I’ve setup two days ago a Kali-linux from the weekly VirtualBox VM with issues.
I installed gvm easily from the repos.
used gvm-setup and gvm-check-setup, until all FIX notice where solved.
gvm-start went fine.
Feed started to update.
After 12 hours. I’ve check with greenbone-feed-sync for the feeds:
# greenbone-feed-sync --type all -v
Running as root. Switching to user ‘_gvm’ and group ‘_gvm’.
Trying to acquire lock on /var/lib/openvas/feed-update.lock
Acquired lock on /var/lib/openvas/feed-update.lock
⠴ Downloading Notus files from rsync://feed.community.greenbone.net/community/vulnerability-feed/24.10/vt-data/notus/ to /var/lib/notus
⠧ Downloading NASL files from rsync://feed.community.greenbone.net/community/vulnerability-feed/24.10/vt-data/nasl/ to /var/lib/openvas/plugins
Releasing lock on /var/lib/openvas/feed-update.lock
Trying to acquire lock on /var/lib/gvm/feed-update.lock
Acquired lock on /var/lib/gvm/feed-update.lock
⠦ Downloading SCAP data from rsync://feed.community.greenbone.net/community/vulnerability-feed/24.10/scap-data/ to /var/lib/gvm/scap-data
⠴ Downloading CERT-Bund data from rsync://feed.community.greenbone.net/community/vulnerability-feed/24.10/cert-data/ to /var/lib/gvm/cert-data
⠴ Downloading gvmd data from rsync://feed.community.greenbone.net/community/data-feed/24.10/ to /var/lib/gvm/data-objects/gvmd
Releasing lock on /var/lib/gvm/feed-update.lock
IN my interface, i noticed that there is absolutely no CVEs, and no CPEs. As if SCAP have not updated.
NVTs are OK, as are CERT, but GVM_DATA are empty.
I cannot start any scan or create target without the following error message:
The feed owner is currently not set. This issue may be due to the feed not having completed its synchronization.
Please try again shortly.
I’ve seen that there was some issues a few days ago in the forum, but everything seems normally setup now.
@Zargos You’ll just have to be patient. Once the feed download is complete, all feed data is processed and stored in the database, which can take anywhere from several hours to up to a day, depending on the server performance.
PS> sudo greenbone-feed-sync --type all -v
\[sudo\] password for zargos:
Running as root. Switching to user '\_gvm' and group '\_gvm'.
Trying to acquire lock on /var/lib/openvas/feed-update.lock
Acquired lock on /var/lib/openvas/feed-update.lock
⠴ Downloading Notus files from rsync://feed.community.greenbone.net/community/vulnerability-feed/24.10/vt-data/notus/ to /var/lib/notus
⠴ Downloading NASL files from rsync://feed.community.greenbone.net/community/vulnerability-feed/24.10/vt-data/nasl/ to /var/lib/openvas/plugins
Releasing lock on /var/lib/openvas/feed-update.lock
Trying to acquire lock on /var/lib/gvm/feed-update.lock
Acquired lock on /var/lib/gvm/feed-update.lock
⠹ Downloading SCAP data from rsync://feed.community.greenbone.net/community/vulnerability-feed/24.10/scap-data/ to /var/lib/gvm/scap-data
⠧ Downloading CERT-Bund data from rsync://feed.community.greenbone.net/community/vulnerability-feed/24.10/cert-data/ to /var/lib/gvm/cert-data
⠼ Downloading gvmd data from rsync://feed.community.greenbone.net/community/data-feed/24.10/ to /var/lib/gvm/data-objects/gvmd
Releasing lock on /var/lib/gvm/feed-update.lock
I’ve also found in gvm/openvas/notus some files/subdirectory not set to user _gvm group _gvm. I’ve set this correctly.
Since, CVEs and CPEs are showing in GUI. But after more than 12hours and a restart, the error message still shows itself.
But i’m still letting it running, event if feed status in GUI is set to current for all feeds.
@Zargos feed owner means that you need to set feed owner. this is mentioned in documentation. please follow it step by step. for newcomers, installation by packages is much wiser choice.
I think i’ll redo the whole process.
I’ve checked with gvmd –get-users and i got nothing.
I don’t even have the basic admin user.
I guess the packages installation went wrong. But i’ve made it as roo with su - instead of using sudo. Maybe there is some impact about this.
I just have to download the next weekly kali linux, u pdate and install gvm.
OK i ve done all again.
Preceeding install has not set the admin account correctly.
I can launch a scan task now.
That is good I’ve detected vulnerabilities in standard Kali Linux Virtual Box weekly virtual machine: CVE-2013-2566
CVE-2015-2808
CVE-2015-4000
But i don’t know how to get EPSS Score and percentile. BUt that another subject
corrupted. redownload iso and try again