Do signal handling and orphan reaping for Unix PID1 init processes
|Version on this page:||0.1.3.0|
|LTS Haskell 20.15:||0.1.3.1|
|Stackage Nightly 2023-03-23:||0.1.3.1|
|Latest on Hackage:||0.1.3.1|
Module documentation for 0.1.3.0
Do signal handling and orphan reaping for Unix PID1 init processes.
This provides a Haskell library, and an executable based on that library, for initializing signal handlers, spawning and child process, and reaping orphan processes. These are the responsibilities that must be fulfilled by the initial process in a Unix system, and in particular comes up when running Docker containers.
This library/executable will automatically detect if it is run as some process
besides PID1 and, if so, use a straightforward
exec system call instead.
NOTE This package is decidedly not portable, and will not work on Windows. If you have a use case where you think it makes sense to run on Windows, I’d be interested in hearing about it.
For a discussion on why this is useful, see this repo.
pid1 [-e|–env ENV] [-u|–user USER] [-g|–group GROUP] [-w|–workdir DIR] [-t|–timeout TIMEOUT] COMMAND [ARG1 ARG2 … ARGN]
ENV- Override environment variable from given name=value pair. Can be specified multiple times to set multiple environment variables.
USER- The username the process will setuid before executing COMMAND
GROUP- The group name the process will setgid before executing COMMAND
DIR- chdir to
DIRbefore executing COMMAND
TIMEOUT- timeout (in seconds) to wait for all child processes to exit
WARNING: by default pid1 will first send the TERM signal to it’s “immediate child” process.
In most scenarios that will be the only process running but in some cases that will be the
“main” process that could have spawned it’s own children. In this scenario it’s prudent to shutdown
the “main” process first, since usually it has mechanisms in place to shut down it’s children. If
we were to shutdown a child process before “main” was shutdown it might try to restart it.
This is why, if the “main” process doesn’t exit within
timeout we will proceed to send the TERM
signal to all processes and wait again for
timeout until we finally send the KILL signal to all
processes. This is a breaking change since 0.1.3.0.
The recommended use case for this executable is to embed it in a Docker image.
Assuming you’ve placed it at
/sbin/pid1, the two commonly recommended usages
Override the entrypoint, either via
ENTRYPOINTin your Dockerfile or
--entrypointon the command line.
docker run --rm --entrypoint /sbin/pid1 fpco/pid1 ps
/sbin/pid1to the beginning of your command.
docker run --rm --entrypoint /usr/bin/env fpco/pid1 /sbin/pid1 ps
- Removes support for ‘,’ separated list of environment variables
-ecommand line option
- Adds support for setting child processes wait timeout on SIGTERM or SIGINT
- Adds support for setuid and setguid when running command
- Adds support for setting current directory when running command
- Turn off all RTS options
- Initial release