shaba/lvm2
1
0
Fork 0
mirror of git://sourceware.org/git/lvm2.git synced 2025-01-02 01:18:26 +03:00
Code Releases Activity

man: lvmlockd use of lvmlockctl_kill_command

Browse Source
This commit is contained in:
David Teigland 2021-03-17 13:00:47 -05:00
parent 583cf413d5
commit a481fdaa35
1 changed files with 62 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

83
man/lvmlockd.8_main
View File

@ -576,32 +576,73 @@ If the PV under a sanlock VG's lvmlock LV is disconnected, unresponsive or
too slow, sanlock cannot renew the lease for the VG's locks. After some too slow, sanlock cannot renew the lease for the VG's locks. After some
time, the lease will expire, and locks that the host owns in the VG can be time, the lease will expire, and locks that the host owns in the VG can be
acquired by other hosts. The VG must be forcibly deactivated on the host acquired by other hosts. The VG must be forcibly deactivated on the host
with the expiring lease before other hosts can acquire its locks. with the expiring lease before other hosts can acquire its locks. This is
necessary for data protection.
When the sanlock daemon detects that VG storage is lost and the VG lease
is expiring, it runs the command lvmlockctl --kill <vgname>. This command
emits a syslog message stating that storage is lost for the VG, and that
LVs in the VG must be immediately deactivated.
If no LVs are active in the VG, then the VG lockspace will be removed, and
errors will be reported when trying to use the VG. Use the lvmlockctl
--drop command to clear the stale lockspace from lvmlockd.
If the VG has active LVs, they must be quickly deactivated before the
locks expire. After all LVs are deactivated, run lvmlockctl --drop
<vgname> to clear the expiring lockspace from lvmlockd.
If all LVs in the VG are not deactivated within about 40 seconds, sanlock
uses wdmd and the local watchdog to reset the host. The machine reset is
effectively a severe form of "deactivating" LVs before they can be
activated on other hosts. The reset is considered a better alternative
than having LVs used by multiple hosts at once, which could easily damage
or destroy their content.
.B sanlock lease storage failure automation
When the sanlock daemon detects that the lease storage is lost, it runs When the sanlock daemon detects that the lease storage is lost, it runs
the command lvmlockctl --kill <vgname>. This command emits a syslog the command lvmlockctl --kill <vgname>. This lvmlockctl command can be
message stating that lease storage is lost for the VG, and LVs must be configured to run another command to forcibly deactivate LVs, taking the
immediately deactivated. place of the manual process described above. The other command is
configured in the lvm.conf lvmlockctl_kill_command setting. The VG name
is appended to the end of the command specified.
If no LVs are active in the VG, then the lockspace with an expiring lease The lvmlockctl_kill_command should forcibly deactivate LVs in the VG,
will be removed, and errors will be reported when trying to use the VG. ensuring that existing writes to LVs in the VG are complete and that
Use the lvmlockctl --drop command to clear the stale lockspace from further writes to the LVs in the VG will be rejected. If it is able to do
lvmlockd. this successfully, it should exit with success, otherwise it should exit
with an error. If lvmlockctl --kill gets a successful result from
lvmlockctl_kill_command, it tells lvmlockd to drop locks for the VG (the
equivalent of running lvmlockctl --drop). If this completes in time, a
machine reset can be avoided.
If the VG has active LVs when the lock storage is lost, the LVs must be One possible option is to create a script my_vg_kill_script.sh:
quickly deactivated before the lockspace lease expires. After all LVs are .nf
deactivated, run lvmlockctl --drop <vgname> to clear the expiring #!/bin/bash
lockspace from lvmlockd. If all LVs in the VG are not deactivated within VG=$1
about 40 seconds, sanlock uses wdmd and the local watchdog to reset the # replace dm table with the error target for top level LVs
host. The machine reset is effectively a severe form of "deactivating" dmsetup wipe_table -S "uuid=~LVM && vgname=$VG && lv_layer=\\"\\""
LVs before they can be activated on other hosts. The reset is considered # check that the error target is in place
a better alternative than having LVs used by multiple hosts at once, which dmsetup table -c -S "uuid=~LVM && vgname=$VG && lv_layer=\\"\\"" |grep -vw error
could easily damage or destroy their content. if [[ $? -ne 0 ]] ; then
exit 0
fi
exit 1
.fi
In the future, the lvmlockctl kill command may automatically attempt to Set in lvm.conf:
forcibly deactivate LVs before the sanlock lease expires. Until then, the .nf
user must notice the syslog message and manually deactivate the VG before lvmlockctl_kill_command="/usr/sbin/my_vg_kill_script.sh"
sanlock resets the machine. .fi
(The script and dmsetup commands should be tested with the actual VG to
ensure that all top level LVs are properly disabled.)
If the lvmlockctl_kill_command is not configured, or fails, lvmlockctl
--kill will emit syslog messages as described in the previous section,
notifying the user to manually deactivate the VG before sanlock resets the
machine.
.B sanlock daemon failure .B sanlock daemon failure