Posts

Every article, newest first. Security, Linux systems, hardened containers — each setup is re-tested before publishing, with reproducible commands and measured numbers.

ClamAV in a container: one centralized, hardened, RAM-frugal clamd

20 Jun 2026 · Convergent

Consolidate several clamd instances into a single containerized ClamAV engine (Podman/Quadlet), non-root, exposed over a group-restricted unix socket, sharing the host's signatures — without wasting memory.