
I've been tinkering with self hosted appwrite for the past few days, and tonight I went down the rabbit hole of the antivirus scanning. It seemed like just changing the docker-compose image to use clamav/clamav:1.3.2-71
(amd64 only) allowed it to work.
When I tried uploading a normal file it went through, and when I tried uploading the eicar.txt test file I can see in the clamav logs it properly flagged it and the upload was blocked with a 403 response. However, when I switched from local based storage to s3 storage it seems like even though Antivirus is enabled on the Appwrite bucket, it skips the step and allows the "bad" file through.
It seems like there hasn't been much done as the last clamav related post was from 2023, and in https://appwrite.io/docs/products/storage/buckets
it makes no mention of antivirus settings at all so my question are, is this a feature that's going to be deprecated? Would I be better off having a custom virus scan flow sits in front of any uploads? Or is it just something that is very much on the back burner?
Thanks!
Recommended threads
- Web SDK chunk upload to Storage without ...
As discussed in this older thread (https://discord.com/channels/564160730845151244/1216821517749321808), the Read permission for Any needs to be enabled in orde...
- Storage getFilePreview for GIF file retu...
Used to work in 1.6.x but with 1.7.4 upgrade it seems to be broken.
- CORS errors with storage bucket
I have a javascript file in the storage bucket and I used the view endpoint in an `src` attribute of a `<script>` tag. But I am getting the `net::ERR_BLOCKED_BY...
