Ensure that the “sudo” package is installed on the target system. – This is used by the Acquire to allow the non-privileged Metron user to run the required “df -k -Z” command to capture filespace data from the non-global (local) zones.
Configure the sudoers file to grant appropriate permissions to the metron user. – The permissions should be restricted sufficiently to allow only the execution of the df -k -Z command.
Ensure that the Acquire will not be prompted for a password by adding the following to the sudoers file:
NOPASSWD:ALL’
Ensure that “sudo” is available in the path provided by cron. – The path provided by cron is very often as little as /usr/bin and in this case Acquire will be unable to find sudo. If this is true for your system(s), you could edit the profile provided by cron to include /usr/local/bin, which might not be an acceptable alteration, or you can create a symbolic link to that location as follows:
$ ln -s /usr/local/bin/sudo /usr/bin/This will ensure that when the APMdisk2 command that issues sudo is run by cron it will work
Acquire uses Solaris Extended Accounting to determine which zone processes were running in when they terminated. The system administrator will need to undertake the following steps to enable this.
- Enable extended accounting by using the following
command.
usr/sbin/acctadm -e extended -f /var/adm/exacct/proc process
This should create a file called proc in the /var/adm/exacct directory.
Due to the additional filespace overhead of running extended accounting it is recommended that the system administrator considers locating the extended accounting file in a location other than /var to prevent it from filling up.
-
Enable read permission for the /var/adm/exacct/proc file.
In order for Acquire to successfully capture Solaris container accounting information the following permissions must be set on the /var/adm/exacct/proc file.
For example: -rwxr--r-- 2 root root 17557406 Jul 1 15:47 proc
This can be performed by the root user entering:# chmod 744 proc -
This allows the local user account running the Acquire to read the proc file and extract the extended accounting for global/user zones.
-
In order to manage the size of the accounting file it is recommended that something similar to the following lines be added to the root crontab.
0 8 * * 1-5 /usr/sbin/acctadm -e extended -f /var/adm/exacct/proc process1 8 * * 1-5 chmod 744 /var/adm/exacct/proc0 18 * * 1-5 /usr/sbin/acctadm -x process30 18 * * 1-5 rm /var/adm/exacct/proc -
These lines assume that you want to run the Acquire to capture User (Accounting) data for the period of 08:00 to 18:00 Monday-Friday at 15 minute snapshots. Thus you should switch on extended accounting at 08:00 on those days (line 1) and then switch it off at 18:00 (line 2). The output file is not removed for a further 30 minutes (line 3) to ensure that the final Acquire interval has had the chance to process it first.
If a different location is chosen for the output file then the above lines should be amended as appropriate.
When you define the target with System Manager, ensure the location of the proc file is correct in the UNIX Options panel.