SOLVED clamd and clamav fail after updating to 11.98.0.4

[Metro2]

After updating from 11.96.0.15 to 11.98.0.4 this morning - clamd and clamav are down on my servers

Notification
The service “clamav” appears to be down.
Service Check Method
The system’s command to check or to restart this service failed.

Notification
The service “clamd” appears to be down.
Service Check Method
The system’s command to check or to restart this service failed.

Excerpt from usr/local/cpanel/logs/error_log:


[2021-08-14 10:13:58 -0400] warn [restartsrv_clamd] The system encountered an error while starting the “clamd” service with the command “/usr/local/cpanel/3rdparty/bin/clamd”: The subprocess reported error number 127 when it ended. at /usr/local/cpanel/Cpanel/ServiceManager/Base.pm line 1495.
Cpanel::ServiceManager::Base::warn(Cpanel::ServiceManager::Services::Clamd=HASH(0x2fd2838), "The system encountered an error while starting the \x{e2}\x{80}\x{9c}clamd\x{e2}\x{80}"...) called at /usr/local/cpanel/Cpanel/ServiceManager/Manager/Initd.pm line 101
Cpanel::ServiceManager::Manager::Initd::start(Cpanel::ServiceManager::Manager::Initd=HASH(0x30208a0), Cpanel::ServiceManager::Services::Clamd=HASH(0x2fd2838)) called at /usr/local/cpanel/Cpanel/ServiceManager/Base.pm line 932
Cpanel::ServiceManager::Base::start(Cpanel::ServiceManager::Services::Clamd=HASH(0x2fd2838)) called at /usr/local/cpanel/Cpanel/ServiceManager/Services/Clamd.pm line 67
Cpanel::ServiceManager::Services::Clamd::restart(Cpanel::ServiceManager::Services::Clamd=HASH(0x2fd2838), "graceful", undef) called at /usr/local/cpanel/Cpanel/ServiceManager/Base.pm line 596
Cpanel::ServiceManager::Base::run_from_argv(Cpanel::ServiceManager::Services::Clamd=HASH(0x2fd2838), "--verbose", "--no-verbose") called at bin/restartsrv_base.pl line 144
scripts::restartsrv_base::__ANON__() called at /usr/local/cpanel/3rdparty/perl/532/lib/perl5/cpanel_lib/Try/Tiny.pm line 100
eval {...} called at /usr/local/cpanel/3rdparty/perl/532/lib/perl5/cpanel_lib/Try/Tiny.pm line 91
Try::Tiny::try(CODE(0x2fb67f0), Try::Tiny::Catch=REF(0xd9b9c8)) called at bin/restartsrv_base.pl line 188
scripts::restartsrv_base::run("--no-verbose") called at bin/restartsrv_base.pl line 80



And this command that I run daily - /usr/local/cpanel/3rdparty/bin/freshclam - which normally at least shows definition updates despite Any progress toward ClamAV 0.102.x ? , now produces this:


[~]# /usr/local/cpanel/3rdparty/bin/freshclam
/usr/local/cpanel/3rdparty/bin/freshclam: error while loading shared libraries: libpcre2-8.so.0: cannot open shared object file: No such file or directory


/scripts/restartsrv_clamd produces:


[~]# /scripts/restartsrv_clamd
Service “clamd” is already stopped.

Waiting for “clamd” to start ……warn [restartsrv_clamd] The system encountered an error while starting the “clamd” service with the command “/usr/local/cpanel/3rdparty/bin/clamd”: The subprocess reported error number 127 when it ended.
…failed.

Cpanel::Exception::Services::StartError
Service Status
undefined status from Cpanel::ServiceManager::Services::Clamd

Service Error
(XID eyfwrk) The “clamd” service failed to start.

Startup Log
/usr/local/cpanel/3rdparty/bin/clamd: error while loading shared libraries: libpcre2-8.so.0: cannot open shared object file: No such file or directory



My inbox is flooding with "The service “clamav” appears to be down" and "The service “clamd” appears to be down" notices.

I've tried restarting several services and also re-ran upcp , nothing works.

Anyone else encountering this?

Feels rather urgent and I could use some help please, thank you.

 

[Metro2]

Service Check Raw Output (XID r2t9wu) The “clamd” service is down.
The subprocess “/usr/local/cpanel/scripts/restartsrv_clamd” reported error number 255 when it ended.
Startup Log /usr/local/cpanel/3rdparty/bin/clamd: error while loading shared libraries: libpcre2-8.so.0: cannot open shared object file: No such file or directory

 

[Metro2]

@cPJeremy since I can see you're online right now, I'm hoping this might ping you and draw your attention to it. Can you possibly assist?

 

[Metro2]

I submitted a ticket and many thanks to cPanel support this is solved!

Just in case this helps anyone else:

As it turns out this was a known issue that was supposed to be resolved in a CloudLinux update last month, and here's the solution - ClamAV fails to start up on CloudLinux 6 due to missing PCRE2 library

 

[ankeshanand]

I didn't saw your Thread in "Whats New" and thats why Unable to respond. Glad that its sorted out!

 

[cPRex]

I'm glad we could help get that working!

 

[Metro2]

I'm glad we could help get that working!

Me too! Having ClamAV not working = CXS not working, and CXS is integral (for me anyway) as one it's major functions that I rely on is the way it blocks / quarantines the attempted uploads of malicious files and plays a major role in preventing exploits on PHP scripts such as WordPress etc... so it was a tense 2 hours. Thankfully a cPanel support analyst picked up my ticket quickly and knew the exact problem & solution!

 

[bharmsen1]

I tried the solution provided, and this was the result:

Loaded plugins: fastestmirror, security, universal-hooks

Error getting repository data for cloudlinux-rollout-1-bypass, repository not found

I'm on CLOUDLINUX 6.10 kvm [server] v98.0.5.

While I do manage my own VPS via a web host, I'm admittedly a person who usually needs to follow guides and search for solutions when encountering these sorts of bumps in the road. Any help would be greatly appreciated.

 

[cPRex]

@bharmsen1 - you can find additional details about the bypass repository system here:

https://cloudlinux.zendesk.com/hc/en-us/articles/360015510580-CloudLinux-Gradual-Rollout-System

For now, you may just want to disable that particular repository and then I would expect the update to complete normally.