文章目录
- 架构原理: +———————+| Supervisor Daemon |+———-+———-+ | | 管理子进程+———-v———-+| Managed Process || (Python Script) |+———————+ 配置示例(/etc/supervisor/conf.d/webapi.conf): [program:webapi] command=/opt/venv/bin/python /app/main.py directory=/app user=appuser autostart=true autorestart=true startsecs=3 startretries=5 stdout_logfile=/var/log/webapi.out.log stdout_logfile_maxbytes=50MB stdout_logfile_backups=10 stderr_logfile=/var/log/webapi.err.log stderr_logfile_maxbytes=50MB stderr_logfile_backups=10 environment=PYTHONPATH=”/app”,PRODUCTION=”1″ 核心功能: 进程异常退出自动重启 日志轮转管理 资源使用监控 Web UI 管理界面 事件通知(邮件/Slack)
- Deployment 配置示例: apiVersion: apps/v1 kind: Deployment metadata: name: data-processor spec: replicas: 3 selector: matchLabels: app: data-processor template: metadata: labels: app: data-processor spec: containers: – name: main image: registry.example.com/data-processor:v1.2.3 resources: limits: cpu: “2” memory: 4Gi requests: cpu: “1” memory: 2Gi livenessProbe: exec: command: [“python”, “/app/healthcheck.py”] initialDelaySeconds: 30 periodSeconds: 10 readinessProbe: httpGet: path: /health port: 8080 volumeMounts: – name: config-volume mountPath: /app/config volumes: – name: config-volume configMap: name: app-config 关键优势: 自动水平扩展 滚动更新策略 自我修复机制 资源隔离保障 跨节点调度能力
- # 分布式锁示例(Redis实现) import redis from redis.lock import Lock class HAWorker: def __init__(self): self.redis = redis.Redis(host=’redis-cluster’, port=6379) self.lock_name = “task:processor:lock” def run(self): while True: with Lock(self.redis, self.lock_name, timeout=30, blocking_timeout=5): self.process_data() time.sleep(1) def process_data(self): # 核心业务逻辑 pass
- # 基于Prometheus的存活检测 from prometheus_client import start_http_server, Gauge class HeartbeatMonitor: def __init__(self, port=9000): self.heartbeat = Gauge(‘app_heartbeat’, ‘Last successful heartbeat’) start_http_server(port) def update(self): self.heartbeat.set_to_current_time() # 在业务代码中集成 monitor = HeartbeatMonitor() while True: process_data() monitor.update() time.sleep(60)
- 方案 采集方式 查询性能 存储成本 适用场景 ELK Stack Logstash 高 高 大数据量分析 Loki+Promtail Promtail 中 低 Kubernetes 环境 Splunk Universal FW 极高 极高 企业级安全审计 Graylog Syslog 中 中 中型企业
- # 使用psutil进行资源监控 import psutil def monitor_resources(): return { “cpu_percent”: psutil.cpu_percent(interval=1), “memory_used”: psutil.virtual_memory().used / 1024**3, “disk_io”: psutil.disk_io_counters().read_bytes, “network_io”: psutil.net_io_counters().bytes_sent } # 集成到Prometheus exporter from prometheus_client import Gauge cpu_gauge = Gauge(‘app_cpu_usage’, ‘CPU usage percentage’) mem_gauge = Gauge(‘app_memory_usage’, ‘Memory usage in GB’) def update_metrics(): metrics = monitor_resources() cpu_gauge.set(metrics[‘cpu_percent’]) mem_gauge.set(metrics[‘memory_used’])
- # 创建专用用户 sudo useradd -r -s /bin/false appuser # 设置文件权限 sudo chown -R appuser:appgroup /opt/app sudo chmod 750 /opt/app # 使用capabilities替代root sudo setcap CAP_NET_BIND_SERVICE=+eip /opt/venv/bin/python
- # 使用seccomp限制系统调用 import prctl def enable_sandbox(): # 禁止fork新进程 prctl.set_child_subreaper(1) prctl.set_no_new_privs(1) # 限制危险系统调用 from seccomp import SyscallFilter, ALLOW, KILL filter = SyscallFilter(defaction=KILL) filter.add_rule(ALLOW, “read”) filter.add_rule(ALLOW, “write”) filter.add_rule(ALLOW, “poll”) filter.load()
- # 基于检查点的状态恢复 import pickle from datetime import datetime class StateManager: def __init__(self): self.state_file = “/var/run/app_state.pkl” def save_state(self, data): with open(self.state_file, ‘wb’) as f: pickle.dump({ ‘timestamp’: datetime.now(), ‘data’: data }, f) def load_state(self): try: with open(self.state_file, ‘rb’) as f: return pickle.load(f) except FileNotFoundError: return None # 在业务逻辑中集成 state_mgr = StateManager() last_state = state_mgr.load_state() while True: process_data(last_state) state_mgr.save_state(current_state) time.sleep(60)
- # AWS多区域部署示例 resource “aws_instance” “app_east” { provider = aws.us-east-1 ami = “ami-0c55b159cbfafe1f0” instance_type = “t3.large” count = 3 } resource “aws_instance” “app_west” { provider = aws.us-west-2 ami = “ami-0c55b159cbfafe1f0” instance_type = “t3.large” count = 2 } resource “aws_route53_record” “app” { zone_id = var.dns_zone name = “app.example.com” type = “CNAME” ttl = “300” records = [ aws_lb.app_east.dns_name, aws_lb.app_west.dns_name ] }
- # 使用__slots__减少内存占用 class DataPoint: __slots__ = [‘timestamp’, ‘value’, ‘quality’] def __init__(self, ts, val, q): self.timestamp = ts self.value = val self.quality = q # 使用memory_profiler分析 @profile def process_data(): data = [DataPoint(i, i*0.5, 1) for i in range(1000000)] return sum(d.value for d in data)
- # 使用Cython加速 # File: fastmath.pyx cimport cython @cython.boundscheck(False) @cython.wraparound(False) def calculate(double[:] array): cdef double total = 0.0 cdef int i for i in range(array.shape[0]): total += array[i] ** 2 return total # 使用multiprocessing并行 from multiprocessing import Pool def parallel_process(data_chunks): with Pool(processes=8) as pool: results = pool.map(process_chunk, data_chunks) return sum(results)
- # AWS Lambda函数示例 import boto3 def lambda_handler(event, context): s3 = boto3.client(‘s3’) # 处理S3事件 for record in event[‘Records’]: bucket = record[‘s3’][‘bucket’][‘name’] key = record[‘s3’][‘object’][‘key’] # 执行处理逻辑 process_file(bucket, key) return { ‘statusCode’: 200, ‘body’: ‘Processing completed’ }
- # 基于机器学习异常检测 from sklearn.ensemble import IsolationForest class AnomalyDetector: def __init__(self): self.model = IsolationForest(contamination=0.01) def train(self, metrics_data): self.model.fit(metrics_data) def predict(self, current_metrics): return self.model.predict([current_metrics])[0] # 集成到监控系统 detector = AnomalyDetector() detector.train(historical_metrics) current = collect_metrics() if detector.predict(current) == -1: trigger_alert()
目录
- 一、生产环境需求全景分析
- 1.1 后台进程的工业级要求矩阵
- 1.2 典型应用场景分析
- 二、进阶进程管理方案
- 2.1 使用 Supervisor 专业管理
- 2.2 Kubernetes 容器化部署
- 三、高可用架构设计
- 3.1 多活架构实现
- 3.2 心跳检测机制
- 四、高级运维技巧
- 4.1 日志管理方案对比
- 4.2 性能优化指标监控
- 五、安全加固实践
- 5.1 最小权限原则实施
- 5.2 安全沙箱配置
- 六、灾备与恢复策略
- 6.1 状态持久化方案
- 6.2 跨地域容灾部署
- 七、性能调优实战
- 7.1 内存优化技巧
- 7.2 CPU 密集型任务优化
- 八、未来演进方向
- 8.1 无服务器架构转型
- 8.2 智能运维体系构建
- 九、行业最佳实践总结
| 维度 | 开发环境要求 | 生产环境要求 | 容灾要求 |
|---|---|---|---|
| 可靠性 | 单点运行 | 集群部署 | 跨机房容灾 |
| 可观测性 | 控制台输出 | 集中式日志 | 分布式追踪 |
| 资源管理 | 无限制 | CPU/Memory限制 | 动态资源调度 |
| 生命周期管理 | 手动启停 | 自动拉起 | 滚动升级 |
| 安全性 | 普通权限 | 最小权限原则 | 安全沙箱 |
IoT 数据采集:7×24 小时运行,断线重连,资源受限环境
金融交易系统:亚毫秒级延迟,零容忍的进程中断
AI 训练任务:GPU 资源管理,长时间运行保障
Web 服务:高并发处理,优雅启停机制
架构原理:
+———————+
| Supervisor Daemon |
+———-+———-+
|
| 管理子进程
+———-v———-+
| Managed Process |
| (Python Script) |
+———————+
配置示例(/etc/supervisor/conf.d/webapi.conf):
[program:webapi] command=/opt/venv/bin/python /app/main.py directory=/app user=appuser autostart=true autorestart=true startsecs=3 startretries=5 stdout_logfile=/var/log/webapi.out.log stdout_logfile_maxbytes=50MB stdout_logfile_backups=10 stderr_logfile=/var/log/webapi.err.log stderr_logfile_maxbytes=50MB stderr_logfile_backups=10 environment=PYTHONPATH="/app",PRODUCTION="1"
核心功能:
- 进程异常退出自动重启
- 日志轮转管理
- 资源使用监控
- Web UI 管理界面
- 事件通知(邮件/Slack)
Deployment 配置示例:
apiVersion: apps/v1
kind: Deployment
metadata:
name: data-processor
spec:
replicas: 3
selector:
matchLabels:
app: data-processor
template:
metadata:
labels:
app: data-processor
spec:
containers:
- name: main
image: registry.example.com/data-processor:v1.2.3
resources:
limits:
cpu: "2"
memory: 4Gi
requests:
cpu: "1"
memory: 2Gi
livenessProbe:
exec:
command: ["python", "/app/healthcheck.py"]
initialDelaySeconds: 30
periodSeconds: 10
readinessProbe:
httpGet:
path: /health
port: 8080
volumeMounts:
- name: config-volume
mountPath: /app/config
volumes:
- name: config-volume
configMap:
name: app-config
关键优势:
- 自动水平扩展
- 滚动更新策略
- 自我修复机制
- 资源隔离保障
- 跨节点调度能力
# 分布式锁示例(Redis实现)
import redis
from redis.lock import Lock
class HAWorker:
def __init__(self):
self.redis = redis.Redis(host='redis-cluster', port=6379)
self.lock_name = "task:processor:lock"
def run(self):
while True:
with Lock(self.redis, self.lock_name, timeout=30, blocking_timeout=5):
self.process_data()
time.sleep(1)
def process_data(self):
# 核心业务逻辑
pass
# 基于Prometheus的存活检测
from prometheus_client import start_http_server, Gauge
class HeartbeatMonitor:
def __init__(self, port=9000):
self.heartbeat = Gauge('app_heartbeat', 'Last successful heartbeat')
start_http_server(port)
def update(self):
self.heartbeat.set_to_current_time()
# 在业务代码中集成
monitor = HeartbeatMonitor()
while True:
process_data()
monitor.update()
time.sleep(60)
| 方案 | 采集方式 | 查询性能 | 存储成本 | 适用场景 |
|---|---|---|---|---|
| ELK Stack | Logstash | 高 | 高 | 大数据量分析 |
| Loki+Promtail | Promtail | 中 | 低 | Kubernetes 环境 |
| Splunk | Universal FW | 极高 | 极高 | 企业级安全审计 |
| Graylog | Syslog | 中 | 中 | 中型企业 |
# 使用psutil进行资源监控
import psutil
def monitor_resources():
return {
"cpu_percent": psutil.cpu_percent(interval=1),
"memory_used": psutil.virtual_memory().used / 1024**3,
"disk_io": psutil.disk_io_counters().read_bytes,
"network_io": psutil.net_io_counters().bytes_sent
}
# 集成到Prometheus exporter
from prometheus_client import Gauge
cpu_gauge = Gauge('app_cpu_usage', 'CPU usage percentage')
mem_gauge = Gauge('app_memory_usage', 'Memory usage in GB')
def update_metrics():
metrics = monitor_resources()
cpu_gauge.set(metrics['cpu_percent'])
mem_gauge.set(metrics['memory_used'])
# 创建专用用户
sudo useradd -r -s /bin/false appuser
# 设置文件权限
sudo chown -R appuser:appgroup /opt/app
sudo chmod 750 /opt/app
# 使用capabilities替代root
sudo setcap CAP_NET_BIND_SERVICE=+eip /opt/venv/bin/python
# 使用seccomp限制系统调用
import prctl
def enable_sandbox():
# 禁止fork新进程
prctl.set_child_subreaper(1)
prctl.set_no_new_privs(1)
# 限制危险系统调用
from seccomp import SyscallFilter, ALLOW, KILL
filter = SyscallFilter(defaction=KILL)
filter.add_rule(ALLOW, "read")
filter.add_rule(ALLOW, "write")
filter.add_rule(ALLOW, "poll")
filter.load()
# 基于检查点的状态恢复
import pickle
from datetime import datetime
class StateManager:
def __init__(self):
self.state_file = "/var/run/app_state.pkl"
def save_state(self, data):
with open(self.state_file, 'wb') as f:
pickle.dump({
'timestamp': datetime.now(),
'data': data
}, f)
def load_state(self):
try:
with open(self.state_file, 'rb') as f:
return pickle.load(f)
except FileNotFoundError:
return None
# 在业务逻辑中集成
state_mgr = StateManager()
last_state = state_mgr.load_state()
while True:
process_data(last_state)
state_mgr.save_state(current_state)
time.sleep(60)
# AWS多区域部署示例
resource "aws_instance" "app_east" {
provider = aws.us-east-1
ami = "ami-0c55b159cbfafe1f0"
instance_type = "t3.large"
count = 3
}
resource "aws_instance" "app_west" {
provider = aws.us-west-2
ami = "ami-0c55b159cbfafe1f0"
instance_type = "t3.large"
count = 2
}
resource "aws_route53_record" "app" {
zone_id = var.dns_zone
name = "app.example.com"
type = "CNAME"
ttl = "300"
records = [
aws_lb.app_east.dns_name,
aws_lb.app_west.dns_name
]
}
# 使用__slots__减少内存占用
class DataPoint:
__slots__ = ['timestamp', 'value', 'quality']
def __init__(self, ts, val, q):
self.timestamp = ts
self.value = val
self.quality = q
# 使用memory_profiler分析
@profile
def process_data():
data = [DataPoint(i, i*0.5, 1) for i in range(1000000)]
return sum(d.value for d in data)
# 使用Cython加速
# File: fastmath.pyx
cimport cython
@cython.boundscheck(False)
@cython.wraparound(False)
def calculate(double[:] array):
cdef double total = 0.0
cdef int i
for i in range(array.shape[0]):
total += array[i] ** 2
return total
# 使用multiprocessing并行
from multiprocessing import Pool
def parallel_process(data_chunks):
with Pool(processes=8) as pool:
results = pool.map(process_chunk, data_chunks)
return sum(results)
# AWS Lambda函数示例
import boto3
def lambda_handler(event, context):
s3 = boto3.client('s3')
# 处理S3事件
for record in event['Records']:
bucket = record['s3']['bucket']['name']
key = record['s3']['object']['key']
# 执行处理逻辑
process_file(bucket, key)
return {
'statusCode': 200,
'body': 'Processing completed'
}
# 基于机器学习异常检测
from sklearn.ensemble import IsolationForest
class AnomalyDetector:
def __init__(self):
self.model = IsolationForest(contamination=0.01)
def train(self, metrics_data):
self.model.fit(metrics_data)
def predict(self, current_metrics):
return self.model.predict([current_metrics])[0]
# 集成到监控系统
detector = AnomalyDetector()
detector.train(historical_metrics)
current = collect_metrics()
if detector.predict(current) == -1:
trigger_alert()
金融行业:采用双活架构,RTO<30秒,RPO=0
电商系统:弹性扩缩容设计,应对流量洪峰
物联网平台:边缘计算+云端协同架构
AI平台:GPU资源共享调度,抢占式任务管理
到此这篇关于Python脚本在后台持续运行的方法详解的文章就介绍到这了,更多相关Python脚本后台运行内容请搜索风君子博客以前的文章或继续浏览下面的相关文章希望大家以后多多支持风君子博客!
您可能感兴趣的文章:
- Python脚本/代码的几种常见运行方式
- python运行脚本文件的三种方法实例
- Python脚本后台运行的五种方式
- 如何运行带参数的python脚本
- 记录Python脚本的运行日志的方法