Package: cyrus-common
Version: 3.2.0-5~bpo10+1
Severity: normal
Hi,
After the upgrade to version 3.2, the httpd process for CARD-DAV
connections reaches very high CPU usage in a short time.
-- System Information:
Debian Release: 10.4
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable'), (100, 'testing'),
(50, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-8-amd64 (SMP w/12 CPU cores)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8),
LANGUAGE=it_IT.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages cyrus-common depends on:
ii adduser 3.118
ii db-upgrade-util 5.3.1+nmu1
ii db-util 5.3.1+nmu1
ii debconf [debconf-2.0] 1.5.71
ii e2fsprogs 1.44.5-1+deb10u3
ii exim4-daemon-heavy [mail-transport-agent] 4.92-8+deb10u4
ii gawk 1:4.2.1+dfsg-1
ii init-system-helpers 1.56+nmu1
ii libbrotli1 1.0.7-2
ii libc6 2.28-10
ii libclamav9 0.102.2+dfsg-0+deb10u1
ii libcom-err2 1.44.5-1+deb10u3
ii libgcc1 1:8.3.0-6
ii libgssapi-krb5-2 1.17-3
ii libical3 3.0.4-3
ii libicu63 63.1-6+deb10u1
ii libjansson4 2.12-1
ii libk5crypto3 1.17-3
ii libkrb5-3 1.17-3
ii libkrb5support0 1.17-3
ii libldap-2.4-2 2.4.47+dfsg-3+deb10u2
ii libnghttp2-14 1.40.0-1
ii libpcre3 2:8.39-12
ii libpq5 11.7-0+deb10u1
ii libsasl2-2 2.1.27+dfsg-1+deb10u1
ii libsasl2-modules 2.1.27+dfsg-1+deb10u1
ii libshp2 1.4.1-3
ii libsnmp30 5.7.3+dfsg-5
ii libsqlite3-0 3.27.2-3
ii libssl1.1 1.1.1d-0+deb10u3
ii libstdc++6 8.3.0-6
ii libwrap0 7.6.q-28
ii libxapian30 1.4.11-1
ii libxml2 2.9.4+dfsg1-7+b3
ii libzephyr4 3.1.2-1+b3
ii lsb-base 10.2019051400
ii netbase 5.6
ii perl 5.28.1-6
ii zlib1g 1:1.2.11.dfsg-1
Versions of packages cyrus-common recommends:
ii cyrus-admin 3.2.0-5~bpo10+1
ii cyrus-caldav 3.2.0-5~bpo10+1
ii cyrus-imapd 3.2.0-5~bpo10+1
Versions of packages cyrus-common suggests:
ii apt-listchanges 3.19
ii cyrus-admin 3.2.0-5~bpo10+1
ii cyrus-caldav 3.2.0-5~bpo10+1
ii cyrus-clients 3.2.0-5~bpo10+1
pn cyrus-doc <none>
ii cyrus-imapd 3.2.0-5~bpo10+1
pn cyrus-murder <none>
pn cyrus-nntpd <none>
pn cyrus-pop3d <none>
pn cyrus-replication <none>
ii sasl2-bin 2.1.27+dfsg-1+deb10u1
-- Configuration Files:
/etc/cyrus.conf changed:
START {
# do not delete this entry!
recover cmd="/usr/sbin/cyrus ctl_cyrusdb -r"
# this is only necessary if idlemethod is set to "idled" in imapd.conf
idled cmd="idled"
# this is useful on backend nodes of a Murder cluster
# it causes the backend to syncronize its mailbox list with
# the mupdate master upon startup
#mupdatepush cmd="/usr/sbin/cyrus ctl_mboxlist -m"
# this is recommended if using duplicate delivery suppression
delprune cmd="/usr/sbin/cyrus expire -E 3"
# this is recommended if caching TLS sessions
tlsprune cmd="/usr/sbin/cyrus tls_prune"
}
SERVICES {
# --- Normal cyrus spool, or Murder backends ---
# add or remove based on preferences
imap cmd="imapd -U 30" listen="imap" prefork=0 maxchild=200
imaps cmd="imapd -s -U 30" listen="imaps" prefork=0 maxchild=200
#pop3 cmd="pop3d -U 30" listen="pop3" prefork=0 maxchild=50
#pop3s cmd="pop3d -s -U 30" listen="pop3s" prefork=0 maxchild=50
#nntp cmd="nntpd -U 30" listen="nntp" prefork=0 maxchild=100
#nntps cmd="nntpd -s -U 30" listen="nntps" prefork=0 maxchild=100
#http cmd="httpd -U 30" listen="8008" prefork=0 maxchild=100
https cmd="httpd -s -U 30" listen="8443" prefork=0 maxchild=100
# At least one form of LMTP is required for delivery
# (you must keep the Unix socket name in sync with imap.conf)
#lmtp cmd="lmtpd" listen="localhost:lmtp" prefork=0 maxchild=20
lmtpunix cmd="lmtpd" listen="/run/cyrus/socket/lmtp" prefork=0 maxchild=20
# ----------------------------------------------
# useful if you need to give users remote access to sieve
# by default, we limit this to localhost in Debian
sieve cmd="timsieved" listen="localhost:sieve" prefork=0 maxchild=100
# this one is needed for the notification services
notify cmd="notifyd" listen="/run/cyrus/socket/notify" proto="udp" prefork=1
# --- Murder frontends -------------------------
# enable these and disable the matching services above, # except for
sieve (which deals automatically with Murder)
# mupdate database service - must prefork at least 1
# (mupdate slaves)
#mupdate cmd="mupdate" listen=3905 prefork=1
# (mupdate master, only one in the entire cluster)
#mupdate cmd="mupdate -m" listen=3905 prefork=1
# proxies that will connect to the backends
#imap cmd="proxyd" listen="imap" prefork=0 maxchild=100
#imaps cmd="proxyd -s" listen="imaps" prefork=0 maxchild=100
#pop3 cmd="pop3proxyd" listen="pop3" prefork=0 maxchild=50
#pop3s cmd="pop3proxyd -s" listen="pop3s" prefork=0 maxchild=50
#lmtp cmd="lmtpproxyd" listen="lmtp" prefork=1 maxchild=20
# ----------------------------------------------
}
EVENTS {
# this is required
checkpoint cmd="/usr/sbin/cyrus ctl_cyrusdb -c" period=30
# this is only necessary if using duplicate delivery suppression
delprune cmd="/usr/sbin/cyrus expire -E 3" at=0401
# this is only necessary if caching TLS sessions
tlsprune cmd="/usr/sbin/cyrus tls_prune" at=0401
# Expire data older than 28 days.
deleteprune cmd="/usr/sbin/cyrus expire -E 4 -D 28" at=0430
expungeprune cmd="/usr/sbin/cyrus expire -E 4 -X 28" at=0445
# indexing of mailboxes for server side fulltext searches
# reindex changed mailboxes (fulltext) approximately every other hour
#squatter1 cmd="/usr/bin/nice -n 19 /usr/sbin/cyrus squatter -s" period=120
# reindex all mailboxes (fulltext) daily
squattera cmd="/usr/sbin/cyrus squatter" at=0517
}
/etc/default/cyrus-imapd changed:
CYRUS_VERBOSE=1
LISTENQUEUE=64
OPTIONS=""
/etc/imapd.conf changed:
configdirectory: /var/lib/cyrus
proc_path: /run/cyrus/proc
mboxname_lockpath: /run/cyrus/lock
defaultpartition: default
partition-default: /home/cyrus/mail
partition-news: /var/spool/cyrus/news
newsspool: /var/spool/news
altnamespace: no
unixhierarchysep: yes
lmtp_downcase_rcpt: yes
admins: cyrus
allowanonymouslogin: no
popminpoll: 1
autocreate_quota: 0
umask: 077
sieveusehomedir: false
sievedir: /var/spool/sieve
httpmodules: caldav carddav
hashimapspool: true
allowplaintext: yes
sasl_mech_list: PLAIN
sasl_pwcheck_method: saslauthd
sasl_auto_transition: no
tls_server_cert: /etc/letsencrypt/live/mailserver.resnovae.it/cert.pem
tls_server_key: /etc/letsencrypt/live/mailserver.resnovae.it/privkey.pem
tls_client_ca_file:
/etc/ssl/certs/GeoTrust_Primary_Certification_Authority.pem
tls_client_ca_dir: /etc/ssl/certs
tls_session_timeout: 1440
lmtpsocket: /run/cyrus/socket/lmtp
idlesocket: /run/cyrus/socket/idle
notifysocket: /run/cyrus/socket/notify
syslog_prefix: cyrus
-- debconf information excluded
