- Shipped
- July 8, 2026 at 5:34 PM UTC
- Author
- Kamo
- Commit
- 691336f
rspamd's /var/lib/rspamd was hostPath-backed by the rclone FUSE mount of the MinIO shared-files bucket. Every hyperscan recompile / map refresh rewrote files there, orphaning erasure data-parts and wedging MinIO's background scanner/heal loop at ~13 cores continuously on k1m1 (fan noise, load ~24). The peer node k3m1 stayed idle, confirming the churn was local. The dir holds only regenerable caches (hyperscan .hs/.hsmp/.hsmc, maps) plus the DKIM signing keys; bayes/fuzzy are Redis-backed. Repoint to a local hostPath /var/lib/rspamd-local (pod is pinned to k1m1, so it's stable). DKIM keys migrated there, owned by uid 11333.