solve rebase

defaults/main.yml

@@ -6,3 +6,7 @@ smb_users:
     passwd: "tiiiestuser1"
 
 smb_interface: eth0
+
+sophos_pkg: http://artifactory.esss.lu.se/artifactory/swi-pkg/sophos/sophos-av.9.15.1.tar.bz2
+#sophos_install_opts: "--update-free --acceptlicence --autostart=true --enableOnBoot=true --automatic --ignore-existing-installation --update-source-type=f --update-proxy-address=http://192.0.2.13:8888/ --update-period=1 --preferFanotify=true"
+sophos_install_opts: "--update-free --acceptlicence --autostart=true --enableOnBoot=true --automatic --ignore-existing-installation --update-source-type=f --update-period=1 --preferFanotify=true"

handlers/main.yml

@@ -6,3 +6,9 @@
   with_items:
     - smb
     - nmb
+
+- name: setup_sophos
+  command: "/opt/sophos-av/bin/savconfig set {{ item.key }} {{ item.value}}"
+  with_items:
+    - { key: 'AutomaticAction', value: 'delete' }
+    - { key: 'ScanArchives', value: 'enabled' }

tasks/main.yml

@@ -5,27 +5,8 @@
     state: present
   with_items:
     - samba
-    - clamd
-
-- name: copy clamav initial DB
-  copy:
-    src: "{{ item }}"
-    dest: "/var/lib/clamav/{{ item }}"
-    owner: root
-    group: root
-    mode: 0755
-  with_items:
-    - bytecode.cvd
-    - daily.cvd
-    - main.cvd
-
-- name: copy clamd config file
-  copy:
-    src: "scan.conf"
-    dest: "/etc/clamd.d/scan.conf"
-    owner: root
-    group: root
-    mode: 0755
+    - bzip2
+    - tar
 
 - name: setup smb.conf
   template:
@@ -44,7 +25,6 @@
   with_items:
     - smb
     - nmb
-    - clamd@scan
 
 - name: create local user
   user:
@@ -66,3 +46,19 @@
   changed_when: "'Added user' in create_user_output.stdout"
   when: user_created.changed
   tags: skip_ansible_lint
+
+- name: untar sophos archive
+  unarchive:
+    src: "{{ sophos_pkg }}"
+    dest: /tmp/
+    creates: /tmp/sophos-av/install.sh
+    remote_src: true
+
+- name: install sophos
+  command: "/tmp/sophos-av/install.sh /opt/sophos-av/ {{ sophos_install_opts }}"
+  args:
+    creates: /opt/sophos-av/bin/savscan 
+  register: sophos_installed
+  #changed_when: "'already exists. Please specify a different directory.' not in sophos_installed.stdout"
+  tags: skip_ansible_lint
+  notify: setup_sophos