Hi Adrian,
What does this mean for Nova applications ? Must they organize save shutdown of a file system ? How would they do that ?
Genode's general mechanism to destroy subsystems works as follows: When the parent decides to destroy a subsystem, it closes all sessions that were opened by the subsystem in reverse order. Naturally, those sessions comprise, among others, all file-system sessions held by the subsystem.
From the file system's point of view, this event looks like the client
issued a session-close request. The current approach would be to let the file-system call sync each time when a file-system session is closed.
Currently, there is no separate mechanism in place to gracefully shut down services.
Cheers Norman