Re: [clamav-users] Help to download ClamAV 0.97.5
On 6/16/12 8:54 PM, Benny Pedersen m...@junc.org wrote: Den 2012-06-16 03:51, Eric Shubert skrev: Redistributing the database (2/3 of the size of the download) makes no sense when doing an upgrade, which is by far the majority of the cases. Doing so is a total waste of bandwidth. At the same time, new installs need to have these files one way or another, and can be obtained efficiently either as a separate clamav-db package as Brian does, or perhaps by running freshclam as a post-install process. In any case, I think this is a decision best left to the packager. why is databases part of clamav tarball in the first place ?, So that offline installs have some level of protection. A bout a quarter of the machines I manage have no access to the internet, or even to a mirror that could get to the internet. If I were to need clamav on those boxes, I would need some way to get the signatures to them. However, I don't have a need for this, and and happy for the smaller tarball size. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Help to download ClamAV 0.97.5
Den 2012-06-16 03:51, Eric Shubert skrev: Redistributing the database (2/3 of the size of the download) makes no sense when doing an upgrade, which is by far the majority of the cases. Doing so is a total waste of bandwidth. At the same time, new installs need to have these files one way or another, and can be obtained efficiently either as a separate clamav-db package as Brian does, or perhaps by running freshclam as a post-install process. In any case, I think this is a decision best left to the packager. why is databases part of clamav tarball in the first place ?, was freshclam not existing when clamav 0.001 was born ?, is there any secureity aspect in delivering database as part of tarballs ?, i just still try to understand why its still a problem :/ http://mail-archives.apache.org/mod_mbox/spamassassin-users/201004.mbox/%3c20100422143756.99035994yv349...@mail.junc.org%3E over 2 years since i reported it, but no listner :( each time gentoo/funtoo users download 48M just to get the sources, the freshclam have already updated databases, but ebuild maintainers have now fixed ebuild to not install databases from tarballs, when will the tarball shrink so ? ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Help to download ClamAV 0.97.5
Den 2012-06-16 18:12, gene heskett skrev: It may take longer, I just went to get breakfast from the freezer in our finished basement found 100 gallons of water on the floor, seems the warranty on our hot water heater has expired... why is this always happend in the sommertime when one like to get the icecreams ? :=) ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Help to download ClamAV 0.97.5
On 06/15/2012 07:39 AM, Matt Olney wrote: On Fri, Jun 15, 2012 at 9:46 AM, Brian Morrisonb...@fenrir.org.uk wrote: On Fri, 15 Jun 2012 09:13:30 -0400 Matt Olneymol...@sourcefire.com wrote: We're having some trouble with our freshmeat account. You can download the latest here, until we get it fixed up: https://sourceforge.net/projects/clamav/files/ The download is 14MB odd, previous version have been 48MB and when I run my rpm build script it tells me that the main and daily cvd files are missing. -- Brian Morrison ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml Brian, It looks like our new build system doesn't bundle the .cvds. More accurately it ships 0-length main and daily cvds. For now you can, of course, run freshclam to pickup the signature files. We'll revisit the desired behavior (with or without cvds) and adjust our build process accordingly. Since you brought it up, do you have a preference or use-case that supports one behavior or the other? Matt ___ I too am not the OP, but would like to chime in. I maintain the qmail-toaster family of packages, of which clamav-toaster is one. I think Brian hit the nail on the head, that it's only a problem from a packaging point of view. I also like that he splits the database out into a separate package. This makes a lot of sense, and I'm going to look into changing the way that the clamav-toaster package (rpm) handles this. Thanks for the idea, Brian. Redistributing the database (2/3 of the size of the download) makes no sense when doing an upgrade, which is by far the majority of the cases. Doing so is a total waste of bandwidth. At the same time, new installs need to have these files one way or another, and can be obtained efficiently either as a separate clamav-db package as Brian does, or perhaps by running freshclam as a post-install process. In any case, I think this is a decision best left to the packager. The crux of the matter in my mind is that when the upstream packaging changes, it tends to break things downstream. I honestly don't care if the database comes in a separate tarball or not, as I'll write a spec file accordingly. The bottom line to me is that things such as this shouldn't change w/out letting people downstream know about it. Of course accidents do happen, but the size of the file alone would seem to be an indicator that something's not quite right. I also understand that when build processes change, things like this may happen. I just hope 0.97.5 wasn't released with someone knowing that the database files were empty. That to me is negligent. I agree with Jim as well that I don't see a reason to change. If there's a reason to change that we're not aware of, simply let us know *ahead of time* so that we can make changes accordingly. Thanks for your consideration, and your work on clamav. -- -Eric 'shubes' ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Help to download ClamAV 0.97.5
On Friday, June 15, 2012 05:18:54 PM McDonald, Dan did opine: On 6/15/12 9:59 AM, gene heskett ghesk...@wdtv.com wrote: On Friday, June 15, 2012 10:44:29 AM Matt Olney did opine: Is there a method that would faithfully duplicate the rpm installs image? Install source rpm from your distro. Put the new tarball and .sig file in the SOURCES directory Edit the spec file, changing the version numbers (and eliminating any obsolete patches.) rpmbuild -ba the spec file Install the new packages using your package manager of choice. This sounds like a method that might work, and it could result in my being able to contribute the resultant rpm back to their repo to boot. I'll see what I can do in the next 2-3 days. Cheers, Gene -- There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order. -Ed Howdershelt (Author) My web page: http://coyoteden.dyndns-free.com:85/gene Keep your eyes wide open before marriage, half shut afterwards. -- Benjamin Franklin ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Help to download ClamAV 0.97.5
On Saturday, June 16, 2012 12:10:52 PM gene heskett did opine: On Friday, June 15, 2012 05:18:54 PM McDonald, Dan did opine: On 6/15/12 9:59 AM, gene heskett ghesk...@wdtv.com wrote: On Friday, June 15, 2012 10:44:29 AM Matt Olney did opine: Is there a method that would faithfully duplicate the rpm installs image? Install source rpm from your distro. Put the new tarball and .sig file in the SOURCES directory Edit the spec file, changing the version numbers (and eliminating any obsolete patches.) rpmbuild -ba the spec file Install the new packages using your package manager of choice. This sounds like a method that might work, and it could result in my being able to contribute the resultant rpm back to their repo to boot. I'll see what I can do in the next 2-3 days. Cheers, Gene It may take longer, I just went to get breakfast from the freezer in our finished basement found 100 gallons of water on the floor, seems the warranty on our hot water heater has expired... Cheers, Gene -- There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order. -Ed Howdershelt (Author) My web page: http://coyoteden.dyndns-free.com:85/gene Platonic Shadow: A nonsexual friendship with a member of the opposite sex. -- Douglas Coupland, Generation X: Tales for an Accelerated Culture ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Help to download ClamAV 0.97.5
We're having some trouble with our freshmeat account. You can download the latest here, until we get it fixed up: https://sourceforge.net/projects/clamav/files/ On Thu, Jun 14, 2012 at 10:07 PM, Michael Wu chmichae...@gmail.com wrote: Hello, We try to download ClamAV 0.97.5 from http://www.clamav.net/lang/en/download/sources/ , but only get the download clamav-0.97.4.tar.gz. Please help to check if the file is not updated. Thank you. Regards, Michael ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Help to download ClamAV 0.97.5
On Fri, 15 Jun 2012 09:13:30 -0400 Matt Olney mol...@sourcefire.com wrote: We're having some trouble with our freshmeat account. You can download the latest here, until we get it fixed up: https://sourceforge.net/projects/clamav/files/ The download is 14MB odd, previous version have been 48MB and when I run my rpm build script it tells me that the main and daily cvd files are missing. -- Brian Morrison ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Help to download ClamAV 0.97.5
On Fri, Jun 15, 2012 at 9:46 AM, Brian Morrison b...@fenrir.org.uk wrote: On Fri, 15 Jun 2012 09:13:30 -0400 Matt Olney mol...@sourcefire.com wrote: We're having some trouble with our freshmeat account. You can download the latest here, until we get it fixed up: https://sourceforge.net/projects/clamav/files/ The download is 14MB odd, previous version have been 48MB and when I run my rpm build script it tells me that the main and daily cvd files are missing. -- Brian Morrison ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml Brian, It looks like our new build system doesn't bundle the .cvds. More accurately it ships 0-length main and daily cvds. For now you can, of course, run freshclam to pickup the signature files. We'll revisit the desired behavior (with or without cvds) and adjust our build process accordingly. Since you brought it up, do you have a preference or use-case that supports one behavior or the other? Matt ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Help to download ClamAV 0.97.5
On Friday, June 15, 2012 10:44:29 AM Matt Olney did opine: We're having some trouble with our freshmeat account. You can download the latest here, until we get it fixed up: https://sourceforge.net/projects/clamav/files/ I downloaded this, removed the pclos 97.4 packages, and built this, installed and uninstalled it at --prefix=/usr, default and prefix=/, but could not arrive at a working install because it was always looking for /etc/freshclam.conf someplace else. So I gave up, did one final uninstall, and put the pclos 97.4 packages back in, restoring all the /etc/clam*.rpmsave's Is there a method that would faithfully duplicate the rpm installs image? Thanks. On Thu, Jun 14, 2012 at 10:07 PM, Michael Wu chmichae...@gmail.com wrote: Hello, We try to download ClamAV 0.97.5 from http://www.clamav.net/lang/en/download/sources/ , but only get the download clamav-0.97.4.tar.gz. Please help to check if the file is not updated. Thank you. Regards, Michael ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml Cheers, Gene -- There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order. -Ed Howdershelt (Author) My web page: http://coyoteden.dyndns-free.com:85/gene Although golf was originally restricted to wealthy, overweight Protestants, today it's open to anybody who owns hideous clothing. -- Dave Barry ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Help to download ClamAV 0.97.5
On Fri, 15 Jun 2012 10:39:19 -0400 Matt Olney mol...@sourcefire.com wrote: On Fri, Jun 15, 2012 at 9:46 AM, Brian Morrison b...@fenrir.org.uk wrote: On Fri, 15 Jun 2012 09:13:30 -0400 Matt Olney mol...@sourcefire.com wrote: We're having some trouble with our freshmeat account. You can download the latest here, until we get it fixed up: https://sourceforge.net/projects/clamav/files/ The download is 14MB odd, previous version have been 48MB and when I run my rpm build script it tells me that the main and daily cvd files are missing. Brian, It looks like our new build system doesn't bundle the .cvds. More accurately it ships 0-length main and daily cvds. For now you can, of course, run freshclam to pickup the signature files. We'll revisit the desired behavior (with or without cvds) and adjust our build process accordingly. Since you brought it up, do you have a preference or use-case that supports one behavior or the other? It's really only a problem from a packaging point of view. I have a spec file that builds rpms, one of which is clamav-db it contains only the two cvd files. Since I need to download them at some point it makes no difference in terms of download size, but it does break my spec file if they are not there. I suppose that it offers a chance for main.cvd to contain all the signatures and for daily.cvd to be empty, that way you know you updated the clamav packages. -- Brian Morrison ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Help to download ClamAV 0.97.5
On 6/15/2012 10:59 AM, gene heskett wrote: On Friday, June 15, 2012 10:44:29 AM Matt Olney did opine: We're having some trouble with our freshmeat account. You can download the latest here, until we get it fixed up: https://sourceforge.net/projects/clamav/files/ I downloaded this, removed the pclos 97.4 packages, and built this, installed and uninstalled it at --prefix=/usr, default and prefix=/, but could not arrive at a working install because it was always looking for /etc/freshclam.conf someplace else. So I gave up, did one final uninstall, and put the pclos 97.4 packages back in, restoring all the /etc/clam*.rpmsave's Is there a method that would faithfully duplicate the rpm installs image? The most reliable way is to wait for a pclos 97.5 package. Alternately, you can remove the package, build from source, and then move the config files to where the new install expects to find them. You need to stick with a single source to avoid this kind of problem. Either stay with the pclos packages, or remove the package and build from source each time. I prefer to build it myself so I don't have to wait for a packager to catch up to the latest version. -- Bowie ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Help to download ClamAV 0.97.5
On Fri, 15 Jun 2012 10:59:46 -0400 gene heskett ghesk...@wdtv.com wrote: Is there a method that would faithfully duplicate the rpm installs image? Rebuild the rpms after downloading the source tarball and changing the version number in your spec file. -- Brian Morrison ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Help to download ClamAV 0.97.5
On Jun 15, 2012, at 7:39 AM, Matt Olney wrote: On Fri, Jun 15, 2012 at 9:46 AM, Brian Morrison b...@fenrir.org.uk wrote: On Fri, 15 Jun 2012 09:13:30 -0400 Matt Olney mol...@sourcefire.com wrote: We're having some trouble with our freshmeat account. You can download the latest here, until we get it fixed up: https://sourceforge.net/projects/clamav/files/ The download is 14MB odd, previous version have been 48MB and when I run my rpm build script it tells me that the main and daily cvd files are missing. -- Brian Morrison ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml Brian, It looks like our new build system doesn't bundle the .cvds. More accurately it ships 0-length main and daily cvds. For now you can, of course, run freshclam to pickup the signature files. We'll revisit the desired behavior (with or without cvds) and adjust our build process accordingly. Since you brought it up, do you have a preference or use-case that supports one behavior or the other? Matt I'm not the OP but since you asked... Short version... It breaks my automated build script ;-) Long version... Ok so I can fix the script easily enough but I would prefer that .cvds remain included with the source. My build script fetches the source, verifies, does some checking around, and then builds and publishes a Solaris pkg5 package to our internal repo. I would prefer to work with one tar ball over several. This process creates an out of the box working package instead of requiring user intervention. Robert -- Robert Hartzell President | RwHartzell.Net, Inc. www.rwhartzell.net | blogs.rwhartzell.net/bear ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Help to download ClamAV 0.97.5
On 6/15/12 9:59 AM, gene heskett ghesk...@wdtv.com wrote: On Friday, June 15, 2012 10:44:29 AM Matt Olney did opine: Is there a method that would faithfully duplicate the rpm installs image? Install source rpm from your distro. Put the new tarball and .sig file in the SOURCES directory Edit the spec file, changing the version numbers (and eliminating any obsolete patches.) rpmbuild -ba the spec file Install the new packages using your package manager of choice. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Help to download ClamAV 0.97.5
Mr. Hartzell, Would you be willing to send me your automated build script? I'm a private user with Mac OS X and build clamav manually using ./configure, etc. Something self-contained that runs reliably would be a great asset. Sincerely, Steve Koch On Jun 15, 2012, at 11:17 , Robert Hartzell wrote: On Jun 15, 2012, at 7:39 AM, Matt Olney wrote: On Fri, Jun 15, 2012 at 9:46 AM, Brian Morrison b...@fenrir.org.uk wrote: On Fri, 15 Jun 2012 09:13:30 -0400 Matt Olney mol...@sourcefire.com wrote: We're having some trouble with our freshmeat account. You can download the latest here, until we get it fixed up: https://sourceforge.net/projects/clamav/files/ The download is 14MB odd, previous version have been 48MB and when I run my rpm build script it tells me that the main and daily cvd files are missing. -- Brian Morrison ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml Brian, It looks like our new build system doesn't bundle the .cvds. More accurately it ships 0-length main and daily cvds. For now you can, of course, run freshclam to pickup the signature files. We'll revisit the desired behavior (with or without cvds) and adjust our build process accordingly. Since you brought it up, do you have a preference or use-case that supports one behavior or the other? Matt I'm not the OP but since you asked... Short version... It breaks my automated build script ;-) Long version... Ok so I can fix the script easily enough but I would prefer that .cvds remain included with the source. My build script fetches the source, verifies, does some checking around, and then builds and publishes a Solaris pkg5 package to our internal repo. I would prefer to work with one tar ball over several. This process creates an out of the box working package instead of requiring user intervention. Robert -- Robert Hartzell President | RwHartzell.Net, Inc. www.rwhartzell.net | blogs.rwhartzell.net/bear ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] Help to download ClamAV 0.97.5
On 06/15/2012 07:39 AM, Matt Olney wrote: On Fri, Jun 15, 2012 at 9:46 AM, Brian Morrisonb...@fenrir.org.uk wrote: On Fri, 15 Jun 2012 09:13:30 -0400 Matt Olneymol...@sourcefire.com wrote: [snip] Brian, It looks like our new build system doesn't bundle the .cvds. More accurately it ships 0-length main and daily cvds. For now you can, of course, run freshclam to pickup the signature files. We'll revisit the desired behavior (with or without cvds) and adjust our build process accordingly. Since you brought it up, do you have a preference or use-case that supports one behavior or the other? I too am not the OP but will weigh in For upgrade ( as long as the individual uninstall / install does not delete the .dbs), with out the cvds is fine and I think a user choice. For fresh installs, I think it would be confusing for new users to not have any database included. Install with the build time cvds has always been the standard and I do not see a reason for the change. If there is some issue not including the cvds is trying to address, let us know what that is so we can weigh in on the solution versus the problem. -- Jim Preston ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
