The naive approach (if eventlet is available, use it) just seems to reinforce that running in apache vs eventlet is a deployment issue (e.g. don't install eventlet, run in a virtualenv, etc).<div class="gmail_extra"><br clear="all">
<div><br></div>-Dolph<br>
<br><br><div class="gmail_quote">On Wed, Nov 7, 2012 at 12:34 PM, Adam Young <span dir="ltr"><<a href="mailto:ayoung@redhat.com" target="_blank">ayoung@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">On 11/07/2012 02:52 AM, Vishvananda Ishaya wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
On Nov 2, 2012, at 6:40 PM, Adam Young <<a href="mailto:ayoung@redhat.com" target="_blank">ayoung@redhat.com</a>> wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Since Eventlet is based on continuations instead of threads or processes, any call that blocks is going to lock up the webserver. That is any I/O at all. Thus, when trying to figure out how best to call the OpenSSL functions from Eventlet, I settled on what I thought would be the best tested approach: spin it off as a separate process. And it seemed to work.<br>
<br>
Well, it doesn't work. The Eventlet library does not properly Monkey patch the subprocess calls from Python. While this is something we should patch upstream in Eventlet, we need something to deal with the existing Eventlet library for Grizzly development.<br>
<br>
I've been trying to make it possible to run Keystone (and the other services eventually) in Apache. Thus, the simple solution of replacing<br>
<br>
import subprocess<br>
<br>
with<br>
<br>
import eventlet.green.subprocess<br>
<br>
Won't work. It solves the problem in Eventlet, but not apache.<br>
</blockquote>
Why not just do the standard<br>
<br>
try:<br>
from eventlet.green import subprocess<br>
except ImportError:<br>
import subprocess<br>
<br>
We've used that in various places in nova before.<br>
</blockquote>
<br></div>
That logic is incorrect. That that logic is "if eventlet is available, use it." If you are trying to run Keystone in HTTPD, but eventlet happens to be installed because you are running say, nova on the same server, it will pick up eventlet from the site-libs. Thus, the logic we want is "If you are running in an eventlet server, use the eventlet subprocess." A good rule of thumb is that the eventlet code should not be referenced from any files except those that explicitly choose to run eventlet. In Keystone, that is the server.<div class="HOEnZb">
<div class="h5"><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
Vish<br>
<br>
<br>
______________________________<u></u>_________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org" target="_blank">OpenStack-dev@lists.openstack.<u></u>org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/<u></u>cgi-bin/mailman/listinfo/<u></u>openstack-dev</a><br>
</blockquote>
<br>
<br>
______________________________<u></u>_________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org" target="_blank">OpenStack-dev@lists.openstack.<u></u>org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/<u></u>cgi-bin/mailman/listinfo/<u></u>openstack-dev</a><br>
</div></div></blockquote></div><br></div>