[prev in list] [next in list] [prev in thread] [next in thread]
List: clamav-users
Subject: Re: [clamav-users] ClamAV 0.105.0 service deployed as a Docker container on AWS ECS seem to stop abr
From: John Varghese via clamav-users <clamav-users () lists ! clamav ! net>
Date: 2022-05-12 15:14:59
Message-ID: CACazPe7d2WXqvqcbrDMj6u7C_v-d8NeGA=qciFrv3pE7drUW7w () mail ! gmail ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Thanks. We resolved the issue by increasing the memory in the
AWS::ECS::TaskDefinition for the clamav service and present in the
Cloudformation from 2GB to 3GB
Regards,
John Varghese
On Thu, May 12, 2022 at 4:27 AM G.W. Haywood via clamav-users <
clamav-users@lists.clamav.net> wrote:
> Hi there,
>
> On Wed, 11 May 2022, John Varghese via clamav-users wrote:
>
> > ...
> > Tue May 10 20:14:59 2022 -> Reading databases from /var/lib/clamav
> >
> > I need help understanding why the clamav service seems to hang after
> > the container starts.
>
> Using clamd with Docker is a bit new. I never tried it - I wouldn't
> even consider it until it's bedded down for a couple of years - but
> there do seem to be a few people using it. I guess others with more
> experience than I may be able to help if it's a genuine clamd/docker
> issue which doesn't appear elsewhere. There have been one or two of
> those recently if you trawl the list archives, I'm afraid I can't be
> precise because I more or less ignore things related to Docker. The
> search engines should make it easy to search for anything related to
> Docker in the archives. It should also be easy to search the issues
> in Github (unless you're using the same browser that I use, Palemoon,
> which apparently can't handle anything with 'git' in the domain name).
>
> But first, are you sure it's hanging? Is it perhaps just taking some
> time to read the signature files? I've seen some systems take several
> minutes to do that.
>
> > Are there any other logs that will help understand the issue?
>
> There are system logs which might help, but I wonder if we can get
> more information about what's happening from clamd. You can increase
> the verbosity in the clamd log the clamd configuration file (see docs)
> and then you can see what's being loaded as it happens.
>
> What do you see if you run 'top' while you're starting clamd? I'd
> expect if you sort the output by memory consumed that you'd see a
> clamd process climb to the top of the list and stay there. While it's
> loading signatures you'll see whatever CPUs it's allowed to use being
> fully utilized until the signatures are loaded, then after some time
> (depending on the CPU cycles/s available to clamd) CPU usage will drop
> away more or less to zero until clamd is instructed to scan something.
>
> If the process just disappears of course you have a problem. How much
> RAM is available? You should budget at least 2GB for clamd. I'd say
> 3GB would be safer, and 4GB not unreasonable. You can reduce RAM used
> during the database reloads with a configuration option at the cost of
> not being able to scan anything during a reload.
>
> --
>
> 73,
> Ged.
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
[Attachment #5 (text/html)]
<div dir="ltr"><span \
style="color:rgb(35,38,41);font-family:-apple-system,BlinkMacSystemFont,"Segoe \
UI Adjusted","Segoe UI","Liberation \
Sans",sans-serif;font-size:15px">Thanks. We resolved the issue by increasing the \
memory in the AWS::ECS::TaskDefinition for the clamav service and present in the \
Cloudformation from 2GB to 3GB</span><br><div><br clear="all"><div><div dir="ltr" \
class="gmail_signature" data-smartmail="gmail_signature"><div \
dir="ltr">Regards,<div>John Varghese</div></div></div></div><br></div></div><br><div \
class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, May 12, 2022 at 4:27 AM \
G.W. Haywood via clamav-users <<a \
href="mailto:clamav-users@lists.clamav.net">clamav-users@lists.clamav.net</a>> \
wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi there,<br> <br>
On Wed, 11 May 2022, John Varghese via clamav-users wrote:<br>
<br>
> ...<br>
> Tue May 10 20:14:59 2022 -> Reading databases from /var/lib/clamav<br>
> <br>
> I need help understanding why the clamav service seems to hang after<br>
> the container starts.<br>
<br>
Using clamd with Docker is a bit new. I never tried it - I wouldn't<br>
even consider it until it's bedded down for a couple of years - but<br>
there do seem to be a few people using it. I guess others with more<br>
experience than I may be able to help if it's a genuine clamd/docker<br>
issue which doesn't appear elsewhere. There have been one or two of<br>
those recently if you trawl the list archives, I'm afraid I can't be<br>
precise because I more or less ignore things related to Docker. The<br>
search engines should make it easy to search for anything related to<br>
Docker in the archives. It should also be easy to search the issues<br>
in Github (unless you're using the same browser that I use, Palemoon,<br>
which apparently can't handle anything with 'git' in the domain \
name).<br> <br>
But first, are you sure it's hanging? Is it perhaps just taking some<br>
time to read the signature files? I've seen some systems take several<br>
minutes to do that.<br>
<br>
> Are there any other logs that will help understand the issue?<br>
<br>
There are system logs which might help, but I wonder if we can get<br>
more information about what's happening from clamd. You can increase<br>
the verbosity in the clamd log the clamd configuration file (see docs)<br>
and then you can see what's being loaded as it happens.<br>
<br>
What do you see if you run 'top' while you're starting clamd? \
I'd<br> expect if you sort the output by memory consumed that you'd see a<br>
clamd process climb to the top of the list and stay there. While it's<br>
loading signatures you'll see whatever CPUs it's allowed to use being<br>
fully utilized until the signatures are loaded, then after some time<br>
(depending on the CPU cycles/s available to clamd) CPU usage will drop<br>
away more or less to zero until clamd is instructed to scan something.<br>
<br>
If the process just disappears of course you have a problem. How much<br>
RAM is available? You should budget at least 2GB for clamd. I'd say<br>
3GB would be safer, and 4GB not unreasonable. You can reduce RAM used<br>
during the database reloads with a configuration option at the cost of<br>
not being able to scan anything during a reload.<br>
<br>
-- <br>
<br>
73,<br>
Ged.<br>
<br>
_______________________________________________<br>
<br>
clamav-users mailing list<br>
<a href="mailto:clamav-users@lists.clamav.net" \
target="_blank">clamav-users@lists.clamav.net</a><br> <a \
href="https://lists.clamav.net/mailman/listinfo/clamav-users" rel="noreferrer" \
target="_blank">https://lists.clamav.net/mailman/listinfo/clamav-users</a><br> <br>
<br>
Help us build a comprehensive ClamAV guide:<br>
<a href="https://github.com/vrtadmin/clamav-faq" rel="noreferrer" \
target="_blank">https://github.com/vrtadmin/clamav-faq</a><br> <br>
<a href="http://www.clamav.net/contact.html#ml" rel="noreferrer" \
target="_blank">http://www.clamav.net/contact.html#ml</a><br> </blockquote></div>
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic