ClamAV worker

[ehrenb]

Create a ClamAV worker module that fires on (all?) types:

In Dockerfile:

• [x] install clamav (avoid clamav-daemon, because it won't be doing background scans)
  • https://help.ubuntu.com/community/ClamAV
• [x] run 'clamav-freshclam' to obtain latest db

At runtime

• [x] run 'clamdandfreshclam -d` to background clamd and db updates

• [ ] communicate with clamd via Python over the socket interface described here: https://manpages.debian.org/unstable/clamav-daemon/clamd.8.en.html

  • [x] clamscan is slow, switch to clamav-daemon (clamd) in background so the service is always ready to respond
  • [x] volume for clam_db to speed up start times when freshclam runs?
  • [ ] validate using known malicious sample

• [x] add to csv in docs