rados: safety interlock on 'rmpool' command

This is a very easy way for a user to do a lot of damage with no way back. Make sure they mean it. Signed-off-by: Sage Weil <[email protected]>
zmc · Jan 23, 2013 · c061e84 · c061e84
1 parent c993ac9
commit c061e84
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/src/rados.cc b/src/rados.cc
@@ -1776,6 +1776,16 @@ static int rados_tool_common(const std::map < std::string, std::string > &opts,
   else if (strcmp(nargs[0], "rmpool") == 0) {
     if (nargs.size() < 2)
       usage_exit();
+    if (nargs.size() < 4 ||
+	strcmp(nargs[1], nargs[2]) != 0 ||
+	strcmp(nargs[3], "--yes-i-really-really-mean-it") != 0) {
+      cerr << "WARNING:\n"
+	   << "  This will PERMANENTLY DESTROY an entire pool of object with no way back.\n"
+	   << "  To confirm, pass the pool to remove twice, followed by\n"
+	   << "  --yes-i-really-really-mean-it" << std::endl;
+      cout << nargs << std::endl;
+      return 1;
+    }
     ret = rados.pool_delete(nargs[1]);
     if (ret >= 0) {
       cout << "successfully deleted pool " << nargs[1] << std::endl;