Hi Scott, Michael, Orion,

You make some good points. In particular as Linux/Unix distributions are still learning how to package Rust software.

We're starting the discussion within Cisco to consider this ask.  We do not expect to extend ClamAV's LTS policy, but we will discuss the specific case of 0.103 LTS because of the added complications caused by the switch to a hybrid C/Rust project. We adopted the Rust toolchain within ClamAV and while a big step, it is one that we maintain is right for the project.

I'm certain there have been discussions along how to package/distribute Rust itself within each distro. I am a fan of the approach that OpenSUSE has taken: https://en.opensuse.org/Rust I hope that some of the other distributions adopt a similar strategy.

Regards,
Micah

Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.
From: clamav-users <clamav-users-bounces@lists.clamav.net> on behalf of Scott Kitterman via clamav-users <clamav-users@lists.clamav.net>
Sent: Saturday, February 18, 2023 5:43 PM
To: ClamAV users ML <clamav-users@lists.clamav.net>
Cc: Scott Kitterman <debian@kitterman.com>
Subject: Re: [clamav-users] Future support of clamav in EPEL7 and EPEL8
 


On February 19, 2023 1:26:44 AM UTC, Michael Orlitzky via clamav-users <clamav-users@lists.clamav.net> wrote:
>On 2023-02-18 15:40:55, Orion Poplawski via clamav-users wrote:
>>
>> This email is to start a discussion of what will happen with clamav
>> support in EPEL7 and EPEL8.  In particular, to inform everyone that it
>> will be impossible to build clamav 1.X in EPEL7 and EPEL8 due to lack of
>> rust support.  Fedora packaging policies prohibit the downloading of
>> files from the internet during builds, and the rust/rpm versions in
>> EL7/EL8 are too old to support the current Fedora rust ecosystem.
>
>I'll be backporting security fixes for as long as that's less work
>than removing clamav from our mail system (or until newer signatures
>are incompatible with the old engine). Feel free to watch the Gentoo
>tree and steal our patches.

We'll do the same after 0.103 is no longer supported.  It would be nice to get upstream support for a little while longer though.

Scott K
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat