Multi-disk VM snapshot delete leaves DB inconsistent when one disk's merge times out after another disk's merge already succeeded
Nadie ha tomado este issue todavía.
Evaluación
- Dificultad
- 5/5
- Tiempo estimado
- Más de una semana
- Aptitud para principiantes
- 35/100
- Tipo de issue
- Error
- Claridad
- Bastante claro
- Estado de actividad
- Activo
- Stack tecnológico
- java
- Área
- databases, infrastructure
Línea de trabajo
Begin with the reproduction on KVM using SharedMountPoint, Filesystem, or NetworkFilesystem primary storage and a multi-disk VM, focusing on the snapshot deletion path and qcow2.delta.merge.timeout behavior. Done means a timed-out disk cannot leave another successfully merged disk pointing to a deleted file, with the operation either remaining atomic or persisting per-disk completion consistently.
Escrito por el modelo de indexación a partir del texto del issue.
Descripción
problem
Deleting a disk-only VM snapshot on a multi-disk VM can leave CloudStack's database permanently inconsistent with the actual state of primary storage if one disk's merge completes successfully while another disk's merge in the same operation times out. The disk that succeeded has its underlying file correctly committed and removed on the hypervisor, but the corresponding database update is never applied - because the whole operation is treated as a single all-or-nothing unit. The affected volume is left pointing at a file that no longer exists, and the VM cannot subsequently be started.
versions
4.21.0.0+
KVM hypervisor, primary storage of type Filesystem / NetworkFilesystem / SharedMountPoint, VM with 2+ disks, disk-only VM snapshot (no memory).
The steps to reproduce the bug
- Create a VM with at least two disks on KVM/
SharedMountPoint(orFilesystem/NetworkFilesystem) primary storage - one small disk, one large disk with enough real delta data that a commit takes noticeably longer thanqcow2.delta.merge.timeout(or 1 hour, if using the running-VM/non-events path). - Take a disk-only VM snapshot.
- Write enough data to the large disk that its subsequent commit will exceed the timeout.
- Delete the VM snapshot.
- Observe the small disk's merge completes and its delta file is deleted, while the large disk's commit is killed by the timeout.
What to do about it?
- The operation is fully atomic: no disk's file is deleted/merged unless all disks in the snapshot are confirmed to have completed successfully, and the operation cleanly fails/rolls back to a well-defined error state if any disk times out; or
- Per-disk completion is persisted incrementally as each disk finishes, so a disk that successfully merged is never left with a database record pointing at a deleted file, regardless of what happens to other disks in the same VM snapshot.
- Lenguaje dominante
- Java
- Estrellas
- 3.1k
- Forks
- 1.4k
- Merge medio
- 6 d 20 h
- PR fusionados (30 d)
- 27
Guía de contribución
Primeros pasos
- Lee el issue completo y luego la guía de contribución del proyecto.
- Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
- Haz un fork del repositorio y trabaja en una rama.
- Abre un pull request que haga referencia al número del issue.
Más de apache/cloudstack
-
bug
Dificultad 1/5 Menos de una hora Aptitud para principiantes 90/100
apache/cloudstack#14222 ·
-
create-kubernetes-binaries-iso.sh builds the ISO without setting a volume ID on EL8 based os's Abiertobug component:kubernetes
Dificultad 1/5 Menos de una hora Aptitud para principiantes 88/100
apache/cloudstack#14180 ·
-
bug component:projects component:UI
Dificultad 1/5 Menos de una hora Aptitud para principiantes 88/100
apache/cloudstack#14070 · 5 comentarios ·
-
component:backup
Dificultad 2/5 1-3 horas Aptitud para principiantes 76/100
apache/cloudstack#14013 ·
-
KVM agent fails to connect to Ceph RBD storage pool after upgrading Ceph client to Tentacle 20.2.4 Abiertobug component:ceph
Dificultad 2/5 1-3 horas Aptitud para principiantes 78/100
apache/cloudstack#13989 · 3 comentarios ·
Todos los issues de apache/cloudstack
Issues similares
-
bug untriaged
Dificultad 2/5 1-3 horas Aptitud para principiantes 84/100
opensearch-project/ml-commons#5094 ·
-
bug
Dificultad 2/5 1-3 horas Aptitud para principiantes 85/100
-
emitter:client:csharp feature
Dificultad 2/5 1-3 horas Aptitud para principiantes 72/100
-
affects/8.10 affects/8.9 component/clients kind/bug likelihood/mid severity/mid
Dificultad 2/5 1-3 horas Aptitud para principiantes 78/100
-
Two open-case totals on one screen: the Programs tile says 15,858 and the nav badge says 15,868 Abiertobug frontend maui-pilot
Dificultad 2/5 1-3 horas Aptitud para principiantes 72/100