From gjelinek@sac.sfbay.sun.com Fri Jun 27 06:36:40 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m5RDaeJn001235 for ; Fri, 27 Jun 2008 06:36:40 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m5RDaceW001685; Fri, 27 Jun 2008 07:36:40 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K3400A0HJ52EP00@nwk-avmta-1.sfbay.Sun.COM>; Fri, 27 Jun 2008 06:36:38 -0700 (PDT) Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K3400CCJJ52A2E0@nwk-avmta-1.sfbay.Sun.COM>; Fri, 27 Jun 2008 06:36:38 -0700 (PDT) Received: from sac.sfbay.sun.com (new-sac.SFBay.Sun.COM [129.146.175.65]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m5RDacXD049493; Fri, 27 Jun 2008 06:36:38 -0700 (PDT) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m5RDaZF7001230; Fri, 27 Jun 2008 06:36:35 -0700 (PDT) Received: (from gjelinek@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id m5RDaZmf001226; Fri, 27 Jun 2008 06:36:35 -0700 (PDT) Date: Fri, 27 Jun 2008 06:36:35 -0700 (PDT) From: Gerald Jelinek Subject: zoneadm attach -b option [PSARC/2008/410 FastTrack timeout 07/07/2008] To: PSARC-ext@sun.com Message-id: <200806271336.m5RDaZmf001226@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 3043 I am sponsoring this fast-track for myself. I extended the timeout due to the July 4th holiday in the US. Thanks, Jerry Template Version: @(#)sac_nextcase 1.66 04/17/08 SMI This information is Copyright 2008 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: zoneadm attach -b option 1.2. Name of Document Author/Supplier: Author: Jerry Jelinek 1.3 Date of This Document: 27 June, 2008 4. Technical Description SUMMARY: This fast-track enhances the Solaris Zones [1] "update on attach" feature [2] to address a bug related to the handling of IDRs [3]. To handle this, a new option, -b, will be added to the "zoneadm attach" subcommand for use in backing out patches from the zone, prior to updating. Patch binding is requested for this option. The stability of this interface is documented in the interface table below. DETAILS: Currently when we migrate a zone and update it to the new hosts pkg/patch level, we first verify that all pkgs/patches are the same release or newer. IDRs (Interim Diagnostics/Relief - these are temporary one-off patches that are provided to customers) are not handled by 'update on attach' since there is no metadata indicating if these patches are obsolete. Thus, the IDR must also be installed on the target for the attach to succeed. However, the IDR may not be installed on the target machine for various reasons (e.g. it may not be valid to install the IDR on the target system, the problem may not exist, etc.). Normally the solution would be to remove the IDR from the source system before migrating the zone but this might also not be possible (e.g. the IDR is required to keep the source system running, the source system is no longer available and the customer is trying to attach the zone on a new system, etc.). To address this we'll add a new option, -b. This option allows the user to specify a patch (can be used for both official patches and IDRs) to be backed out of the zone before the update. Multiple -b options can be specified on the CLI. If any of the patches cannot be backed out for any reason, then the attach will fail and none of the patches will be backed out. This is an example usage: # zoneadm -z myzone attach -u -b IDR246802-01 -b 123456-08 This new option is brand-specific and only applies to zone brands using SVr4 packaging. EXPORTED INTERFACES zoneadm attach option [-b] Committed for SVr4-based brands IMPORTED INTERFACES patchrm CLI Evolving PSARC/1996/303 REFERENCES 1. PSARC 2002/174 Virtualization and Namespace Isolation in Solaris 2. PSARC 2007/621 zone update on attach 3. update on attach needs a way to ignore IDRs Bugid 6715030 http://bugs.opensolaris.org/view_bug.do?bug_id=6715030 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: on 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open From Darren.Moffat@sun.com Fri Jun 27 06:48:21 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m5RDmLIl001412 for ; Fri, 27 Jun 2008 06:48:21 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m5RDmKZF024424 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Fri, 27 Jun 2008 06:48:21 -0700 (PDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K3400405JOL5R00@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 27 Jun 2008 07:48:21 -0600 (MDT) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K3400KJYJOJ6AB0@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 27 Jun 2008 07:48:20 -0600 (MDT) Received: from fe-emea-09.sun.com (gmp-eb-lb-2-fe2.eu.sun.com [192.18.6.11]) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m5RDmJ5o015168 for ; Fri, 27 Jun 2008 13:48:19 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K3400L01JFOFU00@fe-emea-09.sun.com> (original mail from Darren.Moffat@Sun.COM) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 27 Jun 2008 14:48:19 +0100 (BST) Received: from [129.156.173.21] by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K3400M4EJOG5K40@fe-emea-09.sun.com>; Fri, 27 Jun 2008 14:48:17 +0100 (BST) Date: Fri, 27 Jun 2008 14:48:16 +0100 From: Darren J Moffat Subject: Re: zoneadm attach -b option [PSARC/2008/410 FastTrack timeout 07/07/2008] In-reply-to: <200806271336.m5RDaZmf001226@sac.sfbay.sun.com> Sender: Darren.Moffat@sun.com To: Gerald Jelinek Cc: PSARC-ext@sun.com Message-id: <4864EFA0.2060008@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200806271336.m5RDaZmf001226@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.14 (X11/20080602) Status: RO Content-Length: 1129 Gerald Jelinek wrote: > # zoneadm -z myzone attach -u -b IDR246802-01 -b 123456-08 > > This new option is brand-specific and only applies to zone brands using > SVr4 packaging. Given the above I think "-b" is too generic an option name, particularly given that SVR4 packing is not the future direction. When I saw the case synopsis the first thing that came to mind was that "-b" was going to mean backup (not really sure what that would mean though). Given that this is brand specific I think we need to make that obvious, maybe something like this: # zoneadm -z myzone attach -u -x patchbackout=IDR246802-01 -x patchbackout=12345608. I also think it probably makes sense that the list of patches to be backed out could be take from a file eg: # zoneadm -z myzone attach -u -x patchbackoutlist=/tmp/rmpatches Don't take the above as actually complying with CLIP or actually fitting in with the zoneadm CLI they are for illustrative purposes only. Basically I'm saying don't use a single letter option because this is brand specific and the second point of patch list in a file. -- Darren J Moffat From Gerald.Jelinek@sun.com Fri Jun 27 07:10:36 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m5REAZkT001882 for ; Fri, 27 Jun 2008 07:10:35 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m5REAWLU029676 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Fri, 27 Jun 2008 15:10:34 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K3400D13KPLY700@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Fri, 27 Jun 2008 07:10:33 -0700 (PDT) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K3400A4NKPLU430@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Fri, 27 Jun 2008 07:10:33 -0700 (PDT) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m5REAXI4019784 for ; Fri, 27 Jun 2008 14:10:33 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K3400501KIJHJ00@mail-amer.sun.com> (original mail from Gerald.Jelinek@Sun.COM) for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Fri, 27 Jun 2008 08:10:33 -0600 (MDT) Received: from [192.168.0.11] ([206.53.29.107]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K3400A3NKPE3K10@mail-amer.sun.com>; Fri, 27 Jun 2008 08:10:27 -0600 (MDT) Date: Fri, 27 Jun 2008 08:10:26 -0600 From: Jerry Jelinek Subject: Re: zoneadm attach -b option [PSARC/2008/410 FastTrack timeout 07/07/2008] In-reply-to: <4864EFA0.2060008@Sun.COM> Sender: Gerald.Jelinek@sun.com To: Darren J Moffat Cc: Gerald Jelinek , PSARC-ext@sun.com Message-id: <4864F4D2.7040402@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200806271336.m5RDaZmf001226@sac.sfbay.sun.com> <4864EFA0.2060008@Sun.COM> User-Agent: Thunderbird 2.0.0.14 (X11/20080519) Status: RO Content-Length: 2520 Darren, Darren J Moffat wrote: > Gerald Jelinek wrote: >> # zoneadm -z myzone attach -u -b IDR246802-01 -b 123456-08 >> >> This new option is brand-specific and only applies to zone brands >> using >> SVr4 packaging. > > Given the above I think "-b" is too generic an option name, particularly > given that SVR4 packing is not the future direction. > > When I saw the case synopsis the first thing that came to mind was that > "-b" was going to mean backup (not really sure what that would mean > though). > > Given that this is brand specific I think we need to make that obvious, > maybe something like this: > > # zoneadm -z myzone attach -u -x patchbackout=IDR246802-01 -x > patchbackout=12345608. I am not sure how "-x patchbackout" is obviously brand-specific. We can certainly use that as the option name if you feel strongly about it, but there is nothing in the name itself that makes an option brand-specific. This will be visible to the user by the documentation and on-line help. We already have other single-letter options which are brand-specific with the same letter re-used for different brands. We also have "-x param" options which are not brand-specific, so this syntax doesn't mean anything by itself. > I also think it probably makes sense that the list of patches to be > backed out could be take from a file eg: > > # zoneadm -z myzone attach -u -x patchbackoutlist=/tmp/rmpatches > > Don't take the above as actually complying with CLIP or actually fitting > in with the zoneadm CLI they are for illustrative purposes only. > Basically I'm saying don't use a single letter option because this is > brand specific and the second point of patch list in a file. We considered that idea but don't plan on implementing it at this time. This requires extra steps on the part of the user and it doesn't fit the model we have for the use of "update on attach". We expect the user to attempt the attach, see that there are a few problematic patches, then evaluate which ones to backout and which ones to add to the target. If there are so many patches that a file is needed, then the likelihood of the attach working is small. Also, the idea of a wholesale downgrade of the zone is not one we want to encourage. This new option is really just to provide a way to migrate the zone when there are a few patches to deal with. If it turns out that customers really need the ability to backout many patches, we could always add support for a file later. Thanks, Jerry From Gerald.Jelinek@sun.com Tue Jul 8 08:04:17 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m68F4Gio028066 for ; Tue, 8 Jul 2008 08:04:16 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m68F46Im027003 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 8 Jul 2008 23:04:14 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K3P0071P0J28O00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.Com); Tue, 08 Jul 2008 08:04:14 -0700 (PDT) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K3P006RP0IZ5430@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.Com); Tue, 08 Jul 2008 08:04:11 -0700 (PDT) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m68F4Awc002732 for ; Tue, 08 Jul 2008 15:04:10 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K3O00D01YQ1X600@mail-amer.sun.com> (original mail from Gerald.Jelinek@Sun.COM) for PSARC-ext@Sun.Com (ORCPT PSARC-ext@Sun.Com); Tue, 08 Jul 2008 09:04:10 -0600 (MDT) Received: from [192.168.0.11] ([206.53.29.107]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K3P00C4R0ITKQ60@mail-amer.sun.com>; Tue, 08 Jul 2008 09:04:05 -0600 (MDT) Date: Tue, 08 Jul 2008 09:04:04 -0600 From: Jerry Jelinek Subject: Re: zoneadm attach -b option [PSARC/2008/410 FastTrack timeout 07/07/2008] In-reply-to: <200806271336.m5RDaZmf001226@sac.sfbay.sun.com> Sender: Gerald.Jelinek@sun.com To: PSARC-ext@sun.com Cc: Gerald Jelinek Message-id: <487381E4.3000304@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200806271336.m5RDaZmf001226@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.14 (X11/20080519) Status: RO Content-Length: 107 This fast-track timed out yesterday with no objections, so I am marking it closed approved. Thanks, Jerry