HOWTO:Oracle Sun Solaris 11 + iSCSI initiator Quick Setup Guide

Oracle Sun Solaris 11 Quick Setup Guide

ORACLE SOLARIS 11 IMAGE PACKAGING SYSTEM (IPS) SETUP
Download Oracle Sun Solaris repository image from Oracle website below:
http://www.oracle.com/technetwork/server-storage/solaris11/downloads/index.html

Merge two downloaded files into 1 ISO image

user@hostname:~$ cat sol-11_1-repo-full.iso-a sol-11_1-repo-full.iso-b > sol-11_1-repo-full.iso

Then burn to a DVD-DL disc 8GB and up capacity.

Login to Oracle Sun Solaris 11 using user created during the installation switch user and assume 'root' privilege issue 'sudo bash' and input user password

user@hostname:~$ sudo bash
Password:

user@hostname:~#

Insert the DVD disc containing the Oracle Sun Solaris repository package
Note: no need to mount the DVD it will be mounted automatically

check if already mounted, issue 'mount' command

user@hostname:~# mount

you will see output look like this '/media/SOL_11_1_REPO_FULL/repo/'

Now the DVD is mounted

NOTE: to manually mount DVD issue command like this 'mount -o ro -F hsfs /dev/dvd /mnt/

SETUP AND CONFIGURE IPS REPOSITORY

Check the existing configuration of IPS repository publisher settings

user@hostname:~# pkg publisher

Output:
PUBLISHER        TYPE    STATUS    P LOCATION
solaris            origin  online  F http://pkg.oracle.com/solaris/release

Reconfigure to point the 'LOCATION' to our Local copy of packages in DVD

user@hostname:~# pkg set-publisher -G '*' -g file:///media/SOL_11_1_REPO_FULL/repo solaris

verify the repository 'LOCATION', it should be pointing to 'file:///media/SOL_11_1_REPO_FULL/repo' and 'STATUS' should be online

INSTALLING ORACLE SUN SOLARIS GUI DESKTOP

Issue the command below to start the GUI Desktop installation

user@hostname:~# pkg install slim_install

NOTE: it will take a while updating and caching the installer.

After the installation, run this command

user@hostname:~# svcadm enable gdm

And reboot the Oracle Sun Solaris server, will prompt it with Graphical login

user@hostname:~# reboot

REF:
https://blogs.oracle.com/stw/entry/getting_gdm_to_work_on
http://turingsman.net/index.php/my-blog-list/149-part-3-installing-gnome-for-oracle-solaris-11-1-x86-64-bit

CONFIGURING ORACLE SOLARIS NETWORK

REF: http://www.oracle.com/technetwork/articles/servers-storage-admin/s11-network-config-1632927.html
http://www.c0t0d0s0.org/archives/7439-Cheatsheet-for-configuring-the-networking-in-Solaris-11.html

CONFIGURING ISCSI INITIATOR

Check if initiator is installed
user@hostname:~# pgk list \*scsi\*

NAME (PUBLISHER)                                  VERSION                    IFO
system/io/fc/fc-scsi                              0.5.11-0.175.1.0.0.24.2    i--
system/library/storage/scsi-plugins               0.5.11-0.175.1.0.0.24.2    i--
system/storage/iscsi/iscsi-initiator              0.5.11-0.175.1.0.0.24.2    i--    system/storage/iscsi/iscsi-iser                   0.5.11-0.175.1.0.0.24.2    i--

Configure static
iscsiadm add static-config <IQN name>.<year-month>.<reverse dns name>.<name authority>,<IP>

user@hostname:~# iscsiadm add static-config iqn.2013-01.com.example:01.12ff26bee9e,192.168.0.1

   Check the static list configuration
user@hostname:~# iscsiadm list static-config
 
You should see something like this(not exact value since this is an example)   

Static Configuration Target: iqn.2013-01.com.example:01.12ff26bee9e,192.168.0.1:3260

By default  discovery settings for ‘Static’ are disabled you won’t see any iscsi device at this moment
user@hostname:~# iscsiadm list discovery

    Discovery:
            Static: disabled
            Send Targets: disabled
            iSNS: disabled

   Enable static discovery
user@hostname:~# iscsiadm modify discovery --static enable

   Check discovery settings again, Static should be enabled
user@hostname:~# iscsiadm list discovery

    Discovery:
            Static: enabled
            Send Targets: disabled
            iSNS: disabled

   Check iscsi target
user@hostname:~# iscsiadm list target
   
   Output should be something like this:

    Target: iqn.2013-01.com.example:01.12ff26bee9e
            Alias: -
            TPGT: 1
            ISID: 4000002a0000
            Connections: 1

   Re initialize the /dev/ namespace
user@hostname:~# devfsadm -i iscsi

   Check the iscsi disk
user@hostname:~# format
Searching for disks...done

c9t2d0: configured with capacity of 974.00MB


AVAILABLE DISK SELECTIONS:
       0. c8t0d0 <VMware,-VMware Virtual S-1.0-20.00GB>
          /pci@0,0/pci15ad,1976@10/sd@0,0
       1. c9t2d0 <IET-VIRTUAL-DISK-0001 cyl 974 alt 2 hd 64 sec 32>
          /iscsi/disk@0000iqn.2012-10.com.example%3Asan1.target30001,12
Specify disk (enter its number): ^C


# This area is OPTIONAL if you want discovery settings to be enable
   Enable discovery and add ip address
user@hostname:~# iscsiadm add discovery-address 192.168.198.1

   Enable discovery sendtargets
user@hostname:~# iscsiadm modify discovery --sendtargets enable

   Check and verify the 'Static is enabled' and Send Targets is enabled'
user@hostname:~# iscsiadm list discovery

    Discovery:
            Static: enabled
            Send Targets: enabled
            iSNS: disabled

   Re initialize the /dev/ namespace
    devfsadm -i iscsi

   Check the iscsi disk
user@hostname:~# format
Searching for disks...done

c9t2d0: configured with capacity of 974.00MB


AVAILABLE DISK SELECTIONS:
       0. c8t0d0 <VMware,-VMware Virtual S-1.0-20.00GB>
          /pci@0,0/pci15ad,1976@10/sd@0,0
       1. c9t2d0 <IET-VIRTUAL-DISK-0001 cyl 974 alt 2 hd 64 sec 32>
          /iscsi/disk@0000iqn.2012-10.com.example%3Asan1.target30001,12
Specify disk (enter its number): ^C

WARNING: in format just press 'CTRL+C" to exit, do not input number of drive unless you are sure what drives to format

REF:  http://docs.oracle.com/cd/E26502_01/html/E29008/iscsi-4.html

RBAC- ROLES AND PROFILES

By default in Oracle Solaris 11, 'root' is not a user but rather a 'role' although we specify the 'root' password during setup/installation the system will not permit you to login as 'root' but rather an ordinary user. Sudo is used to assume the role of 'root' in command line and graphical interface.

You will encounter problem when you change the password of root, switching in graphical will ask you the 'root' password rather than your own password.

To restore 'root' as 'role' and root will be disable 'root' login

user@hostname:~# usermod -K type=role root
user@hostname:~# rolemod -K roleauth=user root
user@hostname:~# passwd -N root

REF:
http://docs.oracle.com/cd/E19963-01/html/820-7799/rolesandprofiles.html
http://www.oracle.com/technetwork/systems/hands-on-labs/s11-security-1408641.html
https://blogs.oracle.com/darren/entry/completely_disabling_root_logins_on