search

gluster / glusterfs

Gluster Filesystem : Build your distributed storage in minutes
https://www.gluster.org
GNU General Public License v2.0
4.62k stars 1.08k forks source link

vscan xlator for on-access virus scanning #265

Closed potatogim closed 4 years ago

potatogim commented 7 years ago

Hi, all.

AFAIK, GlusterFS doesn't have on-access virus scanning(antivirus) xlator so I'm planning to write that with referencing samba-vscan VFS module.

According to the OpenAntiVirus Porject, it supports below them.

But we may need to re-design that because it hasn't updated for a long time.

I'm thinking of doing it in the following steps.

amarts commented 7 years ago

Cool! What are the information you need to achieve this.

potatogim commented 7 years ago

Hi amarts! Thanks for tagging! It is discussion for re-design samba-vscan in samba mailling list before! Unfortunately, it has been broken but I think that it is not extremely urgent so I will seek help from samba developers :)

sammcj commented 6 years ago

Hey @potatogim,

Just wondering how you're getting on with this?

We're looking to implement GlusterFS for our web-app upload file hosting and need to ensure that new / modified files get scanned by ClamAV.

At present (without GlusterFS) we simply have clamAV and inotifyd scanning changed files and it works well, but I don't think that'll play nice with GlusterFS, it'd also mean you'd need to have a separate client running that has write access to all volumes just to perform the scans - and if you want that to be highly available you'll need a second node and some lock management etc... quickly becoming quite a mess.

potatogim commented 6 years ago

Hi @sammcj! Sorry for late reply...

I didn't know it which I had turned off notification from github :sweat_smile:

I'm writing it as prototype and I want to review it as soon as possible but unfortunately, I'm hanging on another company work so this feature will begin again in earnest on next month.

Currently, This prototype is on the 1st step(that only supports ClamAV currently) but AFAYK, we need to some other process(client process like bitd, quotad) which acts with asynchronous way if it is applied to real-world. so... IMO, we need to spend more time to implement and for using it on real-world :sweat_smile:

potatogim commented 6 years ago

Hello @sammcj !

I'm writing service process(vscand) to provide stream and file level scanning both with clamav!

I hope to open the issue about this feature in next month but we need more time, It's because I'm not good enough...

Please excuse my late working and breaking my promise :sweat_smile:

sammcj commented 6 years ago

That will be excellent!

Thanks for the update :)

-- Sam McLeod

On 5 Mar 2018, at 20:36, Ji-Hyeon Gim notifications@github.com wrote:

Hello @sammcj !

I'm writing service process(vscand) to provide stream and file level scanning both with clamav!

I hope to open the issue for this feature in next month but we need more time, It's because I'm not good enough...

Please excuse my late working and breaking my promise 😅

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread.

bennyturns commented 5 years ago

Any updates here? If there is some code I would be happy to test it, just LMK!

-b

amarts commented 4 years ago

A great candidate to have for #GlusterX initiative. Any takers? May be hard to get it before Release-8, but would be nice to have.

potatogim commented 4 years ago

@amarts : I'm on it but is being delayed due to my laziness. I will be more focused on it if you'll let me.

stale[bot] commented 4 years ago

Thank you for your contributions. Noticed that this issue is not having any activity in last ~6 months! We are marking this issue as stale because it has not had recent activity. It will be closed in 2 weeks if no one responds with a comment here.

stale[bot] commented 4 years ago

Closing this issue as there was no update since my last update on issue. If this is an issue which is still valid, feel free to open it.