On 2012-09-10T14:40:43, Alberto Menichetti <albmeniche...@tai.it> wrote:
> Sorry, maybe I'm missing something, but suppose this scenario (also > remember that, being a 2-node cluster, I had to set > no-quorum-policy="ignore"): > 1. the virtual center is unavailable > 2. an event occurs that partition the cluster > 3. at this point, both the nodes could try to start a filesystem > resource, thus compromising the data safety. Because of 1, the nodes cannot fence, but will not start resources without a successful fence completion. Hence, in the case of a network partition with unavailable fencing setup and no-quorum-policy=ignore, resources will continue to run where they were running before the partition. (Which is the best one could hope for anyway.) If there's a real outage of one of the nodes, *and* the vcenter is down, then the surviving node won't take over because it can't fence. That leaves your data intact and the service down. Regards, Lars -- Architect Storage/HA SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 21284 (AG Nürnberg) "Experience is the name everyone gives to their mistakes." -- Oscar Wilde _______________________________________________ Pacemaker mailing list: Pacemaker@oss.clusterlabs.org http://oss.clusterlabs.org/mailman/listinfo/pacemaker Project Home: http://www.clusterlabs.org Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf Bugs: http://bugs.clusterlabs.org