Messages in this thread | | | Date | Tue, 24 Mar 2009 15:40:31 -0400 | From | Ric Wheeler <> | Subject | Re: Linux 2.6.29 |
| |
Linus Torvalds wrote: > On Tue, 24 Mar 2009, Theodore Tso wrote: > >> With ext2 after a system crash you need to run fsck. With ext4, fsck >> isn't an issue, >> > > Bah. A corrupt filesystem is a corrupt filesystem. Whether you have to > fsck it or not should be a secondary concern. > > I personally find silent corruption to be _worse_ than the non-silent one. > At least if there's some program that says "oops, your inode so-and-so > seems to be scrogged" that's better than just silently having bad data in > it. > > Of course, never having bad data _nor_ needing fsck is clearly optimal. > data=ordered gets pretty close (and data=journal is unacceptable for > performance reasons). > > But I really don't understand filesystem people who think that "fsck" is > the important part, regardless of whether the data is valid or not. That's > just stupid and _obviously_ bogus. > > Linus > It is always interesting to try to explain to users that just because fsck ran cleanly does not mean anything that they care about is actually safely on disk. The speed that fsck can run at is important when you are trying to recover data from a really hosed file system, but that is thankfully relatively rare for most people.
Having been involved in many calls with customers after crashes, what they really want to know is pretty routine - do you have all of the data I wrote? can you prove that it is the same data that I wrote? if not, what data is missing and needs to be restored?
We can get help answer those questions with checksums or digital hashes to validate the actual user data of files (open question is when to compute it, where to store, would the SCSI T10 DIF/DIX stuff be sufficient), putting in place some background scrubbers to detect corruptions (which can happen even without an IO error), etc.
Being able to pin point what was impacted is actually enormously useful - for example, being able to map a bad sector back into some meaningful object like a user file, meta-data (translation, run fsck) or so on.
Ric
| |