ClamAV setup

ClamAV is a simple lightweight virus scanning service by Cisco, which can be used alongside with SelectZero to make sure no infected files are uploaded by users.

Setup is rather simple with docker

Docker setup

We have an opportunity to either run ClamAV as a separate service or include it in docker-compose.yml with SelectZero container

Separate

When running separately from SelectZero compose, we can access it via host machine by "localhost:3310"

services:
  clamav:
    image: clamav/clamav:1.4.1
    container_name: clamav
    platform: linux/amd64
    ports:
      - "3310:3310" # ClamAV daemon listens on port 3310
    volumes:
      - clamav-db:/var/lib/clamav # Persistent volume for virus database
    restart: always
volumes:
  clamav-db:

When running together with SelectZero compose, we can access it via docker network by "clamav:3310"

Included with SelectZero

services:
  dqm:
    container_name: selectzero
    image: selectzero/selectzero:2025.1
    ports:
      - "8090:8090"
    volumes:
      - ./logs:/usr/app/logs
      - ./database:/usr/app/database
      - ./drivers:/usr/app/drivers
      - ./keys:/usr/app/keys
    environment:
      JAVA_OPTIONS: -Xmx4g
  clamav:
    image: clamav/clamav:1.4.1
    container_name: clamav
    platform: linux/amd64
    ports:
      - "3310" # With same docker compose we can access it via docker network
    volumes:
      - clamav-db:/var/lib/clamav # Persistent volume for virus database
    restart: always
volumes:
  clamav-db:

Last modified: 29 January 2025