Skip to main content

Safe worker restart

Capability-aware restart, zero shell execution.

Celery broadcasts pool_restart, which is fire-and-forget and requires Celery's worker_pool_restarts setting; z4j does not receive confirmation that the pool restarted. Other supported adapters use self-exit and depend on an external supervisor to respawn the process, with documented in-flight-loss risk. Preflight requires both environment and filesystem signals, and a 60-second flap guard reduces restart loops.

Preview
z4j dashboard - Safe worker restart
Restart worker web-prod-01 · celery worker engine=celery · pool=prefork · concurrency=8 PREFLIGHT ✓ Z4J_RESTART_ALLOWED=1 ✓ /tmp/z4j.allow-restart ✓ No flap in last 60s STRATEGY pool_restart broadcast Celery fire-and-forget control STATUS ✓ Broadcast sent Restart not confirmed [14:32:18] restart requested by [email protected] [14:32:18] preflight OK [14:32:18] strategy: pool_restart (celery native) [14:32:18] pool_restart broadcast submitted [14:32:18] delivery is not confirmed by Celery [14:32:18] observe worker state after request [14:32:20] audit row written (id=01H6M...c42)

Mockup of the dashboard view for this feature. Live-reloading and themed to match your dashboard.

Ships with

  • Celery: pool_restart broadcast; observe the worker afterwards because delivery and restart are not confirmed
  • Other supported adapters: self-exit plus supervisor respawn, with documented in-flight-loss risk
  • Preflight = env signal + filesystem marker
  • 60-second flap guard
  • Never executes shell commands
Related

More capabilities