Periodic scrubs of ZFS filesystems

It was and is always a best practice to do regular scrubs of your ZFS filesystems in order to ensure that all checksums … well … check out to ensure...

Memory Reservation Pools in Oracle Solaris 11.4 SRU1

There is a rare sitation that prohibits you to boot or reboot a Kernel Zone. In order to happen, you need to have a massively loaded system and a lot...

Filesystem latencies with fsstat.

After my blog entry about showing latencies at disk level, I want to highlight another tool that is now able to display latencies, just somewhat up the layers (or layer,...

Latency distribution with iostat

Sometimes a new feature is not about something that wasn’t possible before, but about making data already available more accessible. Like that information you gathered so far with Dtrace and...

Database performance overview for Solaris 11.4 SRU6

You may already know the System Web Interface that Oracle introduced with Solaris 11.4. It’s a graphical interface to performance data on a system. In SRU6 a really cool sheet...

LKSF: Audit Annotations

For several major releases Solaris has a really extensive auditing subsystem. I wrote about it many years ago (11 years to be exact) in Less known Solaris features: Auditing. The...

802.1x authentication in Solaris 11.4 beta

In Solaris 11.4 beta there is finally 802.1x authentication for wired network connections. While the man page describes, how you setup 802.1x with EAP-TLS with Solaris 11.4 beta, there is...

Remote security assessments in Solaris 11.4 beta

There is a framework to check your system against security rulesets in Solaris 11 for quite some time now. It’s really useful: You can define your own rulesets, but more...

pam_fm_notify

While many Solaris admins are aware of the Fault Management Architecture inside of Solaris, it’s often not a natural habit to them to look at the output of fmlist just...

RADIUS authentication in Oracle Solaris 11.4 Beta

In the first refresh of the Oracle Solaris 11.4 beta we got support for RADIUS in the PAM framework. So you can now use RADIUS for authentication purposes without the...

Presentation of the Oracle Solaris 11.4 Beta Business Breakfast

A while ago i’ve held a number of presentations about Solaris 11.4 beta. Since that time i’ve got some questions where you can get the slide. They are available for...

How I learned to stop worrying and love being a passenger ...

I will have flown the 500th time soon. I will have half a million kilometers in aircrafts under my belt if you calculate it just with the great circle distance....

Event Announcement: Oracle Business Breakfast about Oracle Solaris 11.4

As the event is in german language, the following announcement is in german language as well. Sorry!. Oracle Solaris 11.4 beta wurde soeben veröffentlicht. Nun möchte ich natürlich auch die...

Conntecting a Technische Alternative UVR1611 to InfluxDB and MQTT

My home has a heating control with an Ethernet port. Or to be exact: It has an heating control with a bus where it’s possible to connect a gateway with...

Dumping kstat into InfluxDB

A while ago I wrote on Facebook that I started InfluxDB and Grafana for analyzing my heating control system. I facepalmed about the point that I didn’t used it before...

LKSF: Getting kernel statistics

Whenever i’m at a customer for a performance analysis gig, the customer ask me when i will start the Dtrace magic that many people expect when you tell them you...

The Z Garbage Collector

Just found an interesting read via the LinkedIn page of Bernard Traversat. He was pointing to a CFV for a new project called ZGC.<blockquote>In accordance with the OpenJDK guidelines [1],...

LKSF: Protecting files from accidental deletion with ZFS

I thought i know a lot about Solaris, however today i found out about a feature that is in Solaris i never heard of. It was on an internal discussion...

Auditing a single SMF service - revisted

A few days ago, i wrote an article about how you can set auditflags for processes by smf services. The scripts were really just proof-of-concept one and using them involved...

Hashed

To set a password directly to an hash i used gsed so far for a long long time. But you never stop to learn. There is a much simpler way....