add local clam

nix/image/configs/clamav/clamd.conf

@@ -0,0 +1 @@
+DatabaseDirectory /var/lib/clamav

nix/image/configs/clamav/freshclam.conf

@@ -0,0 +1,2 @@
+DatabaseDirectory /var/lib/clamav
+DatabaseOwner haze

nix/image/haze.nix

@@ -28,6 +28,7 @@
   sudo,
   su,
   which,
+  clamav,
   debug ? false,
   writeShellApplication,
 }: let
@@ -69,6 +70,12 @@
     mkdir -p $out
     cp -r ${../../redis-certificates} $out/redis-certificates
   '';
+  clamav-data = runCommand "scripts" {} ''
+    mkdir -p $out/etc
+    mkdir -p $out/var/lib/clamav
+    cp ${data/clamav/daily.cvd} $out/var/lib/clamav/daily.cvd
+    cp -r ${configs/clamav} $out/etc/clamav
+  '';
 
   baseImage = dockerTools.buildImage {
     name = "icewind1991/haze-base";
@@ -93,6 +100,7 @@
       which
       git
       sqlite
+      clamav
       # samba
       wget
       curl
@@ -125,6 +133,7 @@ in
       configs
       scripts
       redis-certificates
+      clamav-data
       shadowSetupScript
     ];
     fakeRootCommands = ''

src/service.rs

@@ -16,7 +16,7 @@ mod smb;
 
 use crate::cloud::CloudOptions;
 use crate::config::{HazeConfig, Preset};
-pub use crate::service::clam::{ClamIcap, ClamIcapTls};
+pub use crate::service::clam::{Clam, ClamIcap, ClamIcapTls};
 use crate::service::dav::Dav;
 use crate::service::imaginary::Imaginary;
 use crate::service::kaspersky::{Kaspersky, KasperskyIcap};
@@ -206,6 +206,7 @@ pub enum Service {
     Sftp(Sftp),
     Kaspersky(Kaspersky),
     KasperskyIcap(KasperskyIcap),
+    Clam(Clam),
     ClamIcap(ClamIcap),
     ClamIcapTls(ClamIcapTls),
     Oc(Oc),
@@ -245,8 +246,10 @@ impl Service {
             "imaginary" => Some(vec![Service::Imaginary(Imaginary)]),
             "kaspersky" => Some(vec![Service::Kaspersky(Kaspersky)]),
             "kaspersky-icap" => Some(vec![Service::KasperskyIcap(KasperskyIcap)]),
+            "clamav" => Some(vec![Service::Clam(Clam)]),
             "clamav-icap" => Some(vec![Service::ClamIcap(ClamIcap)]),
             "clamav-icap-tls" => Some(vec![Service::ClamIcapTls(ClamIcapTls)]),
+            "clam" => Some(vec![Service::Clam(Clam)]),
             "clam-icap" => Some(vec![Service::ClamIcap(ClamIcap)]),
             "clam-icap-tls" => Some(vec![Service::ClamIcapTls(ClamIcapTls)]),
             "mail" => Some(vec![Service::Mail(Mail)]),

src/service/clam.rs

@@ -208,3 +208,29 @@ impl ServiceTrait for ClamIcapTls {
         ])
     }
 }
+
+#[derive(Debug, Clone, Eq, PartialEq)]
+pub struct Clam;
+
+#[async_trait::async_trait]
+impl ServiceTrait for Clam {
+    fn name(&self) -> &str {
+        "clamav"
+    }
+
+    fn apps(&self) -> &'static [&'static str] {
+        &["files_antivirus"]
+    }
+
+    async fn post_setup(
+        &self,
+        _docker: &Docker,
+        _cloud_id: &str,
+        _config: &HazeConfig,
+    ) -> Result<Vec<String>> {
+        Ok(vec![
+            "occ config:app:set files_antivirus av_mode --value=executable".into(),
+            "occ config:app:set files_antivirus av_path --value=/bin/clamscan".into(),
+        ])
+    }
+}