Genera
(Alexander Meier)
April 26, 2025, 7:14pm
1
NethServer Version: 8 (Debian 12)
Module:
core1
Knoten 1
3.6.4
ldapproxy1
Knoten 1
1.1.0
loki1
Knoten 1
1.3.1
metrics1
Knoten 1
0.1.8
samba1
Knoten 1
2.5.0
traefik1
Knoten 1
3.0.2
I simply give up by now Rspamd just wont start connection refused by 127.0.0.1:11334
DNS gets Resolved by a Public DNS Server.
lookup returns the correct public ip all point to the same server which is an exposed host.
Current Mail Version 1.6.2
Already deleted everything and reinstalled it (thats why its mail2)
Status Screenshoot:
Log:
https://jpst.it/4i51Y
despret need of help.
Greatings
mrmarkuz
(Markus Neuberger)
April 26, 2025, 10:23pm
2
I couldn’t reproduce on Debian 12.
From the logs it seems there’s a memory error in rspamd so it doesn’t get started.
Apr 26 21:02:16 neth8 rspamd[4349]: Stack trace (most recent call last):
Apr 26 21:02:16 neth8 rspamd[4349]: #2 Object "/lib/ld-musl-x86_64.so.1", at 0x7fb614fb25a3, in
Apr 26 21:02:16 neth8 rspamd[4349]: #1 Object "/usr/lib/rspamd/librspamd-server.so", at 0x7fb614a90aaa, in backward::SignalHandling::sig_handler(int, siginfo_t*, void*)
Apr 26 21:02:16 neth8 rspamd[4349]: #0 Object "/usr/lib/rspamd/librspamd-server.so", at 0x7fb614a90635, in
Apr 26 21:02:16 neth8 rspamd[4349]: Illegal instruction
Maybe something went wrong during installation and it helps to uninstall NS8 and reinstall it, see also Installation — NS8 documentation
Genera
(Alexander Meier)
April 27, 2025, 11:01am
3
A full reinstall isnt possible sadly.
But i digged around a bit and it seams its a problem with the build process for alpine based containers that run on a cpu that doesnt suport AVX
Heyo, I have a little problem with running compiled a compiled PyInstaller file inside AppImage, built on Alpine Linux. The error what I'm getting says: [22992] Cannot open PyInstaller archive from...
+
opened 05:52PM - 11 Apr 23 UTC
closed 09:41AM - 20 Apr 23 UTC
priority/p1
type/bug
## Environment & Version
### Environment
- docker compose
### Version
…
- Version: `2.0.4`
## Description
While sending an email from an authenticated sender, the `rspamd_proxy` process crashes. This causes Postfix to reject the email. However, this doesn't always happen, but it happens frequently.
## Replication Steps
Sending email from an authenticated client.
## Observed behaviour
The active `rspamd_proxy` process crashes and a new one is spawned. As a result Postfix rejects the message with `4.7.1 Service unavailable - try again later`. The problem seems to have started after upgrading to Mailu 2.0.
## Expected behaviour
`rspamd_proxy` shouldn't crash.
## Logs
IPs and hostnames have been redacted / exchanged for documentation examples.
```
front | 2023/04/11 17:10:47 [info] 11#11: *218 client [2001:0db8:85a3:0000:0000:8a2e:0370:7334]:56299 connected to [::]:587
postfix | 2023-04-11T17:10:50.931564+00:00 5804f537147e postfix/smtpd[687]: connect from front.docker-mailu_default[10.0.0.9]
rspamd | 2023-04-11 17:10:50 #166(rspamd_proxy) <10b8bc>; proxy; proxy_accept_socket: accepted milter connection from 10.0.0.3 port 42400
rspamd | 2023-04-11 17:10:50 #166(rspamd_proxy) <10b8bc>; milter; rspamd_milter_process_command: got connection from 10.0.0.9:55478
rspamd | 2023-04-11 17:10:50 #166(rspamd_proxy) <10b8bc>; proxy; proxy_milter_finish_handler: finished milter connection
rspamd | 2023-04-11 17:10:50 #166(rspamd_proxy) <571832>; proxy; proxy_accept_socket: accepted milter connection from 10.0.0.3 port 42416
front | 2023/04/11 17:10:50 [info] 11#11: *218 client logged in, client: 2001:0db8:85a3:0000:0000:8a2e:0370:7334 using starttls, server: [::]:587, login: "me@mydomain.com", upstream: 10.0.0.3:10025
postfix | 2023-04-11T17:10:51.113207+00:00 5804f537147e postfix/smtpd[687]: 1B984E0145: client=rdns-name-from-isp.example.com[2001:0db8:85a3:0000:0000:8a2e:0370:7334], sasl_method=XCLIENT, sasl_username=me@mydomain.com
rspamd | 2023-04-11 17:10:51 #166(rspamd_proxy) <571832>; milter; rspamd_milter_process_command: got connection from [2001:0db8:85a3:0000:0000:8a2e:0370:7334]:55478
postfix | 2023-04-11T17:10:51.154829+00:00 5804f537147e postfix/cleanup[690]: 1B984E0145: message-id=<em36ea5242-dee7-4152-9bc4-b91f1541e85f@feda513d.com>
rspamd | 2023-04-11 17:10:52 #1(main) rspamd_srv_handler: cannot read from worker's srv pipe connection closed; command = heartbeat
rspamd | 2023-04-11 17:10:52 #1(main) <21dcb9>; main; rspamd_check_termination_clause: rspamd_proxy process 166 terminated abnormally with exit code 0 by signal: Illegal instruction but NOT created core file (throttled=no); core file limits: -1 current, -1 max
rspamd | 2023-04-11 17:10:52 #1(main) <21dcb9>; main; rspamd_cld_handler: respawn process rspamd_proxy in lieu of terminated process with pid 166
postfix | 2023-04-11T17:10:52.831005+00:00 5804f537147e postfix/cleanup[690]: warning: milter inet:antispam:11332: error writing command: Connection reset by peer
postfix | 2023-04-11T17:10:52.832940+00:00 5804f537147e postfix/cleanup[690]: 1B984E0145: milter-reject: END-OF-MESSAGE from rdns-name-from-isp.example.com[2001:0db8:85a3:0000:0000:8a2e:0370:7334]: 4.7.1 Service unavailable - try again later; from=<me@mydomain.com> to=<destination@mydomain.com> proto=ESMTP helo=<[IPv6:2001:0db8:85a3:0000:0000:8a2e:0370:7334]>
postfix | 2023-04-11T17:10:52.854248+00:00 5804f537147e postfix/smtpd[687]: disconnect from rdns-name-from-isp.example.com[2001:0db8:85a3:0000:0000:8a2e:0370:7334] ehlo=2 xclient=0/1 mail=1 rcpt=1 data=0/1 rset=1 quit=1 commands=6/8
front | 2023/04/11 17:10:52 [info] 11#11: *218 proxied session done, client: 2001:0db8:85a3:0000:0000:8a2e:0370:7334 using starttls, server: [::]:587, login: "me@mydomain.com", upstream: 10.0.0.3:10025
```
The affected instance of Mailu is running on a netcup KVM server, that uses the following CPU profile:
```
Architecture: x86_64
CPU op-mode(s): 32-bit, 64-bit
Byte Order: Little Endian
Address sizes: 40 bits physical, 48 bits virtual
CPU(s): 2
On-line CPU(s) list: 0,1
Thread(s) per core: 1
Core(s) per socket: 2
Socket(s): 1
NUMA node(s): 1
Vendor ID: GenuineIntel
CPU family: 6
Model: 13
Model name: QEMU Virtual CPU version 2.5+
Stepping: 3
CPU MHz: 2399.980
BogoMIPS: 4799.96
Hypervisor vendor: KVM
Virtualization type: full
L1d cache: 64 KiB
L1i cache: 64 KiB
L2 cache: 8 MiB
L3 cache: 16 MiB
NUMA node0 CPU(s): 0,1
Vulnerability Itlb multihit: KVM: Mitigation: VMX unsupported
Vulnerability L1tf: Mitigation; PTE Inversion
Vulnerability Mds: Mitigation; Clear CPU buffers; SMT Host state unknown
Vulnerability Meltdown: Mitigation; PTI
Vulnerability Mmio stale data: Unknown: No mitigations
Vulnerability Retbleed: Not affected
Vulnerability Spec store bypass: Mitigation; Speculative Store Bypass disabled via prctl and seccomp
Vulnerability Spectre v1: Mitigation; usercopy/swapgs barriers and __user pointer sanitization
Vulnerability Spectre v2: Mitigation; Retpolines, IBPB conditional, IBRS_FW, STIBP disabled, RSB filling, PBRSB-eIBRS Not affected
Vulnerability Srbds: Not affected
Vulnerability Tsx async abort: Not affected
Flags: fpu de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pse36 clflush mmx fxsr sse sse2 ht syscall nx lm rep_good nopl xtopology cpuid tsc_known_freq pni pclmulqdq ssse3 cx16 pcid sse4_1 sse4_2 x2apic popcnt aes xsave rdrand hypervisor lahf_lm abm c
puid_fault invpcid_single pti ssbd ibrs ibpb invpcid md_clear arch_capabilities
```
but just a gues in the blue.
Genera
(Alexander Meier)
April 27, 2025, 11:29am
5
yes it does come back empty. There is no AVX support on my Hardware (not using a VM)
processor : 7
vendor_id : GenuineIntel
cpu family : 6
model : 23
model name : Intel(R) Xeon(R) CPU E5450 @ 3.00GHz
stepping : 6
microcode : 0x60f
cpu MHz : 1994.794
cache size : 6144 KB
physical id : 1
siblings : 4
core id : 3
cpu cores : 4
apicid : 7
initial apicid : 7
fpu : yes
fpu_exception : yes
cpuid level : 10
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ht tm pbe syscall nx lm constant_tsc arch_perfmon pebs bts rep_good nopl cpuid aperfmperf pni dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm dca sse4_1 lahf_lm pti tpr_shadow vnmi flexpriority vpid dtherm
vmx flags : vnmi flexpriority tsc_offset vtpr vapic
bugs : cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs itlb_multihit mmio_unknown
bogomips : 5984.48
clflush size : 64
cache_alignment : 64
address sizes : 38 bits physical, 48 bits virtual
power management:
mrmarkuz
(Markus Neuberger)
April 27, 2025, 11:38am
6
@transocean do you run the mail app on your odroid? Is rspamd working?
Hi @mrmarkuz
Yes, rspamd works here without problems. But i use a Odroid H4 Ultra with core i3
1 Like
mrmarkuz
(Markus Neuberger)
April 27, 2025, 11:50am
8
Is this the one that doesn’t support AVX? Just wanted to check if it’s really an AVX issue…
No, it’s new and supports AVX.
1 Like
Genera
(Alexander Meier)
April 28, 2025, 4:09pm
11
Did a fresh install on a TestPC (cant use that one productive) with a CPU that has AVX support (AMD R9 9950x) that it realy is the instruction support issue.
will there be a fix like described in the 2 Artikles above for the NS8-Mail?
1 Like