defrouter in zone resource

157 views
Skip to first unread message

John Lyman

unread,
Jul 19, 2010, 3:52:05 PM7/19/10
to Puppet Users
Does anyone know a way to set the defrouter when creating a zone on a
solaris box?

I'm guessing the the provider was written before the Solaris update
that provided the new functionality. I've been getting around it with
an exec (e.g. zonecfg -z my_zone "select net address=192.168.1.100 ;
set defrouter=192.168.1.1 ; end"), but I thought there may be a more
graceful solution. I've also tried messing with create_args to no
avail.

Nan Liu

unread,
Jul 19, 2010, 4:50:20 PM7/19/10
to puppet...@googlegroups.com
On Mon, Jul 19, 2010 at 3:52 PM, John Lyman <jly...@gmail.com> wrote:
Does anyone know a way to set the defrouter when creating a zone on a
solaris box?

Rather than using exec, I recommend using sysidcfg file with a template. You can specify default route per interface. Please keep in mind sysidcfg is only processed during initial boot, but you should be able to manage the zone with puppet afterward.

Thanks,

Nan

deet

unread,
Jul 19, 2010, 6:15:51 PM7/19/10
to Puppet Users


> Rather than using exec, I recommend using sysidcfg file with a template.

If this an shared-ip zone then the default_route entry in the
sysidcfg will not actually create a route in the non global zone.
The routing setup via /lib/svc/method/net-routing-setup doesn't
actually do anything in shared-ip zones. My understanding is that
if you use the 'defrouter' setting in the zonecfg then during zone
installation/creation the global zone actually set's up an additional
default route which is used by the non global zone. Without
noodling on it too long it would appear to be a job for exec
currently.


Example from a test zone in case I missed something.

[me@here: ~] sudo zonecfg -z dev-testzone info net
net:
address: 10.1.16.49
physical: e1000g0
defrouter not specified <--------- This should contain
the route if it was setup via zonecfg



HTH. Derek.

John Lyman

unread,
Jul 20, 2010, 9:40:59 AM7/20/10
to Puppet Users
> Without noodling on it too long it would appear to be a job for exec
> currently.

Thanks for confirming. I created a feature request:
http://projects.reductivelabs.com/issues/4296
Reply all
Reply to author
Forward
0 new messages