On Fri, Mar 28, 2014 at 04:15:31AM +0100, Jan Kara wrote: > When option broken_system_clock is set, we unconditionally skip checks > whether e2fsck should check the fs because the fs was last checked too > long ago. Distributions however set broken_system_clock by default as > some of the systems simply have the clocks broken and e2fsck stops the > boot because of that which is harsh given how minor issue that is (at > least for the fs). Thus checking every X days doesn't work with these > distributions. There are a couple of different ways in which the time can be considered "broken": > 1) The system has no battery-backed block and so the time is always January 1, 1970 on boot. These systems are taken care of by the TIME_INSANE checks. 2) The distribution the timezone is incorrect when e2fsck is run, so depending on whether you are east or west of GMT, the clock could appear to be up to 24 hours in the future, which would falsely trigger the e2fsck check. That is now taken care of by the accept_time_fudge hack, which is enabled by default. 3) The clock is totally insane, which means that it could be any value; it could have a time in 2037; it could have a time in the 1970's. This is what broken_system_clock means now. If the system clock is completely untrustworthy, you really do want to skip all time based checks, because there is no way to tell whether the times look "sensible" or not. If the clock warps forward by N years, it's still going to look sensible, and it can force a time based check when one shouldn't be needed. I think the issue is that there may be some distributions that set broken_system_lock way back in the past, before we added the accept_time_fudge (which was added in 2009). So if the concern is dealing with people who have systems in Western Europe whose RTC ticks localtime (as opposed to UTC), that problem was fixed by accept_time_fudge. And if the concern is systems in state #1, that was dealt with by the TIME_INSANE checks in 2010. So if those are the main concerns, you can simply get rid of setting broken_system_clock, since those problems are now solved by default. But if your worry is RTC clocks which are _totally_ bonkers, then we really have to do what we are currently doing. Besides, I thought these days, most folks aren't enabling time based checks any more. IMHO, the real right answer is that distributions should be setting folks to use LVM by default, and to do checks using snapshots every month or so run out of cron. - Ted -- To unsubscribe from this list: send the line "unsubscribe linux-ext4" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
