<div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Dec 21, 2022 at 4:51 PM Ken Gaillot <<a href="mailto:kgaillot@redhat.com">kgaillot@redhat.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Wed, 2022-12-21 at 10:45 +0100, Ulrich Windl wrote:<br>
> > > > Ken Gaillot <<a href="mailto:kgaillot@redhat.com" target="_blank">kgaillot@redhat.com</a>> schrieb am 20.12.2022 um<br>
> > > > 16:21 in<br>
> Nachricht<br>
> <<a href="mailto:3a5960c2331f97496119720f6b5a760b3fe3bbcf.camel@redhat.com" target="_blank">3a5960c2331f97496119720f6b5a760b3fe3bbcf.camel@redhat.com</a>>:<br>
> > On Tue, 2022‑12‑20 at 11:33 +0300, Andrei Borzenkov wrote:<br>
> > > On Tue, Dec 20, 2022 at 10:07 AM Ulrich Windl<br>
> > > <<a href="mailto:Ulrich.Windl@rz.uni%E2%80%91regensburg.de" target="_blank">Ulrich.Windl@rz.uni‑regensburg.de</a>> wrote:<br>
> > > > > But keep in mind that if the whole site is down (or<br>
> > > > > unaccessible)<br>
> > > > > you<br>
> > > > > will not have access to IPMI/PDU/whatever on this site so<br>
> > > > > your<br>
> > > > > stonith<br>
> > > > > agents will fail ...<br>
> > > > <br>
> > > > But, considering the design, such site won't have a quorum and<br>
> > > > should commit suicide, right?<br>
> > > > <br>
> > > <br>
> > > Not by default.<br>
> > <br>
> > And even if it does, the rest of the cluster can't assume that it<br>
> > did,<br>
> > so resources can't be recovered. It could work with sbd, but the<br>
> > poster<br>
> > said that the physical hosts aren't accessible.<br>
> <br>
> Why? Assuming fencing is configured, the nodes part of the quorum<br>
> should wait<br>
> for fencing delay, assuming fencing (or suicide) was done.<br>
> Then they can manage resources. OK, a non-working fencing or suicide<br>
> mechanism<br>
> is a different story...<br>
> <br>
> Regards,<br>
> Ulrich<br>
<br>
Right, that would be using watchdog-based SBD for self-fencing, but the<br>
poster can't use SBD in this case.<br></blockquote><div><br></div><div>Read it in a way that this would just be a PoC setup.</div><div>Like ssh-fencing as a replacement for a real fencing-device one can</div><div>use softdog (or whatever the virtual-environment offers that is supported</div><div>by the kernel as watchdog-device) with watchdog-fencing at least for</div><div>PoC purposes.</div><div>I guess it depends on how the final setup is gonna differ from the PoC</div><div>setup. Knowing that things like live-migration, pausing a machine,</div><div>running on heavily overcommitted hosts, snapshots, ... would </div><div>be critical for the scenario one could simply try to avoid these things</div><div>during PoC tests if they are not relevant for a final production setup.</div><div><br></div><div>Klaus</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
-- <br>
Ken Gaillot <<a href="mailto:kgaillot@redhat.com" target="_blank">kgaillot@redhat.com</a>><br>
<br>
_______________________________________________<br>
Manage your subscription:<br>
<a href="https://lists.clusterlabs.org/mailman/listinfo/users" rel="noreferrer" target="_blank">https://lists.clusterlabs.org/mailman/listinfo/users</a><br>
<br>
ClusterLabs home: <a href="https://www.clusterlabs.org/" rel="noreferrer" target="_blank">https://www.clusterlabs.org/</a><br>
</blockquote></div></div>