On Tue, 1 Mar 2005, Allori Lorenzo wrote: > why don't you create a script that detects personal settings of a working > clamav installation and > permits to compile and upgrade the old version of clamav with from the new > sources? > > Every time I need to upgrade I have to remember the different > installations i have on different servers : it is very annoying =).
Sometimes there are new config options with new clamav releases and we much prefer to keep the same clamd.conf and freshclam.conf. Currently I diff them between versions to learn what has changed. At the top of the release notes (and on the announce list?) can the changed config entries be included so that we can very quickly glance and decide if the default options are sane for our environment? This may be a question for the dev list, but what about making clam's engine a shared object with its dependent libraries compiled in statically? That would allow us to download(/compile) an engine update without an entire reinstall. This would also allow binary-updates for those who want a binary, provided the .so doesn't depend on version-specific libraries (too much). Other virus scanner implementations work this way and it makes engine updates easy. This is especially important if engine updates will take place ~monthly. Please note that I am not advocating a binary distribution (this is for contrib packagers). Even a compile and copy libclam.0.83.so over libclam.so would be a friendlier reinstall than our curent process. Your thoughts? //////// // Our current upgrade/reinstall (feel free to adopt if this works for you): $ ./configure --prefix=/usr/local/clamav-$VERSION $ make # make install # mv /usr/local/clamav-$VERSION/etc /usr/local/clamav-$VERSION/etc.orig # ln -s /etc/clamav /usr/local/clamav-$VERSION/etc // diff old and new config, make appropriate config changes here. This // takes a fair amount of time to make sure everything is ok. // This is also the part which makes me dread updates 'cause the last // thing we want is for the mail server to fail or pass viruses. # rm -f /usr/local/clamav && ln -s /usr/local/clamav-$VERSION /usr/local/clamav # /etc/init.d/postfix restart // clam startup lives here on our servers -- Eric Wheeler Vice President National Security Concepts, Inc. PO Box 3567 Tualatin, OR 97062 http://www.nsci.us/ Voice: (503) 293-7656 Fax: (503) 885-0770 _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
