github-actions[bot] commented on issue #13051: URL: https://github.com/apache/cloudstack/issues/13051#issuecomment-5330088797
## ๐ฏ Triage report CloudStack does not enforce unique volume snapshot names, so two snapshots on the same volume with the same name silently overwrite each other's underlying file on secondary storage; deleting one DB entry then removes the file backing the other, causing broken/orphaned snapshot references and potential data loss. ### ๐ Assessment | Dimension | Value | Reasoning | |---|---|---| | **Type** | type:bug | Missing validation leads to real data loss, not just a cosmetic issue | | **Component** | component:primary-storage | Snapshot naming/storage path collision; also touches secondary storage but primary volume/snapshot management is the root cause | | **Severity** | Severity:Major | Can cause silent, unrecoverable loss of a snapshot's data | | **Labels** | type:bug, component:primary-storage | | | **Coding agent** | Suitable | Well-defined scope: add a uniqueness check/validation on snapshot name per volume at creation time; clear reproduction steps provided | ### ๐ Similar issues No similar open issues found; this appears to be a distinct, previously unreported bug about snapshot name uniqueness not being enforced. <details><summary>๐ก Notes and suggestions</summary> - Suggested fix: enforce snapshot name uniqueness per volume (or generate a unique storage-side filename independent of the user-supplied display name) in `createSnapshot` validation. - Consider whether existing snapshots in the field may already have silent collisions; a migration/audit script might be needed to detect orphaned references. </details> > Generated by [Daily Issue Triage](https://github.com/apache/cloudstack/actions/runs/32143747223) ยท sonnet50 259.3K ยท [โท](https://github.com/search?q=repo%3Aapache%2Fcloudstack+%22gh-aw-workflow-call-id%3A+apache%2Fcloudstack%2Fdaily-issue-triage%22&type=issues) > <details> <summary>Add this agentic workflows to your repo</summary> To install this agentic workflow, run ``` gh aw add githubnext/agentics/workflows/daily-issue-triage.md@d7c1dc4b72b00607a67caaffdcc216cb64379cf9 ``` </details> <!-- gh-aw-agentic-workflow: Daily Issue Triage, engine: copilot, version: 1.0.52, model: claude-sonnet-5, id: 32143747223, workflow_id: daily-issue-triage, run: https://github.com/apache/cloudstack/actions/runs/32143747223 --> <!-- gh-aw-workflow-call-id: apache/cloudstack/daily-issue-triage --> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
