Mounting File Systems in Running Non-Global Zones

You can mount file systems in a running non-global zone. The following procedures are covered.

• As the global administrator or a user granted the appropriate authorizations in the global zone, you can import raw and block devices into a non-global zone. After the devices are imported, the zone administrator has access to the disk. The zone administrator can then create a new file system on the disk and perform one of the following actions:

  • Mount the file system manually

  • Place the file system in /etc/vfstab so that it will be mounted on zone boot

• As the global administrator or a user granted the appropriate authorizations, you can also mount a file system from the global zone into the non-global zone.

  Before mounting a file system from the global zone into a non-global zone, note that the non-global zone should be in the ready state or be booted. Otherwise, the next attempt to ready or boot the zone will fail. In addition, any file systems mounted from the global zone into a non-global zone will be unmounted when the zone halts.

How to Use LOFS to Mount a File System

You can share a file system between the global zone and non-global zones by using LOFS mounts. This procedure uses the zonecfg command to add an LOFS mount of the global zone /export/datafiles file system to the my-zone configuration. This example does not customize the mount options.

You must be the global administrator or a user in the global zone with the Zone Security rights profile to perform this procedure.

1. Become root or assume an equivalent role.
2. Use the zonecfg command.

   global# zonecfg -z my-zone

3. Add a file system to the configuration.

   zonecfg:my-zone> add fs

4. Set the mount point for the file system, /datafiles in my-zone.

   zonecfg:my-zone:fs> set dir=/datafiles

5. Specify that /export/datafiles in the global zone is to be mounted as /datafiles in my-zone.

   zonecfg:my-zone:fs> set special=/export/datafiles

6. Set the file system type.

   zonecfg:my-zone:fs> set type=lofs

7. End the specification.

   zonecfg:my-zone:fs> end

8. Verify and commit the configuration.

   zonecfg:my-zone> verify
   zonecfg:my-zone> commit

Temporary Mounts

You can add LOFS file system mounts from the global zone without rebooting the non-global zone:

global# mount -F lofs /export/datafiles /export/my-zone/root/datafiles

To make this mount occur each time the zone boots, the zone's configuration must be modified using the zonecfg command.

How to Delegate a ZFS Dataset to a Non-Global Zone

Use this procedure to delegate a ZFS dataset to a non-global zone.

You must be the global administrator or a user granted the appropriate authorizations in the global zone to perform this procedure.

1. Become root or assume an equivalent role.
2. From the global zone, create a new ZFS file system named fs2 on an existing ZFS pool named poolA:

   global# zfs create poolA/fs2

3. (Optional) Set the mountpoint property for the poolA/fs2 file system to /fs-del/fs2.

   global# zfs set mountpoint=/fs-del/fs2 poolA/fs2

   Setting the mountpoint is not required. If the mountpoint property is not specified, the dataset is mounted at /alias within the zone by default. Non-default values for the mountpoint and the canmount properties alter this behavior, as described in the zfs(1M) man page.

4. Verify that the source of the mountpoint property for this file system is now local.

   global# zfs get mountpoint poolA/fs2
   NAME       PROPERTY    VALUE        SOURCE
   poolA/fs2  mountpoint  /fs-del/fs2  local

5. Delegate the poolA/fs2 file system or specify an aliased dataset:
   • Delegate the poolA/fs2 file system to the zone:

     # zonecfg -z my-zone
     zonecfg:my-zone> add dataset
     zonecfg:my-zone:dataset> set name=poolA/fs2
     zonecfg:my-zone:dataset> end

   • Specify an aliased dataset:

     # zonecfg -z my-zone
     zonecfg:my-zone> add dataset
     zonecfg:my-zone:dataset> set name=poolA/fs2
     zonecfg:my-zone:dataset> set alias=delegated
     zonecfg:my-zone:dataset> end

6. Reboot the zone and display the zoned property for all poolA file systems:

   global# zfs get -r zoned poolA
   NAME      PROPERTY  VALUE   SOURCE
   poolA     zoned     off     default
   poolA/fs2 zoned     on      default

   Note that the zoned property for poolA/fs2 is set to on. This ZFS file system was delegated to a non-global zone, mounted in the zone, and is under zone administrator control. ZFS uses the zoned property to indicate that a dataset has been delegated to a non-global zone at one point in time.