[Debian-ha-maintainers] Bug#576511: drbd8-utils: Ships with violent default actions for various drbd fault, conditions - may cause dataloss.

[Lionel Sausin]

Dear maintainers,

To be clearer, the reboot is ordered in catastrophic conditions where
data loss will happen on the DRBD device whatever you do, because DRBD
has lost all the usable storage device - this is much like unplugging a
hard drive.
So rebooting is probably a good option when DRBD is vital to the system,
and that's what DRBD is supposed to be.

My humble opinion is that the default is acceptable, but it's certainly
surprising for new users.

Maybe the choice could be left to the user at installation time :
debconf could ask something like "We advise you configure DRBD to reboot
the system immediately when a serious problem arises that would cause
I/O errors.
Would you like DRBD to be configured to reboot in order to avoid I/O
errors ?
[Yes] / No"

Lionel Sausin.