On Wed, Dec 16, 2009 at 8:56 AM, Alain.Moulle <[email protected]> wrote: >> No. It is a split-brain situation as soon as nodes can't >> communicate. >> > Ok, you're rigtht, in fact, I wanted to talk about the risk of shared > resources mounted on both sides, which > is in fact the worst thing that could happen in case of "split-brain" if > no fencing occurs .
Thats why most vendors will not support configurations without fencing configured. If you care about your data, you need fencing. >> >>> > And if we have a more than two-nodes cluster, it seems similar for me ... >>> >> >> No, because the partition without quorum can't fence nodes. That >> makes things simpler and more predictable. >> > ... what if no-quorum-policy=ignore ? Then you get what you ask for :-) [snip] > try to > get the configuration > which avoids for sure dual-fencing, and also avoids shared resources > mounted on both sides, > that's what I'm trying to find with Pacemaker & openais. I would recommend one of two approaches. Either have stonith use the poweroff method or don't start the cluster software automatically when the node boots. Also, have a read of Tim's stonith doc: http://ourobengr.com/ha _______________________________________________ Linux-HA mailing list [email protected] http://lists.linux-ha.org/mailman/listinfo/linux-ha See also: http://linux-ha.org/ReportingProblems
