[pve-devel] [PATCH dab-pve-appliances 0/2] download clamav signatures for pmg templates

Stoiko Ivanov s.ivanov at proxmox.com
Thu Jan 2 17:53:36 CET 2020


This patchset downloads the required signature files for a successful clamav
startup upon first booting a PMG container created from our template.

It resulted from the discussion around a different approach of downloading them
(by adding a service which runs upon first boot inside the template) - see [0],
both on and off-list (thanks to Dietmar and Thomas for the suggestion!).

Downloading the cvd files and shipping them in the template is closer to the
way we build the ISO image.

The second patch adds verification of the downloaded files using clamav's
`sigtool` utility. It is kept as optional step (only if the tool is installed)
in order not to force people building the template to install a
full-blown clamav installation in their build-environment.
Kept as a separate patch to facilitate discussion, but can be squashed into
the first patch.

[0] https://pve.proxmox.com/pipermail/pmg-devel/2019-December/000869.html

Stoiko Ivanov (2):
  pmg: include clamav cvd files in template
  pmg: optionally verify cvd files with sigtool

 debian-10.0-pmg-64/Makefile | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

-- 
2.20.1





More information about the pve-devel mailing list