Re: repo consistency under crashes and power failures?
- From
Johannes Sixt <j.sixt@viscovery.net>
- Date
- Jul 16, 2013, 06:17 UTC
- Message-ID
- <51E4E570.1060403@viscovery.net>
- In-Reply-To
- <rmiy597iujc.fsf@fnord.ir.bbn.com>
Am 7/15/2013 19:48, schrieb Greg Troxel:
Show 5 quoted lines
> Clearly there is the possibility of creating a corrupt repository when > receiving objects and updating refs, if a crash or power failure causes > data not to get written to disk but that data is pointed to. Journaling > mitigates this, but I'd argue that programs should function safely with > only the guarantees from POSIX.
Even under POSIX, "guarantees" and "crash/power failure" do not mesh well. This has been under dispute recently, for example:
http://thread.gmane.org/gmane.comp.standards.posix.austin.general/7456/focus=7487
The best we can achieve with POSIX alone is "to make bad consequences less likely".
Jonathan already mentioned the knob that allows you to trade performance for more safety.
-- Hannes