4 ms·
I think you've misunderstood my point. The design I described does not require any component to be perfect. If any of these components (including the kernel)
by dap 11y ago
I think you've misunderstood my point. The design I described does not require any component to be perfect. If any of these components (including the kernel) crashes, the system _still_ converges to the correct state.
- ori_b 11y agoYou missed my point. At the moment, you're assuming that the kernel behavior will reliably, buglessly fall into one of two outcomes: Either lossless full system reset, or detect init has failed and restart it. You're ignoring the possibility of, deadlocks, failures in detecting that init has crashed, bugs in the special casing of init to restart it, etc. You are assuming that there are components that do certain things perfectly reliably. You haven't gotten rid of a correctness assumption, you've just shuffled it around a bit.