Thursday, May 29, 2014
Setting up SSL for Solaris 11 LDAP (ldapclient to use LDAPS)
Following on from my last blog about "Setting up SSL for Solaris 11 LDAP client (changing AD password from Solaris)" I thought I would finish it off by changing my name service from LDAP to LDAPS. Hopefully your system is already talking to Active Directory over LDAP for all your authentication ("Solaris 11 Authentication Login with Active Directory").
Friday, May 16, 2014
Setting up SSL for Solaris 11 LDAP client (changing AD password from Solaris)
I have been using LDAP for years for our authentication and using LDAP Active Directory for about 3 years, but this was always using ldap so I thought I would start looking at SSL.
This blog entry will look at the initial setup and how you can talk to the AD server over SSL. The information here is nothing new and is all covered in the references but hope this shorter version helps.
References:
This blog entry will look at the initial setup and how you can talk to the AD server over SSL. The information here is nothing new and is all covered in the references but hope this shorter version helps.
References:
- Changing Active Directory passwords via LDAP using PHP
- Enabling SSL in the Active Directory Connector
- Steps to setup SSL for Solaris LDAP client (certutil and openssl)
- Authenticating UNIX/Linux to Windows 2008R2. Part 2 : Solaris 10
Friday, December 06, 2013
Windows 7 client Printer Queue fails when printing to CUPS Server via IPP
A short entry, since if you have setup a cups server and you have set up the Windows 7 clients to print to it via IPP you may find the windows printer spooler some times plays up. We had this for a while with our setup and I could not find a answer. It looks like Microsoft really tries hard for it software to only work with Windows.
I bet there is code inside windows which says if talking to non-windows system add bugs!!
Anyway if you get any of the following in your cups logs:
http://support.microsoft.com/kb/2769359
KB2769359 : Print job fails when the printer driver isolation feature is set to isolated or shared mode in Windows 7 or Windows Server 2008 R2
Hope this helps
I bet there is code inside windows which says if talking to non-windows system add bugs!!
Anyway if you get any of the following in your cups logs:
- Print-Job client-error-bad-request
- windows-ext client-error-bad-request
- Print-Job client-error-bad-request
- Returning IPP client-error-bad-request for windows-ext
- Missing printer-uri, job-uri, or ppd-name attribute
- Print job fails.
- Event is logged in the Operation Log that shows that the print job was successful. However, the size of the print job is displayed as 0 bytes.
- tmp files appearing in printer spool
http://support.microsoft.com/kb/2769359
KB2769359 : Print job fails when the printer driver isolation feature is set to isolated or shared mode in Windows 7 or Windows Server 2008 R2
Hope this helps
Friday, October 18, 2013
Solaris 11: Setup Printer server using Cups and Windows 7 x64
Now that Solaris 11.1 now comes with cups v1.4.5 I thought I would replace our old Solaris 10 lpd server with a cups set up. The printer server is used by many clients, MacOS, Windows and Solaris. Note: Solaris SRU 11.1.8.4.0 fixed a few problems with Cups.
Steps:
Steps:
- Create Solaris zone (printsrv)
- Setup cups server and printers
- Setup Windows 7 clients
Friday, September 13, 2013
Setup Samba in a zone with Oracle Solaris 11.1 and join a Windows Active Directory Server (ADS)
I have been running Samba on Solaris 11 zone for a while now and I thought I would finally write the instructions up. First, why am I using samba and not the CIFS server which comes with Solaris now. Well, one reason.... CIFS does not work in a zone and Samba does. I have our NFS file-server in a zone so I needs SMB access to those files.
Before we can start you need change the "Maximum number of supplementary groups (groups that a user can be in, additionally to the primary group)".
I have just spotted that this has changed or at least documented in Solaris 11.1, but is still required in /etc/system ref: http://docs.oracle.com/cd/E26502_01/html/E29022/chapter2-4.html#gjmtw & http://www.c0t0d0s0.org/archives/7634-Less-known-Solaris-11.1-features-A-user-in-1024-groups-and-a-workaround-for-a-25-year-old-problem.html
# echo "set ngroups_max=512" >> /etc/system
Reboot the server.
Before we can start you need change the "Maximum number of supplementary groups (groups that a user can be in, additionally to the primary group)".
I have just spotted that this has changed or at least documented in Solaris 11.1, but is still required in /etc/system ref: http://docs.oracle.com/cd/E26502_01/html/E29022/chapter2-4.html#gjmtw & http://www.c0t0d0s0.org/archives/7634-Less-known-Solaris-11.1-features-A-user-in-1024-groups-and-a-workaround-for-a-25-year-old-problem.html
# echo "set ngroups_max=512" >> /etc/system
Reboot the server.
Thursday, May 02, 2013
Setting up Oracle Solaris 11 with DHCP and LDAP
Someone asked me how to setup a LDAP client on Solaris if you are using DHCP. I thought it would be a simple answer since Solaris comes with Automatic Network mode. The Automatic mode does a very good job and you can configure a lot of settings, but LDAP support is very limited.
Configuring LDAP When in Automatic Mode (Ref: from Managing Network Configuration When in Automatic Mode)
"Automatic network configuration mode provides limited support for LDAP. Only LDAP anonymous mode works when in automatic mode. If you want to use an LDAP proxy or LDAP self modes and some form of security credentials you must first enable the DefaultFixed profile and manually configure your network. For instructions, see Chapter 12, Setting Up LDAP Clients (Tasks), in Oracle Solaris Administration: Naming and Directory Services."
So, here is a little step by step guide:
Tuesday, March 19, 2013
UKOUG Solaris SIG
The Solaris Special Interest Group (SIG) has been active since 2005 in a different guise, as London OpenSolaris User Group (LOSUG). The group was formed with the help of Sun Microsystems to enhance the
popularity of their next release of their operating system OpenSolaris.
New locations:
Since the opensolaris.org website is about to go offline I am in the process of keeping a copy of the old slides and photos, so they want be lost....
All Presentations can be located here until they are transfered to UKOUG Solaris SIG main site:
New locations:
Since the opensolaris.org website is about to go offline I am in the process of keeping a copy of the old slides and photos, so they want be lost....
All Presentations can be located here until they are transfered to UKOUG Solaris SIG main site:
UKOUG Solaris SIG (LOSUG) 2011 Presentations
The Solaris Special Interest Group (SIG) has been active since 2005 in a different guise, as London OpenSolaris User Group (LOSUG). The group was formed with the help of Sun Microsystems to enhance the
popularity of their next release of their operating system OpenSolaris.
New locations:
Since the opensolaris.org website is about to go offline I am in the process of keeping a copy of the old slides and photos, so they want be lost....
New locations:
Since the opensolaris.org website is about to go offline I am in the process of keeping a copy of the old slides and photos, so they want be lost....
2011 Presentations
UKOUG Solaris SIG (LOSUG) 2010 Presentations
The Solaris Special Interest Group (SIG) has been active since 2005 in a different guise, as London OpenSolaris User Group (LOSUG). The group was formed with the help of Sun Microsystems to enhance the
popularity of their next release of their operating system OpenSolaris.
New locations:
Since the opensolaris.org website is about to go offline I am in the process of keeping a copy of the old slides and photos, so they want be lost....
New locations:
Since the opensolaris.org website is about to go offline I am in the process of keeping a copy of the old slides and photos, so they want be lost....
2010 Presentations
UKOUG Solaris SIG (LOSUG) 2009 Presentations
The Solaris Special Interest Group (SIG) has been active since 2005 in a different guise, as London OpenSolaris User Group (LOSUG). The group was formed with the help of Sun Microsystems to enhance the
popularity of their next release of their operating system OpenSolaris.
New locations:
Since the opensolaris.org website is about to go offline I am in the process of keeping a copy of the old slides and photos, so they want be lost....
New locations:
Since the opensolaris.org website is about to go offline I am in the process of keeping a copy of the old slides and photos, so they want be lost....
2009 Presentations
UKOUG Solaris SIG (LOSUG) 2008 Presentations
The Solaris Special Interest Group (SIG) has been active since 2005 in a different guise, as London OpenSolaris User Group (LOSUG). The group was formed with the help of Sun Microsystems to enhance the
popularity of their next release of their operating system OpenSolaris.
New locations:
Since the opensolaris.org website is about to go offline I am in the process of keeping a copy of the old slides and photos, so they want be lost....
New locations:
Since the opensolaris.org website is about to go offline I am in the process of keeping a copy of the old slides and photos, so they want be lost....
2008 Presentations
Wednesday, March 13, 2013
UKOUG Solaris SIG (LOSUG) 2007 Presentations
The Solaris Special Interest Group (SIG) has been active since 2005 in a different guise, as London OpenSolaris User Group (LOSUG). The group was formed with the help of Sun Microsystems to enhance the
popularity of their next release of their operating system OpenSolaris.
New locations:
Since the opensolaris.org website is about to go offline I am in the process of keeping a copy of the old slides and photos, so they want be lost....
February 2007 - Service Management Framework by Jarod Nash
Presentation Slides
April 2007 - NFS Update by Calum Mackay
Presentation Slides
June 2007 - Solaris Troubleshooting by Peter Harvey
Presentation Slides
July 2007 - Creating an OpenSolaris Build Server by James MacFarlane
Presentation Slides
October 2007 - Logical Domains (LDoms) by Liam Merwick
Presentation Slides
New locations:
Since the opensolaris.org website is about to go offline I am in the process of keeping a copy of the old slides and photos, so they want be lost....
2007 Presentations
February 2007 - Service Management Framework by Jarod Nash
Presentation Slides
April 2007 - NFS Update by Calum Mackay
Presentation Slides
June 2007 - Solaris Troubleshooting by Peter Harvey
Presentation Slides
July 2007 - Creating an OpenSolaris Build Server by James MacFarlane
Presentation Slides
October 2007 - Logical Domains (LDoms) by Liam Merwick
Presentation Slides
UKOUG Solaris SIG (LOSUG) 2005 Presentations
The Solaris Special Interest Group (SIG) has been active since 2005 in a different guise, as London OpenSolaris User Group (LOSUG). The group was formed with the help of Sun Microsystems to enhance the
popularity of their next release of their operating system OpenSolaris.
New locations:
Since the opensolaris.org websiteis about to has go offline I am in the process of keeping a copy of the old slides and photos, so they want be lost....
New locations:
Since the opensolaris.org website
2005 Presentations
Thursday, December 20, 2012
UKOUG Solaris SIG November & December Slides
Here are the last 2 talks of 2012. It has been a good year and for the Solaris SIG and 2 goods talks to end it. Roll on 2013:
Slides: Peter Tribble : How Zones served Queen Victoria
Slides: Chris Beal : Solaris 11 Serviceability Best Practices
As always come an join us next time:
December 2012 - Peter Tribble : How Zones served Queen Victoria
ProQuest's Peter Tribble took us through how ProQuest builds and uses Solaris Zones to develop and deploy services to its customers with particular reference to a very Royal project, which involved the on-line publishing of Queen Victoria's Journals at http://www.queenvictoriasjournals.org.Slides: Peter Tribble : How Zones served Queen Victoria
November 2012 - Chris Beal : Solaris 11 Serviceability Best Practices
Oracle's Chris Beal took us through best way to install, configure, and update your systems to identify when there has been a problem, and tools required to gather data to help solve it. Technologies to be discussed include: Automatic service request generation, Service Management Facility, Configuration, Oracle Support tools, Oracle Solaris configuration options, Managing package versions to minimize downtime, Version-lock facets, Shared/secure shell accessSlides: Chris Beal : Solaris 11 Serviceability Best Practices
As always come an join us next time:
Monday, November 19, 2012
Solaris 11 Automount (auto.home) with Active Directory
Now that you have Authentication Login via your Active Directory server (See my previous entry) you now need to sort out your automount maps (auto.home/auto_home, auto.direct/auto_direct, etc). This was surprising very straight forward.
Updated: Testing Section (23rd November 2012)
Reference:
nismap: http://technet.microsoft.com/en-us/library/cc772191.aspx
nis2ad: http://technet.microsoft.com/en-us/library/cc754412.aspx
Solaris integration with Active Director: http://technicalprose.blogspot.co.uk/2011/12/solaris-integration-with-active_16.html
Notes:
On the windows side we referee to auto.home, but on the Solaris side we will be referring to auto_home
Settings being used:
Updated: Testing Section (23rd November 2012)
Reference:
nismap: http://technet.microsoft.com/en-us/library/cc772191.aspx
nis2ad: http://technet.microsoft.com/en-us/library/cc754412.aspx
Solaris integration with Active Director: http://technicalprose.blogspot.co.uk/2011/12/solaris-integration-with-active_16.html
Notes:
On the windows side we referee to auto.home, but on the Solaris side we will be referring to auto_home
Settings being used:
Windows 2008 R2 AD servers = dcsad01 (193.61.1.1) and dcsad02 (193.61.2.2)
Domain = dcs.bbk.ac.uk
Kerberos Realm = DCS.BBK.AC.UK
Saturday, November 10, 2012
UKOUG Solaris SIG 2012 Slides & Video so far
The Solaris Special Interest Group (SIG) has been
active since 2005 in a different guise, as London OpenSolaris User Group
(LOSUG). The group was formed with the help of Sun Microsystems to enhance the
popularity of their next release of their operating system OpenSolaris. The
world has changed a lot since then, but the UKOUG Solaris SIG has kept up with the
changes in Oracle Solaris 11 and open source Solaris-based derivatives and still
remains an independently run group.
Our events run frequently, in the evening on the third Wednesday of each month. We have presentations given by professionals who are experts in their field, including Oracle Solaris developers and professionals as well as industry Solaris experts. Our members come from varied backgrounds including IT architects and engineers, analysts, system administrators, developers and many more. The events take place in the London Oracle City offices and are very popular, not just for the vast range of presentations, but also for the fact that participants and attendees can mingle and network with Solaris specialists, in a relaxed atmosphere over food and refreshments.
Our events run frequently, in the evening on the third Wednesday of each month. We have presentations given by professionals who are experts in their field, including Oracle Solaris developers and professionals as well as industry Solaris experts. Our members come from varied backgrounds including IT architects and engineers, analysts, system administrators, developers and many more. The events take place in the London Oracle City offices and are very popular, not just for the vast range of presentations, but also for the fact that participants and attendees can mingle and network with Solaris specialists, in a relaxed atmosphere over food and refreshments.
The presentations are promoted via the UKOUG website and our social media channels where infromation about about our next talks can be found:
These are the talks we have had so far this year:
December 2012 - Peter Tribble : How Zones served Queen Victoria
ProQuest's Peter Tribble took us through how ProQuest builds and uses Solaris Zones to develop and deploy services to its customers with particular reference to a very Royal project, which involved the on-line publishing of Queen Victoria's Journals at http://www.queenvictoriasjournals.org.Slides: Peter Tribble : How Zones served Queen Victoria
Wednesday, October 03, 2012
Solaris 11 Authentication Login with Active Directory
Password Authentication in Computer Science at Birkbeck was always very complicated for no reason. Over the years we had multiple passwords which always confused our students: YP & Active Directory, then NIS & AD, then LDAP with password Sync with AD, but with Solaris 11 & Solaris 10 I was finally in a position to get this sorted out.
There is a lot of pages out there which help with this, but the best I found was http://www.seedsofgenius.net/solaris/solaris-authentication-login-with-active-directory (This link does not seem to work now, so here is a cached version: https://web.archive.org/web/20151101112540/www.seedsofgenius.net/solaris/solaris-authentication-login-with-active-directory) so please go ahead and follow this for more details. I have a cut down version here for Solaris 11.
I will presume you have setup your Windows server (see link above Install UNIX Schema into Active Directory and Create ProxyDN User Account).
Updated: Testing Section (30th October 2012)
Updated: Setup DNS Section (7th July 2014)
Updated: Kerberos testing "kinit -V" (29th January 2016)
Updated: Setup LDAP client "followReferrals=false" (29th January 2016)
Updated: Setup PAM (29th January 2016)
Updated: Tested on Solaris 11.3 (29th January 2016)
Settings being used:
There is a lot of pages out there which help with this, but the best I found was http://www.seedsofgenius.net/solaris/solaris-authentication-login-with-active-directory (This link does not seem to work now, so here is a cached version: https://web.archive.org/web/20151101112540/www.seedsofgenius.net/solaris/solaris-authentication-login-with-active-directory) so please go ahead and follow this for more details. I have a cut down version here for Solaris 11.
I will presume you have setup your Windows server (see link above Install UNIX Schema into Active Directory and Create ProxyDN User Account).
Updated: Testing Section (30th October 2012)
Updated: Setup DNS Section (7th July 2014)
Updated: Kerberos testing "kinit -V" (29th January 2016)
Updated: Setup LDAP client "followReferrals=false" (29th January 2016)
Updated: Setup PAM (29th January 2016)
Updated: Tested on Solaris 11.3 (29th January 2016)
Settings being used:
Windows 2008 R2 AD servers = dcsad01 (193.61.1.1) and dcsad02 (193.61.2.2)
Domain = dcs.bbk.ac.uk
Kerberos Realm = DCS.BBK.AC.UK
Friday, March 09, 2012
Combine Solaris Automated Install and Repository on one image. Success
Following on my last entry about Solaris 11 Automated Install with no network (Standalone) I thought I would post this update saying that I have managed to get it working, well I have managed to create a new 6.7GB ISO which can boot a VirtualBox client and installs Solaris 11 with NO network I am not sure why it was failing last time, but since then I have reinstalled Solaris 11 and added another disk to my desktop.
Copy Oracle Solaris 11 11/11 Automated Installer from ISO to disk:
Copy Oracle Solaris 11 11/11 Repository Image from ISO to disk:
Check it and edit default manifest so that is uses local repository:
Create a new ISO:
The above iso then was used to install Solaris 11 on VirtaulBox.
Copy Oracle Solaris 11 11/11 Automated Installer from ISO to disk:
# mount -F hsfs sol-11-1111-ai-x86.iso /mnt
# cd /mnt
# mkdir /var/tmp/AIboot
# find . -depth -print | cpio -pdm /var/tmp/AIboot
# cd /
# umount /mnt
Copy Oracle Solaris 11 11/11 Repository Image from ISO to disk:
# mount -F hsfs sol-11-1111-repo-full.iso /mnt
# cd /mnt
# rsync -aP /mnt/repo/ /var/tmp/AIboot/repoSolaris11
# cd /
# umount /mnt
Check it and edit default manifest so that is uses local repository:
# du -hs /var/tmp/AIboot
7.0G /var/tmp/AIboot
# ls /var/tmp/AIbootauto_install devices mnt repoSolaris11 solaris.zlib bin export platform root solarismisc.zlib boot home proc save system dev jack reconfigure sbin tmp
Edit /var/tmp/AIboot/auto_install/default.xml
<publisher name="solaris"> <origin name="http://pkg.oracle.com/solaris/release"/> </publisher>
Change to:
<publisher name="solaris"> <origin name="file:///.cdrom/repoSolaris11"/> </publisher>
Create a new ISO:
# mkisofs -o /var/tmp/output.iso -b boot/grub/stage2_eltorito \
-c .catalog -no-emul-boot -boot-load-size 4 \
-boot-info-table -N -R -U -allow-multidot -no-iso-translate \
-cache-inodes -iso-level 4 -d -D -V Solaris11 /var/tmp/AIboot
Warning: Creating ISO-9660:1999 (version 2) filesystem.
Warning: ISO-9660 filenames longer than 31 may cause buffer overflows in the OS.
Size of boot image is 4 sectors -> No emulation
Size of boot image is 4 sectors -> No emulation
0.99% done, estimate finish Fri Mar 9 13:23:05 2012
1.13% done, estimate finish Fri Mar 9 13:22:53 2012
...
99.83% done, estimate finish Fri Mar 9 13:37:07 2012
99.97% done, estimate finish Fri Mar 9 13:37:06 2012
Total translation table size: 2048
Total rockridge attributes bytes: 36023282
Total directory bytes: 68673536
Path table size(bytes): 136082
Max brk space used 10144000
3530910 extents written (6896 MB)
The above iso then was used to install Solaris 11 on VirtaulBox.
Wednesday, March 07, 2012
Solaris 11 Automated Install with no network (Standalone)
After my last blog entry about Solaris 11 Automated Install without a network boot I was thinking that we have all the building blocks to do a true standaone install of Solaris 11 without any network connection at all.
Oracle gives us the iso's for "Oracle Solaris 11 11/11 Automated Installer" and the full "Oracle Solaris 11 11/11 Repository Image" from the Solaris download page, so why do we need a network!
The problem is that the repository is 7GB so testing it is a little difficult and trying to put the above two ISO's onto one 8GB USB is even harder. At this stage I have been unable to put the 7GB repository ISO onto a USB stick. Also, unable to combine the 2 ISO into 1 ISO which works (I end up with repository errors on install)!
But, in theory it will work and to demonstrate the idea I will use VirtualBox and a network for the manifest file (ONLY for manifest file!). You can use my previous blog to replace the AI boot image with a modified one.
At this point it should go off and install the software.
The perfect solution which I am happy for someone to try is to place the both AI boot and repository onto one ISO and then use no network, but I have failed so far!
Oracle gives us the iso's for "Oracle Solaris 11 11/11 Automated Installer" and the full "Oracle Solaris 11 11/11 Repository Image" from the Solaris download page, so why do we need a network!
The problem is that the repository is 7GB so testing it is a little difficult and trying to put the above two ISO's onto one 8GB USB is even harder. At this stage I have been unable to put the 7GB repository ISO onto a USB stick. Also, unable to combine the 2 ISO into 1 ISO which works (I end up with repository errors on install)!
But, in theory it will work and to demonstrate the idea I will use VirtualBox and a network for the manifest file (ONLY for manifest file!). You can use my previous blog to replace the AI boot image with a modified one.
- Download the above iso for x86:
- sol-11-1111-ai-x86.iso
- sol-11-1111-repo-full.iso
- Create a new VirtualBox Solaris client
- it needs to be on the network (download manifest file)
- Storage we will add both ISO files as CD
- Create a manifest file for the installation and place it on a web server:
- There is only one change required from the default manifest (download version default.xml):
- Now boot you client:
- Pick default option Oracle Solaris 11 11/11 Automated Install custom:
- Enter the URL for the modified manifest file:
- <publisher name="solaris"> <origin name="http://pkg.oracle.com/solaris/release"/> </publisher>
- Change to:
- <publisher name="solaris"> <origin name="file:///media/SOL11REPO_FULL/repo"/> </publisher>
At this point it should go off and install the software.
The perfect solution which I am happy for someone to try is to place the both AI boot and repository onto one ISO and then use no network, but I have failed so far!
Thursday, February 23, 2012
Solaris 11 Automated Install without a network boot
After my last blog about Solaris 11 Automated Installer quick setup guide in a zone I did some more reading and I realised that you don't require to boot the client with DHCP, but boot it from a local device (CD or USB).
If you check out the download page for solaris down you will see Automated Installer can be downloaded as an ISO or USB version. If you download this and put it on to a CD or USB you can boot your client with it. When you boot it you see
Modifying the default settings:
If you have placed the AI image onto a USB then you can edit it and change the default manifest.
Save it and try it out!
You still require a network since the install still uses a network IPS repository
I have tested it with VirtualBox booting of an iso file I created from the USB image.
If you check out the download page for solaris down you will see Automated Installer can be downloaded as an ISO or USB version. If you download this and put it on to a CD or USB you can boot your client with it. When you boot it you see
Oracle Solaris 11 11/11 Automated Install custom
Oracle Solaris 11 11/11 Automated Install
Oracle Solaris 11 11/11 Automated Install custom ttya
Oracle Solaris 11 11/11 Automated Install custom ttyb
Oracle Solaris 11 11/11 Automated Install ttya
Oracle Solaris 11 11/11 Automated Install ttyb
- Picking Oracle Solaris 11 11/11 Automated Install custom means you will be prompted for a URL where your manifest is located on the network
- Picking Oracle Solaris 11 11/11 Automated Install will install Solaris using a default manifest
Modifying the default settings:
If you have placed the AI image onto a USB then you can edit it and change the default manifest.
- Mount the USB image (USB)
# ls /media/DataTraveler 2.0
. .volsetid jack sbin
.. auto_install lost+found solaris.zlib
.catalog bin mnt solarismisc.zlib
.cdrom boot platform system
.image_info dev proc tmp
.liveusb devices reconfigure
.SELF-ASSEMBLY-REQUIRED export root
.transfer-manifest.xml home save
Edit the default.xml file:
# vi /media/DataTraveler 2.0/auto_install/manifest/default.xml
You would think you could edit the default profile as well, but you can't since it uses the default one located at /usr/share/auto_install/sc_profiles/enable_sci.xml which is not accessible, since /usr is a lofi mount. I think this should be classed as a bug, since you would expect it to use /auto_install/sc_profiles.
I have just filed a BUG report with Oracle for this
This is the way it should be done, if this BUG did not exist!!!
Edit default system configuration file:
# cd /media/DataTraveler 2.0/auto_install/sc_profiles/# vi enable_sci.xml
Or use the sample one:
# cd /media/DataTraveler 2.0/auto_install/sc_profiles/# cp sc_sample.xml enable_sci.xml
This is the way you have to do it now. Long way!!! We have to replace the solaris.zlib on the image
As before we mount the USB image
# cd /media/DataTraveler 2.0
Mount the image
# lofiadm -a solaris.zlib# mount -F hsfs /dev/lofi/1 /mnt
Now copy the whole image
# mkdir /export/newsolaris# cd /mnt# find . -depth -print | cpio -pdm /export/newsolaris# cd /export/newsolaris
Now we finally get to making are changes
# cd ./share/auto_install/sc_profiles/# ls -ltotal 27 -r--r--r-- 1 root sys 3104 Feb 23 17:39 enable_sci.xml -r--r--r-- 1 root sys 3104 Oct 21 00:04 sc_sample.xml -r--r--r-- 1 root sys 4656 Oct 21 00:04 static_network.xml# cp -ip sc_sample.xml enable_sci.xml#
Now re-create the solaris.zlib image
# mkisofs -o /tmp/solaris.zlib -quiet -N -l -R -U -allow-multidot -no-iso-translate -cache-inodes -d -D -V "compress" /export/newsolarisWarning: creating filesystem that does not conform to ISO-9660.
It needs to be compressed
# lofiadm -C lzma /tmp/solaris.zlib
Copy it back to the USB image# cp /tmp/solaris.zlib /media/DataTraveler 2.0
If you want to create an ISO so that you can test it on VirtualBox. Try:# /usr/bin/mkisofs -d -D -J -l -r -U -relaxed-filenames -b boot/grub/stage2_eltorito -no-emul-boot -boot-load-size 4 -boot-info-table -c .catalog -V "my_volume_name" -o /var/tmp/output.iso "/media/DataTraveler 2.0"
Warning: creating filesystem that does not conform to ISO-9660.
Setting input-charset to 'UTF-8' from locale.
Size of boot image is 4 sectors -> No emulation
Size of boot image is 4 sectors -> No emulation
3.59% done, estimate finish Mon Feb 27 13:03:22 2012
7.17% done, estimate finish Mon Feb 27 13:03:22 2012
.....
96.77% done, estimate finish Mon Feb 27 13:03:33 2012
Total translation table size: 2048
Total rockridge attributes bytes: 45685
Total directory bytes: 290816
Path table size(bytes): 1864
Max brk space used 7e000
139507 extents written (272 MB)
Save it and try it out!
You still require a network since the install still uses a network IPS repository
I have tested it with VirtualBox booting of an iso file I created from the USB image.
Subscribe to:
Posts (Atom)