From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1757359AbZHZLZq (ORCPT ); Wed, 26 Aug 2009 07:25:46 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1757118AbZHZLZq (ORCPT ); Wed, 26 Aug 2009 07:25:46 -0400 Received: from atrey.karlin.mff.cuni.cz ([195.113.26.193]:34958 "EHLO atrey.karlin.mff.cuni.cz" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1757282AbZHZLZo (ORCPT ); Wed, 26 Aug 2009 07:25:44 -0400 Date: Wed, 26 Aug 2009 13:25:36 +0200 From: Pavel Machek To: david@lang.hm Cc: Ric Wheeler , Theodore Tso , Florian Weimer , Goswin von Brederlow , Rob Landley , kernel list , Andrew Morton , mtk.manpages@gmail.com, rdunlap@xenotime.net, linux-doc@vger.kernel.org, linux-ext4@vger.kernel.org, corbet@lwn.net Subject: Re: [patch] document flash/RAID dangers Message-ID: <20090826112535.GF26595@elf.ucw.cz> References: <20090825222112.GB4300@elf.ucw.cz> <20090825224004.GD4300@elf.ucw.cz> <20090825233701.GH4300@elf.ucw.cz> <20090826001206.GL4300@elf.ucw.cz> <4A94812C.5010803@redhat.com> <20090826004430.GR4300@elf.ucw.cz> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Warning: Reading this can be dangerous to your mental health. User-Agent: Mutt/1.5.18 (2008-05-17) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue 2009-08-25 18:19:40, david@lang.hm wrote: > On Wed, 26 Aug 2009, Pavel Machek wrote: > >>>>>> THESE devices have the property of potentially corrupting blocks being >>>>>> written at the time of the power failure, >>>>> >>>>> this is true of all devices >>>> >>>> Actually I don't think so. I believe SATA disks do not corrupt even >>>> the sector they are writing to -- they just have big enough >>>> capacitors. And yes I believe ext3 depends on that. >>> >>> Pavel, no S-ATA drive has capacitors to hold up during a power failure >>> (or even enough power to destage their write cache). I know this from >>> direct, personal knowledge having built RAID boxes at EMC for years. In >>> fact, almost all RAID boxes require that the write cache be hardwired to >>> off when used in their arrays. >> >> I never claimed they have enough power to flush entire cache -- read >> the paragraph again. I do believe the disks have enough capacitors to >> finish writing single sector, and I do believe ext3 depends on that. > > keep in mind that in a powerfail situation the data being sent to the > drive may be corrupt (the ram gets flaky while a DMA to the drive copies > the bad data to the drive, which writes it before the power loss gets bad > enough for the drive to decide there is a problem and shutdown) > > you just plain cannot count on writes that are in flight when a powerfail > happens to do predictable things, let alone what you consider sane or > proper. >>From what I see, this kind of failure is rather harder to reproduce than the software problems. And at least SGI machines were designed to avoid this... Anyway, I'd like to hear from ext3 people... what happens on read errors in journal? That's what you'd expect to see in situation above. Pavel -- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html