[clamav-users] Future support of clamav in EPEL7 and EPEL8

[Micah Snyder (micasnyd)]

Hi Scott, Michael, Orion,

You make some good points. In particular as Linux/Unix distributions are still learning how to package Rust software.

We're starting the discussion within Cisco to consider this ask.  We do not expect to extend ClamAV's LTS policy, but we will discuss the specific case of 0.103 LTS because of the added complications caused by the switch to a hybrid C/Rust project. We adopted the Rust toolchain within ClamAV and while a big step, it is one that we maintain is right for the project.

I'm certain there have been discussions along how to package/distribute Rust itself within each distro. I am a fan of the approach that OpenSUSE has taken: https://en.opensuse.org/Rust I hope that some of the other distributions adopt a similar strategy.

Regards,
Micah

Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.
________________________________
From: clamav-users <clamav-users-bounces at lists.clamav.net> on behalf of Scott Kitterman via clamav-users <clamav-users at lists.clamav.net>
Sent: Saturday, February 18, 2023 5:43 PM
To: ClamAV users ML <clamav-users at lists.clamav.net>
Cc: Scott Kitterman <debian at kitterman.com>
Subject: Re: [clamav-users] Future support of clamav in EPEL7 and EPEL8



On February 19, 2023 1:26:44 AM UTC, Michael Orlitzky via clamav-users <clamav-users at lists.clamav.net> wrote:
>On 2023-02-18 15:40:55, Orion Poplawski via clamav-users wrote:
>>
>> This email is to start a discussion of what will happen with clamav
>> support in EPEL7 and EPEL8.  In particular, to inform everyone that it
>> will be impossible to build clamav 1.X in EPEL7 and EPEL8 due to lack of
>> rust support.  Fedora packaging policies prohibit the downloading of
>> files from the internet during builds, and the rust/rpm versions in
>> EL7/EL8 are too old to support the current Fedora rust ecosystem.
>
>I'll be backporting security fixes for as long as that's less work
>than removing clamav from our mail system (or until newer signatures
>are incompatible with the old engine). Feel free to watch the Gentoo
>tree and steal our patches.

We'll do the same after 0.103 is no longer supported.  It would be nice to get upstream support for a little while longer though.

Scott K
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20230223/f6ab360a/attachment.htm>