From sacadmin Tue Jul 25 14:38:58 2006 Received: from sunmail1brm.Central.Sun.COM (sunmail1brm.Central.Sun.COM [129.147.62.17]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id k6PLcvwe009834 for ; Tue, 25 Jul 2006 14:38:58 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.149.246.28]) by sunmail1brm.Central.Sun.COM (8.11.7p1+Sun/8.11.7/ENSMAIL,v2.2) with ESMTP id k6PLctS28840; Tue, 25 Jul 2006 15:38:55 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2 (built Dec 2 2004)) id <0J2Z00505ASU0M00@nwk-avmta-1.sfbay.Sun.COM>; Tue, 25 Jul 2006 14:38:54 -0700 (PDT) Received: from snowdog.eng.sun.com ([129.146.228.213]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2 (built Dec 2 2004)) with ESMTP id <0J2Z003L6ASUDD20@nwk-avmta-1.sfbay.Sun.COM>; Tue, 25 Jul 2006 14:38:54 -0700 (PDT) Received: from snowdog.eng.sun.com (localhost [127.0.0.1]) by snowdog.eng.sun.com (8.13.7+Sun/8.13.7) with ESMTP id k6PLcrwG003575; Tue, 25 Jul 2006 14:38:53 -0700 (PDT) Received: (from dp@localhost) by snowdog.eng.sun.com (8.13.7+Sun/8.13.7/Submit) id k6PLcrZm003574; Tue, 25 Jul 2006 14:38:53 -0700 (PDT) Date: Tue, 25 Jul 2006 14:38:53 -0700 From: Dan Price Subject: PSARC 2006/451 System V resource controls for Zones To: psarc@sun.com Cc: Stephen Lawrence , Menno Lageman , zones-core@sun.com Message-id: <20060725213853.GV1154@eng.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline X-PMX-Version: 5.2.0.264296 User-Agent: Mutt/1.4.2.1i Status: RO Content-Length: 3061 I am pleased to sponsor the following case for Steve Lawrence. This case adds support for Zone-scoped System V resource controls. Patch binding is requested. This case will time out on 8/2/2006. -dp - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - TITLE: System V resource controls for Zones. SUMMARY: This case proposes adding the following resource controls to Solaris: zone.max-shm-memory Evolving zone.max-shm-ids Evolving zone.max-msg-ids Evolving zone.max-sem-ids Evolving These controls will provide a mechanism for limiting System V resources used by all processes within a zone. Patch binding is requested for these new resource controls DETAIL: The following resource controls were introduced by [2] for projects: project.max-shm-memory Evolving project.max-shm-ids Evolving project.max-sem-ids Evolving project.max-msg-ids Evolving These were introduced as a replacement for /etc/system variables which required a reboot in order to tune System V memory limits. Similar controls are needed for Zones[1] so that various applications, such as databases, can be safely deployed in a non-global zone where the administrator may not be trusted. The introduction of zone.max-locked-memory[3] and configurable privileges[4] enables the deployment of database applications such as Oracle into non-global zones. These applications also need limits on System V resources in order to be deployed reliably. For example, if a non-global zone is able to consume all the shm-id's on a system, it would be able to starve other zones from running any applications which use System V shared memory. As a solution, zone.* resource controls for system V objects, identical to the existing project.* resource controls, are proposed. These controls will behave identically to their project.* counterparts, except that they can only be administered by a global zone admin using zonecfg(1m) and the existing "add rctl" subcommand. A non-global zone administrator can manipulate project.* System V resource controls to limit projects within the non-global zone, but the total System V resources consumed by the non-global zone will always be limited by the zone.* resource controls set from the global zone. For compatablity, these privileged zone.* System V rctls will be given no default values. Adding default zone System V limit values would potentially break existing configurations on upgrade. EXPORTED INTERFACES zone.max-shm-memory Evolving zone.max-shm-ids Evolving zone.max-msg-ids Evolving zone.max-sem-ids Evolving REFERENCES: [1] PSARC/2002/174 Virtualization and Namespace Isolation in Solaris [2] PSARC/2002/694 System V IPC resource controls [3] PSARC/2004/580 zone/project.max-locked-memory Resource Controls [4] PSARC/2006/124 Configurable Privileged for Zones - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- Daniel Price - Solaris Kernel Engineering - dp@eng.sun.com - blogs.sun.com/dp From sacadmin Tue Jul 25 17:10:13 2006 Received: from sunmail4.Singapore.Sun.COM (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id k6Q0ACEu015888 for ; Tue, 25 Jul 2006 17:10:13 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.149.247.22]) by sunmail4.Singapore.Sun.COM (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id k6Q0A6xS004892; Wed, 26 Jul 2006 08:10:11 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0J2Z00L01HSYE000@nwk-avmta-2.sfbay.sun.com>; Tue, 25 Jul 2006 17:10:10 -0700 (PDT) Received: from engmail3mpk.sfbay.Sun.COM ([129.146.11.26]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0J2Z0067THSY3JE0@nwk-avmta-2.sfbay.sun.com>; Tue, 25 Jul 2006 17:10:10 -0700 (PDT) Received: from snowdog.eng.sun.com (snowdog.SFBay.Sun.COM [129.146.228.213]) by engmail3mpk.sfbay.Sun.COM (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id k6PNHXqL010607; Tue, 25 Jul 2006 16:17:33 -0700 (PDT) Received: from snowdog.eng.sun.com (localhost [127.0.0.1]) by snowdog.eng.sun.com (8.13.7+Sun/8.13.7) with ESMTP id k6PNH7nZ003665; Tue, 25 Jul 2006 16:17:28 -0700 (PDT) Received: (from dp@localhost) by snowdog.eng.sun.com (8.13.7+Sun/8.13.7/Submit) id k6PNH7jY003664; Tue, 25 Jul 2006 16:17:07 -0700 (PDT) Date: Tue, 25 Jul 2006 16:17:07 -0700 From: Dan Price Subject: Re: PSARC 2006/451 System V resource controls for Zones In-reply-to: <20060725213853.GV1154@eng.sun.com> To: psarc@sun.com Cc: Stephen Lawrence , Menno Lageman , zones-core@sun.com Message-id: <20060725231707.GY1154@eng.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline X-PMX-Version: 5.2.0.264296 References: <20060725213853.GV1154@eng.sun.com> User-Agent: Mutt/1.4.2.1i Status: RO Content-Length: 527 On Tue 25 Jul 2006 at 02:38PM, Dan Price wrote: > > I am pleased to sponsor the following case for Steve Lawrence. This > case adds support for Zone-scoped System V resource controls. Patch > binding is requested. This case will time out on 8/2/2006. Gary just sent notification to licensees that the new stability terminology is now in effect. So, please consider all interfaces listed in the case as "committed". Thanks, -dp -- Daniel Price - Solaris Kernel Engineering - dp@eng.sun.com - blogs.sun.com/dp From sacadmin Fri Aug 4 11:20:02 2006 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id k74IK28i010601 for ; Fri, 4 Aug 2006 11:20:02 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.149.246.28]) by sunmail5.uk.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id k74IJsVv004945; Fri, 4 Aug 2006 19:20:01 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2 (built Dec 2 2004)) id <0J3H00M0JK9ADF00@nwk-avmta-1.sfbay.Sun.COM>; Fri, 04 Aug 2006 11:19:58 -0700 (PDT) Received: from engmail3mpk.sfbay.Sun.COM ([129.146.11.26]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2 (built Dec 2 2004)) with ESMTP id <0J3H00DHVK9A8W40@nwk-avmta-1.sfbay.Sun.COM>; Fri, 04 Aug 2006 11:19:58 -0700 (PDT) Received: from snowdog.eng.sun.com (snowdog.SFBay.Sun.COM [129.146.228.213]) by engmail3mpk.sfbay.Sun.COM (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id k74IJuLE003417; Fri, 04 Aug 2006 11:19:56 -0700 (PDT) Received: from snowdog.eng.sun.com (localhost [127.0.0.1]) by snowdog.eng.sun.com (8.13.7+Sun/8.13.7) with ESMTP id k74IJult026931; Fri, 04 Aug 2006 11:19:56 -0700 (PDT) Received: (from dp@localhost) by snowdog.eng.sun.com (8.13.7+Sun/8.13.7/Submit) id k74IJuit026930; Fri, 04 Aug 2006 11:19:56 -0700 (PDT) Date: Fri, 04 Aug 2006 11:19:55 -0700 From: Dan Price Subject: Re: PSARC 2006/451 System V resource controls for Zones In-reply-to: <20060725213853.GV1154@eng.sun.com> To: psarc@sun.com Cc: Stephen Lawrence , Menno Lageman , zones-core@sun.com Message-id: <20060804181955.GC1280@eng.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline X-PMX-Version: 5.2.0.264296 References: <20060725213853.GV1154@eng.sun.com> User-Agent: Mutt/1.4.2.1i Status: RO Content-Length: 501 On Tue 25 Jul 2006 at 02:38PM, Dan Price wrote: > > I am pleased to sponsor the following case for Steve Lawrence. This > case adds support for Zone-scoped System V resource controls. Patch > binding is requested. This case will time out on 8/2/2006. > > -dp This case has timed out, and I have marked it as approved, and placed an updated spec (to reflect the new taxonomy) into spec.txt. -dp -- Daniel Price - Solaris Kernel Engineering - dp@eng.sun.com - blogs.sun.com/dp