James Bottomley <j...@linux.vnet.ibm.com> wrote:
>> From: "Gurunath, Vasundhara" <vasundhara.gurun...@hpe.com>
>> SCSI block device can be removed, using write to sysfs delete file as
>> echo 1 > /sys/block/sdX/device/delete If the device is in use by
>> applications, or part of system configuration such as boot device,
>> removal can result in application disruptions or system down time.
>> An additional write option ? is added to SCSI sysfs interface as
>> below, in order to prevent accidental deletion of devices in use.
>> echo ? > /sys/block/sdX/device/delete
>> In the absence of any usage, this option proceeds with device
>> deletion. If the device is open, deletion is prevented, and active
>> Open and IO counts at the time of deletion is logged. Information
>> logged during latest delete attempt can be obtained by issuing a read
>> to the delete file as below:
>> cat /sys/block/sdX/device/delete
>OK, so I'm not too keen on this because our entire system is (finally)
>designed to be hot plug, so echoing 1 to delete simulates a hotplug event, and
>they >can come in at any time.
>Can you elaborate on why this is necessary? Right at the moment, only
>root is allowed to write to this file and cause a deletion ... plus the file
>is pretty >hard to find, buried as it is in sysfs; So I would have thought it
>was pretty safe from accidental misuse; why does it need additional protection?
Some of the requests we got for such checks were from use cases on large system
configurations with several LUNs.
The new changes do not disturb existing interfaces. Writes to the "delete"
sysfs file such as a "1", as advertised in some distributions like RedHat
today, will continue to delete the LUN. However we thought an option to check
usages during delete can complement existing interfaces.
The new changes get activated only when one wants to receive alerts on any
lingering usages, and writes a "?" to delete the LUN.
A delete script can write "?" to sysfs delete files in bulk, while most LUNs
get removed in the first attempt, the usages can be investigated if any LUNs
remain with active usage counts.
Hopefully overhead of these changes is minimal, it is few additional checks on
usage counts and the log.
New changes get active only in delete context and doesn't get into I/O paths.