Re: [PATCH pve-installer/pmg-api 0/2] ensure clamav-daemon is enabled

[Stoiko Ivanov <s.ivanov@proxmox.com>]

On Tue, 9 Jun 2026 12:49:20 +0200
Thomas Lamprecht <t.lamprecht@proxmox.com> wrote:

> On 09/06/2026 12:07, Stoiko Ivanov wrote:
> > debian upstream's clamav packaging had some changes recently as to which
> > services are enabled by default.
> > This seems somewhat in active flux currently - so for the time being
> > enable the 2 services PMG needs unconditionally.  
> 
> Doesn't catches the on-top of plain Debian installation though? Why not
> address this in our clamav packages? 
Would also be an option - but tbh - the current intermediate version we
ship should get replaced by the next update to clamav with (one of) the
next trixie point releases - and I'd want to avoid tracking clamav
ourselves, if the only diff is the service enablement.

I sent a MR upstream last time (PMG 9.0):
https://salsa.debian.org/clamav-team/clamav/-/merge_requests/7
while this was not merged as is - there have been 3-4 different variants
of how and which services are enabled and started in different branches
and tags on salsa. - I don't mean to complain - but to say that I think
this will take a while until the dust settles.

> 
> Auto-enabling services from other packages in the postinst on every update
> seems also rather ugly.

agreed - and afaict there were request by users (probably in our community
forum as I did not find it in bugzilla from a quick search) that requested
to not have clamav restarted once per hour (old code in pmg-hourly from a
time when clamav was not running as stable I guess).

I'd add a bugzilla issue for making it possible to not have clamav running
without masking it (which is the current escape-hatch users have)