Start antivirus scan from a script on Azure Linux VM - linux

Question

I have a shell script inside Azure Linux vm. The Azure Linux VM has Sophos installed in it.The shell script can scan the files present in a directory by using savscan command. Challenge is , we are using azure data factory pipeline, which needs to call the azure function. The azure function should be able to ssh to linux vm, and execute the script. The function should pass the parameters like file path for the azure shared file storage where Sophos needs to perform the scan.
I understand thepipeline can call the http triggered azure function. But how can we ssh into a vm and run the scripts remotely from the azure function. Also the parameters for the file path will come from data factory.
inotifywait -mr -e close_write "/xyz/abc/" |
while read dir eve file; do
echo "new file '$path$file' detected - start scan"
savscan -eec $path$file
if [ $? -eq 0 ]
then
echo "1"
else
echo "0"
fi
done

Answer 1

Seems there is something wrong with your ScriptPath param . If you are using Azure Automation, we can't place static script files in it , but we can download our script first and place it in "c:/temp" folder of Azure automation.
I did some tests on my side , I placed my scripts in Azure storage account , before I need to run this script, I will download it to Azure automation temp folder so that I can specify a path to run it .
Try the PS below in Automation:
$appid = "<your Azure application ID>"
$passwd = "<your Azure application password>"
$tenant = "<tenant>"
$storageName = "<storage name>"
$containerName = "<container name>"
$scrtptName = "<script name>"
$storageResourceGroupName = "<storage group name>"
$vmName = "<vm name>"
$VMResourceGroupName = "<vm group name>"
$secpasswd = ConvertTo-SecureString -String $passwd -AsPlainText -Force
$cred = New-Object Management.Automation.PSCredential ($appid , $secpasswd)
login-AzAccount -Credential $cred -Tenant $tenant -ServicePrincipal
$storage = Get-AzStorageAccount -ResourceGroupName $storageResourceGroupName -Name $storageName
Get-AzStorageBlobContent -Container $containerName -Blob $scrtptName -Context $storage.Context -Destination "c:/temp"
$scriptPath = "c:/temp/$scrtptName"
$result = Invoke-AzVMRunCommand -VMname $vmName -ResourceGroupName $VMResourceGroupName -CommandId 'RunPowerShellScript' -ScriptPath $scriptPath
echo $result.Value
Remove-Item $scriptPath -Force
Modules I imported :
I place my script in my storage account, in this case , it is used for download something :
My test script content :
$url = "https://download.microsoft.com/download/1/E/7/1E7B1181-3974-4B29-9A47-CC857B271AA2/English/X64/msodbcsql.msi"
$outpath = "c:/odbc.msi"
Invoke-WebRequest -Uri $url -OutFile $outpath
Test on Azure automation and its result :
As you can see the file has been download successfully .
Btw, there is no need to use remote powershell here , you can use run command feature of Azure VMs to run your scripts on Azure VMs directly .

Answer 2

Nice work Stanley, I will test it too on an Ubuntu Machine. Hope it works :)