Symptoms
ClamAV process is restarting every day when new virus definitions are downloaded. You may also observe the following warning in the logs:warning message
2023-08-22T08:04:59.955801Z 2184d5da-528d-4b99-8c95-dd21f4dbaf60.worker.service-instance_c09ca37b02315ec7f470.bosh antivirus[rs2] 2023/08/22 08:04:59 Warning: Couldn't talk to clamd: dial unix /var/vcap/sys/run/antivirus/clamd.socket: connect: connection refused
Cause
Anti-Virus for VMware Tanzu updates its virus database twice a day. To ensure no downtime, there needs to be enough memory allocated to hold the old and new databases in memory for a short period. If there is insufficient memory, a restart is needed.
Resolution
The minimum recommended memory required by Anti-Virus may have changed since the product was installed.Ensure that the tile config reserves a minimum of 3Gb of memory for AV (4GB preferred).Set the Memory limit (in bytes) to a minimum value of 3221225472 in the Anti-Virus tile.https://docs.vmware.com/en/Anti-Virus-for-VMware-Tanzu/2.3/anti-virus/GUID-install.html#configure-antivirus-2
