unicorn 5.2.0 → 5.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 75575863e5a09d4ac351269084628052c8ec554c
-  data.tar.gz: 5f7fc37e895b8982c3076fc56642ec90d8632d46
+  metadata.gz: cae827cc4674fdbfd9291caf3037f0fe4a5e67b7
+  data.tar.gz: e6518f02407def59575f3efb01a54019e0fdcab9
 SHA512:
-  metadata.gz: 85c7d9f5d6c3056508758a7375809d477ee7e640167470711e4fda53e7f6c52ea6688e708fde80af5e54262dcdd218c0ef9fc966221c1e30762b0bdabf5c41fb
-  data.tar.gz: 1829ab9e474b1932617c97e37d6efa1075c1c147f8aa726777478741b5ae9106a163194647e03ff8d73786017dd2142afad8804d16625fde48876e10dc0e3a30
+  metadata.gz: 2a9bd5f4dacb2aa56002b9899d1725bdfc124def5b9287ff464b3ed0e47785db1aa14b52757173d990972ad5a3a4afc44e37f052f7ef8ac92ae7fac0daa3645d
+  data.tar.gz: da9be558581cb34ee8b8c81bdcfcd659dc5e26d0cc42aa291ced5749ea07cbfe14fdce7a2fbfd43339990331e9c58e346d0129ea035c817ff59c8825d34f5645

data/.manifest

@@ -140,6 +140,7 @@ test/benchmark/stack.ru
 test/exec/README
 test/exec/test_exec.rb
 test/test_helper.rb
+test/unit/test_ccc.rb
 test/unit/test_configurator.rb
 test/unit/test_droplet.rb
 test/unit/test_http_parser.rb

data/.olddoc.yml

@@ -12,7 +12,6 @@ noindex:
 - TODO
 - unicorn_rails_1
 public_email: unicorn-public@bogomips.org
-private_email: unicorn@bogomips.org
 nntp_url:
   - nntp://news.public-inbox.org/inbox.comp.lang.ruby.unicorn
   - nntp://news.gmane.org/gmane.comp.lang.ruby.unicorn.general

data/GIT-VERSION-FILE

@@ -1 +1 @@
-GIT_VERSION = 5.2.0
+GIT_VERSION = 5.3.1

data/GIT-VERSION-GEN

@@ -1,5 +1,5 @@
 #!/usr/bin/env ruby
-DEF_VER = "v5.2.0"
+DEF_VER = "v5.3.1"
 CONSTANT = "Unicorn::Const::UNICORN_VERSION"
 RVF = "lib/unicorn/version.rb"
 GVF = "GIT-VERSION-FILE"

data/HACKING

@@ -104,7 +104,6 @@ don't email the git mailing list or maintainer with Unicorn patches :)
 
 In order to build the gem, you must install the following components:
 
- * olddoc (RubyGem)
  * pandoc
 
 You can build the Unicorn gem with the following command:

data/ISSUES

@@ -9,14 +9,16 @@ submit patches and/or obtain support after you have searched the
 * Cc: all participants in a thread or commit, as subscription is optional
 * Do not {top post}[http://catb.org/jargon/html/T/top-post.html] in replies
 * Quote as little as possible of the message you're replying to
-* Do not send HTML mail or images, it will be flagged as spam
-* Anonymous and pseudonymous messages will always be welcome.
+* Do not send HTML mail or images,
+  they hurt reader privacy and will be flagged as spam
+* Anonymous and pseudonymous messages will ALWAYS be welcome
 * The email submission port (587) is enabled on the bogomips.org MX:
   https://bogomips.org/unicorn-public/20141004232241.GA23908@dcvr.yhbt.net/t/
 
 If your issue is of a sensitive nature or you're just shy in public,
-then feel free to email us privately at mailto:unicorn@bogomips.org
-instead and your issue will be handled discreetly.
+use anonymity tools such as Tor or Mixmaster; and rely on the public
+mail archives for responses.  Be sure to scrub sensitive log messages
+and such.
 
 If you don't get a response within a few days, we may have forgotten
 about it so feel free to ask again.
@@ -64,14 +66,14 @@ document distributed with git) on guidelines for patch submission.
 == Contact Info
 
 * public: mailto:unicorn-public@bogomips.org
-* private: mailto:unicorn@bogomips.org
 * nntp://news.gmane.org/gmane.comp.lang.ruby.unicorn.general
 * nntp://news.public-inbox.org/inbox.comp.lang.ruby.unicorn
 * https://bogomips.org/unicorn-public/
+* http://ou63pmih66umazou.onion/unicorn-public/
 
 Mailing list subscription is optional, so Cc: all participants.
 
-You can follow along via NNTP:
+You can follow along via NNTP (read-only):
 
 	nntp://news.public-inbox.org/inbox.comp.lang.ruby.unicorn
 	nntp://news.gmane.org/gmane.comp.lang.ruby.unicorn.general
@@ -79,6 +81,7 @@ You can follow along via NNTP:
 Or Atom feeds:
 
 	https://bogomips.org/unicorn-public/new.atom
+	http://ou63pmih66umazou.onion/unicorn-public/new.atom
 
 	The HTML archives at https://bogomips.org/unicorn-public/
 	also has links to per-thread Atom feeds and downloadable
@@ -88,3 +91,6 @@ You may optionally subscribe via plain-text email:
 
 	mailto:unicorn-public+subscribe@bogomips.org
 	(and confirming the auto-reply)
+
+Just keep in mind we suck at delivering email, so using NNTP,
+or Atom feeds might be a better bet...

data/LATEST

@@ -1,37 +1,103 @@
-=== unicorn 5.1.0 - rack is optional, again / 2016-04-01 00:35 UTC
+=== unicorn 5.3.0 / 2017-04-01 08:03 UTC
 
-  Note: no code changes since 5.1.0.pre1 from January.^WNo, wait,
-  last minute performance improvement added today.  See below.
+  A couple of portability fixes from Dylan Thacker-Smith and
+  Jeremy Evans since 5.3.0.pre1 over a week ago, but this looks
+  ready for a stable release, today.
 
-  The big change is rack is not required (but still recommended).
-  Applications are expected to depend on rack on their own so they can
-  specify the version of rack they prefer without unicorn pulling
-  in a newer, potentially incompatible version.
+  When I started this over 8 years ago, I wondered if this would
+  just end up being an April Fools' joke.  Guess not.  I guess I
+  somehow tricked people into using a terribly marketed web server
+  that cannot talk directly to untrusted clients :x  Anyways,
+  unicorn won't be able to handle slow clients 8 years from now,
+  either, or 80 years from now.  And I vow never to learn to use
+  new-fangled things like epoll, kqueue, or threads :P
 
-  unicorn will always attempt to work with multiple versions of rack
-  as practical.
+  Anyways, this is a largish release with several new features,
+  and no backwards incompatibilities.
 
-  The HTTP parser also switched to using the TypedData C-API for
-  extra type safety and memory usage accounting support in the
-  'objspace' extension.
+  Simon Eskildsen contributed heavily using TCP_INFO under Linux
+  to implement the (now 5 year old) check_client_connection feature:
 
-  Thanks to Adam Duke to bringing the rack change to our attention
-  and Aaron Patterson for helping with the matter.
+    https://bogomips.org/unicorn/Unicorn/Configurator.html#method-i-check_client_connection
+    https://bogomips.org/unicorn-public/?q=s:check_client_connection&d:..20170401&x=t
 
-  Last minute change: we now support the new leftpad() syscall under
-  Linux for major performance and security improvement:
+  This also led to FreeBSD and OpenBSD portability improvements in
+  one of our dependencies, raindrops:
 
-      http://mid.gmane.org/1459463613-32473-1-git-send-email-richard@nod.at
+     https://bogomips.org/raindrops-public/20170323024829.GA5190@dcvr/T/#u
 
-  8^H9 changes since 5.0.1:
+  Jeremy Evans contributed several new features.  First he
+  implemented after_worker_exit to aid debugging:
 
-        http: TypedData C-API conversion
-        various documentation updates
-        doc: bump olddoc to ~> 1.2 for extra NNTP URL
-        rack is optional at runtime, required for dev
-        doc update for ClientShutdown exceptions class
-        unicorn 5.1.0.pre1 - rack is optional, again
-        doc: reference --keep-file-descriptors for "bundle exec"
-        doc: further trimming to reduce noise
-        use leftpad Linux syscall for speed!
+    https://bogomips.org/unicorn/Unicorn/Configurator.html#method-i-after_worker_exit
+    https://bogomips.org/unicorn-public/?q=s:after_worker_exit&d:..20170401&x=t#t
+
+  And then security-related features to isolate workers.  Workers
+  may now chroot to drop access to the master filesystem, and the
+  new after_worker_ready configuration hook now exists to aid with
+  chroot support in workers:
+
+    https://bogomips.org/unicorn/Unicorn/Configurator.html#method-i-after_worker_ready
+    https://bogomips.org/unicorn/Unicorn/Worker.html#method-i-user
+    https://bogomips.org/unicorn-public/?q=s:after_worker_ready&d:..20170401&x=t#t
+    https://bogomips.org/unicorn-public/?q=s:chroot&d:..20170401&x=t#t
+
+  Additionally, workers may run in a completely different VM space
+  (nullifying preload_app and any CoW savings) with the new
+  worker_exec option:
+
+    https://bogomips.org/unicorn/Unicorn/Configurator.html#method-i-worker_exec
+    https://bogomips.org/unicorn-public/?q=s:worker_exec&d:..20170401&x=t#t
+
+  There are also several improvements to FreeBSD and OpenBSD
+  support with the addition of these features.
+
+  shortlog of changes since v5.2.0 (2016-10-31):
+
+  Dylan Thacker-Smith (1):
+        Check for Socket::TCP_INFO constant before trying to get TCP_INFO
+
+  Eric Wong (30):
+        drop rb_str_set_len compatibility replacement
+        TUNING: document THP caveat for Linux users
+        tee_input: simplify condition for IO#write
+        remove response_start_sent
+        http_request: freeze constant strings passed IO#write
+        Revert "remove response_start_sent"
+        t/t0012-reload-empty-config.sh: access ivars directly if needed
+        t0011-active-unix-socket.sh: fix race condition in test
+        new test for check_client_connection
+        revert signature change to HttpServer#process_client
+        support "struct tcp_info" on non-Linux and Ruby 2.2+
+        unicorn_http: reduce rb_global_variable calls
+        oob_gc: rely on opt_aref_with optimization on Ruby 2.2+
+        http_request: reduce insn size for check_client_connection
+        freebsd: avoid EINVAL when setting accept filter
+        test-lib: expr(1) portability fix
+        tests: keep disabled tests defined
+        test_exec: SO_KEEPALIVE value only needs to be true
+        doc: fix links to raindrops project
+        http_request: support proposed Raindrops::TCP states on non-Linux
+        ISSUES: expand on mail archive info + subscription disclaimer
+        test_ccc: use a pipe to synchronize test
+        doc: remove private email support address
+        input: update documentation and hide internals.
+        http_server: initialize @pid ivar
+        gemspec: remove olddoc from build dependency
+        doc: add version annotations for new features
+        unicorn 5.3.0.pre1
+        doc: note after_worker_exit is also 5.3.0+
+        test_exec: SO_KEEPALIVE value only needs to be true (take #2)
+
+  Jeremy Evans (7):
+        Add after_worker_exit configuration option
+        Fix code example in after_worker_exit documentation
+        Add support for chroot to Worker#user
+        Add after_worker_ready configuration option
+        Add worker_exec configuration option
+        Don't pass a block for fork when forking workers
+        Check for SocketError on first ccc attempt
+
+  Simon Eskildsen (1):
+        check_client_connection: use tcp state on linux
 

data/Links

@@ -23,7 +23,7 @@ or services behind them.
 * {golden_brindle}[https://github.com/simonoff/golden_brindle] - tool to
   manage multiple unicorn instances/applications on a single server
 
-* {raindrops}[http://raindrops.bogomips.org/] - real-time stats for
+* {raindrops}[https://bogomips.org/raindrops/] - real-time stats for
   preforking Rack servers
 
 * {UnXF}[https://bogomips.org/unxf/]  Un-X-Forward* the Rack environment,

data/NEWS

@@ -1,3 +1,219 @@
+=== unicorn 5.3.0 / 2017-04-01 08:03 UTC
+
+  A couple of portability fixes from Dylan Thacker-Smith and
+  Jeremy Evans since 5.3.0.pre1 over a week ago, but this looks
+  ready for a stable release, today.
+
+  When I started this over 8 years ago, I wondered if this would
+  just end up being an April Fools' joke.  Guess not.  I guess I
+  somehow tricked people into using a terribly marketed web server
+  that cannot talk directly to untrusted clients :x  Anyways,
+  unicorn won't be able to handle slow clients 8 years from now,
+  either, or 80 years from now.  And I vow never to learn to use
+  new-fangled things like epoll, kqueue, or threads :P
+
+  Anyways, this is a largish release with several new features,
+  and no backwards incompatibilities.
+
+  Simon Eskildsen contributed heavily using TCP_INFO under Linux
+  to implement the (now 5 year old) check_client_connection feature:
+
+    https://bogomips.org/unicorn/Unicorn/Configurator.html#method-i-check_client_connection
+    https://bogomips.org/unicorn-public/?q=s:check_client_connection&d:..20170401&x=t
+
+  This also led to FreeBSD and OpenBSD portability improvements in
+  one of our dependencies, raindrops:
+
+     https://bogomips.org/raindrops-public/20170323024829.GA5190@dcvr/T/#u
+
+  Jeremy Evans contributed several new features.  First he
+  implemented after_worker_exit to aid debugging:
+
+    https://bogomips.org/unicorn/Unicorn/Configurator.html#method-i-after_worker_exit
+    https://bogomips.org/unicorn-public/?q=s:after_worker_exit&d:..20170401&x=t#t
+
+  And then security-related features to isolate workers.  Workers
+  may now chroot to drop access to the master filesystem, and the
+  new after_worker_ready configuration hook now exists to aid with
+  chroot support in workers:
+
+    https://bogomips.org/unicorn/Unicorn/Configurator.html#method-i-after_worker_ready
+    https://bogomips.org/unicorn/Unicorn/Worker.html#method-i-user
+    https://bogomips.org/unicorn-public/?q=s:after_worker_ready&d:..20170401&x=t#t
+    https://bogomips.org/unicorn-public/?q=s:chroot&d:..20170401&x=t#t
+
+  Additionally, workers may run in a completely different VM space
+  (nullifying preload_app and any CoW savings) with the new
+  worker_exec option:
+
+    https://bogomips.org/unicorn/Unicorn/Configurator.html#method-i-worker_exec
+    https://bogomips.org/unicorn-public/?q=s:worker_exec&d:..20170401&x=t#t
+
+  There are also several improvements to FreeBSD and OpenBSD
+  support with the addition of these features.
+
+  shortlog of changes since v5.2.0 (2016-10-31):
+
+  Dylan Thacker-Smith (1):
+        Check for Socket::TCP_INFO constant before trying to get TCP_INFO
+
+  Eric Wong (30):
+        drop rb_str_set_len compatibility replacement
+        TUNING: document THP caveat for Linux users
+        tee_input: simplify condition for IO#write
+        remove response_start_sent
+        http_request: freeze constant strings passed IO#write
+        Revert "remove response_start_sent"
+        t/t0012-reload-empty-config.sh: access ivars directly if needed
+        t0011-active-unix-socket.sh: fix race condition in test
+        new test for check_client_connection
+        revert signature change to HttpServer#process_client
+        support "struct tcp_info" on non-Linux and Ruby 2.2+
+        unicorn_http: reduce rb_global_variable calls
+        oob_gc: rely on opt_aref_with optimization on Ruby 2.2+
+        http_request: reduce insn size for check_client_connection
+        freebsd: avoid EINVAL when setting accept filter
+        test-lib: expr(1) portability fix
+        tests: keep disabled tests defined
+        test_exec: SO_KEEPALIVE value only needs to be true
+        doc: fix links to raindrops project
+        http_request: support proposed Raindrops::TCP states on non-Linux
+        ISSUES: expand on mail archive info + subscription disclaimer
+        test_ccc: use a pipe to synchronize test
+        doc: remove private email support address
+        input: update documentation and hide internals.
+        http_server: initialize @pid ivar
+        gemspec: remove olddoc from build dependency
+        doc: add version annotations for new features
+        unicorn 5.3.0.pre1
+        doc: note after_worker_exit is also 5.3.0+
+        test_exec: SO_KEEPALIVE value only needs to be true (take #2)
+
+  Jeremy Evans (7):
+        Add after_worker_exit configuration option
+        Fix code example in after_worker_exit documentation
+        Add support for chroot to Worker#user
+        Add after_worker_ready configuration option
+        Add worker_exec configuration option
+        Don't pass a block for fork when forking workers
+        Check for SocketError on first ccc attempt
+
+  Simon Eskildsen (1):
+        check_client_connection: use tcp state on linux
+
+=== unicorn 5.3.0.pre1 / 2017-03-24 00:25 UTC
+
+  A largish release with several new features.
+
+  Simon Eskildsen contributed heavily using TCP_INFO under Linux
+  to implement the (now 5 year old) check_client_connection feature:
+
+    https://bogomips.org/unicorn/Unicorn/Configurator.html#method-i-check_client_connection
+    https://bogomips.org/unicorn-public/?q=s:check_client_connection&d:..20170324&x=t
+
+  This also led to FreeBSD and OpenBSD portability improvements in
+  one of our dependencies, raindrops:
+
+     https://bogomips.org/raindrops-public/20170323024829.GA5190@dcvr/T/#u
+
+  Jeremy Evans contributed several new features.  First he
+  implemented after_worker_exit to aid debugging:
+
+    https://bogomips.org/unicorn/Unicorn/Configurator.html#method-i-after_worker_exit
+    https://bogomips.org/unicorn-public/?q=s:after_worker_exit&d:..20170324&x=t#t
+
+  And then security-related features to isolate workers.  Workers
+  may now chroot to drop access to the master filesystem, and the
+  new after_worker_ready configuration hook now exists to aid with
+  chroot support in workers:
+
+    https://bogomips.org/unicorn/Unicorn/Configurator.html#method-i-after_worker_ready
+    https://bogomips.org/unicorn/Unicorn/Worker.html#method-i-user
+    https://bogomips.org/unicorn-public/?q=s:after_worker_ready&d:..20170324&x=t#t
+    https://bogomips.org/unicorn-public/?q=s:chroot&d:..20170324&x=t#t
+
+  Additionally, workers may run in a completely different VM space
+  (nullifying preload_app and any CoW savings) with the new
+  worker_exec option:
+
+    https://bogomips.org/unicorn/Unicorn/Configurator.html#method-i-worker_exec
+    https://bogomips.org/unicorn-public/?q=s:worker_exec&d:..20170324&x=t#t
+
+  There are also several improvements to FreeBSD and OpenBSD
+  support with the addition of these features.
+
+  34 changes since 5.2.0 (2016-10-31):
+
+  Eric Wong (27):
+        drop rb_str_set_len compatibility replacement
+        TUNING: document THP caveat for Linux users
+        tee_input: simplify condition for IO#write
+        remove response_start_sent
+        http_request: freeze constant strings passed IO#write
+        Revert "remove response_start_sent"
+        t/t0012-reload-empty-config.sh: access ivars directly if needed
+        t0011-active-unix-socket.sh: fix race condition in test
+        new test for check_client_connection
+        revert signature change to HttpServer#process_client
+        support "struct tcp_info" on non-Linux and Ruby 2.2+
+        unicorn_http: reduce rb_global_variable calls
+        oob_gc: rely on opt_aref_with optimization on Ruby 2.2+
+        http_request: reduce insn size for check_client_connection
+        freebsd: avoid EINVAL when setting accept filter
+        test-lib: expr(1) portability fix
+        tests: keep disabled tests defined
+        test_exec: SO_KEEPALIVE value only needs to be true
+        doc: fix links to raindrops project
+        http_request: support proposed Raindrops::TCP states on non-Linux
+        ISSUES: expand on mail archive info + subscription disclaimer
+        test_ccc: use a pipe to synchronize test
+        doc: remove private email support address
+        input: update documentation and hide internals.
+        http_server: initialize @pid ivar
+        gemspec: remove olddoc from build dependency
+        doc: add version annotations for new features
+
+  Jeremy Evans (6):
+        Add after_worker_exit configuration option
+        Fix code example in after_worker_exit documentation
+        Add support for chroot to Worker#user
+        Add after_worker_ready configuration option
+        Add worker_exec configuration option
+        Don't pass a block for fork when forking workers
+
+  Simon Eskildsen (1):
+        check_client_connection: use tcp state on linux
+
+=== unicorn 5.2.0 / 2016-10-31 20:00 UTC
+
+  Most notably, this release allows us to support requests with
+  lines delimited by LF-only, as opposed to the standard CRLF
+  pair and allowed by RFC 2616 sec 19.3.
+
+  Thanks to Mishael A Sibiryakov for the explanation and change:
+
+    https://bogomips.org/unicorn-public/1476954332.1736.156.camel@junki.org/
+
+  Thanks to Let's Encrypt, the website also moves to HTTPS
+  <https://bogomips.org/unicorn/> to improve reader privacy.  The
+  "unicorn.bogomips.org" subdomain will be retired soon to reduce
+  subjectAltName bloat and speed up certificate renewals.
+
+  There's also the usual round of documentation and example
+  updates, too.
+
+  Eric Wong (7):
+        examples/init.sh: update to reduce upgrade raciness
+        doc: systemd should only kill master in example
+        examples/logrotate.conf: update example for systemd
+        doc: update gmane URLs to point to our own archives
+        relocate website to https://bogomips.org/unicorn/
+        TODO: remove Rack 2.x item
+        build: "install-gem" target avoids network
+
+  Mishael A Sibiryakov (1):
+        Add some tolerance (RFC2616 sec. 19.3)
+
 === unicorn 5.1.0 - rack is optional, again / 2016-04-01 00:35 UTC
 
   Note: no code changes since 5.1.0.pre1 from January.^WNo, wait,