From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail202.messagelabs.com (mail202.messagelabs.com [216.82.254.227]) by kanga.kvack.org (Postfix) with ESMTP id 046966B004F for ; Mon, 15 Jun 2009 02:51:00 -0400 (EDT) Date: Mon, 15 Jun 2009 08:52:32 +0200 From: Nick Piggin Subject: Re: [PATCH 1/5] HWPOISON: define VM_FAULT_HWPOISON to 0 when feature is disabled Message-ID: <20090615065232.GC18390@wotan.suse.de> References: <20090611142239.192891591@intel.com> <20090611144430.414445947@intel.com> <20090612112258.GA14123@elte.hu> <20090612125741.GA6140@localhost> <20090612131754.GA32105@elte.hu> <20090612153501.GA5737@elte.hu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20090612153501.GA5737@elte.hu> Sender: owner-linux-mm@kvack.org To: Ingo Molnar Cc: Linus Torvalds , Wu Fengguang , Thomas Gleixner , "H. Peter Anvin" , Peter Zijlstra , Andrew Morton , LKML , Hugh Dickins , Andi Kleen , "riel@redhat.com" , "chris.mason@oracle.com" , "linux-mm@kvack.org" List-ID: On Fri, Jun 12, 2009 at 05:35:01PM +0200, Ingo Molnar wrote: > > * Linus Torvalds wrote: > > > On Fri, 12 Jun 2009, Ingo Molnar wrote: > > > > > > This seems like trying to handle a failure mode that cannot be > > > and shouldnt be 'handled' really. If there's an 'already > > > corrupted' page then the box should go down hard and fast, and > > > we should not risk _even more user data corruption_ by trying to > > > 'continue' in the hope of having hit some 'harmless' user > > > process that can be killed ... > > > > No, the box should _not_ go down hard-and-fast. That's the last > > thing we should *ever* do. > > > > We need to log it. Often at a user level (ie we want to make sure > > it actually hits syslog, possibly goes out the network, maybe pops > > up a window, whatever). > > > > Shutting down the machine is the last thing we ever want to do. > > > > The whole "let's panic" mentality is a disease. > > No doubt about that - and i'm removing BUG_ON()s and panic()s > wherever i can and havent added a single new one myself in the past > 5 years or so, its a disease. In HA failover systems you often do want to panic ASAP (after logging to serial cosole I guess) if anything like this happens so the system can be rebooted with minimal chance of data corruption spreading. -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@kvack.org. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: email@kvack.org