From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752034AbZHaPPy (ORCPT ); Mon, 31 Aug 2009 11:15:54 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1751743AbZHaPPx (ORCPT ); Mon, 31 Aug 2009 11:15:53 -0400 Received: from g1t0026.austin.hp.com ([15.216.28.33]:47521 "EHLO g1t0026.austin.hp.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751427AbZHaPPv (ORCPT ); Mon, 31 Aug 2009 11:15:51 -0400 Message-ID: <4A9BE8BE.4040108@hp.com> Date: Mon, 31 Aug 2009 11:14:06 -0400 From: jim owens User-Agent: Thunderbird 2.0.0.23 (X11/20090817) MIME-Version: 1.0 To: Christoph Hellwig CC: Mark Lord , Ric Wheeler , Michael Tokarev , david@lang.hm, Pavel Machek , Theodore Tso , NeilBrown , Rob Landley , Florian Weimer , Goswin von Brederlow , kernel list , Andrew Morton , mtk.manpages@gmail.com, rdunlap@xenotime.net, linux-doc@vger.kernel.org, linux-ext4@vger.kernel.org, corbet@lwn.net Subject: Re: raid is dangerous but that's secret (was Re: [patch] ext2/3: document conditions when reliable operation is possible) References: <20090828064449.GA27528@elf.ucw.cz> <20090828120854.GA8153@mit.edu> <20090830075135.GA1874@ucw.cz> <4A9A88B6.9050902@redhat.com> <4A9A9034.8000703@msgid.tls.msk.ru> <20090830163513.GA25899@infradead.org> <4A9BCCEF.7010402@redhat.com> <20090831131626.GA17325@infradead.org> <4A9BCDFE.50008@rtr.ca> <20090831132139.GA5425@infradead.org> In-Reply-To: <20090831132139.GA5425@infradead.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Christoph Hellwig wrote: > On Mon, Aug 31, 2009 at 09:19:58AM -0400, Mark Lord wrote: >>> In my opinion even that is too weak. We know how to control the cache >>> settings on all common disks (that is scsi and ata), so we should always >>> disable the write cache unless we know that the whole stack (filesystem, >>> raid, volume managers) supports barriers. And even then we should make >>> sure the filesystems does actually use barriers everywhere that's needed >>> which failed at for years. >> .. >> >> That stack does not know that my MD device has full battery backup, >> so it bloody well better NOT prevent me from enabling the write caches. > > No one is going to prevent you from doing it. That question is one of > sane defaults. And always safe, but slower if you have advanced > equipment is a much better default than usafe by default on most of > the install base. I've always agreed with "be safe first" and have worked where we always shut write cache off unless we knew it had battery. But before we make disabling cache the default, this is the impact: - users will see it as a performance regression - trashy OS vendors who never disable cache will benchmark better than "out of the box" linux. Because as we all know, users don't read release notes. Been there, done that, felt the pain. jim