Re: Annex E, GLADE and fault-tolerance

["Dr. Adrian Wrigley" <amtw@linuxchip.demon.co.uk.uk.uk>]

Francisco Javier Loma Daza wrote:

 > Can you make a trivial passive partition on which install the boot
 > server? as this partition will not contains any code, can be assumed
 > that it will not die unexpectly, but if you don't feel good, you can

I don't think the bootserver can be passive - doesn't it run code to
allocate partitionIDs and control termination?

 > make another (the real server for example) a boot mirror with the
 > boot_mirror command line option. The real server can be another
 > partition that can be terminated alone, leaving the passive boot
 > partition running.

I have adopted a tactic like this.  The boot server runs continuously,
and since it does very little, is robust.  All other partitions can
be restarted.

The real server is in a separate partition, that will be restarted, if
necessary (for software upgrades, or program error).

The question of boot_mirrors isn't very important in my application,
where only one mahine is involved at present.  I have been unable to
get boot_mirror to work for me - maybe I don't understand it properly.

Unfortunately, separating the boot server and the real server hits
a serious bug, presumably in the PCS.  I shall post this separately.

 > I have no time for test but I hope that helps

Thank you for your suggestions.
--
Dr. Adrian Wrigley, Cambridge