Skip to content

Reject snapshot requests when read-only#1914

Merged
jmpesp merged 1 commit intooxidecomputer:mainfrom
jmpesp:reject_read_only_snapshot
Mar 23, 2026
Merged

Reject snapshot requests when read-only#1914
jmpesp merged 1 commit intooxidecomputer:mainfrom
jmpesp:reject_read_only_snapshot

Conversation

@jmpesp
Copy link
Copy Markdown
Contributor

@jmpesp jmpesp commented Mar 23, 2026

The root of the problem behind oxidecomputer/omicron#9855 was that the downstairs was retrying an job that would never succeed, and notifying the upstairs every time it failed in a hot loop. This consumed memory until it was entirely exhausted.

Fix this by rejecting snapshot requests when read-only in the Upstairs. Note we don't need to check this in Volume because each Upstairs in a Volume should be read-only if any of them are.

Fixes #1856

The root of the problem behind oxidecomputer/omicron#9855 was that the
downstairs was retrying an job that would never succeed, and notifying
the upstairs every time it failed in a hot loop. This consumed memory
until it was entirely exhausted.

Fix this by rejecting snapshot requests when read-only in the Upstairs.
Note we don't need to check this in Volume because each Upstairs in a
Volume should be read-only if any of them are.

Fixes oxidecomputer#1856
@jmpesp jmpesp requested review from leftwo and mkeeter March 23, 2026 15:44
*/

if snapshot_details.is_some() {
if self.cfg.read_only {
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we expect to be calling this if things are behaving as expected?
If yes, then maybe we don't want to log it.

If it's not expected, then it's fine to leave the log.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's definitely not expected - if anything it'd be great to package this up as a fault soemhow (aka oxidecomputer/omicron#10118)

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, we should start making a list of these places in crucible where we want to tell someone about it, but don't know how to.

@jmpesp jmpesp merged commit c32ccfe into oxidecomputer:main Mar 23, 2026
17 checks passed
@jmpesp jmpesp deleted the reject_read_only_snapshot branch March 23, 2026 18:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Return an error from the Upstairs if trying to snapshot a read-only region set

2 participants