* Tue Dec 09 2007 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 2.0.8 - bug fixes and enhancements
+ Allow colocation based on node attributes other than #id
+ SAPDatabase and SAPInstance resource agents added.
+ Core/CRM: Improvements to the memory allocation, message, and string
handling libraries result in an overall speed-up of 65%.
+ CRM: Fix ISO date handling for Jan 01 of any year.
+ CRM: Only update the voted hashtable with no-votes for the current
election.
+ RA: IPaddr: Support netmask both in CIDR and in dotted-quad notation.
+ logd: Fix trailing random byte in log messages (OSDL 1268).
+ heartbeat: Work around a glibc/times() bug to prevent failures every
497 days on 32-bit Linux (OSDL 1407).
+ heartbeat: Retransmits were requested more often than they'd be
honored (OSDL 1455).
+ CTS/PE: Introduce CRM option "startup_fencing" to disable fencing of
unseen nodes, because CTS can't handle this.
+ PE: Split-off "network-delay" option from global_timeout to separate
network delays from action timeouts.
+ PE/CRM: Binaries now support being called with "metadata" command to
document the complete list of options in the CIB.
+ PE: DTD: Include start_delay as a property of operation objects.
+ PE: Fix implementation of date_spec when no range is specified.
+ PE: Enforce clone_node_max for already running resources.
+ PE: Clones were not being stopped on node shutdown.
+ PE: Allow resource colocation based on node attributes other than #id
(node_attribute option added to rsc_colocation constraint).
+ PE: Improved handling when timeout < start_delay (OSDL 1421).
+ PE: Pre-notifications for promote occured before start was completed
(OSDL 1447).
+ PE: Allow any two pairs of actions to be specified for rsc_order (OSDL
1452).
+ PE: Handle asymmetric clusters where RAs are not installed on all
nodes.
+ PE: Allow resource stickiness and failure stickiness to change based
on node attributes.
+ CIB: Fix update_attr() causes attrd to hang at shutdown when there is
no DC (OSDL 1432).
+ CIB: Corrupted config file prevents heartbeat restart (OSDL 1385).
+ CIB: Startup processing improvements; DTD validation will be
automatically activated if the CIB on-disk validates.
+ TE: Fix memory leak.
+ TE: Failcount wasn't being updated in all cases.
+ TE: never update the CIB with unconfirmed stop actions (OSDL 1435).
+ CTS/RA: Replace OCFMSDummy with Stateful RA.
+ CCM: Centralize quorum calculation on the transition leader.
+ CCM: Support split-site and external quorum servers.
+ CRM: Ignore status update for non-members (ie, ping nodes).
+ LRM: Don't postpone postponed resources.
+ LRM: Fix restart in case an lrmd is already running (OSDL 1333).
+ LRM: Fix overflow in RA output handling (OSDL 1433).
+ mgmtd: Robustness and memory leak fixes.
+ mgmtd: make the port used configurable (OSDL 1390).
+ haresources2cib.py: Improve v1 to v2 conversion tool (OSDL 1415).
+ GUI: ping nodes appear as failed in gui (OSDL 1394).
+ GUI: Reduce duplicates in RA list by only showing the OCF one if both
ocf and hb RA exist) (OSDL 1338).
+ GUI: Add new resource to currently selected group (OSDL 1414).
+ GUI: support all attributes of operations (OSDL 1372).
+ GUI: Create first resource along with a new group; delete group when
last resource is removed (OSDL 1287).
+ GUI: Set defaults for clones and m/s RAs (OSDL 1352).
+ GUI: Use meta-data defaults when creating actions (OSDL 1351).
+ GUI: GUI: start all sub resources when we start a group or a clone
(OSDL 1449).
+ GUI: support ordered==false or non-collocated==false groups (OSDL
1257).
+ stonithd: Fix memory leak.
+ stonithd: Remove reliance on farside_pid (OSDL 1412).
+ stonith external/riloe: Make the login name and iLo device address
configurable.
+ crm_resource: Add manpage.
+ RA: PureFTPd, mysql, ManageVE (to manage an OpenVZ container),
ManageRAID, WAS6 (Websphere 6) added.
+ RA: Include SAPInstance and SAPDatabase (FATE 2172).
+ RA: IPaddr cleanup to avoid race conditions in the script. Report
status failure when an IPaddr is active on a different interface but
allow it to be stopped.
+ RA: IPaddr2 fixes for loopback bound addresses.
+ RA: Filesystem reported wrong status/monitor results for OCFS2 in some
circumstances (Novell 187080).
+ RA: Improve heartbeat v1 wrappers.
+ RA: Fix db2 monitor operation.
+ RA: ldirectord: Make the emailalert and emailalertfreq options global
as well as non-global, make checkcount global as well as per-virtual,
add radius check, improvements to documentation.
+ RA: pgsql: Make server logfile configurable and implement
validate-all. New parameter ctl_opt added to pgsql to support
additional options for pg_ctl.
+ CRM: First beginnings of a cluster-wide shell (FATE ...)
+ BEAM / Coverity induced fixes.
+ Minor compatibility fixes (OSDL 1405).
+ Logging improvements all over the place.
+ Extended support for master-slave resources (FATE 300723).
+ OCF RA API compliance checker (FATE 300737).
+ Support weak and uni-directional collocation constraints (FATE
300792).
+ Many bugfixes.
* Thu Aug 03 2006 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 2.0.7 - bug fix and a few enhancements release
+ Important steps:
- Prior to the update, make sure all elements (instance_attributes
etc) in the CRM configuration have valid id attributes, or set the
ignore_dtd option to true. Otherwise, the new version will refuse
to start.
+ SECURITY FIX:
- Remote Denial of Service attack (#195068, CVE-2006-3121).
- Local Denial of Service attack (#194444, CVE-2006-3815).
(actually fixed in 2.0.6)
+ Enhancements:
- Improved log messages.
- ptest can now read compressed XML directly. Do not include
optional actions and dependancies in ptest output by default.
- crm_resource will now warn and demand exact specification when
trying to modify an attribute while several sets are present.
+ Bugfixes:
- Small fix from Serge Dubrouski <sergefd@gmail.com> for one
annoying problem when PostgreSQL isn't installed on a box and one
tries to run the script.
- stonithd log message did not always indicate an error (OSDL 1379)
- lrmd now limits itself to a maximum of 4 child processes, to avoid
overloading the node and causing too long delays.
- Improvements and fixes for Solaris 10.
- pengine: Processing of pending probes; should not be treated as if
the resource is running or in a known state.
- target_role now is only taken into account for managed resources.
- cib: Detect more cases where the nodes section needs to be
refreshed.
- More accurately determine node status. (OSDL 1369)
- Filter out stop requests that would require a resource to be
added. (OSDL 1369)
- Send filtered resource "stops" as successes as to not block
waiting for filtered actions.
- By default pass the TE graph via IPC until its too large for IPC
to deal with, only then fall back to passing via the disk.
- Stopping of stonith resources can never require stonith, even if
the node its running on failed; prevent graph loop. (OSDL 1376)
- STONITH events need to inputs to start events (not stops), to
avoid graph loop in combination with "stop before" dependencies
(ie, groups).
- crmd: Dont stall the FSA if we try to invoke the TE after we've
stopped it.
- Always unpack the correct part of a diff operation; diffs should
now apply in more cases, reducing the need for full refreshs.
- Correctly observe --disable-snmp-subagent during build.
- In some states the membership is invalid and shouldn't be
referenced. (OSDL 1377)
- Fix a use-before-null-check issue in lrmd. (Coverity #48)
- OCF Resource Agents outside the default path were incorrectly
found to be not executable.
- ccm: hostcache and delnodecache files should not be authoritative
if autojoin is disabled. (OSDL 1226)
- With autojoin, llm_get_nodecount() can't return the real max nodes
anymore, this may cause memory corruption. (OSDL 1382)
- Fix a memory corruption in membership layer, more frequently
observed with larger (>5) clusters.
- Change the default api-auth for pingd to uid=root
- Dummy RA now OCF compliant.
- Fix pingd RA metadata to be XML compliant.
- Actually use RPMREL in the spec file.
+ KNOWN BUGS:
- When running a cluster of nodes of very different speeds temporary
membership anomalies may occasionally be seen. These correct
themselves and don't appear to be harmful. They typically
include a message something like this:
WARN: Ignoring HA message (op=vote) from XXX: not in our membership list
* Thu Jul 13 2006 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 2.0.6 - bug fix and a few enhancements release
+ Added the ability to start/stop groups from the GUI
+ Fixed a few monitoring bugs in the Apache resource agent
+ Changed the name of the netmask parameter to the IPaddr and IPaddr2
resource agents. This is because the netmask must be specified
in CIDR format. The new name is cidr_netmask. It will continue
to work the old way.
+ Changed target_role so that when you stop a resource, all the resources
which depend on it also stop - all in the proper order.
+ Many enhancements
default_resource_failure_stickiness
OCFS2 cluster filesystem support
new VIPArip resource agent
new SysInfo resource agent
new Oracle resource agents
Add cluster naming directive
Added node quorum voting weights
Added site declaration
ha_propagate command
allow NFS to run as a cloneable filesystem
haresources2cib extensions
added cibadmin man page
Make startup fencing optional (for the brave)
Many CIM improvements
+ Many GUI improvements
added hb_gui symlink in /usr/bin
significant speedup
added support for types of groups:
move resources up/down in groups
resources default to being stopped
stonith RA metadata
basic heartbeat class RA metadata
reworked resource addition dialog
right-click menu
support for clones
+ Bug fixes:
Fixed a long-standing problem where the .src.rpms weren't usable across
32/64-bit boundaries
Many clone resource fixes
autojoin works now
target_role is now handled completely differently
pingd and attrd now work
OSDL 1221 GUI doesn't always keep the top window on top
OSDL 1248 Add target_role to group causes pengine fatal assert.
OSDL 1252 probe for newly added resouces
Novell 12532 - parent options do NOT take precedence of child
values Use #default as a special parameter value
Novell #176014: wait longer before declaring attrd/pingd
unable to connect
Novell #178488: Notifications not generated for failed nodes
Novell #178764 - TE doesn't abort transition
Novell #179233 - Propagate the status of the heartbeat
service toojj
OSDL 1276 - Broken clones cause segfaults
OSDL 1275: add signing off
Novell #180303: Filesystem returned 7 instead of 0 for
an already unmounted filesystem.
Novell #180303: Notification ordering
Novell #180799: Multiple probes scheduled for non-unique clone
Novell #180699: Probe anonymous clones correctly
Novell #183221 - Resource migration
Deb 372850 migrate IPv6addr binary out of /etc
OSDL 1280: deal with the situation that the time restart
is shorter than deadtime
OSDL 1272: add a new channel for callback APIs
OSDL 1281: Handle anonymous clone renaming correctly when
we have too many instances in the status
section
OSDL 1183: use the new API of heartbeat to avoid message
delay; remove redundant code
OSDL 1318: Add to send back a confirmation of setting up the
callback channel
OSDL 1329: Fix for memory leak in CIB_OP_MODIFY
OSDL 1239: RPM unconditionally included files which were
only present when mgmtd was build.
OSDL 1334: When using anonymous clones, send the resource action
with the name that the clone uses locally, not the
name we use for it internally.
OSDL 1301: add the capacity of get_cur_state; polish on
memory free
OSDL 1340: Failure to stop a clone
OSDL 1300: stonithd / lrmd lose their connection
OSDL 1055: Add missing RPM package dependencies
OSDL 1349: Fix file descriptor leak on failed fork
Deb 375941 Don't run deluser and delgrp in postrm
OSDL 1356: Group colocation fixes when one group cant
run anywhere
OSDL 1350: Case sensitive searching for resources
OSDL 1344: when an admin replaces the nodes section we should
make sure that all the nodes heartbeat knows about
are in there.
OSDL 1356: reordered the "are any resources active" check to
happen after we've confirmed all resource actions
are complete
OSDL 1354: CRM silently ignores trailing characters in XML input
OSDL 1162: fix memory leak in cl_msg compression code
Deb 376722 Add missing debian dependencies
Deb 376786 Add missing debian dependencies
OSDL 1360: Clones enforce resource_stickiness == INFINITY
Move clone instances to higher preferred nodes
OSDL 1364: should restrict rpm-based commands to rpm-based
systems
OSDL 1269: STONITH clone stops running after some time ...
+ KNOWN LIMITATIONS and BUGS
+ the GUI core dumps when run using AIX-based X servers
* Sun Apr 23 2006 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 2.0.5 - significant bug fixes and a few feature deficits fixed
+ various portability fixes
+ enable GUI to run with pygtk 2.4
+ significant GUI improvements and speedups
+ numerous logging improvements (generally much quieter)
+ speed up CIB processing by writing it to disk asynchronously
+ add CIB on-disk checksums
+ removed dependency on openssl
+ added "failure stickiness" to the CIB/CRM
+ Several fixes to the membership code
+ We now log all output from resource agents
+ fixed STONITHd memory leaks.
+ Added an OCF RA for Xen guests
+ Added email alerts to ldirectord
+ Improvements to the haresources2cib upgrade tool
+ Several fixes to cibadmin
+ Fix some autoadd-related bugs
+ Added Chinese support to the GUI
+ Added a daemon to replace and generalize ipfail
+ Limited testing only
+ Significant improvements to CIM model, including modifying things
+ Extensive Master/slave testing and fixes
+ Use a digest of the parameters used in an action (smaller CIB)
+ Improved detection of "old" events that should be ignored by the PE
(ensures resource monitoring is active when required)
+ Better detection of required and/or optimal behaviour in mixed
(and formerly mixed) clusters
+ LRM now supports multiple concurrent monitor operations
+ Optional startup & runtime enforcement of DTD validation
(Invalid changes are rejected)
+ cibadmin tool overhauled and verified to function correctly
+ Some depreciated CIB features now unsupported
+ Placing nvpair objects in crm_config (must now use cluster_property_set)
+ on_stopfail removed in favor of setting on_fail in the resource's stop operation
+ start_prereq removed in favor of setting prereq in the resource's start operation
+ Minimum required version for performing a rolling upgrade of a
crm yes" cluster to 2.0.5 is 2.0.4
+ Changed traditional_compression to default to NO. This new default
is not compatible in mixed clusters running version 2.0.0-2.0.2.
If you are upgrading a CRM-based cluster to >= 2.0.5, you
have to go through 2.0.4 anyway (for other reasons), so this
shouldn't cause any additional difficulties.
Non-CRM clusters shouldn't be affected by this because only
CRM packets are large enough to be compressed.
* Mon Feb 27 2006 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 2.0.4 - Bug fix release - worth getting these updates
+ Fixed cpu loop for LRM
+ Fixed minor bugs in Filesystem resource agent (submounts, some
options)
+ make the Raid1 resource agent more mdadm friendly (Ranjan Gupta), and
other fix
+ Various small resource agent cleanups
+ Keep CCM from core dumping when certain conditions occur which
cannot be recovered from.
+ make the Raid1 resource agent more mdadm friendly (Ranjan Gupta), and
other fix
+ CRM General
+ Fix for a crash where the CRM referenced a NULL pointer.
+ Refine shutdown detection
+ Review and fix the contents and timing of CIB updates that are required
when nodes appear, leave, and join the CRM.
+ Ask Heartbeat for a list of known nodes and use it to populate the <nodes>
section in the CIB
+ Stop the CRM shutting down all active resources at exit
- it doesn't know if they're managed or not
+ Completely overhaul the CRM shutdown sequence
- it now shuts down much more reliably
+ TEngine
+ Abstract out the core components into a library
+ Avoid recursion by using Gmainloop
+ Detect un-runnable sections of the graph without the need for timeouts
+ PEngine
+ Add code to support notification data for start/stop actions
associated with clone resources
+ Link the new TEngine library with the PE testing code and simulate
the transitions it generates
+ Bug 1084: Nodes that are offline but have active resources listed need
to be marked as unclean for possible fencing
+ CIB
+ Change the shutdown sequence to prevent updates being lost
+ Handle un-wrapped CIB updates
+ Write out the CIB asynchronously
* Fri Feb 10 2006 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 2.0.3 - Bug fixes and significant new features.
+ Management Daemon/Library and GUI client
+ provide a management library for manamgement daemon and CIM provider
+ provide a management daemon and a basic GUI management tool
+ CIM enablement
+ CIM (Common Information Model) enablement - works with
sblim-sfcb, OpenWBEM, and Pegasus CIMOMs
- not yet compiled into our binary RPMs because of dependencies
+ CRM (Cluster Resource Manager) General
+ All shutdowns go via the PE/TE - preserves inter-resource ordering
+ Support for future changes to the CIB (depreciation of cib_fragment)
+ Overhaul of IPC and HA channel callback logic
+ Many improvments to the quality and quantity (reduced) of logging
+ CRMd
+ Timerless elections - when everyone has voted we're done
+ Use the replace notification from the CIB to re-update our copy with
our view of our peers.
+ Reliably detect if the LRM connection is still active.
+ Elections
+ newer versions defer to older ones in DC elections
(opposite of current behavior)
+ this means that only once the complete cluster has been upgraded will
we start acting like the new version and accept new config options
+ it also means newer PE's and TE's (the most complex pieces) don't need
"act like the old version" options and can rely on all slaves being at
least as up-to-date as they are
+ people can run mixed clusters as long as they want
(until they want the new PE features)
+ new DCs only update the version number in the CIB if they have a
higher value
+ nodes that start and have a lower version than that stored in the CIB
shut themselves down (the CRM part anyway)
+ this prevents an admin from introducing old nodes back into an upgraded
cluster. It probably doesn't fully understand the config and may not
support the actions the PE/TE requires.
+ CIB (Common Information Base daemon)
+ Make sure "query only" connections cant modify the CIB
+ Periodically dump some stats about what the CIB has been doing.
+ Verify there are no memory leaks
+ Performance enhancements
+ Prevent a single CIB client from blocking everyone else
+ Clients Can be notified of full CIB replacements
+ record_config_changes option in ha.cf for those worried about
the amount of logging. Defaults to "on".
+ suppress_cib_writes CIB option replaced with in enable_config_writes ha.cf
(enable_config_writes to be removed in 2.0.4)
+ Never write the status section to disk
+ Check permissions for the on-disk CIB at startup
+ Dont trash unreadable on-disk CIBs
+ Fix for updates made against the whole CIB (not just one section)
+ PEngine (Policy Engine)
+ Many improvements to the handling of resource groups
+ Support "anonymous" clones
+ Fix stonith ordering
+ Order DC shutdowns after everyone else's
+ Support short resource names (for group and clone resources)
+ The ordering and colocation of grouped resources is now optional
+ Support probing new nodes for active resources.
+ All "probe" actions are controlled by the PE.
+ No resource may be started until the probing is complete.
+ Do not probe for resources we know to be active on unprobed nodes
+ When looking for monitor ops, only mark it optional if it was already
active on the node we're interested in.
+ Detect changes to class/type/provider/parameters and force a restart
of the resource
+ New record_pengine_inputs option in ha.cf for those worried about
the amount of logging. Defaults to "on".
+ Differentiate between config and processing errors
+ reduces the frequency that we need to log the complete CIB
+ Make notify for master/slave work
+ New CIB option: stop_orphan_actions (boolean)
If a resource is no longer defined, we can optionally stop it
+ New CIB option: stop_orphan_actions (boolean)
If a monitor op for a given interval is no longer defined, we can
optionally stop it
+ Add support for time and phase-of-the-moon based constraints
+ Improved failure handling: avoiding false positives
+ Always create orphaned resources - so they show up in crm_mon
+ Do not require sequential clone numbers starting at 0
+ TEngine (transition engine)
+ Detect old stonith ops
+ CLIs (Command Line interfaces)
+ Create a --one-shot option for crm_mon
+ Switch a number of CLI tools to use the new syncronous connections
+ Log errors to stderr where they will be seen and therefore useful
+ Support migration and un-migration of resources and resource groups
+ Create crm_verify for checking configuration validity
+ Simplify the passing of XML to cibadmin
+ Known open bugs worth mentioning:
+ 1075, 1080, 1081, 1084, 1085, 1064, 1069, 756, 984
+ 1050, 1082, 1037, 1079
* Thu Sep 22 2005 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 2.0.2 - small bug fix only release
+ Fixed a bug in ping directive - it works again
+ Added a check to BasicSanityCheck to check ping and ping_group directives
+ fixed cl_status nodestatus to return 0 if a node has status "ping"
+ fixed a memory leak in the CRM's LRM interface code
+ fixed code which deterimines which version of the CRM becomes
the DC when basic CIB schema versions differ. It now prefers
the older version to be DC instead of the newer version.
* Wed Sep 14 2005 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 2.0.1 -
+ Communication Layer
+ netstring encoding format is changed to be more efficient
+ add compression capability for big messages
+ Add man pages for hb_standby/hb_takeover
+ The assert triggered by 2.0.0 has been fixed
+ CIB can now contain XML comments and/or be in DOS format
+ Includes implementation of the ISO8601 date format
+ New CLI tools for changing cluster preferences, node attributes
and node standby
+ Improved recovery and placement of group resources
+ Detection of failed nodes by the Policy Engine is fixed
+ New Policy Engine features
http://www.linux-ha.org/ClusterResourceManager/DTD1.0/Annotated :
sections 1.5.[8,9,10,12]
+ Constraints and instance attributes can now be active conditionally
+ Rules can now contain other rules
+ Date/Time based expressions are supported
+ Cloned resources can now optionally be notified before and after
any of its peers are stopped or started.
+ The cluster can re-evaluate the configuration automatically after
a defined interval of idleness
+ Removed a flow control message which was very annoying when operating
in a mixed 1.x/2.x environment
-- Known Bugs :-( --
- Bug 859 - FSA took too long to complete action - fully recovered from
- Bug 882 - IPC channel not connected during shutdown - harmless
- Bug 879 - Failed actions cause extra election - harmless
Each of these occurs about once or twice in 5000 test iterations
- This is probably > 10K failovers
- rsc_location constraints cannot have rules that contain other rules
(fixed in CVS after release)
* Fri Jul 29 2005 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 2.0.0 - First stable release of the next generation of the Linux-HA project
+ Basic Characteristics described here:
http://linux-ha.org/FactSheetv2
+ Core infrastructure improvments:
+ Messaging (message acknowledging and flow control)
+ Logging (logging daemon)
+ Release 1.x style (2-node) clusters fully supported
+ Multi-node support (so far up to 16-node clusters tested)
See http://linux-ha.org/GettingStartedV2 for more information
+ New components:
+ Cluster Information Base (replicated resource configuration)
+ Cluster Resource Manager (supporting 1->N nodes)
+ Modular Policy Engine (controlling resource placement)
+ Local Resource Manager (policy free, not cluster aware)
+ Stonith Daemon (stand-alone fencing subsytem)
+ Support for OCF and LSB resource agents
+ Support for composite resource types (groups, clones)
+ Support for a rich set of resource location and ordering constraints
+ Conversion tool for existing haresources
+ Resources monitored by request
+ Resource "maintenance" mode
+ Several failback, failure and "No Quorum" behaviours to choose from
(global defaults and per action or resource)
+ Sample cluster state and configuration monitoring tools
Known issues in 2.0.0:
- Under some rare circumstances the cluster manager will time out
while stabilizing a new cluster state. This appears to be
otherwise harmless - the cluster is actually fine.
http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=770
- Under some rare circumstances, a dev assert will be triggered
in unpack.c. This results in the pengine getting restarted.
This is annoying, but not a disaster.
http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=797
* Tue May 23 2005 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.99.5 - Near-final beta of 2.0.0 release
+ many bug fixes - code looks very stable at this point
-- well tested at this point on 4 and 8 node clusters.
* Thu Apr 07 2005 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.99.4 - Near-final beta of 2.0.0 release
+ many bug fixes since 1.99.1
+ new external STONITH model - fully supports scripting interface
+ tested through 12 node clusters successfully
+ No serious defects found in testing
+ Easier-to-understand locational constraints model
+ Many bug fixes of many kinds
+ Important bug fixes to OCF IPaddr resource agent
+ Resources are monitored only on request
+ See http://wiki.linux-ha.org/ClusterResourceManager/Setup
for basic ideas about getting started.
+ Release 1 style (2-node) clusters still fully supported
+ Release 2 style clusters support 1-N node clusters
(where N is probably something like 8-32)
* Tue Mar 20 2005 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.99.3 - Near-final beta "technology preview" of 2.0.0 release
+ many bug fixes since 1.99.1
+ tested through 12 node clusters with reasonable success
+ new STONITH API
* Sun Feb 20 2005 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.99.2 - Near-final beta "technology preview" of 2.0.0 release
+ Many many many changes. Far too many to describe here.
+ See http://wiki.linux-ha.org/ClusterResourceManager/Setup
for certain basic ideas about getting started.
* Mon Oct 11 2004 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.99.1 - *early* beta series - preparing for 2.0.0
+ Andrew provided a number of fixes to the CRM and 2.0 features
+ Fixed a problem with retrying failed STONITH operations
* Mon Oct 11 2004 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.99.0 - *early* beta series - preparing for 2.0.0
+ All STABLE changes noted below have been ported to this branch
+ Included in this release is a beta of the next generation of Heartbeat
resource manager developed by Andrew Beekhof.
http://linuxha.trick.ca/NewHeartbeatDesign is a good place to learn
more about this effort. Please examine crm/README, crm/test/README
and crm/crm-1.0.dtd for example usage and configuration.
+ Also included is the L(ocal) R(esource) M(anager) developed by IBM China
which is an integral part of the NewHeartbeatDesign.
+ Known caveats:
- STONITH as a whole has seen a code cleanup and should be tested
carefully.
- The external STONITH plug-in has undergone major surgery and
probably doesn't work yet.
- the new CRM is not perfectly stable with 3 nodes yet.
+ PLEASE see http://osdl.org/developer_bugzilla/enter_bug.cgi?product=Linux-HA
and use it to report quirks and issues you find!
* Sat Sep 18 2004 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.2.3 (stable)
+ fixed a serious error which causes heartbeat to misbehave after about
10 months of continuous operation
+ Made our ARP packets more RFC compliant
+ Extended apcmastersnmp code to deal with new devices
+ fixed a bug concerning simultaneous stops of both machines causing one
of them to not shut down.
+ added an option to suppress reporting on packet corruption
+ fixed it so that we don't create the FIFO by the RPM
+ made cl_status setgid so anyone can run it, and fixed exit codes
+ eliminated a serious memory leak associated with client code
+ packaged doc files which had been missed before
+ fixed many many small bugs and memory leaks detected by BEAM
+ added several new test cases
+ fixed longstanding bug in plugin unloading
+ fixed a shutdown hang problem
+ several fixes for Solaris, FreeBSD
+ Solaris packaging now included in base
+ fixed a bug related to the apache resource agent not handling
quoted parameters
+ added use_apphbd parameter to have heartbeat register
with apphbd instead of watchdog device when desired
+ changed apphbd to default its config file to /etc
+ added snmp subagent code
+ added hbaping communications plugin
+ added external STONITH plugin
+ ldirectord: fixed a bug where real servers that were are
present in multiple virtual services will only be added
to one virtual service.
* Mon May 11 2004 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.2.2 (stable)
+ Fixed several format string errors in communication plugins
+ Fixed a bug which kept us from diagnosing errors in non-aliased interfaces
+ Fixed a bug in ipaddr which caused an infinite loop when auto_failback on
+ Updated Debian things...
+ Added IPv6addr resource agent
+ Added ibmhmc STONITH plugin
+ Added cl_status command
+ Fixed a bug regarding restarts when auto_failback is on...
+ Fixed a couple of bugs in sha1 authentication method for very long keys
+ Fixed a bug in the portblock resource agent so that it no longer blocks
ports on the loopback interface
+ Increased the time allowed for split brain test before it declares failure
+ Version 1.2.1 (stable)
+ Netstrings can now be used for our on-the-wire data format
+ Perl/SWIG bindings added for some heartbeat libraries
+ Significant improvements to SAF data checkpointing API
+ Implemented unbuffered ipcsocket code for SAF APIs
+ Many Solaris fixes -- except for ipfail, Solaris works
+ Significant library restructuring
+ Watchdog device NOWAYOUT is now overridded if defaulted
+ Watchdog device now kills machine instantly after deadtime
instead of after one minute
+ Hostnames should now be treated case-independently...
+ Added new client status APIs - client_status() and cstatus_callback()
+ Fixed bug with auto_failback and quick full restarts
+ We now automatically reboot when resources fail to stop correctly...
+ We now check the status of the configured STONITH device hourly...
+ STONITH operations repeat after a 5 second delay, not immediately...
+ Added hb_takeover command - complement to hb_standby
+ Added documentation on how to use evlog/TCP to enable testing to
take place without losing messages due to UDP message forwarding
+ Several new tests from Mi, Jun - split brain, bandwidth, failure
detection time.
+ Fix to LVM resource from Harald Milz <hm@muc.de>
+ Fixed FreeBSD authentication problems breaking ipfail
+ Fixed .so loading on Debian
+ Fixed false complaints about resource scripts (from Jens Schmalzing)
+ Fixed false stop failure from LinuxSCSI (from Jens Schmalzing <j.s@lmu.de>)
* Thu Apr 15 2004 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.3.0 - beta series
+ Netstrings can now be used for our on-the-wire data format
+ Perl/SWIG bindings added for some heartbeat libraries
+ Significant improvements to SAF data checkpointing API
+ Implemented unbuffered ipcsocket code for SAF APIs
+ Many Solaris fixes -- except for ipfail, Solaris works
+ Significant library restructuring
+ Watchdog device NOWAYOUT is now overridded if defaulted
+ Watchdog device now kills machine instantly after deadtime
instead of after one minute
+ Hostnames should now be treated case-independently...
+ Added new client status APIs - client_status() and cstatus_callback()
+ Fixed bug with auto_failback and quick full restarts
+ We now automatically reboot when resources fail to stop correctly...
+ We now check the status of the configured STONITH device hourly...
+ STONITH operations repeat after a 5 second delay, not immediately...
+ Added hb_takeover command - complement to hb_standby
+ Added documentation on how to use evlog/TCP to enable testing to
take place without losing messages due to UDP message forwarding
+ Several new tests from Mi, Jun - split brain, bandwidth, failure
detection time.
+ Fix to LVM resource from Harald Milz <hm@muc.de>
* Tue Feb 16 2004 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.2.0
+ Replaced the nice_failback option with the auto_failback option.
THIS OBSOLETES THE NICE_FAILBACK OPTION. READ THE DOCS FOR HOW
TO UPGRADE SMOOTHLY.
+ Added a new feature to hb_standby which allows you to give up
any specific category of resources: local, foreign, or all.
The old behavior is "all" which is the default.
This allows you to put a auto_failback no cluster into
an active/active configuration on demand.
+ ipfail now works properly with auto_failback on (active/active)
+ ipfail now has "hysteresis" so that it doesn't respond immediately
to a network failure, but waits a little while so that the
damage can be properly assessed and extraneous takeovers avoided
+ Added new ping node timeout directive "deadping"
+ Made sure heartbeat preallocated stack and heap, and printed a
message if we allocate heap once we're started up...
+ IPMILan STONITH plugin added to CVS
+ Added IPaddr2 resource script
+ Made the APC smart UPS ups code compatible with more UPSes
+ Added a (preliminary?) ordered messaging facility from Yi Zhu
+ Changed IPaddr's method of doing ARPs in background so that
certain timing windows were closed.
+ Added OCF (wrapper) resource script
+ Allow respawn programs to take arguments
+ Added pinggroups (where any node being up is OK)
+ SIGNIFICANT amount of internal rearchitecture.
+ Many bug fixes.
+ Several documentation updates.
* Tue Feb 10 2004 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.1.5
+ ipfail now has "hysteresis" so that it doesn't respond immediately
to a network failure, but waits a little while so that the
damage can be properly assessed and extraneous takeovers avoided
+ Several fixes to cl_poll()
+ More fixes to the IPC code - especially handling data reception
after EOF
+ removed some unclean code from GSource for treating EOF conditions
+ Several bugs concerning hanging when shutting down early during startup
+ A few BasicSanityCheck bug fixes
+ CTS now allows a single machine to be able to monitor several clusters
+ Most former CTS options are now either unneeded or on the command line
+ Increased number of ARPs and how long they're being sent out
+ Fixed uncommon (authorization) memory leak
+ Some Solaris portability fixes.
+ Made init script handle standby correctly for new config files
+ Improved the fast failure detection test
+ Added some backwards compatibility for nice_failback and some default
authentication directives
+ Corrected the 1.1.4 change log
* Fri Jan 22 2004 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.1.4
+ ipfail now works properly with auto_failback on (active/active)
+ Changed the API to use sockets (IPC library) instead of FIFOs.
+ Added new apiauth directives to provide authorization information
formerly provided by the FIFO permissions.
+ Added Intel's implementation of the SAF data checkpointing API and daemon
+ Added a cleanup suggested by Emily Ratliff.
+ IPMILan STONITH plugin added to CVS
+ Added IPaddr2 resource script
+ Various cleanups due to horms.
+ Fixed authentication to work on 64-bit platforms(!)
+ Fixed the cl_poll() code to handle corner cases better
+ Made heartbeat close watchdog device before re-execing itself
+ New CTS improvements from Mi, Jun <jun.mi@intel.com>
+ Various minor bug fixes.
. Several shutdown bugs addressed
. fixed sendarp to make a pid file, so we can shut it down
when we shut everything else down in case it's still running.
. Lots of minor bug fixes to IPC code
. Lots of minor bug fixes to ipctest program
. made BasicSanityCheck more tolerant of delays
. Fixed IPC code to authenticate based on ints, not int*s.
. Check properly for strnlen instead of strlen...
. Several signed/unsigned fixes
. A few uninitialized vars now are inited
. Switched to compiling lex/yacc sources the automake way
. Lots of minor CTS fixes...
+ ldirectord bug fixes:
. When new real servers are added on initialisation or when
the configuration file is reread they are marked with status
of -1 (uninitialised) so they will be checked and inserted
into the virtual service as required
. All checks use the checkport if set, otherwise the port set for
the individual real server. This was the case for http and
connect checks, but others had variations on this theme.
. When the configuration file is reread because it changed
on disk and autoreload is set, check the real servers
immediately rather than waiting for checkinterval to expire
. Already running message sent to stderr instead of stdout
. Support alternate server in real-server specific URL
. Treat the same real server with different weights as a different
real server. Fixes bug reported by Philip Hayward whereby the same
real-server would always have the same weight, regardless of
the ldirectord.cf
* Fri Sep 26 2003 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.1.3
+ Bugfix for heartbeat starting resources twice concurrently if
auto_failback was set to "legacy".
+ Bugfix for messages getting lost if messages were sent in quick
succession. (Kurosawa Takahiro)
+ Bugfix for Filesystem resource checking for presence of filesystem
support before loading the module.
+ BasicSanityCheck extended to cover more basic tests.
+ Bugfix for findif not working correctly for CIDR netmasks.
+ Minor bugfix for ldirectord recognizing new schedulers correctly and
timeout settings are now being honoured.
+ Enhanced the message giving a better explanation of how to set up node
names properly when current node not found in the ha.cf file
+ Send a message to the cluster whenever we have a node which doesn't
need STONITHing - even though it's gone down. This fix needed
by CCM, which is in turn needed by EVMS.
+ Enhanced the messages for missing ha.cf and missing haresources files
explaining that sample config files are found in the documentation.
+ Fix for memory leak from Forrest Zhao<forrest.zhao@intel.com>
+ Added a (preliminary?) ordered messaging facility from Yi Zhu
+ FAQ updates
+ Added Xinetd resource script
+ Added OCF (wrapper) resource script
+ Allow respawn programs to take arguments
+ Added pinggroups (where any node being up is OK)
+ fixed ldirectord negotiatetimeout for HTTP
+ fixed a bug which caused -d flag to be ignored
+ failing resource scripts are now ERRORs not WARNings
+ now shuts down correctly when auto_failback == legacy
* Mon Jul 13 2003 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.1.2
+ Replaced the nice_failback option with the auto_failback option.
THIS OBSOLETES THE NICE_FAILBACK OPTION. READ THE DOCS FOR HOW
TO UPGRADE SMOOTHLY.
+ Changed IPaddr to not do ARPs in background, and shortened time
between ARPs. Also made these things tunable...
+ changed our comm ttys to not become our controlling TTYs
+ Enhanced the ServeRAID script to fix a critical bug by using a new feature
+ Added a new DirectoryMap to CVS - tells where everything is...
+ significantly enhanced the BasicSanityCheck script, and the tests
it calls.
+ added a new option to use a replacement poll function for improved
real-time performance.
+ added the ability to have a cluster node's name be different
from it's uname -n
+ Moved where CTS gets installed to /usr/lib/heartbeat/cts
+ Big improvements to the CTS README from IBM test labs in Austin.
+ bug fixes to the WTI NPS power switch
+ new client API calls:
return arbitrary configuration parameters
return current resource status
+ Added a new clplumbing function: mssleep()
+ added new capabilities for supporting pseudo-resources
+ added new messages which come out after initial takeover is done
(improves CTS results)
+ LOTS of documentation updates.
+ fixed a security vulnerability
+ fixed a bug where heartbeat would shut down while in the middle
of processing resource movement requests.
+ changed compilation flags to eliminate similar future security
issues
+ went to even-more-strict gcc flags
+ fixed several "reload" bugs. Now reload works ;-)
+ fixed STONITH bug when other node never heard from.
+ Minor bug fixes (cleaned up corrupted message)
+ Two different client API bugs fixed.
+ changed the configure script to test which warning flags are
supported by the current gcc.
+ enhanced the API test program to test new capabilities...
* Wed May 21 2003 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.1.1
+ Significant restructuring of the processes in heartbeat
+ Added a new feature to hb_standby which allows you to give up
any specific category of resources: local, foreign, or all.
The old behavior is "all" which is the default.
This allows you to put a nice_failback cluster into
an active/active configuration
+ Enhancements to the ServeRAID code to make it work with the new
(supported) version of IPSSEND from the ServeRAID folks...
+ Added STONITH code for the Dell remote access controller
+ Fixed a major bug which kept it from taking over correctly after 246
days or so
+ Fixed a major bug where heartbeat didn't lock itself into memory
properly
+ Added new ping node timeout directive "deadping"
+ Made sure heartbeat preallocated stack and heap, and printed a
message if we allocate heap once we're started up...
+ Minor heartbeat API bug fixes
+ Minor documentation fixes
+ Minor fix to allow IP addresses with /32 masks...
+ Fixed a timing window for !nice_failback resource acquisition
+ Added several CCM bug fixes
+ Made the APC smart UPS ups code compatible with more UPSes
+ Fixed a bug in respawn
+ Enhanced internal checking for malloc errors...
+ Added IP alias search optimization from Sean Reifscheneider
* Wed Mar 19 2003 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.0.2:
+ Fixed comment errors in heartbeat init script to allow it to run on RH 8.0
+ Changed apphbd to use poll(2) instead of sigtimedwait(2)
+ Put missing files into tarball
+ Documentation improvements for IPaddr and other things
+ Fixed an error in hb_standby which kept it from working if releasing
resources takes more than 10 seconds
+ Added a fix to allow heartbeat to run on systems without writable disk
(like routers booting from CD-ROM)
+ Added configuration file for apphbd
+ Added fix from Adam Li to keep recoverymgr stop looping at high priority
+ Added fix to ServeRAID resource to make it work with (new) supported
hardware
+ Added Delay resource script
+ Added fix to Filesystem to allow it to support NFS mounts and allow
user to specify mount options
+ Added fix to IPaddr to make tmp directory for restoring loopback device
+ Added fix to ipcsocket code to deal correctly with EAGAIN when sending
message body
* Mon Feb 17 2003 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.0.1:
+ Fixed some compile errors on different platforms, and library versions
+ Disable ccm from running on 'ping' nodes
+ Put in Steve Snodgrass' fix to send_arp to make it work on non-primary
interfaces.
* Thu Feb 13 2003 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 1.0.1 beta series
0.4.9g:
+ Changed default deadtime, warntime, and heartbeat interval
+ Auto* tool updates
+ VIP loopback fixes for IP address takeover
+ Various Solaris and FreeBSD fixes
+ added SNMP agent
+ Several CCM bug fixes
+ two new heartbeat API calls
+ various documentation fixes, including documentation for ipfail
+ Numerous minor cleanups.
+ Fixed a few bugs in the IPC code.
+ Fixed the (IPC) bug which caused apphbd to hang the whole machine.
+ Added a new IPC call (waitout)
+ Wrote a simple IPC test program.
+ Clarified several log messages.
+ Cleaned up the ucast communications plugin
+ Cleaned up for new C compilers
+ Fixed permissions bug in IPC which caused apphbd to not be usable by all
+ Added a new rtprio option to the heartbeat config file
+ updated apphbtest program
+ Changed ipfail to log things at same level heartbeat does
* Sat Nov 30 2002 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
+ Version 0.5 beta series (now renamed to 1.0.1 beta series).
0.4.9f:
+ Added pre-start, pre-stop, post-stop and pre-stop constructs in init script
+ various IPC fixes
+ Fix to STONITH behavior: STONITH unresponsive node right after we reboot
+ Fixed extreme latency in IPC code
+ various configure.in cleanups
+ Fixed memory leak in IPC socket code
+ Added streamlined mainloop/IPC integration code
+ Moved more heartbeat internal communication to IPC library
+ Added further support for ipfail
+ Added supplementary groups to the respawn-ed clients
+ Added standby to init script actions
+ Lots of minor CCM fixes
+ Split (most) resource management code into a separate file.
+ Fixes to accommodate different versions of libraries
+ Heartbeat API client headers fixup
+ Added new API calls
+ Simplified (and fixed) handling of local status. This would sometimes cause
obscure failures on startup.
+ Added new IPsrcaddr resource script
KNOWN BUGS:
+ apphbd goes into an infinite loop on some platforms
* Wed Oct 9 2002 Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
0.4.9e:
+ Changed client code to keep write file descriptor open at all times
(realtime improvement)
+ Added a "poll replacement" function based on sigtimedwait(2), which
should be faster for those cases that can use it.
+ Added a hb_warntime() call to the application heartbeat API.
+ Changed all times in the configuration file to be in milliseconds
if specified with "ms" at the end. (seconds is still the default).
+ Fixes to serious security issue due to Nathan Wallwork <nwallwo@pnm.com>
+ Changed read/write child processes to run as nobody.
+ Fixed a bug where ping packets are printed incorrectly when debugging.
+ Changed heartbeat code to preallocate a some heap space.
+ CCM daemon API restructuring
+ Added ipc_channel_pair() function to the IPC library.
+ Changed everything to use longclock_t instead of clock_t
+ Fixed a bug concerning the ifwalk() call on ping nodes in the API
+ Made apphbd run at high priority and locked into memory
+ Made a library for setting priority up.
+ Made ucast comm module at least be configurable and loadable.
+ Fixed a startup/shutdown timing problem.
0.4.9d:
+ removed an "open" call for /proc/loadavg (improve realtime behavior)
+ changed API code to not 1-char reads from clients
+ Ignored certain error conditions from API clients
+ fixed an obscure error message about trying to retransmit a packet
which we haven't sent yet. This happens after restarts.
+ made the PILS libraries available in a separate package
+ moved the stonith headers to stonith/... when installed
+ improved debugging for NV failure cases...
+ updated AUTHORS file and simplified the changelog authorship
(look in AUTHORS for the real story)
+ Added Ram Pai's CCM membership code
+ Added the application heartbeat code
+ Added the Kevin Dwyer's ipfail client code to the distribution
+ Many fixes for various tool versions and OS combinations.
+ Fixed a few bugs related to clients disconnecting.
+ Fixed some bugs in the CTS test code.
+ Added BasicSanityCheck script to tell if built objects look good.
+ Added PATH-like capabilities to PILS
+ Changed STONITH to use the new plugin system.
+ *Significantly* improved STONITH usage message (from Lorn Kay)
+ Fixed some bugs related to restarting.
+ Made exit codes more LSB-compliant.
+ Fixed various things so that ping nodes don't break takeovers.
0.4.9c and before:
+ Cluster partitioning now handled correctly (really!)
+ Complete rearchitecture of plugin system
+ Complete restructure of build system to use automake and port things
to AIX, FreeBSD and solaris.
+ Added Lclaudio's "standby" capability to put a node into standby
mode on demand.
+ Added code to send out gratuitous ARP requests as well as gratuitous
arp replies during IP address takeover.
+ Suppress stonith operations for nodes which went down gracefully.
+ Significantly improved real-time performance
+ Added new unicast heartbeat type.
+ Added code to make serial ports flush stale data on new connections.
+ The Famous CLK_TCK compile time fixes (really!)
+ Added a document which describes the heartbeat API
+ Changed the code which makes FIFOs to not try and make the FIFOs for
named clients, and several other minor API client changes.
+ Fixed a fairly rare client API bug where it would shut down the
client for no apparent reason.
+ Added stonith plugins for: apcmaster, apcmastersnmp switches, and ssh
module (for test environments only)
+ Integrated support for the Baytech RPC-3 switch into baytech module
+ Fixes to APC UPS plugin
+ Got rid of "control_process: NULL message" message
+ Got rid of the "controlfifo2msg: cannot create message" message
+ Added -h option to give usage message for stonith command...
+ Wait for successful STONITH completion, and retry if its configured.
+ Sped up takeover code.
+ Several potential timing problems eliminated.
+ Cleaned up the shutdown (exit) code considerably.
+ Detect the death of our core child processes.
+ Changed where usage messages go depending on exit status from usage().
+ Made some more functions static.
+ Real-time performance improvement changes
+ Updated the faqntips document
+ Added a feature to heartbeat.h so that log messages get checked as
printf-style messages on GNU C compilers
+ Changed several log messages to have the right parameters (discovered
as a result of the change above)
+ Numerous FreeBSD, Solaris and OpenBSD fixes.
+ Added backwards compatibility kludge for udp (versus bcast)
+ Queued messages to API clients instead of throwing them away.
+ Added code to send out messages when clients join, leave.
+ Added support for spawning and monitoring child clients.
+ Cleaned up error messages.
+ Added support for DB2, ServeRAID and WAS, LVM, and Apache (IBMhttp too),
also ICP Vortex controller.
+ Added locking when creating new IP aliases.
+ Added a "unicast" media option.
+ Added a new SimulStart and standby test case.
+ Diddled init levels around...
+ Added an application-level heartbeat API.
+ Added several new "plumbing" subsystems (IPC, longclock_t, proctrack, etc.)
+ Added a new "contrib" directory.
+ Fixed serious (but trivial) bug in the process tracking code which caused
it to exit heartbeat - this occured repeatably for STONITH operations.
+ Write a 'v' to the watchdog device to tell it not to reboot us when
we close the device.
+ Various ldirectord fixes due to Horms
+ Minor patch from Lorn Kay to deal with loopback interfaces which might
have been put in by LVS direct routing
+ Updated AUTHORS file and moved list of authors over
* Fri Mar 16 2001 Alan Robertson <alanr@unix.sh>
+ Version 0.4.9
+ Split into 3 rpms - heartbeat, heartbeat-stonith heartbeat-ldirectord
+ Made media modules and authentication modules and stonith modules
dynamically loadable.
+ Added Multicast media support
+ Added ping node/membership/link type for tiebreaking. This will
be useful when implementing quorum on 2-node systems.
(not yet compatible with nice_failback(?))
+ Removed ppp support
+ Heartbeat client API support
+ Added STONITH API library
+ support for the Baytech RPC-3A power switch
+ support for the APCsmart UPS
+ support for the VACM cluster management tool
+ support for WTI RPS10
+ support for Night/Ware RPC100S
+ support for "Meatware" (human intervention) module
+ support for "null" (testing only) module
+ Fixed startup timing bugs
+ Fixed shutdown sequence bugs: takeover occured before
resources were released by other system
+ Fixed various logging bugs
+ Closed holes in protection against replay attacks
+ Added checks that complain if all resources aren't idle on startup.
+ IP address takeover fixes
+ Endian fixes
+ Removed the 8-alias limitation
+ Takeovers now occur faster (ARPs occur asynchronously)
+ Port number changes
+ Use our IANA port number (694) by default
+ Recognize our IANA port number ("ha-cluster") if it's in /etc/services
+ Moved several files, etc. from /var/run to /var/lib/heartbeat
+ Incorporated new ldirectord version
+ Added late heartbeat warning for late-arriving heartbeats
+ Added detection of and partial recovery from cluster partitions
+ Accept multiple arguments for resource scripts
+ Added Raid1 and Filesystem resource scripts
+ Added man pages
+ Added debian package support
* Fri Jun 30 2000 Alan Robertson <alanr@unix.sh>
+ Version 0.4.8
+ Incorporated ldirectord version 1.9 (fixes memory leak)
+ Made the order of resource takeover more rational: Takeover is now
left-to-right, and giveup is right-to-left
+ Changed the default port number to our official IANA port number (694)
+ Regularized more messages, eliminated some redundant ones.
+ Print the version of heartbeat when starting.
+ Print exhaustive version info when starting with debug on.
+ Hosts now have 3 statuses {down, up, active} active means that it knows
that all its links are operational, and it's safe to send cluster
messages
+ Significant revisions to nice_failback (mainly due to lclaudio)
+ More SuSE-compatibility. Thanks to Friedrich Lobenstock <fl@fl.priv.at>
+ Tidied up logging so it can be to files, to syslog or both (Horms)
+ Tidied up build process (Horms)
+ Updated ldirectord to produce and install a man page and be
compatible with the fwmark options to The Linux Virtual Server (Horms)
+ Added log rotation for ldirectord and heartbeat using logrotate
if it is installed
+ Added Audible Alarm resource by Kirk Lawson <lklawson@heapy.com>
and myself (Horms)
+ Added init script for ldirectord so it can be run independently
of heartbeat (Horms)
+ Added sample config file for ldirectord (Horms)
+ An empty /etc/ha.d/conf/ is now part of the rpm distribution
as this is where ldirectord's configuration belongs (Horms)
+ Minor startup script tweaks. Hopefully, we should be able to make core
files should we crash in the future. Thanks to Holger Kiehl for diagnosing
the problem!
+ Fixed a bug which kept the "logfile" option from ever working.
+ Added a TestCluster test utility. Pretty primitive so far...
+ Fixed the serial locking code so that it unlocks when it shuts down.
+ Lock heartbeat into memory, and raise our priority
+ Minor, but important fix from lclaudio to init uninited variable.
* Sat Dec 25 1999 Alan Robertson <alanr@unix.sh>
+ Version 0.4.7
+ Added the nice_failback feature. If the cluster is running when
the primary starts it acts as a secondary. (Luis Claudio Goncalves)
+ Put in lots of code to make lost packet retransmission happen
+ Stopped trying to use the /proc/ha interface
+ Finished the error recovery in the heartbeat protocol (and got it to work)
+ Added test code for the heartbeat protocol
+ Raised the maximum length of a node name
+ Added Jacob Rief's ldirectord resource type
+ Added Stefan Salzer's <salt@cin.de> fix for a 'grep' in IPaddr which
wasn't specific enough and would sometimes get IPaddr confused on
IP addresses that prefix-matched.
+ Added Lars Marowsky-Bree's suggestion to make the code almost completely
robust with respect to jumping the clock backwards and forwards
+ Added code from Michael Moerz <mike@cubit.at> to keep findif from
core dumping if /proc/route can't be read.
* Mon Nov 22 1999 Alan Robertson <alanr@unix.sh>
+ Version 0.4.6
+ Fixed timing problem in "heartbeat restart" so it's reliable now
+ Made start/stop status compatible with SuSE expectations
+ Made resource status detection compatible with SuSE start/stop expectations
+ Fixed a bug relating to serial and ppp-udp authentication (it never worked)
+ added a little more substance to the error recovery for the HB protocol.
+ Fixed a bug for logging from shell scripts
+ Added a little logging for initial resource acquisition
+ Added #!/bin/sh to the front of shell scripts
+ Fixed Makefile, so that the build root wasn't compiled into pathnames
+ Turned on CTSRTS, enabling for flow control for serial ports.
+ Fixed a bug which kept it from working in non-English environments
* Wed Oct 13 1999 Alan Robertson <alanr@unix.sh>
+ Version 0.4.5
+ Mijta Sarp added a new feature to authenticate heartbeat packets
using a variety of strong authentication techniques
+ Changed resource acquisition and relinquishment to occur in heartbeat,
instead of in the start/stop script. This means you don't *really*
have to use the start/stop script if you don't want to.
+ Added -k option to gracefully shut down current heartbeat instance
+ Added -r option to cause currently running heartbeat to reread config files
+ Added -s option to report on operational status of "heartbeat"
+ Sped up resource acquisition on master restart.
+ Added validation of ipresources file at startup time.
+ Added code to allow the IPaddr takeover script to be given the
interface to take over, instead of inferring it. This was requested
by Lars Marowsky-Bree
+ Incorporated patch from Guenther Thomsen to implement locking for
serial ports used for heartbeats
+ Incorporated patch from Guenther Thomsen to clean up logging.
(you can now use syslog and/or file logs)
+ Improved FreeBSD compatibility.
+ Fixed a bug where the FIFO doesn't get created correctly.
+ Fixed a couple of uninitialized variables in heartbeat and /proc/ha code
+ Fixed longstanding crash bug related to getting a SIGALRM while in malloc
or free.
+ Implemented new memory management scheme, including memory stats
* Thu Sep 16 1999 Alan Robertson <alanr@unix.sh>
+ Version 0.4.4
+ Fixed a stupid error in handling CIDR addresses in IPaddr.
+ Updated the documentation with the latest from Rudy.
* Wed Sep 15 1999 Alan Robertson <alanr@unix.sh>
+ Version 0.4.3
+ Changed startup scripts to create /dev/watchdog if needed
+ Turned off loading of /proc/ha module by default.
+ Incorporated bug fix from Thomas Hepper <th@ant.han.de> to IPaddr for
PPP configurations
+ Put in a fix from Gregor Howey <ghowey@bremer-nachrichten.de>
where Gregor found that I had stripped off the ::resourceid part
of the string in ResourceManager resulting in some bad calls later on.
+ Made it compliant with the FHS (filesystem hierarchy standard)
+ Fixed IP address takeover so we can take over on non-eth0 interface
+ Fixed IP takeover code so we can specify netmasks and broadcast addrs,
or default them at the user's option.
+ Added code to report on message buffer usage on SIGUSR[12]
+ Made SIGUSR1 increment debug level, and SIGUSR2 decrement it.
+ Incorporated Rudy's latest "Getting Started" document
+ Made it largely Debian-compliant. Thanks to Guenther Thomsen, Thomas
Hepper, Iñaki Fernández Villanueva and others.
+ Made changes to work better with Red Hat 6.1, and SMP code.
+ Sometimes it seems that the Master Control Process dies :-(
* Sat Aug 14 1999 Alan Robertson <alanr@unix.sh>
+ Version 0.4.2
+ Implemented simple resource groups
+ Implemented application notification for groups starting/stopping
+ Eliminated restriction on floating IPs only being associated with eth0
+ Added a uniform resource model, with IP resources being only one kind.
(Thanks to Lars Marowsky-Bree for a good suggestion)
+ Largely rewrote the IP address takeover code, making it clearer, fit
into the uniform resource model, and removing some restrictions.
+ Preliminary "Getting Started" document by Rudy Pawul
+ Improved the /proc/ha code
+ Fixed memory leak associated with serial ports, and problem with return
of control to the "master" node.
(Thanks to Holger Kiehl for reporting them, and testing fixes!)
* Tue Jul 6 1999 Alan Robertson <alanr@unix.sh>
+ Version 0.4.1
+ Fixed major memory leak in 0.4.0 (oops!)
+ Added code to eliminate duplicate packets and log lost ones
+ Tightened up PPP/UDP startup/shutdown code
+ Made PPP/UDP peacefully coexist with "normal" udp
+ Made logs more uniform and neater
+ Fixed several other minor bugs
+ Added very preliminary kernel code for monitoring and controlling
heartbeat via /proc/ha. Very cool, but not really done yet.
* Wed Jun 30 1999 Alan Robertson <alanr@unix.sh>
+ Version 0.4.0
+ Changed packet format from single line positional parameter style
to a collection of {name,value} pairs. A vital change for the future.
+ Fixed some bugs with regard to forwarding data around rings
+ We now modify /etc/ppp/ip-up.local, so PPP-udp works out of the box
(at least for Red Hat)
+ Includes the first version of Volker Wiegand's Hardware Installation Guide
(it's pretty good for a first version!)
* Wed Jun 09 1999 Alan Robertson <alanr@unix.sh>
+ Version 0.3.2
+ Added UDP/PPP bidirectional serial ring heartbeat
(PPP ensures data integrity on the serial links)
+ fixed a stupid bug which caused shutdown to give unpredictable
results
+ added timestamps to /var/log/ha-log messages
+ fixed a couple of other minor oversights.
* Sun May 10 1999 Alan Robertson <alanr@unix.sh>
+ Version 0.3.1
+ Make ChangeLog file from RPM specfile
+ Made ipresources only install in the DOC directory as a sample
* Sun May 09 1999 Alan Robertson <alanr@unix.sh>
+ Version 0.3.0
+ Added UDP broadcast heartbeat (courtesy of Tom Vogt)
+ Significantly restructured code making it easier to add heartbeat media
+ added new directives to config file:
+ udp interface-name
+ udpport port-number
+ baud serial-baud-rate
+ made manual daemon shutdown easier (only need to kill one)
+ moved the sample ha.cf file to the Doc directory
* Sat Mar 27 1999 Alan Robertson <alanr@unix.sh>
+ Version 0.2.0
+ Make an RPM out of it
+ Integrated IP address takeover gotten from Horms
+ Added support to tickle a watchdog timer whenever our heart beats
+ Integrated enough basic code to allow a 2-node demo to occur
+ Integrated patches from Andrew Hildebrand <andrew@pdi.com> to allow it
to run under IRIX.
- Known Bugs
- Only supports 2-node clusters
- Only supports a single IP interface per node in the cluster
- Doesn't yet include Tom Vogt's ethernet heartbeat code
- No documentation
- Not very useful yet :-)
###########################################################
distrib
>
Mandriva
>
2008.1
>
x86_64
>
media
>
main-release
>
by-pkgid
>
c7bdc28096604d7485432a9a086e48d4
>
files
>
13
