Re: Ext4 and the "30 second window of death"

[Matthew Garrett <mjg59@srcf.ucam.org>]

On Thu, Apr 02, 2009 at 11:22:48AM -0700, david@lang.hm wrote:
> On Wed, 1 Apr 2009, Matthew Garrett wrote:
> >laptop-mode is something that makes sense as a default behaviour under a
> >lot of circumstances. Adding fsync() suppression means it's utterly
> >impossible to use it in that way. An additional mode would be perfectly
> >reasonable, as long as it's made clear that it's really a request for
> >data to be discarded at some point. The current mode isn't.
> 
> this issue seems pretty straightforward to me
> 
> the apps do fsync (and similar) to the degree that they think their data 
> is important (potentially with config options if they acknowlege that 
> their data isn't _always_ that important)
> 
> the system allows the admin to override the application and say "I'm 
> willing to loose up to X seconds of data for other benifits"
>
> if this can work cleanly (with the ordering issue that was identified, 
> which may involve having multiple versions of the metadata cached) it 
> seems like a very clean interface.

It does, but it's a different interface to the current one with a 
different aim and a different set of tradeoffs. The current behaviour of 
laptop-mode is that fsync() results in things hitting disk. The only 
configurability of laptop-mode is how long it then waits to flush out 
everything else as well.

The solution to "fsync() causes disk spinups" isn't "ignore fsync()". 
It's "ensure that applications only use fsync() when they really need 
it", which requires us to also be able to say "fsync() should not be 
required to ensure that events occur in order".

-- 
Matthew Garrett | mjg59@srcf.ucam.org