Closed Bug 421158 Opened 16 years ago Closed 9 years ago

Teach ClamAV how to unpack mar (update) files

Categories

(Infrastructure & Operations Graveyard :: WebOps: Product Delivery, task, P2)

Product:
Infrastructure & Operations Graveyard
Component:
WebOps: Product Delivery
Type:
task

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: nthomas, Unassigned)

References

Details

(Whiteboard: [kanban:https://webops.kanbanize.com/ctrl_board/2/157] ) 

mar is a custom format (Mozilla Archive), that we need to teach ClamAV (or whatever calls it) to unpack, so that it can scan our update files.

I can provide a perl script and the utility it needs to unpack these mar files, then it'll be over to justdave to get it into use.
Priority: -- → P2
Files are in dm-stage01:~root/mar/. You'd call them like this:

  MAR=/path/to/mar /path/to/unwrap_full_update.pl /path/to/file.mar

and it will unpack file.mar in the current directory. The resulting files are ready for scanning.
Assignee: nrthomas → justdave
Blocks: 394069
Component: Server Operations → Server Operations: Projects
Changing QA Contact.
QA Contact: justin → mrz
Assignee: justdave → server-ops-webops
Component: Server Operations: Projects → WebOps: Product Delivery
Product: mozilla.org → Infrastructure & Operations
QA Contact: mzeier → nmaul
FWIW, the RelEng release automation does virus scanning like this:

ssh stage.mozilla.org nice ionice -c2 -n7 extract_and_run_command.py -j2 clamdscan -m --no-summary -- /pub/mozilla.org/firefox/candidates/24.0-candidates/build1/

where the python script is
 http://hg.mozilla.org/build/tools/file/default/stage/extract_and_run_command.py

In short, it's unpacking mar files and the 7zip-style windows installers to a temp dir, then running clamdscan on that.
Whiteboard: [kanban:https://kanbanize.com/ctrl_board/4/82]
Whiteboard: [kanban:https://kanbanize.com/ctrl_board/4/82] → [kanban:https://webops.kanbanize.com/ctrl_board/2/157]
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → WONTFIX
Product: Infrastructure & Operations → Infrastructure & Operations Graveyard
You need to log in before you can comment on or make changes to this bug.