This container provides a lightweight Debian-based image that runs ClamAV integrated with c-icap for virus scanning over ICAP. It's suitable for use with proxies (like Squid) that support ICAP for content filtering.
- Based on
debian:bookworm-slim
- Installs:
clamav
clamav-daemon
c-icap
libicapapi-dev
libc-icap-mod-virus-scan
- Fresh virus definitions via
freshclam
at build time - Handles headless install issues (debconf, service start)
- Proper permissions for ClamAV and c-icap runtime
- Simple
entrypoint.sh
for container initialization - The versioning follows the ClamAV version used in the base image
The container exposes two ICAP services on port 1344:
avscan
- Main antivirus scanning servicesrv_clamav
- Legacy service name (maintained for backward compatibility)
Once the container is running, you can access the ICAP services at:
icap://localhost:1344/avscan
icap://localhost:1344/srv_clamav
By default, the service runs on port 1344. To use a different port:
docker run -d \
--name clamav-icap \
-p 8080:1344 \
opencloudeu/clamav-icap
docker build -t clamav-c-icap .