Control: tag -1 confirmed pending On 17.09.2025 12:28, Farblos wrote:
Sorry for disregarding almost all your proposals (but thanks for them), but I think I found the culprit. It is not syncfiles.pl, but rather the calling configure-instance.sh, where we have:find . -mindepth 1 -maxdepth 1 \( \ \( \( -name '[0-9a-f]*[0-9a-f].[0-9]' -o -name ca-certificates.crt \) -type f -print \) \ -o -delete \ \) | while read file; do # ..and remove files which don't exist in source anymore [ -f "$caddr/$file" ] || rm -f "$file" # TYPO-ALERT: ^^^^^^ shouldn't this be $cad*i*r?! done Since unset "$caddr" expands to the empty string, the "-f" test always fails and all certificates get removed in the destination prior to syncfiles.pl being called.
Wow. You're exactly to the point. And this explains why I can't see the prob locally - I double- and triple-verified the syncfiles.pl script, but not the configure-instance.sh one. And on my system this does not happen because postfix is not configured to use ca-certificates, so this part is being skipped. Wow. Thank you very much for your patience and your excellent detective work! /mjt
