>>> On 10/3/2016 at 10:05 AM, Michael MacIsaac <[email protected]> wrote: > Recently we had a scheduled SHUTDOWN REIPL of a z/VM LPAR. After one of my > Linux systems came back it was running with a copy of the OS and data that > was 12 days old! (I saw the 12 day 'hole' in /var/log/messages). I have > *never* seen this happen on zLinux nor Lintel. > > It was a SLES 12 SP1 system with a btrfs root file system. btrfs is the > only difference I can think of. The z/VM and storage guys insist there > were no snapshot copies around.
The only thing I can think of is that the system was (somehow) booted from a snapper snapshot. I would have expected things to be in read-only mode, however. > Has anyone seen this or have a possible explanation? I cloned over it and > restored my data in order to get the system usable, so I don't have access > to the original system. Next time, if it ever happens again, you might want to preserve the system state and use other DASD for cloning a replacement. Destroying the forensic evidence is self-defeating in the long run. :) Mark Post ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/
