Showing off the systemd watchdog in Python

watchdog.md

Watchdogged

Place the service file (or a link to it) in /etc/systemd/system/ Place the watchdogged.py file somewhere ( and change the ExecStart portion in the .service to point at the file )

then do systemctl daemon-reload followed by systemctl start watchdogged.service

After this you can watch the progress using journalctl --follow -u watchdogged.service change the PROBABILITY variable to something else to watch it faster/later or succeed.

Upstream documentation from systemd sd_notify

License

Watchdog example code for teaching purposes
Copyright © 2022 D.S. Ljungmark, Modio AB

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

watchdogged.py

#!/bin/env python3
# vim: ts=4 sts=4 sw=4 ft=python expandtab :
# SPDX-License-Identifier: MIT

"""Welcome to a pretty complex watchdog example.

Unlike most examples, this does some error checking, and generally ought to
pass a code review without too much hassle.

Change the PROBABILITY below to get some interesting numbers.

watchdogged.py; python teaching code for how to use the systemd watchdog
Copyright (C) 2022 D.S. Ljungmark, Modio AB

Permission is hereby granted, free of charge, to any person obtaining a copy of
this software and associated documentation files (the “Software”), to deal in
the Software without restriction, including without limitation the rights to
use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
of the Software, and to permit persons to whom the Software is furnished to do
so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
"""

import logging
import random
import socket
import time
import sys
import os

# All singletons are prefixed the
LOG = logging.getLogger(__name__)


def watchdog_period():
    """Return the time (in seconds) that we need to ping within."""
    val = os.environ.get("WATCHDOG_USEC", None)
    if not val:
        return None
    return int(val) / 1000000


def notify_socket(clean_environment=True):
    """Return a tuple of address, socket for future use.

    clean_environment removes the variables from env to prevent children
    from inheriting it and doing something wrong.
    """
    _empty = None, None
    address = os.environ.get("NOTIFY_SOCKET", None)
    if clean_environment:
        address = os.environ.pop("NOTIFY_SOCKET", None)

    if not address:
        return _empty

    if len(address) == 1:
        return _empty

    if address[0] not in ("@", "/"):
        return _empty

    if address[0] == "@":
        address = "\0" + address[1:]

    # SOCK_CLOEXEC was added in Python 3.2 and requires Linux >= 2.6.27.
    # It means "close this socket after fork/exec()
    try:
        sock = socket.socket(
            socket.AF_UNIX, socket.SOCK_DGRAM | socket.SOCK_CLOEXEC
        )
    except AttributeError:
        sock = socket.socket(socket.AF_UNIX, socket.SOCK_DGRAM)

    return address, sock


def sd_message(address, sock, message):
    """Send a message to the systemd bus/socket.

    message is expected to be bytes.
    """
    if not (address and sock and message):
        return False
    assert isinstance(message, bytes)

    try:
        retval = sock.sendto(message, address)
    except socket.error:
        return False
    return retval > 0


def watchdog_ping(address, sock):
    """Helper function to send a watchdog ping."""
    message = b"WATCHDOG=1"
    return sd_message(address, sock, message)


def systemd_ready(address, sock):
    """Helper function to send a ready signal."""
    message = b"READY=1"
    LOG.debug("Signaling system ready")
    return sd_message(address, sock, message)


def systemd_stop(address, sock):
    """Helper function to signal service stopping."""
    message = b"STOPPING=1"
    return sd_message(address, sock, message)


def systemd_status(address, sock, status):
    """Helper function to update the service status."""
    message = f"STATUS={status!s}".encode("utf8")
    return sd_message(address, sock, message)


def print_err(msg):
    """Print an error message to STDERR and quit."""
    print(msg, file=sys.stderr)
    sys.exit(1)


def mainloop(notify, period, probability):
    """A simple mainloop, spinning 100 times.

    Uses the probability flag to test how likely it is to cause a
    watchdog error.
    """
    systemd_status(
        *notify, status=f"Mainloop started, probability={probability}"
    )

    for num in range(100):
        watchdog_ping(*notify)
        LOG.debug("Sending Watchdog ping: %s", num)
        time.sleep(period)
        if random.random() < probability:
            systemd_status(*notify, status="Probability hit, sleeping extra")
            LOG.info("Sleeping extra, watch for triggered watchdog")
            time.sleep(1)

    LOG.info("Orderly shutdown")
    systemd_status(*notify, status="Shutting down")
    systemd_stop(*notify)


def get_probability():
    """Grab the probability from the environment.

    Return it if set, otherwise falls back to 0.01
    """
    prob = os.environ.get("PROBABILITY", "0.01")
    return float(prob)


def main():
    """Application entrypoint."""
    # Get our settings from the environment
    notify = notify_socket()
    period = watchdog_period()
    probability = get_probability()
    # Validate some in-data
    if not notify[0]:
        print_err("No notification socket, not launched via systemd?")
    if not period:
        print_err("No watchdog period set in the unit file.")

    # Start processing
    systemd_status(*notify, status="Initializing")

    logging.basicConfig()
    LOG.setLevel(logging.DEBUG)

    # Cut off a bit from the period to make the ping/Execution time work
    period -= 0.01

    LOG.info("We have to ping every: %s seconds", period)
    LOG.info("Signalling ready")
    systemd_ready(*notify)

    mainloop(notify, period, probability)


if __name__ == "__main__":
    main()

watchdogged.service

[Unit]
Description=Watchdog example service

[Service]
Type=notify
Environment=PROBABILITY=0.4
ExecStart=/tmp/1d07533ef94a4589d348/watchdogged.py

Restart=always
RestartSec=30
WatchdogSec=1


[Install]
WantedBy=multi-user.target

So the comments here ended up in spam, but I'm ok with fixing a license that isn't GPL3 on it if you still, five years later, care for it.

So the comments here ended up in spam, but I'm ok with fixing a license that isn't GPL3 on it if you still, five years later, care for it.

I just found your gist and yes, I'd love to see a non-gpl license here. Basically I would rewrite the code anyway but it would be easier if I could use your code as a starting point and don't have to pretend I never saw your code. :-)

Okay, I spotted some annoyances here ( % formatting in log messages, etc) and I'll get a proper license update for it tomorrow, hopefully.

Meanwhile, you may use it with an MIT license, but if you're picky enough to ask about it, you're probably picky enough to wait for me to update the gist ;)

And there we go. Updated, license swapped to MIT, and some lints in the code that bugged me were fixed. enjoy, @FelixSchwarz