Gregory Stark <stark(at)enterprisedb(dot)com> writes:
> I think the accepted way to handle this kind of situation is called STONITH --
> "Shoot The Other Node In The Head".
Yeah, and the reason people go to the trouble of having special hardware
for that is that pure-software solutions are unreliable.
I think the proposed don't-restart flag is exceedingly ugly and will not
solve any real-world problem.
regards, tom lane