srp_sys.1m (2011 09)

SRP_SYS(1M) SRP_SYS(1M)
NAME
srp_sys - Manages system level configuration settings for HP-UX Containers.
SYNOPSIS
srp_sys [-s[etup]]
srp_sys [-e[nable]] [-d[isable]] [subsystems[,...]] [variable=value [...]]
srp_sys [-l[ist]] [subsystems[,...]] [-v[erbose]]
srp_sys [-h[elp]]
DESCRIPTION
The srp_sys command manages system wide configuration utilized by HP-UX Containers. You must run
the srp_sys command before you initially run the srp(1M) command.
OPTIONS
-s, -setup
Performs interactive system level configuration and verification for HP-UX Containers.
The -s option performs the following actions:
- Verifies and lists current status as described in the -l option.
- Interactively enables/disables all subsystems as described in the -e d options.
-e[nable] d[isable] [subsystem[,...]] [variable=<value [...]>
Runs srp_sys in batch mode.
The -enable option performs the necessary configuration and enablement actions for the specified
subsystems(s). If no subsystem is specified, a default set of HP-UX subsystems is enabled (coreset,
cmptlogin, prm, and sshd).
The -disable option performs the necessary de-configuration and disablement actions for the
specified subsystem(s). If no subsystem is specified, all enabled HP-UX subsystems are disabled.
Allowed subsystems are:
- coreset: required set of subsystems and kernel tunable settings for HP-UX Containers.
- cmptlogin: Compartment login service for workload containers.
WARNING: By enabling this feature, only root user and users listed in srpgrp group (in
/etc/group) are allowed to login to the global view.
- prm: Process Resource Manager for
CPU and memory allocation.
Additional variable to enable this operation: prmsubsys=CPU[,MEM]
- ipfilter: IPFilter Host firewall.
WARNING: By enabling this service, inbound networking traffic is blocked for all containers and
must be enabled on a per container basis with the srp(1M) command.
- ipsec:
IP network security feature.
- sshd: Configures listening addresses for the global view Secure Shell daemon.
Additional variable to enable this operation: sshdlistenip=ip[,...]
-l, -list [subsystem[,...]] [-v[erbose]]
Displays the state of the subsystems configured for SRP, as follows:
-
OK: The subsystem is installed, enabled and configuration has been validated.
- Unverified: The subsystem is installed, enabled, but the configuration has been customized in a
way that prevents validation.
- Invalid Config: The subsystem is installed and enabled but has failed the configuration valida-
tion check, or is configured with an invalid option for the HP-UX Containers environment.
- Not Enabled: The subsystem is installed, but has not been enabled.
- Not Installed: The subsystem software is not installed.
HP-UX 11i Version 3: September 2011 − 1 − Hewlett-Packard Company 1