Description of problem:
When you set allow_kill to 0, the qdiskd master no longer asks CMAN to evict/fence the presumed-dead host. However, it will still write an eviction notice to disk. If the presumed-dead host reads in the eviction notice, it will reboot itself.
If storage is flaky (for example, exhibiting long delays for I/O), users may wish to disable all qdiskd failure-recovery actions in order to sabilize the cluster - this includes both CMAN *and* disk eviction.
Today, the former is possible, but the latter is not.
We need the ability to disable disk-based eviction.
There are two possibilities:
1) Simply do not write eviction notices, or
2) Do not act on eviction notices by reboot -- instead, restart qdiskd with a new incarnation #.
*** This bug has been marked as a duplicate of bug 602731 ***