Renaud Manus wrote: > The current behavior when we disable an instance is to stop the instance > first then notify the dependents (that have restart_on set to restart or > refresh) so they can be stopped and transition to the 'offline' state. > This is the correct behavior with respect to the specs of SMF states > graph.
I'm quite surprised at this behavior; it seems completely wrong. Services should never be running when the services that they depend on are not running. (I suppose that that rule must be violated when a service dies, when you have no choice but to shut down dependents after the dependency, but I would say that it should never be violated in non-failure cases.) Please, make the change. If you really must retain the current wrong behavior, make *it* the option.