094a2a4263
" Not emitting partition_end for a partition is incorrect. SStable writer assumes that it is emitted. If it's not, the sstable will not be written correctly. The partition index entry for the last partition will be left partially written, which will result in errors during reads. Also, statistics and sstable key ranges will not include the last partition. It's better to catch this problem at the time of writing, and not generate bad sstables. Another way of handling this would be to implicitly generate a partition_end, but I don't think that we should do this. We cannot trust the mutation stream when invariants are violated, we don't know if this was really the last partition which was supposed to be written. So it's safer to fail the write. Enabled for both mc and la/ka. Passing --abort-on-internal-error on the command line will switch to aborting instead of throwing an exception. The reason we don't abort by default is that it may bring the whole cluster down and cause unavailability, while it may not be necessary to do so. It's safer to fail just the affected operation, e.g. repair. However, failing the operation with an exception leaves little information for debugging the root cause. So the idea is that the user would enable aborts on only one of the nodes in the cluster to get a core dump and not bring the whole cluster down. " * 'catch-unclosed-partition-sstable-write' of https://github.com/tgrabiec/scylla: sstables: writer: Validate that partition is closed when the input mutation stream ends config, exceptions: Add helper for handling internal errors utils: config_file: Introduce named_value::observe() (cherry picked from commit95c0804731) (cherry picked from commitcf4c238b28)
59 lines
1.7 KiB
C++
59 lines
1.7 KiB
C++
/*
|
|
* Copyright 2016 ScyllaDB
|
|
*/
|
|
|
|
/*
|
|
* This file is part of Scylla.
|
|
*
|
|
* Scylla is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* Scylla is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with Scylla. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include <seastar/core/sstring.hh>
|
|
|
|
#include <functional>
|
|
#include <system_error>
|
|
|
|
namespace seastar { class logger; }
|
|
|
|
typedef std::function<bool (const std::system_error &)> system_error_lambda_t;
|
|
|
|
bool check_exception(system_error_lambda_t f);
|
|
bool is_system_error_errno(int err_no);
|
|
|
|
class storage_io_error : public std::exception {
|
|
private:
|
|
std::error_code _code;
|
|
std::string _what;
|
|
public:
|
|
storage_io_error(std::system_error& e) noexcept
|
|
: _code{e.code()}
|
|
, _what{std::string("Storage I/O error: ") + std::to_string(e.code().value()) + ": " + e.what()}
|
|
{ }
|
|
|
|
virtual const char* what() const noexcept override {
|
|
return _what.c_str();
|
|
}
|
|
|
|
const std::error_code& code() const { return _code; }
|
|
};
|
|
|
|
// Controls whether on_internal_error() aborts or throws.
|
|
void set_abort_on_internal_error(bool do_abort);
|
|
|
|
// Handles reporting of violation of internal invariants.
|
|
// Callers can assume that it does not return. May throw.
|
|
[[noreturn]] void on_internal_error(seastar::logger&, const seastar::sstring& reason);
|