On Mon, Oct 13, 2025, at 11:45 AM, Doug H. wrote:
> On Mon, Oct 13, 2025, at 7:21 AM, Chris Murphy wrote:

>> bootupd was at one time looking into how to keep multiple ESPs synced. 
>> But I'm not sure where that is now.
>
> Note that it is still allowed by the installer, at least it is with the 
> Xfce4 version.
> "It" being the use of MD raid 1 for the /boot/efi partition.

That is suboptimal.

> I am still on a legacy BIOS install, so have not actually used this, 
> but it does sound like it would be dangerous from what Chris is 
> describing.

e.g. a file is renamed on member A, a different file renamed on B. This is a 
trivial, metadata only change, the file data doesn't go anywhere.

But how is md going to deal with this when the two are used as an array? 
*shrug* But whatever drive it reads from, it's going to write to both. That's 
an inherently a bad setup if something can write to A and B independently of 
md. And the firmware is by specification allowed to this. As are EFI programs.

In the most typical ESP usage, disaster is probably unlikely due to few, if 
any, writes in the pre-boot environment. I'm not off hand aware of GRUB ever 
writing to the ESP. It might still use its own FAT driver, rather than the 
firmware's, in which case it would be a read-only driver anyway.

But you can imagine if this were a busy pair of file systems, writing to the 
two member drives outside the md driver, without repair > sync_action to force 
them to be the same, the resulting merged fs is totally invalid and who the 
hell knows what the vfat driver will do. But whatever it does will get written 
to both drives and surely break them both.

-- 
Chris Murphy
-- 
_______________________________________________
users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to