From: | Christophe Pettus <xof(at)thebuild(dot)com> |
---|---|
To: | Robert Haas <robertmhaas(at)gmail(dot)com> |
Cc: | Fujii Masao <masao(dot)fujii(at)gmail(dot)com>, David Steele <david(at)pgmasters(dot)net>, Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at>, Stephen Frost <sfrost(at)snowman(dot)net>, Adrien NAYRAT <adrien(dot)nayrat(at)anayrat(dot)info>, PostgreSQL Hackers <pgsql-hackers(at)lists(dot)postgresql(dot)org> |
Subject: | Re: Remove Deprecated Exclusive Backup Mode |
Date: | 2019-02-26 17:31:28 |
Message-ID: | 01F63C54-10C8-46AD-BB8A-B714A41FC4B2@thebuild.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
> On Feb 26, 2019, at 09:26, Robert Haas <robertmhaas(at)gmail(dot)com> wrote:
>
> On Tue, Feb 26, 2019 at 12:20 PM Fujii Masao <masao(dot)fujii(at)gmail(dot)com> wrote:
>> So, let me clarify the situations;
>>
>> (1) If backup_label and recovery.signal exist, the recovery starts safely.
>> This is the normal case of recovery from the base backup.
>>
>> (2)If backup_label.pending and recovery.signal exist, as described above,
>> PANIC error happens at the start of recovery. This case can happen
>> if the operator forgets to rename backup_label.pending, i.e.,
>> operation mistake. So, after PANIC, the operator needs to fix her or
>> his mistake (i.e., rename backup_label.pending) and restart
>> the recovery.
>>
>> (3) If backup_label.pending exists but recovery.signal doesn't, the server
>> ignores (or removes) backup_label.pending and do the recovery
>> starting the pg_control's REDO location. This case can happen if
>> the server crashes while an exclusive backup is in progress.
>> So crash-in-the-middle-of-backup doesn't prevent the recovery from
>> starting in this idea.
>
> The if-conditions for 1 and 2 appear to be the same, which is confusing.
I believe #1 is when backup_label (no .pending) exists, #2 is when backup_label.pending (with .pending) exists.
At the absolute minimum, this discussion has convinced me that we need to create a wiki page to accurately describe the failure scenarios for both exclusive and non-exclusive backups, and the recovery actions for them. If it exists already, my search attempts weren't successful. If it doesn't, I'm happy to start one.
--
-- Christophe Pettus
xof(at)thebuild(dot)com
From | Date | Subject | |
---|---|---|---|
Next Message | Fujii Masao | 2019-02-26 17:32:12 | Re: Remove Deprecated Exclusive Backup Mode |
Previous Message | Noah Misch | 2019-02-26 17:29:09 | Re: No-rewrite timestamp<->timestamptz conversions |