The "virtual node" will run on a separate hypervisor on a NAS (phpvbox on x86_64). It will just be there for the quorum, that's why I have to take care no VM will migrate on it (inception syndrome ...).
Ok thanks, got the point (fencing) !
Can I add a 3rd "virtual node" (installed on a VM hosted on one NAS for instance) ? And add it to the cluster together with the 2 physical nodes and then make sure that no VM will migrate on it ?
I guess we can also make it configurable.
Is this patch going to be supplied at some point. This is something we are still waiting on and could really use.
A shutdown/reboot does not initiate a failover/switch of nodes, but if I do a power off via ILO it does.
This is a manual action, and thus you are aware that the node shuts down. So if you want, you can migrate all VMs before you shut the node down.
I get your guys reasoning, but it would be great if you would take your users input as well.
I see that you want this behavior, but from my point of view this makes things much more complex, and is most time not what
an user wants (because it result in long delays to shutdown a node). Please not that migrating all VM can take a very long time and produces high network traffic.
This is a manual action, and thus you are aware that the node shuts down. So if you want, you can migrate all VMs before you shut the node down.
Why not just allow the user to make that decision them selves? If they feel its the better decision/result for their enviroment, then they should be able to make that decision.
You are already free to implement what you need. Just send patches ...
If I was a programmer I would have done that years ago.
I guess a customer with alot of subscriptions just isn't good enough.
Sigh! I do not implement it because I think it is dangerous and error prone. And I do not think it
is just a few lines of codes...
We already spent much time to implement the current shutdown/restart behavior, and
I think the current solution is not that bad. I guess you are aware that shutdown and
restart behave completely different?
Shutdown: Stop VM. HA will move VMs to other nodes.
Restart: Stop and freeze VMs. HA will not move VMs. Instead, they will be restarted when the node comes up again.
I honestly feel these are decisions which should be left up to the Administrator. Similar to the decision of using SSH on live migration, you also felt that was insecure, but ultimately it should be left up to us to make that type of decision based on our environment.
Sorry, but it seems that I simply do not understand what you want exactly? We already have insecure live migrations, and we also have migrate on shutdown. You can already do those things!
An option at VM level like "Migrate on shutdown/reboot = yes/no" should be great. Set it to "no" by default.