solaris.pro / Field manuals / Zones

Kernel Zones: isolation and lifecycle

Compare Kernel Zones with native Zones and LDoms

Scope: Oracle Solaris 11.4 and, for LDoms, compatible SPARC hardware with Oracle VM Server for SPARC. Examples are educational: verify release, privileges, target names and backups before running changes.

How it works

Separate kernel

Kernel Zones run their own kernel, giving a different isolation and compatibility model than native Zones.

Platform support

Confirm host and guest release support and resource requirements.

Operational fit

Kernel Zones can provide stronger isolation while remaining inside a Solaris host, but they have their own lifecycle and networking constraints.

Worked examples

Each example explains the question it answers, a reproducible starting point, what to look for, and operational precautions.

1. List zones

Use this as a starting point for list zones.

zoneadm list -cv

Interpretation: Check command output against the expected host configuration; record the before/after state.

Operational note: Run commands in a test environment first; confirm device names, privileges and release-specific options.

2. Inspect configuration

Use this as a starting point for inspect configuration.

zonecfg -z kz01 info

Interpretation: Check command output against the expected host configuration; record the before/after state.

Operational note: Run commands in a test environment first; confirm device names, privileges and release-specific options.

3. Review host virtualization

Use this as a starting point for review host virtualization.

virtinfo -a

Interpretation: Check command output against the expected host configuration; record the before/after state.

Operational note: Run commands in a test environment first; confirm device names, privileges and release-specific options.

4. Inspect zone state

Use this as a starting point for inspect zone state.

zoneadm -z kz01 list -v

Interpretation: Check command output against the expected host configuration; record the before/after state.

Operational note: Run commands in a test environment first; confirm device names, privileges and release-specific options.

Primary documentation

Read the relevant Oracle documentation for exact version-specific flags, supported platforms and limitations: Oracle primary reference ↗.

This field manual is independent, not affiliated with or endorsed by Oracle. Command examples should be adapted to your environment.