Storage Foundation 8.0.2 Administrator's Guide - Linux

To configure secure file system for Oracle Single Instance using CLI

1. Run the command to ensure that vxfstaskd is in an active state.

   systemctl status vxfstaskd

2. Enable and start the dbed service.

   systemctl enable vxdbdctrl.service
   systemctl start vxdbdctrl.service

3. If the Oracle application is managed through a Veritas Cluster Server resource, create the new Process agent resource. Refer to Veritas Cluster Server Administrator's Guide for details. If the Oracle application is not managed through the Veritas Cluster Server resource, make all the file systems used by the application primary on the node where the Oracle instance is running.

   #/opt/VRTS/bin/fsclustadm setprimary <mount point>

   Sample command:

   #/opt/VRTS/bin/fsclustadm setprimary /dbmnt

4. Create a secureFS config file on the data file mount point.

   #/opt/VRTS/bin/vxschadm create <mount point>

   Sample command:

   #/opt/VRTS/bin/vxschadm create /dbmnt

5. Enable Compliance (WORM) or Enterprise (SoftWORM) on data file mount point.

   #/opt/VRTS/bin/fsadm -o <worm/softworm> <mount point>

   Sample command:

   #/opt/VRTS/bin/fsadm -o worm /dbmnt

6. Configure DBED on the node where the Oracle instance is running.

   #/opt/VRTS/bin/dbed_update -S <Oracle SID> -H <Oracle home>

   Sample command:

   #/opt/VRTS/bin/dbed_update -S testdb -H /u01/oracle/dbhome

7. Add Oracle application in secureFS config file on data file mount point.

   #/opt/VRTS/bin/vxschadm add application oracle <ora_user> <ora_home> <ora_sid> <mntpt>

   Sample command:

   #/opt/VRTS/bin/vxschadm add application oracle orauser /u01/oracle/dbhome testdb /dbmnt

   When SecureFS is configured on the data file system, it identifies all the other file systems used by Oracle and applies the same checkpoint schedule for all such file systems. Manual intervention is not required.

   Note:

   WORM mode and audit log feature enabled on data file mount point, are applied to redo and archival log mount points.

8. Enable the checkpoint feature on the data file mount point.

   #/opt/VRTS/bin/vxschadm add checkpoint <interval in os cron format> <maximum number of checkpoints> <retention period of checkpoint> <time mode> <removable> <mount_point>

   Time interval

   Format : "mm hh dd MM ww"
   mm : minutes (0-59) or *
   hh : hours (0-23) or *
   dd : days (1-31) or *
   MM: months (1-12) or *
   ww: week (0-6) SUNDAY=0, SATURADAY=6
   

   *: Refers 'per' for example per minute, per hour, and so on.

   Time mode can be:

   m : minutes
   h : hours
   d : days
   M : months
   y : years
   

   Sample command and output:

   #/opt/VRTS/bin/vxschadm add checkpoint "59 15 * * *" 1 h 0 1 /mnt1

   Following are the sample output of the snapshot format:

   Example 1: "30 15 * * *" Output: Every day at 1530 hours, the task is run.

   Example 2: "30 15 * * 6" :Output: Every Saturday at 1530 hours, the task is run. Caution: "* * * * *"

9. Configure VCS process agent if Oracle Single Instance is under VCS control. The daemon FsSetPriD is introduced in VCS to configure file system as primary where Oracle DB resource is online. See Secure File System for Oracle Single Instance

   /opt/VRTS/bin/haconf -makerw
   #/opt/VRTS/bin/hares -add <VCS process agent name> Process <Oracle service group name>
   #/opt/VRTS/bin/hares -modify  <VCS process agent resource name> Enabled 1
   #/opt/VRTS/bin/hares -modify <VCS process agent name> PathName " /opt/VRTSperl/bin/perl"
   #/opt/VRTS/bin/hares -modify <VCS process agent name> Arguments "%-I /opt/VRTSvcs/lib -Sw
                  /opt/VRTSagents/ha/bin/Oracle/FsSetPriD <VCS process agent name>"
   #/opt/VRTS/bin/hares -modify <VCS process agent name> PidFile "/var/run/
                  <VCS process agent name>.pid"
   #/opt/VRTS/bin/hares -override <VCS process agent name> RestartLimit
   #/opt/VRTS/bin/hares -modify <VCS process agent name> RestartLimit 50
   #/opt/VRTS/bin/hares -modify <VCS process agent name> Critical 0
   #/opt/VRTS/bin/haconf -dump -makero
   

   Sample command

   #/opt/VRTS/bin/haconf -makerw
   #/opt/VRTS/bin/hares -add res_set_primary  Process oracle_service_group
   #/opt/VRTS/bin/hares -modify res_set_primary Enabled 1
   #/opt/VRTS/bin/hares -modify res_set_primary  PathName " /opt/VRTSperl/bin/perl"
   #/opt/VRTS/bin/hares -modify res_set_primary  Arguments "%-I /opt/VRTSvcs/lib -Sw
   			/opt/VRTSagents/ha/bin/Oracle/FsSetPriD res_set_primary"                                                                  "-I /opt/VRTSvcs/lib -Sw /opt/VRTSagents/ha/bin/Oracle/FsSetPriD ora_securefs 120"
   #/opt/VRTS/bin/hares -modify res_set_primary  PidFile "/var/run/res_set_primary.pid"
   #/opt/VRTS/bin/hares -override res_set_primary  RestartLimit
   #/opt/VRTS/bin/hares -modify res_set_primary  RestartLimit 50
   #/opt/VRTS/bin/hares -modify res_set_primary  Critical 0
   #/opt/VRTS/bin/haconf -dump -makero