Archive for the ‘AIX 6.1’ Category

How to create a basic WPAR(Workload Partition) in AIX 6.1

Wednesday, December 26th, 2007


To demonstrate the simplicity of creating a Workload Partition within AIX 6.1 via CLI, here’s a quick example. The WPAR commands in AIX are pretty easy to figure out. You can even guess what they are, using the standard AIX file naming convention; mkwpar, lswpar, startwpar, stopwpar, chwpar, etc. If you prefer the GUI type of configuration, there is also a web based Workload Partition Manager tool that IBM introduced. Please see the AIX Version 6.1 IBM Workload Partitions Manager for AIX Redbook for more information.

Start out by creating the WPAR using the mkwpar command.

bash-3.00# mkwpar
mkwpar: 0960-046 Workload partition name is required.
Usage: mkwpar [-a] [-A] [-b devexportsFile] [-B wparBackupDevice] [-c]
[-d directory] [-D attr=value ...] … [-F] [-g vg ]
[-h hostName] [-l] [-L attr=value ...] [-M attr=value ...] …
[-N attr=value ...] … [-P] [-r] [-R attr=value ...]
[-S attr[+|-]=value …] [-s] [-u /path/to/script] [-v]
{ -n wparName [-p [name]] [-e existing_wpar | -f inFile] [-o outFile [-w]]
| -p name [-n wparName] [-e existing_wpar | -f inFile] [-o outFile [-w]]
| -f inFile [-n wparName] [-p [name]] [-o outFile [-w]]
| -w -o outFile [-n wparName] [-p [name]] [-f inFile | -e existing_wpar] }

Flags:
-a = Automatically resolve erroneous/conflicting settings.
-A = Start automatically on system boot.
-b = Path to permitted device exports file.
-B = Device or Pathname of savewpar backup image.
-c = Flag as checkpointable.
-d = Base directory.
-D = Override default device exports (devname, devtype, export).
-e = Get specification data from existing workload partition.
-f = Path to input specification file.
-F = Force - ignore certain errors.
-g = Default volume group for local file systems.
-h = Hostname.
-l = Create private, writeable versions of /usr and /opt.
-L = Logical volume management policy (image_data, shrink, ignore_maps).
-M = Mount settings (dev, directory, vfs, size, crfsopts, mode,
vg, logname, host, mountopts).
-n = Workload partition name.
-N = Network settings (interface, address, netmask, broadcast).
-o = Path to output specification file.
-p = Preserve file system data from the named mount group.
-P = Set workload partition root password interactively.
-r = Copy global network name resolution configuration into the workload
partition.
-R = Resource control settings (active, rset, CPU, memory, procVirtMem,
shares_CPU, shares_memory, totalProcesses, totalThreads).
-S = Configures the security settings of a workload partition (secfile, privs[+|-]).
-s = Start after creation.
-u = User script to execute on start & stop.
-v = Verbose mode.
-w = Only write specification file (do not create).

I am just creating a basic WPAR with a writable /usr and /opt. If -l is not specified, this WPAR will contain a loop back mounted fs for /usr and /opt using the global WPARs filesystem. You will obviously not be able to install any WPAR specific software that requires writing to /usr or /opt, unless your in the global WPAR. -a tells the WPAR to boot upon system boot, or global WPAR boot. -n will define the WPAR name, which shows up in the global WPAR. -h will define the hostname of the WPAR, and will grab its ethernet address from /etc/hosts.

bash-3.00# mkwpar -a -h wpar1 -l -n wpar1 -v
mkwpar: Creating file systems…
/
/home
/opt
/proc
/tmp
/usr
/var
Mounting all workload partition file systems.
mkwpar: Copying base files…

syncroot: Installing RPM file: /var/ssl/openssl.cnf
syncroot: RPM root packages are currently synchronized.
syncroot: Root part is currently synchronized.
syncroot: Returns Status = SUCCESS
Workload partition wpar1 created successfully.
mkwpar: 0960-390 To start the workload partition, execute the following as root: startwpar [-v] wpar1

mkwpar will create new logical volumes for the WPAR to live on. It will then make a copy of the running AIX instance and prepare the WPAR for boot.

’startwpar’ is the command you will boot the WPAR with.

bash-3.00# startwpar -v wpar1
Starting workload partition wpar1.
Mounting all workload partition file systems.
Mounting /wpars/wpar1
Mounting /wpars/wpar1/home
Mounting /wpars/wpar1/opt
Mounting /wpars/wpar1/proc
Mounting /wpars/wpar1/tmp
Mounting /wpars/wpar1/usr
Mounting /wpars/wpar1/var
Loading workload partition.

Exporting workload partition devices.
Starting workload partition subsystem cor_wpar1.
0513-059 The cor_wpar1 Subsystem has been started. Subsystem PID is 876724.
Verifying workload partition startup.
Return Status = SUCCESS.

Once the WPAR is booted, you can check the status by using ‘lswpar’

bash-3.00# lswpar
Name State Type Hostname Directory
—————————————————————-
wpar1 A S wpar1 /wpars/wpar1

Now that the WPAR is online, you can telnet to it, ssh to it, or use the ‘clogin’ tool for console login. You can also use clogin with a command as a parameter as well, then it will execute the command within the WPAR as shown.

bash-3.00# clogin wpar1
*******************************************************************************
* *
* *
* Welcome to AIX Version 6.1! *
* *
* *
* Please see the README file in /usr/lpp/bos for information pertinent to *
* this release of the AIX Operating System. *
* *
* *
*******************************************************************************

# hostname
wpar1
#

bash-3.00# clogin wpar1 hostname
wpar1

Tired of playing with it? ’stopwpar’ will kill it.

bash-3.00# stopwpar
Usage: stopwpar [-F|-h] [-N|-t ] [-r] [-v] wparName

Flags:
-F = Forced stop.
-h = Hard stop.
-N = No timeout for halt.
-t = User specified halt timeout in seconds.
-r = Reboot after halt is completed.
-v = Verbose mode.
bash-3.00# stopwpar wpar1
Stopping workload partition wpar1.
Stopping workload partition subsystem cor_wpar1.
0513-044 The cor_wpar1 Subsystem was requested to stop.
stopwpar: 0960-261 Waiting up to 600 seconds for workload partition to halt.
Shutting down all workload partition processes.
Unmounting all workload partition file systems.
bash-3.00#

Also you might want to check out ‘chwpar’ for changing WPAR configurations.

bash-3.00# chwpar
Usage:
To change a setting:

chwpar [-a] [-A] [-c] [-d directory] [-D attr=value ...] …
[-F] [-h hostName] [-n newName] [-N attr=value ...] …
[-P] [-R attr=value ...] [-S attr[+|-]=value …] [-u userScript] [-v]
wparName

To delete a setting:

chwpar -K [-A] [-c] [-D devname=value] … [-F] [-N address=value] …
[-R [attr ...] ] [-S] [-u] [-v]
wparName

Flags:
-a = Automatically resolve erroneous/conflicting settings.
-A = Start automatically on system boot.
-c = Flag as checkpointable.
-d = Base directory.
-D = Device exports (devname, devtype, export).
-F = Force - ignore certain errors.
-h = Hostname.
-n = New workload partition name.
-N = Network settings (interface, address, netmask, broadcast).
-P = Set workload partition root password interactively.
-R = Resource control settings (active, rset, CPU, memory, procVirtMem,
shares_CPU, shares_memory, totalProcesses, totalThreads).
-S = Configures the security settings of a workload partition (secfile, privs[+|-]).
-u = User script to execute on start & stop.
-v = Verbose mode.

That’s a basic overview of creating a WPAR. Consult the man page for more complex configurations. This just demonstrates basic functionality.

Redbook: Advanced POWER Virtualization on IBM System p Introduction and Configuration

Wednesday, December 26th, 2007


Advanced POWER Virtualization on IBM System p Introduction and Configuration

AIX 6.1 SP2 Available

Thursday, December 13th, 2007


Oddly enough, AIX 6.1 SP2 is now available. Sorta concerns me after seeing the patch list but hey, at least the bugs are being discovered and fixed. It’s kind of hard to imagine that 6.1 was just released last month, as well as SP1 during same time. Now we’re in December, a month later, and SP2 is out with a *lot* of fixes, hmmm. I guess I’m glad I currently have no plans for it anywhere except in the lab!

Check the link to Fix Central out for more information:

http://www-912.ibm.com/eserver/support/fixes/fixcentral/pfixpacks/61

New Security APARs
Security updates are initially released as interim fixes to expadite availability. The updates are later repackaged in the same format as generally available AIX updates.
IZ07819 Potential security issue.
IZ07824 Potential security issue.
IZ07835 Potential security issue.
IZ07838 Potential security issue.
IZ08563 Potential security issue.
IZ08564 Potential security issue.
IZ08565 Potential security issue.
IZ08566 Potential security issue.
IZ08582 Potential security issue.
IZ08721 Potential security issue.
IZ08735 Potential security issue.
IZ09528 Potential security issue.
IZ09529 Potential security issue.
IZ09544 Potential security issue.
IZ09545 Potential security issue.
IZ09546 Potential security issue.
IZ09547 Potential security issue.
New High Impact for Highly Pervasive APARs
IBM classifies some APARS as HIPER. Installation of packages containing these APARs is highly recommended.
IZ09375 page state mismanaged under heavy migration/paging activity
All Other New APARs
IZ07117 MVFS unable to communicate to external process
IZ07465 crash at lpar_halt
IZ07801 Restart of a system WPAR fails with unexpected thread death
IZ07802 BRING UNMANAGED RESOURCE GROUP ONLINE FAILS
IZ07807 low paging space problem on MLS NFS server
IZ07808 Incomplete dump on low paging space system
IZ07809 system crash in siIODFreeMap with JFS2 internal snapshots
IZ07810 more command failure in multibyte locale environment
IZ07811 unexpected reboot while doc.server installation
IZ07812 System crashes when closing optical drive
IZ07813 ITII in kmeminit_thread+000090
IZ07814 System crash in SAS espansion card driver
IZ07815 Restart of WPAR fails if storage keys are enabled
IZ07816 restore of EFS filesystem fails
IZ07818 Crash in nfs3_rele removing symlink from NFS mount
IZ07820 DSI at hd_avoid
IZ07821 smit not passing -Z flag for snapshot backup
IZ07822 pconsle menu doesnt show up on director agents
IZ07823 multi-hit derat prob. w/private rtshm
IZ07825 Partition hang after partition migration
IZ07827 traditional dump crashed or did not start
IZ07828 Bad error message from probevue causing confusion
IZ07830 DSI when re-distribute LUNs on DS3K storage
IZ07832 System crash in rpc.lockd at .simple_lock
IZ07833 System may hang when Trusted Execution is enabled
IZ07834 projctl command omitting invalid error message
IZ07836 DSI in siReaderLookupSMap
IZ07839 dmp_minimal core dumps
IZ07840 node add problem during migration
IZ07841 rn_insert msgs scrolling on console
IZ07842 RDS, rdsctrl command bugs
IZ07843 RDS: 2 nodes crash when running test case using 20 ports on 3 n
IZ07844 execution failing on WPAR for non-root NFSv4 dir
IZ07845 traditional dump fails on 1st attempt after install
IZ07846 traditional dump crashed or did not start
IZ07847 EEH Event During sissas_undo_cfg_init can cause crash
IZ07848 unresponsive system running filesystem and eRAS tests
IZ07849 syncvg -f doesn’t work if ltg != mwc_ltg
IZ07850 mkwpar hangs in odm_lock creating nfsv4 wpar
IZ07851 out of paging space with snapshots
IZ07852 system crash during chown when creating wpars
IZ07853 lchangelv core dump
IZ07854 WPAR fails to start after mksysb restore, complains of perms
IZ07855 Unavailable symbol after WPAR checkpoint/restart
IZ07860 Incorrect mkwpar -e output for transitional WPAR
IZ07861 System crash while deleting a JFS2 snapshot
IZ07862 Reading the snapshot data giving snapshot corrupt errors
IZ07996 dmf create replica fails for 6GB data
IZ07997 Cannot create cell using NDAF and kerberos
IZ08022 dbx where subcommand output wrong in signal handler
IZ08562 installp hangs on nfs based wpars
IZ08567 bootsy02 /nfstest/nfsstr2 has 3 lost+found
IZ08568 Modified stanzas not getting shipped in updates
IZ08569 IB connectivity lost when using HCA sharing
IZ08570 32 bit driver issues
IZ08571 Download to 2-port adapters can destroy adapter
IZ08572 Deadlock due to loopback path; Double-free of pvt pool buf
IZ08573 cannot enable vscsi mpio paths after VIOS failover test
IZ08574 NATTCH FOR SHARED MEMORY SEGMENT INCREMENTED ON FAILING FORK
IZ08575 corrupted or truncated live dump
IZ08576 crash at soo_select+0000F4
IZ08577 User stack trace not printed
IZ08578 specfs should handle DEV_NOLONGJMPX better
IZ08579 sec_getsecconf FAIL to read kernel sec flags in WPAR
IZ08580 Thread paging slows down system response time
IZ08581 shrinkfs crashes in eaRelocate
IZ08583 Process private segment 2 protected by key 2 instead of key 0.
IZ08584 Crash with corrupt stack in KDB
IZ08585 uvmount() able to unmount global FS
IZ08586 Compilation problems with stropts.h
IZ08587 mklv command hanging
IZ08588 FE_ macro definitions cause compile problems
IZ08589 System crashed at clock / i_softmod
IZ08590 mkprojldap does not support TDS 6.1 or later
IZ08591 Can’t get an IP address via DHCP on AIX610
IZ08592 cronadm/crontab fail on trusted aix wpar
IZ08593 project definitions are already loaded
IZ08594 lvmo tuneables save/restore incorrectly
IZ08595 Install commit only operation fails
IZ08723 get_location_point does not return proper value
IZ08724 etrace: size(type) fails
IZ08725 hpmcount coredumps when broken groups are present in .gps file
IZ08726 typedef with const and volatile fail for structure
IZ08727 Unable to delete stanza: /usr/sbin/execerror
IZ08728 Enabling TE failed with Error loading TSD
IZ08729 Syscall probes should also provide probe name
IZ08730 sem_unlink() fails in removeipcat the stop of wpar
IZ08731 System crahs in v_kmem_hide
IZ08732 Trusted Library paths can be set from a WPAR
IZ08733 Probevue fails to start on systems with > 64 CPUs
IZ08734 Additional Probevue trace hooks
IZ08744 System crash at get_from_list_excp+2c
IZ09523 svm_getrpid() returns other wpar real pid
IZ09524 EMGR CLEANUP LEAVES THE FILESET IS EFIXLOCKED STATE
IZ09525 restwpar fails to restore wpar with nfs mounted’/’
IZ09526 perfstat enhancements for WPARs
IZ09527 CC_EVAL: /audit is created as jfs instead of jfs2
IZ09530 emgr does not remove CU patches that have been committed
IZ09531 wpar isolation failed with hd_cfg
IZ09532 Possible crash in disk driver
IZ09533 IO hang after multiple failed attempts to access SVC disks
IZ09534 Update head driver for SDD PCM compatability
IZ09535 Eras registration failure for 2nd adapter
IZ09536 Reboot hangs during reserve testing
IZ09537 HA Discover operations crashing the machine
IZ09538 bootsy02 can not telnet in, waiting for lock or cpu
IZ09542 System crash in siRONUpdateSMap
IZ09543 Incorrect Oracle behavior in an RSET restricted WPAR
IZ09560 firmware-assisted system dump initialization failed
IZ09577 mknfsexp will fail if /etc/exports is absent
IZ09580 Performace regression on 10GB ethernet
IZ09600 some test cases mentioned below are failing in dst.p.1
IZ09601 tzset() not returning right values in Olson TZ
IZ09602 Authorized user cannot execute “timedc trace” command
IZ09604 wpar: relocation failed at restart, no oper permitted
IZ09605 nextrole fails with Invalid Argument
IZ09606 trustchk should allow modifications to all attributes
IZ09607 Passwd restriction config for CAPP missing items
IZ09608 J2_USERDATA_EIO on truncating encrypted files
IZ09609 trustchk -y does not change the file mode to 000
IZ09610 trustchk -g is hanging
IZ09614 “login -e <label>” fails when tnet=enable
IZ09675 high or incorrect load average due to uninitialized kernel proc
IZ09703 Fixdata for new service pack
IZ10000 AIX 6.1 odm change required to run RDAC on DS4K

Redbook: Introduction to Workload Partition Management in AIX 6.1

Monday, November 26th, 2007

http://www.redbooks.ibm.com/abstracts/sg247431.html?Open

Redbook: AIX 6.1 Differences Guide Available

Monday, November 26th, 2007

http://www.redbooks.ibm.com/redpieces/abstracts/sg247559.html?Open

AIX 6.1 GA

Tuesday, November 6th, 2007

AIX 6.1 is the latest release of IBMs popular Unix operating system. There are a few major changes within the OS, and a lot of new features.

  • Binary compatibility with AIX V5, 32 and 64 bit apps.
  • AIX 6.1 Supports Power4, Power5, Power6, PowerPC 970 processors.
  • AIX 6.1 will NOT have a 32 bit kernel, 64 bit only!
  • Upgrade from AIX V4 or V5.
  • Power6 features including Live Partition Mobility, Multiple Shared Processing Pools, and Application Storage Keys. These features are also available in AIX 5.3 with Power6.
  • Workload Partitions. WPARs are similar to Solaris Containers. The main differences are that AIX supports both Application WPARs and System WPARs, and allowing for WPAR Mobility. Live WPARs can be migrated between systems. IMO, WPARs are much more useful than Solaris Containers, and a lot easier to figure out. The resource management within the WPARs is also user friendly and easy to figure out for the first time users. WPARs require AIX 6.1 only, does not require Power6.
  • WPAR Manager. Web based WPAR management tool is smooth and easy to use. You can also manage WPARs via smith and CLI.
  • Enhanced RBAC, complete re-write of existing RBAC architecture.
  • Secure by Default install option. Install a minimal version of AIX. Sorta like a Gentoo live cd.
  • Concurrent kernel updates
  • Encrypted filesystems using JFS2
  • Dynamic tracing via Probevue

More to come.