Friday Apr 24, 2009

Overview

There is ever-increasing demand on Web url hosting. Normally, IDC, stricktly speaking hosting site, will host dozens of  website on one single hardware with help of apache Virtual host or Tomcat Virtual Domain.  Actually, There are few limits of this implementation:

user can't totally control the Apache environment.

Apache as a single web application , works as an single failsure.

people are sharing the same database

With the coming of Brandz on OpenSolaris, each user on the machine has independent environment for himself. you may telnet to you own "machine", log into your favor of Linux/OpenSolaris.

BrandZ is a framework that extends the Solaris Zones infrastructure to create Branded Zones, which are zones that contain non-native operating environments. The term "non-native" is intentionally vague, as the infrastructure allows for the creation of a wide range of operating environments.

Each operating environment is provided by a brand that plugs into the BrandZ framework. A brand may be as simple as an environment with the standard Solaris utilities replaced by their GNU equivalents, or as complex as a complete Linux userspace.

BrandZ extends the Zones infrastructure in user space:

  • A brand is an attribute of a zone, set at zone create time
  • Each brand provides its own installation routine, which allows us to install an arbitrary collection of software in the branded zone.
  • Each brand may provide pre/post-boot scripts that allows us to do any final boot-time setup or configuration.
  • The zoneadm and zonecfg tools can set and report a zone's brand type.

BrandZ provides a set of interposition points in the kernel:

  • These points are found in the syscall path, process loading path, thread creation path, etc.
  • At each of these points, a brand may choose to supplement or replace the standard Solaris behavior.
  • These interposition points are only applied to processes in a branded zone
  • Fundamentally different brands may require new interposition points

Monday Jan 19, 2009

Windows Hook和Dtrace有什么区别?起先我并不了解Hook,查阅了一些资料之后,总结如下:

1、在性能上:
Hook会严重影响系统性能,然而Dtrace基本上不会对系统性能有任何影响。

2、安全性:
Hook过多的干预到了系统内部,它可以对钩到的参数和消息进行监视、修改和控制,这样就造成了对系统安全的严重威胁。目前很多木马程序和病毒都是采用钩子来对系统进行攻击的。
Dtrace只是在系统内核中植入探针,通过激活探针来对系统状态进行查看,在Kernel和应用之间起到一个观察作用。它并没有权限去修改任何东西,换句话说,Dtrace的探针只是像一个摄像头一样只负责监控。

3、应用范围:
Hook目前只是在Windows中提供,而且仅可以在Windows中使用。而且Windows Hook只能提供14种类型的Hook。
Dtrace却在Solaris系统内拥有9万多个探针。可以查看任何系统信息。而且Dtrace目前已经开始被多个操作系统和应用程序所应用,它们通过将Dtrace移植来实现对系统和应用的出错。

4、连续性:
Hook其实是一种中断,它通过设置一个断点来获取数据,然后再将数据发送到窗口。
Dtrace没有任何断点,它是完全实施监控,对系统和应用没有任何干预。

具体的关于Windows Hook的内容可以查看:
http://www.quping.com/blog/article.asp?id=123


文章来自: 学网(www.xue5.com) ,原文地址:http://www.xue5.com/itedu/200707/122498.html

Tuesday Aug 26, 2008

Solaris 10 on Sparc is slightly different with Solaris 10 on x86.

You can't change the resolution simply by right-click the desktop and make the modification.

 

the way basically is exce the following command:

 

fbconfig
m64config

depends on your graphic card and system architechture.

(use man for detail)

 

and restart the system

 


Friday Aug 15, 2008

solaris系统配置文件汇总

/etc/cron.d/cron.allow 

/etc/cron.d/cron.deny 用于对crontab进行访问控制. 

/etc/defaultdomain NIS域名设置文件 

/etc/default/cron 对cron的log进行控制. 

/etc/default/login 对root用户远程登陆许可进行设置。 

/etc./default/su SULOG及SYSLOG值可以控制su的日志,还有可以对其su后 

环境变量进行设置。 

/etc/dfs/dfstab NFS共享的配置文件 

/etc/dfs/sharetab 

/etc/group 用户组配置文件。 

/etc/hostname.interface 网络接口名称文件,其IP在/etc/inet/hosts文件中设置。 

/etc/hosts.allow 

/etc/hosts.deny 主机远程访问控制文件。 



/etc/hosts.equiv r系列命令访问控制文件。 

/etc/inittab init启动进程所需要的脚本文件,用于控制不同的启动级别。 

/etc/logindevperm ttymon的配置文件主要用来控制设备的访问权限。 

/etc/magic file命令所显示的文件类型数据库 

/etc/mail/aliases 

/etc/aliases sendmail的邮件别名文件 



/etc/mail/sendmail.cf 

/etc/sendmail.cf sendmail的控制文件 

/etc/minor_perm 使用drvconfig命令所许可的设备。 

/etc/mnttab 当前系统中已mount的所有资源 

/etc/name_to_major 当前配置的主设备号,被用于drvconfig命令 

/etc/netconfig 网络配置数据库,用于网络初始化。 

/etc/netgroup 定义主机和用户组。 

/etc/netmasks 定义默认子网掩码。 

/etc/nsswitch.conf 域名查找顺序配置文件。 

/etc/path_to_inst 用于配置物理设备树、物理设备名和实例名文件。 

/etc/protocols 协议配置文件 

/etc/remote tip命令的属性文件。 

/etc/rmtab 当前已mount的远程文件系统文件列表。 

/etc/services 网络端口号列表文件。 

/etc/syslog.conf syslogd 配置文件。 

/etc/system 内核配置文件。 

/etc/vfstab 关于本地及远程文件系统自动mount列表。 

/var/adm/messages 主日志记录文件。 

/var/adm/sulog 默认的su命令记录文件。 

/var/adm/utmpx 用户和账号信息文件。 

/var/adm/wtmpx 用户登陆的账号信息文件。 



/var/local/etc/ftpaccess 

/var/local/etc/ftpconversions 

/var/local/etc/ftpusers wu-ftpd 的配置文件。 

/var/lp/log 打印服务日志文件。 

/var/sadm/install/contents 软件包安装数据库文件 

/var/saf/_log SAF的日志文件

Thursday Aug 14, 2008

First of all, you will need the Solaris Media (CD) and a CD-ROM drive attached to the machine. If you do not know what version of solaris you are running, login into the server as a normal user and type: uname -a
which should return something like the following:
SunOS yourmachinename 5.8 Generic_103640-08 sun4u sparc SUNW,Ultra-1
This means your server is running Solaris 8 (also call SunOS 5.8)

Next we need to find out where the root partition is mounted, login into the server as a normal user and type: df -k /

Filesystem kbytes used avail capacity Mounted on
/dev/dsk/c0t0d0s0 241543 195738 21651 91% /

In this case, the root partition is mounted on /dev/dsk/c0t0d0s0. Write this down somewhere.

Insert the correct Solaris media in the CD-ROM drive

To shutdown the server, type: Stop-A

At the ok prompt, type: boot cdrom -s

Wait for the system to finish rebooting. You will be brought to the root shell in single-user mode.

From the command prompt, type the following to mount the root file system: mount [root-device] /mnt
where the root-device is the device name you wrote down above, for example: mount /dev/dsk/c0t0d0s0 /mnt

Edit the file /mnt/etc/shadow, when you open the file, the first line in the shadow file should look like this: root:0iIrCerpgZebQ:9783::::::
The second field (between the first and second colon) contains the encrypted root password. Remove it. In this case, the file should look like: root::9783::::::
After making your change, save the file

Reboot the system sync;sync;sync;reboot
You should now be able to login into the system without a password for root. The first thing you should do is set a new password for the root user and write it down.


In addition,

IA32 system:
1) At boot, prompt type
b –s : To boot system into single mode
b –a : To boot system step-by-step i.e. interactively.

SPARC System:
1) At Ok, prompt type:
boot –s : To boot system into single mode
boot –a : To boot system step-by-step i.e. interactively

Thursday Jun 26, 2008

I'm very happy you are here which at least proves that you may be interested in the JVM topic.

Actually, JVM is a so wide topic(including several JSRs and evolve monthly) that we can't explain it by simply review these ppt here.

My intention is merely "giving the friends  something to induce him/her to share more valuable things". A Ha

Down load from here

Class file

JVM overview

This blog copyright 2009 by Ding-Ze Hironics Zhu