00:01:04 <megaTherion> I see
00:01:35 <megaTherion> because usually zoned datasets are not mounted in the global zone
02:21:04 <megaTherion> With zadm, can I add more than one allowed-address?
15:39:35 <megaTherion> Still wondering how I can give a branded zone more than one IP, like for example an IPv4 and IPv6? Can I use allowed-address multiple times?
16:10:01 <m1ari> how it works might depend on the brand of zone (and in the case of lx zones the distribution used)
16:11:11 <m1ari> aiui for an exclusive-network zone (when you'd use allowed-address) that configuration is just to tell the GZ what addresses are allowed out of that zone (so it could be a subnet or just left blank)
16:12:30 <m1ari> you configure the interfaces yourself inside the zone, however the brand configure/boot scripts might auto-configure the interfaces based on things like the allowed-address property
16:13:04 <rmustacc> The allowed-addresses description in the zonecfg(8) manual page says if you want multiple addresses, use add net multiple times.
16:25:11 <megaTherion> I see, but what is if I need more than one subnet?
16:25:26 <megaTherion> can I give more than one in allowed-address?
16:30:13 <m1ari> the zonecfg(8) man page that rmustacc mentioned is quite good (I looked and missed the bit about multiple addresses earlier)
16:30:45 <megaTherion> ok then I missed it too, I'll check it again :)
16:31:02 <m1ari> but in summary I think it's one address, network or hostname (with some limits) per allowed-address entry, and I think one allowed-address per `add net` block.
16:35:31 <m1ari> There's a large block of text under 'net: address, allowed-address, defrouter,...'
16:54:14 <rmustacc> And this is ultimately all tying into the dladm allowed-ips settings, IIRC.