New Zones Features

Jeff Victor's article on New Zones Features describes many of the Zones related enhancements to Solaris 10 8/07. Jeff describes how to:

• Set a physical memory cap on a Container
• Cap Virtual memory (i.e. swap space)
• Set locked memory (i.e. prevent from being paged out) limits
  
• Dedicate CPUs to a zone
• Set shared memory, and ids for shared memory, semaphores and message queues by Container
• Use the Fair Share Scheduler to simply assign cpu-shares to a zone
• Assign DTrace privileges, dtrace_proc and dtrace_user to a Container
  
• Grant exclusive access to one or more network interfaces to a Container
• Set up Container to Container communication via an external box
• Upgrade and Patch Containers with Live Upgrade