I just got this information:
For XIV to be in jeopardy you need to lose 1 drive from one of the host-facing ingest nodes AND 1 drive from the normal data nodes within a few minutes (so there’s no time to rebuild) while writing to the thing.
Have no way of confirming this but it did come from a reliable source.
A customer recently tried pulling random drives and XIV didn’t shut down and was working fine, but they were from the data nodes.
Why can’t anyone post something concrete here? I’m sure IBM won’t post since the confusion serves them well.
For what it’s worth, the customer is really happy with the simplicity of the XIV GUI.