On Dienstag 17 Februar 2009 Michael Monnerie wrote:
> Now I'm sure that the following configuration can destroy a
> PostgreSQL 8.3.5 database:
>
> * Linux host with XEN, XFS filesystem with "nobarrier", RAID
> controller with battery backed cache.
> * XEN vm with XFS filesystem with "nobarrier" with postgresql
> * your daughter with 3.5 years switching off the power supply of the
> server
I got this answer on the XEN list. It looks like XFS in not very secure.
Do you share that opinion? I am still searching for a way to make sure
the above never happens again. Should I use ext3/reiserfs/ocfs2 within a
XEN domU, or is it not the fault of XFS my database got destroyed? Don't
want to blame anyone, but I need a secure environment for the machines
that should be in production soon, don't have time to recover databases
or whatever just because of a crash.
from XEN list:
********************************************
if you don't have highly reliable hardware, with redundant channels and
battery backed caches, etc. stay away from XFS.
it's a pity, but XFS is only as reliable as the hardware you give it.
in other words: you can be really sure that a software issue won't trash
your XFS filesystem; but also that a hardware failure definitely will.
ext3, OTOH, might not have such an impressive record of correctness; but
it's designed with redundancy in mind. almost all vital structures are
either replicated or reconstructable from other hints. that makes fsck
slow but effective, and in most cases, the journal analysis done when
remounting after an unclean shutdown is enough to put it back on track.
i sure wish i could use XFS in more circumstances, but the needed
hardware is prohibitive.
********************************************
mfg zmi
--
// Michael Monnerie, Ing.BSc ----- http://it-management.at
// Tel: 0660 / 415 65 31 .network.your.ideas.
// PGP Key: "curl -s http://zmi.at/zmi.asc | gpg --import"
// Fingerprint: AC19 F9D5 36ED CD8A EF38 500E CE14 91F7 1C12 09B4
// Keyserver: wwwkeys.eu.pgp.net Key-ID: 1C1209B4
signature.asc
Description: This is a digitally signed message part.
|