Renaud Manus wrote:
> The current behavior when we disable an instance is to stop the instance
> first then notify the dependents (that have restart_on set to restart or
> refresh) so they can be stopped and transition to the 'offline' state.
> This is the correct behavior with respect to the specs of SMF states
> graph.

I'm quite surprised at this behavior; it seems completely wrong. 
Services should never be running when the services that they depend on 
are not running.

(I suppose that that rule must be violated when a service dies, when you 
have no choice but to shut down dependents after the dependency, but I 
would say that it should never be violated in non-failure cases.)

Please, make the change.  If you really must retain the current wrong 
behavior, make *it* the option.


Reply via email to