LDOM(1.0.

2) quick setup guide

Written by geekyS
Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

www.geekyfacts.com

Terminalogy

Hypervisor

Hypervisor is a thin firmware layer that provides a stable virtualized machine architecture to
which an operating system can be written.
It resides in the flas PROM of the motherboard and act as interface between operating system
and the hardware.
It provides a set of support fuctions to the operating system, so that the OS does not need to
know intimate details of how to
perform fuctions with the hardware.

Logical Domain

Logical domain is a discrete logical grouping with its own operating system, resources and
identity within a single computer system.
Each logical domain cab be created, destroyed, reconfigured, and rebooted independently,
without requiring a power cycle of the
server. We can run a variety of applications software in different logical domains and keep them
independent of performance
and security purposes.

1 / 14
LDOM(1.0.2) quick setup guide

Written by geekyS
Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

Logical Domains Manager

The Logical Domains Manager is used to create and manage logical domains. There can be
only
one Logical Domains Manager per serer. The Logical Domains Manager maps logical domains
to physical resources.

Control Domain

Domain in which the Logical Domain Manager runs allowing you to create and manager other
logical domains and allocate virtual resources
to other domains. There can be only one control domain per servers. The initial domain created
when installing Logical Domains software is a
control domain and is named primary.

Service Domain

Domain that provides virtual device services to other domains, such as a virtual switch, a virtual
console concentrator, and a
virtual disk server.

I/O Domain

Domain that has direct ownership of and direct access to physical I/O devices, such as a
network card in a PCI express controller.
Shares the devices with other domains in the form of virtual devices wehn the I/O domain is

2 / 14
LDOM(1.0.2) quick setup guide

Written by geekyS
Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

also the control domain.

Guest Domain

Domain that is managed by the control domain and uses services from the I/O and service
domains.

Patch Installation

Refer the Logical Domains 1.0.2 Release notes for the required patches/softwares for your OS
release

System Firmware Upgrade

3 / 14
LDOM(1.0.2) quick setup guide

Written by geekyS
Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

Refer the Logical Domains 1.0.2 Release notes for the required System Firmware patches for
your OS release

Quick steps for upgrading Firmware

1) check the system firmware version using showhost

sc>showhost

2) Download the latest firmware based on your hardware model from http://sunsolve.sun.com

3) Use sysfwdownload utility comes with the downloaded firmware package to install the
firmware

#./sysfwdownload [firmware].bin

4 / 14
LDOM(1.0.2) quick setup guide

Written by geekyS
Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

4) Power off the server

#shutdown -i5 -g0 -y

5) Upgrade the firmware using flashupdate

sc>flashupdate -s 127.0.0.1

6) reset the system controller and poweron

sc>resetsc -y
sc>poweron
sc>boot

Logical Domain manager Installation

1) Download Logical DOmains Manager Package(LDoms_Manager-1_0_2.zip) from here http:/

/www.sun.com/ldoms

2) unzip LDoms_Manager-1_0_2.zip file

3) Execute install-ldm script from the unzip folder

5 / 14
LDOM(1.0.2) quick setup guide

Written by geekyS
Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

#./install-ldm
Welcome to the LDoms installer.

You are about to install the domain manager package that will enable
you to create, destroy and control other domains on your system. Given
the capabilities of the domain manager, you can now change the security
configuration of this Solaris instance using the Solaris Security
Toolkit.

Select a security profile from this list:

a) Hardened Solaris configuration for LDoms (recommended)

b) Standard Solaris configuration
c) Your custom-defined Solaris security configuration profile

Enter a, b, or c [a]:
The changes made by selecting this option can be undone through the
Solaris Security Toolkit's undo feature. This can be done with the
'/opt/SUNWjass/bin/jass-execute -u' command.
Installing LDoms and Solaris Security Toolkit packages.
pkgadd -n -d "/ldom/LDOM/LDoms_Manager-1_0_2/Product" -a pkg_admin SUNWldm.v
Copyright 2008 Sun Microsystems, Inc. All rights reserved.
Use is subject to license terms.

Installation of (SUNWldm) was successful.

pkgadd -n -d "/ldom/LDOM/LDoms_Manager-1_0_2/Product" -a pkg_admin SUNWjass
Copyright 2005 Sun Microsystems, Inc. All rights reserved.
Use is subject to license terms.

Installation of (SUNWjass) was successful.

6 / 14
LDOM(1.0.2) quick setup guide

Written by geekyS
Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

Verifying that all packages are fully installed. OK.

Enabling services: svc:/ldoms/ldmd:default
Running Solaris Security Toolkit 4.2.0 driver ldm_control-secure.driver.
Please wait. . .
/opt/SUNWjass/bin/jass-execute -q -d ldm_control-secure.driver
Executing driver, ldm_control-secure.driver
Solaris Security Toolkit hardening executed successfully; log file
/var/opt/SUNWjass/run/20080617183524/jass-install-log.txt. It will not
take effect until the next reboot. Before rebooting, make sure SSH or
the serial line is setup for use after the reboot.

Default Service Creation

All LDOM related commands will be available under /opt/SUNWldm/bin/ldm. Add this path to
your PATH variable(export PATH=$PATH:/opt/SUNWldm/bin/ldm)

Creating Virtual Disk server(vds)

Virtual disk server helps importing virtual disks into a logical domain from the control domain.

primary#ldm add-vds primary-vds0 primary

7 / 14
LDOM(1.0.2) quick setup guide

Written by geekyS
Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

Creating Virtual Console concentrator Server(vcc)

Virtual Console concentrator server provides terminal service to logical domain consoles.

primary#ldm add-vcc port-range=5000-5100 primary-vcc0 primary

Creating Virtual Switch server(vsw)

Virtual Switch server enables networking between virtual network devices in logical domains.

primary#ldm add-vsw net-dev=e1000g0 primary-vsw0 primary

Listing the default service created

# ldm list-services primary

------------------------------------------------------------------------------

8 / 14
LDOM(1.0.2) quick setup guide

Written by geekyS
Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

Notice: the LDom Manager is running in configuration mode. Configuration and

resource information is displayed for the configuration under construction;
not the current active configuration. The configuration being constructed
will only take effect after it is downloaded to the system controller and
the host is reset.
------------------------------------------------------------------------------
VDS
NAME VOLUME OPTIONS DEVICE
primary-vds0

VCC
NAME PORT-RANGE
primary-vcc0 5000-5100

VSW
NAME MAC NET-DEV DEVICE MODE
primary-vsw0 00:11:4a:19:ac:3c e1000g1 switch@0 prog,promisc

ether 0:2:ac:d9:11:12

Control Domain Creation

Creating the control domain with 4 cpu's and 1gb RAM.

9 / 14
LDOM(1.0.2) quick setup guide

Written by geekyS
Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

#/opt/SUNWldm/bin/ldm set-mau 0 primary

#/opt/SUNWldm/bin/ldm set-vcpu 4 primary

#/opt/SUNWldm/bin/ldm set-memory 1024m primary

Make the modified configuration permanent using list-spconfig option

#ldm list-spconfig
factory-default [current]

#ldm add-spconfig initial

#ldm list-spconfig
factory-default [current]
initial [next]

10 / 14
LDOM(1.0.2) quick setup guide

Written by geekyS
Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

Reboot the server to come up with initial configuration.

#shutdown -i6 -g0 -y

Enable Networking between domains

Networking between control,service and other domains is disabled by default. To enable this,
the virtual switch device
should be configured as a network device.

Login to the server console and perform the following network configuration steps,

primary#ifconfig -a

Note down the name,ip configured for the primary interface.

Plumb the virtual switch(vsw0)

11 / 14
LDOM(1.0.2) quick setup guide

Written by geekyS
Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

primary#ifconfig vsw0 plumb

Bring down the primary interface(use appropriate interface name in place of e1000g1)

primary#ifconfig e1000g1 down unplumb

Configure Virtual switch with the primary interface details (replace

primary_interface_up,primary_interface_netmask appropriately)

primary#ifconfig vsw0 primary_interface_ip netmask primary_interface_netmask broadcast + up

Modify the hostname file to make this configuration permanent

12 / 14
LDOM(1.0.2) quick setup guide

Written by geekyS
Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

primary#mv /etc/hostname.e1000g1 /etc/hostname.vsw0

Enable Virtual Network terminal server daemon

#svcadm enable vntsd

Logical Domain Creation

Create a logical domain with the following configuration

Domain name - gdomain

Number of CPU - 8
Memory - 1GB

# ldm add-domain gdomain

# ldm add-vcpu 8 gdomain
# ldm add-memory 1G gdomain
# ldm add-vnet vnet1 primary-vsw0 gdomain
# ldm add-vdsdev /dev/dsk/c0t2d0s2 vol1@primary-vds0
# ldm add-vdisk vdisk1 vol1@primary-vds0 gdomain
# ldm bind gdomain
# ldm set-var auto-boot?=false gdomain
# ldm start-domain gdomain

13 / 14
LDOM(1.0.2) quick setup guide

Written by geekyS
Monday, 15 December 2008 06:39 - Last Updated Tuesday, 16 December 2008 12:28

#ldm list-domain
NAME STATE FLAGS CONS VCPU MEMORY UTIL UPTIME
primary active -n-cv SP 4 1G 0.2% 1h 3m
gdomain inactive ----- 8 1G

Jumpstart/Install OS in Logical Domain

Configure the guest domain as jumpstart client and initiate jumpstart from guest domain
console. Login to guest domain console from control domain

#telnet localhost (port)

ok boot vnet1 - install

14 / 14