Oracle Solaris 11: First Look -- Table of Contents -- Oracle Solaris 11: First Look -- Credits -- About the Author -- About the Reviewers -- www.PacktPub.com -- Support files, eBooks, discount offers and more -- Why Subscribe? -- Free Access for Packt account holders -- Instant Updates on New Packt Books -- Preface -- What this book covers -- What you need for this book -- Who this book is for -- Conventions -- Reader feedback -- Customer support -- Errata -- Piracy -- Questions -- 1. IPS - The Image Packaging System -- The brave new world of IPS -- Repositories/repos -- Repository URIs, also known as origins -- Package naming schemes -- Understanding the quirks of pkg name references -- Understanding pkg FMRI version fields -- Overview of package and patch installation -- The traditional methods -- New Solaris 11 patch and package installation methods -- Practical examples of pkg command usage -- Automatic package dependency use -- Installation dry run -- Finding packages that you want -- Searching by filename (pkg search) -- Searching by package names (pkg search) -- Searching by package names (pkg list) -- Listing files in a package -- Searching for installation groups -- Less-used pkg commands -- Dealing with repositories -- Creating your own IPS repository and packages -- Creating a local repo -- Copying the Oracle Solaris repository -- Creating your own company repository -- Creating a package -- Uploading packages to the repository -- Configuring machines to use your local repository -- Package updates and patching -- Summary -- 2. Solaris 11 Installation Methods -- It's the Oracle of install systems! -- Default passwords -- Installation from CD-ROM -- The x86 LiveCD install -- Choosing Text Install image or Automated Install image -- Manually invoking the install programs -- Text Install image -- Text Installer does AI too.

Automated Install image -- Getting a shell prompt from AI image -- Speed of AI installer -- Potential problems specific to AI install -- Overview of how AI install works -- AI installer client-side services -- Manifest-locator service -- Auto-installer service -- AI installer server-side services -- Network bootstrap process details -- SPARC, wanboot, and DNS -- PXE boot and x86 -- Setting up a local install server with installadm -- Side effects of installadm create-service -- Installadm, manifests, and profiles -- Viewing existing manifests and profiles -- Configuring a manifest -- Dynamically generated manifests -- Configuring a profile -- Templates for profiles -- Client registration via installadm create-client -- Manifests and profiles for zones -- Sharing wanboot with Solaris 10 clients -- Common traps and pitfalls -- Solaris 11 release version versus support version -- Summary -- 3. Sysadmin Configuration Differences -- Welcome to the new normal -- Host identity: the sysconfig command -- sysconfig configure -- sysconfig unconfigure -- sysconfig create-profile -- Driver configuration: /etc/driver/drv -- Network address configuration: ipadm and dladm -- IP configuration -- IP interface objects -- IP interface tunables -- IP and TCP tunables -- Network layer 2 device configuration -- Wireless configuration: Stick to the GUI if you can -- Miscellaneous differences in system-level configuration -- Name service related -- Time zone and language settings -- Nodename -- Summary -- 4. Networking Nuts and Bolts -- Networking re-architected -- Kernel redesign -- Orientation to new Solaris 11 networking -- Interface naming and IP labels -- A simple static IP example -- Network infrastructure impact on zones -- NWAM - NetWork AutoMagic -- NWAM pitfalls -- Sneaking around NWAM with VNICs -- Using NWAM via GUI -- IPMP - IP multipathing -- Setting up IPMP.

Link aggregation -- VNIC - Virtual NIC -- VLAN tagging -- IP tunneling -- Bridging -- Network resource management -- Per-interface management -- Flow-based resource management -- IP QoS - Quality of Service management -- Step 1 - Create a temporary QoS configuration file -- Step 2 - Activate the QoS rules file -- Step 3 - Permanently configure (-c) it into the post-reboot kernel -- Other changes -- Summary -- 5. NWAM - Networking Auto-reconfiguration -- What is NWAM and how you can use it -- Capabilities of NWAM -- NWAM basic concepts -- Connections -- Profiles -- Locations -- Summary -- 6. ZFS - Now You Can't Ignore It! -- ZFS - your future, today -- ZFS root - no more UFS -- Primary benefit of ZFS root filesystem -- ZFS booting and beadm -- New boot-time options -- New SPARC boot options -- New x86 boot options -- ZFS root limitations -- ZFS, beadm, and zones -- Deduplication now possible -- ZFS encryption -- ZFS diff between snapshots -- ZFS's new ACL modes - simpler yet more powerful -- Viewing ACLs on a file -- Setting an ACL -- Miscellaneous changes and improvements -- Pool-related changes -- Summary -- 7. Zones in Solaris 11 -- Taking things to the next zone -- New zone utilities -- New zone capabilities -- Changes to zones -- Allowable zone OS types limited -- ZFS zoneroot layout and Boot Environments -- Fast zone creation via clone -- The zoned property of ZFS -- Zone filesystems visible -- Automatic Network Interfaces - the anet resource -- Preconfiguring zones -- Sysconfig information -- Initial zonecfg defaults -- Initial package content of zones -- Example of fully preconfigured zone creation -- Immutable zones -- Creating an immutable zone -- Verifying immutable zone configuration -- Cloning an immutable zone -- Updating immutable zone configurations -- Summary -- 8. Security Improvements -- Keeping the horse in the barn.

Mandatory auditing -- Auditing basics -- Default audit events -- Configuring more audit logging -- Audit policies -- Active versus configured values -- Viewing audit logs -- Immutable zones -- ProFTPd is the new FTP server -- Sudo privileged access tool -- Direct root use now blocked by default -- Fine-grained RBAC privileges -- On-disk encryption -- Warnings about encrypted ZFS filesystems -- Creating an encrypted ZFS filesystem -- Interaction between encryption, compression, and deduplication -- PKCS11 centralized key store support -- Profiles can now be in LDAP -- Additional encryption support -- Summary -- 9. Miscellaneous -- What's in this chapter anyway? -- Virtual consoles, also known as virtual terminals, are back -- Fast reboot -- CUPS printing -- Power management -- Notifications triggered by SMF state transitions -- SMF notifications through e-mail, also known as SMTP -- SMF notifications through SNMP -- Querying and deleting SMF notifications -- Trusted Solaris extras -- COMSTAR and iSCSI -- iSCSI targets -- iSCSI initiator mode -- Removing remote iSCSI devices -- Safeguarding complex iSCSI configurations -- Summary -- A. IPS Package Reference -- B. New ACL Permissions and Abbreviations -- C. Solaris 10 Available Enhancements -- ZFS backported enhancements -- Other enhancements -- Index.