Remove and optimize Dockerfile for CentOS

This commit is contained in:
Flavio Meyer 2020-01-20 14:33:11 +01:00
parent 23a51592ec
commit 6e99b42c8c

View file

@ -10,7 +10,6 @@ RUN mkdir -p /go && chmod -R 777 /go && \
ENV GOPATH=/go \
PATH="$GOPATH/bin:/usr/local/go/bin:$PATH"
# Install ClamAV
RUN yum install -y clamav-server clamav-data clamav-update clamav-filesystem clamav clamav-scanner-systemd clamav-devel clamav-lib clamav-server-systemd \
&& mkdir /run/clamav \
@ -20,13 +19,8 @@ RUN yum install -y clamav-server clamav-data clamav-update clamav-filesystem cla
RUN yum clean -y all --enablerepo='*' && \
rm -Rf /tmp/*
# Set timezone to Singapore
RUN mv /etc/localtime /etc/localtime.utc && \
ln -s /usr/share/zoneinfo/Asia/Singapore /etc/localtime
# Set timezone to Europe/Zurich
RUN ln -s /usr/share/zoneinfo/Europe/Zurich /etc/localtime
# Configure clamAV to run in foreground with port 3310
RUN sed -i 's/^Example$/# Example/g' /etc/clamd.d/scan.conf \
@ -34,39 +28,15 @@ RUN sed -i 's/^Example$/# Example/g' /etc/clamd.d/scan.conf \
&& sed -i 's/^#TCPSocket .*$/TCPSocket 3310/g' /etc/clamd.d/scan.conf \
&& sed -i 's/^#Foreground .*$/Foreground true/g' /etc/freshclam.conf
# Configure scan alerts
COPY ./alert.sh /opt/clamav-utils/
RUN touch /var/log/clamav-infected.log && chmod 0777 /var/log/clamav-infected.log
RUN chmod -Rf 0755 /opt/clamav-utils/alert.sh
RUN sed -i 's:^#VirusEvent .*$:VirusEvent /opt/clamav-utils/alert.sh:g' /etc/clamd.d/scan.conf
# Configure ClamAV user, ScanOnAccess requires root
#RUN sed -i 's/^User .*$/User root/g' /etc/clamd.d/scan.conf
# ScanOnAccess configurations
RUN mkdir /scan-target
RUN sed -i 's/^#ScanOnAccess .*$/ScanOnAccess yes/g' /etc/clamd.d/scan.conf \
&& sed -i 's:#OnAccessMountPath /home/user:&\r\nOnAccessMountPath /scan-target:g' /etc/clamd.d/scan.conf
# Build go package
ADD . /go/src/clamav-rest/
RUN cd /go/src/clamav-rest/ && go build -v
COPY entrypoint.sh /usr/bin/
RUN mv /go/src/clamav-rest/clamav-rest /usr/bin/ && rm -Rf /go/src/clamav-rest
EXPOSE 9000
RUN freshclam -v --no-dns
# --quiet
RUN freshclam --quiet
ENTRYPOINT [ "entrypoint.sh" ]