Whitepaper: Solaris Zones: operating system support for consolidating commercial workloads

Daniel Price posted on his blog his paper about Solaris 10 Zones (the embedded virtualization feature of the new SUN operating system), presented at Large Installation System Administration Conference (LISA) 2004:


Abstract

Server consolidation, which allows multiple workloads to run on the same system, has become increasingly important as a way to improve the utilization of computing resources and reduce costs. Consolidation is common in mainframe nvironments, where technology to support running multiple workloads and even multiple operating systems on the same hardware has been evolving since the late 1960’s. This technology is now becoming an important differentiator in the UNIX and Linux server market as well, both at the low end (virtual web hosting) and high end (traditional data center server consolidation).

This paper introduces Solaris Zones (zones), a fully realized solution for server consolidation projects in a commercial UNIX operating system. By creating virtualized application execution environments within a single instance of the operating system, the facility strikes a unique balance between competing requirements. On the one hand, a system with multiple workloads needs to run those workloads in isolation, to ensure that applications can neither observe data from other applications nor affect their operation. It must also prevent applications from over-consuming system resources. On the other hand, the system as a whole has to be flexible, manageable, and observable, in order to reduce administrative costs and increase efficiency. By focusing on the support of multiple application environments rather than multiple operating system instances, zones meets isolation requirements without sacrificing manageability.

License issues with virtualization softwares and Microsoft management products

Microsoft updated its Virtual Server 2005 FAQ page to describe how Microsoft Operation Manager (MOM) 2005 and System Management Server (SMS) 2003 need to be licensed when working with virtual environments (both Microsoft and VMware):


Q. How many licenses will I need for Microsoft Operations Manager (MOM) 2005 to manage my physical servers and virtual machines?

A. MOM 2005 is licensed on a server-plus-device management license basis. A server license is required for each manager server. In addition, an Operations Management License (OML) is required for each managed device regardless of the number of virtual machines. For more information about MOM 2005 licensing, download this Microsoft Volume Licensing Brief: Licensing MOM 2005.

Q. How many licenses will I need for Systems Management Server (SMS) 2003 to manage my physical servers and virtual machines?

A. SMS 2003 is licensed on a server-plus-device management license basis. A server license is required for each primary site server (such as manager server). In addition, a Configuration Management License (CML); previously known as Client Access License (CAL), is required for each managed device regardless of the number of virtual machines. For more information about SMS 2003 licensing, download Microsoft Volume Licensing Brief: Licensing SMS 2003.

VMware targets Microsoft with Workstation 5.0

Quoting from BetaNews:


Sources familiar with testing have told BetaNews that VMware has released Beta 1 of Workstation 5.0 to a select group of testers.

This latest release of VMware’s virtual desktop software includes a host of new features ranging from improved collaboration and networking, better performance and surer security, to enhanced cloning capabilities and Microsoft Virtual PC compatibility.

New to VMware Workstation, Teams are intended to clear the way for easier configuration of multi-tier applications. The Teams feature lassos together a collection of virtual machines that are connected by private network segments. Once a team is created, the entire cluster of virtual machines is administered as if it were a single unit. In addition, administrators can view active thumbnails of every “Team” member.

VMware’s V2V Assistant rolls back the clock to a time when Microsoft was not a competitor, enabling Microsoft Virtual PC virtual machines to be stripped of their vendor identity and converted into Workstation 5 virtual machines. Workstation 5 can also open a Microsoft virtual machine without conversion.

Workstation 5 also promises to deliver enhanced networking performance, sources said. When a user installs the updated VMware tools, all required drivers are automatically loaded through the software’s custom network driver. VMware claims to have achieved significant improvements in network performances.

Developers have turned their attention toward shoring up the efficiency of memory utilization, and to securing the computing environment against buffer overruns. VMware has elected to target the scenario of concurrent use of multiple virtual machines as the primary candidate to receive performance tweaks. The beta also targets buffer overruns, permitting operating systems that support the NX bit to designate memory space for applications. Any code that attempts to run outside of the space will not be executed.

Two different methods are provided for cloning: linked and full. If a parent virtual machine is accessible in shared storage, it can be linked to rather than copied and stored locally. Any changes that are made to the cloned virtual machine are saved on the resident hardware. Team members can then share the saved configuration. In addition, linked clones can be used as a universal template for additional clones, thus sparing disk space. Full cloning makes complete copies of virtual machine that can be stored on disks and other media.

What’s more, Workstation 5 offers the ability to record all activity within a virtual machine and commits the record to the .AVI format. VMware has provided the feature so that users can reproduce steps that may have led to defects or to record the process of installing and configuring a new application.

If all else fails, users can take an unlimited number of snapshots to capture the state of the environment along a specified range of time. A new item called Snapshot Manager allows administrators to roll back to a previous state along the timeline.

Other miscellaneous features in the Workstation 5 beta include a gtk2-based user interface for Linux to provide a better look and feel, as well as increased stability; souped up drag and drop, shared folders and sound features; and support for USB devices such as Web cams and speaker systems.

Softricity and VMware: The Desktop On Demand

Quoting from IT Director:


VMware, as you probably know, provides a virtual machine capability on Intel hardware, making it possible to make far more efficient use of server resources than if you just deploying the vanilla operating systems (whether Windows or Linux). It allows for multiple virtual machines to be deployed on a single server, each of which is completely independent of the other. However the available resources of the server are managed collectively. VMware delivers a true On Demand capability.

What is perhaps less well known is that VMware can also provide an important service for desktop hardware. This is partly because its desktop capability is still evolving. The VMware desktop capability, VMware ACE, is currently in beta release. It provides a standard virtual hardware configuration for the desktop, including the OS, web browser and all the applications – all of which are distributed from a central point. VMware ACE solves a major desktop support problem by enforcing standardization and thus making local software installation of any kind unnecessary. It is not the resource utilization that is the issue here, but manageability.

However, on its own VMware ACE does not solve all the support issues. This is where Softricity’s SoftGrid plays a complementary role. In fact the role it plays is complementary enough for VMware and Softricity to be jointly marketing the capability.

SoftGrid is also a virtualization capability, but of a different kind. SoftGrid virtualizes each application, ensuring that there can be no conflicts between one application and another. Let me emphasize this, it is important: No application conflicts. As with VMware ACE, a single image is defined centrally and distributed to the desktop, so there is no need to install software locally. Each application is installed in a “virtual partition” which runs on the desktop for those users that are registered for the application. Each is configured and managed centrally and deployed “on demand” to authorized users.

Now because everything, the VMware ACE virtual machine and the SoftGrid application partitions, runs locally, none of the local services of the Windows desktop are lost. Everything from attached devices to “cut and paste” capability is still available, and the desktop functionality is much the same as if neither VMware nor SoftGrid were operating.

So what does this deliver, when you add it all up?

Well, it delivers a much-longed-for manageability to the desktop. In the area of security for example, it prevents anyone loading any rogue software. It is all managed centrally. SoftGrid all but removes the need for regression testing when upgrades to applications occur – all that needs to be tested is that the upgrade works within the SoftGrid application partition. The combination of the two products will inevitably reduce the number of calls to the Help Desk. It will enable a more rational purchasing policy for desktop hardware – because this arrangement makes it possible to implement a more rigourous purchasing policy.

It also makes desktop software licensing far easier to manage and control. It can be also be used to manage mobile computers and it can function over wide area networks so it can provide central management to the remotest of sites. Finally, it provides a level of disaster recovery for the desktop, in the sense that, as long as adequate disaster recovery is provided for the central VMware and SoftGrid servers, they can deploy a user’s applications to any adequately configured PC anywhere.

So what is the impact on the user? As it happens, he impact is minimal. The way that SoftGrid works is that it does not install the whole application on the desktop but only the necessary parts of it, which usually amount to 20-40% of the code. For PCs that work in disconnected mode, the whole application including all the configuration details, is cached locally, but synchronized when connected. So, local operation is not prevented. VMware ACE provides a similar capability for the OS.

It is high time that the expensive problems of managing desktop (and laptop) computing were brought under control. The cost of desktop support and management varies with the complexity of the user base and how well it is already automated. In poorly automated environments, the annual cost can be ten times the one-time cost of the PC and its software. Even in well managed environments, it is usually thousands of dollars per desktop per year. The combination of VMware and SoftGrid will undoubtedly cut these costs significantly. Organizations that are struggling to hold down the costs of desktop management should take a look.

Server consolidation and migration with VSMT

Microsoft released a whitepaper about P2V migration with Virtual Server Migration Toolkit (VSMT):


IT departments attempting to consolidate servers by using virtual machine technologies face a challenge when applications and operating systems do not readily migrate to a virtual machine environment. Manually reinstalling software in a virtual machine is both inefficient and costly. Frequently, this isn’t even an option as installation disks are misplaced and product keys are lost.

Microsoft Virtual Server Migration Toolkit (VSMT) is designed to help solve problems associated with migrating to Virtual Server 2005 by creating a reliable and repeatable process for migrating an operating system and installed applications from a physical server to a virtual machine.

Running Domain Controllers in Virtual Server 2005

Microsoft released a new whitepaper about its new virtualization platform:


Virtual Server is a Microsoft Windows®–based server application that is optimized to provide virtualization of Windows Server operating systems concurrently on a single physical server. In combination with the Windows Server 2003 operating system, Virtual Server provides a platform for implementing domain controllers in virtual machines. With this platform, you can install multiple Windows Server 2003 or Windows 2000 Server domain controllers in separate virtual machines on a single physical server. In this way, you can host multiple domains, multiple domain controllers for the same domain, or even multiple forests on one physical server that is running a single operating system.

Running domain controllers in virtual machines is best suited for test and pre-production piloting environments. With strict adherence to the requirements described in this document, domain controllers running in virtual machines can also be used in a production environment.

Running Microsoft Virtual Server 2005 on Windows XP

Quoting from Bink.nu:

Jeff Alexander suggested few tips to install and use VS 2005 on XP:

Technically Virtual Server 2005 is not supported on Windows XP but it will happily coexist with Virtual PC 2004 on the same machine which is great if you need to test scenarios and don’t have a server machine at your disposal. For me it means I can do all my demo’s on my Toshiba tablet. Sweet! I want to thank a colleague of mine in the UK, John Howard (no not the Aussie PM). John is an ITE like me in our UK sub and he has a blog as well. I’ve put the link on my homepage. Check it out as he has a lot of good stuff up there.

So what do you have to do to run both these products on XP. Well you have to install IIS of course and if you don’t secure IIS with the IIS lockdown tool then all will be fine. However once you run this tool you will get a ‘404 server not found error. To fix this you have to modify the urlscan.ini file to allow .EXE’S to be served by IIS. So do the following:

Navigate to \windows\system32\inetsrv\urlscan and open urlscan.ini
Find this section:
; Deny executables that could run on the server

.exe

.bat
.cmd
.com
.dll

Remove or remark the .EXE part and restart the IIS admin server and hey presto the Virtual Server 2005 Admin page will work fine now.

FreeBSD on Bochs

This article is a description of my efforts to build a minimal FreeBSD system from scratch and run it under the Bochs emulator. Inspired by “FreeBSD From Scratch” by Jens Schweikhardt, this article extends its ideas by using a file backed virtual disk, as the installation directory and harddisk image under Bochs.

Read whole article here.

Computer Associates prepares to widely support VMware

Computer Associates is actually working on its Unicenter Network and Systems Management (NSM) and 3.0 beta program is running. Related to this another beta program is running: Unicenter NSM Advanced System Management Option, which introduces a wide support to VMware technology:


High availability and reliability are keen issues facing today’s “always-on” IT operations centers. Unicenter supports a number of ways to enhance reliability, including management of your virtualization or clustering environments that support mission critical business applications.

The IT industry continues to seek ways to use the newest in technology (processors, storage, memory, communications, and software) to improve the application environment by increasing performance; optimizing processor utilization through workload management, scalability, and reliability; increasing organizational efficiency by reducing costs of hardware, software, and staff; and reducing both the number and the impact of system outages regardless of the underlying reason. That’s where Unicenter® Network and Systems Management Advanced System Management Option (ASMO) comes in with real-time analysis of the virtualization environment, and dynamic allocation and de-allocation of over or under utilized resources

Unicenter NSM Advanced Systems Management Option leverages the intelligence in Unicenter NSM and Agent technology to create a centralized, uniform infrastructure that allows you to discover and manage clusters, dynamically reconfigure resources, and discover and manage virtual machines.
The three business process views (CMO, DRO, VMO) created by Unicenter NSM Advanced Systems Management Option provide a fast, easy, and intuitive way of locating and organizing all of your clusters, resources, and virtual machines and their associated virtual machine instances. You can also get detailed views using the Unicenter Explorer or Unicenter 2D Map.

You can view and manage your environment from the Unicenter NSM System Command Center (SCC), and use role-based management to add users and assign rule-based roles to those users–role based management can be tailored to a user’s specific function. From the System Command Center (SCC), you can:

   Distributed Workload Management: Manage your Microsoft and Linux clusters in an end-to-end eManagement environment-this includes discovery, visualization, health monitoring, active management, availability, performance monitoring, integration with third party cluster tools, and event management.

   Distributed Resource Management: Dynamically reconfigure resources using Sun’s Dynamic Reconfiguration technology running on:
      SUN’s Sun Fire and Starcat line of processors
      VMware’s virtual machine environments for Linux or Windows
      IBM’s LPAR environment for the pSeries systems

   This reconfiguration of resources includes discovery of all of the elements in the infrastructures to make them available for management from the Unicenter NSM World View and provides real-time resource analysis which allows the DR Option engine to continuously balance utilization by allocating or de-allocating resources.

   Virtual Machine Discovery Automatically discover VMware (GSX or ESX) and Microsoft Servers, including correct topology that shows the hosts and all of the virtual machine instances and provides real-time visual queues to the health and status of these machines. This management on demand capability includes:
      Provisioning across physical servers
      Root cause linkage (correlation of hierarchical events between virtual and physical layers)
      Performance gathering for the virtual environment that will be fed to Systems Performance option and SLM for service level monitoring

Now the strange thing: CA talks about Distributed Resource Management for VMware virtual machines using Sun’s Dynamic Reconfiguration technology… But DR it’s a Solaris OS feature as I can read on an official SUN whitepaper:


Dynamic Reconfiguration (DR) is a software mechanism that allows resources to beattached (logically added) or detached (logically removed) from the Solaris operating environment control without incurring any system downtime.

Do I start to think VMware is going to use SUN Solaris as hostOS or what…?