Add a basic clamav server

clamav/Dockerfile

@@ -0,0 +1,11 @@
+FROM alpine
+
+RUN apk add --update \
+      clamav \
+ && rm -rf /var/cache/apk/*
+
+COPY conf /etc/clamav
+
+COPY start.sh /start.sh
+
+CMD ["/start.sh"]

clamav/conf/clamd.conf

@@ -0,0 +1,56 @@
+###############
+# General
+###############
+
+DatabaseDirectory /data
+LogFile /logs/clamav.log
+LogTime yes
+PidFile /run/clamav/clamd.pid
+TCPSocket 3310
+TCPAddr 0.0.0.0
+Foreground yes
+
+###############
+# Results
+###############
+
+DetectPUA yes
+ExcludePUA NetTool
+ExcludePUA PWTool
+AlgorithmicDetection yes
+Bytecode yes
+
+###############
+# Scan
+###############
+
+ScanPE yes
+DisableCertCheck yes
+ScanELF yes
+DetectBrokenExecutables yes
+ScanOLE2 yes
+ScanPDF yes
+ScanSWF yes
+ScanMail yes
+PhishingSignatures yes
+PhishingScanURLs yes
+ScanHTML yes
+ScanArchive yes
+
+###############
+# Scan
+###############
+
+MaxScanSize 150M
+MaxFileSize 30M
+MaxRecursion 10
+MaxFiles 15000
+MaxEmbeddedPE 10M
+MaxHTMLNormalize 10M
+MaxHTMLNoTags 2M
+MaxScriptNormalize 5M
+MaxZipTypeRcg 1M
+MaxPartitions 128
+MaxIconsPE 200
+PCREMatchLimit 10000
+PCRERecMatchLimit 10000

clamav/conf/freshclam.conf

@@ -0,0 +1,20 @@
+###############
+# General
+###############
+
+DatabaseDirectory /data
+UpdateLogFile /logs/freshclam.log
+LogTime yes
+PidFile /run/clamav/freshclam.pid
+DatabaseOwner root
+Foreground yes
+
+###############
+# Updates
+###############
+
+DatabaseMirror database.clamav.net
+ScriptedUpdates yes
+NotifyClamd /etc/clamav/clamd.conf
+SafeBrowsing yes
+Bytecode yes

clamav/start.sh

@@ -0,0 +1,4 @@
+#!/bin/sh
+
+freshclam
+clamd