[CASSANDRA-10112] Refuse to start and print txn log information in case of disk corruption

• Type: Improvement
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 3.6
• Component/s: Legacy/Local Write-Read Paths
• Labels: doc-impacting
• Assignee: Stefania Alborghetti
• Reporter: Stefania Alborghetti

Authors

Stefania Alborghetti

Reviewers

Tom Hobbs

• Created: 18/Aug/15 00:42
• Updated: 16/Apr/19 09:30
• Resolved: 10/Mar/16 20:44

Description

Transaction logs were introduced by CASSANDRA-7066 and are read during start-up. In case of file system errors, such as disk corruption, we currently log a panic error and leave the sstable files and transaction logs as they are; this is to avoid rolling back a transaction (i.e. deleting files) by mistake.

We should instead look at the disk_failure_policy and refuse to start unless the failure policy is ignore.

We should also consider stashing files that cannot be read during startup, either transaction logs or sstables, by moving them to a dedicated sub-folder.

Issue Links

• is related to: CASSANDRA-9812 Handle corrupted files during startup.
• is related to: CASSANDRA-7066 Simplify (and unify) cleanup of compaction leftovers