dangerous situation with shutdown process

[Lowell Gilbert]

Matthias Buelow <mkb at incubus.de> writes:

> The combination barriers+journal really seems to be very resilient
> to filesystem corruption. When it's implemented without errors, and
> the hardware doesn't do things like change bits randomly, I can't
> think of a way this scheme can be corrupted at all.

We keep trying to point out that barriers *can't* be enforced on the
hardware with many (most, and apparently an increasing percentage of)
ATA drives.  There is no semantic on these drives that allows you to
guarantee the journal block will be written before the corresponding
data block.  If you are sure that your drives do this properly, then
you are safe, but in that case there's no reliability problem with
softupdates, either.