You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Solaris application containers can be configured using the following properties, all of the below properties have mappings to properties specified under zonecfg(8) man page, except milestone.
4
6
5
-
## milestone
7
+
milestone
8
+
~~~~~~~~~
9
+
6
10
The SMF(Service Management Facility) FMRI which should go to "online" state before we start the desired process within the container.
7
11
8
-
**`milestone`***(string, OPTIONAL)*
12
+
`milestone`::
13
+
(string, OPTIONAL)
14
+
15
+
[[solaris-milestone-example]]
16
+
.Example
17
+
[source,json]
18
+
{
19
+
"solaris": {
20
+
"milestone": "svc:/milestone/container:default"
21
+
},
22
+
…
23
+
}
9
24
10
-
### Example
11
-
```json
12
-
"milestone": "svc:/milestone/container:default"
13
-
```
25
+
limitpriv
26
+
~~~~~~~~~
14
27
15
-
## limitpriv
16
28
The maximum set of privileges any process in this container can obtain.
17
-
The property should consist of a comma-separated privilege set specification as described in priv_str_to_set(3C) man page for the respective release of Solaris.
18
-
19
-
**`limitpriv`***(string, OPTIONAL)*
29
+
The property should consist of a comma-separated privilege set specification as described in `priv_str_to_set(3C)` man page for the respective release of Solaris.
30
+
31
+
`limitpriv`::
32
+
(string, OPTIONAL)
33
+
34
+
[[solaris-limitpriv-example]]
35
+
.Example
36
+
[source,json]
37
+
{
38
+
"solaris": {
39
+
"limitpriv": "default"
40
+
},
41
+
…
42
+
}
20
43
21
-
### Example
22
-
```json
23
-
"limitpriv": "default"
24
-
```
44
+
maxShmMemory
45
+
~~~~~~~~~~~~
25
46
26
-
## maxShmMemory
27
47
The maximum amount of shared memory allowed for this application container.
28
48
A scale (K, M, G, T) can be applied to the value for each of these numbers (for example, 1M is one megabyte).
29
49
Mapped to max-shm-memory in zonecfg(8) man page.
30
50
31
-
**`maxShmMemory`***(string, OPTIONAL)*
51
+
`maxShmMemory`::
52
+
(string, OPTIONAL)
53
+
54
+
[[solaris-maxShmMemory-example]]
55
+
.Example
56
+
[source,json]
57
+
{
58
+
"solaris": {
59
+
"maxShmMemory": "512m"
60
+
},
61
+
…
62
+
}
32
63
33
-
### Example
34
-
```json
35
-
"maxShmMemory": "512m"
36
-
```
64
+
cappedCPU
65
+
~~~~~~~~~
37
66
38
-
## cappedCPU
39
67
Sets a limit on the amount of CPU time that can be used by a container.
40
68
The unit used translates to the percentage of a single CPU that can be used by all user threads in a container, expressed as a fraction (for example, .75) or a mixed number (whole number and fraction, for example, 1.25).
41
69
An ncpu value of 1 means 100% of a CPU, a value of 1.25 means 125%, .75 mean 75%, and so forth.
42
70
When projects within a capped container have their own caps, the minimum value takes precedence.
43
71
cappedCPU is mapped to capped-cpu in zonecfg(8) man page.
44
72
45
-
* **`ncpus`***(string, OPTIONAL)*
73
+
`ncpus`::
74
+
(string, OPTIONAL)
46
75
47
-
### Example
48
-
```json
49
-
"cappedCPU": {
50
-
"ncpus": "8"
76
+
[[solaris-cappedCPU-example]]
77
+
.Example
78
+
[source,json]
79
+
{
80
+
"solaris": {
81
+
"cappedCPU": {
82
+
"ncpus": "8"
83
+
}
84
+
},
85
+
…
51
86
}
52
-
```
53
87
54
-
## cappedMemory
88
+
cappedMemory
89
+
~~~~~~~~~~~~
90
+
55
91
The physical and swap caps on the memory that can be used by this application container.
56
92
A scale (K, M, G, T) can be applied to the value for each of these numbers (for example, 1M is one megabyte).
57
93
cappedMemory is mapped to capped-memory in zonecfg(8) man page.
58
94
59
-
* **`physical`***(string, OPTIONAL)*
60
-
* **`swap`***(string, OPTIONAL)*
95
+
`physical`::
96
+
(string, OPTIONAL)
97
+
98
+
`swap`::
99
+
(string, OPTIONAL)
61
100
62
-
### Example
63
-
```json
64
-
"cappedMemory": {
65
-
"physical": "512m",
66
-
"swap": "512m"
101
+
[[solaris-cappedMemory-example]]
102
+
.Example
103
+
[source,json]
104
+
{
105
+
"solaris": {
106
+
"cappedMemory": {
107
+
"physical": "512m",
108
+
"swap": "512m"
109
+
}
110
+
},
111
+
…
67
112
}
68
-
```
69
113
70
-
## Network
114
+
Network
115
+
~~~~~~~
116
+
117
+
Automatic Network (anet)
118
+
^^^^^^^^^^^^^^^^^^^^^^^^
71
119
72
-
### Automatic Network (anet)
73
120
anet is specified as an array that is used to setup networking for Solaris application containers.
74
121
The anet resource represents the automatic creation of a network resource for an application container.
75
122
The zones administration daemon, zoneadmd, is the primary process for managing the container's virtual platform.
@@ -80,36 +127,54 @@ The VNIC is deleted when the container is torn down.
80
127
The following properties can be used to setup automatic networks.
81
128
For additional information on properties check zonecfg(8) man page for the respective release of Solaris.
82
129
83
-
* **`linkname`***(string, OPTIONAL)* Specify a name for the automatically created VNIC datalink.
84
-
* **`lowerLink`***(string, OPTIONAL)* Specify the link over which the VNIC will be created.
85
-
Mapped to lower-link in the zonecfg(8) man page.
86
-
* **`allowedAddress`***(string, OPTIONAL)* The set of IP addresses that the container can use might be constrained by specifying the allowedAddress property.
87
-
If allowedAddress has not been specified, then they can use any IP address on the associated physical interface for the network resource.
88
-
Otherwise, when allowedAddress is specified, the container cannot use IP addresses that are not in the allowedAddress list for the physical address.
89
-
Mapped to allowed-address in the zonecfg(8) man page.
90
-
* **`configureAllowedAddress`***(string, OPTIONAL)* If configureAllowedAddress is set to true, the addresses specified by allowedAddress are automatically configured on the interface each time the container starts.
91
-
When it is set to false, the allowedAddress will not be configured on container start.
92
-
Mapped to configure-allowed-address in the zonecfg(8) man page.
93
-
* **`defrouter`***(string, OPTIONAL)* The value for the OPTIONAL default router.
94
-
* **`macAddress`***(string, OPTIONAL)* Set the VNIC's MAC addresses based on the specified value or keyword.
95
-
If not a keyword, it is interpreted as a unicast MAC address.
96
-
For a list of the supported keywords please refer to the zonecfg(8) man page of the respective Solaris release.
97
-
Mapped to mac-address in the zonecfg(8) man page.
98
-
* **`linkProtection`***(string, OPTIONAL)* Enables one or more types of link protection using comma-separated values.
99
-
See the protection property in dladm(8) for supported values in respective release of Solaris.
100
-
Mapped to link-protection in the zonecfg(8) man page.
101
-
102
-
#### Example
103
-
```json
104
-
"anet": [
105
-
{
130
+
`linkname`::
131
+
(string, OPTIONAL) Specify a name for the automatically created VNIC datalink.
132
+
133
+
`lowerLink`::
134
+
(string, OPTIONAL) Specify the link over which the VNIC will be created.
135
+
Mapped to lower-link in the zonecfg(8) man page.
136
+
137
+
`allowedAddress`::
138
+
(string, OPTIONAL) The set of IP addresses that the container can use might be constrained by specifying the allowedAddress property.
139
+
If allowedAddress has not been specified, then they can use any IP address on the associated physical interface for the network resource.
140
+
Otherwise, when allowedAddress is specified, the container cannot use IP addresses that are not in the allowedAddress list for the physical address.
141
+
Mapped to allowed-address in the zonecfg(8) man page.
142
+
143
+
`configureAllowedAddress`::
144
+
(string, OPTIONAL) If configureAllowedAddress is set to true, the addresses specified by allowedAddress are automatically configured on the interface each time the container starts.
145
+
When it is set to false, the allowedAddress will not be configured on container start.
146
+
Mapped to configure-allowed-address in the zonecfg(8) man page.
147
+
148
+
`defrouter`::
149
+
(string, OPTIONAL) The value for the OPTIONAL default router.
150
+
151
+
`macAddress`::
152
+
(string, OPTIONAL) Set the VNIC's MAC addresses based on the specified value or keyword.
153
+
If not a keyword, it is interpreted as a unicast MAC address.
154
+
For a list of the supported keywords please refer to the zonecfg(8) man page of the respective Solaris release.
155
+
Mapped to mac-address in the zonecfg(8) man page.
156
+
157
+
`linkProtection`::
158
+
(string, OPTIONAL) Enables one or more types of link protection using comma-separated values.
159
+
See the protection property in dladm(8) for supported values in respective release of Solaris.
160
+
Mapped to link-protection in the zonecfg(8) man page.
0 commit comments