saferwall/saferwall

Antivirus engine and definitions update

analyserdmz opened this issue · 3 comments

GREAT project!

How do we update the engine and the definitions all together for each antivirus?

Hey @analyserdmz

Are you building your own docker images or are you using the public ones ?

@LordNoteworthy atm I am experimenting with the public ones. The final purpose is to have an isolated multiple antivirus solution that would communicate only with certain intranet endpoints but this is too far for now.

For now the only thing that matters is the on-demand antivirus update :)

Hello @analyserdmz

I added a github action that will run every day to update the signatures:

image

You can simply run this command which will reload the docker images and eventually pull the new containers that have the new AV signatures updates:

kubectl get deployment | grep saferwall-multiav | awk '{print $1}' | kubectl rollout restart deployment

For your convenience, I will drop this command in the makefile to just do a make av-update.