Type: Featuregood first issue
説明
System information
| Type | Version/Name |
|---|---|
| Distribution Name | all |
| Distribution Version | all |
| Linux Kernel | all |
| Architecture | all |
| ZFS Version | all |
| SPL Version | all |
Describe the problem you're observing
There are no safeguards when destroying. Whatever is the argument of zfs destroy, it will get destroyed. Issuers of the destroy command are humans and humans can make mistakes: for example in shell scripts that generate destroy commands, typos etc.
A minimal protection mechanism could reject a destroy action if the type of the dataset to be destroyed does not match the dataset type specified in command line, similar to how zfs list -t works, so for example zfs destroy -t filesystem pool/volumename or zfs destroy -t snapshot pool/filesystem would fail.