Bug 1117427

*** Bug 1117631 has been marked as a duplicate of this bug. ***

Important: We first to make a decision if the clamav packages in EPEL 7 are
based on Fedora or on previous EPEL releases. The difference is the packaging
which is IMHO quite different - given that Fedora in the past had (and has) a 
strange/complicated one where Fedora EPEL packagers didn't agree and set up
their own different packaging layout.

I think we need to use F20 version, because RHEL7 is more like Fedora than like CentoS. For example RHEL7 uses systemd, which is not implemented in clamav.el6.

Looks like this is already prepared in fedora git, just need merge of latest changes in Fedora and rebuild.

For future, it would be nice to have only one clamav.spec compatible with all distributions. May be EPEL7 is a good start for joining specs.

I did not mean that we are using sysvinit rather systemd but the mess that
IMHO exists in clamav on Fedora should be definately solved first.

Which mess?

Btw, Fedora branches are obsolete too. Please merge changes from F20 to F21 and master (now they are branched separatelly) and merge these changes to epel7 too.

Compare the packaging layout of clamav on EPEL vs. Fedora, then you will see
what I mean ;-) Also have a look to the clamav spec file on Fedora itself.
Example is clamav-data and clamav-data-empty or clamav-server-systemd and
clamav-server-sysvinit. The previous package maintainer tried to add them as
flexible as possible, there are even -upstart subpackages IIRC prepared.

Any chance to release it as is now and make an update later? I can't build my package for epel7 until clamav will be released.

And I think Fedora20 version works well for me.

I would prefer to get this solved before - otherwise it causes a lot of pain
for the people who install clamav now on their servers and then experience the
package rumbling in case we agree about the cleanup.

Maybe some of the other EPEL guys caring about clamav could comment on this as
well?

+1 for clamav-data-empty. I'm tired of downloading a useless package every time I update.

(In reply to Anssi Johansson from comment #9)
> +1 for clamav-data-empty. I'm tired of downloading a useless package every
> time I update.

Given that upstream does not ship any files by default anymore the question is
to maybe even remove the clamav-data in favour of clamav-data-empty. However it
might be sub-optimal for live media (but do they need clamav with the outdated
signatures?).

It's better to have clamav-data-empty, but don't require this from clamav main packages. Live distributions can use it, but for most users it's useless.
Or if someone has clamav-update package, then clamav-data is useless.

For reference, the following is currently possible:

1. boot CentOS 6.5 LiveCD
2. install epel-release
3. yum install clamav (this also pulls in clamav-db, but..)
4. rm -f /var/lib/clamav/*.cvd
5. freshclam
6. clamscan -version => ClamAV 0.98.4/19173/Tue Jul  8 21:34:10 2014

I think allowing the user to choose between clamav-data and clamav-data-empty would be an elegant solution. In fact it was this way in some prior EPEL build of clamav as well, and I was saddened when the clamav-data-empty package got removed from EPEL and got replaced with clamav-db.

Without clamav, it's impossible to install amavisd-new. I'd consider clamav and amavisd-new to be pretty important for el7, given people often require these packages to deploy a mail server. On a side note, fail2ban is also not available for el7 yet.

Error: Package: amavisd-new-2.9.1-1.el7.noarch (epel)
           Requires: clamav-server
Error: Package: amavisd-new-2.9.1-1.el7.noarch (epel)
           Requires: clamav-server-systemd
Error: Package: amavisd-new-2.9.1-1.el7.noarch (epel)
           Requires: altermime
Error: Package: amavisd-new-2.9.1-1.el7.noarch (epel)
           Requires: unzoo
Error: Package: amavisd-new-2.9.1-1.el7.noarch (epel)
           Requires: perl(Unix::Syslog)
Error: Package: amavisd-new-2.9.1-1.el7.noarch (epel)
           Requires: cabextract
Error: Package: amavisd-new-2.9.1-1.el7.noarch (epel)
           Requires: perl(Convert::TNEF)

SAGATOR (amavisd alternative) requires only clamav to build to work properly. All other dependencies are already available in EPEL7.

I think so, that clamav is important for large number of people. Specially mail servers requires software updates to better adopt to current situation with viruses and spammers. This is why they need newer linux distributions with latest software.

Sagator hasn't been built for EL7 either. Besides, I don't think people should have to switch to alternate solutions when switching from EL6 for EL7. Clamav and Amavisd, along with SpamAssassin (available) are used on thousands of mail servers around the world.

I'm a little surprised that such packages aren't available given that EL7 has been in beta for months.

(In reply to Pumpino from comment #15)
> Sagator hasn't been built for EL7 either.

I can't build sagator without clamav. This is why I am requesting clamav.
Sagator fails to build because it requires clamav.h for extraction of constants.

http://koji.fedoraproject.org/koji/taskinfo?taskID=6403345

> I don't think people should have to switch to alternate solutions when switching from EL6 for EL7.

Agree, but at least sagator users can use EL7. I am writing this, because Robert can argue, that there is no reason to hurry, because there are other depencecies too, which are not resolved yet. But for sagator clamav is only one depencency.

I noticed that RPMForge has built clamav (and fail2ban) for EL7. Has anyone tried it?

The dilemma for me is that I use Remi's repo, which requires EPEL. My understanding is that it's not a great idea to mix RPMForge and EPEL.

I went ahead and installed clamav and clamd from RPMForge on a new CentOS 7 installation. It installed without any issues (with EPEL enabled).

However, the issues began when I attempted to install amavisd-new:

Error: Package: amavisd-new-2.9.1-1.el7.noarch (epel)
           Requires: perl(Unix::Syslog)
Error: Package: amavisd-new-2.9.1-1.el7.noarch (epel)
           Requires: clamav-server
Error: Package: amavisd-new-2.9.1-1.el7.noarch (epel)
           Requires: clamav-server-systemd
Error: Package: amavisd-new-2.9.1-1.el7.noarch (epel)
           Requires: perl(Convert::TNEF)

yum install clamav-server clamav-server-systemd

No package clamav-server available.
No package clamav-server-systemd available.

So, as it stands, it's still impossible to run clamav and amavisd-new on EL7, even with RPMForge added.

I think I'll stick with EL6 and Fedora on my servers until clamav is built for EPEL, since amavisd-new in EPEL is looking for clamav-server and clamav-server-systemd, which I assume will be made available when (if?) EPEL builds clamav.

Since RHEL 7.0 is based on Fedora 19, I've built clamav packages based on the current F19 branch.

http://koji.fedoraproject.org/koji/buildinfo?buildID=547579

#closed