On 08/09/2015 11:41, Denis V. Lunev wrote:
> This solution is far not perfect as there is a race window for
> request complete anyway. Though the amount of failures is
> reduced by 2-3 orders of magnitude.
> 
> The behavior is similar not for soft mounts, which could
> corrupt the data but to hard mounts which are default AFAIR.
> It will not corrupt the data and should patiently wait
> request complete.
> 
> Without the disk the guest is not able to serve any request and
> thus keeping it running does not make serious sense.
> 
> This approach is used by Odin in production for years and
> we were able to seriously reduce the amount of end-user
> reclamations. We were unable to invent any reasonable
> solution without guest modification/timeouts tuning.
> 
> Anyway, this code is off by default, storage agnostic, separated.
> Yes, we will be able to maintain it for us out-of-tree, but...

I'm not saying the patches are unacceptable, not at all.  It just needs
a bit of documentation to understand the tradeoffs.  I admit I have not
even started reading the code.

Your experience is very valuable, and it's great that you are
contributing it to QEMU and KVM!

Paolo

Reply via email to