1z0-822 Oracle Solaris 11 Advanced System Administration Questions and Answers

Required to maintain high availability --> use a mirror.

The same data will be accessed many times throughout the day. Configure the storage for maximum performance. Use caching.

Note:

* In Oracle Solaris 11, etherstubs and VNICs are the basic components of network virtualization.

* The VNIC connects the virtual network to the external network. The VNIC also enables the zones to communicate with one another through the virtual switch that is automatically created with the VNIC. For a virtual network to host traffic internally between zones and with the external LAN and the Internet, each zone must have its own interface. Therefore, you must repeat this procedure as many times as the number of zones that will belong to the virtual network.

* Create the etherstub.

# dladm create-etherstub etherstub

Perform this step only if you are creating a private virtual network which you want to restrict from being accessed by external systems.

Example 1: Creating a New Shell

The following example creates a new shell in the canada pro-

ject, displaying the task id:

example$ id -p

uid=565(gh) gid=10(staff) projid=10(default)

example$ newtask -v -p canada

38

Use one of the following methods to restart the depot server process:

B: Use svcadm(1M) to restart the application/pkg/server instance.

C: Send a SIGUSR1 signal to the depot server process using kill(1). This executes a “graceful restart” that leaves the process intact but reloads all configuration, package, and search data:

# kill -USR1 pid

Note:

* The pkd.depotd service is managed by SMF under the service identifier svc:/application/pkg/server.

* pkgrepo provides the ability to create and manage pkg package repositories. Package repositories are a predefined set of directories and files that permit the storage and retrieval of package data by pkg and publication clients such as pkgsend or pkgrecv.

* Use the pkgrecv command to copy the repository.

Example:

# pkgrecv -s http://pkg.oracle.com/solaris/release/ -d /export/repoSolaris11 '*'

Processing packages for publisher solaris ...

Creating Plan

Retrieving and evaluating 4288 package(s)...

PROCESS ITEMS GET (MB) SEND (MB)

developer/build/cmake 446/4288 332.1/4589.7 1000.2/14511.8

Completed 4288/4288 4589.7/4589.7 14511.8/14511.8

AD: Manifests from the standard directory trees /lib/svc/manifest and /var/svc/manifest are processed during system boot and anytime an administrator or program runs:

$ svcadm restart manifest-import

C: svccfg

apply subcommand

If the argument is a service profile or manifest, apply the configuration to the admin layer of the SMF repository. Services, instances, property groups, and properties will be created as necessary.

E: import [-V] [file | directory]

svccfg import on a file in a system-managed filesystem location (subdirectories of /lib/svc/manifest and /var/svc/manifest) invokes: svcadm restart manifest-import.

Placing your manifests in a system-managed location and invoking svcadm restart manifest-import to import them is the recommended practice.

svccfg import on files in other locations imports their properties as administrative customization into the admin layer. It is equivalent to:

svccfg apply [file | directory]

Incorrect:

not B: Manifests are processed in two different phases during boot.

The service svc:/system/early-manifest-import:default, a pseudo service, is responsible for the first manifest processing. This service processes only manifests from the /lib/svc/manifest directory tree before svc.startd(1M) initializes any services thus enabling services delivered in /lib/svc/manifest to always start with their most updated definition. Since this is a pseudo service, svcadm(1M) commands are ignored though svcs(1) can be used to observe status and get log file information.

The svc:/system/manifest-import:default service handles the second manifest processing and imports manifest files from both /lib/svc/manifest and /var/svc/manifest directory trees, in that respective order.

How to Create a Virtual Network Interface

This procedure shows how to create a virtual network interface card (VNIC).

1. Create a VNIC over a datalink.

# dladm create-vnic -l link vnic

link is the name of the datalink over which the VNIC is configured.

vnic is the VNIC which you can label with a customized name as well.

2. Create a VNIC IP interface over the link.

# ipadm create-ip vnic

3. Configure the VNIC with a valid IP address.

If you are assigning a static IP address, use the following syntax:

# ipadm create-addr -T static -a address addrobj

where addrobj uses the naming format interface/user-defined-string, such as e1000g0/v4globalz.

DE: Link aggregations provide high availability and higher throughput by aggregating multiple interfaces at the MAC layer. IP Multipathing (IPMP) provides features such as higher availability at the IP layer. Both IPMP and Link Aggregation are based on the grouping of network interfaces, and some of their features overlap, such as higher availability. These technologies are however implemented at different layers of the stack, and have different strengths and weaknesses.

E: The IP network multipathing or IPMP is a facility provided by Solaris to provide fault-tolerance and load spreading for network interface cards (NICs). With IPMP, two or more NICs are dedicated for each network to which the host connects.

The IPMP load spreading feature increases the machine's bandwidth by spreading the outbound load between all the cards in the same IPMP group.

Refer to step 3 below.

After a typical software installation, there can be a half dozen or more processes that need to be started and stopped during system startup and shutdown. In addition, these processes may depend on each other and may need to be monitored and restarted if they fail. For each process, these are the logical steps that need to be done to incorporate these as services in SMF:

1.Create a service manifest file.

2.Create a methods script file to define the start, stop, and restart methods for the service.

3.Validate and import the service manifest using svccfg(1M).

4.Enable or start the service using svcadm(1M).

5.Verify the service is running using svcs(1).

The default scheduler for Solaris uses time sharing to divide CPU time

between running tasks. The fair share scheduler (FSS) uses "shares"

to give weighted prioritization to running processes based on the

assigned CPU shares. You've assigned cpu-shares to the zone, but you

aren't using the fair share scheduler.

To enable the fair share scheduler as default on the system:

# dispadmin -d FSS

Global Actions on Resource Control Values

Global actions apply to resource control values for every resource control on the system. You can use the rctladm command to perform the following actions:

* Display the global state of active system resource controls

* Set global logging actions

Interface mode displays the state of all IP interfaces (IP links) that are tracked by in.mpathd on the system.

Incorrect:

Not A: Address mode displays the state of all IPMP data addresses on the system.

Not B: Group mode displays the state of all IPMP groups on the system.

Not D: Probe mode displays information about the probes being sent by in.mpathd.

Not E: Target mode displays IPMP probe target information.

prctl

- get or set the resource controls of running processes, tasks, and projects.

The prctl utility allows the examination and modification of the resource controls associated with an active process, task, or project on the system. It allows access to the basic and privileged limits and the current usage on the specified entity.

Incorrect:

not A: ipcs provides information on the ipc facilities for which the calling process has read access.

not D:

rctladm

- display or modify global state of system resource controls

Not E: prstat - report active process statistics

Note:

* In the Oracle Solaris operating system, the concept of a per-process resource limit has been extended to the task and project entities.

D: /etc/security/auth_attr is a local source for authorization names and descriptions.

An authorization is a right assigned to users that is checked by certain privileged programs to determine whether users can execute restricted functionality.

set-publisher --sticky

With --sticky, specify that updates to packages that were installed from this publisher must also come from this publisher. This is the default behavior.

dumpadm - configure operating system crash dump

SYNOPSIS

/usr/sbin/dumpadm [-nuy] [-c content-type] [-d dump-device]

[-m mink | minm | min%] [-s savecore-dir]

[-r root-dir] [-z on | off]

The options include:

A: -d dump-device

Modify the dump configuration to use the specified dump device.

B: -s savecore-dir

Modify the dump configuration to use the specified directory to

save files written by savecore.

D: -m mink | minm | min%

Create a minfree file in the current savecore directory indicating

that savecore should maintain at least the specified amount of free

space in the file system where the savecore directory is located.

E: -z on | off

Modify the dump configuration to control the operation of savecore on reboot. The options are on, to enable saving core files in a compressed format, and off, to automatically uncompress the crash dump file. The default is on, because crash dump files can be very large and require less file system space if saved in a compressed format.

Gathering Statistics About Network Traffic on Flows

Flow statistics help you evaluate packet traffic on any defined flows on the system. To obtain flow information, you use the flowstat command.

* Display statistics about incoming and outgoing packets on all flows.

# flowstat

This command provides a static display of traffic information on all configured flows.

Incorrect:

Not A: In computing, sar (System Activity Report) is a Solaris-derived system monitor command used to report on various system loads, including CPU activity, memory/paging, device load, network.

How to Manually Specify Target Systems for Probe-Based Failure Detection

1. Add a route to a particular host to be used as a target in probe-based failure detection.

$ route -p add -host destination-IP gateway-IP -static

where destination-IP and gateway-IP are IPv4 addresses of the host to be used as a target. For example, you would type the following to specify the target system 192.168.10.137, which is on the same subnet as the interfaces in IPMP group itops0:

$ route -p add -host 192.168.10.137 192.168.10.137 -static

This new route will be automatically configured every time the system is restarted. If you want to define only a temporary route to a target system for probe-based failure detection, then do not use the -p option.

2.Add routes to additional hosts on the network to be used as target systems.