Questions about Greenbone Feed Update Process (Docker Compose Environment)

Dear Greenbone Support Team,

I am currently using Greenbone Community Edition deployed via Docker Compose, and I have several questions regarding the feed update process. I would appreciate your clarification on the following points:

1. Automatic Feed Updates

  • Does the feed update occur automatically in the Docker Compose environment?

  • If yes, what is the automatic update schedule? (e.g., daily, weekly)

  • What triggers the automatic update? (e.g., container restart, scheduled cron job)

  • Is there a specific configuration required to enable automatic updates?

2. Manual Feed Update Methods

  • How can I manually trigger a feed update in the Docker Compose environment?

  • What is the correct command or procedure to manually update the feeds?

  • Are there separate commands for different feed types (NVT, SCAP, CERT, GVMD_DATA)?

My Current Environment:

  • Deployment: Docker Compose (Greenbone Community Edition)

  • Version: GVM 25.1.1

  • Operating System: Ubuntu 24

I would greatly appreciate detailed guidance on these matters to ensure I am managing the feed updates correctly.

Thank you for your time and assistance.

Best regards,

Please find the Greenbone Community Documentation. More specifically the Docker Container Workflows, and the guidance for Performing a Feed Sync. :slight_smile:

2 Likes

Hi, as far as I know, GCE does not support automatic feed updates. However, you can manually update the feed by pulling the latest versions of gvmd, vulnerability-tests, and data-objects, then restarting the corresponding containers.
Another option is to use a dedicated container like greenbone-feed-sync to handle manual updates.

In my environment, I’ve created a script that pulls and restarts the relevant Docker containers, and executes the greenbone-feed-sync command. Here my script :

# Update feed via greenbone-feed-sync

docker exec greenbone-feed-sync greenbone-feed-sync

# Pull latest images

docker compose -f docker-compose.yml pull vulnerability-tests data-objects

# Restart containers

docker compose -f docker-compose.yml up -d vulnerability-tests data-objects

I’ve scheduled this script using crontab.
It might not be the most elegant or optimal solution for automating feed updates, but it works reliably for my setup.

You are missing the update of the scap-data, notus-data, dfn-cert-data, cert-bund-data and report-formats container images.

Just follow what’'s advised on Workflows - Greenbone Community Documentation as @rippledj already noted.

3 Likes

These feeds are no updated with grennbone-feed-sync ? Cause, with the combination of both, everything looks updated in my side, but I might be wrong and there is something I don’t see.

@_Lawyn all things are mention in the linked docs.

See Workflows - Greenbone Community Documentation

Please be aware that the manually synced data will be overridden if the data containers are (re-)started.

TLDR; Don’t mix using the feed data containers with doing a manual download via greenbone-feed-sync.

4 Likes