[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <20080316233242.DC9E226F995@magilla.localdomain>
Date: Sun, 16 Mar 2008 16:32:42 -0700 (PDT)
From: Roland McGrath <roland@...hat.com>
To: Oleg Nesterov <oleg@...sign.ru>
Cc: Andrew Morton <akpm@...ux-foundation.org>,
Davide Libenzi <davidel@...ilserver.org>,
"Eric W. Biederman" <ebiederm@...ssion.com>,
Ingo Molnar <mingo@...e.hu>,
Laurent Riffard <laurent.riffard@...e.fr>,
Pavel Emelyanov <xemul@...nvz.org>,
linux-kernel@...r.kernel.org
Subject: Re: [PATCH 4/5] don't panic if /sbin/init exits or killed
> But panic() isn't better? It doesn't provide any useful info.
It is not misleading in the same way. It's clear that going to look at the
kernel source is not the place to find the root of the problem.
> Well, I think the generic "if we have a chance to survive, we should try
> to survive" rule is good.
>
> If the boot init dies, at least the admin has a chance to figure out what
> has happened, and -o remount,ro /.
For me and you, I agree. I think the common case is that there is no admin
prepared to do any such thing, but just someone expecting a reboot to fix
things and preferring that a failing system reboot itself in the middle of
the night rather than wedge.
> Every BUG/BUG_ON in fact means the system is not useable, but still it does
> not panic(), but tries to proceed.
Many production systems probably set panic_on_oops. Having the init panic
behavior keyed on that seems fine to me. I just don't like the "kernel bug
at this source line" output when it's not true.
Thanks,
Roland
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists