> pfexec lpadmin -p lp01 -v /dev/null -m netstandard -o dest=lp01.example.com:9100 -o protocol=tcp -T PS -I postscript
> pfexec lpset -a banner=never lp01
> pfexec lpadmin -d lp01
> pfexec enable lp01
> pfexec accept lp01

svcadm disable svc:/network/nfs/mapid:default
svcadm disable svc:/network/nfs/cbd:default
svcadm disable svc:/network/nfs/status:default
svcadm disable svc:/network/nfs/nlockmgr:default
svcadm disable svc:/network/rpc/rstat:default
svcadm disable svc:/application/x11/xfs:default
svcadm disable svc:/network/finger:default
svcadm disable svc:/network/ftp:default
svcadm disable svc:/network/login:rlogin
svcadm disable svc:/network/nfs/rquota:default
svcadm disable svc:/network/nfs/client:default
svcadm disable svc:/network/rpc/rusers:default
svcadm disable svc:/network/rpc/cde-ttdbserver:tcp
svcadm disable svc:/network/shell:default
svcadm disable svc:/network/telnet:default
svcadm disable svc:/network/cde-spc:default
svcadm disable svc:/application/management/seaport:default
svcadm disable svc:/application/management/snmpdx:default
svcadm disable svc:/application/management/dmi:default
svcadm disable svc:/system/webconsole:console
svcadm disable svc:/application/print/ipp-listener:default

# usermod -P'Primary Administrator' aleonard

“aleonard” will now be able to preface commands with “pfexec” to run them as root, similar to sudo when configured not to prompt for a password.

References: Less known Solaris features: pfexec

divert(0)dnl
VERSIONID(`@(#)sendmail.mc 1.11 (Sun) 06/21/04')
OSTYPE(`solaris8')dnl
DOMAIN(`generic')dnl
FEATURE(access_db, `hash -o -T /etc/mail/access')
FEATURE(mailertable, `hash -o /etc/mail/mailertable')
MAILER(`local')dnl
MAILER(`smtp')dnl


The new ‘sendmail.cf’ can be built in ‘/usr/lib/mail/cf/sendmail.mc’ by running ‘make’ as root. Copy the new ‘sendmail.cf’ file to ‘/etc/mail’ and restart sendmail by running:

# svcadm restart sendmail

An example mailertable mail map would be as follows:

example.org smtp:mx.example.org

Once your map files are ready, use ‘makemap’ to create the database files for each map:

# makemap -v hash mailertable < mailertable
# makemap -v hash access < access

devfsadm(1M) maintains the /dev namespace. It replaces the previous suite of devfs administration tools including drvconfig(1M), disks(1M), tapes(1M), ports(1M), audlinks(1M), and devlinks(1M).

References: Adding a Hard Drive to Solaris 10

• /etc/hosts
• /etc/nodename
• /etc/hostname.<interface>
• /etc/defaultrouter

Reboot to apply the changes, or run:

# svcadm restart network/physical

# for snapshot in `zfs list -H -t snapshot -r /opt/datastore | egrep '2009\-0[1-8]' | awk '{print $1}'`; do zfs destroy $snapshot; done

or possibly:

# for snapshot in `zfs list -H -t snapshot -r /opt/datastore | egrep '2009\-0[1-8]' | awk '{print $1}'`; do zfs destroy -r $snapshot; done

ld.so.1: conftest: fatal: libreadline.so.5: open failed: No such file or directory

Using crle is straightforward; to view the current configuration:

> crle

Default configuration file (/var/ld/ld.config) not found
  Default Library Path (ELF):   /lib:/usr/lib  (system default)
  Trusted Directories (ELF):    /lib/secure:/usr/lib/secure  (system default)

Updating the linking environment is also easy; to solve the libreadline.so.5 problem on my system shown above:

> pfexec crle -l /depot/readline-5.2/lib -u

References and more details: crle man page, When should I set LD_LIBRARY_PATH?, Some Solaris FAQ, What would we do without crle?

 > svcs ntp
 STATE          STIME    FMRI
 disabled       Feb_27   svc:/network/ntp:default

View a service’s dependencies:

 > svcs -d ntp
 STATE          STIME    FMRI
 online         Feb_27   svc:/network/service:default

To see what other services depend on a given service:

 > svcs -D ntp
 STATE          STIME    FMRI
 online         Feb_27   svc:/milestone/multi-user:default

To enable a service:

 > pfexec svcadm enable ntp

To disable a service:

 > pfexec svcadm disable ntp

To view a service’s processes:

 > svcs -p ntp
 STATE          STIME    FMRI
 online         12:19:45 svc:/network/ntp:default
                12:19:45     8331 xntpd

See also Easier System Administration with Service Management Facility.

 # zonecfg -z zone1
 zonecfg:zone1> add fs
 zonecfg:zone1:fs> set dir=/depot
 zonecfg:zone1:fs> set special=/depot
 zonecfg:zone1:fs> set type=lofs
 zonecfg:zone1:fs> add options [nodevices]
 zonecfg:zone1:fs> end
 zonecfg:zone1> commit
 zonecfg:zone1> exit

special is the directory from the global zone to mount; dir is the mount point within the non-global zone.

If adding a CD, while in the “fs” configuration mode, change the options to the following:

zonecfg:zone1:fs> add options [ro,nodevices]

A reboot of the non-global zone (init 6 within the zone) is necessary for the changes to be visible.

All filesystems configured for the zone can be listed as follows:

# zonecfg -z zone1
zonecfg:zone1> info fs
fs:
        dir: /depot
        special: /depot
        raw not specified
        type: lofs
        options: []

To remove the filesystem from the non-global zone, do the following:

 # zonecfg -z zone1
 zonecfg:zone1> remove fs dir=/mnt
 zonecfg:zone1> commit
 zonecfg:zone1> exit

Again, a reboot is necessary for the reconfiguration to take effect.

References: Sun Developer Network forums, File Systems and Non-Global Zones and Resource Type Properties.