How To
Summary
This document presents an example of how to use IBM Virtual Dev and Test for z/OS v1.3 to provision the ADCD z/OS 2.5 edition to a Linux on Z instance.
Objective
- Configure the license server and ADCD storage location on the x86 Virtual Server Instances (VSI)
- Configure the network on the target x390 VSI
- Configure the ZVDT web server
- Provision the x390 VSI with the ADCD stack
- Connect to z/OS with IBM Developer for z/OS
Environment
- IBM Virtual Dev and Test for z/OS v1.3 is installed on a Red Hat Linux server v9.2 on premises.
- 2 Virtual Server Instances (VSI) on IBM Cloud:
- 1 for the target z/OS: Linux on s390x VSI (profile mz2o-2x16, 2vCPU) with Ubuntu v22.04.
- 1 for the License server and ADCD storage location: Linux on x86 VSI (profile bx2-2x8) with Ubuntu v22.04.
(*) All instances can be on premises but I selected IBM Cloud for this example.
I selected Ubuntu for both VSIs to be consistent: check the ZVDT requirements for other supported Linux distributions.
The VSI profiles are light in CPU and memory because this example is just about provisioning and connecting to z/OS.
Steps
1) Configure the license and storage server VSI
1.1) Change the default sshd configuration to allow user and password credentials
- Edit
/etc/ssh/sshd_config
and setPasswordAuthentication yes
- Save it and restart the service with command systemctl restart ssh.service
1.2) Install and Configure the license server
- Copy zdt-license-server from the ZVDT web server instance over to the license server VSI
- Run it to install the license server
- Run /opt/IBM/LDK/request_license to get a request license file (that is, olivier-lic2_1694157919.zip)
- Get a license update file from the Rational® License Key Center (LKC) (that is, olivier-lic2_1694157919_update.zip)
- Apply the license with command /opt/IBM/LDK/update_license olivier-lic2_1694157919_update.zip
- Check that the license is available with /opt/IBM/LDK/query_license
1.3) Install and Configure the storage server
- create the directories
/data/zvdt/adcd/v1.3/volumes
- from Passport Advantage®, download ADCDTOOLS.XML and zdt_config_adcd_ipl.sh and copy them to
/data/zvdt/adcd/v1.3
- from Passport Advantage®, download the ADCD disk volumes and copy them to
/data/zvdt/adcd/v1.3/volumes
(see the following screenshot with just the z/OS volumes)
1.4) Open the ports 1947, 9450 and 9451 for TCP and UDP
2) Configure the target VSI
2.1) Set up
iptable
I used zdt_config_network_byRoot.sh to configure
iptables
with the ports that need to be rerouted to z/OS.You can copy it from the ZVDT web server (in /opt/ibm/zvdt/zvdt-server/apps/expanded/zvdt-mc.ear/zdt-restapi.war/zdtInstall/) to the target Linux on Z VSI (for example in /tmp)
Create also 2 files in the same directory as zdt_config_network_byRoot.sh:
- zdt_config_tcpports with the following content:
0:21 23:2021 2022>22 2023:3269 3271:9449 9452:65535 |
- zdt_config_udpports with the following content:
111 514 1023 1044:1049 2049 |
- Run the following command:
./zdt_config_network_byRoot.sh -d /tmp
- Verify that the rules are created
root@olivier-loz:/tmp# iptables -L -n
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT tcp -- 0.0.0.0/0 172.26.1.2 tcp dpts:0:21
ACCEPT tcp -- 0.0.0.0/0 172.26.1.2 tcp dpts:23:2021
ACCEPT tcp -- 0.0.0.0/0 172.26.1.2 tcp dpt:2022
ACCEPT tcp -- 0.0.0.0/0 172.26.1.2 tcp dpts:2023:3269
ACCEPT tcp -- 0.0.0.0/0 172.26.1.2 tcp dpts:3271:9449
ACCEPT tcp -- 0.0.0.0/0 172.26.1.2 tcp dpts:9452:65535
ACCEPT udp -- 0.0.0.0/0 172.26.1.2 udp dpt:111
ACCEPT udp -- 0.0.0.0/0 172.26.1.2 udp dpt:514
ACCEPT udp -- 0.0.0.0/0 172.26.1.2 udp dpt:1023
ACCEPT udp -- 0.0.0.0/0 172.26.1.2 udp dpts:1044:1049
ACCEPT udp -- 0.0.0.0/0 172.26.1.2 udp dpt:2049
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
2.2) Install the hypervisor
2.3) Create a user in group KVM
2.4) Configure the license server
See link section "Installing and configuring the hypervisor"
2.5) Verify that the license server is found
Run the following commands:
su ibmsys1
echo 'serveraddr = 163.7x.y.z' > /home/ibmsys1/.hasplm/hasp_97252.ini
cd /tmp
echo > TEST.ZPD
/usr/z1090/bin/Z1091_ADCD_install TEST.ZPD TEST
where 163.7x.y.z is the IP address of your license server.
The expected result is an error like: Error #5: ADCD File format is invalid or corrupted
The following error indicates that a license is not available:
LIC hasp: * Sentinel protection key not available : code=7
Error: Unable to login software license server with ldk_status -1
2.6) Add a storage volume to contain the z/OS volumes
- Find the volume ID (02r7-615f2ec0-0972-4) with command
ls -l /dev/disk/by-id
lrwxrwxrwx 1 root root 9 Sep 14 13:56 virtio-02r7-615f2ec0-0972-4 -> ../../vdd
lrwxrwxrwx 1 root root 9 Sep 14 13:56 virtio-02r7-ec414749-37fc-4 -> ../../vda
lrwxrwxrwx 1 root root 10 Sep 14 13:56 virtio-02r7-ec414749-37fc-4-part1 -> ../../vda1
lrwxrwxrwx 1 root root 9 Sep 14 13:56 virtio-cloud-init- -> ../../vdc
lrwxrwxrwx 1 root root 9 Sep 14 13:56 virtio-cloud-init-02r7_f8fc -> ../../vdb
- Format the new volume with command:
mkfs.ext2 /dev/disk/by-id/virtio-02r7-9165a3d6-a7a8-4 -F
- Mount it with command:
mount /dev/disk/by-id/virtio-02r7-615f2ec0-0972-4 /data/zvdt/
3) Configure the ZVDT web server
3.1) Reference the license server
I use the floating IP of my license server VSI.
The ZVDT web server forwards this IP or hostname to the target VSI, which uses them to connect to the license server.
3.2) Reference the storage server
3.3) Load the ADCD as a source environment
3.4) Reference the target VSI
3.5) Create an image
4) Provision the target VSI
One CPU for z/OS (and thus one for Ubuntu).
z/OS volumes are copied under
/data/zvdt/volumes/
- Verify that z/OS is up
On the target VSI, run commands:
su ibmsys1
oprmsg D A,L
5) Connect to z/OS
5.1) For TSO, open port 23
5.2) Connect with your 3270 emulator
I use the Remote Connection Emulator in IBM Developer for z/OS:
5.3) Start the Remote Systems Explorer (RSE)
Start RSE and JMON in SDSF with commands:
/S RSED
/S JMON
5.4) Verify that the RSE ports are opened
5.5) Connect to the Remote Systems Explorer
Use port 4035
Accept the self-signed certificate
You are connected:
Related Information
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB35","label":"Mainframe SW"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSMEK3","label":"IBM Z Development and Test Environment"},"ARM Category":[{"code":"a8m0z00000009nmAAA","label":"z Systems Development and Test Environment"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Product Synonym
zvdt
Was this topic helpful?
Document Information
Modified date:
29 September 2023
UID
ibm17031290