Re: Failover root devices

From	Drew DeVault <sir@cmpwn.com>
Newsgroups	linux.kernel
Subject	Re: Failover root devices
Date	2015-09-18 17:10 +0200
Message-ID	<qa5st-6aQ-17@gated-at.bofh.it> (permalink)
References	(8 earlier) <q9LWO-38s-19@gated-at.bofh.it> <q9M6u-3l9-33@gated-at.bofh.it> <q9M6u-3l9-39@gated-at.bofh.it> <q9M6u-3l9-37@gated-at.bofh.it> <qa5iP-5JO-23@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

> I personally think this is opening a can of worms. Now it's just a list
> of alternative root devices. But the kernel knows absolutely nothing
> about these. When is it fine to try an alternative? Why did the first
> one not work? Did we just not wait long enough? Or is it a failed RAID
> device? Or is it an encrypted disk that needs setup? Or is it on NFS and
> the network is not available (or we are lacking driver firmware)?

I don't think these are problems that aren't already inherent in a 
single root device via root=.

> It could actually introduce security problems: if I know that a device
> will fallback to an alternative root (under my control), I can try and
> DOS the primary root.

If you have physical access then the machine is yours to do with as you 
please.

--
Drew DeVault
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Thread

Re: Failover root devices Ortwin Glück <odi@odi.ch> - 2015-09-17 13:50 +0200
  Re: Failover root devices Drew DeVault <sir@cmpwn.com> - 2015-09-17 14:00 +0200
    Re: Failover root devices Richard Weinberger <richard.weinberger@gmail.com> - 2015-09-17 19:50 +0200
      Re: Failover root devices Drew DeVault <sir@cmpwn.com> - 2015-09-17 19:50 +0200
        Re: Failover root devices Richard Weinberger <richard@nod.at> - 2015-09-17 20:00 +0200
          Re: Failover root devices Drew DeVault <sir@cmpwn.com> - 2015-09-17 20:10 +0200
            Re: Failover root devices Richard Weinberger <richard@nod.at> - 2015-09-17 20:20 +0200
              Re: Failover root devices Drew DeVault <sir@cmpwn.com> - 2015-09-17 20:20 +0200
                Re: Failover root devices Richard Weinberger <richard@nod.at> - 2015-09-17 20:20 +0200
                Re: Failover root devices Drew DeVault <sir@cmpwn.com> - 2015-09-17 20:30 +0200
                Re: Failover root devices Drew DeVault <sir@cmpwn.com> - 2015-09-17 20:30 +0200
                Re: Failover root devices Ortwin Glück <odi@odi.ch> - 2015-09-18 17:00 +0200
                Re: Failover root devices Drew DeVault <sir@cmpwn.com> - 2015-09-18 17:10 +0200
                Re: Failover root devices Ortwin Glück <odi@odi.ch> - 2015-09-18 17:10 +0200
                Re: Failover root devices Austin S Hemmelgarn <ahferroin7@gmail.com> - 2015-09-18 17:40 +0200
                Re: Failover root devices Richard Weinberger <richard@nod.at> - 2015-09-17 20:30 +0200
              Re: Failover root devices Harald Hoyer <harald.hoyer@gmail.com> - 2015-09-17 20:30 +0200
                Re: Failover root devices Drew DeVault <sir@cmpwn.com> - 2015-09-17 20:30 +0200
                Re: Failover root devices Richard Weinberger <richard@nod.at> - 2015-09-17 20:40 +0200
                Re: Failover root devices Drew DeVault <sir@cmpwn.com> - 2015-09-17 20:40 +0200
                Re: Failover root devices Richard Weinberger <richard@nod.at> - 2015-09-17 20:50 +0200
                Re: Failover root devices Richard Weinberger <richard@nod.at> - 2015-09-17 20:30 +0200
      Re: Failover root devices Austin S Hemmelgarn <ahferroin7@gmail.com> - 2015-09-17 20:40 +0200
        Re: Failover root devices Richard Weinberger <richard@nod.at> - 2015-09-17 20:50 +0200
          Re: Failover root devices Austin S Hemmelgarn <ahferroin7@gmail.com> - 2015-09-18 16:50 +0200

csiph-web