public inbox for linux-scsi@vger.kernel.org
 help / color / mirror / Atom feed
From: James Bottomley <James.Bottomley@SteelEye.com>
To: Jeff Garzik <jeff@garzik.org>
Cc: David Miller <davem@davemloft.net>,
	ltuikov@yahoo.com, lydianconcepts@gmail.com, mdr@sgi.com,
	James.Smart@emulex.com, linux-scsi@vger.kernel.org
Subject: Re: generating a Linux WWN?
Date: Sat, 06 Oct 2007 10:04:55 -0500	[thread overview]
Message-ID: <1191683096.3338.29.camel@localhost.localdomain> (raw)
In-Reply-To: <47079D64.3070000@garzik.org>

On Sat, 2007-10-06 at 10:36 -0400, Jeff Garzik wrote:
> James Bottomley wrote:
> > My problem with auto generated is that it's provably impossible to
> > generate globally unique numbers for WWNs without some internal source
> > of uniqueness (I know sparcs have this in their serial number, but most
> > PCs unfortunately don't).
> > 
> > I know the auto generated number can be statistically reasonably unique,
> > but sysadmins are lazy people.  If they run into this problem, they'll
> > take the knob with the on/off switch rather than the think about the
> > problem and specify the full WWN; and then, being busy people, they'll
> > forget about it as "problem solved".  When they do this, statistically
> > (and probably years later) there will be a cluster reboot where the
> > entire SAN simply collapses and no-one knows why ... the poor SAN
> > administrator will likely spend weeks working out the problem is.
> 
> Why, if we give lazy administrators root access, that's all they'll use, 
> and they will just think "problem solved" until a serious security issue 
> arises that takes down the cluster.
> 
> See how silly and un-Linux that logic is?  In Linux, the admin has the 
> power to make stupid decisions -- or to make informed decisions that 
> disagree your rigid "an admin should never do that" line of thought. 
> It's their hardware.
> 
> You're also using the 1% case of a 1% case of a 1% case to argue against 
> a feature that is useful in making things Just Work(tm).

So your use case for this feature is a savvy system admin whose going to
turn it on for a one time boot while he figures out what the correct WWN
override is and who will then immediately set the system up to override
properly on its next boot?  That's what seems to me to be the unlikely
scenario.

I know when I'm under the gun to solve a problem I'll do the first thing
I find that actually works.  So I'd rather only expose an interface that
allows them to get it right.

If you remember Rusty's guide to interfaces, this is a level 14 easy to
misuse interface: "The obvious use is wrong"; since the obvious use is
to put it in module parameters and have the problem go away (for
now ...).  Actually, I could be harsher and say it's level 17 "There's
no correct use" because statistically every time you use it, you expose
yourself to potential duplicate WWNs.

James



  reply	other threads:[~2007-10-06 15:04 UTC|newest]

Thread overview: 58+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2007-09-27 10:04 generating a Linux WWN? Jeff Garzik
2007-09-27 13:55 ` Michael Reed
2007-09-27 14:04 ` James Smart
2007-09-27 14:16   ` Patrick_Boyd
2007-09-27 14:46     ` Matthew Wilcox
2007-09-27 15:07       ` Michael Reed
2007-09-27 15:12         ` Michael Reed
2007-09-27 23:40         ` Jeff Garzik
2007-09-27 22:48       ` Jeff Garzik
2007-10-01 10:56         ` Andi Kleen
2007-09-27 14:19   ` Jeff Garzik
2007-09-27 14:29     ` Michael Reed
2007-09-27 15:30       ` Douglas Gilbert
2007-09-27 22:32         ` Jeff Garzik
2007-09-27 23:12       ` Jeff Garzik
2007-10-02 23:47         ` Luben Tuikov
2007-10-03  0:35           ` Jeff Garzik
2007-10-03  3:45             ` Luben Tuikov
2007-10-03  4:15               ` Jeff Garzik
2007-10-03  5:12                 ` Luben Tuikov
2007-10-03  5:25                   ` Jeff Garzik
2007-10-03  5:31                     ` Luben Tuikov
2007-10-03  5:45                       ` Jeff Garzik
2007-10-03 14:59                         ` Douglas Gilbert
2007-10-03 16:16                           ` Jeff Garzik
2007-10-03 18:02                         ` Matthew Jacob
2007-10-03 18:09                           ` Jeff Garzik
2007-10-03 19:44                             ` Luben Tuikov
2007-10-03 20:25                               ` Jeff Garzik
2007-10-03 22:08                                 ` Luben Tuikov
2007-10-03 22:17                                   ` David Miller
2007-10-04  0:11                                     ` Luben Tuikov
2007-10-04  3:23                                       ` Matthew Jacob
2007-10-04  3:27                                         ` Jeff Garzik
2007-10-04  3:33                                         ` Matthew Wilcox
2007-10-05 22:09                                     ` James Bottomley
2007-10-05 22:11                                       ` David Miller
2007-10-05 22:14                                         ` James Bottomley
2007-10-05 22:17                                           ` David Miller
2007-10-05 22:41                                             ` Jeff Garzik
2007-10-05 22:49                                               ` David Miller
2007-10-05 22:52                                                 ` Jeff Garzik
2007-10-06 14:11                                             ` James Bottomley
2007-10-06 14:36                                               ` Jeff Garzik
2007-10-06 15:04                                                 ` James Bottomley [this message]
2007-10-06 15:23                                                   ` Jeff Garzik
2007-10-06 15:33                                                     ` James Bottomley
2007-10-06 15:42                                                       ` Jeff Garzik
2007-10-08 18:42                                                     ` Luben Tuikov
2007-10-07  2:48                                                   ` David Miller
2007-10-08 15:41                                                     ` Michael Reed
2007-10-08 18:34                                                 ` Luben Tuikov
2007-10-07  2:46                                               ` David Miller
2007-10-08 18:18                                       ` Luben Tuikov
2007-10-03  5:38                     ` Luben Tuikov
2007-10-03  5:47                       ` Jeff Garzik
2007-10-03 15:33                         ` Michael Reed
2007-10-03 16:02                           ` Jeff Garzik

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1191683096.3338.29.camel@localhost.localdomain \
    --to=james.bottomley@steeleye.com \
    --cc=James.Smart@emulex.com \
    --cc=davem@davemloft.net \
    --cc=jeff@garzik.org \
    --cc=linux-scsi@vger.kernel.org \
    --cc=ltuikov@yahoo.com \
    --cc=lydianconcepts@gmail.com \
    --cc=mdr@sgi.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox