On Mon, Mar 15, 2010 at 08:27:25PM -0500, Anthony Liguori wrote: >> Actually cache=writeback is as safe as any normal host is with a >> volatile disk cache, except that in this case the disk cache is >> actually a lot larger. With a properly implemented filesystem this >> will never cause corruption. > > Metadata corruption, not necessarily corruption of data stored in a file. Again, this will not cause metadata corruption either if the filesystem loses barriers, although we may lose up to the cache size of new (data or metadata operations). The consistency of the filesystem is still guaranteed. > Not all software uses fsync as much as they should. And often times, > it's for good reason (like ext3). If an application needs data on disk it must call fsync, or there is no guaranteed at all, even on ext3. And with growing disk caches these issues show up on normal disks often enough that people have realized it by now. > IIUC, an O_DIRECT write using cache=writeback is not actually on the > spindle when the write() completes. Rather, an explicit fsync() would > be required. That will cause data corruption in many applications (like > databases) regardless of whether the fs gets metadata corruption. It's neither for O_DIRECT without qemu involved. The O_DIRECT write goes through the disk cache and requires and explicit fsync or O_SYNC open flag to make sure it goes to disk. -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html