clamav
clamav copied to clipboard
Cisco-Talos
Two suggestions for the official ClamAV Docker image
Two suggestions for the official ClamAV Docker image (https://hub.docker.com/r/clamav/clamav):
The ClamAV Docker image is currently built on Alpine Linux, which may have trouble resolving the ClamAV domain with some DNS servers (maintained by our users and cannot be changed). Could the team provide a version built on CentOS 7.x?
The ClamAV Docker includes two processes, one of which, Freshclam, runs in daemon mode. This is not a recommended approach in a Kubernetes (k8s) cluster. It is suggested to use the sidecar mode. Could you provide a more Kubernetes-friendly solution, such as Helm charts? I am willing to offer assistance if needed.
Hi,
Thank you for the interest in ClamAV.
Unfortunately, we don't have time in the schedule to work on a CentOS docker image, but we do have a debian image. Will that work for you?
As for the Kubernetes request, I know there are 3rd party Helm charts, but don't have any experience with how well they work. Have you looked into them?
Thanks, Andy
Hi,
Thank you for the interest in ClamAV.
Unfortunately, we don't have time in the schedule to work on a CentOS docker image, but we do have a debian image. Will that work for you?
As for the Kubernetes request, I know there are 3rd party Helm charts, but don't have any experience with how well they work. Have you looked into them?
Thanks, Andy
Hi, Andy, thanks for your reply. The debian image is fine to me, how could I get a LTS version from the docker hub?
I haven't found a high-star 3rd party Helm charts . Just never mind. I will make it out myself.
The debian image is fine to me, how could I get a LTS version from the docker hub?
That's good to hear. We haven't officially announced availability of the debian image because of a couple issues in our process updating the image. My teammate @rsundriyal is working on it. Once it's fixed we'll regularly publish updated images for the 1.0 LTS and the newer supported versions.
The ClamAV Docker image is currently built on Alpine Linux, which may have trouble resolving the ClamAV domain with some DNS servers (maintained by our users and cannot be changed).
That DNS issue was fixed in Alpine 3.18: https://www.theregister.com/2023/05/16/alpine_linux_318/
The clamav/clamav:1.2.1 docker image is based on Alpine 3.19, so it does not have that issue.
That sounds like good news, thanks @candrews.
Other good news: We resolved the build issues with clamav-debian images last week. I plan to announce that they're ready for general use later this week.
The ClamAV Docker image is currently built on Alpine Linux, which may have trouble resolving the ClamAV domain with some DNS servers (maintained by our users and cannot be changed).
That DNS issue was fixed in Alpine 3.18: https://www.theregister.com/2023/05/16/alpine_linux_318/
The
clamav/clamav:1.2.1docker image is based on Alpine 3.19, so it does not have that issue.
I had tried with the newest clamav version then, but it turned out not to work fine.
I had tried with the newest clamav version then, but it turned out not to work fine.
What is the problem and how is it reproduced? I'd like to find the bug report for it in alpine or report it for you so it gets fixed.
I had tried with the newest clamav version then, but it turned out not to work fine.
What is the problem and how is it reproduced? I'd like to find the bug report for it in alpine or report it for you so it gets fixed.
The issue is related to a specific DNS server configuration, which is maintained by our users and cannot be changed. Can you please provide an Alpine Linux Docker image with the network tool chain? I could gather more information.
That sounds like good news, thanks @candrews.
Other good news: We resolved the build issues with clamav-debian images last week. I plan to announce that they're ready for general use later this week.
Hi, I've attempted to pull a Debian image but encountered the following issue:
It appears to be due to a lack of the image signature.
@zhaoyungelele - Did you find a reasonable third-party HELM chart?
Not yet, I wrote a simple yaml file for our own K8s cluster.
That sounds like good news, thanks @candrews. Other good news: We resolved the build issues with clamav-debian images last week. I plan to announce that they're ready for general use later this week.
Hi, I've attempted to pull a Debian image but encountered the following issue:
It appears to be due to a lack of the image signature.
I have found the reason and solved it. My docker version was too old. It was solved when I upgraded my docker to version 26.0.1