Внедрение KESL на ВМ2 + замена CLAMAV на KESL

VM2_services/codebase/services/deployment/scripts/setup-vm.sh

@@ -603,6 +603,10 @@ install_release_helpers_if_possible() {
   install -m 0755 -o root -g root \
     "${deployment}/han-message-safety-mode" \
     /usr/local/sbin/han-message-safety-mode
+  install -d -m 0755 -o root -g root /usr/local/libexec
+  install -m 0750 -o root -g root \
+    "${deployment}/kesl/kesl_scan_broker.py" \
+    /usr/local/libexec/han-kesl-scan-broker
   install -d -m 0755 -o root -g root /etc/letsencrypt/renewal-hooks/deploy
   install -m 0755 -o root -g root \
     "${deployment}/scripts/ssl-renew-deploy-hook.sh" \
@@ -613,6 +617,16 @@ install_release_helpers_if_possible() {
   install -m 0644 -o root -g root \
     "${deployment}/han-processing.service" \
     /etc/systemd/system/han-processing.service
+  install -m 0644 -o root -g root \
+    "${deployment}/kesl/han-kesl-scan-broker.service" \
+    /etc/systemd/system/han-kesl-scan-broker.service
+  install -m 0644 -o root -g root \
+    "${deployment}/kesl/han-kesl-scan-broker.socket" \
+    /etc/systemd/system/han-kesl-scan-broker.socket
+  install -m 0644 -o root -g root \
+    "${deployment}/kesl/han-kesl-scan-broker.tmpfiles.conf" \
+    /etc/tmpfiles.d/han-kesl-scan-broker.conf
+  systemd-tmpfiles --create /etc/tmpfiles.d/han-kesl-scan-broker.conf
   safety_sudoers="$(mktemp)"
   sed 's/\r$//' "${deployment}/deploy-message-safety-mode.sudoers" >"$safety_sudoers"
   chmod 0440 "$safety_sudoers"