From owner-freebsd-questions@freebsd.org Thu Jun 14 14:28:24 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8559D1008F43 for ; Thu, 14 Jun 2018 14:28:24 +0000 (UTC) (envelope-from julien@perdition.city) Received: from relay-b03.edpnet.be (relay-b03.edpnet.be [212.71.1.220]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "edpnet.email", Issuer "Go Daddy Secure Certificate Authority - G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 1638C6D057 for ; Thu, 14 Jun 2018 14:28:23 +0000 (UTC) (envelope-from julien@perdition.city) X-ASG-Debug-ID: 1528986494-0a88184afa6f1070001-jLrpzn Received: from mordor.lan (213.219.145.67.adsl.dyn.edpnet.net [213.219.145.67]) by relay-b03.edpnet.be with ESMTP id 7g7VXdP9oflOa4xG (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 14 Jun 2018 16:28:15 +0200 (CEST) X-Barracuda-Envelope-From: julien@perdition.city X-Barracuda-Effective-Source-IP: 213.219.145.67.adsl.dyn.edpnet.net[213.219.145.67] X-Barracuda-Apparent-Source-IP: 213.219.145.67 Date: Thu, 14 Jun 2018 16:28:14 +0200 From: Julien Cigar To: Frank Leonhardt Cc: freebsd-questions@freebsd.org Subject: Re: upgrade of an iSCSI zpool mirror Message-ID: <20180614142813.GB62135@mordor.lan> X-ASG-Orig-Subj: Re: upgrade of an iSCSI zpool mirror References: <20180611130407.GT48472@mordor.lan> <7ea3c3d0b1d05b032ff99fe977cf7a69@roundcube.fjl.org.uk> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="b5gNqxB1S1yM7hjW" Content-Disposition: inline In-Reply-To: <7ea3c3d0b1d05b032ff99fe977cf7a69@roundcube.fjl.org.uk> User-Agent: Mutt/1.9.2 (2017-12-15) X-Barracuda-Connect: 213.219.145.67.adsl.dyn.edpnet.net[213.219.145.67] X-Barracuda-Start-Time: 1528986494 X-Barracuda-Encrypted: ECDHE-RSA-AES256-GCM-SHA384 X-Barracuda-URL: https://212.71.1.220:443/cgi-mod/mark.cgi X-Virus-Scanned: by bsmtpd at edpnet.be X-Barracuda-Scan-Msg-Size: 2958 X-Barracuda-BRTS-Status: 1 X-Barracuda-Bayes: INNOCENT GLOBAL 0.5000 1.0000 0.0100 X-Barracuda-Spam-Score: 0.01 X-Barracuda-Spam-Status: No, SCORE=0.01 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=7.0 tests= X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.51958 Rule breakdown below pts rule name description ---- ---------------------- -------------------------------------------------- X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Jun 2018 14:28:24 -0000 --b5gNqxB1S1yM7hjW Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Jun 14, 2018 at 02:53:25PM +0100, Frank Leonhardt wrote: > On 2018-06-11 14:04, Julien Cigar wrote: > > Hello, > >=20 > > We have a "low-cost" active/passive HA ZFS based filer (with > > NFS4/SMB/... on top) which consist of two tiny HP Proliant DL20 > > with 2 x 2 To disks in each. > >=20 > > It works well, but those are still running FreeBSD 10.3 and I'd like to > > upgrade to 11.x. During the upgrade process the pool should be=20 > > read-only > > available. I planned to do something like: >=20 > > Has anyone ever done something similar and/or does it sound good to=20 > > you? >=20 > I've tried various combinations, but not that one I'm afraid. I'm not a= =20 > fan of iSCSI except as a work-around, but FWIW I can't spot anything=20 > wrong with your plan, but I'm not sure where NFS fits in. >=20 > You will probably want to upgrade the zpools at some point (optional). >=20 After some exchanges with people smarter than me in this area I got the confirmation that "There's no issue with the upgrade path." :) > I've yet to get a fully redundant ZFS implementation up and running, as= =20 > other solutions have been more useful - such as sending incremental=20 > datasets to a backup at a different location. I've also run it on top of= =20 > HAST, but it scared me. Yes, in fact all of this started after a question I started on freebsd-fs@ some years ago: https://lists.freebsd.org/pipermail/freebsd-fs/2016-June/023456.html To my suprise I had a lot of answers and it was an interresting discussion, you may want to check the whole thread if interested. >=20 > One day I plan to look at heartbeat/pacemaker (available in ports/net),= =20 > which is supposed to be the thing for it. >=20 Yep, I had an interresting exchange on IRC (#freebsd freenode) about it some days ago. It would be better than using a CARP only based solution to failover (which is quite easy to split brain). > In your situation, I think I'd proceed as follows: >=20 > Set up a spare machine (e.g. desktop). > Do a zfs send to it. > Turn off samba/nfs > Do a zfs send of any last minute changes. > Make the spare machine live, but read-only. >=20 As a security measure I have already a third "replication machine"=20 which zrep from the master, I could make the pool read-only from it > They relax and do whatever I wanted to reconfigure the rack servers. >=20 > Just a thought! Thanks :) >=20 > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.o= rg" --=20 Julien Cigar Belgian Biodiversity Platform (http://www.biodiversity.be) PGP fingerprint: EEF9 F697 4B68 D275 7B11 6A25 B2BB 3710 A204 23C0 No trees were killed in the creation of this message. However, many electrons were terribly inconvenienced. --b5gNqxB1S1yM7hjW Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEE7vn2l0to0nV7EWolsrs3EKIEI8AFAlsie3oACgkQsrs3EKIE I8AYwhAA693hEsSN2CYtSsRP7dhueGUUsGdkxXioDq7uBZpDQS48AUvJ2DcQXH9E f89SSBaWHIx3y6a/jqDEl3AdUum4ehJNgyOiUv5vYdIj0auGX1SkoLSRWOH8wpeo xrcuAyQNnb8vYmMXvq/9r2NYiI/FT4T3qBS4DzPdFzkDTF4NXv/Z7tLGH3z6pbJs 30JiM38Kew4kLVJmy0l/75Soxo3SUPRaayQ8uJFs89idjk+00hFEoC+XF2HE/Avu Qg/zLVEGZDpiiDgKFNAm9OCt1PTXmtrCGCPnSdEjMPEoyLB5nd0ByqLmduFcIY0o jle99yqHZcyCtNNBTJsBhvjJgqovxnXJsHgPyrrx5Sk8RBR4jHMSLtqUd4qOJgBt bi8hbgwrIeKpSn+SKJckHucoQGxEzUhaTSAmN7r485RY6pB5PeQSUTEQ06QOJHy7 5NCp1jr5MQ0mvszCGY27+WrLUnz62SIzjEIpy0ELF/rnwJJYmKJ82vz4mhpkT+ez PozepgVr7lCVdpzulGluR8/vFWYjdM9J4f6vv+nsznjHrU6gLWb4djUWKZxDGQGD pN8XGCSdfEi8m9mnIAVzT7z/98hOxcuMp0NCsmeXWr+8OeAwiKwp7NKe/5/dm6JC 1Zl9/y9gU5L/ZUPq7AGGvM78bZjVZ7lPHuDL5b/hjakSNiZ+e2A= =BrEz -----END PGP SIGNATURE----- --b5gNqxB1S1yM7hjW--