-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I get this repeated error - about once a second: Exception `Errno::EAGAIN'' at /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:643 - Resource temporarily unavailable - accept(2) Exception `Errno::EAGAIN'' at /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:643 - Resource temporarily unavailable - accept(2) Exception `Errno::EAGAIN'' at /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:643 - Resource temporarily unavailable - accept(2) Which seems to be related to: ready.each do |sock| begin process_client(sock.accept_nonblock) nr += 1 alive.chmod(m = 0 == m ? 1 : 0) rescue Errno::EAGAIN, Errno::ECONNABORTED end break if nr < 0 end My unicorn.conf is: worker_processes 4 working_directory "/etc/puppet" listen ''/tmp/puppet.sock'', :backlog => 1 listen 8140, :tcp_nopush => true timeout 10 pid "/tmp/puppet.pid" preload_app true GC.respond_to?(:copy_on_write_friendly=) and GC.copy_on_write_friendly = true before_fork do |server, worker| # the following is recomended for Rails + "preload_app true" # as there''s no need for the master process to hold a connection # defined?(ActiveRecord::Base) and # ActiveRecord::Base.connection.disconnect! # the following allows a new master process to incrementally # phase out the old master process with SIGTTOU to avoid a # thundering herd (especially in the "preload_app false" case) # when doing a transparent upgrade. The last worker spawned # will then kill off the old master process with a SIGQUIT. old_pid = "#{server.config[:pid]}.oldbin" if old_pid != server.pid begin sig = (worker.nr + 1) >= server.worker_processes ? :QUIT : :TTOU Process.kill(sig, File.read(old_pid).to_i) rescue Errno::ENOENT, Errno::ESRCH end end # optionally throttle the master from forking too quickly by sleeping sleep 1 end The platform is Fedora 10, Ruby 1.8.6. Oddly, if I comment out the preload I get: Exception `Errno::EPERM'' at /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:639 - Operation not permitted - /tmp/0.520680132392046 Unhandled listen loop exception #<Errno::EPERM: Operation not permitted - /tmp/0.520680132392046>. /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:639:in `chmod'' /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:639:in `worker_loop'' /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:534:in `spawn_missing_workers'' /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:534:in `fork'' /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:534:in `spawn_missing_workers'' /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:530:in `each'' /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:530:in `spawn_missing_workers'' /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:540:in `maintain_worker_count'' /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:215:in `start'' /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:28:in `run'' /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/bin/unicorn:165 /usr/bin/unicorn:19:in `load'' /usr/bin/unicorn:19 Repeatedly. Regards James Turnbull - -- Author of: * Pro Linux System Administration (http://tinyurl.com/linuxadmin) * Pulling Strings with Puppet (http://tinyurl.com/pupbook) * Pro Nagios 2.0 (http://tinyurl.com/pronagios) * Hardening Linux (http://tinyurl.com/hardeninglinux) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEVAwUBSwCM/iFa/lDkFHAyAQIiSggA5r3rFPGiY5AeratLgxPvUDE1OjnrhRGn HxoRAcM901BNvXT5i7fX5fMTayW7vPXiKd0IazottCDgd40TYlFTQZNpU9hUDx+g LRAKQ5M5gHTkFX6nqxFlys8WIA3xseDBBUBNxGnZ4YGbqUMg7tQ258b41hiU+4pW fxQgzYN7JjRQ7/u1Px+86aEEdSGHFYNAOSwG15b+iE/7hQbiWrlFIL7p7XcZqT8M UxDm6eTkhP1kry7zJ4wTxVsreXgCi75AaCJBfIIoKs0NMParJ/rBWB+42ZA+1t5/ aEaKXBOi47Kw3CmbsSh6Bi4zbTyuavCX6/tfOMNXx6jXygvykUzpgw==pJbE -----END PGP SIGNATURE-----
James Turnbull <james at lovedthanlost.net> wrote:> I get this repeated error - about once a second: > > Exception `Errno::EAGAIN'' at > /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:643 - > Resource temporarily unavailable - accept(2) > Exception `Errno::EAGAIN'' at > /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:643 - > Resource temporarily unavailable - accept(2) > Exception `Errno::EAGAIN'' at > /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:643 - > Resource temporarily unavailable - accept(2) > > Which seems to be related to: > > ready.each do |sock| > begin > process_client(sock.accept_nonblock) > nr += 1 > alive.chmod(m = 0 == m ? 1 : 0) > rescue Errno::EAGAIN, Errno::ECONNABORTED > end > break if nr < 0 > endHi James, This is expected. The kernel wakes up all the workers when there''s _one_ connection and they all race to accept() one client connection. One wins and accepts the connection, 3 lose and go back to sleep. With lots of worker processes, this can be a thundering herd problem but that''s why we encourage Unicorn as a backend server, not as a frontend server. If we only have one listener, we could do a blocking accept() call to avoid thundering herds under Linux, but testing on a 16-core box, I don''t remember being able to measure a performance improvement. But otherwise we have to use select() with multiple listeners. nginx uses a variety of non-portable locking mechanisms to implement its accept mutex, but that''s too much work under Ruby for little/no benefit. In the nginx case, sometimes even disabling the accept mutex entirely gives better performance.> My unicorn.conf is: > > worker_processes 4 > working_directory "/etc/puppet" > listen ''/tmp/puppet.sock'', :backlog => 1 > listen 8140, :tcp_nopush => true > timeout 10 > pid "/tmp/puppet.pid" > > preload_app true > GC.respond_to?(:copy_on_write_friendly=) and > GC.copy_on_write_friendly = true > > before_fork do |server, worker| > # the following is recomended for Rails + "preload_app true" > # as there''s no need for the master process to hold a connection > # defined?(ActiveRecord::Base) and > # ActiveRecord::Base.connection.disconnect! > > # the following allows a new master process to incrementally > # phase out the old master process with SIGTTOU to avoid a > # thundering herd (especially in the "preload_app false" case) > # when doing a transparent upgrade. The last worker spawned > # will then kill off the old master process with a SIGQUIT. > old_pid = "#{server.config[:pid]}.oldbin" > if old_pid != server.pid > begin > sig = (worker.nr + 1) >= server.worker_processes ? :QUIT : :TTOU > Process.kill(sig, File.read(old_pid).to_i) > rescue Errno::ENOENT, Errno::ESRCH > end > end > > # optionally throttle the master from forking too quickly by > sleeping > sleep 1 > end > > The platform is Fedora 10, Ruby 1.8.6. > > Oddly, if I comment out the preload I get: > > Exception `Errno::EPERM'' at > /usr/lib/ruby/gems/1.8/gems/unicorn-0.95.0/lib/unicorn.rb:639 - > Operation not permitted - /tmp/0.520680132392046Do you by any chance do user switching in your application or config.ru? Instead, since 0.94.0, I would do this: after_fork do |server, worker| worker.user(''user'', ''group'') if Process.euid == 0 end That way only the worker process drops permissions. The master really doesn''t do anything interesting. Of course *I* would just start Unicorn as a regular user and forget the complexity of user switching entirely... -- Eric Wong
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Eric Wong wrote:> This is expected. The kernel wakes up all the workers when there''s > _one_ connection and they all race to accept() one client connection. > One wins and accepts the connection, 3 lose and go back to sleep. With > lots of worker processes, this can be a thundering herd problem but > that''s why we encourage Unicorn as a backend server, not as a frontend > server.Ah okay - makes sense.> Do you by any chance do user switching in your application > or config.ru?In the application we do.> Instead, since 0.94.0, I would do this: > > after_fork do |server, worker| > worker.user(''user'', ''group'') if Process.euid == 0 > end > > That way only the worker process drops permissions. The master really > doesn''t do anything interesting. Of course *I* would just start > Unicorn as a regular user and forget the complexity of user switching > entirely...Okay thanks - will give that a shot. Regards James Turnbull - -- Author of: * Pro Linux System Administration (http://tinyurl.com/linuxadmin) * Pulling Strings with Puppet (http://tinyurl.com/pupbook) * Pro Nagios 2.0 (http://tinyurl.com/pronagios) * Hardening Linux (http://tinyurl.com/hardeninglinux) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEVAwUBSwCYGCFa/lDkFHAyAQIyPggA5XPzSOYgf4ekdBGoRcs4wp885eC8C/wY BIjzdxilCEhA8mqBw4Hrjo5sOebglOukACFla7QaDqyk2t1velQEpxj8sR2StNEe HHTbng/Jq3ryt4BxNucQWdKvdPTI3WJ3I9APqtGxNyh72FpY08uvAlUv02S8b/Aj mtFqbqi2gu+tkbOoqW1AeJEabjJHd7HyPhf2YlHowBaHG61bzrFRnuhvqN8R6SAq j3LI1kRpnTYdwKYEy3sLfR0OUSVmUuDkWjRkYt2tR2fAwCKkq2oupmcDUrvaT2Y2 fbQ8YJzoGjwVVvD1On/u6iNiTHZcOReYiHRsAhmtbaS+eHldSukHQw==EyRA -----END PGP SIGNATURE-----