Anti-Virus for VMware Tanzu is restarting every day

Products

• VMware Tanzu Application Service

Issue/Introduction

Symptoms:
ClamAV process is restarting every day when new virus definitions are downloaded. You may also observe the following warning in the logs:
warning message

2023-08-22T08:04:59.955801Z 2184d5da-528d-4b99-8c95-dd21f4dbaf60.worker.service-instance_c09ca37b02315ec7f470.bosh antivirus[rs2] 2023/08/22 08:04:59 Warning: Couldn't talk to clamd: dial unix /var/vcap/sys/run/antivirus/clamd.socket: connect: connection refused

Cause

Anti-Virus for VMware Tanzu updates its virus database twice a day. To ensure no downtime, there needs to be enough memory allocated to hold the old and new databases in memory for a short period. If there is insufficient memory, a restart is needed.

Resolution

The minimum recommended memory required by Anti-Virus may have changed since the product was installed.
Ensure that the tile config reserves a minimum of 3Gb of memory for AV (4GB preferred).
Set the Memory limit (in bytes) to a minimum value of 3221225472 in the Anti-Virus tile.
https://techdocs.broadcom.com/us/en/vmware-tanzu/platform-services/anti-virus-for-tanzu/2-3/antivirus-tanzu/install.html