[PVE-User] Migration from server down

Alessandro Briosi ab1 at metalit.com
Thu May 4 10:06:15 CEST 2017


Il 04/05/2017 09:26, Fabian Gr├╝nbichler ha scritto:
> because without HA/fencing you have no guarantee that the other node
> is actually off, and not just not reachable. the same applies for any
> guests potentially running there. "stealing" the guest (configuration)
> is therefor potentially dangerous, and needs to be done manually. but
> yes, it is just as simple as verifying that the guest is actually not
> running on the other node (e.g., because the node is known to be
> physically off) and that it has no local dependencies (storage or
> otherwise) and then moving the file in /etc/pve.
>
> if there were a button for this on the GUI, people would use it without
> understanding the consequences, and then blame the tool instead of the
> user when something goes wrong ;)
>
> with HA, the HA stack takes care of this using
> - proper locking
> - fencing of non-quorate nodes
>
> this ensures that when the HA stack steals a config after the
> appropriate timeouts/.. have happened, there cannot be a
> conflict/inconsistency.

I understand, even if the host has no quorum it might be still running
the VM.

Maybe I'd prefer having a big fat warning before doing it than have the
customer call me 'cause the server is down and cannot be migrated from
the GUI.


Thanks,
Alessandro


More information about the pve-user mailing list