On 4/10/17 23:22, Tom Lane wrote:
> Personally I'd err on the side of "starting up degraded is better than
> not starting at all". Or maybe we should invent a GUC to let DBAs
> express their preference on that?
If we defaulted allow_degraded to yes, then users wouldn't find that
setting until they do start up degraded and want to fix things, in which
case they could just fix the settings that caused the degraded startup
in the first place.
If we defaulted to no, then I don't think any user would go in and
change it. "Sure, I'll allow degraded startup. That sounds useful."
I think there is no clear agreement here, and no historically consistent
behavior. I'm prepared to let it go and cross it off the list of open
items. I believe we should keep thinking about it, but it's not
something that has to hold up beta.
--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services