Re: Changing the state of data checksums in a running cluster

Daniel Gustafsson <daniel@yesql.se>

From: Daniel Gustafsson <daniel@yesql.se>
To: Tomas Vondra <tomas@vondra.me>
Cc: Andres Freund <andres@anarazel.de>, Bernd Helmle <mailings@oopsware.de>, Michael Paquier <michael@paquier.xyz>, Michael Banck <mbanck@gmx.net>, PostgreSQL Hackers <pgsql-hackers@lists.postgresql.org>
Date: 2026-03-16T23:36:11Z
Lists: pgsql-hackers

Attachments

> On 15 Mar 2026, at 23:47, Tomas Vondra <tomas@vondra.me> wrote:

>> * The change to XLOG_CHECKPOINT_REDO to move the wal_level into a proper record
>>  structure should be pulled out as a 0001 patch as it's an cleanup that has
>>  value on its own.
> 
> Makes sense, but it's going to be harder because since d774072f0040 all
> 4 bits in XLR_INFO are used.

Fixed by adding a second XLOG rmgr.

> 1) Is this actually doing the expected thing?
> 
>   INJECTION_POINT("datachecksumsworker-initial-dblist", DatabaseList);
> 
> We're passing a regular pointer to the database list, so can the
> injection point actually modify it? I suppose it happens to work because
> dc_dblist() removes the last item, so the pointer to the list does not
> change. But that's luck.

Fixed.

> 2) ProcessAllDatabases may be misusing processed_databases

Good point, we need to track both the number of processed as well as the
cumulative total.

> 3) DATACHECKSUMSWORKER_MAX_DB_RETRIES / DATACHECKSUMSWORKER_FAILED
> 
> What happens if a database reaches the maximum number of retries? We
> mark that entry as failed, but AFAIK we'll still try to process any
> remaining databases. Isn't that already doomed and we won't be able to
> enable checksums? So why not to simply abort the loop right away?

It might be, but it can also fail because it is concurrently dropped, in that
case we don't consider it a failure as it is the expected outcome.  This is
tested for at the end of the loop, but maybe it can be detected sooner to error
out early on actual failures.

--
Daniel Gustafsson

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →
  1. Use correct datatype for PID

  2. Improve comments in online checksums code

  3. Fix checksum state transition during promotion

  4. Fix regex searching for page verification failures in tests

  5. Apply data-checksum worker throttling parameters

  6. Skip WAL for unlogged main fork during online checksum enable

  7. Fix data_checksum GUC show_hook

  8. Improve database detection logic in datachecksumsworker

  9. Improve handling of concurrent checksum requests

  10. Typo and spelling fixups for online checksums

  11. Fix invalid checksum state transition in checkpoints

  12. Handle data_checksum state changes during launcher_exit

  13. Test improvements for online checksums

  14. Prevent pg_enable/disable_data_checksums() on standby

  15. Test stabilization for online checksums

  16. Make data checksum tests more resilient for slow machines

  17. Formalize WAL record for XLOG_CHECKPOINT_REDO

  18. Revert "Get rid of WALBufMappingLock"

  19. Get rid of WALBufMappingLock

  20. Improve grammar of options for command arrays in TAP tests