summaryrefslogtreecommitdiffhomepage
AgeCommit message (Collapse)AuthorFilesLines
2020-12-17Packages: run non-privileged processes under "unit" user.Andrei Belov29-30/+58
2020-11-24Packages: added pcre2 to build depends.Konstantin Pavlov4-2/+18
While at it, propagate unit build depends to modules.
2020-11-24Packages: dropped support for non-systemd distributions.Konstantin Pavlov5-214/+9
2020-12-16Packages: eliminated debuild warning about debian/rules.Andrei Belov1-0/+1
2020-12-16Packages: the NOTICE file added to debian binaries.Andrei Belov1-1/+2
This resolves the following lintian error: https://lintian.debian.org/tags/missing-notice-file-for-apache-license.html While here, changed upstream changelog name to conform with the policy: https://lintian.debian.org/tags/wrong-name-for-upstream-changelog.html
2020-12-16Packages: introduced PYTEST_ARGS env variable for test targets.Andrei Belov2-4/+4
This is useful for running particular tests, e.g.: PYTEST_ARGS='test/test_respawn.py::TestRespawn::test_respawn_router' make test
2020-12-15Added a changelog for 5e6c2b8fb3fe.Tiago Natel de Moura1-0/+7
2020-12-15Tests: fixed bug that disabled isolation tests.Tiago Natel de Moura1-1/+1
2020-12-14Python: WSGI environment copying moved out of request processing.Valentin Bartenev1-12/+53
The WSGI environment dictionary contains a number of static items, that are pre-initialized on application start. Then it's copied for each request to be filled with request-related data. Now this dictionary copy operation will be done between processing of requests, which should save some CPU cycles during request processing and thus reduce response latency for non-peak load periods.
2020-12-14Isolation: fixed unmounting when mnt namespace is in place.Tiago Natel de Moura1-6/+0
The code had a wrong assumption that "mount namespaces" automatically unmounts process mounts when exits but this happens only with unprivileged mounts.
2020-12-12Tests: hyphen sign used unstead of underscore as more common.Andrei Zeliankou2-3/+3
2020-12-10Tests: added tests for PHP_AUTH_* variables.Andrei Zeliankou2-0/+65
2020-12-09Tests: TestUnit class removed.Andrei Zeliankou3-38/+35
Prerequisite checks moved to the fixture in conftest.py.
2020-12-09Tests: isolation check moved to the pytest_sessionstart().Andrei Zeliankou10-259/+197
This change eliminates the need for some classes to run Unit one more time before running tests.
2020-12-02Docker: creating tags and pushing to AWS ECR as well.Konstantin Pavlov1-0/+4
2020-12-07Ruby: fixed crash on thread start.Max Romanov2-1/+19
Ruby threads need to be created with GVL; otherwise, an attempt to access locked resources may occur, causing a crash. The issue was occasionally reproduced on Ubuntu 18.04 with Ruby 2.5.1 while running test_ruby_application_threads.
2020-12-08Tests: fixed ruby isolation.Tiago Natel de Moura1-19/+8
While alternating between running priv and unpriv tests locally, it happens that unpriv tests can't bind mount or create sub directories inside directories created by root. This patch fixes this by pointing "rootfs" to temporary directory. Now the priv and unpriv test uses the same test function.
2020-12-08Tests: skip_alert() converted to the fixture.Andrei Zeliankou15-39/+32
2020-12-08Tests: utils module introduced.Andrei Zeliankou10-57/+59
2020-12-08Docs: special handling for empty "date" and "time" XML attributes.Andrei Belov4-21/+84
2020-12-08PHP: populating PHP_AUTH_* server variables.Valentin Bartenev6-0/+26
This closes #498 issue on GitHub.
2020-12-07HTTP: fixed status line format for unknown status codes.Valentin Bartenev2-17/+26
According to Section #3.1.2 of RFC 7230, after the status code there must be a space even if the reason phrase is empty. Also, only 3 digits allowed. This closes #507 issue on GitHub.
2020-12-07Node.js: avoided use of request struct for debug logging.Max Romanov1-3/+3
This fixes a crash on exit of Node.js application. The crash reproduced on Ubuntu 20.10 with Node.js v15.1.0. Tests 'test_node_websockets_two_clients' and 'test_node_websockets_7_13_1__7_13_2'. The reason of the crash is using request struct which was already freed. The issue was introduced in 5be509fda29e.
2020-12-06Tests: options moved to the separate class.Andrei Zeliankou39-41/+62
This change is necessary to separate the logic and prevent possible circular dependency.
2020-11-30Node.js: removing unnecessary warnings.Max Romanov1-18/+6
Warnings changed for debug messages.
2020-11-24Libunit: improved error logging around initialization env variable.Valentin Bartenev1-12/+31
2020-11-24Version bump.Valentin Bartenev2-2/+9
2020-11-19Added tag 1.21.0 for changeset f804aaf7eee1Valentin Bartenev1-0/+1
2020-11-19Generated Dockerfiles for Unit 1.21.0.1.21.0Valentin Bartenev9-9/+9
2020-11-19Added version 1.21.0 CHANGES.Valentin Bartenev2-0/+210
2020-11-17Router: matching regular expressions support.Axel Duch13-36/+572
2020-11-19Libunit: fixing read buffer leakage.Max Romanov1-0/+1
If shared queue is empty, allocated read buffer should be explicitly released. Found by Coverity (CID 363943). The issue was introduced in f5ba5973a0a3.
2020-11-19Tests: added tests for a "discard_unsafe_fields" option.Andrei Zeliankou2-0/+47
2020-11-19Tests: style.Andrei Zeliankou1-36/+40
2020-11-18Python: improving ASGI http send message processing.Max Romanov1-12/+13
2020-11-18Libunit: fixing read buffer allocations on exit.Max Romanov1-5/+5
2020-11-18Libunit: closing active requests on quit.Max Romanov5-11/+96
2020-11-18Libunit: making minor tweaks.Max Romanov1-11/+4
Removing unnecessary context operations from shared queue processing loop. Initializing temporary queues only when required.
2020-11-18Go: removing C proxy functions and re-using goroutines.Max Romanov8-303/+225
2020-11-18Libunit: fixing racing condition in request struct recycling.Max Romanov1-2/+2
The issue occurred under highly concurrent request load in Go applications. Such applications are multi-threaded but use a single libunit context; any thread-safe code in the libunit context is only required for Go applications. As a result of improper request state reset, the recycled request structure was recovered in the released state, so further operations with this request resulted in 'response already sent' warnings. However, the actual response was never delivered to the router and the client.
2020-11-18Libunit: fixing racing condition for port add / state change.Max Romanov1-39/+87
The issue only occurred in Go applications because "port_send" is overloaded only in Go. To reproduce it, send multiple concurrent requests to the application after it has initialised. The warning message "[unit] [go] port NNN:dd not found" is the first visible aspect of the issue; the second and more valuable one is a closed connection, an error response, or a hanging response to some requests. When the application starts, it is unaware of the router's worker thread ports, so it requests the ports from the router after receiving requests from the corresponding router worker threads. When multiple requests are processed simultaneously, the router port may be required by several requests, so request processing starts only after the application receives the required port information. The port should be added to the Go port repository after its 'ready' flag is updated. Otherwise, Unit may start processing some requests and use the port before it is in the repository. The issue was introduced in changeset 78836321a126.
2020-11-18Libunit: improving logging consistency.Max Romanov5-6/+11
Debug logging depends on macros defined in nxt_auto_config.h.
2020-11-17HTTP parser: allowed more characters in header field names.Valentin Bartenev7-37/+100
Previously, all requests that contained in header field names characters other than alphanumeric, or "-", or "_" were rejected with a 400 "Bad Request" error response. Now, the parser allows the same set of characters as specified in RFC 7230, including: "!", "#", "$", "%", "&", "'", "*", "+", ".", "^", "`", "|", and "~". Header field names that contain only these characters are considered valid. Also, there's a new option introduced: "discard_unsafe_fields". It accepts boolean value and it is set to "true" by default. When this option is "true", all header field names that contain characters in valid range, but other than alphanumeric or "-" are skipped during parsing. When the option is "false", these header fields aren't skipped. Requests with non-valid characters in header field names according to RFC 7230 are rejected regardless of "discard_unsafe_fields" setting. This closes #422 issue on GitHub.
2020-11-16Isolation: added option to disable "procfs" mount.Tiago Natel de Moura3-18/+31
Now users can disable the default procfs mount point in the rootfs. { "isolation": { "automount": { "procfs": false } } }
2020-11-16Tests: tmpfs automount.Tiago Natel de Moura2-3/+29
2020-11-16Tests: fixing tests interrupt in terminal.Max Romanov10-9/+52
KeyboardInterrupt re-raised.
2020-11-16Tests: making available versions unique.Max Romanov1-4/+3
2020-11-13Isolation: added option to disable tmpfs mount.Tiago Natel de Moura3-19/+33
Now users can disable the default tmpfs mount point in the rootfs. { "isolation": { "automount": { "tmpfs": false } } }
2020-11-12Tests: removed test case that reuses rootfs path.Tiago Natel de Moura1-4/+0
Different applications cannot reuse the same rootfs path if not using namespaces because of globally visible builtin mount points.
2020-11-12Tests: added a test for "body_buffer_size" option.Andrei Zeliankou1-0/+38