Problem
NetBackup Support for Oracle Solaris Virtualization
Solution
Clients should be configured to skip lofs file systems to avoid backing them up twice. The client and DB agent are required in local zone for hot database backups.
Systems configured with local zones can be backed up with the NetBackup Solaris 11 standard client, provided the standard client is loaded on each local zone in which a backup is desired. On a local zone, a workaround must be performed to successfully load the NetBackup standard client. Prior to installation, the /usr/openv directory must be created and made writable for a successful NetBackup client installation. To do this, you must use the zlogin process to become "Zone root" on the local zone. Then, you will be able to create a link from /usr/openv to a writable location on the local zone.
- Processes in the local zone are visible in the global zone. This means a bp.kill_all in the global zone will shutdown all NBU processes across all zones.
Solaris 11 Logical Domains (LDoms) are only available on Sun servers utilizing CMT technology. Solaris 11 LDoms provide virtual machines that run an independent operating system instance, and contain virtualized CPU, memory, storage, console, and cryptographic devices.
Guest domain support is limited to standard client, database agents, master server and disk media server.
Be sure to backup the LDoms environment with the Control Domain backup:
- Backup the database files in /var/opt/SUNWldm.
- Protect the primary domain configuration with the following command:
# ldm list-constraints -x primary > primary.xml
Zones (containers) are isolated application execution environments that an administrator can create on a single Solaris 10 instance. Each Solaris update may add additional features and fixes so is best to be at latest update.
All NetBackup components supported with Solaris 10 physical media servers are supported in a Solaris 10 global zone.
Backups can be performed in individual local zones, or by backing up the entire system from the global zone.
All NetBackup components supported with Solaris 10 physical media servers are supported in a Solaris 10 whole root local zone.
Local zone support is limited to standard client, database agents, master server, media server and Bare Metal Restore client (as described in the Bare Metal Restore Administrators Guide).
Global Zone client backup:
A NetBackup client in the global zone can be used to back up the entire system. A full restore of the global zone restores everything in the global zone and the local zones as well, as long as the respective root file systems of the local zones were included in the backup. Make sure that the databases in local zones are offline before starting the backup from the global zone.
Local Zone client backup:
Clients should be configured to skip lofs file systems to avoid backing them up twice. The client and DB agent are required in local zone for hot database backups.
Systems configured with local zones can be backed up with the NetBackup Solaris 10 standard client, provided the standard client is loaded on each local zone in which a backup is desired. On a local zone, a workaround must be performed to successfully load the NetBackup standard client. Prior to installation, the /usr/openv directory must be created and made writable for a successful NetBackup client installation. To do this, you must use the zlogin process to become "Zone root" on the local zone. Then, you will be able to create a link from /usr/openv to a writable location on the local zone.
- On a whole root local zone, client push install or local install is done normally.
- On a sparse root local zone that does not have a master/media server on the global zone, the install procedure is:
For example:
# ln -s /nonglobdir/openv /usr/openv
# ls /nonglobdir/openv
/nonglobdir/openv: No such file or directory
# ls -al /usr/openv
lrwxrwxrwx 1 root root 10 Aug 23 15:13 /usr/openv -> /nonglobdir/openv
In the local zone, make sure that /usr/openv exists as a link.
# ls -al /usr/openv
lrwxrwxrwx 1 root root 10 Aug 23 15:13 /usr/openv -> /nonglobdir/openv
In the local zone, make sure that the directory linked exists and is writeable.
# ls -al /nonglobdir/openv
total 32
drwxr-xr-x 9 root bin 512 Aug 18 15:23 ./
drwxr-xr-x 18 root bin 512 Aug 18 15:30 ../
A client push install or local install can now be done normally following the procedures in NetBackup documentation.
- On a sparse root local zone that has a master/media server on the global zone, the install procedure is:
In the global zone, /usr/openv in a default installation is a link to /opt/openv . Alternatively, the master/media server can be installed in some BASEDIR other than the default /opt , and /usr/openv be linked to /BASEDIR/openv . In either case, verify the directory linked to by /usr/openv .
For example:# ls -al /usr/openv
lrwxrwxrwx 1 root other 10 Aug 18 11:39 /usr/openv -> /opt/openv/
In the local zone, create a writable directory where the linked /usr/openv points:# mkdir /opt/openv
A client push install or local install can now be done normally following the procedures in NetBackup documentation.
Instructions for installing NetBackup 7.x
Install NetBackup and NetBackup updates into the local zones like regular media server installs.
The sg driver and related utilities/libraries need to be moved from the local zone to the global zone in order to do initial device configuration. The following steps must be performed in the global zone to accomplish this (skip steps 1-6 if NetBackup media server is already installed in the global zone):
- mkdir -p /usr/openv/volmgr/bin
- cp -r <local zone path>/root/<path>/openv/volmgr/bin/driver /usr/openv/volmgr/bin
- cp <local zone path>/root/<path>/openv/volmgr/bin/sgscan /usr/openv/volmgr/bin
- cp <local zone path>/root/<path>/openv/volmgr/bin/sg.build /usr/openv/volmgr/bin
- cp <local zone path>/root/<path>/openv/volmgr/bin/scsi_command /usr/openv/volmgr/bin
- cp –r <local zone path>/root/<path>/openv/lib /usr/openv
- cd /usr/openv/volmgr/bin/driver. run ../sg.build with normal options to create sg configuration files
- run sg.install
- run /usr/openv/volmgr/bin/sgscan to view the devices that are visible in the global zone.
- Allocate devices to the local zones using the following procedure. Remember that each local zone must have its own SCSI/FC controller. These steps must be repeated for each drive/robot that you want to allocate to a local zone. The attached script (replicate_to_local) can be used to automate this process:
a) Determine the raw and block device that needs to be exported. Only raw (sg) for libraries, both block (st) and raw (sg) for tape drives.
11. Now the media server is ready for normal NetBackup device configuration.
- For native fibre drives that support SCSI persistent reservation (SPR), use SPR in place of scsi reserve (SR) when configured in SSO.
- For drives using NetBackup Shared Storage Option (SSO), it is recommended that each local zone has its own dedicated SCSI FC port/SCSI channel to the drives configured for sharing.
-
All zones on the same media server using tape need to be in the same NetBackup domain.
- Processes in the local zone are visible in the global zone. This means a bp.kill_all in the global zone will shutdown all NBU processes across all zones.
Solaris 10 Logical Domains (LDoms) are only available on Sun servers utilizing CMT technology. Solaris 10 LDoms provide virtual machines that run an independent operating system instance, and contain virtualized CPU, memory, storage, console, and cryptographic devices.
- The LDom hypervisor is a firmware layer on the flash PROM of the server motherboard
- Control domain - Executes Logical Domains Manager software to govern logical domain creation and assignment of physical resources
- Service domain - Interfaces with the hypervisor on behalf of a guest domain to manage access to hardware resources, such as CPU, memory, network, disk, console, and cryptographic units
- I/O domain - Controls direct, physical access to input/output devices, such as PCI Express cards, storage units, and network devices.
- Guest domain - Utilizes virtual devices offered by service and I/O domains and operates under the management of the control domain
All NetBackup components supported with Solaris 10 SPARC physical servers are supported in a Solaris 10 LDoms Control Domain and I/O Domain with the exception of Bare Metal Restore (server or client). Guest domain support is limited to standard client, database agents, master server and disk media server.
Be sure to backup the LDoms environment with the Control Domain backup:
- Backup the database files in /var/opt/SUNWldm.
- Protect the primary domain configuration with the following command:
# ldm list-constraints -x primary > primary.xml
Useful SUN Forum sites:
Zones Forum:
https://opensolaris.org/jive/search.jspa?q=ZONES
LDoms Forum:
https://opensolaris.org/jive/category.jspa?categoryID=115