These commands are subject to the following set of rules to ensure the isolation of tenants within the Urika-GX
multi tenant environment.
●
The
lfs
command may not be used in its interactive mode, normally reached by invoking
lfs
without any
sub-commands.
●
Pathnames provided as arguments to
lfs
sub-commands:
○
are always treated as relative to the current working directory in which the
lfs
command is run.
○
may not contain elements that reference a parent directory, i.e., pathnames may not contain
/../
.
○
may not be absolute, i.e., pathnames may not begin with the
/
character.
○
may not contain elements that are symbolic links.
For more information on tenancy rules, execute:
# lfs help tenant-rules
Execute the following for additional help information, replacing
sub-command-name
with the name of the actual
sub-command:
# help
sub-command-name
The system will return the following error if a user attempts to view help information for an unsupported sub-
command:
The
sub-command
command is either unknown or not supported for tenant users. For
more information on tenant user rules try 'lfs help tenant-rules'.
7.5.6
Get Started with Tenant Management
Prerequisites
●
This procedure requires root privileges on the SMW.
●
Before a tenant can be created, as described in this procedure, it is important to set up the
br1
interface. For
more information, refer to
on page 185.
About this task
Urika-GX features a number of CLI commands that can be used to manage tenant VMs and users. These
commands need to be executed as root from the SMW and are depicted in the following figure:
Security
S3016
199
