From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from gate001.proxmox.com (gate001.proxmox.com [45.144.208.40]) by lore.proxmox.com (Postfix) with ESMTPS id D02571FF0EF for ; Sun, 02 Aug 2026 05:37:01 +0200 (CEST) Received: from gate001.proxmox.com (localhost.localdomain [127.0.0.1]) by gate001.proxmox.com (Proxmox) with ESMTP id 0B7952152A; Sun, 02 Aug 2026 05:36:53 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=neatech-ar.20251104.gappssmtp.com; s=20251104; t=1785641797; x=1786246597; darn=lists.proxmox.com; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=qD2qXSjpg7GKB0+eu4XYgq+uerxEEi3/J12T+Km3DHo=; b=FkT8sQDyzvXMnI5EgiNcxYVPzydTKslB6LeF8+GcZ+6hdf4HYygFXgCSmAEVvu6Xjr lQyow34mpUkyWS/FFt3RE5X4eor1tsaNmQ8mpzYLCSCVPgHtBthizpfMuw99WrsXkL/L 3srbenF9JbGDE7JfbrOP7eL+40roRXMYFlKzP5Jnt09+UpCqk+r0jihLIeOada+NBD8L VliE2CEqKHI8Cr8YbczJMLBblYfR6wtSf3cNet+1f3WL3oQNOZdnqqC8QW+9CsOatTh9 IpqoLF7nLN/sSfyxKohu94QP3V0HIgkXN1A90DmGWfZl5usOj3eP0HfnUE6ejueaF3V9 zoeA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1785641797; x=1786246597; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=qD2qXSjpg7GKB0+eu4XYgq+uerxEEi3/J12T+Km3DHo=; b=byYIEZhCUbWFJg9qXlGyyonpDGaa2+TYHZGmnOC2xt98rGkREzdXkWNc1gf6Y4nSv1 waENOb4XGOkcWA3tdHeMKUBDg6BYRVaCsnQNx1FQVg/DQAIjbRkGWzOB1noEWqPvPU4R 2AbGUzg/kut8gMl5sTAtD1QQycteN7qmaedrBqZy6y4wEDxDv4haZIPmAf2xqm7UhMT1 MfA+eB2RFwYq330JBa673IG4EJfS2gzDeQw/MYfw/TVJoT+IAidtafSJTZC+X+MyqkBz b5Hqbu4PMvbtYu09WZmKupMwJSAj47j2QnA2OpSbFBA2IdomRqd+jOBQSqn+qxY9lJJz PIiQ== X-Gm-Message-State: AOJu0YzlyqoTS8Rd3P2VWpkrOrvyTrmU3tnPYt2CVuKVEXLq+s7lnaX+ UGK/4wA8vNVfINlmDTZrm0wUKl1pkAOe3aDHOTJAHmYIATLlFoamz74MmpkfmxQPtzxNsESpSAt P0+O5MPg= X-Gm-Gg: AR+sD139HhBz5iIuh9cys64iX3QRsmmXe6LJljPwFRnP8kvYl53OOHDVGt0sp7jdCcw 7KHyUMiLYotRFQ6F59aDF6jx1WkWyzqw9len33iqHiDM44VJin13FDnUTaOKusJ3lKiAkVNhMM7 jRE4H4owQHdNyhI1Vnlp7jmotWBPfHUYA0aHH1EbAu5hvktqg9sSzUR9oMIlvibLTa7vM9v6htL 5A7O4xEtRbzMhGpESVR+90QtzGumvYvSng520NDYyNfdEksDYx0jf7rGi9jHYjJKIAF2a4ym1/p 6QoV+X1azgUOqw4tlgHDVuV7hOdzPKFvJLTXTYweXDfJq3JxieCK6umSSiQioakxGCSX5YGyhcr SLbT+LCdPmHhrL7Di0dm9XkR8xZXdRbh7V7NHDICcSX71HgiZ56L0Q8605tumplEJMX9nsV4C8m Q21JtNx4ldAHd0Do8JpnE1ALedHvZdpueVJpT4t/drZrg8v2rYkOfTL/W1e+ZjMkMAk6IijgsL4 tlHDlOCQpdmLbq72OlZEIn0x/xGfQUi8zAMzn9Fmcy4 X-Received: by 2002:a17:90a:e7cf:b0:37f:eda5:516f with SMTP id 98e67ed59e1d1-38fbc0c3541mr6427936a91.0.1785641796789; Sat, 01 Aug 2026 20:36:36 -0700 (PDT) From: Joaquin Varela To: pve-devel@lists.proxmox.com Subject: [PATCH docs v2 2/5] storage: harden ZFS over NVMe/TCP guidance Date: Sun, 2 Aug 2026 00:36:27 -0300 Message-ID: X-Mailer: git-send-email 2.54.0.windows.1 In-Reply-To: References: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-SPAM-LEVEL: Spam detection results: 0 AWL 0.029 Adjusted score from AWL reputation of From: address DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DMARC_PASS -0.1 DMARC pass policy RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Message-ID-Hash: OXKGZCD43BDNTR6ZBU4RKTWE5V73LUOS X-Message-ID-Hash: OXKGZCD43BDNTR6ZBU4RKTWE5V73LUOS X-MailFrom: joaquinvarela@neatech.ar X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: Joaquin Varela X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Clarify interface consistency, control-plane availability, safe storage removal, offline resize and the DH-HMAC-CHAP security boundary. Require qualification of fencing and independent failure domains. Do not present nested-lab validation as hardware sizing. Signed-off-by: Joaquin Varela --- pve-storage-zfsnvme.adoc | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/pve-storage-zfsnvme.adoc b/pve-storage-zfsnvme.adoc index 46d16ad..c9ae180 100644 --- a/pve-storage-zfsnvme.adoc +++ b/pve-storage-zfsnvme.adoc @@ -35,7 +35,10 @@ The following properties are specific to ZFS over NVMe/TCP: server:: -IP address or DNS name used for the SSH control connection. +IP address or DNS name used for the SSH control connection. Connected guest I/O +uses the independent NVMe/TCP data paths, but capacity reporting and lifecycle +operations require this endpoint. Use a redundant management DNS name or VIP +where the storage appliance provides one. pool:: @@ -55,7 +58,8 @@ nvme-host-ifaces:: Comma-separated local interfaces, matched to `nvme-portals` by position. An explicit interface prevents a failed data path from reconnecting over the -management network. +management network. Activation fails before changing target state if any +configured interface is missing on the local node. dhchap-key:: @@ -130,6 +134,10 @@ is not a single point of failure. Online resize of a running guest disk is not supported. Stop the VM before resizing; the new size is detected when the block device is reopened. +Removing the storage disconnects the complete subsystem. The backend requires +its owned ZFS dataset to be empty and also refuses the operation while a local +process or kernel block holder is using one of its namespaces. + Storage Features ~~~~~~~~~~~~~~~~ -- 2.54.0.windows.1