Trouble with antivirus plugin on a gitlab omnibus mattermost service

Troubleshooting
1

Summary

Hi Everibody,

I have a stand alone gitlab ombibus mattermost service installed. I have installed and activated the mattermost antivirus plugin. Unfortunatly the clam-av service doesn’t listen on my server

Steps to reproduce

We have installed gitlab-ee ombinus and activate the mattermost service on is own server.
Version de Mattermost : 5.20.1
Version du schéma de la base de données : 5.20.0
Base de données : postgres

Expected behavior

When a user join a document it is supposed to be examined by the antivirus plugin then send to the relevant users.

Observed behavior

When a user try to join a document there is an error return by the antivirus plugin who can not join the clam-av service.

Those service is supposed to listen to : localhost:3310

But:
netstat -plnte
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name
tcp 0 0 127.0.0.1:9100 0.0.0.0:* LISTEN 995 2883166 23295/node_exporter
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 0 101282 13784/rpcbind
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 0 2886562 24183/nginx: master
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN 101 16872 658/systemd-resolve
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 0 61343 9296/sshd
tcp 0 0 0.0.0.0:34423 0.0.0.0:* LISTEN 114 126131 18969/rpc.statd
tcp 0 0 127.0.0.1:3000 0.0.0.0:* LISTEN 995 2883119 23269/grafana-serve
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 0 2886563 24183/nginx: master
tcp 0 0 0.0.0.0:8060 0.0.0.0:* LISTEN 0 2886564 24183/nginx: master
tcp 0 0 0.0.0.0:46493 0.0.0.0:* LISTEN 0 715808 -
tcp 0 0 127.0.0.1:8065 0.0.0.0:* LISTEN 994 3232631 27298/mattermost
tcp 0 0 127.0.0.1:9090 0.0.0.0:* LISTEN 995 2883222 23320/prometheus
tcp 0 0 127.0.0.1:9187 0.0.0.0:* LISTEN 996 2883321 23299/postgres_expo
tcp6 0 0 :::39311 :::* LISTEN 114 126137 18969/rpc.statd
tcp6 0 0 :::111 :::* LISTEN 0 101285 13784/rpcbind
tcp6 0 0 :::4949 :::* LISTEN 0 65935 10049/perl
tcp6 0 0 :::6556 :::* LISTEN 0 289242 18458/xinetd
tcp6 0 0 :::41377 :::* LISTEN 0 715810 -

Could you help us please ?

Regards,

Didier

2

@paulrothrock Would the support team be familiar with this issue?

3

Hi @chassi,

ClamAV is not included with the Gitlab omnibus, so you will have to install it on your server manually. For Ubuntu or Debian the command is:

sudo apt-get install clamav clamav-daemon -y

For CentOS or RHEL the commands are:

sudo yum -y install epel-release
sudo yum -y install clamav-server clamav-data clamav-update clamav-filesystem clamav clamav-scanner-systemd clamav-devel clamav-lib clamav-server-systemd
4

Txs a lot. I’ve installed the clamav package and configure it to listen on localhost:3310, and everything works fine now.

Best regards,

Didier