On 2023-01-20 21:11 +0100, Sven Joachim wrote: > On 2023-01-20 20:45 +0100, Sven Joachim wrote: > >> My hunch is that postfix recomputes all the hashes in >> /var/spool/postfix/etc/ssl/certs, rather than copying the files from the >> host system into the chroot which would be a lot faster. > > For those who want to dig deeper, /usr/lib/postfix/configure-instance.sh > is the (Debian-specific) script which sets up the chroot. Surely it > should not recompute all the hashes every time postfix is restarted, but > apparently it does so at least on Charles' and my system.
Wow. Looking into the BTS, I found bug #895089[1], changed "c_rehash" to "openssl rehash" in /usr/lib/postfix/configure-instance.sh as recommended there, and now "systemctl restart postfix.service" completes in two seconds! Will follow up on the bug ASAP, if nobody beats me to it. Cheers, Sven 1. https://bugs.debian.org/895089