Hi, > > I think this highlights exactly what I'm trying to emphasise: in > actual, shared-nothing systems like this, there's no possible > guarantee of "never". There are possible guarantees of "very > rarely". The problem is, you're already trying to address a teeny > portion of the likely events on your machines. So you have to assume > that more than one thing might break at the same time, and have a > recovery plan for it. I submit that a recovery plan of "restore from > pg_dump" is usually not going to be enough if it was worth the cost > and hassle of setting up shared disk failover. YMMV, of course. > yes, I did a restore from a dump with pg_dump, that took over a day. maybe I can speed it up a bit, but this is going to take too long. Sebastian
