Problem with freshclam

[stuasch]

Hey all i noticed that my clamav is not updating the error i get is:


ClamAV update process started at Sat Feb 29 13:24:52 2020
WARNING: Can't query current.cvd.clamav.net
WARNING: Invalid DNS reply. Falling back to HTTP mode.
Reading CVD header (daily.cvd): WARNING: remote_cvdhead: Download failed (6) WARNING: Message: Couldn't resolve host name
WARNING: Failed to get daily database version information from server: https://database.clamav.net
ERROR: check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
Trying again in 5 secs...
Reading CVD header (daily.cvd): WARNING: remote_cvdhead: Download failed (6) WARNING: Message: Couldn't resolve host name
WARNING: Failed to get daily database version information from server: https://database.clamav.net
ERROR: check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
Trying again in 5 secs...
Reading CVD header (daily.cvd): WARNING: remote_cvdhead: Download failed (6) WARNING: Message: Couldn't resolve host name
WARNING: Failed to get daily database version information from server: https://database.clamav.net
ERROR: check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
Trying again in 5 secs...
Reading CVD header (daily.cvd): WARNING: remote_cvdhead: Download failed (6) WARNING: Message: Couldn't resolve host name
WARNING: Failed to get daily database version information from server: https://database.clamav.net
ERROR: check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
Trying again in 5 secs...
Reading CVD header (daily.cvd): ERROR: remote_cvdhead: Download failed (6) ERROR: Message: Couldn't resolve host name
WARNING: Failed to get daily database version information from server: https://database.clamav.net
ERROR: check_for_new_database_version: Failed to find daily database using server https://database.clamav.net.
Giving up on https://database.clamav.net...
ERROR: Update failed for database: daily
WARNING: fc_update_databases: fc_update_database failed: HTTP GET failed (11)
ERROR: Database update process failed: HTTP GET failed (11)
ERROR: Update failed.


I can resolve the database.clamav.net so that is not the issue. anyone else got an idea whats going on.
Running Debian 10 most updated version with proxmox 6.1

 

[stuasch]

turned out it was apparmor kicking in

 

[Stoiko Ivanov]

remove the apparmor package - it probably got pulled in by the upgrade from 5 - 6 (happens on systems which still have the debian stock kernel installed)

see our upgrade instructions: https://pmg.proxmox.com/wiki/index.php/Upgrade_from_5.x_to_6.0

I hope this helps!

 

[kentur]

For anyone else ending up here.
Clamd/Clamav uses 'freshclam' to update.
The solution is :

sudo aa-complain /usr/bin/freshclam

which changes apparmor from stopping it to just warning for it.

 

[nielsh]

For anyone else ending up here.
Clamd/Clamav uses 'freshclam' to update.
The solution is :

sudo aa-complain /usr/bin/freshclam

which changes apparmor from stopping it to just warning for it.

We also get this issue, and we installed PMG through their ISO. If this issue is present in a stock install, should Proxmox not supply a working apparmor config? The solution you mentioned works, but it is of course a bit silly having to disable AppArmor on a new installation for freshclam.

 

[waltar]

clamav, that is the ultimate filesystem lovely application ever ... how to use fast (scriptsnipsel in short) :

SCANPATHS="/path1 /path2 /path3"
NTHREADS=<host_number_of_hypercoresthreads>
INFECTED=<path_to_put_infected_files>
LOGDAT=<path_with_logfile_name>
ERRDAT=<path_with_errorlogfile_name>

for p in $(echo $SCANPATHS|xargs); do
find $p -type f -print0 | xargs -0 -P $NTHREADS clamscan -v --no-summary --suppress-ok-results --infected --exclude-dir="/root/" --move=$INFECTED >> $LOGDAT 2>> $ERRDAT ; done