Merge pull request #1248 from alphagov/nsabri1/update-clam-engine

Updating ClamAV engine with offical version 1.2.1

Dockerfile

@@ -1,7 +1,7 @@
 ARG ruby_version=3.2.2
 ARG base_image=ghcr.io/alphagov/govuk-ruby-base:$ruby_version
 ARG builder_image=ghcr.io/alphagov/govuk-ruby-builder:$ruby_version
-
+ARG clam_engine=clamav-1.2.1.linux.x86_64.deb
 
 FROM $builder_image AS builder
 
@@ -14,13 +14,15 @@ RUN bootsnap precompile --gemfile .
 
 FROM $base_image
 
+ARG clam_engine
 ENV GOVUK_APP_NAME=asset-manager
 
 # TODO: move ClamAV into a completely separate service.
-RUN install_packages clamav clamav-daemon clamdscan shared-mime-info && \
-    rm -fr /etc/clamav/* && \
-    mkdir -p /var/run/clamav && \
-    chown app:app /var/run/clamav /var/lib/clamav
+RUN install_packages wget shared-mime-info && \
+    wget https://www.clamav.net/downloads/production/$clam_engine && \
+    apt install ./$clam_engine && rm ./$clam_engine && \
+    mkdir -p /var/run/clamav /var/lib/clamav /usr/local/share/clamav && \
+    chown app:app /var/run/clamav /var/lib/clamav /usr/local/share/clamav
 
 WORKDIR $APP_HOME
 COPY --from=builder $BUNDLE_PATH $BUNDLE_PATH