CBD-4424: Update clamav jobs to use local CVD database mirror

Linux agent updated to expect to run on updated clamav-agent Docker
config, including updating and using the locally-managed clamav mirror.

Windows agent updated to use clamav-agent as a database mirror, and to
handle the new structure of Windows clamav downloads.

Change-Id: I87ec5bf5d0bb03e4be89160834c71c64be816f68
Reviewed-on: http://review.couchbase.org/c/build-tools/+/164035
Tested-by: Chris Hillery <[email protected]>
Reviewed-by: Ming Ho <[email protected]>

Author: ceejatec

clamav/linux/run-clam.sh

@@ -1,11 +1,7 @@
 #!/bin/bash -ex
 
-#upgrade clamav in case it is outdated
-sudo apt-get update
-sudo apt-get install -y clamav-base clamav-daemon clamav-freshclam clamdscan
-
-# Update clamav database
-sudo freshclam
+# Update clamav database - we run cvdupdate locally
+sudo /usr/local/bin/cvd update
 
 # Download build
 echo "Downloading ${VERSION}-${BLD_NUM} ${PLATFORM} binary ..."
@@ -16,14 +12,14 @@ curl --fail ${LATESTBUILDS} -o ${WORKSPACE}/${PKG_NAME} || exit 1
 echo "Extract ${VERSION}-${BLD_NUM} ${PLATFORM} binary ..."
 mkdir -p ${WORKSPACE}/scansrc
 pushd ${WORKSPACE}/scansrc
-/usr/bin/rpm2cpio ${WORKSPACE}/${PKG_NAME}  | /bin/cpio -idm || exit 1
+rpm2cpio ${WORKSPACE}/${PKG_NAME} | cpio -idm || exit 1
 popd
 
 echo .................................
 echo ClamAV Version
-/usr/bin/clamscan -V
+clamscan -V
 echo .................................
-/usr/bin/clamscan  --follow-dir-symlinks=2 --recursive=yes --suppress-ok-results -l ${WORKSPACE}/scan.log  ${WORKSPACE}/scansrc  || exit 1
+clamscan --database /var/clamav/database --follow-dir-symlinks=2 --recursive=yes --suppress-ok-results -l ${WORKSPACE}/scan.log  ${WORKSPACE}/scansrc  || exit 1
 
 grep 'Infected files: 0' ${WORKSPACE}/scan.log
 if [[ $? != 0 ]]; then

clamav/windows/freshclam.conf

@@ -64,7 +64,7 @@ LogTime yes
 # geographic endpoint.
 # If the old db.XY.clamav.net domains are set, freshclam will automatically
 # use database.clamav.net instead.
-DatabaseMirror database.clamav.net
+DatabaseMirror http://clamav-mirror.build.couchbase.com/
 
 # How many attempts to make before giving up.
 # Default: 3 (per mirror)

clamav/windows/run-clam.bat

@@ -1,5 +1,5 @@
 set CLAMDIR=C:\clamav
-set CLAM_FILENAME=clamav-%CLAMAV_VERSION%-win-x64-portable.zip
+set CLAM_FILENAME=clamav-%CLAMAV_VERSION%.win.x64.zip
 set CLAM_DL=%CLAMDIR%\downloads\%CLAM_FILENAME%
 set CLAM_DB=%CLAMDIR%\database
 set BUILD_TOOLS=%WORKSPACE%\build-tools\clamav\windows
@@ -10,6 +10,7 @@ if not exist %CLAM_DL% (
 )
 unzip %CLAM_DL%
 
+cd clamav-%CLAMAV_VERSION%.win.x64
 mkdir %CLAM_DB%
 freshclam --config-file=%BUILD_TOOLS%\freshclam.conf || goto error
 echo ...........................................