2016-11-03 12:29:30 +05:30
|
|
|
# Sidekiq MemoryKiller
|
|
|
|
|
|
|
|
|
|
The GitLab Rails application code suffers from memory leaks. For web requests
|
|
|
|
|
this problem is made manageable using
|
2019-12-21 20:55:43 +05:30
|
|
|
[`unicorn-worker-killer`](https://github.com/kzk/unicorn-worker-killer) which
|
2016-11-03 12:29:30 +05:30
|
|
|
restarts Unicorn worker processes in between requests when needed. The Sidekiq
|
|
|
|
|
MemoryKiller applies the same approach to the Sidekiq processes used by GitLab
|
|
|
|
|
to process background jobs.
|
|
|
|
|
|
|
|
|
|
Unlike unicorn-worker-killer, which is enabled by default for all GitLab
|
|
|
|
|
installations since GitLab 6.4, the Sidekiq MemoryKiller is enabled by default
|
|
|
|
|
_only_ for Omnibus packages. The reason for this is that the MemoryKiller
|
2019-12-21 20:55:43 +05:30
|
|
|
relies on runit to restart Sidekiq after a memory-induced shutdown and GitLab
|
|
|
|
|
installations from source do not all use runit or an equivalent.
|
2016-11-03 12:29:30 +05:30
|
|
|
|
|
|
|
|
With the default settings, the MemoryKiller will cause a Sidekiq restart no
|
|
|
|
|
more often than once every 15 minutes, with the restart causing about one
|
|
|
|
|
minute of delay for incoming background jobs.
|
|
|
|
|
|
2019-07-07 11:18:12 +05:30
|
|
|
Some background jobs rely on long-running external processes. To ensure these
|
|
|
|
|
are cleanly terminated when Sidekiq is restarted, each Sidekiq process should be
|
|
|
|
|
run as a process group leader (e.g., using `chpst -P`). If using Omnibus or the
|
|
|
|
|
`bin/background_jobs` script with `runit` installed, this is handled for you.
|
|
|
|
|
|
2016-11-03 12:29:30 +05:30
|
|
|
## Configuring the MemoryKiller
|
|
|
|
|
|
|
|
|
|
The MemoryKiller is controlled using environment variables.
|
|
|
|
|
|
2019-12-21 20:55:43 +05:30
|
|
|
- `SIDEKIQ_DAEMON_MEMORY_KILLER`: defaults to 0. When set to 1, the MemoryKiller
|
|
|
|
|
works in _daemon_ mode. Otherwise, the MemoryKiller works in _legacy_ mode.
|
|
|
|
|
|
|
|
|
|
In _legacy_ mode, the MemoryKiller checks the Sidekiq process RSS after each job.
|
|
|
|
|
|
|
|
|
|
In _daemon_ mode, the MemoryKiller checks the Sidekiq process RSS every 3 seconds
|
|
|
|
|
(defined by `SIDEKIQ_MEMORY_KILLER_CHECK_INTERVAL`).
|
|
|
|
|
|
|
|
|
|
- `SIDEKIQ_MEMORY_KILLER_MAX_RSS`: if this variable is set, and its value is greater
|
|
|
|
|
than 0, the MemoryKiller is enabled. Otherwise the MemoryKiller is disabled.
|
|
|
|
|
|
|
|
|
|
`SIDEKIQ_MEMORY_KILLER_MAX_RSS` defines the Sidekiq process allowed RSS.
|
|
|
|
|
|
|
|
|
|
In _legacy_ mode, if the Sidekiq process exceeds the allowed RSS then an irreversible
|
|
|
|
|
delayed graceful restart will be triggered. The restart of Sidekiq will happen
|
|
|
|
|
after `SIDEKIQ_MEMORY_KILLER_GRACE_TIME` seconds.
|
|
|
|
|
|
|
|
|
|
In _daemon_ mode, if the Sidekiq process exceeds the allowed RSS for longer than
|
|
|
|
|
`SIDEKIQ_MEMORY_KILLER_GRACE_TIME` the graceful restart will be triggered. If the
|
|
|
|
|
Sidekiq process go below the allowed RSS within `SIDEKIQ_MEMORY_KILLER_GRACE_TIME`,
|
|
|
|
|
the restart will be aborted.
|
|
|
|
|
|
|
|
|
|
The default value for Omnibus packages is set
|
|
|
|
|
[in the Omnibus GitLab
|
2016-11-03 12:29:30 +05:30
|
|
|
repository](https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/files/gitlab-cookbooks/gitlab/attributes/default.rb).
|
2019-12-21 20:55:43 +05:30
|
|
|
|
|
|
|
|
- `SIDEKIQ_MEMORY_KILLER_HARD_LIMIT_RSS`: is used by _daemon_ mode. If the Sidekiq
|
|
|
|
|
process RSS (expressed in kilobytes) exceeds `SIDEKIQ_MEMORY_KILLER_HARD_LIMIT_RSS`,
|
|
|
|
|
an immediate graceful restart of Sidekiq is triggered.
|
|
|
|
|
|
|
|
|
|
- `SIDEKIQ_MEMORY_KILLER_CHECK_INTERVAL`: used in _daemon_ mode to define how
|
|
|
|
|
often to check process RSS, default to 3 seconds.
|
|
|
|
|
|
|
|
|
|
- `SIDEKIQ_MEMORY_KILLER_GRACE_TIME`: defaults to 900 seconds (15 minutes).
|
|
|
|
|
The usage of this variable is described as part of `SIDEKIQ_MEMORY_KILLER_MAX_RSS`.
|
|
|
|
|
|
|
|
|
|
- `SIDEKIQ_MEMORY_KILLER_SHUTDOWN_WAIT`: defaults to 30 seconds. This defines the
|
|
|
|
|
maximum time allowed for all Sidekiq jobs to finish. No new jobs will be accepted
|
|
|
|
|
during that time, and the process will exit as soon as all jobs finish.
|
|
|
|
|
|
|
|
|
|
If jobs do not finish during that time, the MemoryKiller will interrupt all currently
|
|
|
|
|
running jobs by sending `SIGTERM` to the Sidekiq process.
|
|
|
|
|
|
|
|
|
|
If the process hard shutdown/restart is not performed by Sidekiq,
|
|
|
|
|
the Sidekiq process will be forcefully terminated after
|
|
|
|
|
`Sidekiq.options[:timeout] * 2` seconds. An external supervision mechanism
|
|
|
|
|
(e.g. runit) must restart Sidekiq afterwards.
|
