Live data from Hacker News

Case study: recovery of a corrupted 12 TB multi-device pool

github.com

31–40 of 73 posts

Re: Case study: recovery of a corrupted 12 TB multi-device pool

#31

> Case study: recovery of a severely corrupted 12 TB multi-device pool, plus constructive gap analysis and reference tool set #1107 Please don't be btrfs please don't be btrfs please don't be btrfs...

Where are all of the ZFS corruption stories? Or are there simply fewer of those?

Re: Case study: recovery of a corrupted 12 TB multi-device pool

#32
post #18

Earlier quoted context omitted.

What are the alternatives to btrfs? At 12 TB data checksums are a must unless the data tolerate bit-rot. And if one wants to stick with the official kernel without out-of-tree modules, btrfs is the only choice.

lvm offers lvmraid, integrity, and snapshots as one example. It's old unsexy tech, but losing data is not to my taste lately...

lvm only supports checksums for metadata. It does not checksum the data itself. For checksums with arbitrary filesystems one can have dm-integrity device rather than LVM. But the performance suffer due to separated journal writes by the device.

Re: Case study: recovery of a corrupted 12 TB multi-device pool

#33
post #31

> Case study: recovery of a severely corrupted 12 TB multi-device pool, plus constructive gap analysis and reference tool set #1107 Please don't be btrfs please don't be btrfs please don't be btrfs...

Where are all of the ZFS corruption stories? Or are there simply fewer of those?

Not sure about the stats, but it does feel like there are fewer. So from what I know encryption and sending fs state had bugs in ZFS.

And on btrfs anything above raid1 (5,6 etc) has had very serious bugs. Actually read an opinion somewhere (don't remember where) raid5,6 on btrfs cannot work due to on-disk format being just bad for the case. I guess this is why raid1c3/c4 is being promoted and worked on now?

Re: Case study: recovery of a corrupted 12 TB multi-device pool

#34

Earlier quoted context omitted.

> if one wants to stick with the official kernel without out-of-tree modules I wonder how could a requirement like that possibly arise. Especially with an obvious exception for zfs.

Bcachefs also fulfills the requirement of checksums (and multi device support). Also out of tree.

Isn't bcachefs even younger and less polished than btrfs? It does show more promise as btrfs seems to have fundamental design issues... but still I wouldn't use that for my important data.

Re: Case study: recovery of a corrupted 12 TB multi-device pool

#35
post #32

Earlier quoted context omitted.

lvm offers lvmraid, integrity, and snapshots as one example. It's old unsexy tech, but losing data is not to my taste lately...

lvm only supports checksums for metadata. It does not checksum the data itself. For checksums with arbitrary filesystems one can have dm-integrity device rather than LVM. But the performance suffer due to separated journal writes by the device.

I said lvmraid[1][2].

[1] https://www.man7.org/linux/man-pages/man7/lvmraid.7.html#DAT...

[2] https://docs.redhat.com/en/documentation/red_hat_enterprise_...

Re: Case study: recovery of a corrupted 12 TB multi-device pool

#36
post #18

To theal author: did you continue using btrfs after this ordeal? An FS that will not eat (all) your data upon a hard powercycle only at the cost of 14 custom C tools is a hard pass from me no matter how many distros try to push it down my throat as 'production-ready'... Also, impressive work!

What are the alternatives to btrfs? At 12 TB data checksums are a must unless the data tolerate bit-rot. And if one wants to stick with the official kernel without out-of-tree modules, btrfs is the only choice.

Good thing all disks these days have data checksums, then!

(50TB+ on ext4 and xfs, and no, no bit rot. Yes, I've checked most of it against separate sha256sum files now and then. As long as you have ECC RAM, disks just magically corrupting your data is largely a myth.)

Re: Case study: recovery of a corrupted 12 TB multi-device pool

#37
post #16

> This is not a bug report. [...] The goal is constructive, not a complaint. Er, I appreciate trying to be constructive, but in what possible situation is it not a bug that a power cycle can lose the pool? And if it's not technically a "bug" because BTRFS officially specifies that it can fail like that, why is that not in big bold text at the start of any docs on it? 'Cuz that's kind of a big deal for users to know.…

btrfs's reputation is not great in this regard.

As far as I understand, single device and RAID1 is solid, but as soon as you want to do RAID1+0 or RAID5/6 you’re entering dangerous territory with BTRFS.

Re: Case study: recovery of a corrupted 12 TB multi-device pool

#38
post #34

Earlier quoted context omitted.

Bcachefs also fulfills the requirement of checksums (and multi device support). Also out of tree.

Isn't bcachefs even younger and less polished than btrfs? It does show more promise as btrfs seems to have fundamental design issues... but still I wouldn't use that for my important data.

I don't disagree. Gotta backups for important data either way too!

Just talking about filesystems with checksumming (and multidevice). Any new filesystem to support these features is going to be newer.

I've had both btrfs and bcachefs multidevice filesystems lock up read-only on me. So no real data loss, just a pain to get the data into a new file system, the time it was an 8 drive array on btrfs.

Re: Case study: recovery of a corrupted 12 TB multi-device pool

#40
post #31

> Case study: recovery of a severely corrupted 12 TB multi-device pool, plus constructive gap analysis and reference tool set #1107 Please don't be btrfs please don't be btrfs please don't be btrfs...

Where are all of the ZFS corruption stories? Or are there simply fewer of those?

Most of them are from new features that didn't get a proper shakedown test, like encryption.
Post reply on HN