On Thu, May 10, 2018 at 10:52:12AM +0530, Pavan Deolasee wrote: > I propose that we should always clear the minRecoveryPoint after promotion > to ensure that crash recovery always run to the end if a just-promoted > standby crashes before completing its first regular checkpoint. A WIP patch > is attached.
I have been playing with your patch and upgraded the test to check as well for cascading standbys. We could use that in the final patch. That's definitely something to add in the recovery test suite, and the sleep phases should be replaced by waits on replay and/or flush. Still, that approach looks sensitive to me. A restart point could be running while the end-of-recovery record is inserted, so your patch could update minRecoveryPoint to InvalidXLogRecPtr, and then a restart point would happily update again the control file's minRecoveryPoint to lastCheckPointEndPtr because it would see that the former is older than lastCheckPointEndPtr (let's not forget that InvalidXLogRecPtr is 0), so you could still crash on invalid pages? I need to think a bit more about that stuff, but one idea would be to use a special state in the control file to mark it as ending recovery, this way we would control race conditions with restart points. -- Michael
signature.asc
Description: PGP signature
