I apologize for not grabbing more information before the evidence was gone, but I think there may be a vulnerability to database corruption on PITR recovery if a stop is done with the "fast" option right after a database logs "archive recovery complete". We normally have about 17 seconds between that and the "database system is ready" message for a particular database. Someone was watching the log and issued a fast stop about 1.5 seconds after the "archive recovery is complete" message. When the database came back up, it was corrupted. (The first problem message was about a bad sibling pointer, but the wheels pretty much fell off after that.) He deleted the database instance, got a fresh dump, and tried again without stopping the server at that point, and all is well. The dump used in the problem recovery attempt is now gone. I hesitate to report this since my information is so sketchy, but thought you might want the report anyway. The source and target of this PITR-style copy were both PostgreSQL 8.2.4 on SuSE Linux. For more details on the target see my recent posts about the corrupted database which turned out to be caused by bad hardware and outdated drivers. ( http://archives.postgresql.org/pgsql-admin/2007-06/msg00151.php ) The failed recovery was on that box, after fixing all known hardware and driver issues. No assistance needed. -Kevin
---------------------------(end of broadcast)--------------------------- TIP 2: Don't 'kill -9' the postmaster
