Puppet

/zones/myzone is created with the wrong mode on Solaris 10.

class myzone {
    $zonename = 'myzone'
    $physical = 'e1000g100000'
    $ip = "$physical:1.2.3.4"
    $realhostname = "$zonename.mydomain.com"

    zfs {
        "blade-zpool-002/$zonename":
            ensure => present,
            mountpoint => "/zones/$zonename";
    }

    zone {
        $zonename:
            path => "/zones/$zonename",
            ip => "$ip",
            realhostname => "$realhostname",
            sysidcfg => template('zone/sysidcfg-solaris10'),
            require => Zfs["blade-zpool-002/$zonename"];
    }
}

err: //zone::myzone/Zone[myzone]/ensure: change from absent to running failed: Could not install zone: Execution of '/usr/sbin/zoneadm -z myzone install' returned 1: /zones/myzone must not be group readable.
/zones/myzone must not be group executable.
/zones/myzone must not be world readable.
/zones/myzone must not be world executable.
could not verify zonepath /zones/myzone because of the above errors.
zoneadm: zone myzone failed to verify