August 17, 2020, 7:51am
I installed OpenVAS 20.8 from source on Debian Buster.
It starts but it seems that parts of the configuration are missing.
There are no port lists preconfigured
no scan lists
When I try to add a task, I get the message:
»Failed to find config ‘daba56c8-73ec-11df-a475-002264764cea’«
What have I done wrong? Is this normal?
gvm-libs: 20.8.0 Environment
Operating system: Debian Buster
Kernel: Linux … 4.19.0-10-amd64 #1 SMP Debian 4.19.132-1 (2020-07-24) x86_64 GNU/Linux
Installation method / source: source
August 17, 2020, 7:53am
First of all it is
NOT OpenVAS anymore. See Frequently Asked Questions (FAQ)
You need to sync the nvts (call greenbone-nvt-sync and connect gvmd with a ospd-openvas scanner) before the scan configs will be available. I think I should update the release notes to make that more obvious.
August 17, 2020, 8:00am
In addition the “Feed Import Owner” needs to be configured / set, see:
This file has been truncated.
# INSTALLATION INSTRUCTIONS FOR GREENBONE VULNERABILITY MANAGER
Please note: The reference system used by most of the developers is Debian
GNU/Linux 'Buster' 10. The build might fail on any other system. Also, it is
necessary to install dependent development packages.
## Prerequisites for Greenbone Vulnerability Manager
* GCC (Debian package: gcc)
* cmake >= 3.0 (Debian package: cmake)
* glib-2.0 >= 2.42 (Debian package: libglib2.0-dev)
* gnutls >= 3.2.15 (Debian package: libgnutls28-dev)
* libgvm_base, libgvm_util, libgvm_osp, libgvm_gmp >= 20.08.0 ([gvm-libs](https://github.com/greenbone/gvm-libs/tree/gvm-libs-20.08) component)
* PostgreSQL database >= 9.6 (Debian packages: libpq-dev postgresql-server-dev-11)
* pkg-config (Debian package: pkg-config)
* libical >= 1.0.0 (Debian package: libical-dev)
Install these prerequisites on Debian GNU/Linux 'Buster' 10:
Greenbone Vulnerability Management version 20.08 (GVM-20.08) is the current stable major release.
This is the first release that uses a calendar based versioning (August of 2020) and uses the same version for all main components. This will make it easier to identify which component version belongs to which release.
With the end of 2020 both
GVM 10 and GVM 11 will retire and won’t get any additional releases. All users and distributions should switch to GVM 20.08 immediately.
GVM is developed …
Without such an owner and without a previous
greenbone-feed-sync --type GVM_DATA sync no scan configs, port lists and report formats will show up.
August 17, 2020, 9:09am
Thank you very much for your fast replies!
I now updated the Feed Import Owner
su -c “gvmd --modify-setting 78eceaec-3385-11ea-b237-28d24461215b --value a761c12e-9297-4383-904e-4984e009483b” gvm
rerun feed sync
su -c “greenbone-nvt-sync” openvas-sync
su -c “gvmd --modify-scanner=08b69003-5fc2-4037-a479-93b440211c73 --scanner-host=/tmp/ospd.sock” gvm
su -c “gvmd --osp-vt-update=/tmp/ospd.sock” gvm
But I found error messages in the log:
md manage:WARNING:2020-08-17 08h39.08 utc:8741: check_db_configs: Failed to sync configs with feed
md manage:WARNING:2020-08-17 08h39.08 utc:8741: sync_configs_with_feed: Failed to open directory ‘/usr/local/var/lib/gvm/data-objects/gvmd/20.08/configs’: Error opening directory “/usr/local/var/lib/gvm/data-obj
ects/gvmd/20.08/configs”: No such file or directory
md manage:WARNING:2020-08-17 08h39.08 utc:8741: sync_port_lists_with_feed: Failed to open directory ‘/usr/local/var/lib/gvm/data-objects/gvmd/20.08/port_lists’: Error opening directory “/usr/local/var/lib/gvm/da
ta-objects/gvmd/20.08/port_lists”: No such file or directory
md manage:WARNING:2020-08-17 08h39.08 utc:8741: sync_report_formats_with_feed: Failed to open directory ‘/usr/local/var/lib/gvm/data-objects/gvmd/20.08/report_formats’: Error opening directory “/usr/local/var/li
b/gvm/data-objects/gvmd/20.08/report_formats”: No such file or directory
su -c “greenbone-feed-sync --type GVMD_DATA” openvas-sync
@ERROR: Unknown module ‘data-objects’
rsync error: error starting client-server protocol (code 5) at main.c(1675) [Receiver=3.1.3]
Because the missing files are all located in data-objects I hope to very close
August 17, 2020, 7:47pm
Does this directories exists ? Are the permissions right for your GVM user ?
Simple OS skills are needed here
Most errors can be solved by reading and understanding the error message
August 18, 2020, 7:20am
I absolutely agree
I missed to mention that in my last post. The files do not exist and I thought they should be synced by
greenbone-feed-sync --type GVMD_DATA
but I get the error message
@ERROR: Unknown module ‘data-objects’
Do you have an idea what could be wrong here?
August 18, 2020, 7:26am
If I understand that statement correctly it is running as an openvas-sync user. In that case I guess
greenbone-feed-sync can create the
/usr/local/var/lib/gvm/data-objects/gvmd/20.08/port_lists directory due to missing write permissions for
August 18, 2020, 7:36am
When I started the script for the first time it created the file
/usr/local/var/lib/gvm/data-objects/gvmd/feed.xml. I hope the file permissions are set correctly.
When I run
rsync rsync://feed.community.greenbone.net:/data-objects/gvmd/ test/
as root, I get the same error message.
August 18, 2020, 8:42am
Hmm from my side it seems to work, so it might be a network issue …
rsync -avrP rsync://feed.community.greenbone.net:/data-objects/gvmd/ .
Greenbone community feed server -
This service is hosted by Greenbone Networks - http://www.greenbone.net/
All transactions are logged.
If you have any questions, please use the Greenbone community portal.
See https://community.greenbone.net for details.
By using this service you agree to our terms and conditions.
Only one sync per time, otherwise the source ip will be temporarily blocked.
receiving incremental file list
4,474 100% 4.27MB/s 0:00:00 (xfr#1, to-chk=42/44)
833 100% 813.48kB/s 0:00:00 (xfr#2, to-chk=41/44)
13 100% 12.70kB/s 0:00:00 (xfr#3, to-chk=40/44)
808 100% 789.06kB/s 0:00:00 (xfr#4, to-chk=34/44)
47,855 100% 206.78kB/s 0:00:00 (xfr#5, to-chk=33/44)
866 100% 3.74kB/s 0:00:00 (xfr#6, to-chk=32/44)
1,772 100% 7.66kB/s 0:00:00 (xfr#7, to-chk=31/44)
1,746 100% 7.54kB/s 0:00:00 (xfr#8, to-chk=30/44)
14,947 100% 64.02kB/s 0:00:00 (xfr#9, to-chk=29/44)
5,202 100% 22.28kB/s 0:00:00 (xfr#10, to-chk=28/44)
125,125 100% 131.11kB/s 0:00:00 (xfr#11, to-chk=27/44)
32,768 13% 25.48kB/s 0:00:08 ^C
August 19, 2020, 5:16pm
Yes, the final step was a network issue. After the sync was successful OpenVAS worked!
Thank you very much!
August 20, 2020, 5:33am
I have to quote my self again.
The majority of people will call it
OpenVAS probably for a long time, because people don’t usually do well with name changes.