ZFS needs more robust mechanism to avoid false ereports for device removal
Device removal notification is asychronous with respect to the ZFS I/O path, so a "faulty" diagnosis may occur when I/O errors are encountered. In the current implementation, if a removal notification arrives within a 15-second window, the diagnosis is discarded. When
failmode is set to
panic for a pool, a temporary I/O outage can result in a panic with the "false" ereport being written out.
6937608 ( http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=6937608 ) implemented functionality to ignore ereports on import that are older than the current time of day. This is inherently unreliable.