[Linux-ha-dev] [RFC] Change the behavior of cibadmin on dangerous options

[Xinwei Hu]

2007/12/4, Lars Marowsky-Bree <lmb at suse.de>:
> On 2007-12-04T00:20:15, Xinwei Hu <hxinwei at gmail.com> wrote:
>
> > Hi all,
> >
> >    We have a instance about cibadmin recently. A typo of 'cibadmin -r
> > blahblah' forces the HA into RO mode without any warning, and the
> > field engineer almost panic. ;)
>
> I like the direction.
>
> The more dangerous commands usually require a --force option on other
> tools. (fsck, mkfs, rpm, drbdadm, ...)
The reason that I don't go this way is concerning the portability.
getopt_long is not a POSIX standard AFAIK.
> For cibadmin, -E, -r, (-b, -h, -l for write commands) seem safe
> candidates.
>
> Reading y/n from stdin is not a good approach; the commands might
> require the XML to be on stdin.
You are right.
So how about let the process give verbose warning message on dangerous
options and sleep N seconds before proceeding ?
>
> Regards,
>     Lars
>
> --
> Teamlead Kernel, SuSE Labs, Research and Development
> SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nürnberg)
> "Experience is the name everyone gives to their mistakes." -- Oscar Wilde
>
> _______________________________________________________
> Linux-HA-Dev: Linux-HA-Dev at lists.linux-ha.org
> http://lists.linux-ha.org/mailman/listinfo/linux-ha-dev
> Home Page: http://linux-ha.org/
>