de-it-krachten/ansible-role-clamav
1
0
Fork 0
mirror of https://github.com/de-it-krachten/ansible-role-clamav synced 2026-05-14 03:31:51 +00:00
Code Issues Projects Releases Packages Wiki Activity
No description
59 commits 2 branches 10 tags 153 KiB
  • Jinja 100%
Find a file
Exact
semantic-release-bot 125f54df87 chore(release): 1.7.0 [skip ci] 
# [1.7.0](https://github.com/de-it-krachten/ansible-role-clamav/compare/v1.6.0...v1.7.0) (2026-04-08)

### Features

* Added support for Fedora 43 ([7296cef](7296ceff2c))
* Added support for Ubuntu 26.04 LTS ([7c574db](7c574dbef7))
* Drop support for Fedora 41 ([8709b13](8709b136f8))
* Drop support for openSUSE Leap 15 ([eba7a35](eba7a351d2))
* Drop support for SUSE Linux Enterprise 15 ([ac5dbcb](ac5dbcb406))
* Drop support for Ubuntu 20.04 LTS ([7a2f2d5](7a2f2d5d33))
2026-04-08 17:53:51 +00:00
.github/workflows Update CI 2026-04-08 18:27:02 +02:00
defaults feat: Update supported platforms & CI 2024-12-29 01:43:45 +01:00
handlers Fix linting issues 2023-05-05 20:40:40 +02:00
meta Update CI 2026-04-08 18:27:02 +02:00
molecule/default Update CI 2026-04-08 18:27:02 +02:00
tasks fix: Fix loop label to string 2023-09-03 19:48:51 +02:00
templates feat: Initial release 2022-06-25 00:10:26 +02:00
.ansible-lint Update CI 2026-04-08 18:27:02 +02:00
.cicd Update CI 2026-04-08 18:27:02 +02:00
.cicd.overwrite Update CI 2026-04-08 18:27:02 +02:00
.collections feat: Add support for Ubuntu 24.04 LTS + Fedora 40 2024-05-31 22:52:59 +02:00
.gitignore feat: Update supported platforms & CI 2024-12-29 01:43:45 +01:00
.releaserc.yml Update CI 2026-03-06 22:29:57 +01:00
.roles feat: Move to FQCN 2022-10-10 15:38:40 +02:00
.yamllint feat: Update supported platforms & CI 2024-12-29 01:43:45 +01:00
CHANGELOG.md chore(release): 1.7.0 [skip ci] 2026-04-08 17:53:51 +00:00
README.md Update CI 2026-04-08 18:27:02 +02:00

README.md

CI

ansible-role-clamav

Manage ClamAV

Dependencies

Roles

None

Collections

  • ansible.posix

Platforms

Supported platforms

  • Red Hat Enterprise Linux 81
  • Red Hat Enterprise Linux 91
  • Red Hat Enterprise Linux 101
  • RockyLinux 8
  • RockyLinux 9
  • RockyLinux 10
  • OracleLinux 8
  • OracleLinux 9
  • AlmaLinux 8
  • AlmaLinux 9
  • AlmaLinux 10
  • Debian 11 (Bullseye)
  • Debian 12 (Bookworm)
  • Debian 13 (Trixie)
  • Ubuntu 22.04 LTS
  • Ubuntu 24.04 LTS
  • Ubuntu 26.04 LTS
  • Fedora 42
  • Fedora 43

Note: 1 : no automated testing is performed on these platforms

Role Variables

defaults/main.yml

defaults/family-Debian.yml


# List of required packages
clamav_packages:
  - clamav
  - clamav-daemon
  - clamav-freshclam
#  - clamav-scanner
#  - clamtk

# clamav systemd services
clamav_services:
  - clamav-daemon

# clamav systemd services to disable
clamav_services_disabled: []

# clamav main configuration file
clamav_conf: /etc/clamav/clamd.conf

# freshclam_conf
clamav_freshclam_conf: /etc/clamav/freshclam.conf

# clamav configuration
clamav_scan_conf:
  User: root
  LocalSocket: /var/run/clamd.scan/clamd.sock
  LocalSocketGroup: virusgroup
  LocalSocketMode: '660'
  FixStaleSocket: 'yes'
  ExcludePath: "^(/proc/|/sys/)"
  ScanOnAccess: 'yes'
  OnAccessMaxFileSize: 25M
  OnAccessExcludeRootUID: 'yes'
  # OnAccessExcludeUname: clamav
  OnAccessPrevention: 'yes'
  OnAccessDisableDDD: 'no'

defaults/family-RedHat.yml


# List of required packages
clamav_packages:
  - clamav
  - clamav-update
  - clamav-server
  - clamav-server-systemd
#  - clamav-scanner
#  - clamtk

# clamav systemd services
clamav_services:
  - clamd@scan
  - freshclam

# clamav systemd services to disable
clamav_services_disabled: []

# clamav main configuration file
clamav_conf: /etc/clamd.d/scan.conf

# freshclam_conf
clamav_freshclam_conf: /etc/freshclam.conf

# clamav configuration
clamav_scan_conf:
  User: root
  LocalSocket: /var/run/clamd.scan/clamd.sock
  LocalSocketGroup: virusgroup
  LocalSocketMode: '660'
  FixStaleSocket: 'yes'
  ExcludePath: "^(/proc/|/sys/)"
  ScanOnAccess: 'yes'
  OnAccessMaxFileSize: 25M
  OnAccessExcludeRootUID: 'yes'
  # OnAccessExcludeUname: clamav
  OnAccessPrevention: 'yes'
  OnAccessDisableDDD: 'no'

defaults/family-Suse.yml


# List of required packages
clamav_packages:
  - clamav
  - clamav-database

# clamav systemd services
clamav_services:
  - clamd
  - freshclam

# clamav systemd services to disable
clamav_services_disabled: []

# clamav main configuration file
clamav_conf: /etc/clamd.conf

# freshclam_conf
clamav_freshclam_conf: /etc/freshclam.conf

# clamav configuration
clamav_scan_conf:
  User: root
  LocalSocket: /var/run/clamd.scan/clamd.sock
  LocalSocketGroup: vscan
  LocalSocketMode: '660'
  FixStaleSocket: 'yes'
  ExcludePath: "^(/proc/|/sys/)"
  ScanOnAccess: 'yes'
  OnAccessMaxFileSize: 25M
  OnAccessExcludeRootUID: 'yes'
  # OnAccessExcludeUname: clamav
  OnAccessPrevention: 'yes'
  OnAccessDisableDDD: 'no'

Example Playbook

molecule/default/converge.yml


- name: sample playbook for role 'clamav'
  hosts: all
  become: 'yes'
  tasks:
    - name: Include role 'clamav'
      ansible.builtin.include_role:
        name: clamav