Skip site navigation (1) Skip section navigation (2)

Re: [HACKERS] wal_checksum = on (default) | off

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: pgsql-hackers(at)postgresql(dot)org, "Simon Riggs" <simon(at)2ndquadrant(dot)com>
Cc: pgsql-patches(at)postgresql(dot)org
Subject: Re: [HACKERS] wal_checksum = on (default) | off
Date: 2007-01-04 17:13:57
Message-ID: 18471.1167930837@sss.pgh.pa.us (view raw or flat)
Thread:
Lists: pgsql-hackerspgsql-patches
"Simon Riggs" <simon(at)2ndquadrant(dot)com> writes:
> On Thu, 2007-01-04 at 11:09 -0500, Tom Lane wrote:
>> "It works most of the time" doesn't exactly satisfy me.

> It seemed safer to allow a very rare error through to the next level of
> error checking rather than to close the door so tight that recovery
> would not be possible in a very rare case.

If a DBA is turning checksums off at all, he's already bought into the
assumption that he's prepared to recover from backups.  What you don't
seem to get here is that this "feature" is pretty darn questionable in
the first place, and for it to have a side effect of poking a hole in
the system's reliability even when it's off is more than enough to get
it rejected outright.  It's just a No Sale.

I don't believe that the hole is real small, either, as
overwrite-with-zeroes is not exactly an unheard-of failure mode for
filesystems.

			regards, tom lane

In response to

Responses

pgsql-hackers by date

Next:From: Simon RiggsDate: 2007-01-04 17:20:32
Subject: ReadyForQuery()
Previous:From: Tom LaneDate: 2007-01-04 17:07:03
Subject: Re: [HACKERS] wal_checksum = on (default) | off

pgsql-patches by date

Next:From: Simon RiggsDate: 2007-01-04 17:53:44
Subject: Re: [HACKERS] wal_checksum = on (default) | off
Previous:From: Tom LaneDate: 2007-01-04 17:07:03
Subject: Re: [HACKERS] wal_checksum = on (default) | off

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group