vsw0 primary_interface_ip netmask primary_interface_netmask broadcast + up

 

Modify the hostname file to make this configuration permanent

 

12 / 14

LDOM(1.0.2) quick setup guide Written by geekyS Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

primary#mv /etc/hostname.e1000g1 /etc/hostname.vsw0

Enable Virtual Network terminal server daemon

 

#svcadm enable vntsd

 

Logical Domain Creation

Create a logical domain with the following configuration

Domain name - gdomain Number of CPU - 8 Memory - 1GB

# ldm add-domain gdomain # ldm add-vcpu 8 gdomain # ldm add-memory 1G gdomain # ldm add-vnet vnet1 primary-vsw0 gdomain # ldm add-vdsdev /dev/dsk/c0t2d0s2 vol1@primary-vds0 # ldm add-vdisk vdisk1 vol1@primary-vds0 gdomain # ldm bind gdomain # ldm set-var auto-boot?=false gdomain # ldm start-domain gdomain

13 / 14

LDOM(1.0.2) quick setup guide Written by geekyS Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

 

#ldm list-domain NAME STATE FLAGS CONS VCPU MEMORY UTIL UPTIME primary active -n-cv SP 4 1G 0.2% 1h 3m gdomain inactive ----- 8 1G

 

Jumpstart/Install OS in Logical Domain

Configure the guest domain as jumpstart client and initiate jumpstart from guest domain console. Login to guest domain console from control domain

#telnet localhost (port) ok boot vnet1 - install

 

14 / 14