Workload partitions (WPARs)

In AIX 6.1 and AIX 7.1, workload partitions (WPARs) add an additional operating
systemsoftware-based layer for the virtualization of operating environments. Each WPAR
can hostapplications and isolate them from applications executing within other WPARs. This
capabilitycan be used on any server platform capable of running AIX6, including POWER4,
POWER5,POWER5+, POWER6, and POWER7.
WPARs are a bold new innovation, implemented within AIX 6.1. It allows administrators to
virtualize their operating system, which allows for fewer operating system images on your
IBM System p partitioned server. Prior to WPARs, you would need to create a new
Logical Partition (LPAR) for each new isolated environment. This is no longer necessary
(with AIX 6.1 only), as there are many circumstances when one can get along fine with
multiple WPARs within one LPAR. Why is this important? Every LPAR requires its own
operating system image and a certain number of physical resources. While you can virtualize
many of these resources, there are still some physical resources that must be allocated to the
system. Furthermore, you need to install patches and technology upgrades to each LPAR.
Each LPAR requires its own archiving strategy and DR strategy. It also takes some time to
create an LPAR; you also need to do this outside of AIX, through a Hardware Management
Console (HMC) or the Integrated Virtualization Manager (IVM).
There are two types of WPARs:
1.System WPARs
A system WPAR is similar to a typical AIX environment. Each System WPAR has dedicated
writable file systems, although it can share the global environment /usr and /opt file systems
in read only mode. When a system WPAR is started, an init process is created for this
WPAR, which in turns spawns other processes and daemons. For example, a system WPAR
contains an inetd daemon to allow complete networking capacity, making it possible to
remotely log in to a system WPAR. It also runs a cron daemon, so that execution of processes
can be
scheduled.
2.Application WPARs
If an application or group of applications can be started with one command of the AIX
command-line interface, it is a candidate to be hosted by an application WPAR. This
command is passed as an argument to the WPARexec command that will create an
application WPAR. As soon as the passed command exits, the workload partition is
terminated. An application partition shares the file system of the global environment. It does
not own any dedicated storage. An application partition can run daemons. But application
partitions will not run
any of the system service daemons, such as inetd, srcmstr, and so forth. It is not possible to
remotely log in to an application partition or remotely execute an action into an application
WPAR.
Comparing WPARs with LPARs:
WPAR (Workload Partitioning)

As noted earlier, you do not need access to the HMC or IVM to create WPARs as you do for
LPARs. WPARs are lightweight and quicker to install, because they share many of the file
systems and resources of the global AIX system in which they reside. While using an LPAR
requires you to install an entire operating system, creation of system WPARs only installs
private copies of a few file systems, and application WPARs share even more of the global
systems resources. As a result, a WPAR can be created in just a few minutes without
installation media. Ongoing administration and maintenance of WPARs should be simpler
fewer AIX licenses might be required, and you dont have to install fixes and updates on so
many virtual systems. There is a command for synchronizing the filesets of a WPAR with the
corresponding filesets on the global system, so you have the choice of propagating AIX fixes
to WPARs or continuing to run with the current versions of system files.
While LPARs offer a significantly higher degree of workload isolation, WPARs might
provide good enough isolation for your particular workloads, especially temporary ones
such as development or test environments. Similarly, with LPARs, you can achieve a greater
degree of control over the usage of resourcesby allocating entire processors or precise
fractions of processors to an LPAR, for example. With WPARs, you dont have such fine
control over resource allocations, but you can allocate target shares or percentages of CPU
utilization to a WPAR (if have used the AIX Workload Manager, you will find the share and
percentage resource allocation scheme familiar). Similar differences exist for the allocation of
memory, number of processes, and other resources.
Define a WPAR
Log in as root on your AIX 6 system, and run the following command: mkWPAR n
myWPAR
That is all you need to do to create a system WPAR whose name is myWPAR. After pressing
the Enter key, a long series of messages display on the console that look very similar to those
you see during a typical AIX installation. After a few minutes, a message displays, followed
by a command prompt indicating that the WPAR creation is complete. To verify that your
WPAR was created, run the following command to list all defined WPARs: lsWPAR
Listing 1 displays a table showing the WPAR named myWPAR that you just created. The D
in the State field means the WPAR is Defined; it exists, but it has not been started. It has a
type of S that is, its a system WPAR, because the mkWPAR command creates system
WPARs by default. Also by default, the hostname is the same as the WPAR name, and the
base directory for all the WPARs filesets is located at /WPARs/.
Listing 1. lsWPAR command output
# lsWPAR
Name State Type Hostname Directory
myWPAR D S myWPAR /WPARs/myWPAR
To start your new WPAR and log in, run the following command: startWPAR myWPAR
Running the lsWPAR command again indicates that state of the WPAR changed from D to A
(for Active).

You have not defined network information for this WPAR, so unless the name you picked for
your WPAR already resolves to a valid network address, you probably wont be able to do
any kind of network login yet. Since you are still on the system console, do a console login to
the new WPAR: clogin myWPAR
The AIX welcome message and command prompt displays. You have created, started, and
logged in to your first WPAR! Run the hostname command to confirm this.
From this point, you can run most AIX commands, define other users, and do most anything
you would do with a full AIX system.
Once you have logged into the WPAR, there is one important point to remember: From the
WPAR, you have no access to the global system or to any other WPAR. So some familiar
commands or SMIT menus will not work as they usually do, or they might be missing
altogether. For example, if you enter the hostname command, it returns the name of the
WPAR and not the hostname of the global AIX system. So for now, lets leave the WPAR,
and return to the global AIX environment by typing the exit command. Then to stop the
WPAR, just type:
stopWPAR myWPAR
Using SMIT to change WPAR properties
How about using SMIT to define an IP address for the new WPAR? Of course, you can also
do this using the command line, since SMIT is just a command processor. On the global AIX
command line, type smit to display the initial SMIT menu. Youll see a new menu choice,
Workload Partition Administration.
After selecting Workload Partition Administration, youll see three choices:
1. List All Workload Partitions
2. Administer SYSTEM Workload Partitions
3. Administer APPLICATION Workload Partitions
The first choice, List All Workload Partitions, executes the lsWPAR command to show all
defined WPARs on your system. Choose Administrator SYSTEM Workload Partitions to
work with the WPAR you defined earlier. This selection displays the following sub-menu:
List System Workload Partitions
Create a System Workload Partition or Specification File
Start / Stop / Reboot a System Workload Partition
System Workload Partition Software Maintenance
Change / Show System Workload Partition Characteristics
Remove a System Workload Partition
System Workload Partition Backup Manager
You do not need to create a WPAR, so select Change / Show System Workload Partition
Characteristics, which results in the following submenu:

Change / Show General Characteristics

Change / Show Network Interfaces
Change / Show File Systems
The first choice, Change / Show General Characteristics, displays an input panel that lets
you view or change the basic WPAR properties, such as the WPAR name, hostname, start
options, and more advanced settings, including resource controls and SECURITY
SETTINGS. You set out to work with network settings, so select Change / Show Network
Interfaces, which results in the following data entry fields: [Entry Fields]
* Workload Partition Name []
+ Network INTERFACE
+
* Internet ADDRESS (dotted decimal) []
Network MASK []
Type or select the WPAR name in the Workload Partition Name field.
In the Network INTERFACE field press F4 or Esc+4 to show the list of available network
interfaces. Select the one that you want to use, then enter a valid IP address and network
mask in the remaining fields
If you plan to define a bunch of WPARs, youll need to secure in advance a group of
available hostnames and IP addresses in your network.
After completing the panel for adding a network interface, you can start the WPAR, either by
using SMIT menus, or issuing the startWPAR command from the command line. After the
WPAR has started, you should be able to log in remotely using telnet. Dont forget to set a
root password and any other security measures that you normally take when setting up a new
AIX system. You might also want to add a line to the /etc/hosts file on the global system
containing the hostname and IP address of the new WPAR.
Now that you can log in to your new system WPAR, either from the system console or
remotely, you can do many of the things you would do with any new AIX system: create
users, create new file systems, or install software. Regarding software installation, you might
use NIM to perform network installs. Or, you can add a CD-ROM file system to the WPAR,
which enables you to use a CD-ROM attached to the physical server to install software on the
WPAR.
Creating and using application WPARs
Creating an application WPAR is similar to creating a system WPAR. However, instead of
the mkWPAR command, you use theWPARexec command, which not only creates the
WPAR, but it also starts the application inside it. As previously noted, an application WPAR
only exists so long as the application process is running. Once the process terminates, the
WPAR is stopped and cleaned up.
To create an (somewhat trivial) application WPAR named myWPAR that will sleep for 100
seconds, enter the command:
WPARexec n myappWPAR /usr/bin/sleep 100 &

After pressing Enter, several messages display indicating that the WPAR is starting and that
file systems are being mounted. If you type the lsWPAR command, the following displays:
# lsWPAR
Name State Type Hostname Directory
myappWPAR A A myappWPAR /
#
This information indicates that a WPAR named myappWPAR exists, that it is in an active
state, and that it is an Application WPAR. After 100 seconds, a message displays that the
system is shutting down all WPAR processes. Enter lsWPAR again to verify that the WPAR
no longer exists.
WPAR Manager
IBM Workload Partitions Manager for AIX (WPAR Manager) is a platform management
solution that provides a centralized point of control for managing workload partitions across a
collection of managed systems running AIX 6.1. The managed systems might all be LPARs
on a single physical server, or they might be located on multiple physical servers. Using
WPAR Manager, you can monitor the health and status of multiple WPARs on multiple
managed AIX systems. You can also perform all the basic WPAR life cycle operations
including create, view and manage properties, start, stop, and delete.
WPAR Manager also supports relocation of WPARs between systems in a collection of
managed servers. WPAR Manager supports two kinds of relocation:
Manual relocationThis type of relocation is initiated by the user.
Policy-based relocationThis type of relocation is initiated by WPAR Manager in response
to workload conditions defined in a relocation policy.
WPAR Manager is not part of AIXits a separately purchased licensed program (Program
number 5756-WPM). But, if you are working with an AIX 6 image that you downloaded
during the Open Beta program, you might have the early version of WPAR Manager that was
shipped with the beta. This article only touches on the main capabilities of WPAR Manager.
A later article will present a more detailed description of how it works and how to use it.
Starting a WPAR & Logging WPAR:
Starting a WPAR. This could not be simpler:
At the command line type startWPAR wp13
At the WPAR Manager, select the WPAR in the defined state then Actions and start
Starting a WPAR takes only a few seconds
Logging into a WPAR
cloginWPAR_NAME
From the global area
WARNING any process started from a clogin will NOT survive a checkpoint and restart. This

is regardless of any attempts to disconnect the processes created from the terminal session
like UNIX daemon processes try to do.
Recommend only ever use clogin to repair a broken network otherwise you risk forgetting
and your important services halting on you first Relocate. Been there it was mystifying,
painful and wasted half a day.
See the example below:
telnet
Just as you would access a regular copy of AIX you ca
Personally, I use the excellent and freely available tool called PuTTY from my Windows XP
based PC. Most of the screen captures here are taken from PuTTY. VNC
Again just like a regular copy of AIX, VNC can be installed and used to gain graphical X
Windows access to your machine.
I have not tried it personally, but I assume SSL and ssh will work fine too once set up.
WPAR views of the filesystems
# df m
Here you can see the WPAR can only list the filesystems that it has this is good for
security. We can also see that the private filesystems (/, /home, /var and /tmp) are read/write
but the file systems shared from the global AIX are read-only. This makes it very simple to
make a tool or command available to all WPARs on the system i.e. put the file in the global
filesystem that is shared like /usr/local/bin and it becomes available to all WPARs.
WPAR view of the network
# ifconfig -a
en0: flags=5e080863,c0
inet xxx.xxx.xxx.xxx netmask 0xffffff00 broadcast xxx.xxx.xxx.xxx
tcp_sendspace 131072 tcp_recvspace 65536
lo0: flags=e08084b
inet 127.0.0.1 netmask 0xff000000 broadcast 127.255.255.255
inet6 ::1/0
tcp_sendspace 131072 tcp_recvspace 131072 rfc1323 1
Here you can see the the WPAR is only aware of this network connection and so it cant get
access to the global network or the network of other WPAR. This is good for security.
Compare global and WPAR view of disks and paging space
lsps -a command can be executed from root as well as WPAR to get information of paging
space of global paging space & WPAR global paging space.
Here we see that the global AIX as real disks and paging space but the WPAR has neither.
This can confuse some tools how can a system run with no disks??? Well the WPAR does
have filesystems but no direct access to the disks this means a WPAR systems
administrator cant create logical volumes nor filesystems. this is a two edged sword

The disk management must be done at the global AIX level and then a new filesystem added
to a WPAR = OK we can live with that as the global AIX is in charge of real resources.
This stops WPAR system administrators from messing up the machine configuration.
From Global view
we can run
#topas to see global performance .
#topas -@ WPAR_NAME
Console login to WPAR:
par47p682e_pub[/] > lsWPAR
Name State Type Hostname Directory
MyTestWPAR1 A S MyTestWPAR1 /WPARs/MyTestWPAR1
MyTestWPAR2 A S MyTestWPAR2 /WPARs/MyTestWPAR2
TestWPAR3 A S TestWPAR3 /WPARs/TestWPAR4
LPAR47p682e_pub[/] > clogin MyTestWPAR4
***************************************************************************
****
**
**
* Welcome to AIX Version 6.1! *
**
**
* Please see the README file in /usr/lpp/bos for information pertinent to *
* this release of the AIX Operating System. *
**
**
***************************************************************************
****
#
You can also connect to WPAR via ssh. It will have its own user id for authentication.
lsvg, lspv commands wont work as all filesystem alocated to WPAR has been created in AIX
6. global environment.
# df -k
Filesystem 1024-blocks Free %Used Iused %Iused Mounted on
/dev/fslv12 131072 104404 21% 2109 9% /
/dev/fslv13 131072 128640 2% 7 1% /home
/opt 262144 119808 55% 3048 11% /opt
/proc - - /proc
/dev/fslv14 131072 128424 3% 9 1% /tmp
/usr 3538944 158320 96% 91414 69% /usr
/dev/fslv15 131072 116816 11% 372 2% /var

To do changes in above mentioned file system . We need to do in global environment. Not

frow WPAR. All system adminstartion task of increasing , decreasing, adding, deleting File
system are to be done from AIX global environment
Starting & Stopping WPAR Command Output:
NOTE :- All IP shown in the command has been altered as displaying IP on net is invitation
to problem.
To reboot test WPAR 2 command is
/usr/bin/stopWPAR -r MyTestWPAR2 Flag r stands for reboot.
output
Stopping workload partition MyTestWPAR2
stopWPAR: 0960-261 Waiting up to 600 seconds for workload partition to halt.
Stopping workload partition MyTestWPAR2.
Stopping workload partition subsystem cor_MyTestWPAR2.
0513-044 The cor_MyTestWPAR2 Subsystem was requested to stop.
stopWPAR: 0960-261 Waiting up to 600 seconds for workload partition to halt.
Shutting down all workload partition processes.
Unmounting all workload partition file systems.
Starting workload partition MyTestWPAR2.
Mounting all workload partition file systems.
Loading workload partition.
Exporting workload partition devices.
Starting workload partition subsystem cor_MyTestWPAR2.
0513-059 The cor_MyTestWPAR2 Subsystem has been started. Subsystem PID is 696392.
Verifying workload partition startup.
To stop WPAR MyTestWPAR2
/usr/sbin/stopWPAR MyTestWPAR2
output
Stopping workload partition MyTestWPAR2.
stopWPAR: 0960-261 Waiting up to 600 seconds for workload partition to halt.
Stopping workload partition MyTestWPAR2.
Stopping workload partition subsystem cor_MyTestWPAR2.
0513-044 The cor_MyTestWPAR2 Subsystem was requested to stop.
stopWPAR: 0960-261 Waiting up to 600 seconds for workload partition to halt.
Shutting down all workload partition processes.
Unmounting all workload partition file systems.
All file systems related to testWPAR 2 will be unmounted.

LPAR47p682e_pub[/] > df -g
Filesystem GB blocks Free %Used Iused %Iused Mounted on
/dev/hd4 0.12 0.02 87% 8105 63% /
/dev/hd2 3.38 0.15 96% 91414 69% /usr
/dev/hd9var 0.25 0.24 6% 477 1% /var
/dev/hd3 0.25 0.25 1% 53 1% /tmp
/dev/hd1 0.12 0.12 1% 8 1% /home
/dev/hd11admin 0.12 0.12 1% 5 1% /admin
/proc - - /proc
/dev/hd10opt 0.25 0.11 55% 3048 11% /opt
p650:/stage/middleware 73.94 13.38 82% 37383 2% /stage/middleware
192.168.1.12:/userdata/20005533 10.00 9.92 1% 19 1% /home/u0005533
/dev/fslv00 0.12 0.10 21% 2106 9% /WPARs/MyTestWPAR1
/dev/fslv01 0.12 0.12 2% 5 1% /WPARs/MyTestWPAR1/home
/dev/fslv02 0.25 0.11 56% 3048 11% /WPARs/MyTestWPAR1/opt
/proc - - /WPARs/MyTestWPAR1/proc
/dev/fslv03 0.12 0.12 3% 13 1% /WPARs/MyTestWPAR1/tmp
/dev/fslv04 3.38 0.14 96% 91483 71% /WPARs/MyTestWPAR1/usr
/dev/fslv05 0.12 0.11 10% 371 2% /WPARs/MyTestWPAR1/var
LPAR47p682e_pub[/] >
We will not able to ping that TestWPAR 172.29.138.23
LPAR47p682e_pub[/] > ping 172.29.138.23
PING 172.29.138.23: (172.29.138.23): 56 data bytes
Alias IP 172.29.138.23 will be removed from en0 network adapter.
LPAR47p682e_pub[/] > ifconfig -a
en1: flags=1e080863,480
inet 10.153.3.101 netmask 0xffff0000 broadcast 10.153.255.255
tcp_sendspace 262144 tcp_recvspace 262144 rfc1323 1
en0: flags=1e080863,480
inet 172.29.138.149 netmask 0xffffc000 broadcast 172.29.191.255
inet 172.29.138.203 netmask 0xffffc000 broadcast 172.29.191.255
tcp_sendspace 262144 tcp_recvspace 262144 rfc1323 1
lo0: flags=e08084b
inet 127.0.0.1 netmask 0xff000000 broadcast 127.255.255.255
inet6 ::1/0
tcp_sendspace 131072 tcp_recvspace 131072 rfc1323 1
LPAR47p682e_pub[/] >
LPAR47p682e_pub[/] > lsWPAR
Name State Type Hostname Directory
MyTestWPAR1 A S MyTestWPAR1 /WPARs/MyTestWPAR1
MyTestWPAR2 D S MyTestWPAR2 /WPARs/MyTestWPAR2 - >

D state stands for partition is not activated.

To start WPAR
To start WPAR TestWPAR2
LPAR47p682e_pub[/] > startWPAR MyTestWPAR2
Starting workload partition MyTestWPAR2.
Mounting all workload partition file systems.
Loading workload partition.
Exporting workload partition devices.
Starting workload partition subsystem cor_MyTestWPAR2.
0513-059 The cor_MyTestWPAR2 Subsystem has been started. Subsystem PID is 291026.
Verifying workload partition startup.
Filesystem for testWPAR2 is now in mounted state.
LPAR47p682e_pub[/] > df -g
Filesystem GB blocks Free %Used Iused %Iused Mounted on
/dev/hd4 0.12 0.02 87% 8105 63% /
/dev/hd2 3.38 0.15 96% 91414 69% /usr
/dev/hd9var 0.25 0.24 6% 477 1% /var
/dev/hd3 0.25 0.25 1% 53 1% /tmp
/dev/hd1 0.12 0.12 1% 8 1% /home
/dev/hd11admin 0.12 0.12 1% 5 1% /admin
/proc - - /proc
/dev/hd10opt 0.25 0.11 55% 3048 11% /opt
p650:/stage/middleware 73.94 13.38 82% 37383 2% /stage/middleware
192.168.1.12:/userdata/20005533 10.00 9.92 1% 19 1% /home/u0005533
/dev/fslv00 0.12 0.10 21% 2106 9% /WPARs/MyTestWPAR1
/dev/fslv01 0.12 0.12 2% 5 1% /WPARs/MyTestWPAR1/home
/dev/fslv02 0.25 0.11 56% 3048 11% /WPARs/MyTestWPAR1/opt
/proc - - /WPARs/MyTestWPAR1/proc
/dev/fslv03 0.12 0.12 3% 13 1% /WPARs/MyTestWPAR1/tmp
/dev/fslv04 3.38 0.14 96% 91483 71% /WPARs/MyTestWPAR1/usr
/dev/fslv05 0.12 0.11 10% 371 2% /WPARs/MyTestWPAR1/var
/dev/fslv06 0.12 0.10 21% 2107 9% /WPARs/MyTestWPAR2
/dev/fslv07 0.12 0.12 2% 5 1% /WPARs/MyTestWPAR2/home
/dev/fslv08 0.25 0.11 56% 3048 11% /WPARs/MyTestWPAR2/opt
/proc - - /WPARs/MyTestWPAR2/proc
/dev/fslv09 0.12 0.12 3% 10 1% /WPARs/MyTestWPAR2/tmp
/dev/fslv10 3.38 0.14 96% 91483 71% /WPARs/MyTestWPAR2/usr
/dev/fslv11 0.12 0.11 11% 373 2% /WPARs/MyTestWPAR2/var
LPAR47p682e_pub[/] >
To maintain software for sytem WPAR with Global AIX
syncWPAR [ [-a] [-i] | [-F] [-r] ] [-p] [-v] [-X]
{ -A | -f WPARNamesFile | WPARName }

Flags:
-a = Perform additional installation only.
-i = Only update installp filesets.
-F = Force copy RPM files.
-r = Only update RPM files.
-p = Preview operation. Do not actually perform the synchronization.
-v = Verbose mode.
-X = Expand file system space if possible.
-A = Apply operation to all corrals.
-f = Specifies a file containing a list of workload partitions.
Note : If system WPAR has /usr private file system for WPAR. Synchronisation will Fail

Listing WPAR Command Output:

Server consist of three Test WPAR
To list All WPAR lsWPAR comamnd is used.
LPAR47p682e_pub[/] > lsWPAR help
Usage:
Tabular: lsWPAR [-D | -M | -N] [-a fieldname[,...]]
[-q] [-s state] [-t type] [WPARname ...]
Paragraph: lsWPAR {-G | -L | -R | -S | -T}
[-s state] [-t type] [WPARname ...]
Delimited: lsWPAR {-c | -d delim} [-a fieldname[,...] |
-G | {-D|-M|-N} [-a fieldName[,...]] | -R | -S | -T]
[-q] [-s state] [-t type] [WPARname ...]
Flags:
-a = Comma-separated list of field names to print.
-c = Colon delimited output (equivalent to -d:).
-d = Output delimited by specified delimiter.
-D = Print DEVICE EXPORTS.
-G = Print general information (paragraph format).
-L = Long format.
-M = File systems or file system dependencies.
-N = Print network information.
-q = Suppress output header.
-R = Print resource information (paragraph format).
-S = Print security information (paragraph format).
-s = Only print information about workload partitions in a
given state. Valid states are D (Defined), L (Loaded),
A (Active), F (Frozen), P (Paused), T (Transitional)
and B (Broken).
-T = Print operation information.

-t = Only print information about workload partitions of a given type. Valid

types are S (System), A (Application) and C (Checkpointable).
To have detail inormation of WPAR Use -L flag
LPAR47p682e_pub[/] > Use -L flag lsWPAR
Name State Type Hostname Directory
MyTestWPAR1 A S MyTestWPAR1 /WPARs/MyTestWPAR1
MyTestWPAR2 A S MyTestWPAR2 /WPARs/MyTestWPAR2
TestWPAR3 A S TestWPAR3 /WPARs/TestWPAR3
LPAR47p682e_pub[/] > lsWPAR TestWPAR3
Name State Type Hostname Directory
TestWPAR3 A S TestWPAR3 /WPARs/TestWPAR3
==================================================================
======
THere are diffrent state of WPAR ref Man page
The lsWPAR command prints information about one or more specified workload partition
(or all workload partitions if none are specified) to standard output.
You can filter all listings according to the following workload partition states using the -s
flag:
Defined : The workload partition has been defined by the mkWPAR command and is ready
for use, but is not active. Start workload partitions in this state with the startWPAR
command.
Loaded : The workload partition has been configured in the kernel, but processes have not
yet been started. Note: This state is visible only to
programmatic consumers that use the lsWPAR command to start a workload partition.
Active : The workload partition is running normally.
Frozen : A checkpoint operation is initiated, and the processes of the workload partition are
quiesced, awaiting the storing phase. Note: The Frozen state is only visible when you use the
lsWPAR command to checkpoint a workload partition. The checkpoint or restart function
requires additional software package other than base WPAR.
Paused : A checkpoint or restart operation has been performed, and the workload partitions
processes are ready to be resumed or killed. The checkpoint or restart functionality requires
additional software.
Transitional : An administrative operation is in progress. The workload partition is in the
process of being created, started, stopped, configured, and so on.
Broken : An administrative operation failed, leaving this workload partition in an unusable
state. You can filter all listings according to the following workload partition types using the
-t flag:
Application: This is an application workload partition, running a single process (or a group
of processes invoked by that means) without isolated system services. The process or group
of processes inherits its operating environment (file systems, security, devices. and so on)
from the environment where the application workload partition was created.

System : This is a system workload partition, emulating an independent, fully-functional

instance of the operating system. If additional checkpoint or restart software is installed, you
can also specify the following type:
Checkpointable : This workload partition is enabled for checkpoint or restart functions. Tip:
This is not a mutually exclusive workload partition type. Checkpointable workload partitions
are still either System or Application workload partitions.
==================================================================
=====
To list detail of MyTestWPAR1
==================================================================
==
LPAR47p682e_pub[/] > lsWPAR -L MyTestWPAR1
=================================================================
MyTestWPAR1 Active
=================================================================
GENERAL
Type: S
Owner: root
Hostname: MyTestWPAR1
Directory: /WPARs/MyTestWPAR1
Start/Stop Script:
Auto: yes
Private /usr: yes
Checkpointable: no
Application:
NETWORK
Interface Address Mask/Prefix Broadcast

en0 172.29.138.203 255.255.192.0 172.29.191.255

FILE SYSTEMS
MountPoint Device Vfs Nodename Options

/WPARs/MyTestWPAR1 /dev/fslv00 jfs2

/WPARs/MyTestWPAR1/home /dev/fslv01 jfs2
/WPARs/MyTestWPAR1/opt /dev/fslv02 jfs2 rw
/WPARs/MyTestWPAR1/proc /proc namefs rw
/WPARs/MyTestWPAR1/tmp /dev/fslv03 jfs2
/WPARs/MyTestWPAR1/usr /dev/fslv04 jfs2 rw
/WPARs/MyTestWPAR1/var /dev/fslv05 jfs2
RESOURCE CONTROLS
Active: yes
Resource Set:
CPU Shares: 20
CPU Limits: 0%-100%,100%

Memory Shares: 20
Memory Limits: 0%-100%,100%
Per-Process Virtual Memory Limit: unlimited
Total Processes: unlimited
Total Threads: unlimited
OPERATION
Operation: none
Process ID:
Start Time:
SECURITY SETTINGS
Privileges: PV_AU_,PV_AU_ADD,PV_AU_ADMIN,PV_AU_PROC,PV_AU_READ,
PV_AU_WRITE,PV_AZ_ADMIN,PV_AZ_CHECK,PV_AZ_READ,PV_AZ_ROOT,
PV_DAC_,PV_DAC_GID,PV_DAC_O,PV_DAC_R,PV_DAC_RID,PV_DAC_UID,
PV_DAC_W,PV_DAC_X,PV_DEV_CONFIG,PV_DEV_QUERY,PV_FS_CHOWN,
PV_FS_CHROOT,PV_FS_CNTL,PV_FS_LINKDIR,PV_FS_MKNOD,
PV_FS_MOUNT,PV_FS_QUOTA,PV_KER_ACCT,PV_KER_CONF,PV_KER_DR,
PV_KER_EWLM,PV_KER_EXTCONF,PV_KER_IPC,PV_KER_IPC_O,
PV_KER_IPC_R,PV_KER_IPC_W,PV_KER_LVM,PV_KER_NFS,PV_KER_RAC,
PV_KER_RAS_ERR,PV_KER_REBOOT,PV_NET_PORT,PV_PROC_CKPT,
PV_PROC_CORE,PV_PROC_CRED,PV_PROC_ENV,PV_PROC_PRIO,
PV_PROC_RAC,PV_PROC_RTCLK,PV_PROC_SIG,PV_PROC_TIMER,
PV_PROC_VARS,PV_PROC_PRIV,PV_SU_UID,PV_TCB,PV_TP,PV_TP_SET,
PV_MIC,PV_MIC_CL,PV_LAB_,PV_LAB_CL,PV_LAB_CLTL,PV_LAB_LEF,
PV_LAB_SLDG,PV_LAB_SLDG_STR,PV_LAB_SL_FILE,PV_LAB_SL_PROC,
PV_LAB_SL_SELF,PV_LAB_SLUG,PV_LAB_SLUG_STR,PV_LAB_TL,
PV_MAC_,PV_MAC_CL,PV_MAC_R,PV_MAC_R_CL,PV_MAC_R_STR,
PV_MAC_R_PROC,PV_MAC_W,PV_MAC_W_CL,PV_MAC_W_DN,PV_MAC_W_UP,
PV_MAC_W_PROC,PV_MAC_OVRRD,PV_KER_SECCONFIG,
PV_PROBEVUE_TRC_USER,PV_PROBEVUE_TRC_USER_SELF
DEVICE EXPORTS
Name Type

/dev/null pseudo
/dev/tty pseudo
/dev/console pseudo
/dev/zero pseudo
/dev/clone pseudo
/dev/sad clone
/dev/xti/tcp clone
/dev/xti/tcp6 clone
/dev/xti/udp clone
/dev/xti/udp6 clone
/dev/xti/unixdg clone
/dev/xti/unixst clone
/dev/error pseudo
/dev/errorctl pseudo

/dev/audit pseudo
/dev/nvram pseudo
==================================================================
=======
Listing file system of diffrent WPAR in server . THere are three WPAR.
LPAR47p682e_pub[/] > df -g
Filesystem GB blocks Free %Used Iused %Iused Mounted on
/dev/hd4 0.12 0.01 91% 8120 68% /
/dev/hd2 3.38 0.15 96% 91414 69% /usr
/dev/hd9var 0.25 0.24 6% 488 1% /var
/dev/hd3 0.25 0.25 1% 55 1% /tmp
/dev/hd1 0.12 0.12 1% 8 1% /home
/dev/hd11admin 0.12 0.12 1% 5 1% /admin
/proc - - /proc
/dev/hd10opt 0.25 0.11 55% 3048 11% /opt
p650:/stage/middleware 73.94 13.38 82% 37383 2% /stage/middleware
192.168.1.12:/userdata/20005533 10.00 9.92 1% 19 1% /home/u0005533

WPAR1 Filesystem
/dev/fslv00 0.12 0.10 21% 2107 9% /WPARs/MyTestWPAR1
/dev/fslv01 0.12 0.12 2% 5 1% /WPARs/MyTestWPAR1/home
/dev/fslv02 0.25 0.11 56% 3048 11% /WPARs/MyTestWPAR1/opt
/proc - - /WPARs/MyTestWPAR1/proc
/dev/fslv03 0.12 0.12 3% 13 1% /WPARs/MyTestWPAR1/tmp
/dev/fslv04 3.38 0.14 96% 91483 71% /WPARs/MyTestWPAR1/usr
/dev/fslv05 0.12 0.11 10% 371 2% /WPARs/MyTestWPAR1/var
/proc - - /WPARs/MyTestWPAR1/proc

WPAR 2 File system

/dev/fslv06 0.12 0.10 21% 2112 9% /WPARs/MyTestWPAR2
/dev/fslv07 0.12 0.12 2% 5 1% /WPARs/MyTestWPAR2/home
/dev/fslv08 0.25 0.11 56% 3048 11% /WPARs/MyTestWPAR2/opt
/proc - - /WPARs/MyTestWPAR2/proc
/dev/fslv09 0.12 0.12 3% 10 1% /WPARs/MyTestWPAR2/tmp
/dev/fslv10 3.38 0.14 96% 91483 71% /WPARs/MyTestWPAR2/usr
/dev/fslv11 0.12 0.11 11% 374 2% /WPARs/MyTestWPAR2/var

WPAR 3 FIle System

/dev/fslv12 0.12 0.10 21% 2103 9% /WPARs/MyTestWPAR3
/dev/fslv13 0.12 0.12 2% 5 1% /WPARs/MyTestWPAR3/home
/opt 0.25 0.11 55% 3048 11% /WPARs/MyTestWPAR3/opt
/proc - - /WPARs/MyTestWPAR3/proc WPAR 3
/dev/fslv14 0.12 0.12 3% 9 1% /WPARs/MyTestWPAR3/tmp
/usr 3.38 0.15 96% 91414 69% /WPARs/MyTestWPAR3/usr
/dev/fslv15 0.12 0.11 11% 370 2% /WPARs/MyTestWPAR3/var
LPAR47p682e_pub[/] >

==================================================================
========
Comparing AIX 6.1 WPAR to the Global AIX:
Lets take a look around a WPAR and compare it to the global AIX
What can we find out from the global AIX about the WPARs we already have?
List the WPARs with lsWPAR
WPARs called wp03 and wp05 are active system Workload Partiotion but wp09 is only
defined it can be made Active by running the startWPAR wp09 command.
Key:
State A=active
State D=defined
State B=broken
State T=transitory i.e. changing state
Type A=Application WPAR
Type S=System WPAR
In this example all my WPAR are have simple names starting with wp and then two digits.
This is, or course, not mandatory.
What is in /WPARs ?
This is a new directory specifically for WPAR use in this we find:
One sub-directory for each WPAR and in this sub-directory we find:
If you have used AIX much you will recognize this as the regular files and directories of AIX
because that is pretty much what you get with an WPAR.
When I check the disk space use of a WPAR on the NFS server I find a basic just installed
WPAR is using:
I make that around 25MB in size this is a very small overhead. Remember by default the
big filesystems like /usr and /opt are shared with the global AIX. If you really need a writable
/usr, for example, this is possible but then you need to find the extra disk space too. If you
have an application that is normally, installed in these filesystems (generally regarded as a
poor application) then you can install it in the global AIX and every sharing WPAR can
access the files this can reduce the workload of installing applications a great deal.
List the mount points
The global AIX has its own mount point and the mount points for the WPARs it is hosting:
Here we see the regular mount points of AIX: /, /usr, /var, /tmp, /home, /opt
and then for each of the active WPAR there are additional mounts as below
NFS mount for the read/write private filesystem: /, /home. /tmp and /var
remounts to make them read-only of: /opt and /user

More WPAR details with lsWPAR -L

This lsWPAR -L list all the attributes of the WPAR
Sections
General section - has the basic information and where the WPAR data can be found
Network section - has the IP address etc.
Filesystems - note some local read-only filesystems nd some read-write and private over
NFS in this case
Resources like Workload Manager (WLM) which has been part of AIX for years and years
see http://www.ibm.com/developerworks/AIX/library/au-Practical_WLM.html for details of
how these are used as the WPAR resource control is built on top of WLM. When a WPAR is
started a WLM Class is automatically created.
Operation - this WPAR has not been moved
Security based on Role Based Access Control (RBAC) not covered here see the AIX
Security Redbook for more details Export devices are various items that the WPAR has
which are distinct form the global AIX for security and performance Network
In the global AIX we can find the following out about the network:
See the network aliases (9.69.44.115 and 113) that are used to piggy back the real network
card in the global AIX with IP address 9.69.44.236. The top line with the IP Address is the IP
Address that the global AIX uses the lines below are the network aliases used by the WPAR
one each. This also highlights that the global AIX and WPAR needs to be in the same subnet
Introduction to WPAR in AIX 6

Introduction to Workload Partitions WPAR 101

Workload Partitioning is a virtualization technology that utilizes software rather than
firmware to isolate users and/or applications.
A Workload Partition (WPAR) is a combination of several core AIX technologies. There are
differences of course, but here the emphasis is on the similarities. In this essay I shall
describe the characteristics of these technologies and how workload partitions are built upon
them.
There are two types of WPAR: system and application.My focus is on system WPAR as this
more closely resembles a LPAR or a seperate system. In other words, a system WPAR
behaves as a complete installation of AIX. At a later time application workload partitions will
be described in terms of how they differ from a system WPAR. For the rest of this document
WPAR and system WPAR are to be considered synonomous.
AIX system software has three components: root, user, and shared. The root component
consists of all the software and data that are unique to that system or node. The user (or usr)
part consists of all the software and data that is common to all AIX systems at that particular
AIX software level (e.g., oslevel AIX 5.3 TL06-01, or AIX 5.3 TL06-02, or AIX 6.1). The
shared component is software and data that is common to any UNIX or Linux system.

In its default configuration a WPAR inherits its user (/usr) and shared (/usr/share, usually
physically included in /usr filesystem) components from the global system. Additionally, the
WPAR inherits the /opt filesystem. The /opt filesystem is the normal installation area in the
rootvg volume group for RPM and IHS packaged applications and AIX Linux affinity
applications and libraries. Because multiple WPARs are intended to share these file fystems
(/usr and /opt) they are read-only by WPAR applications and users. This is very similiar to
how NIM (Network Installation Manager) diskless and dataless systems were configured and
installed. Since only the unique rootvg volume group file systems need to be created (/,
/tmp, /var, /home) creation of a WPAR is a quick process.
The normal AIX boot process is conducted in three phases:
1) boot IPL, or locating and loading the boot block (hd5);
2) rootvg IPL (varyonvg of rootvg),
3) rc.boot 3 or start of init process reading /etc/inittab
A WPAR activation or booting skips step 1. Step 2 is the global (is hosting) system
mounting the WPAR filesystems either locally or from remote storage (currently only NFS
is officially supported, GPFS is known to work, but not officially supported at this time
(September 2007)). The third phase is staring an init process in the global system. This
@init@ process does a chroot to the WPAR root filesystem and performs an AIX normal
rc.boot 3 phase.
WPAR Management
WPAR Management in its simpliest form is simply: Starting, Stopping, and Monitoring
resource usage. And, not to forget creating and deleting WPAR.
Creating a WPAR is a very simple process: the onetime prequistite is the existance of the
directory /WPARs with mode 700 for root. Obviously, we do not want just anyone
wondering in the virtualized rootvgs of the WPAR. And, if the WPAR name you want to
create resolves either in /etc/hosts or DNS (and I suspect NIS) all you need to do is enter:
# mkWPAR -n
If you want to save the output you could also use:
# nohup mkWPAR -n & sleep 2; tail -f nohup.out
and watch the show!
This creates all the WPAR filesystems (/, /home, /tmp, /var and /proc) and read-only entries
for /opt and /usr. After these have been made, they are mounted and some assembly is
performed, basically installing the root part of the filesets in /usr. The only unfortunate part
of the default setup is that all filesystems are created in rootvg, and using generic logical
partition names (fslv00, fslv01, fslv02, fslv03). Fortunately, there is an argument (-g) that you
can use to get the logical partitions made in a different volume group. There are many options
for changing all of these and they will be covered in my next document when Ill discuss
WPAR mobility.
At this point you should just enter:
# startWPAR
wait for prompt and from anywhere you can connect to the running WPAR just as if it was
a seperate system. Just do not expect to make any changes in /usr or /opt (software
installation is also a later document).

AIX 6.1 WPAR Commands:

Most of these commands are only runable by root user for the Global LPAR (Global
Environment).
chWPAR Modifies dynamically the configuration options of the WPAR even when it is
running.
clogin Provides a mechanism for the root user to log in or run a command within a
workload partition. The clogin command uses a pseudo-terminal allocated on
the Global Environment (see in the mobility part the impact of this) and creates
a login shell running which belongs to the workload partition.
lsWPAR Prints information about WPARs
mkWPAR Specific for System WPAR Builds the infrastructure and the configuration
file. Then it creates and populates the WPARs file systems. Allocate the
specified resources as well as the WLM information (if any) and eventually
starts it. Specifying whether the workload partitions should be automatically
started on system boot or when /etc/rc.WPARs is executed.
startWPAR Activates the System WPAR defined with mkWPAR
WPARexec Specific for Application WPAR Builds, create specification file and
eventually starts the Application WPAR
rebootWPAR Stops and resumes a System Workload Partition. It cannot be run within a
WPAR
rmWPAR Deletes the specified Workload Partition from the system as well as its
configuration and its WLM profile
stopWPAR Kills the WPAR and deallocate all resources belonging to it. It removes the
Application WPAR
syncWPAR Specific to System WPAR Synchronizes the software installed in the global
shared parts (usually /usr and /opt) with the workload partitions root part
Note: The mkWPAR and startWPAR can update the global file /etc/WPARs:
Note: /etc/rc.WPARs: Specific to System WPAR this script is run at main system boot it
invokes the startWPAR command on all workload partitions with the autostart option.
Some commands have different or enhanced behavior in a WPAR environment. The list
includes acctcom, acctctl, df, domainname, hosted, hostname, ifconfig, ioo, ipcrm, ipcs,
mkclass, mount, netstat, nfso, no, projctl, ps , schedo, uname, vmo, wlmstat, wlmtune,
wlmcntrl. This change is described in the AIX 6 documentation.
The simplest way to administrate WPARs using command lines (CLI) is to issue the
command smitty WPAR which will provide the interface to these commands.

Creating a WPAR in AIX 6.1:

You can create a WPAR in many ways:
1 Make the simplest possible WPAR
To make a simple WPAR with its file systems on the global AIX disks, just type the
following:
mkWPAR -n myfirstWPARAll we have supplied is a WPAR name and this WPAR is not
even on the network. We have to use a special command (clogin) to gain access to the WPAR
from the global area. while very secure this is not very useful but shows that all the defaults
can be taken. This mkWPAR command takes a few minutes and does the following:
Creates the filesystems for the WPAR
Mounts the filesystems
copies over some files from the global AIX
Performance an install of AIX packages (much like what we see while installing AIX) to
create the files in the WPAR private filesystems (/, /var, /home and /tmp) we dont need to
rebuild the read-only filesystems).
The WPAR is prepared and made ready to run.
This takes about 3 to 4 minutes on my System p p550Q where my global LPAR is a Virtual
I/O Server (VIOS) client so the disks are virtualized and actually on the VIOS. It also seems
to be roughly the same regardless of local disk or NFS filesystems.
2 Make local disk WPAR with a network.
We might as well put the WPAR straight on the network to save time. Simply add the -N
options as you might expect. You will need to have a IP address and hostname allocated. We
also need to supply the hostname with the -h option. Note: I name the WPAR after the
hostname (i.e. wp13) this makes life simpler but its not mandatory. Finally, the -r option
means use the DNS setting of the global AIX for the WPAR this saves time. In this
example, we have assumed the global AIX is on just the one default network. If there was
more than one we would need to specify which. We will explore how the WPAR gets
network access later on.
mkWPAR -n wp13 -h wp13 -N netmask=255.255.255.0 address=8.9.10.11 -r
Note: Of course, replace the network IP addresses to suite your network I just made these
number up.
3 Make NFS disk WPAR with a network ready for Mobility/Relocation
If we want to move the WPAR between global AIX copies i.e. between LPARs or machines
then we need to NFS mount the WPAR private filesystems. Assuming here that we have the
NFS running and have made the NFS mount points available to this global AIX and to the
WPAR hostnames (in this example wp13) then we use the following command.
mkWPAR -n wp13 -h wp13 -N netmask=255.255.255.0 address=3.4.5.6 -r -c \
-M directory=/ vfs=nfs host=blue.ibm.com dev=/scratch/wp13root \
-M directory=/home vfs=nfs host=blue.ibm.com dev=/scratch/wp13home \

-M directory=/tmp vfs=nfs host=blue.ibm.com dev=/scratch/wp13tmp \

-M directory=/var vfs=nfs host=blue.ibm.com dev=/scratch/wp13var
Note the extra options in this command:
-c means this WPAR is checkpointable which is used to in Live Application Mobility =
Relocate to a different AIX.
-M there is one of these for each of the four private filesystems for the WPAR. Hopefully, it
is clear in the example that we have the filesystem name (directory=), the
connection(vfs=nfs) and there may be other ways of supporting the file system in the future,
and the hostname and mount point of the NFS server.
This gives you a fully functioning relocatable WPAR and is the command I use to create new
WPARs. I simply take an existing script containing this command and edit it to suit the next
WPAR. You could make a more generic single script if you have time and things like the
mount points are similar for each WPAR.
4 As above but via a Spec File
An alternative way to create a WPAR is using a spec file which includes the options you
want. The option you specify on the command like will over ride the file contents. You can
ask the mkWPAR command to save a spec file with the -o option the first time you run it or
you can find the master copies in the /WPARs directory. You can take a spec file of a current
WPAR and change it for WPAR specific details and use that to create a new WPAR.
mkWPAR -f my.specthe spec file looks like the one below:
general:
name = wp13
preserve = no
hostname = wp13
checkpointable = yes
directory = /WPARs/wp13
privateusr = no
devices = /etc/WPARs/devexports
network:
broadcast = 9.69.44.255
interface = en0
netmask = 255.255.255.0
address = 9.69.44.123
mount:
dev = /scratch/wp13root
mountopts = bg,intr
directory = /
vfs = nfs
host = blue.ibm.com
mount:
dev = /scratch/wp13home
mountopts = bg,intr

directory = /home
vfs = nfs
host = blue.ibm.com
mount:
dev = /scratch/wp13tmp
mountopts = bg,intr
directory = /tmp
vfs = nfs
host = blue.ibm.com
mount:
dev = /scratch/wp13var
mountopts = bg,intr
directory = /var
vfs = nfs
host = blue.ibm.com
mount:
dev = /usr
directory = /usr
vfs = namefs
mountopts = ro
mount:
dev = /proc
directory = /proc
vfs = namefs
mountopts = rw
mount:
dev = /opt
directory = /opt
vfs = namefs
mountopts = ro
security:
secfile = /etc/WPARs/secattrs5 Creating with smitty
The smitty WPAR command will take you to the smitty panels to control and create a
WPAR.
If you have understood the above information requirements you should have no problem at
all using smitty but I find filling in all the NFS mount points etc. a little tedious.
6 Creating with WPAR Manager
The WPAR Manager allows two ways to create a WPAR:
The full Guided Activity Create Workload Partition (take the link on the left had sidebar)
which will take you through a series of panels for the various aspects of the WPAR and then
create a WPAR for you. The simple quick Resource Views Workload Partitions (the panel
which shows the WPARs) and click on New. this asks the bare minimum of info and

creates a WPAR to which you can later add. We will look at WPAR Manager further down
this article.
Summary
WPAR creation is very similar to the process NIM uses for diskless and dataless installations.
This method relies on AIX rootvg software consisting of three components: root, user and
share. The normal boot process is emulated by the global system hosting the WPAR. Phase
1 is not needed; Phase 2 is the mount of the WPAR filesystem resources; and Phase 3 is a socalled @init@ process that is seen as the regular init in the WPAR environment. This is the
process that reads and processes /sbin/rc.boot 3 and /etc/inittab just as a normal AIX system
would.