Date: Thu, 13 Mar 2008 16:34:31 -0400
From: Rik van Riel <riel@redhat.com>
To: Daniel Phillips <phillips@phunq.net>
Cc: Willy Tarreau <w@1wt.eu>, Chris Friesen <cfriesen@nortel.com>,
       Lars Marowsky-Bree <lmb@suse.de>, Alan Cox <alan@lxorguk.ukuu.org.uk>,
       Grzegorz Kulewski <kangur@polcom.net>, linux-kernel@vger.kernel.org
Subject: Re: [ANNOUNCE] Ramback: faster than a speeding bullet
Message-ID: <20080313163431.7b4058ef@cuia.boston.redhat.com>
In-Reply-To: <200803120117.57644.phillips@phunq.net>
References: <200803092346.17556.phillips@phunq.net>
	<200803111256.51267.phillips@phunq.net>
	<20080311205340.GJ8953@1wt.eu>
	<200803120117.57644.phillips@phunq.net>
Organization: Red Hat, Inc
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 1019
Lines: 25

On Wed, 12 Mar 2008 00:17:56 -0800
Daniel Phillips <phillips@phunq.net> wrote:

> So we have a flock of people arguing that you can't trust Linux.  Well
> maybe there are situations were you can't, but what can you trust?
> Disk firmware?  Bios?  Big maybes everywhere.

The traditional and proven method to constructing a reliable system is
to assume that no component can be fully trusted.  This is especially
true for new code.

By being paranoid about everything, failures in one component are
usually contained well enough that one failure is not catastrophic.

In order for ramback to get appeal with the people who are paranoid
about data integrity (probably a vast majority of users), you will
need some guarantees about flush order, etc...

-- 
All Rights Reversed
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/