de-it-krachten/ansible-role-clamav
1
0
Fork 0
mirror of https://github.com/de-it-krachten/ansible-role-clamav synced 2026-09-15 03:32:06 +00:00
Code Issues Projects Releases Packages Wiki Activity
No description
77 commits 2 branches 11 tags 173 KiB
  • Jinja 100%
Find a file
Exact
semantic-release-bot 941f746e9c chore(release): 1.8.0 [skip ci] 
# [1.8.0](https://github.com/de-it-krachten/ansible-role-clamav/compare/v1.7.0...v1.8.0) (2026-07-26)

### Bug Fixes

* Fix freshclam not updating ([3a2d820](3a2d8201c7))
* Standarize vars.yml ([581d85b](581d85b807))

### Features

* Add support for ansible-core 2.20+ ([10a5bc1](10a5bc1246))
* Added support for Fedora 44 ([d48d81e](d48d81e4cf))
* Drop support for Fedora 42 ([46e6a07](46e6a078f7))
2026-07-26 19:53:36 +00:00
.github/workflows Update CI 2026-07-23 13:49:29 +02:00
defaults fix: Fix freshclam not updating 2026-07-24 22:15:01 +02:00
handlers Fix linting issues 2023-05-05 20:40:40 +02:00
meta Update CI 2026-06-07 16:45:56 +02:00
molecule/default Update CI 2026-07-25 17:11:15 +02:00
tasks fix: Fix freshclam not updating 2026-07-24 22:15:01 +02:00
templates feat: Initial release 2022-06-25 00:10:26 +02:00
.ansible-lint Update CI 2026-04-08 18:27:02 +02:00
.cicd Update CI 2026-06-09 10:47:33 +02:00
.cicd.overwrite Update CI 2026-04-08 18:27:02 +02:00
.collections feat: Add support for Ubuntu 24.04 LTS + Fedora 40 2024-05-31 22:52:59 +02:00
.gitignore feat: Update supported platforms & CI 2024-12-29 01:43:45 +01:00
.releaserc.yml Update CI 2026-03-06 22:29:57 +01:00
.roles feat: Move to FQCN 2022-10-10 15:38:40 +02:00
.yamllint feat: Update supported platforms & CI 2024-12-29 01:43:45 +01:00
CHANGELOG.md chore(release): 1.8.0 [skip ci] 2026-07-26 19:53:36 +00:00
README.md Update CI 2026-07-24 22:16:10 +02:00

README.md

CI

ansible-role-clamav

Manage ClamAV

Dependencies

Roles

None

Collections

  • ansible.posix

Platforms

Supported platforms

  • Red Hat Enterprise Linux 81
  • Red Hat Enterprise Linux 91
  • Red Hat Enterprise Linux 101
  • RockyLinux 8
  • RockyLinux 9
  • RockyLinux 10
  • OracleLinux 8
  • OracleLinux 9
  • AlmaLinux 8
  • AlmaLinux 9
  • AlmaLinux 10
  • Debian 11 (Bullseye)
  • Debian 12 (Bookworm)
  • Debian 13 (Trixie)
  • Ubuntu 22.04 LTS
  • Ubuntu 24.04 LTS
  • Ubuntu 26.04 LTS
  • Fedora 43
  • Fedora 441

Note: 1 : no automated testing is performed on these platforms

Role Variables

defaults/main.yml

defaults/family-Debian.yml


# List of required packages
clamav_packages:
  - clamav
  - clamav-daemon
  - clamav-freshclam
#  - clamav-scanner
#  - clamtk

# clamav systemd services
clamav_services:
  - clamav-daemon

# clamav systemd services to disable
clamav_services_disabled: []

# clamav main configuration file
clamav_conf: /etc/clamav/clamd.conf

# freshclam_conf
clamav_freshclam_conf: /etc/clamav/freshclam.conf

# clamav update user
clamav_user: clamav
clamav_group: virusgroup

# clamav configuration
clamav_scan_conf:
  User: root
  LocalSocket: /var/run/clamd.scan/clamd.sock
  LocalSocketGroup: virusgroup
  LocalSocketMode: '660'
  FixStaleSocket: 'yes'
  ExcludePath: "^(/proc/|/sys/)"
  ScanOnAccess: 'yes'
  OnAccessMaxFileSize: 25M
  OnAccessExcludeRootUID: 'yes'
  # OnAccessExcludeUname: clamav
  OnAccessPrevention: 'yes'
  OnAccessDisableDDD: 'no'

defaults/family-RedHat.yml


# List of required packages
clamav_packages:
  - clamav
  - clamav-update
  - clamav-server
  - clamav-server-systemd
#  - clamav-scanner
#  - clamtk

# clamav systemd services
clamav_services:
  - clamd@scan
  - freshclam

# clamav systemd services to disable
clamav_services_disabled: []

# clamav main configuration file
clamav_conf: /etc/clamd.d/scan.conf

# freshclam_conf
clamav_freshclam_conf: /etc/freshclam.conf

# clamav update user
clamav_user: clamupdate
clamav_group: clamupdate

# clamav configuration
clamav_scan_conf:
  User: root
  LocalSocket: /var/run/clamd.scan/clamd.sock
  LocalSocketGroup: virusgroup
  LocalSocketMode: '660'
  FixStaleSocket: 'yes'
  ExcludePath: "^(/proc/|/sys/)"
  ScanOnAccess: 'yes'
  OnAccessMaxFileSize: 25M
  OnAccessExcludeRootUID: 'yes'
  # OnAccessExcludeUname: clamav
  OnAccessPrevention: 'yes'
  OnAccessDisableDDD: 'no'

defaults/family-Suse.yml


# List of required packages
clamav_packages:
  - clamav
  - clamav-database

# clamav systemd services
clamav_services:
  - clamd
  - freshclam

# clamav systemd services to disable
clamav_services_disabled: []

# clamav main configuration file
clamav_conf: /etc/clamd.conf

# freshclam_conf
clamav_freshclam_conf: /etc/freshclam.conf

# clamav configuration
clamav_scan_conf:
  User: root
  LocalSocket: /var/run/clamd.scan/clamd.sock
  LocalSocketGroup: vscan
  LocalSocketMode: '660'
  FixStaleSocket: 'yes'
  ExcludePath: "^(/proc/|/sys/)"
  ScanOnAccess: 'yes'
  OnAccessMaxFileSize: 25M
  OnAccessExcludeRootUID: 'yes'
  # OnAccessExcludeUname: clamav
  OnAccessPrevention: 'yes'
  OnAccessDisableDDD: 'no'

Example Playbook

molecule/default/converge.yml


- name: sample playbook for role 'clamav'
  hosts: all
  become: 'yes'
  tasks:
    - name: Include role 'clamav'
      ansible.builtin.include_role:
        name: clamav