Comments (6)
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
from helm-charts.
Hi @kadomino - sorry for the late reply.
mailu (that is Mailu/Mailu
) is developed for a setup via docker-compose on a single node.
I think we should make sure this is clear in the Issue/PR templates and documentation.
Everything k8s-related should go to the Mailu/helm-charts
repository (maintainers needed).
There are many things to be thought of when using mailu via k8s or docker-swarm on multiple nodes (encrypted inter-container communication for example).
That said: freshclam is running as daemon (not via cron). I can implement a flag to disable freshclam via the environment.
The helm chart then needs to set this flag and also create a matching k8s CronJob object.
I'm sure we can work something out if there's another "flavor" of the antivirus container needed for this to work.
from helm-charts.
Hi @ghostwheel42 - thanks for looking into this :-) No problem for the delay - there is no urgency.
Indeed, I do understand that Mailu's main platform is docker-compose. Nevertheless, in my experience it works fine on K8S. I have been using it in production for 6 months now and the only issue that I have encountered is this freshclam DB curruption. This statement should be taken with a grain of salt though, because my use case is quite basic. Also, I only noticed the problem because on my particular K8S cluster the nodes were rebooting frequently (for unrelated reasons), so there was a high probability of the a pod being killed in the middle of a freshclam download.
Sorry for missing the point that freshclam runs as a daemon and not as a cron in the clamav containter. In any case this still violates the "one service = one container" principle which is more strictly needed under K8S than under docker-compose.
Indeed, it would be great if you could allow somehow for running freshclam and clamav in 2 different containers (they would need to operate on a common ReadWriteMany storage, of course). This would eliminate this corruption issue on K8S, I think.
Concerning the Helm Chart, I noticed it recently and made a fork with additions for my needs, which I would be happy to contribute back. I can also write the K8S CronJob part if/when the separate freshclam image becomes available.
from helm-charts.
Hi @kadomino - I know the "one service = one container" principle, but I think we'll have to live with what we have for now.
The team is very small and I only recently joined to implement a configuration import/export I needed for my setup.
I think the Dockerfile/entrypoint of the sntispam container could be changed to run in 3 modes (vie env):
- mode 1: as it is now: two daemons (freshclam and clamav) running
- mode 2: run only clamav as daemon
- mode 3: run freshclam only once (maybe with some script around to activate the freshened database)
The helm-chart could be updated to make use of mode 2 and 3. What do you think?
from helm-charts.
Hi @ghostwheel42 - thanks again, this seems like a good idea to me :-) Indeed, it's not that important what's in the image, as long as it can be used for running different types of containers.
In terms of help from me, I'm probably not the right person to touch the images, but I can help with Helm & K8S. Maybe you could get the maintainer of the helm chart involved in this discussion at the right time.
from helm-charts.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
from helm-charts.
Related Issues (20)
- [BUG] Default configuration disables outbound TLS of Postfix HOT 3
- fix(admin): relation "domain" does not exist for postgres HOT 1
- treafik support HOT 2
- [BUG] rspamd: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'LkJBkdnhL-tpa.dwl.dnswl.org' (likely DNS spoofing or BL internal issues) HOT 3
- feat: providing existing certificate for `imaps`, `pop3s`, `smtps`(465), and `starttls`(587), etc HOT 4
- No rate limit internal email? HOT 3
- Error: failed to prepare subPath for volumeMount "data" of container HOT 2
- [BUG] global.storageClass is not applied to single_pvc HOT 2
- [BUG] externalRedis,No password attribute HOT 4
- mailu-front: using reloader on k8s HOT 4
- Whenever I restart my kubernetes cluster running mailu my user accounts are lost. HOT 1
- [BUG] Using an external MariaDB database causes admin pod to fail starting HOT 1
- Hostname Test fails for valid domain 123_123_123_123.example.org HOT 3
- Too many redirects HOT 2
- [BUG] Admin Pod restarting endlessly due to probes failing HOT 4
- How to control outgoing mails in a multi node cluster? HOT 2
- [BUG] Dovecot Pod does not have valid certs for lmtp when front is provided with ExistingSecret HOT 1
- Please add an option to disable rspamd HOT 4
- [BUG] Non-working parameters parameters in values.yaml "nodeSelector" and "affinity" HOT 6
- [BUG] dovecot data mount point HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from helm-charts.